Proceedings of the 15th International Conference on Availability, Reliability and Security最新文献_第9页

Taxonomy and challenges in machine learning-based approaches to detect attacks in the internet of things 基于机器学习的物联网攻击检测方法的分类和挑战

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-07-30 DOI: 10.1145/3407023.3407048

Omair Faraj, D. Megías, A. Ahmad, Joaquín García

引用次数: 10

Confiance: detecting vulnerabilities in Java Card applets con未婚夫:检测Java Card小程序中的漏洞

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-07-30 DOI: 10.1145/3407023.3407031

Léopold Ouairy, Hélène Le Bouder, Jean-Louis Lanet

{"title":"Confiance: detecting vulnerabilities in Java Card applets","authors":"Léopold Ouairy, Hélène Le Bouder, Jean-Louis Lanet","doi":"10.1145/3407023.3407031","DOIUrl":"https://doi.org/10.1145/3407023.3407031","url":null,"abstract":"This study focuses on automatically detecting wrong implementations of specifications in Java Card programs, without any knowledge on the source code or the specification itself. To achieve this, an approach based on Natural Language Processing and machine-learning is proposed. First, an oracle gathering methods with similar semantics in groups, is created. This focuses on evaluating our approach performances during the neighborhood discovery. Based on the groups of similar methods automatically retrieved, the anomaly detection relies on the Control Flow Graph of programs of these groups. In order to benchmark our approach's ability to detect vulnerabilities, an oracle of anomaly is created. This oracle knows every anomaly the approach should automatically retrieve. Both the neighborhood discovery and the anomaly detection steps are benchmarked. This approach is implemented in a tool: Confiance, and it is compared to another machine-learning tool for automatic vulnerability detection. The results expose the better performances of Confiance to detect vulnerabilities in open-source programs available online.","PeriodicalId":121225,"journal":{"name":"Proceedings of the 15th International Conference on Availability, Reliability and Security","volume":"24 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-07-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126262257","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

SoK 势利小人

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-07-30 DOI: 10.1145/3407023.3407083

Harry Halpin

引用次数: 6

AntiPatterns regarding the application of cryptographic primitives by the example of ransomware 以勒索软件为例，介绍关于加密原语应用的反模式

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-07-30 DOI: 10.1145/3407023.3409182

Michael P. Heinl, Alexander Giehl, Lukas Graif

引用次数: 1

CyberWolf

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-07-30 DOI: 10.1145/3407023.3409191

Andrea Calesso, M. Conti, Martino Grasselli

{"title":"CyberWolf","authors":"Andrea Calesso, M. Conti, Martino Grasselli","doi":"10.1145/3407023.3409191","DOIUrl":"https://doi.org/10.1145/3407023.3409191","url":null,"abstract":"The volume of transactions in financial markets is impressive: e.g., every four days an amount similar to the USA GDP flows through the Forex (foreign exchange, which is only one of the several financial markets). Currently, financial markets are ICT-driven, i.e., about 60% of transactions are automatically launched by computers and the annual impact of such transaction is greater than 30 times the world GDP. The growing complexity of financial instruments has led to an increase in the underlying technology, and consequently it opened the door to vulnerabilities in the security and control systems. In this paper we illustrate CyberWolf, a novel attack that exploits a vulnerability of the financial market control system. The aim of the attack is creating the possibility of carrying out transactions of financial products at prices which differ significantly from their real value. In particular, CyberWolf exploits the delay of actions of market makers, who are the entities responsible for regulating the price of the financial instruments exchanged. Interestingly, the attack can be performed against big financial markets and by using a cheap setting; we show the feasibility of our attack against the Italian Stock Exchange (FTSE-MIB) by using only a laptop and a DSL internet connection. We consider the Italian Stock Exchange as a stress-test example for this kind of attack, because it is a liquid financial market (with just a few illiquid instruments) and has an effective regulator. Performing this attack on smaller and / or poorly regulated markets could lead to pathological situations that are not representative of a general case. The purpose of this paper is to highlight the possibility of fraudulent transactions, created by traders who by-pass the control of market regulator.","PeriodicalId":121225,"journal":{"name":"Proceedings of the 15th International Conference on Availability, Reliability and Security","volume":"22 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-07-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127735653","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

SoK: exploring the state of the art and the future potential of artificial intelligence in digital forensic investigation SoK:探索人工智能在数字法医调查中的最新技术和未来潜力

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-07-30 DOI: 10.1145/3407023.3407068

Xiaoyu Du, C. Hargreaves, John W. Sheppard, Felix Anda, A. Sayakkara, Nhien-An Le-Khac, M. Scanlon

引用次数: 33

Building a testing environment for SDN networks analysis for electrical grid applications 为电网应用构建SDN网络分析的测试环境

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-07-30 DOI: 10.1145/3407023.3409230

T. Cantero-Gubert, A. Colet-Subirachs, Pol Paradell, J. Domínguez-García

引用次数: 2

SoK 势利小人

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-07-30 DOI: 10.1145/3407023.3407059

Rainer Diesch, H. Krcmar

引用次数: 2

DFS 3 DFS) 3)

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-07-30 DOI: 10.1145/3407023.3407056

Edward Harshany, Ryan Benton, David M. Bourrie, M. Black, W. Glisson

{"title":"DFS\u0000 3","authors":"Edward Harshany, Ryan Benton, David M. Bourrie, M. Black, W. Glisson","doi":"10.1145/3407023.3407056","DOIUrl":"https://doi.org/10.1145/3407023.3407056","url":null,"abstract":"Distributed file systems present distinctive forensic challenges in comparison to traditional locally mounted file system volume. Storage device media can number in the thousands, and forensic investigations in this setting necessitate a tailored approach to data collection. The Hadoop Distributed File System (HFDS) produces and maintains partially persistent metadata that is pursuant with a logical volume, a file system, and file addresses on the centralized server. Hence, this research investigates the viability of using a residual central server digital artifact to generate a history model of the distributed file system. The history model affords an investigator a high-level perspective of low-level events to narrow investigative process obligations. The model is generated through set-theoretic relations of the file system essential data structure. Graph-theoretic ordering is applied to the events to provide a history model. The research contribution is a rapid reconstruction of the HDFS storage state transitions generating timelines for system events to forensically assess HDFS properties with conceptual similarity to traditional low-level file system forensic tool output. The results of this research provide a prototype tool, DFS3, for rapid and noninvasive data storage state timeline reconstruction in a big data distributed file system.","PeriodicalId":121225,"journal":{"name":"Proceedings of the 15th International Conference on Availability, Reliability and Security","volume":"42 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-07-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123842603","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Threat landscape for smart grid systems 智能电网系统的威胁态势

Proceedings of the 15th International Conference on Availability, Reliability and Security Pub Date : 2020-07-30 DOI: 10.1145/3407023.3409229

Christos-Minas Mathas, Konstantinos-Panagiotis Grammatikakis, C. Vassilakis, N. Kolokotronis, Vasiliki-Georgia Bilali, D. Kavallieros

{"title":"Threat landscape for smart grid systems","authors":"Christos-Minas Mathas, Konstantinos-Panagiotis Grammatikakis, C. Vassilakis, N. Kolokotronis, Vasiliki-Georgia Bilali, D. Kavallieros","doi":"10.1145/3407023.3409229","DOIUrl":"https://doi.org/10.1145/3407023.3409229","url":null,"abstract":"Smart Grids are energy delivery networks, constituting an evolution of power grids, in which a bidirectional flow between power providers and consumers is established. These flows support the transfer of electricity and information, in order to support automation actions in the context of the energy delivery network. Insofar, many smart grid implementations and implementation proposals have emerged, with varying degrees of feature delivery and sophistication. While smart grids offer many advantages, their distributed nature and information flow streams between energy producers and consumers enable the launching of a number of attacks against the smart grid infrastructure, where the related consequences may range from economic loss to complete failure of the smart grid. In this paper, we survey the threat landscape of smart grids, identifying threats that are specific to this infrastructure, providing an assessment of the severity of the consequences of each attack type, discerning features that can be utilized to detect attacks and listing methods that can be used to mitigate them.","PeriodicalId":121225,"journal":{"name":"Proceedings of the 15th International Conference on Availability, Reliability and Security","volume":"61 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-07-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126653685","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 11