2009 International Conference on Availability, Reliability and Security最新文献_第7页

Methodology to Align Business and IT Policies: Use Case from an IT Company 对齐业务和IT策略的方法:来自IT公司的用例

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.47

C. Feltus, Christophe Incoul, Jocelyn Aubert, B. Gâteau, André Adelsbach, Marc Camy

引用次数: 3

Choosing Parameters to Achieve a Higher Success Rate for Hellman Time Memory Trade Off Attack 选择参数以获得更高的Hellman时间记忆权衡攻击成功率

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.140

N. Saran, A. Doganaksoy

引用次数: 9

Multidimensional Management of Information Security – A Metrics Based Approach Merging Business and Information Security Topics 信息安全的多维管理——一种融合业务和信息安全主题的基于度量的方法

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.26

Sebastian Sowa, Roland Gabriel

引用次数: 4

Polymorphic Worm Detection by Analyzing Maximum Length of Instruction Sequence in Network Packets 分析网络数据包中指令序列最大长度的多态蠕虫检测

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.103

K. Tatara, Y. Hori, K. Sakurai

引用次数: 1

The Accountability Problem of Flooding Attacks in Service-Oriented Architectures 面向服务架构中泛洪攻击的责任问题

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.11

Meiko Jensen, Jörg Schwenk

引用次数: 24

A Mobile Ambients-Based Approach for Network Attack Modelling and Simulation 基于移动环境的网络攻击建模与仿真方法

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.125

V. N. Franqueira, P. V. Eck, R. Wieringa, R. Lopes

{"title":"A Mobile Ambients-Based Approach for Network Attack Modelling and Simulation","authors":"V. N. Franqueira, P. V. Eck, R. Wieringa, R. Lopes","doi":"10.1109/ARES.2009.125","DOIUrl":"https://doi.org/10.1109/ARES.2009.125","url":null,"abstract":"Attack Graphs are an important support for assessment and subsequent improvement of network security. They reveal possible paths an attacker can take to break through security perimeters and traverse a network to reach valuable assets deep inside the network. Although scalability is no longer the main issue, Attack Graphs still have some problems that make them less useful in practice. First, Attack Graphs remain difficult to relate to the network topology. Second, Attack Graphs traditionally only consider the exploitation of vulnerable hosts. Third, Attack Graphs do not rely on automatic identification of potential attack targets. We address these gaps in our MsAMS (Multi-step Attack Modelling and Simulation) tool, based on Mobile Ambients. The tool not only allows the modelling of more static aspects of the network, such as the network topology, but also the dynamics of network attacks. In addition to Mobile Ambients, we use the PageRank algorithm to determine targets and hub scores produced by the HITS (Hypertext Induced Topic Search) algorithm to guide the simulation of an attacker searching for targets.","PeriodicalId":169468,"journal":{"name":"2009 International Conference on Availability, Reliability and Security","volume":"10 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-03-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122031169","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6

On the Security of Untrusted Memory 关于不可信内存的安全性

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.7

Jörn-Marc Schmidt, S. Tillich

{"title":"On the Security of Untrusted Memory","authors":"Jörn-Marc Schmidt, S. Tillich","doi":"10.1109/ARES.2009.7","DOIUrl":"https://doi.org/10.1109/ARES.2009.7","url":null,"abstract":"Embedded systems can be used in versatile applications. At the same time, more and more functionality is demanded from these systems, which necessitates an increase in the size of program and data memory. Thus, an external chip providing additional memory can be added to the microcontroller, which is the system's core component. However, the connection between microcontroller chip and external memory is an easy target for an attacker. A small alteration in an external program memory can already lead to a radical change in the overall behavior of the embedded system. In security-related applications, such a change in behavior can result in potentially catastrophic consequences. Although there have been proposals for schemes to protect certain aspects of the use of external memories, none provides a comprehensive analysis of potential threats and respective countermeasures. Therefore, we propose a new scheme to detect all manipulations of data in the external memory as well as to prevent an adversary from learning potentially compromising information about the program running inside the microcontroller. Although our scheme entails a non-negligible overhead in terms of processing effort and memory, it is, to the best of our knowledge, the first to provide a practical, uniform and coherent protection for external memory.","PeriodicalId":169468,"journal":{"name":"2009 International Conference on Availability, Reliability and Security","volume":"13 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-03-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128052204","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

An Inclusive Information Society Needs a Global Approach of Information Security 包容的信息社会需要全球性的信息安全策略

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.127

S. Ghernaouti-Helie

引用次数: 8

A Reconfigurable-Permutation Algorithm for M_S-Box M_S-Box的可重构置换算法

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.70

Hiroshi Kudou, S. Nakayama, A. Watanabe, T. Nagase, Y. Yoshioka

{"title":"A Reconfigurable-Permutation Algorithm for M_S-Box","authors":"Hiroshi Kudou, S. Nakayama, A. Watanabe, T. Nagase, Y. Yoshioka","doi":"10.1109/ARES.2009.70","DOIUrl":"https://doi.org/10.1109/ARES.2009.70","url":null,"abstract":"The developments of differential and linear cryptanalysis methods were capable to breach the security of the DES cipher. Accordingly, the National Institute of Standards and Technology (NIST) issued a new standard named Advanced Encryption Standard (AES) which had SPN (Substitution Permutation Network) structure as a new next generation code standard method as a replacement for DES. However, this method has also found a hole in the security level of the AES, especially in the AES’s S-box. This paper proposes a new mutable nonlinear transformation algorithm for AES S-box to enhance the complexity of the S-Box's structure called M_S-box that effectively provides an optimal degree of resistance against differential cryptanalysis and especially the linear cryptanalysis. The structure of the AES S-box has been expanded and modified to be congruent with the proposed algorithm and to obtain good nonlinearity of the S-box. The Cryptanalysis of the model is based on the maximum average differential probability (MADP) and maximum average linear hull probability (MALHP). The results show that proposed model significantly improves MADP and MALHP. Furthermore, the results that have been obtained exhibit good enough confusions to achieve high security level.","PeriodicalId":169468,"journal":{"name":"2009 International Conference on Availability, Reliability and Security","volume":"13 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-03-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123830365","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

A Knowledge Management Approach to Support a Secure Software Development 支持安全软件开发的知识管理方法

2009 International Conference on Availability, Reliability and Security Pub Date : 2009-03-16 DOI: 10.1109/ARES.2009.155

F. Nunes, A. D. Belchior, A. Albuquerque

引用次数: 2