{"title":"Polymorphic worm detection using token-pair signatures","authors":"Burak Bayoglu, I. Sogukpinar","doi":"10.1145/1387329.1387331","DOIUrl":"https://doi.org/10.1145/1387329.1387331","url":null,"abstract":"A worm is a self-replicating computer program which does not need neither to attach itself to an existing program nor require user intervention unlike viruses. Worms exploit operating system and application software vulnerabilities to infect the systems. Polymorphic code itself is the art of developing code that mutates at each copy while keeping the original algorithm unchanged. By the way, a polymorphic worm changes its pattern each time it sends a copy to another system. Thereby this avoids detection by simple signature matching techniques. On the other hand, there is still some part of code that remains unchanged. In this work, we propose Token-Pair Conjunction and Token-Pair Subsequence signatures for detecting polymorphic worm threats. Experiments of the proposed model were performed using two real polymorphic worms. Experiment results show that the proposed signature schema have low false negatives and false positives.","PeriodicalId":137293,"journal":{"name":"Proceedings of the 4th international workshop on Security, privacy and trust in pervasive and ubiquitous computing","volume":"92 23 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-07-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128865208","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"A comprehensive trust model for component software","authors":"Zheng Yan","doi":"10.1145/1387329.1387330","DOIUrl":"https://doi.org/10.1145/1387329.1387330","url":null,"abstract":"The growing importance of component software introduces special requirements on trust due to the nature of applications they provide, in particular when the system supports dynamic component deployment. This paper presents a comprehensive trust model in order to specify, evaluate and manage various trust relationships that exist among entities in a component software system. It contains a sub-model to present trust relationships among system entities, a sub-model to specify the information related to trust management for a software component, a sub-model for trust evaluation and a sub-model for trust management. This trust model supports trust management based on trust evaluation both at component download time and runtime.","PeriodicalId":137293,"journal":{"name":"Proceedings of the 4th international workshop on Security, privacy and trust in pervasive and ubiquitous computing","volume":"26 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-07-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114295101","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
P. Georgiadis, Javier López, S. Gritzalis, G. Marias
{"title":"Proceedings of the 4th international workshop on Security, privacy and trust in pervasive and ubiquitous computing","authors":"P. Georgiadis, Javier López, S. Gritzalis, G. Marias","doi":"10.1145/1387329","DOIUrl":"https://doi.org/10.1145/1387329","url":null,"abstract":"The objective of the SecPerU 2008 Workshop on Security, Privacy and Trust in Pervasive and Ubiquitous Computing is to distribute research studies and recent development on security, privacy and trust issues for ubiquitous, pervasive or ambient environments. \u0000 \u0000Continuing its past success, SecPerU 2008 attracted original research and technological development contributions on practical aspects of security and trust in pervasive and ubiquitous computing. In response to the SecPerU 2008 call for papers, 10 papers were submitted. Each paper was reviewed by three or four members of the Program Committee, on the basis of the significance, novelty, technical quality, and relevance of the work reported therein. At the end of the review process, only 3 papers were selected for presentation, resulting in an acceptance rate of 30%.","PeriodicalId":137293,"journal":{"name":"Proceedings of the 4th international workshop on Security, privacy and trust in pervasive and ubiquitous computing","volume":"42 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-07-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114617815","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}