2008 The Fourth International Conference on Information Assurance and Security最新文献_第3页

A Composite Network Security Assessment 网络安全综合评估

2008 The Fourth International Conference on Information Assurance and Security Pub Date : 2008-09-08 DOI: 10.1109/IAS.2008.59

Suleyman Kondakci

引用次数: 11

Geolocation-Based Trust for Vanet's Privacy 基于地理位置的隐私信任

2008 The Fourth International Conference on Information Assurance and Security Pub Date : 2008-09-08 DOI: 10.1109/IAS.2008.21

Jetzabel M. Serna, Jesus Luna, Manuel Medina

引用次数: 42

A Model for the Study of Privacy Issues in Secure Shell Connections 一个研究安全外壳连接中隐私问题的模型

2008 The Fourth International Conference on Information Assurance and Security Pub Date : 2008-09-08 DOI: 10.1109/IAS.2008.46

M. Dusi, F. Gringoli, L. Salgarelli

{"title":"A Model for the Study of Privacy Issues in Secure Shell Connections","authors":"M. Dusi, F. Gringoli, L. Salgarelli","doi":"10.1109/IAS.2008.46","DOIUrl":"https://doi.org/10.1109/IAS.2008.46","url":null,"abstract":"The secure shell protocol strives to protect the privacy of its users in several ways. On one hand, the strong encryption and authentication algorithms that it adopts provide guarantees that the data exchanged between two SSH endpoints remain private to third parties. On the other hand, the type of traffic that each SSH channel transports, such as e-mail, remote shell activity, etc., is also supposed to be hidden from any observer that does not possess the necessary keys. This paper introduces a simple but accurate model of the SSH channel which can be used to study the level of privacy that SSH-protected traffic can achieve with respect to the users' activities. We think that the model can facilitate several types of projects. For example, network managers can detect traffic anomalies hidden by SSH connections more easily by relying on the output of our model. Another example, which we present in this paper, is the use of this model to derive accurate fingerprints of the type of applications run through an SSH channel by simply starting from the statistics of captured clear-text traffic. Such fingerprints can then be used to detect what type of activity, i.e., what type of traffic, is going on within an SSH channel, thereby breaking user privacy.","PeriodicalId":103328,"journal":{"name":"2008 The Fourth International Conference on Information Assurance and Security","volume":"18 4","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-09-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132756849","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4

Provenance Tracking with Bit Vectors 用位矢量跟踪来源

2008 The Fourth International Conference on Information Assurance and Security Pub Date : 2008-09-08 DOI: 10.1109/IAS.2008.47

Siddharta S. Gadang, B. Panda, J. Hoag

引用次数: 7

IRC Traffic Analysis for Botnet Detection 僵尸网络检测的IRC流量分析

2008 The Fourth International Conference on Information Assurance and Security Pub Date : 2008-09-08 DOI: 10.1109/IAS.2008.58

Claudio Mazzariello

引用次数: 50

Managing Reputation over MANETs 通过manet管理声誉

2008 The Fourth International Conference on Information Assurance and Security Pub Date : 2008-09-08 DOI: 10.1109/IAS.2008.24

G. Bella, Gianpiero Costantino, S. Riccobene

{"title":"Managing Reputation over MANETs","authors":"G. Bella, Gianpiero Costantino, S. Riccobene","doi":"10.1109/IAS.2008.24","DOIUrl":"https://doi.org/10.1109/IAS.2008.24","url":null,"abstract":"The use of small portables and mobile devices has made MANETs (mobile ad hoc networks) very popular. A MANET is a network composed by a group of mobile nodes without any fixed device or a central coordination. They work in an open net and their collaboration is the sole means to allow communications and the survival of the MANET itself. A critical issue is to assess the behaviour of the nodes that participate in the network, possibly identifying selfish conduct that can compromise the functioning of the system. This paper shows a method to evaluate the behaviour of all nodes by establishing a reputation value that represents the trustworthiness of each node. A protocol is presented to calculate the reputation of a node by locally observing the node from another one, and then tuning this intermediate value with additional observations from other participants. When the reputation value of a node is available, it is circulated and distributed uniformly over the network. This reputation protocol is viable. Each node can efficiently calculate the reputation values of its neighbours and then of all network nodes. A variety of simulations conducted using the network simulator NS-2 strongly support these claims.","PeriodicalId":103328,"journal":{"name":"2008 The Fourth International Conference on Information Assurance and Security","volume":"80 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-09-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125147215","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 22

Challenges for Security Typed Web Scripting Languages Design 安全类型Web脚本语言设计的挑战

2008 The Fourth International Conference on Information Assurance and Security Pub Date : 2008-09-08 DOI: 10.1109/IAS.2008.33

D. Hassan, S. El-Kassas, I. Ziedan

引用次数: 0

A Device Management Framework for Secure Ubiquitous Service Delivery 安全泛在服务交付的设备管理框架

2008 The Fourth International Conference on Information Assurance and Security Pub Date : 2008-09-08 DOI: 10.1109/IAS.2008.28

Adrian Leung, C. Mitchell

引用次数: 7

Efficient Hierarchical Group-Oriented Key Establishment and Decryption 高效分层面向组的密钥建立与解密

2008 The Fourth International Conference on Information Assurance and Security Pub Date : 2008-09-08 DOI: 10.1109/IAS.2008.51

Sigurd Eskeland, V. Oleshchuk

{"title":"Efficient Hierarchical Group-Oriented Key Establishment and Decryption","authors":"Sigurd Eskeland, V. Oleshchuk","doi":"10.1109/IAS.2008.51","DOIUrl":"https://doi.org/10.1109/IAS.2008.51","url":null,"abstract":"In this paper, we present three related and efficient cryptographic schemes for secure communication for hierarchically composed user groups. In such a group, each user is associated with a hierarchical level, so that the group members are divided into two or more hierarchical security classes. Most existing hierarchical cryptographic schemes provide hierarchical deduction of hierarchically arranged predefined keys. In contrast, the first scheme provides secure establishment of hierarchically ordered session keys. Since it prohibits long-term key deduction for underlying (and overlying) classes, such keys do not need to be updated session-wise. An essential security property is that the users can only obtain hierarchical session keys for their own and underlying levels, while it is prevented that a user can obtain hierarchical session keys of overlying levels.This scheme is extended to a hierarchical public key cryptosystem based on the ElGamal cryptosystem, and furthermore to an ElGamal-based threshold decryption scheme. Due to the threshold security requirement, at least t arbitrary group members are required to carry out decryption. The threshold scheme requires only one round of broadcasting in the decryption phase, and is thuswell-suitable for wireless networks.","PeriodicalId":103328,"journal":{"name":"2008 The Fourth International Conference on Information Assurance and Security","volume":" 21","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-09-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131893734","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Steganography in Textiles 纺织品中的隐写术

2008 The Fourth International Conference on Information Assurance and Security Pub Date : 2008-09-08 DOI: 10.1109/IAS.2008.11

S. Shirali-Shahreza, M. Shirali-Shahreza

引用次数: 3