2016 International Conference On Cyber Security And Protection Of Digital Services (Cyber Security)最新文献_第2页

Statistical analysis of attacking autonomous systems 攻击自治系统的统计分析

2016 International Conference On Cyber Security And Protection Of Digital Services (Cyber Security) Pub Date : 2016-06-13 DOI: 10.1109/CyberSecPODS.2016.7502353

T. Sochor, Matej Zuzcák, P. Bujok

引用次数: 3

Correlating intrusion detection alerts on bot malware infections using neural network 利用神经网络关联bot恶意软件感染的入侵检测警报

2016 International Conference On Cyber Security And Protection Of Digital Services (Cyber Security) Pub Date : 2016-06-13 DOI: 10.1109/CyberSecPODS.2016.7502344

Egon Kidmose, Matija Stevanovic, J. Pedersen

{"title":"Correlating intrusion detection alerts on bot malware infections using neural network","authors":"Egon Kidmose, Matija Stevanovic, J. Pedersen","doi":"10.1109/CyberSecPODS.2016.7502344","DOIUrl":"https://doi.org/10.1109/CyberSecPODS.2016.7502344","url":null,"abstract":"Millions of computers are infected with bot malware, form botnets and enable botmaster to perform malicious and criminal activities. Intrusion Detection Systems are deployed to detect infections, but they raise many correlated alerts for each infection, requiring a large manual investigation effort. This paper presents a novel method with a goal of determining which alerts are correlated, by applying Neural Networks and clustering, thus reducing the number of alerts to manually process. The main advantage of the method is that no domain knowledge is required for designing feature extraction or any other part, as such knowledge is inferred by Neural Networks. Evaluation has been performed with traffic traces of real bot binaries executed in a lab setup. The method is trained on labelled Intrusion Detection System alerts and is capable of correctly predicting which of seven incidents an alert pertains, 56.15% of the times. Based on the observed performance it is concluded that the task of understanding Intrusion Detection System alerts can be handled by a Neural Network, showing the potential for reducing the need for manual processing of alerts. Finally, it should be noted that, this is achieved without any feature engineering and with no use of domain specific knowledge.","PeriodicalId":134449,"journal":{"name":"2016 International Conference On Cyber Security And Protection Of Digital Services (Cyber Security)","volume":"52 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-06-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124960343","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

Proactive biometric-enabled forensic imprinting 主动启用生物识别的法医印记

2016 International Conference On Cyber Security And Protection Of Digital Services (Cyber Security) Pub Date : 2016-06-13 DOI: 10.1109/CYBERSECPODS.2016.7502342

Abdulrahman Alruban, N. Clarke, Fudong Li, S. Furnell

{"title":"Proactive biometric-enabled forensic imprinting","authors":"Abdulrahman Alruban, N. Clarke, Fudong Li, S. Furnell","doi":"10.1109/CYBERSECPODS.2016.7502342","DOIUrl":"https://doi.org/10.1109/CYBERSECPODS.2016.7502342","url":null,"abstract":"Threats to enterprises have become widespread in the last decade. A major source of such threats originates from insiders who have legitimate access to the organization's internal systems and databases. Therefore, preventing or responding to such incidents has become a challenging task. Digital forensics has grown into a de-facto standard in the examination of electronic evidence; however, a key barrier is often being able to associate an individual to the stolen data. Stolen credentials and the Trojan defense are two commonly cited arguments used. This paper proposes a model that can more inextricably links the use of information (e.g. images, documents and emails) to the individual users who use and access them through the use of steganography and transparent biometrics. The initial experimental results of the proposed approach have shown that it is possible to correlate an individual's biometric feature vector with a digital object (images) and still successfully recover the sample even with significant file modification. In addition, a reconstruction of the feature vector from these unmodified images was possible by using those generated imprints with an accuracy of 100% in some scenarios.","PeriodicalId":134449,"journal":{"name":"2016 International Conference On Cyber Security And Protection Of Digital Services (Cyber Security)","volume":"128 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-06-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127394108","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

Exploiting pitfalls in software-defined networking implementation 利用软件定义网络实现中的缺陷

2016 International Conference On Cyber Security And Protection Of Digital Services (Cyber Security) Pub Date : 2016-06-13 DOI: 10.1109/CyberSecPODS.2016.7502354

Dylan Smyth, V. Cionca, Seán McSweeney, Donna O’Shea

引用次数: 10

The IM system with a cryptographic feature 具有加密特性的IM系统

2016 International Conference On Cyber Security And Protection Of Digital Services (Cyber Security) Pub Date : 2016-06-13 DOI: 10.1109/CyberSecPODS.2016.7502339

Z. Hulicki

引用次数: 0

Knowledge management of cyber security expertise: an ontological approach to talent discovery 网络安全专业知识管理:人才发现的本体论方法

2016 International Conference On Cyber Security And Protection Of Digital Services (Cyber Security) Pub Date : 2016-06-13 DOI: 10.1109/CyberSecPODS.2016.7502356

Marcelo Paiva Fontenele, Lily Sun

引用次数: 6

Attack simulation based software protection assessment method 基于攻击仿真的软件防护评估方法

2016 International Conference On Cyber Security And Protection Of Digital Services (Cyber Security) Pub Date : 2016-06-13 DOI: 10.1109/CyberSecPODS.2016.7502352

Gaofeng Zhang, P. Falcarin, Elena Gómez-Martínez, Shareeful Islam, Christophe Tartary, B. D. Sutter, Jérôme d'Annoville

{"title":"Attack simulation based software protection assessment method","authors":"Gaofeng Zhang, P. Falcarin, Elena Gómez-Martínez, Shareeful Islam, Christophe Tartary, B. D. Sutter, Jérôme d'Annoville","doi":"10.1109/CyberSecPODS.2016.7502352","DOIUrl":"https://doi.org/10.1109/CyberSecPODS.2016.7502352","url":null,"abstract":"Software protection is an essential aspect of information security to withstand malicious activities on software, and preserving software assets. However, software developers still lacks a methodology for the assessment of the deployed protections. To solve these issues, we present a novel attack simulation based software protection assessment method to assess and compare various protection solutions. Our solution relies on Petri Nets to specify and visualize attack models, and we developed a Monte Carlo based approach to simulate attacking processes and to deal with uncertainty. Then, based on this simulation and estimation, a novel protection comparison model is proposed to compare different protection solutions. Lastly, our attack simulation based software protection assessment method is presented. We illustrate our method by means of a software protection assessment process to demonstrate that our approach can provide a suitable software protection assessment for developers and software companies.","PeriodicalId":134449,"journal":{"name":"2016 International Conference On Cyber Security And Protection Of Digital Services (Cyber Security)","volume":"53 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-06-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124973820","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

Model based analysis of insider threats 基于模型的内部威胁分析

2016 International Conference On Cyber Security And Protection Of Digital Services (Cyber Security) Pub Date : 2016-06-13 DOI: 10.1109/CyberSecPODS.2016.7502350

Taolue Chen, Tingting Han, F. Kammüller, Ibrahim Nemli, Christian W. Probst

引用次数: 1

The social engineering attack spiral (SEAS) 社会工程攻击螺旋(sea)

2016 International Conference On Cyber Security And Protection Of Digital Services (Cyber Security) Pub Date : 2016-06-13 DOI: 10.1109/CyberSecPODS.2016.7502347

A. Cullen, Lorna Armitage

引用次数: 8

Gauging the effectiveness of computer misuse act in dealing with cybercrimes 评估电脑滥用行为在处理网络犯罪中的有效性

2016 International Conference On Cyber Security And Protection Of Digital Services (Cyber Security) Pub Date : 2016-06-13 DOI: 10.1109/CyberSecPODS.2016.7502346

R. Montasari, Pekka Peltola, Victoria Carpenter

引用次数: 1