Information Security Technical Report最新文献_第2页

SmartK: Smart cards in operating systems at kernel level SmartK:内核级操作系统中的智能卡

Information Security Technical Report Pub Date : 2013-02-01 Epub Date: 2012-12-27 DOI: 10.1016/j.istr.2012.10.003

Luigi Catuogno, Roberto Gassirà, Michele Masullo, Ivan Visconti

{"title":"SmartK: Smart cards in operating systems at kernel level","authors":"Luigi Catuogno, Roberto Gassirà, Michele Masullo, Ivan Visconti","doi":"10.1016/j.istr.2012.10.003","DOIUrl":"10.1016/j.istr.2012.10.003","url":null,"abstract":"<div><p>A smart card is a tamper-resistant miniature computer that performs some basic computations on input a secret information. So far, smart cards have been widely used for securing many digital transactions (e.g., pay television, ATM machines).</p><p>We focus on the implementation of operating system security services leveraging on smart cards. This very challenging feature allows one to personalize some functionalities of the operating system by simply changing a smart card. Current solutions for integrating smart card features in operating system services require at least a partial execution of some of the operating system functionalities at “user level”. Unfortunately, system functionalities built on top of components lying at both kernel and user levels may negatively affect the overall system security, due to the introduction of multiple points of failure.</p><p>In this work, we present the design and implementation of SmartK: a framework that integrates features of smart cards uniquely in the Linux kernel. In order to validate our approach, we propose a host of enhancements to the Linux operating system built on top of SmartK: 1) in-kernel clients' authentication with Kerberos; 2) execution of trusted code; 3) key management in secure network filesystems.</p><p>In particular, we present an experimental Linux OS distribution (SalSA), which addresses the security issues related to downloading packages and to updating an operating system through the Internet.</p></div>","PeriodicalId":100669,"journal":{"name":"Information Security Technical Report","volume":"17 3","pages":"Pages 93-104"},"PeriodicalIF":0.0,"publicationDate":"2013-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1016/j.istr.2012.10.003","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126036304","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 9

A lightweight framework for secure life-logging in smart environments 在智能环境中安全记录生命的轻量级框架

Information Security Technical Report Pub Date : 2013-02-01 Epub Date: 2012-12-26 DOI: 10.1016/j.istr.2012.10.005

Nikolaos E. Petroulakis , Elias Z. Tragos , Alexandros G. Fragkiadakis , George Spanoudakis

{"title":"A lightweight framework for secure life-logging in smart environments","authors":"Nikolaos E. Petroulakis , Elias Z. Tragos , Alexandros G. Fragkiadakis , George Spanoudakis","doi":"10.1016/j.istr.2012.10.005","DOIUrl":"10.1016/j.istr.2012.10.005","url":null,"abstract":"<div><p>As the world becomes an interconnected network where objects and humans interact with each other, new challenges and threats appear in the ecosystem. In this interconnected world, smart objects have an important role in giving users the chance for life-logging in smart environments. However, smart devices have several limitations with regards to memory, resources and computation power, hindering the opportunity to apply well-established security algorithms and techniques for secure life-logging on the Internet of Things (IoT) domain. The need for secure and trustworthy life-logging in smart environments is vital, thus, a lightweight approach has to be considered to overcome the constraints of Smart Objects. The purpose of this paper is to present in details the current topics of life-logging in smart environments, while describing interconnection issues, security threats and suggesting a lightweight framework for ensuring security, privacy and trustworthy life-logging. In order to investigate the efficiency of the lightweight framework and the impact of the security attacks on energy consumption, an experimental test-bed was developed including two interconnected users and one smart attacker, who attempts to intercept transmitted messages or interfere with the communication link. Several mitigation factors, such as power control, channel assignment and AES-128 encryption were applied for secure life-logging. Finally, research into the degradation of the consumed energy regarding the described intrusions is presented.</p></div>","PeriodicalId":100669,"journal":{"name":"Information Security Technical Report","volume":"17 3","pages":"Pages 58-70"},"PeriodicalIF":0.0,"publicationDate":"2013-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1016/j.istr.2012.10.005","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115797179","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 29

Kynoid: Real-time enforcement of fine-grained, user-defined, and data-centric security policies for Android Kynoid:为Android实时执行细粒度、用户定义和以数据为中心的安全策略

Information Security Technical Report Pub Date : 2013-02-01 Epub Date: 2013-01-20 DOI: 10.1016/j.istr.2012.10.006

Daniel Schreckling, Johannes Köstler, Matthias Schaff

引用次数: 73

Secure computations on non-integer values with applications to privacy-preserving sequence analysis 非整数值的安全计算及其在保隐私序列分析中的应用

Information Security Technical Report Pub Date : 2013-02-01 Epub Date: 2012-12-13 DOI: 10.1016/j.istr.2012.10.001

M. Franz , B. Deiseroth , K. Hamacher , S. Jha , S. Katzenbeisser , H. Schröder

引用次数: 13

HiPoLDS: A Hierarchical Security Policy Language for Distributed Systems HiPoLDS:分布式系统的分层安全策略语言

Information Security Technical Report Pub Date : 2013-02-01 Epub Date: 2012-12-25 DOI: 10.1016/j.istr.2012.10.002

Matteo Dell'Amico , Gabriel Serme , Muhammad Sabir Idrees , Anderson Santana de Oliveira , Yves Roudier

引用次数: 28

Security and privacy for digital ecosystems 数字生态系统的安全和隐私

Information Security Technical Report Pub Date : 2013-02-01 Epub Date: 2013-02-27 DOI: 10.1016/j.istr.2013.02.001

Ioannis G. Askoxylakis, Mark Manulis, Joachim Posegga

引用次数: 0

Share with strangers: Privacy bubbles as user-centered privacy control for mobile content sharing applications 与陌生人分享:隐私气泡作为移动内容共享应用程序中以用户为中心的隐私控制

Information Security Technical Report Pub Date : 2013-02-01 Epub Date: 2013-01-10 DOI: 10.1016/j.istr.2012.10.004

Delphine Christin , Pablo Sánchez López , Andreas Reinhardt , Matthias Hollick , Michaela Kauer

{"title":"Share with strangers: Privacy bubbles as user-centered privacy control for mobile content sharing applications","authors":"Delphine Christin , Pablo Sánchez López , Andreas Reinhardt , Matthias Hollick , Michaela Kauer","doi":"10.1016/j.istr.2012.10.004","DOIUrl":"10.1016/j.istr.2012.10.004","url":null,"abstract":"<div><p>A continually increasing number of pictures and videos is shared in online social networks. Current sharing platforms, however, only offer limited options to define who has access to the content. Users may either share it with individuals or groups from their social graph, or make it available to the general public. Sharing content with users to which no social ties exist, even if they were physically close to the places where content was created and witnessed the same event, is however not supported by most existing platforms. We thus propose a novel approach to share content with such users based on so-called <em>privacy bubbles</em>. Privacy bubbles metaphorically represent the private sphere of the users and automatically confine the access to the content generated by the bubble creator to people within the bubble. Bubbles extend in both time and space, centered around the collection time and place, and their size can be adapted to the user's preferences. We confirm the user acceptance of our concept through a questionnaire-based study with 175 participants, and a prototype implementation shows the technical feasibility of our scheme.</p></div>","PeriodicalId":100669,"journal":{"name":"Information Security Technical Report","volume":"17 3","pages":"Pages 105-116"},"PeriodicalIF":0.0,"publicationDate":"2013-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1016/j.istr.2012.10.004","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133811439","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 20

Continuous keystroke dynamics: A different perspective towards biometric evaluation 连续击键动力学:对生物特征评估的不同视角

Information Security Technical Report Pub Date : 2012-02-01 Epub Date: 2012-03-23 DOI: 10.1016/j.istr.2012.02.001

Patrick Bours

引用次数: 149

Technology is not enough: Taking a holistic view for information assurance 光有技术是不够的:对信息保证采取全面的看法

Information Security Technical Report Pub Date : 2012-02-01 Epub Date: 2012-01-14 DOI: 10.1016/j.istr.2011.12.002

Guy Bunker

引用次数: 23

Practical application of information security models 信息安全模型的实际应用

Information Security Technical Report Pub Date : 2012-02-01 Epub Date: 2012-03-01 DOI: 10.1016/j.istr.2011.12.004

Vladimir Jirasek

引用次数: 19