2016 4th International Symposium on Digital Forensic and Security (ISDFS)最新文献

Generating high quality data for the protection of modern critical infrastructures 为保护现代关键基础设施生成高质量数据

2016 4th International Symposium on Digital Forensic and Security (ISDFS) Pub Date : 2016-05-19 DOI: 10.1109/ISDFS.2016.7473517

B. Genge, I. Kiss, P. Haller, C. Siaterlis

引用次数: 1

Control flow change in assembly as a classifier in malware analysis 恶意软件分析中控制流变化的分类器

2016 4th International Symposium on Digital Forensic and Security (ISDFS) Pub Date : 2016-04-27 DOI: 10.1109/ISDFS.2016.7473514

Andree Linke, Nhien-An Le-Khac

{"title":"Control flow change in assembly as a classifier in malware analysis","authors":"Andree Linke, Nhien-An Le-Khac","doi":"10.1109/ISDFS.2016.7473514","DOIUrl":"https://doi.org/10.1109/ISDFS.2016.7473514","url":null,"abstract":"As currently classical malware detection methods based on signatures fail to detect new malware, they are not always efficient with new obfuscation techniques. Besides, new malware is easily created and old malware can be recoded to produce new one. Therefore, classical Antivirus becomes consistently less effective in dealing with those new threats. Also malware gets hand tailored to bypass network security and Antivirus. But as analysts do not have enough time to dissect suspected malware by hand, automated approaches have been developed. To cope with the mass of new malware, statistical and machine learning methods proved to be a good approach classilying programs, especially when using multiple approaches together to provide a likelihood of software being malicious. In normal approach, some steps have been taken, mostly by analyzing the opcodes or mnemonics of disassembly and their distribution. In this paper, we focus on the control flow change (CFC) itself and finding out if it is significant to detect malware. In the scope of this work only relative control flow changes are contemplated, as these are easier to extract from the first chosen disassembler library and are within a range of 256 addresses. These features are analyzed as a raw feature, as n-grams of length 2, 4 and 6 and the even more abstract feature of the occurrences of the n-grams is used. Statistical methods were used as well as the Naïve-Bayes algorithm to find out if there is significant data in CFC. We also test our approach with real-world datasets.","PeriodicalId":136977,"journal":{"name":"2016 4th International Symposium on Digital Forensic and Security (ISDFS)","volume":"1 2 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-04-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134299718","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 9

Practical inspection workflow for digital image forensic authentication 数字图像法医鉴定的实用检验工作流程

2016 4th International Symposium on Digital Forensic and Security (ISDFS) Pub Date : 2016-04-25 DOI: 10.1109/ISDFS.2016.7473540

Jinhua Zeng, Shaopei Shi, Yan Li, Qimeng Lu

引用次数: 0

Graphics processing unit based next generation DDoS prevention system 基于图形处理单元的下一代DDoS防御系统

2016 4th International Symposium on Digital Forensic and Security (ISDFS) Pub Date : 2016-04-25 DOI: 10.1109/ISDFS.2016.7473518

Selcuk Keskin, Hasan Tugrul Erdogan, T. Koçak

引用次数: 3

Secure behavioral biometric authentication with leap motion 安全的行为生物识别认证与跳跃运动

2016 4th International Symposium on Digital Forensic and Security (ISDFS) Pub Date : 2016-04-25 DOI: 10.1109/ISDFS.2016.7473528

G. Xiao, M. Milanova, Mengjun Xie

引用次数: 15

DynamicMultiProTru: An adaptive trust model for Wireless Sensor Networks 动态多凸点:无线传感器网络的自适应信任模型

2016 4th International Symposium on Digital Forensic and Security (ISDFS) Pub Date : 2016-04-25 DOI: 10.1109/ISDFS.2016.7473516

Gulustan Dogan, Koksal Avincan, T. Brown

引用次数: 2

A secured resource access management in educational cloud computing environment 教育云计算环境下的安全资源访问管理

2016 4th International Symposium on Digital Forensic and Security (ISDFS) Pub Date : 2016-04-25 DOI: 10.1109/ISDFS.2016.7473510

Saley Mato Idrissa, Karimou Djibo, S. Bisso, H. Saliah-Hassane

引用次数: 0

Veritabanlarında ışlem denetimi ve tarihsel veri modelleme yaklaşımı

2016 4th International Symposium on Digital Forensic and Security (ISDFS) Pub Date : 2016-04-25 DOI: 10.1109/ISDFS.2016.7473535

Hayrettin Evirgen, Ibrahim Dokuzer

{"title":"Veritabanlarında ışlem denetimi ve tarihsel veri modelleme yaklaşımı","authors":"Hayrettin Evirgen, Ibrahim Dokuzer","doi":"10.1109/ISDFS.2016.7473535","DOIUrl":"https://doi.org/10.1109/ISDFS.2016.7473535","url":null,"abstract":"Monitoring and recording of the changes which are stored (recorded) in the databases is very essential. Withdrawal of the changes without compromising data integrity in relational databases is also a significant issue. The reason of keeping too busy of the system resources by these transactions while being recorded, maintaining the data integrity, returning to a specific date in the history and the need of high storage capacity while keeping the necessary information for the control process are the main problems of these structures. There are some solutions which are dependent on the particular platforms for the creation of this mechanism. It is observed that there is a need of a structure to be used for all sub-structures. In this document, it is touched upon to the data changes in object-oriented databases with that point of view and given some information about the alternative systems which are doing the same work today. Then, it is mentioned about the new approach which can make data control in the database and work independently on database types in all systems which is using java architecture without depending on any platform and can restore the data on any specific date and any forward data changes can be made automatically.","PeriodicalId":136977,"journal":{"name":"2016 4th International Symposium on Digital Forensic and Security (ISDFS)","volume":"27 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-04-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133487811","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

The forensic effectiveness of virtual disk sanitization 虚拟磁盘消毒的取证有效性

2016 4th International Symposium on Digital Forensic and Security (ISDFS) Pub Date : 2016-04-25 DOI: 10.1109/ISDFS.2016.7473530

Joshua Sablatura, Umit Karabiyik

引用次数: 0

Improvement of ETSFS algorithm for secure database 安全数据库中ETSFS算法的改进

2016 4th International Symposium on Digital Forensic and Security (ISDFS) Pub Date : 2016-04-25 DOI: 10.1109/ISDFS.2016.7473519

Prathyusha Uduthalapally, Bing Zhou

{"title":"Improvement of ETSFS algorithm for secure database","authors":"Prathyusha Uduthalapally, Bing Zhou","doi":"10.1109/ISDFS.2016.7473519","DOIUrl":"https://doi.org/10.1109/ISDFS.2016.7473519","url":null,"abstract":"In the present era, one of the major encounters is data security. Most organizations store their data in huge databases that enables uncomplicated retrieval, manipulations, and also helps in an efficient way of sharing. Database security has now become a more dynamic issue as data is the greatest asset to any organization. Due to the rapid increase in the database usage, it is vulnerable to many threats like unauthorized access etc. To overcome these issues, numerous security techniques have emerged to protect the data in databases. Database encryption - a security technique involves various encryption algorithms such as, Data Encryption Standard (DES), Triple DES and Enhanced-Transposition-Substitution-Folding-Shifting (ETSFS). Each of them has its specific merits and demerits. Unlike ETSFS, has constraint on data size and number of special characters, the proposed method improvement focuses on the encryption of large data considering all types of special characters and a random generator is used for generating keys in substitution phase. The proposed methodology of the paper focused on the future work of the ETSFS algorithm and successfully implemented for securing database with the comparison of the insert and select queries of the four encryption algorithms (AES, DES, ETSFS, and Enhanced ETSFS).","PeriodicalId":136977,"journal":{"name":"2016 4th International Symposium on Digital Forensic and Security (ISDFS)","volume":"88 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-04-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132557693","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5