Information Security Technical Report最新文献_第2页

Share with strangers: Privacy bubbles as user-centered privacy control for mobile content sharing applications 与陌生人分享:隐私气泡作为移动内容共享应用程序中以用户为中心的隐私控制

Information Security Technical Report Pub Date : 2013-02-01 DOI: 10.1016/j.istr.2012.10.004

Delphine Christin , Pablo Sánchez López , Andreas Reinhardt , Matthias Hollick , Michaela Kauer

{"title":"Share with strangers: Privacy bubbles as user-centered privacy control for mobile content sharing applications","authors":"Delphine Christin , Pablo Sánchez López , Andreas Reinhardt , Matthias Hollick , Michaela Kauer","doi":"10.1016/j.istr.2012.10.004","DOIUrl":"10.1016/j.istr.2012.10.004","url":null,"abstract":"<div><p>A continually increasing number of pictures and videos is shared in online social networks. Current sharing platforms, however, only offer limited options to define who has access to the content. Users may either share it with individuals or groups from their social graph, or make it available to the general public. Sharing content with users to which no social ties exist, even if they were physically close to the places where content was created and witnessed the same event, is however not supported by most existing platforms. We thus propose a novel approach to share content with such users based on so-called <em>privacy bubbles</em>. Privacy bubbles metaphorically represent the private sphere of the users and automatically confine the access to the content generated by the bubble creator to people within the bubble. Bubbles extend in both time and space, centered around the collection time and place, and their size can be adapted to the user's preferences. We confirm the user acceptance of our concept through a questionnaire-based study with 175 participants, and a prototype implementation shows the technical feasibility of our scheme.</p></div>","PeriodicalId":100669,"journal":{"name":"Information Security Technical Report","volume":"17 3","pages":"Pages 105-116"},"PeriodicalIF":0.0,"publicationDate":"2013-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1016/j.istr.2012.10.004","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133811439","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 20

Continuous keystroke dynamics: A different perspective towards biometric evaluation 连续击键动力学:对生物特征评估的不同视角

Information Security Technical Report Pub Date : 2012-02-01 DOI: 10.1016/j.istr.2012.02.001

Patrick Bours

引用次数: 149

Feature extraction from vein images using spatial information and chain codes 基于空间信息和链码的静脉图像特征提取

Information Security Technical Report Pub Date : 2012-02-01 DOI: 10.1016/j.istr.2012.02.003

Anika Pflug , Daniel Hartung , Christoph Busch

引用次数: 28

Corrigendum to “Social networking as a nexus for engagement and exploitation of young people” [Inform Secur Tech Rep 16 (2) (2011) 44–50] “社交网络作为参与和利用年轻人的纽带”的勘误表[信息安全技术代表16 (2)(2011)44-50]

Information Security Technical Report Pub Date : 2012-02-01 DOI: 10.1016/j.istr.2012.02.002

Ethel Quayle , Max Taylor

引用次数: 0

Economics and the cyber challenge 经济和网络挑战

Information Security Technical Report Pub Date : 2012-02-01 DOI: 10.1016/j.istr.2011.12.003

Simon Walker

{"title":"Economics and the cyber challenge","authors":"Simon Walker","doi":"10.1016/j.istr.2011.12.003","DOIUrl":"10.1016/j.istr.2011.12.003","url":null,"abstract":"<div><p>Economics can be used as a tool to explain, describe, and to a certain extent predict many forms of human behaviour. However, there is only a limited body of work on its application to information security, much of which is acknowledged as partial or incomplete. As a consequence, there is a paucity of robust explanatory or predictive models that are tuned for the peculiarities of the “cyber” challenge, either to organisations, or, at a higher level, the nation state.</p><p>The effect of this is that the base arguments for information security business cases are often weak or flawed; as a result, there is an argument that both organisations and nation states will therefore tend to underinvest in information security. To improve this position, there would be benefits for information security, as a profession adopting economic models used in other areas of endeavour that historically have suffered similar problems. One potential model is full-cost accounting.</p><p>However, there are a number of further implications. These include an underlining of the importance of information security professional “speaking business language”. Also highlighted is the potential value of building a common knowledge base of the true cost of security failures, akin to the actuarial bodies of knowledge used in the insurance industry, rather than the partial and imperfect measures in use today.</p></div>","PeriodicalId":100669,"journal":{"name":"Information Security Technical Report","volume":"17 1","pages":"Pages 9-18"},"PeriodicalIF":0.0,"publicationDate":"2012-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1016/j.istr.2011.12.003","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115786490","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 7

Integrated assessment and mitigation of physical and digital security threats: Case studies on virtualization 物理和数字安全威胁的综合评估和缓解:虚拟化案例研究

Information Security Technical Report Pub Date : 2011-08-01 DOI: 10.1016/j.istr.2011.08.003

André van Cleeff , Wolter Pieters , Roel Wieringa , Frits van Tiel

{"title":"Integrated assessment and mitigation of physical and digital security threats: Case studies on virtualization","authors":"André van Cleeff , Wolter Pieters , Roel Wieringa , Frits van Tiel","doi":"10.1016/j.istr.2011.08.003","DOIUrl":"10.1016/j.istr.2011.08.003","url":null,"abstract":"<div><p>Virtualization is one of the enabling technologies of cloud computing. It turns once dedicated physical computing resources such as servers into digital resources that can be provisioned on demand. Cloud computing thus tends to replace physical with digital security controls, and cloud security must be understood in this context. In spite of extensive research on new hardware-enabled solutions such as trusted platforms, not enough is known about the actual physical-digital security trade-off in practice. In this paper, we review what is currently known about security aspects of the physical-digital trade-off, and then report on three case studies of private clouds that use virtualization technology, with the purpose of identifying generalizable guidelines for security trade-off analysis. We identify the important security properties of physical and digital resources, analyze how these have been traded off against each other in these cases, and what the resulting security properties were, and we identify limits to virtualization from a security point of view. The case studies show that physical security mechanisms all work through inertness and visibility of physical objects, whereas digital security mechanisms require monitoring and auditing. We conclude with a set of guidelines for trading off physical and digital security risks and mitigations. Finally, we show how our findings can be used to combine physical and digital security in new ways to improve virtualization and therefore also cloud security.</p></div>","PeriodicalId":100669,"journal":{"name":"Information Security Technical Report","volume":"16 3","pages":"Pages 142-149"},"PeriodicalIF":0.0,"publicationDate":"2011-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1016/j.istr.2011.08.003","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121297363","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 8

Analysis of recommended cloud security controls to validate OpenPMF “policy as a service” 分析推荐的云安全控制以验证OpenPMF“策略即服务”

Information Security Technical Report Pub Date : 2011-08-01 DOI: 10.1016/j.istr.2011.08.001

Ulrich Lang , Rudolf Schreiner

引用次数: 11

Looking at clouds from both sides: The advantages and disadvantages of placing personal narratives in the cloud 从两个角度看云:将个人叙述放在云中的利弊

Information Security Technical Report Pub Date : 2011-08-01 DOI: 10.1016/j.istr.2011.09.001

Lizzie Coles-Kemp , Joseph Reddington , Patricia A.H. Williams

引用次数: 25

Internet cloud security: The illusion of inclusion 互联网云安全:包容的幻觉

Information Security Technical Report Pub Date : 2011-08-01 DOI: 10.1016/j.istr.2011.08.005

David Teneyuca

引用次数: 59

Commentary : Cloud computing – A security problem or solution? 评论:云计算——安全问题还是解决方案?

Information Security Technical Report Pub Date : 2011-08-01 DOI: 10.1016/j.istr.2011.08.004

P.G. Dorey , A. Leite

引用次数: 62