Proceedings of the 18th International Conference on Availability, Reliability and Security最新文献_第5页

Cheaper than you thought? A dive into the darkweb market of cyber-crime products 比你想象的便宜?潜入网络犯罪产品的暗网市场

Proceedings of the 18th International Conference on Availability, Reliability and Security Pub Date : 2023-08-29 DOI: 10.1145/3600160.3605012

Dimitrios Georgoulias, Ricardo Yaben, Emmanouil Vasilomanolakis

引用次数: 0

Obfuscated Mobile Malware Detection by Means of Dynamic Analysis and Explainable Deep Learning 基于动态分析和可解释深度学习的模糊移动恶意软件检测

Proceedings of the 18th International Conference on Availability, Reliability and Security Pub Date : 2023-08-29 DOI: 10.1145/3600160.3605037

F. Mercaldo, Giovanni Ciaramella, A. Santone, Fabio Martinelli

{"title":"Obfuscated Mobile Malware Detection by Means of Dynamic Analysis and Explainable Deep Learning","authors":"F. Mercaldo, Giovanni Ciaramella, A. Santone, Fabio Martinelli","doi":"10.1145/3600160.3605037","DOIUrl":"https://doi.org/10.1145/3600160.3605037","url":null,"abstract":"With the growth of the mobile market, malicious applications represent a risk to the security of the users. To mitigate this aspect, researchers proposed different techniques to spot and identify unsafe software placed on the market. On the other hand, malicious writers started to develop ever more sophisticated strategies to hide malicious payloads, in particular through the adoption of obfuscation techniques. The latter consists of hiding the behavior and purpose of malware from antimalware. In this paper, we propose and design a method aimed to detect obfuscated malware. The proposed method builds images directly from system call traces obtained from legitimate, malicious, and obfuscated Android applications. In addition, to show that dynamic analysis and deep learning can build resilient models we propose two experiments using a convolutional neural network. In the first experiment, we train and test the model using a dataset composed of malware, while in the second we train the model using the malware dataset but the model is evaluated using a dataset composed of obfuscated malware. Finally, we analyze the malware and obfuscated detection models from the point of view of explainability using two different class activation mapping algorithms, to understand whether the model predictions can be considered resilient.","PeriodicalId":107145,"journal":{"name":"Proceedings of the 18th International Conference on Availability, Reliability and Security","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2023-08-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122894941","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Mitigate Data Poisoning Attack by Partially Federated Learning 利用部分联邦学习缓解数据中毒攻击

Proceedings of the 18th International Conference on Availability, Reliability and Security Pub Date : 2023-08-29 DOI: 10.1145/3600160.3605032

Khanh-Huu-The Dam, Axel Legay

引用次数: 0

Mitigating undesired interactions between liveness detection components in biometric authentication 减轻生物识别认证中活性检测组件之间不希望的交互

Proceedings of the 18th International Conference on Availability, Reliability and Security Pub Date : 2023-08-29 DOI: 10.1145/3600160.3604992

Emma Lavens, D. Preuveneers, W. Joosen

{"title":"Mitigating undesired interactions between liveness detection components in biometric authentication","authors":"Emma Lavens, D. Preuveneers, W. Joosen","doi":"10.1145/3600160.3604992","DOIUrl":"https://doi.org/10.1145/3600160.3604992","url":null,"abstract":"Biometric authentication has made great strides throughout the years thanks to better hardware and software support. However, attackers are unrelenting in finding new ways to spoof a subject, hereby breaking existing presentation attack detection schemes. Similar to combining multiple authentication factors, a combination of liveness detection defenses is expected to strengthen security against spoofing attacks. The problem that we address is that many defenses have only been evaluated in isolation or in ideal circumstances. In this work, we demonstrate how different liveness components for face authentication can interfere with one another, thereby jeopardizing security. Furthermore, contextual and environmental influences can endanger their robustness. In this work, we propose a security framework for biometric authentication that supports adaptive liveness detection by reasoning upon undesired interactions between defenses, the impact of new attacks, and the context in which they emerge. We validate the flexibility of our framework to account for both historic and novel interplays between attacks and defenses. Our experiments show that our framework effectively accounts for undesired interactions while only incurring a limited and acceptable performance overhead.","PeriodicalId":107145,"journal":{"name":"Proceedings of the 18th International Conference on Availability, Reliability and Security","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2023-08-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115752595","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Towards the Definition of Cognitive Warfare and Related Countermeasures: A Systematic Review 认知战的定义与对策:系统述评

Proceedings of the 18th International Conference on Availability, Reliability and Security Pub Date : 2023-08-29 DOI: 10.1145/3600160.3605080

Frida Muñoz Plaza, Marco Antonio Sotelo Monge, Hector Gonzalez Ordi

{"title":"Towards the Definition of Cognitive Warfare and Related Countermeasures: A Systematic Review","authors":"Frida Muñoz Plaza, Marco Antonio Sotelo Monge, Hector Gonzalez Ordi","doi":"10.1145/3600160.3605080","DOIUrl":"https://doi.org/10.1145/3600160.3605080","url":null,"abstract":"Psychological warfare and hybrid threats are currently one of the greatest risks to the stability of democratic systems, as well as are used to exploit the psychological vulnerability of individuals. Together with the use of disinformation and technologies, cognitive biases of individuals in a population are susceptible to being exploited and manipulated by an external actor in order to alter their behaviour, beliefs and decision-making to achieve their strategic goals. As pointed by NATO, the human mind becomes the battlefield in cognitive warfare, targeting not only individuals but also group behaviours in favor of an adversary’s objectives. The aim of this research is therefore the revision of cognitive warfare and hybrid threats definitions to draw a set of countermeasures intended to mitigate their effects. Even when cognitive warfare has been widely covered by the different miliary doctrines since early times, its implications in modern warfare scenarios are constantly evolving so that requiring a context-aware analysis as the main driver to underpin possible countermeasures from the governmental and political perspectives, as presented in this work. The analysis explores the cognitive impact and scope of psychological warfare on a national scale, as well as at the individual level within a context of proliferating disinformation, technologies, and manipulation.","PeriodicalId":107145,"journal":{"name":"Proceedings of the 18th International Conference on Availability, Reliability and Security","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2023-08-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116074713","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Risk Assessments in Virtual Power Plants with NESCOR Criteria, Practical Application, Advantages and Disadvantages 基于NESCOR标准的虚拟电厂风险评估，实际应用，优缺点

Proceedings of the 18th International Conference on Availability, Reliability and Security Pub Date : 2023-08-29 DOI: 10.1145/3600160.3605179

Georgios Gkoktsis, Hagen Lauer, Lukas Jaeger

引用次数: 0

Easier in Reverse: Simplifying URL Reading for Phishing URLs via Reverse Domain Name Notation 反向更容易:通过反向域名表记简化网络钓鱼URL的URL阅读

Proceedings of the 18th International Conference on Availability, Reliability and Security Pub Date : 2023-08-29 DOI: 10.1145/3600160.3604989

Vincent Drury, Jakob Drees, Ulrike Meyer

{"title":"Easier in Reverse: Simplifying URL Reading for Phishing URLs via Reverse Domain Name Notation","authors":"Vincent Drury, Jakob Drees, Ulrike Meyer","doi":"10.1145/3600160.3604989","DOIUrl":"https://doi.org/10.1145/3600160.3604989","url":null,"abstract":"Phishing attacks are a persistent problem to users and organizations world-wide, resulting in monetary loss and providing a first step in more complex attacks. To improve the anti-phishing defensive efforts, this paper offers two main contributions: First, we present a novel categorization of phishing URLs with the goal of capturing the URL reading capabilities of untrained users and evaluate it in a user study. We find, that phishing URLs which are similar to the target URL when read from the left were the most complicated to classify in our study. Second, based on these results, we evaluate Reverse Domain Name (RDN) notation as an alternative URL notation where attacker-controlled information no longer makes up the left-most part of the URL. We evaluate the effect of using RDN notation in a second user study, and show that accuracies indeed improved for the relevant URL categories, and that users were significantly faster in their decisions compared to normal URL notation. Our results extend previous work aiming to understand users’ URL reading, provide recommendations when designing user studies including URL classification tests, and motivate further research into the potential advantages of RDN notation in practice.","PeriodicalId":107145,"journal":{"name":"Proceedings of the 18th International Conference on Availability, Reliability and Security","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2023-08-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127378214","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Real-world actor-based image steganalysis via classifier inconsistency detection 现实世界中基于角色的图像隐写分析，通过分类器不一致检测

Proceedings of the 18th International Conference on Availability, Reliability and Security Pub Date : 2023-08-29 DOI: 10.1145/3600160.3605042

Daniel Lerch-Hostalot, D. Megías

引用次数: 1

Exploring Federated Learning for Speech-based Parkinson’s Disease Detection 探索基于语音的帕金森病检测的联邦学习

Proceedings of the 18th International Conference on Availability, Reliability and Security Pub Date : 2023-08-29 DOI: 10.1145/3600160.3605088

Athanasios Sarlas, Alexandros Kalafatelis, Georgios Alexandridis, M. Kourtis, P. Trakadas

{"title":"Exploring Federated Learning for Speech-based Parkinson’s Disease Detection","authors":"Athanasios Sarlas, Alexandros Kalafatelis, Georgios Alexandridis, M. Kourtis, P. Trakadas","doi":"10.1145/3600160.3605088","DOIUrl":"https://doi.org/10.1145/3600160.3605088","url":null,"abstract":"Parkinson’s Disease is the second most prevalent neurodegenerative disorder, currently affecting as high as 3% of the global population. Research suggests that up to 80% of patients manifest phonatory symptoms as early signs of the disease. In this respect, various systems have been developed that identify high risk patients by analyzing their speech using recordings obtained from natural dialogues and reading tasks conducted in clinical settings. However, most of them are centralized models, where training and inference take place on a single machine, raising concerns about data privacy and scalability. To address these issues, the current study migrates an existing, state-of-the-art centralized approach to the concept of federated learning, where the model is trained in multiple independent sessions on different machines, each with its own dataset. Therefore, the main objective is to establish a proof of concept for federated learning in this domain, demonstrating its effectiveness and viability. Moreover, the study aims to overcome challenges associated with centralized machine learning models while promoting collaborative and privacy-preserving model training.","PeriodicalId":107145,"journal":{"name":"Proceedings of the 18th International Conference on Availability, Reliability and Security","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2023-08-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122030393","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Trust Scheme Interoperability: Connecting Heterogeneous Trust Schemes 信任方案互操作性:连接异构信任方案

Proceedings of the 18th International Conference on Availability, Reliability and Security Pub Date : 2023-08-29 DOI: 10.1145/3600160.3605046

Stefan More

引用次数: 0