Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001最新文献

Graph-based authentication of digital streams 基于图形的数字流认证

Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001 Pub Date : 2001-05-14 DOI: 10.1109/SECPRI.2001.924301

Sara Miner More, Jessica Staddon

引用次数: 171

Information-theoretic measures for anomaly detection 异常检测的信息论方法

Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001 Pub Date : 2001-05-14 DOI: 10.1109/SECPRI.2001.924294

Wenke Lee, Dong Xiang

引用次数: 638

A fast automaton-based method for detecting anomalous program behaviors 一种基于快速自动机的异常程序行为检测方法

Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001 Pub Date : 2001-05-14 DOI: 10.1109/SECPRI.2001.924295

R. Sekar, M. Bendre, Dinakar Dhurjati, P. Bollineni

{"title":"A fast automaton-based method for detecting anomalous program behaviors","authors":"R. Sekar, M. Bendre, Dinakar Dhurjati, P. Bollineni","doi":"10.1109/SECPRI.2001.924295","DOIUrl":"https://doi.org/10.1109/SECPRI.2001.924295","url":null,"abstract":"Anomaly detection on system call sequences has become perhaps the most successful approach for detecting novel intrusions. A natural way for learning sequences is to use a finite-state automaton (FSA). However previous research indicates that FSA-learning is computationally expensive, that it cannot be completely automated or that the space usage of the FSA may be excessive. We present a new approach that overcomes these difficulties. Our approach builds a compact FSA in a fully automatic and efficient manner, without requiring access to source code for programs. The space requirements for the FSA is low - of the order of a few kilobytes for typical programs. The FSA uses only a constant time per system call during the learning as well as the detection period. This factor leads to low overheads for intrusion detection. Unlike many of the previous techniques, our FSA-technique can capture both short term and long term temporal relationships among system calls, and thus perform more accurate detection. This enables our approach to generalize and predict future behaviors from past behaviors. As a result, the training periods needed for our FSA based approach are shorter. Moreover false positives are reduced without increasing the likelihood of missing attacks. This paper describes our FSA based technique and presents a comprehensive experimental evaluation of the technique.","PeriodicalId":20502,"journal":{"name":"Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001","volume":"2 4 1","pages":"144-155"},"PeriodicalIF":0.0,"publicationDate":"2001-05-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"89158561","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 639

Cryptographic key generation from voice 从语音生成加密密钥

Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001 Pub Date : 2001-05-14 DOI: 10.1109/SECPRI.2001.924299

F. Monrose, M. Reiter, Qi Li, S. Wetzel

引用次数: 383

On confidentiality and algorithms: programming under the constraints of noninterference 机密性与算法:非干扰约束下的程序设计

Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001 Pub Date : 2001-05-14 DOI: 10.1109/SECPRI.2001.924288

Johan Agat, David Sands

引用次数: 20

Intrusion detection via static analysis 通过静态分析进行入侵检测

Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001 Pub Date : 2001-05-14 DOI: 10.1109/SECPRI.2001.924296

D. Wagner, Drew Dean

引用次数: 773

Protection of keys against modification attack 保护密钥免受修改攻击

Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001 Pub Date : 2001-05-14 DOI: 10.1109/SECPRI.2001.924285

W. W. Fung, M. Golin, J. W. Gray

{"title":"Protection of keys against modification attack","authors":"W. W. Fung, M. Golin, J. W. Gray","doi":"10.1109/SECPRI.2001.924285","DOIUrl":"https://doi.org/10.1109/SECPRI.2001.924285","url":null,"abstract":"Anderson and Kuhn (1997) described an attack against tamper-resistant devices wherein a secret key stored in EEPROM is compromised using a simple and low-cost attack. The attack consists of setting bits in the EEPROM using low-cost probes and observing the effect on the output of the device. These attacks are extremely general, as they apply to virtually any cryptosystem. The objective of the present work is to explore cryptographic techniques with the goal of raising the cost (in terms of time and money) of carrying out the EEPROM modification attack by Class I attackers, at least to a point where it is as prohibitive as the cost of purchasing more expensive equipment. We propose the m-permutation protection scheme in which the key will be encoded in a special way and burned into the EEPROM of the device. To attack the scheme, the attacker needs to be able to solve for K in the equation K=/spl oplus//sub i=1//sup m/P/sub i/ in which P/sub i/'s are unknown. It is observed that the m-permutation protection scheme does not distribute the key K uniformly. Analysis shows that m=3 or m=5 are already good enough practically to provide strong security if the encoding is done properly and that m>5 may not give significant improvement to the security of the scheme.","PeriodicalId":20502,"journal":{"name":"Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001","volume":"42 1","pages":"26-36"},"PeriodicalIF":0.0,"publicationDate":"2001-05-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"79992716","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 8

A model for asynchronous reactive systems and its application to secure message transmission 异步响应系统模型及其在消息安全传输中的应用

Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001 Pub Date : 2001-05-14 DOI: 10.1109/SECPRI.2001.924298

B. Pfitzmann, M. Waidner

引用次数: 391

Evaluation of intrusion detectors: a decision theory approach 入侵探测器的评估:决策理论方法

Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001 Pub Date : 2001-05-14 DOI: 10.1109/SECPRI.2001.924287

J. Gaffney, J. Ulvila

引用次数: 148

Understanding trust management systems 了解信任管理系统

Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001 Pub Date : 2001-05-14 DOI: 10.1109/SECPRI.2001.924290

Stephen Weeks

引用次数: 153