Proceedings from the Fifth Annual IEEE SMC Information Assurance Workshop, 2004.最新文献_第2页

Searching covert channels by identifying malicious subjects in the time domain 在时域内通过识别恶意对象来搜索隐蔽信道

Proceedings from the Fifth Annual IEEE SMC Information Assurance Workshop, 2004. Pub Date : 2004-06-10 DOI: 10.1109/IAW.2004.1437799

Chang-da Wang, Shiguang Ju

引用次数: 11

SILT: integrated logging management for security-enhanced Linux 淤泥:集成日志管理的安全增强的Linux

Proceedings from the Fifth Annual IEEE SMC Information Assurance Workshop, 2004. Pub Date : 2004-06-10 DOI: 10.1109/IAW.2004.1437831

N. Davis, P. Holloway, John Hale

引用次数: 0

On the security of random key pre-distribution schemes 随机密钥预分发方案的安全性研究

Proceedings from the Fifth Annual IEEE SMC Information Assurance Workshop, 2004. Pub Date : 2004-06-10 DOI: 10.1109/IAW.2004.1437811

M. Ramkumar, N. Memon

引用次数: 10

A secure logging scheme for Forensic Computing 用于取证计算的安全日志记录方案

Proceedings from the Fifth Annual IEEE SMC Information Assurance Workshop, 2004. Pub Date : 2004-06-10 DOI: 10.1109/IAW.2004.1437843

N. Kawaguchi, S. Ueda, N. Obata, R. Miyaji, S. Kaneko, H. Shigeno, K. Okada

引用次数: 10

Network abuse detection via flow content characterization 网络滥用检测通过流量内容表征

Proceedings from the Fifth Annual IEEE SMC Information Assurance Workshop, 2004. Pub Date : 2004-06-10 DOI: 10.1109/IAW.2004.1437829

M. Kharrazi, K. Shanmugasundaram, N. Memon

引用次数: 1

Developing and delivering hands-on information assurance exercises: experiences with the cyber defense lab at UMBC 开发和交付实际操作的信息保障练习:UMBC网络防御实验室的经验

Proceedings from the Fifth Annual IEEE SMC Information Assurance Workshop, 2004. Pub Date : 2004-06-10 DOI: 10.1109/IAW.2004.1437823

A. Sherman, B. O. Roberts, William E. Byrd, M. Baker, J. Simmons

{"title":"Developing and delivering hands-on information assurance exercises: experiences with the cyber defense lab at UMBC","authors":"A. Sherman, B. O. Roberts, William E. Byrd, M. Baker, J. Simmons","doi":"10.1109/IAW.2004.1437823","DOIUrl":"https://doi.org/10.1109/IAW.2004.1437823","url":null,"abstract":"In summer 2003, we developed four new hands-on information assurance educational exercises for use in the UMBC undergraduate and graduate curricula. Exercise topics comprise buffer overflow attacks, vulnerability scanning, password security and policy, and flaws in the wired equivalent privacy (WEP) protocol. During each exercise, each student carries out structured activities using a laptop from a mobile cart that can be rolled into any classroom. These dedicated, isolated machines permit a student to make mistakes safely, even while acting as the system administrator, without adversely affecting any other user. Each exercise is organized in a modular fashion to facilitate varied use for different courses, levels, and available time. Our experiences delivering these exercises show that practical hands-on activities motivate students and enhance learning. In this paper we describe our exercises and share lessons learned, including the importance of careful planning, ethical considerations, the rapid obsolescence of tools, and the difficulty of including exercises in already busy courses.","PeriodicalId":141403,"journal":{"name":"Proceedings from the Fifth Annual IEEE SMC Information Assurance Workshop, 2004.","volume":"38 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2004-06-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132821689","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 9

Mining data relationships for database damage assessment in a post information warfare scenario 后信息战场景下数据库损害评估的数据关系挖掘

Proceedings from the Fifth Annual IEEE SMC Information Assurance Workshop, 2004. Pub Date : 2004-06-10 DOI: 10.1109/IAW.2004.1437845

Y. Hu, B. Panda

引用次数: 7

Limitations of on demand secure routing protocols 随需应变安全路由协议的局限性

Proceedings from the Fifth Annual IEEE SMC Information Assurance Workshop, 2004. Pub Date : 2004-06-10 DOI: 10.1109/IAW.2004.1437797

P. Ramachandran, Alec Yasinsac

引用次数: 17

Towards the specification of access control policies on multiple operating systems 针对多操作系统的访问控制策略规范

Proceedings from the Fifth Annual IEEE SMC Information Assurance Workshop, 2004. Pub Date : 2004-06-10 DOI: 10.1109/IAW.2004.1437819

L. Teo, Gail-Joon Ahn

{"title":"Towards the specification of access control policies on multiple operating systems","authors":"L. Teo, Gail-Joon Ahn","doi":"10.1109/IAW.2004.1437819","DOIUrl":"https://doi.org/10.1109/IAW.2004.1437819","url":null,"abstract":"In the past, operating systems tended to lack well-defined access control policy specification languages and syntax. For example, a UNIX operating system that is based on the discretionary access control (DAC) paradigm has decentralized security policies based on technology that has been developed over the years. With such policies, it is difficult to identify the permissions given to each user, and who has what access to which resources. With the advent of recent security-enhanced operating systems such as SELinux, this is no longer the case; the access control policy for almost all resources is now stored centrally and applied universally throughout the system. This is certainly more manageable but is not without costs. Firstly, such policies tend to be complex. Secondly, as more of such systems are developed, each system would have its own policy specification syntax. A system administrator who intends to evaluate or migrate to a new system would have to learn the syntax of the new system. In this paper, we propose a solution to this problem by introducing the initial design of a new policy specification language that can be used to represent access control policies for multiple operating systems. To serve its purpose, this language must be flexible enough to cater to many operating systems, while being sufficiently extensible to support the specific features of each target operating system. We present the criteria, features, and approach that we are using to design the language. We also describe the role of two systems - SELinux and Systrace - in the design of our language. We also discuss our consideration of ASL as a potential candidate language, and why we chose to design our own language instead.","PeriodicalId":141403,"journal":{"name":"Proceedings from the Fifth Annual IEEE SMC Information Assurance Workshop, 2004.","volume":"11 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2004-06-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128038924","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4

Protocol anomaly detection and verification 协议异常检测和验证

Proceedings from the Fifth Annual IEEE SMC Information Assurance Workshop, 2004. Pub Date : 2004-06-10 DOI: 10.1109/IAW.2004.1437800

InSeon Yoo

引用次数: 12