Proceedings of the Symposium and Bootcamp on the Science of Security最新文献

Visualizing the variational callgraph of the Linux kernel: an approach for reasoning about dependencies [poster] 可视化Linux内核的变写法:一种推断依赖关系的方法[海报]

Proceedings of the Symposium and Bootcamp on the Science of Security Pub Date : 2016-04-19 DOI: 10.1145/2898375.2898398

M. Malik, J. Pfeffer, G. Ferreira, Christian Kästner

引用次数: 1

Expressing and reasoning about conflicting norms in cybersecurity: poster 网络安全规范冲突的表达与推理:海报

Proceedings of the Symposium and Bootcamp on the Science of Security Pub Date : 2016-04-19 DOI: 10.1145/2898375.2898395

Jiaming Jiang, Nirav Ajmeri, Rada Y. Chirkova, J. Doyle, Munindar P. Singh

引用次数: 0

Modeling, analyzing, and consistency checking privacy requirements using eddy 使用eddy对隐私需求进行建模、分析和一致性检查

Proceedings of the Symposium and Bootcamp on the Science of Security Pub Date : 2016-04-19 DOI: 10.1145/2898375.2898381

Daniel Smullen, T. Breaux

引用次数: 3

Security is about control: insights from cybernetics 安全关乎控制:来自控制论的见解

Proceedings of the Symposium and Bootcamp on the Science of Security Pub Date : 2016-04-19 DOI: 10.1145/2898375.2898379

Antonio Roque, K. Bush, Christopher Degni

引用次数: 7

Controller synthesis for linear dynamical systems with adversaries 具有对手的线性动力系统的控制器综合

Proceedings of the Symposium and Bootcamp on the Science of Security Pub Date : 2016-04-19 DOI: 10.1145/2898375.2898378

Zhenqi Huang, Yu Wang, S. Mitra, G. Dullerud

{"title":"Controller synthesis for linear dynamical systems with adversaries","authors":"Zhenqi Huang, Yu Wang, S. Mitra, G. Dullerud","doi":"10.1145/2898375.2898378","DOIUrl":"https://doi.org/10.1145/2898375.2898378","url":null,"abstract":"We present a controller synthesis algorithm for a reach-avoid problem in the presence of adversaries. Our model of the adversary abstractly captures typical malicious attacks envisioned on cyber-physical systems such as sensor spoofing, controller corruption, and actuator intrusion. After formulating the problem in a general setting, we present a sound and complete algorithm for the case with linear dynamics and an adversary with a budget on the total L2-norm of its actions. The algorithm relies on a result from linear control theory that enables us to decompose and compute the reachable states of the system in terms of a symbolic simulation of the adversary-free dynamics and the total uncertainty induced by the adversary. With this decomposition, the synthesis problem eliminates the universal quantifier on the adversary's choices and the symbolic controller actions can be effectively solved using an SMT solver. The constraints induced by the adversary are computed by solving second-order cone programmings. The algorithm is later extended to synthesize state-dependent controller and to generate attacks for the adversary. We present preliminary experimental results that show the effectiveness of this approach on several example problems.","PeriodicalId":163427,"journal":{"name":"Proceedings of the Symposium and Bootcamp on the Science of Security","volume":"23 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-04-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123862888","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4

Text analytics for security: tutorial 用于安全的文本分析:教程

Proceedings of the Symposium and Bootcamp on the Science of Security Pub Date : 2016-04-19 DOI: 10.1145/2898375.2898397

Tao Xie, W. Enck

引用次数: 2

Characterizing cybersecurity jobs: applying the cyber aptitude and talent assessment framework 网络安全工作的特征:应用网络能力和人才评估框架

Proceedings of the Symposium and Bootcamp on the Science of Security Pub Date : 2016-04-19 DOI: 10.1145/2898375.2898394

Susan G. Campbell, Lelyn D. Saner, Michael F. Bunting

{"title":"Characterizing cybersecurity jobs: applying the cyber aptitude and talent assessment framework","authors":"Susan G. Campbell, Lelyn D. Saner, Michael F. Bunting","doi":"10.1145/2898375.2898394","DOIUrl":"https://doi.org/10.1145/2898375.2898394","url":null,"abstract":"Characterizing what makes cybersecurity professions difficult involves several components, including specifying the cognitive and functional requirements for performing job-related tasks. Many frameworks that have been proposed are focused on functional requirements of cyber work roles, including the knowledge, skills, and abilities associated with them. In contrast, we have proposed a framework for classifying cybersecurity jobs according to the cognitive demands of each job and for matching applicants to jobs based on their aptitudes for key cognitive skills (e.g., responding to network activity in real-time). In this phase of research, we are investigating several cybersecurity jobs (such as operators vs. analysts), converting the high-level functional tasks of each job into elementary tasks, in order to determine what cognitive requirements distinguish the jobs. We will then examine how the models of cognitive demands by job can be used to inform the designs of aptitude tests for different kinds of jobs. In this poster, we will describe our framework in more detail and how it can be applied toward matching people with the jobs that fit them best.","PeriodicalId":163427,"journal":{"name":"Proceedings of the Symposium and Bootcamp on the Science of Security","volume":"70 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-04-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128640268","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

A model-based approach to anomaly detection in software architectures 软件体系结构中基于模型的异常检测方法

Proceedings of the Symposium and Bootcamp on the Science of Security Pub Date : 2016-04-19 DOI: 10.1145/2898375.2898401

Hemank Lamba, Thomas J. Glazier, B. Schmerl, J. Cámara, D. Garlan, J. Pfeffer

引用次数: 3

Optimal thresholds for intrusion detection systems 入侵检测系统的最佳阈值

Proceedings of the Symposium and Bootcamp on the Science of Security Pub Date : 2016-04-19 DOI: 10.1145/2898375.2898399

Aron Laszka, W. Abbas, S. Sastry, Yevgeniy Vorobeychik, X. Koutsoukos

{"title":"Optimal thresholds for intrusion detection systems","authors":"Aron Laszka, W. Abbas, S. Sastry, Yevgeniy Vorobeychik, X. Koutsoukos","doi":"10.1145/2898375.2898399","DOIUrl":"https://doi.org/10.1145/2898375.2898399","url":null,"abstract":"In recent years, we have seen a number of successful attacks against high-profile targets, some of which have even caused severe physical damage. These examples have shown us that resourceful and determined attackers can penetrate virtually any system, even those that are secured by the \"air-gap.\" Consequently, in order to minimize the impact of stealthy attacks, defenders have to focus not only on strengthening the first lines of defense but also on deploying effective intrusion-detection systems. Intrusion-detection systems can play a key role in protecting sensitive computer systems since they give defenders a chance to detect and mitigate attacks before they could cause substantial losses. However, an over-sensitive intrusion-detection system, which produces a large number of false alarms, imposes prohibitively high operational costs on a defender since alarms need to be manually investigated. Thus, defenders have to strike the right balance between maximizing security and minimizing costs. Optimizing the sensitivity of intrusion detection systems is especially challenging in the case when multiple inter-dependent computer systems have to be defended against a strategic attacker, who can target computer systems in order to maximize losses and minimize the probability of detection. We model this scenario as an attacker-defender security game and study the problem of finding optimal intrusion detection thresholds.","PeriodicalId":163427,"journal":{"name":"Proceedings of the Symposium and Bootcamp on the Science of Security","volume":"14 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-04-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114788685","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 37

Security practices in DevOps DevOps中的安全实践

Proceedings of the Symposium and Bootcamp on the Science of Security Pub Date : 2016-04-19 DOI: 10.1145/2898375.2898383

A. Rahman, L. Williams

{"title":"Security practices in DevOps","authors":"A. Rahman, L. Williams","doi":"10.1145/2898375.2898383","DOIUrl":"https://doi.org/10.1145/2898375.2898383","url":null,"abstract":"DevOps focuses on collaboration between different teams in an organization to achieve rapid deployment of software and services to end-users by automating the software delivery infrastructure. According to Dyck et al. [1] DevOps is a software process that emphasizes collaboration within and between different teams involved in software development. According to a study from CA Technologies [5], 88% of 1425 organization executives stated that they have adopted DevOps, or are planning to adopt DevOps in the next five years. According to Puppet Labs' 2015 State of DevOps Report [2], organizations that have adopted DevOps experienced 60 times fewer failures and deploy 30 times more frequently than organizations that have not adopted DevOps. Despite the popularity, security aspects of DevOps remain a concern for organizations that want to adopt DevOps [5]. In organizations that use DevOps practices, developers can commit and deploy their software changes at a rapid rate using an automated pipeline. At such a rapid rate, if the security team operates in isolation without close collaboration with the development and operations teams, then the rapidly deployed software changes might not undergo the adequate security reviews, potentially leading to vulnerable software. Bringing security principles within the DevOps process can help the organization in achieving better quality of software by integrating security checks into the phases of development, testing, and deployment.","PeriodicalId":163427,"journal":{"name":"Proceedings of the Symposium and Bootcamp on the Science of Security","volume":"38 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-04-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124140821","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 14