2016 IEEE International Conference on Software Science, Technology and Engineering (SWSTE)最新文献

An Improved MapReduce Algorithm for Mining Closed Frequent Itemsets 一种改进的MapReduce封闭频繁项集挖掘算法

2016 IEEE International Conference on Software Science, Technology and Engineering (SWSTE) Pub Date : 2016-06-23 DOI: 10.1109/SWSTE.2016.19

Yaron Gonen, E. Gudes

引用次数: 4

A Software Framework for PCa-Based Face Recognition 基于pca的人脸识别软件框架

2016 IEEE International Conference on Software Science, Technology and Engineering (SWSTE) Pub Date : 2016-06-23 DOI: 10.1109/SWSTE.2016.11

Peng Peng, P. Alencar, D. Cowan

引用次数: 2

MaPE-K-Based Approach for Security @ Runtime 基于mape的运行时安全方法

2016 IEEE International Conference on Software Science, Technology and Engineering (SWSTE) Pub Date : 2016-06-23 DOI: 10.1109/SWSTE.2016.28

Mohamed Amoud, O. Roudiès

{"title":"MaPE-K-Based Approach for Security @ Runtime","authors":"Mohamed Amoud, O. Roudiès","doi":"10.1109/SWSTE.2016.28","DOIUrl":"https://doi.org/10.1109/SWSTE.2016.28","url":null,"abstract":"Dynamic systems cause challenges for security because it is impossible to anticipate all the possible changes at design-time. Adaptive security is an applicable solution for this challenge. It is able to automatically select security mechanisms and their parameters at runtime in order to preserve the required security level in a changing environment. In this paper we describe an approach detailing key steps and activities to create an adaptive security solution. The architecture conforms to the MAPE-K reference model, which is a widely applied reference model in autonomic computing. Steps include: Establishing a control point to force control of the security decision process from the existing system. Identifying an environment parameter with which the security will trade off. Studying the interrelationship between security and the environment parameter in the existing system context by identifying measurable factors which influence their relationship. Formulation of a trade-off goal which is optimised based on multiple objectives, one of which is a security objective. Consequently, the proposed approach is capable of deploying mechanisms adaptive security to satisfy different security needs at different conditions.","PeriodicalId":118525,"journal":{"name":"2016 IEEE International Conference on Software Science, Technology and Engineering (SWSTE)","volume":"11 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-06-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116939179","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

Study the Past If You Would Define the Future: Implementing Secure Multi-party SDN Updates 如果你想定义未来，研究过去:实现安全的多方SDN更新

2016 IEEE International Conference on Software Science, Technology and Engineering (SWSTE) Pub Date : 2016-06-23 DOI: 10.1109/SWSTE.2016.24

Liron Schiff, S. Schmid

{"title":"Study the Past If You Would Define the Future: Implementing Secure Multi-party SDN Updates","authors":"Liron Schiff, S. Schmid","doi":"10.1109/SWSTE.2016.24","DOIUrl":"https://doi.org/10.1109/SWSTE.2016.24","url":null,"abstract":"A highly available and robust control plane is a critical prerequisite for any Software-Defined Network (SDN) providing dependability guarantees. While there is a wide consensus that the logically centralized SDN controller should be physically distributed, today, we do not have a good understanding of how to design such a distributed and robust control plane. This is problematic, given the potentially large influence an SDN controller has on the network state compared to the distributed legacy protocols: the control plane can be an attractive target for a malicious attack. This paper initiates the study of distributed SDN control planes which are resilient to malicious controllers, for example controllers which have been compromised by a cyber attack. We introduce an adversarial control plane model and observe that approaches based on redundancy or threshold cryptography are insufficient, as incomplete or out-dated information about the network state introduces vulnerabilities. The approach presented in this paper is based on the insight that a control plane resilient to malicious behavior requires a basic notion of memory, and must be history-aware. In particular, we propose an in band approach, implemented on the SDN switch, to efficiently coordinate the different controller actions, and guarantee correct network updates even in the presence of malicious behavior. In our approach, the switch maintains a digest of the controller state and history, and only implements the update after verifying that a majority of controllers agree to the change. Our solution is not only robust but also, compared to existing consensus protocols such as Paxos, light-weight.","PeriodicalId":118525,"journal":{"name":"2016 IEEE International Conference on Software Science, Technology and Engineering (SWSTE)","volume":"34 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-06-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129516420","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4

Lessons and Experiences from the Design, Implementation, and Deployment of a Wildlife Tracking System 野生动物追踪系统设计、实施和部署的经验教训

2016 IEEE International Conference on Software Science, Technology and Engineering (SWSTE) Pub Date : 2016-06-23 DOI: 10.1109/SWSTE.2016.16

Sivan Toledo, Oren Kishon, Yotam Orchan, Adi Shohat, Ran Nathan

引用次数: 23

Identifying Attack Propagation Patterns in Honeypots Using Markov Chains Modeling and Complex Networks Analysis 基于马尔可夫链建模和复杂网络分析的蜜罐攻击传播模式识别

2016 IEEE International Conference on Software Science, Technology and Engineering (SWSTE) Pub Date : 2016-06-23 DOI: 10.1109/SWSTE.2016.13

Ariel Bar, Bracha Shapira, L. Rokach, Moshe Unger

{"title":"Identifying Attack Propagation Patterns in Honeypots Using Markov Chains Modeling and Complex Networks Analysis","authors":"Ariel Bar, Bracha Shapira, L. Rokach, Moshe Unger","doi":"10.1109/SWSTE.2016.13","DOIUrl":"https://doi.org/10.1109/SWSTE.2016.13","url":null,"abstract":"Honey pots are computer resources that are used to detect and deflect network attacks on a protected system. The data collected from honey pots can be utilized to better understand cyber-attacks and provide insights for improving security measures, such as intrusion detection systems. In recent years, attackers' sophistication has increased significantly, thus additional and more advanced analytical models are required. In this paper we suggest several unique methods for detecting attack propagation patterns using Markov Chains modeling and complex networks analysis. These methods can be applied on attack datasets collected from honey pots. The results of these models shed light on different attack profiles and interaction patterns between the deployed sensors in the honey pot system. We evaluate the suggested methods on a massive data set which includes over 167 million observed attacks on a globally distributed honey pot system. Analyzing the results reveals interesting patterns regarding attack correlations between the honey pots. We identify central honey pots which enable the propagation of attacks, and present how attack profiles may vary according to the attacking country. These patterns can be used to better understand existing or evolving attacks, and may aid security experts to better deploy honey pots in their system.","PeriodicalId":118525,"journal":{"name":"2016 IEEE International Conference on Software Science, Technology and Engineering (SWSTE)","volume":"45 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-06-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128321372","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 32

Thinking Fast: Patterns of Cognitive Error in Software Engineering Education and Practice 快速思考:软件工程教育与实践中的认知错误模式

2016 IEEE International Conference on Software Science, Technology and Engineering (SWSTE) Pub Date : 2016-06-23 DOI: 10.1109/SWSTE.2016.15

R. Gallant

引用次数: 2

Semantic-Security Capacity for the Physical Layer via Information Theory 基于信息论的物理层语义安全能力

2016 IEEE International Conference on Software Science, Technology and Engineering (SWSTE) Pub Date : 2016-06-23 DOI: 10.1109/SWSTE.2016.12

Ziv Goldfeld, P. Cuff, H. Permuter

{"title":"Semantic-Security Capacity for the Physical Layer via Information Theory","authors":"Ziv Goldfeld, P. Cuff, H. Permuter","doi":"10.1109/SWSTE.2016.12","DOIUrl":"https://doi.org/10.1109/SWSTE.2016.12","url":null,"abstract":"Physical layer security can ensure secure communication over noisy channels in the presence of an eavesdropper with unlimited computational power. We adopt an information theoretic variant of semantic-security (SS) (a cryptographic gold standard), as our secrecy metric and study the open problem of the type II wiretap channel (WTC II) with a noisy main channel is, whose secrecy-capacity is unknown even under looser metrics than SS. Herein the secrecy-capacity is derived and shown to be equal to its SS capacity. In this setting, the legitimate users communicate via a discrete-memory less (DM) channel in the presence of an eavesdropper that has perfect access to a subset of its choosing of the transmitted symbols, constrained to a fixed fraction of the block length. The secrecy criterion is achieved simultaneously for all possible eavesdropper subset choices. On top of that, SS requires negligible mutual information between the message and the eavesdropper's observations even when maximized over all message distributions. A key tool for the achievability proof is a novel and stronger version of Wyner's soft covering lemma. Specifically, the lemma shows that a random codebook achieves the soft-covering phenomenon with high probability. The probability of failure is doubly-exponentially small in the block length. Since the combined number of messages and subsets grows only exponentially with the block length, SS for the WTC II is established by using the union bound and invoking the stronger soft-covering lemma. The direct proof shows that rates up to the weak-secrecy capacity of the classic WTC with a DM erasure channel (EC) to the eavesdropper are achievable. The converse follows by establishing the capacity of this DM wiretap EC as an upper bound for the WTC II. From a broader perspective, the stronger soft-covering lemma constitutes a tool for showing the existence of codebooks that satisfy exponentially many constraints, a beneficial ability for many other applications in information theoretic security.","PeriodicalId":118525,"journal":{"name":"2016 IEEE International Conference on Software Science, Technology and Engineering (SWSTE)","volume":"4 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-06-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116917327","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

The Problem of the Lack of Benefit of a Document to Its Producer (PotLoBoaDtiP) 文件生产者利益缺失的问题(PotLoBoaDtiP)

2016 IEEE International Conference on Software Science, Technology and Engineering (SWSTE) Pub Date : 2016-06-23 DOI: 10.1109/SWSTE.2016.14

D. Berry, K. Czarnecki, M. Antkiewicz, Mohamed AbdelRazik

引用次数: 6

Towards Automated Measurements of Internet's Naming Infrastructure 迈向互联网命名基础设施的自动化测量

2016 IEEE International Conference on Software Science, Technology and Engineering (SWSTE) Pub Date : 2016-06-23 DOI: 10.1109/SWSTE.2016.25

Andreas Borgwart, Haya Schulmann, M. Waidner

{"title":"Towards Automated Measurements of Internet's Naming Infrastructure","authors":"Andreas Borgwart, Haya Schulmann, M. Waidner","doi":"10.1109/SWSTE.2016.25","DOIUrl":"https://doi.org/10.1109/SWSTE.2016.25","url":null,"abstract":"Measuring and evaluating the Internet infrastructure is an important research area, with numerous proposals for sophisticated and novel ways to model traffic, infer networks' architectures and topology, or detect misconfigurations. An important requirement for such studies is the ability to reproduce the measurements in order to trace changes in the Internet over time, or to validate the reported results. Reproducibility is critical, for example, studying trends in configurations of services, adoption of patches and best practices, or fixes of misconfigurations. In this work we design automated tools for study of the architectures and configurations of the name servers in Domain Name System (DNS) and for evaluation of interoperability of unsigned domains with DNSSEC. Our measurement tools utilize wide-scale measurements of DNS servers in the forward and the reverse DNS trees, and conduct automated measurements, and provide reports with statistics. The tools are easy to use, with a convenient interface for clients and network operators. We provide access to the results collected with our tool, via a website.","PeriodicalId":118525,"journal":{"name":"2016 IEEE International Conference on Software Science, Technology and Engineering (SWSTE)","volume":"32 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-06-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133155365","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1