2009 International Conference on Availability, Reliability and Security最新文献_第2页

Post-Distribution Provisioning and Personalization of a Payment Application on a UICC-Based Secure Element 基于uicc安全元素的支付应用分发后配置和个性化

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.98

V. Alimi, M. Pasquet

引用次数: 25

An Authentication Watermark Algorithm for JPEG images 一种用于JPEG图像的认证水印算法

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.8

Xi Shi, Fenlin Liu, Daofu Gong, Jing Jing

引用次数: 3

Prioritisation and Selection of Software Security Activities 软件安全活动的优先次序和选择

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.52

David Byers, N. Shahmehri

引用次数: 9

An Improvement to a Decentralized Management Method for Uniquely Accessible Attribute Information 一种唯一可访问属性信息分散管理方法的改进

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.21

Yoshio Kakizaki, Y. Yoshida, H. Tsuji

引用次数: 1

Advanced Flooding Attack on a SIP Server 高级flood攻击SIP服务器

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.15

Xianglin Deng, Malcolm Shore

引用次数: 18

Security Credential Mapping in Grids 网格中的安全凭证映射

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.93

Mehran Ahsant, Esteban Talavera Gonzalez, J. Basney

引用次数: 5

AVISPA in the Validation of Ambient Intelligence Scenarios 环境智能场景验证中的AVISPA

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.80

A. Muñoz, A. Maña, D. Serrano

{"title":"AVISPA in the Validation of Ambient Intelligence Scenarios","authors":"A. Muñoz, A. Maña, D. Serrano","doi":"10.1109/ARES.2009.80","DOIUrl":"https://doi.org/10.1109/ARES.2009.80","url":null,"abstract":"Ambient Intelligence (AmI) refers to an environment that is sensitive, responsive, interconnected, contextualized, transparent, intelligent, and acting on behalf of humans. AmI environments impose some constraints in the connectivity framework, power computing as well as energy budget. This makes of AmI a significantly different case within distributed systems. The combination of heterogeneity, dynamism, sheer number of devices, along with the growing demands placed on software security and dependability, make application development vastly more complex. Also, the provision of security and dependability for applications becomes increasingly difficult to achieve with the existing security engineering mechanisms and tools. Furthermore the validation of these mechanisms is even a hard task. In this paper we present an approach to model dynamic changes in ambient intelligence scenarios using the Avispa (Automated Validation of Internet Security Protocols and Applications) model-checking tool suite. The main goal ofour approach consists on providing a starting point in the use of Formal Description Techniques (FDM) for AmI scenarios. The paper studies and assesses the suitability of the Avispa tool for security validation in Ambient Intelligent environments and proposes mechanisms to capture the dynamic context changes in these environments.","PeriodicalId":169468,"journal":{"name":"2009 International Conference on Availability, Reliability and Security","volume":"19 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-03-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115007663","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 13

P2F: A User-Centric Privacy Protection Framework P2F:以用户为中心的隐私保护框架

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.167

Maryam Jafari-lafti, Chin-Tser Huang, C. Farkas

引用次数: 4

An Analysis of Fault Effects and Propagations in AVR Microcontroller ATmega103(L) AVR单片机ATmega103(L)故障影响及传播分析

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.169

Alireza Rohani, H. Zarandi

引用次数: 19

Comparison of Risk Analysis Methods: Mehari, Magerit, NIST800-30 and Microsoft's Security Management Guide 风险分析方法的比较:Mehari, Magerit, NIST800-30和微软的安全管理指南

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.75

Amril Syalim, Y. Hori, K. Sakurai

{"title":"Comparison of Risk Analysis Methods: Mehari, Magerit, NIST800-30 and Microsoft's Security Management Guide","authors":"Amril Syalim, Y. Hori, K. Sakurai","doi":"10.1109/ARES.2009.75","DOIUrl":"https://doi.org/10.1109/ARES.2009.75","url":null,"abstract":"In this paper we compare four risk analysis methods: Mehari, Magerit, NIST800-30 and Microsoft's Security Management Guide. Mehari is a method for risk analysis and risk management developed by CLUSIF (Club de la Securite del' Information Francais). Magerit is a risk analysis and management methodology for information systems developed by CSAE (Consejo Superior de Administracion Electronica). NIST800-30 is a risk management guide for information technology systems recommended by the National Institute of Standard and Technology (NIST) in NIST Special Publication 800-30. Microsoft’s Security Management Guide is a security risk management guide developed by Microsoft. In this paper, we compare those methods based on two main criteria: the first criterion is the steps that are used by the methods to conduct the risk assessment, the second one is the contents of the methods and supplementary documents provided with them. We found that all methods follow the first three general steps of risk analysis. However, the Mehari method, the Magerit method and the Microsoft Security Management Guide do not include control recommendations. Control recommendations in these methods are proposed as the next step to security management (i.e. after risk analysis). All methods provide a detailed guide for risk analysis. However, only three methods — Mehari, Magerit and the one proposed in the Microsoft Security Management Guide—provide supplementary documents for risk assessment.","PeriodicalId":169468,"journal":{"name":"2009 International Conference on Availability, Reliability and Security","volume":"127 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-03-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123442755","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 58