2012 Seventh Asia Joint Conference on Information Security最新文献

Data Integrity on Remote Storage for On-line Co-working 联机协同工作中远程存储的数据完整性

2012 Seventh Asia Joint Conference on Information Security Pub Date : 2012-08-09 DOI: 10.1109/AsiaJCIS.2012.23

He-Ming Ruan, Yu-Shian Chen, C. Lei

引用次数: 0

Multipurpose Network Monitoring Platform Using Dynamic Address Assignment 基于动态地址分配的多用途网络监控平台

2012 Seventh Asia Joint Conference on Information Security Pub Date : 2012-08-09 DOI: 10.1109/AsiaJCIS.2012.21

Masashi Eto, D. Inoue, Mio Suzuki, K. Nakao

引用次数: 1

DroidMat: Android Malware Detection through Manifest and API Calls Tracing DroidMat: Android恶意软件检测通过Manifest和API调用跟踪

2012 Seventh Asia Joint Conference on Information Security Pub Date : 2012-08-09 DOI: 10.1109/AsiaJCIS.2012.18

Dong-Jie Wu, Ching-Hao Mao, Te-En Wei, Hahn-Ming Lee, Kuo-Ping Wu

{"title":"DroidMat: Android Malware Detection through Manifest and API Calls Tracing","authors":"Dong-Jie Wu, Ching-Hao Mao, Te-En Wei, Hahn-Ming Lee, Kuo-Ping Wu","doi":"10.1109/AsiaJCIS.2012.18","DOIUrl":"https://doi.org/10.1109/AsiaJCIS.2012.18","url":null,"abstract":"Recently, the threat of Android malware is spreading rapidly, especially those repackaged Android malware. Although understanding Android malware using dynamic analysis can provide a comprehensive view, it is still subjected to high cost in environment deployment and manual efforts in investigation. In this study, we propose a static feature-based mechanism to provide a static analyst paradigm for detecting the Android malware. The mechanism considers the static information including permissions, deployment of components, Intent messages passing and API calls for characterizing the Android applications behavior. In order to recognize different intentions of Android malware, different kinds of clustering algorithms can be applied to enhance the malware modeling capability. Besides, we leverage the proposed mechanism and develop a system, called Droid Mat. First, the Droid Mat extracts the information (e.g., requested permissions, Intent messages passing, etc) from each application's manifest file, and regards components (Activity, Service, Receiver) as entry points drilling down for tracing API Calls related to permissions. Next, it applies K-means algorithm that enhances the malware modeling capability. The number of clusters are decided by Singular Value Decomposition (SVD) method on the low rank approximation. Finally, it uses kNN algorithm to classify the application as benign or malicious. The experiment result shows that the recall rate of our approach is better than one of well-known tool, Androguard, published in Black hat 2011, which focuses on Android malware analysis. In addition, Droid Mat is efficient since it takes only half of time than Androguard to predict 1738 apps as benign apps or Android malware.","PeriodicalId":130870,"journal":{"name":"2012 Seventh Asia Joint Conference on Information Security","volume":"7 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2012-08-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124889286","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 635

SSL/TLS Status Survey in Japan - Transitioning against the Renegotiation Vulnerability and Short RSA Key Length Problem 日本SSL/TLS现状调查-针对重新协商漏洞和短RSA密钥长度问题的过渡

2012 Seventh Asia Joint Conference on Information Security Pub Date : 2012-08-09 DOI: 10.1109/AsiaJCIS.2012.10

Yuji Suga

{"title":"SSL/TLS Status Survey in Japan - Transitioning against the Renegotiation Vulnerability and Short RSA Key Length Problem","authors":"Yuji Suga","doi":"10.1109/AsiaJCIS.2012.10","DOIUrl":"https://doi.org/10.1109/AsiaJCIS.2012.10","url":null,"abstract":"In 2009, researchers released details of a vulnerability in the SSL and TLS protocols that could allow Man-in-the-Middle attacks to be carried out. SSL and TLS operate between the IP and application layers and ensure application data encryption and data integrity, authenticating the target of communications using X.509 public key certificates. As they are used together with application layer communication protocols such as HTTP, SMTP, and POP, it seems that this vulnerability affects a large number of applications and systems. This vulnerability can be attributed to a problem in the SSL and TLS protocol specifications themselves. Fixes have been released for Open SSL and Apache immediately, however most of these involve simply disabling the renegotiation feature that is causing the problem. More thorough measures would require an update to the current specifications and migration to implementations that follow the new specifications. IETF published countermeasures with unprecedented speed as RFC5746, however server-side implementations are not deployed because of problems in business such as the loss of opportunities and backward compatibilities. This paper discusses about problems of a transitioning to new specifications including the SSL/TLS renegotiation vulnerability and short key lengths of RSA algorithm using in SSL/TLS, and also reports the latest status of these weakness on web sites of local governments and universities in Japan. Note that 40.7% local government are vulnerable against the DOS attack using the SSL/TLS renegotiation vulnerability and 36.9% sites use 1024 bit or less RSA keys.","PeriodicalId":130870,"journal":{"name":"2012 Seventh Asia Joint Conference on Information Security","volume":"50 5","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2012-08-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114130539","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 7

PDAF: Proactive Distributed Authentication Framework for Regional Network 面向区域网络的主动分布式认证框架

2012 Seventh Asia Joint Conference on Information Security Pub Date : 2012-08-09 DOI: 10.1109/AsiaJCIS.2012.15

Ruidong Li, M. Ohnishi, Y. Owada, H. Harai

引用次数: 1

Flaw and Configuration Analysis of Cloud Component Using First Order Logic 基于一阶逻辑的云组件缺陷与配置分析

2012 Seventh Asia Joint Conference on Information Security Pub Date : 2012-08-09 DOI: 10.1109/AsiaJCIS.2012.25

R. Ando

引用次数: 0

Attack Sequence Detection in Cloud Using Hidden Markov Model 基于隐马尔可夫模型的云攻击序列检测

2012 Seventh Asia Joint Conference on Information Security Pub Date : 2012-08-09 DOI: 10.1109/AsiaJCIS.2012.24

Chia-Mei Chen, D. Guan, Yu-Zhi Huang, Ya-Hui Ou

{"title":"Attack Sequence Detection in Cloud Using Hidden Markov Model","authors":"Chia-Mei Chen, D. Guan, Yu-Zhi Huang, Ya-Hui Ou","doi":"10.1109/AsiaJCIS.2012.24","DOIUrl":"https://doi.org/10.1109/AsiaJCIS.2012.24","url":null,"abstract":"Cloud computing provides business new working paradigm with the benefit of cost reduce and resource sharing. Tasks from different users may be performed on the same machine. Therefore, one primary security concern is whether user data is secure in cloud. On the other hand, hacker may facilitate cloud computing to launch larger range of attack, such as a request of port scan in cloud with multiple virtual machines executing such malicious action. In addition, hacker may perform a sequence of attacks in order to compromise his target system in cloud, for example, evading an easy-to-exploit machine in a cloud and then using the previous compromised to attack the target. Such attack plan may be stealthy or inside the computing environment, so intrusion detection system or firewall has difficulty to identify it. The proposed detection system analyzes multiple logs from cloud to extract the intensions of the actions recorded in logs. Stealthy reconnaissance actions are often neglected by administrator for the insignificant number of violations. Hidden Markov model is adopted to model the sequence of attack performed by hacker and such stealthy events in a long time frame will become significant in the state-aware model. The preliminary results show that the proposed system can identify such attack plans in the real network.","PeriodicalId":130870,"journal":{"name":"2012 Seventh Asia Joint Conference on Information Security","volume":"23 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2012-08-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132360206","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 20

Synthesis of Secure Passwords 安全密码的合成

2012 Seventh Asia Joint Conference on Information Security Pub Date : 2012-08-09 DOI: 10.1109/AsiaJCIS.2012.13

Tomoki Sato, H. Kikuchi

引用次数: 1

A Study on Method to Analyze Application on Bada Using GUI without Source Code 基于GUI的无源代码Bada应用程序分析方法研究

2012 Seventh Asia Joint Conference on Information Security Pub Date : 2012-08-09 DOI: 10.1109/AsiaJCIS.2012.19

Hanjae Jeong, Dongho Won

引用次数: 0

Mobile Friendly and Highly Efficient Remote User Authenticated Key Agreement Protocol Featuring Untraceability 具有不可追溯性的移动友好和高效的远程用户认证密钥协议协议

2012 Seventh Asia Joint Conference on Information Security Pub Date : 2012-08-09 DOI: 10.1109/AsiaJCIS.2012.14

Chin-Chen Chang, Hai-Duong Le, Ching-Hsiang Chang

引用次数: 0