{"title":"Dynamic Permission Re-enforcement Technique for Protecting Application from Others with Over-privileged Permission at Run Time","authors":"Bo-heung Chung, Youngsung Jeon, Jeongnyeo Kim","doi":"10.1109/SECTECH.2015.8","DOIUrl":"https://doi.org/10.1109/SECTECH.2015.8","url":null,"abstract":"Recently users want to have more powerful devices and capabilities to satisfy their demands ever than before. However, there are many vulnerabilities caused by uncontrolled and over-privileged permission at run time. Without this concern to correctly control the permission at execution time, we propose dynamically enforce permission technique in the paper. For this purpose, we classify applications as secure or non-secure and validate their permissions at run time. If the secure one is already running, the other which has the same permission will be suspended until the former finishes his execution. Providing dynamic control of permission, we implement our technique on Android with slightly modifying a few Java classes in it. With the help of our proposed method, users can easily execute their secure application in separated from others and find over-privileged permission a run time. Through this technique we can efficiently prohibit unintended application's behavior to attain higher privilege without theirs acknowledgement.","PeriodicalId":159290,"journal":{"name":"2015 8th International Conference on Security Technology (SecTech)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129301714","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
A. Avgerou, P. Nastou, Dimitra Nastouli, P. Pardalos, Y. Stamatiou
{"title":"Adopting an ABCs Authentication Framework for Collective Intelligent eBusiness Models in Smart Cities","authors":"A. Avgerou, P. Nastou, Dimitra Nastouli, P. Pardalos, Y. Stamatiou","doi":"10.1109/SECTECH.2015.16","DOIUrl":"https://doi.org/10.1109/SECTECH.2015.16","url":null,"abstract":"Nowadays, the majority of humans live in a world ofinterconnected cities. A contemporary city attempts to improve the quality of citizens' life and its economy by integrating digital infrastructures with the physical city (smart city). Moreover, citizens in smart cities are playing the centralrole in the majority of eBusiness models that are based onCollective Intelligent decision making applications. However, citizens avoid the participation in such applications by providing data because they feel that there is a risk of correlating their activities and data with their identities. Thus, there is a need to protect citizens' privacy in the territory of a smart city while encouraging them to participate in the establishment of new markets. In this paper, the encapsulation of an ABCs based authentication system in a generic eBusiness model that provides Collective Intelligent eServices in Smart Cities is presented. In the emerging eBusiness Model, the user privacy/anonymity hasa central role which increases user incentives to participatein the establishment of new markets and products in a city territory.","PeriodicalId":159290,"journal":{"name":"2015 8th International Conference on Security Technology (SecTech)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131242698","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Privacy Preservation and Protection Scheme over ALARM on Geographical Routing","authors":"B. Muthusenthil, S. Murugavalli, Hyunsung Kim","doi":"10.1109/SECTECH.2015.10","DOIUrl":"https://doi.org/10.1109/SECTECH.2015.10","url":null,"abstract":"Routing and security is a major issue in mobile ad-hoc networks due to dynamic network topology. Each node may compromise the packet routing functionality by disrupting the route discovery technique. Clustering divides a physical network into disjoint virtual sub networks in each cluster consisting of fewer nodes. The cluster based routing schemes in Mobile ad-hoc network are used to reduce the channel contention in networks with a numerous number of nodes. Privacy preservation and protection scheme is proposed to protect mobile ad hoc network link layer and operations of delivering packet over the location based routing or geographical routing.","PeriodicalId":159290,"journal":{"name":"2015 8th International Conference on Security Technology (SecTech)","volume":"9 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130480383","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Security and Privacy Framework for Academic Monitoring System","authors":"B. Muthusenthil, C. Vijayakumaran, Hyunsung Kim","doi":"10.1109/SECTECH.2015.9","DOIUrl":"https://doi.org/10.1109/SECTECH.2015.9","url":null,"abstract":"Mobile device based academic monitoring system (AMS) are inherently open systems and thereby vulnerable to various attacks. This paper proposes a security and privacy framework for AMS, which is based on a security model with the tree permission hierarchy using bilinear pairing. The proposed framework supports privacy based on anonymity, untraceability, and security for confidentiality, integrity, nonrepudiation, key management, and authentication and so on.","PeriodicalId":159290,"journal":{"name":"2015 8th International Conference on Security Technology (SecTech)","volume":"54 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116636456","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"The Butterfly Algorithm Eliminating the Brute-Force Mechanism in ARIZ for Contradiction Problem Solving","authors":"J. Hyun, Chan Jung Park","doi":"10.1109/SECTECH.2015.15","DOIUrl":"https://doi.org/10.1109/SECTECH.2015.15","url":null,"abstract":"TRIZ solves difficult problems by finding contradictions in the problem itself. In TRIZ, a technical contradiction occurs when one function of a system is enhanced, the other function is deteriorated at the same time, and vice versa. On the other hand, a physical contradiction appears when two opposite properties are required from the same part of a system. Among TRIZ components, the ARIZ, algorithm for inventive problem solving, has developed by Altshuller for reducing trial-and-error while solving problems. It transforms difficult technical contradictions of a given problem into the corresponding physical contradiction to solve the problem easily. However, ARIZ-85c, the most recent version of the ARIZ, still has the brute-force feature inside. In this paper, we propose the Butterfly algorithm based on the Butterfly diagram to reduce the brute-force feature by giving the right direction when selecting technical contradictions and physical contradictions.","PeriodicalId":159290,"journal":{"name":"2015 8th International Conference on Security Technology (SecTech)","volume":"32 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131543168","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
S. Sharma, D. Bhattacharyya, M. Patra, Tai-hoon Kim
{"title":"A New Parallel Hybrid Model - Intrusion Prevention Systems","authors":"S. Sharma, D. Bhattacharyya, M. Patra, Tai-hoon Kim","doi":"10.1109/SECTECH.2015.17","DOIUrl":"https://doi.org/10.1109/SECTECH.2015.17","url":null,"abstract":"In recent days it becomes very difficult task to manage security on large network and practically not possible to keep security scanner on every networks for protecting the system from illegal users. This problem can be solved with prevention systems which come in strategic role of Intrusion Prevention Systems that is taken as extended and enhanced version of IDS. By using this system we can upgrade the security and it can make the latest network security brand hybrid model for achieving the new level of security system. As IPS is constructed and configure dynamically, then it can be design and installed with any hardware and user friendly platform. In this newly designed system lots of activity is to be handle like screening, blocking and terminating the connected line just before the host port. In our propose system IPS(PH-IPS) is constructed with multilevel checking in which every input is passing through the multilevel check post which is deployed before firewall and minimizing the maximum risk of firewall of the personal networks. After qualifying the test which is allocated by classifier via controller and allocation module only requested object will be allotted token to enter into the personal network for achieving their work execution.","PeriodicalId":159290,"journal":{"name":"2015 8th International Conference on Security Technology (SecTech)","volume":"118 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"120891637","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Security Threats Analysis and Considerations for Internet of Things","authors":"Yunjung Lee, Yongjoon Park, Dohyeun Kim","doi":"10.1109/SECTECH.2015.14","DOIUrl":"https://doi.org/10.1109/SECTECH.2015.14","url":null,"abstract":"We analyze new security threats caused by open-platform of Internet of Things (IoT) and interconnectivities among various smart devices and sensors via the Internet, and provide considerations for establishing standards and secure IoT service for future work.","PeriodicalId":159290,"journal":{"name":"2015 8th International Conference on Security Technology (SecTech)","volume":"12 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114905884","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Secure Collaboration Platform: A Case Study in the Biosecurity Domain","authors":"Jane Li, J. Zic, N. Oakes, Dongxi Liu, Chen Wang","doi":"10.1109/SECTECH.2015.11","DOIUrl":"https://doi.org/10.1109/SECTECH.2015.11","url":null,"abstract":"We have investigated the design of a secure collaboration platform to support real-time information sharing across professional and organizational boundaries in the context of emergency animal disease response. The platform integrates cross-organisational eAuthentication and eAuthorisation technologies to enable access control of shared data resources between geographically distributed experts in their collaborative meetings. We have conducted an evaluation user study to understand how the integrated platform can provide the basis of secure information sharing, particularly the real-time diagnostics information from laboratory instruments.","PeriodicalId":159290,"journal":{"name":"2015 8th International Conference on Security Technology (SecTech)","volume":"13 4","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"120924193","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}