Proceedings of the 15th International Conference on Availability, Reliability and Security最新文献_第2页

Jit fault detection: increasing availability in 1oo2 systems just-in-time Jit故障检测:实时提高102个系统的可用性

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-08-25 DOI: 10.1145/3407023.3407054

L. Botler, N. Kajtazovic, K. Diwold, K. Römer

引用次数: 0

Distributed packet inspection for network security purposes in software-defined networking environments 在软件定义的网络环境中，用于网络安全目的的分布式数据包检测

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-08-25 DOI: 10.1145/3407023.3409210

P. Nowakowski, Piotr Żórawski, Krzysztof Cabaj, Marcin Gregorczyk, Maciej Purski, W. Mazurczyk

引用次数: 0

Non-blind steganalysis 非盲隐写式密码解密

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-08-25 DOI: 10.1145/3407023.3409221

Niklas Bunzel, M. Steinebach, Huajian Liu

引用次数: 1

Balancing trust and privacy in computer-mediated introduction: featuring risk as a determinant for trustworthiness requirements elicitation 在计算机中介引入中平衡信任和隐私:将风险作为可信度要求引出的决定因素

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-08-25 DOI: 10.1145/3407023.3409208

Angela Borchert, N. E. D. Ferreyra, M. Heisel

{"title":"Balancing trust and privacy in computer-mediated introduction: featuring risk as a determinant for trustworthiness requirements elicitation","authors":"Angela Borchert, N. E. D. Ferreyra, M. Heisel","doi":"10.1145/3407023.3409208","DOIUrl":"https://doi.org/10.1145/3407023.3409208","url":null,"abstract":"In requirements elicitation methods, it is not unusual that conflicts between software requirements or between software goals and requirements can be detected. It is efficient to deal with those conflicts before further costs are invested to implement a solution that includes insufficient software features. This work introduces risk as an extension of a method for eliciting trust-related software features for computer-mediated introduction (CMI) so that software engineers can i) decide on the implementation of conflicting requirements in the problem space and ii) additionally reduce risks that accompany CMI use. CMI describes social media platforms on which strangers with compatible interests get acquainted online and build trust relationships with each other for potential offline encounters (e.g.: online dating and sharing economy). CMI involves security and safety risks such as data misuse, deceit or violence. In the engineering process, software goals and requirements for trust building often come along with the disclosure of personal data, which may result in conflicts with goals and requirements for privacy protection. In order to tackle i) conflicting requirements and goals and ii) CMI risks, our approach involves risk assessment of user concerns and requirements in order to rank goals by their importance for the application. Based on the prioritization, conflicting requirements can be managed. The findings are presented with explicit examples of the application field online dating.","PeriodicalId":121225,"journal":{"name":"Proceedings of the 15th International Conference on Availability, Reliability and Security","volume":"14 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-08-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128883170","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Vector packet encapsulation: the case for a scalable IPsec encryption protocol 矢量包封装:一个可扩展的IPsec加密协议的情况

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-08-25 DOI: 10.1145/3407023.3407060

M. Pfeiffer, Franz Girlich, M. Rossberg, G. Schäfer

引用次数: 0

Refining the evaluation of the degree of security of a system built using security patterns 改进使用安全模式构建的系统的安全程度评估

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-08-25 DOI: 10.1145/3407023.3407070

Olga Villagrán-Velasco, E. Fernández, J. Ortega-Arjona

引用次数: 6

SOK 势利小人

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-08-25 DOI: 10.1145/3407023.3407043

M. Dotan, Y. Pignolet, S. Schmid, Saar Tochner, Aviv Zohar

引用次数: 16

Attacker-centric thinking in security: perspectives from financial services practitioners 安全中以攻击者为中心的思维:来自金融服务从业者的观点

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-08-25 DOI: 10.1145/3407023.3407082

Caroline Moeckel

引用次数: 2

STALK: security analysis of smartwatches for kids 儿童智能手表的安全性分析

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-08-25 DOI: 10.1145/3407023.3407037

Christoph Saatjohann, Fabian Ising, Luise Krings, Sebastian Schinzel

引用次数: 4

Quantifying autonomous system IP churn using attack traffic of botnets 利用僵尸网络攻击流量量化自治系统IP流失

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-08-25 DOI: 10.1145/3407023.3407051

H. Griffioen, C. Doerr

{"title":"Quantifying autonomous system IP churn using attack traffic of botnets","authors":"H. Griffioen, C. Doerr","doi":"10.1145/3407023.3407051","DOIUrl":"https://doi.org/10.1145/3407023.3407051","url":null,"abstract":"To connect to the Internet, hosts are assigned an IP address by their network provider by which they exchange data. As such, IP addresses are frequently used as a proxy metric to count the number of hosts on a network, or to quantify particular phenomena such as the size of botnets or the infection statistics of malware. Although a single host is typically linked to a single IP address at a given moment, this relationship is frequently not stable over time due to IP churn. As network operators dynamically assign IP addresses to clients for a specific lease duration, after expiry of this lease a host obtains a new IP address, thereby leading to overestimations of active host counts or malware infections. In this paper, we present a novel method to detect and quantify IP churn in autonomous systems on the Internet by exploiting a weakness in the packet generation algorithm and random number generation of the Mirai IoT malware. These design shortcomings allow us to re-identify the same IoT infection when the host resurfaces on the Internet with a different IP address with very high confidence, and thereby characterize how IP addresses in provider netblocks churn over time. As Mirai is widespread with hundreds of thousands of infected devices worldwide and uses the faulty RNG output to actively scan the Internet, our methods enables worldwide measurements of IP churn to be done efficiently and completely passively.","PeriodicalId":121225,"journal":{"name":"Proceedings of the 15th International Conference on Availability, Reliability and Security","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-08-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131095468","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6