2009 International Conference on Availability, Reliability and Security最新文献_第10页

Ascertaining the Financial Loss from Non-dependable Events in Business Interactions by Using the Monte Carlo Method 用蒙特卡罗方法确定业务交互中不可靠事件的财务损失

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.136

O. Hussain, T. Dillon

引用次数: 3

Trusting User Defined Context in MANETs: Experience from the MIDAS Approach 在MANETs中信任用户定义上下文:来自MIDAS方法的经验

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.112

Vegar Westerlund, Thomas Pronstad, Inger Anne Tøndel, Leendert W. M. Wienhofen

引用次数: 1

Investigating the Implications of Virtual Machine Introspection for Digital Forensics 调查虚拟机自省对数字取证的影响

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.173

K. Nance, Bria N Hay, M. Bishop

引用次数: 41

Towards Intrusion Detection for Encrypted Networks 加密网络入侵检测研究

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.76

V. Goh, J. Zimmermann, M. Looi

{"title":"Towards Intrusion Detection for Encrypted Networks","authors":"V. Goh, J. Zimmermann, M. Looi","doi":"10.1109/ARES.2009.76","DOIUrl":"https://doi.org/10.1109/ARES.2009.76","url":null,"abstract":"Traditionally, network-based Intrusion Detection Systems (NIDS) monitor network traffic for signs of malicious activities. However, with the growing use of Virtual Private Networks (VPNs) that encrypt network traffic, the NIDS can no longer analyse the encrypted data. This essentially negates any protection offered by the NIDS. Although the encrypted traffic can be decrypted at a network gateway for analysis, this compromises on data confidentiality. In this paper, we propose a detection framework which allows a traditional NIDS to continue functioning, without compromising the confidentiality afforded by the VPN. Our approach uses Shamir's secret-sharing scheme and randomised network proxies to enable detection of malicious activities in encrypted channels. Additionally, this approach is able to detect any malicious attempts to forge network traffic with the intention of evading detection. Our experiments show that the probability of a successful evasion is low, at about 0.98% in the worst case. We implement our approach in a prototype and present some preliminary results. Overall, the proposed approach is able to consistently detect intrusions and does not introduce any additional false positives.","PeriodicalId":169468,"journal":{"name":"2009 International Conference on Availability, Reliability and Security","volume":"281 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-03-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121045859","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 24

Identity-Based Hybrid Signcryption 基于身份的混合签名加密

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.44

Fagen Li, Masaaki Shirase, T. Takagi

引用次数: 9

Static Code Analysis to Detect Software Security Vulnerabilities - Does Experience Matter? 静态代码分析检测软件安全漏洞——经验重要吗?

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.163

D. Baca, K. Petersen, B. Carlsson, L. Lundberg

引用次数: 57

State of Cybersecurity and the Roadmap to Secure Cyber Community in Cambodia 柬埔寨网络安全状况和网络社区安全路线图

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.144

S. Cheang, Sinawong Sang

引用次数: 5

Generation of Prototypes for Masking Sequences of Events 事件掩蔽序列原型的生成

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.55

A. Valls, Cristina Gómez-Alonso, V. Torra

{"title":"Generation of Prototypes for Masking Sequences of Events","authors":"A. Valls, Cristina Gómez-Alonso, V. Torra","doi":"10.1109/ARES.2009.55","DOIUrl":"https://doi.org/10.1109/ARES.2009.55","url":null,"abstract":"Sequences of categorical data are in common use to represent sequences of events. In order to transfer such data to third parties for their analysis, masking methods can be applied to satisfy privacy laws and avoid the disclosure of sensitive information. Masking methods distort the data so that privacy is kept at the expenses of some information loss. %Different methods exist, each one trying to find a good trade-off between the risk of disclosure and the information loss. Microaggregation is one of the existing masking methods. In microaggregation small clusters are automatically built and the values of the members of a cluster are substituted by the values of the prototype of that cluster. Due to the fact that microaggregation is an NP-hard problem, heuristic approaches have been developed. Existing methods are mainly devoted to numerical and categorical data. The extension of these methods to sequences of categorical data requires the definition of special algorithms for clustering and prototyping.Artificial Intelligence offers techniques and tools that are appropriate for symbolic data. As in our context the sequences are defined in terms of categorical (symbolic) values, such AI techniques are of special relevance. In this paper, we will use them to propose a new method for generating the prototype of a small group of sequences of categorical values. These results can later be used in e.g. microaggregation.","PeriodicalId":169468,"journal":{"name":"2009 International Conference on Availability, Reliability and Security","volume":"114 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-03-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126707603","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

The Anatomy of Electronic Evidence – Quantitative Analysis of Police E-Crime Data 电子证据的解剖——警察电子犯罪数据的定量分析

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.118

B. Turnbull, Robert Taylor, B. Blundell

引用次数: 19

Information Security Optimization: From Theory to Practice 信息安全优化:从理论到实践

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.106

David Simms

引用次数: 7