2014 IEEE Security and Privacy Workshops最新文献_第4页

Gringotts: Securing Data for Digital Evidence 古灵阁:保护数字证据的数据

2014 IEEE Security and Privacy Workshops Pub Date : 2014-05-17 DOI: 10.1109/SPW.2014.11

Catherine M. S. Redfield, Hiroyuki Date

引用次数: 5

Phantom Boundaries and Cross-Layer Illusions in 802.15.4 Digital Radio 802.15.4数字无线电中的幻影边界和跨层幻象

2014 IEEE Security and Privacy Workshops Pub Date : 2014-05-17 DOI: 10.1109/SPW.2014.33

T. Goodspeed

{"title":"Phantom Boundaries and Cross-Layer Illusions in 802.15.4 Digital Radio","authors":"T. Goodspeed","doi":"10.1109/SPW.2014.33","DOIUrl":"https://doi.org/10.1109/SPW.2014.33","url":null,"abstract":"The classic design of protocol stacks, where each layer of the stack receives and unwraps the payload of the next layer, implies that each layer has a parser that accepts Protocol Data Units and extracts the intended Service Data Units from them. The PHY layer plays a special role, because it must create frames, i.e., original PDUs, from a stream of bits or symbols. An important property implicitly expected from these parsers is that SDUs are passed to the next layer only if the encapsulating PDUs from all previous layers were received exactly as transmitted by the sender and were syntactically correct. The Packet-in-packet attack (WOOT 2011) showed that this false assumption could be easily violated and exploited on IEEE 802.15.4 and similar PHY layers, however, it did not challenge the assumption that symbols and bytes recognized by the receiver were as transmitted by the sender. This work shows that even that assumption is wrong: in fact, a valid received frame may share no symbols with the sent one! This property is due to a particular choice of low-level chip encoding of 802.15.4, which enables the attacker to co-opt the receiver's error correction. This case study demonstrates that PHY layer logic is as susceptible to the input language manipulation attacks as other layers, or perhaps more so. Consequently, when designing protocol stacks, language-theoretic considerations must be taken into account from the very bottom of the PHY layer, no layer is too low to be considered \"mere engineering\".","PeriodicalId":142224,"journal":{"name":"2014 IEEE Security and Privacy Workshops","volume":"58 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-05-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124512155","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6

PeerShark: Detecting Peer-to-Peer Botnets by Tracking Conversations PeerShark:通过跟踪对话检测点对点僵尸网络

2014 IEEE Security and Privacy Workshops Pub Date : 2014-05-17 DOI: 10.1109/SPW.2014.25

Pratik Narang, S. Ray, C. Hota, V. Venkatakrishnan

引用次数: 61

Hurdles for Genomic Data Usage Management 基因组数据使用管理的障碍

2014 IEEE Security and Privacy Workshops Pub Date : 2014-05-17 DOI: 10.1109/SPW.2014.44

Muhammad Naveed

引用次数: 3

RAPPD: A Language and Prototype for Recipient-Accountable Private Personal Data RAPPD:接受者负责的私人个人数据的语言和原型

2014 IEEE Security and Privacy Workshops Pub Date : 2014-05-01 DOI: 10.1109/SPW.2014.16

Y. Kang, Allan M. Schiffman, Jeff Shrager

引用次数: 2

Improving Hard Disk Contention-Based Covert Channel in Cloud Computing 云计算中基于硬盘争用的隐蔽通道改进

2014 IEEE Security and Privacy Workshops Pub Date : 2014-02-02 DOI: 10.1109/SPW.2014.24

B. Lipinski, W. Mazurczyk, K. Szczypiorski

引用次数: 10