International Conference on Cryptography, Security and Privacy最新文献

A Privacy-Preserving Method for Photo Sharing in Instant Message Systems 一种即时消息系统中照片共享的隐私保护方法

International Conference on Cryptography, Security and Privacy Pub Date : 2017-03-17 DOI: 10.1145/3058060.3058081

Fenghua Li, Jingyang Yu, Lingcui Zhang, Zhelei Sun, Mengfan Lv

引用次数: 8

Zero-Knowledge Identification Scheme Based on Symmetry Ergodic Matrices Exponentiation Problem 基于对称遍历矩阵求幂问题的零知识识别方案

International Conference on Cryptography, Security and Privacy Pub Date : 2017-03-17 DOI: 10.1145/3058060.3058084

Huawei Huang, Yunyun Qu, Lunzhi Deng

引用次数: 0

Feasibility Analysis of Lattice-based Proxy Re-Encryption 基于格的代理重加密的可行性分析

International Conference on Cryptography, Security and Privacy Pub Date : 2017-03-17 DOI: 10.1145/3058060.3058080

Xuyang Wang, A. Hu, Hao Fang

引用次数: 1

A Matrix Decomposition based Webshell Detection Method 基于矩阵分解的Webshell检测方法

International Conference on Cryptography, Security and Privacy Pub Date : 2017-03-17 DOI: 10.1145/3058060.3058083

Xin Sun, Xindai Lu, Hua Dai

引用次数: 14

Variance Analysis of Pixel-Value Differencing Steganography 像素值差分隐写的方差分析

International Conference on Cryptography, Security and Privacy Pub Date : 2017-03-17 DOI: 10.1145/3058060.3058077

H. Zhang, Tao Zhang, Huajin Chen

{"title":"Variance Analysis of Pixel-Value Differencing Steganography","authors":"H. Zhang, Tao Zhang, Huajin Chen","doi":"10.1145/3058060.3058077","DOIUrl":"https://doi.org/10.1145/3058060.3058077","url":null,"abstract":"As the adaptive steganography selects edge and texture area for loading, the theoretical analysis is limited by modeling difficulty. This paper introduces a novel method to study pixel-value difference (PVD) embedding scheme. First, the difference histogram values of cover image are used as parameters, and a variance formula for PVD stego noise is obtained. The accuracy of this formula has been verified through analysis with standard pictures. Second, the stego noise is divided into six kinds of pixel regions, and the regional noise variances are utilized to compare the security between PVD and least significant bit matching (LSBM) steganography. A mathematical conclusion is presented that, with the embedding capacity less than 2.75 bits per pixel, PVD is always not safer than LSBM under the same embedding rate, regardless of region selection. Finally, 10000 image samples are used to observe the validity of mathematical conclusion. For most images and regions, the data are also shown to be consistent with the prior judgment. Meanwhile, the cases of exception are analyzed seriously, and are found to be caused by randomness of pixel selection and abandoned blocks in PVD scheme. In summary, the unity of theory and practice completely indicates the effectiveness of our new method.","PeriodicalId":152599,"journal":{"name":"International Conference on Cryptography, Security and Privacy","volume":"449 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-03-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133566045","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

A Practical Compartmentation Approach for the Android App Coexistence Android应用共存的实用划分方法

International Conference on Cryptography, Security and Privacy Pub Date : 2017-03-17 DOI: 10.1145/3058060.3058073

Hongmu Han, Ruixuan Li

{"title":"A Practical Compartmentation Approach for the Android App Coexistence","authors":"Hongmu Han, Ruixuan Li","doi":"10.1145/3058060.3058073","DOIUrl":"https://doi.org/10.1145/3058060.3058073","url":null,"abstract":"Android operation system (OS) provides a number of covert and overt communication channels between applications. This significant promotes inter-app collaboration and reduces development time and cost by facilitating component reuse. Unfortunately, inter-app communication has been shown to be vulnerable to privilege escalation attacks, such as confused deputy attacks, collusion attacks. It is an economic and effective method to mitigate privilege escalation attacks by isolation. However, it is unclear which apps should be put together in the same compartment. In addition, users rely on some inter-app collaborations to provide services.\u0000 This paper seeks a practice isolation approach which keeps app usage patterns and mitigates security threats from inter-app communication for apps coexistence. To this end, we introduce association rules to mine practical app usage patterns which users like to put some apps together on the same device and rely on the collaboration between these apps to provide services. In addition, we propose inter-app communication analysis to filter out uninteresting rules. Furthermore, we propose a security compartmentation approach that segregates apps into isolated groups and keeps practical app usage patterns in compartments. The method leverages a risk assessment method which assesses the perils of apps coexistence and conveys compartmentation problem to knapsack problem. Our experiments used 3 classical heuristic algorithms to solve the knapsack problem and discuss how good compartmentation solutions can be obtained.","PeriodicalId":152599,"journal":{"name":"International Conference on Cryptography, Security and Privacy","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-03-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130625945","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

A Semi-Formal Multi-Policy Secure Model for Semantic Spatial Trajectories 语义空间轨迹的半形式化多策略安全模型

International Conference on Cryptography, Security and Privacy Pub Date : 2017-03-17 DOI: 10.1145/3058060.3058063

Xingang Wang, Kuo Guo, Zhigang Gai

引用次数: 0

Features of the Photon Pulse Detection Algorithm in the Quantum Key Distribution System 量子密钥分发系统中光子脉冲检测算法的特点

International Conference on Cryptography, Security and Privacy Pub Date : 2017-03-17 DOI: 10.1145/3058060.3058078

A. Pljonkin

引用次数: 12

MGeT: Malware Gene-Based Malware Dynamic Analyses 基于恶意软件基因的恶意软件动态分析

International Conference on Cryptography, Security and Privacy Pub Date : 2017-03-17 DOI: 10.1145/3058060.3058065

Jianwei Ding, Zhouguo Chen, Yue Zhao, Hong Su, Yubin Guo, Enbo Sun

{"title":"MGeT: Malware Gene-Based Malware Dynamic Analyses","authors":"Jianwei Ding, Zhouguo Chen, Yue Zhao, Hong Su, Yubin Guo, Enbo Sun","doi":"10.1145/3058060.3058065","DOIUrl":"https://doi.org/10.1145/3058060.3058065","url":null,"abstract":"Malware, as a malicious software, or applications or execution codes, has become the centerpiece of most security threats in such a unceasing open Internet environment. The essential technology of malware analysis is to extract the characteristics of malware, intended to supply signatures to detection systems and provide evidence for recovery and cleanup. The focal point in the malware analysis is how to detect malicious behaviors versus how to hide a malware analyzer from malware during runtime. In this paper, we propose an approach called Malware Gene Topology Model (MGeT) inspired by Biotechnological Genomics that can quickly detect potential malware from a large amount of software or execution codes including metamorphic or new variants of malware. Instead of extracting the signatures from the malware in the execution file level or operating system level, we identify the key malicious behaviors of malware by the underlying instructions, named malware Gene. We evaluate our method based on real-world datasets and the results demonstrate the advantages of our method over the previous studies, validating the contribution of our method.","PeriodicalId":152599,"journal":{"name":"International Conference on Cryptography, Security and Privacy","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-03-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129653801","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

Logical Language of Certificate-Based Access Control in Security Models 安全模型中基于证书的访问控制逻辑语言

International Conference on Cryptography, Security and Privacy Pub Date : 2017-03-17 DOI: 10.1145/3058060.3058067

M. Kucherov, N. Bogulskaya

引用次数: 0