2020 17th International ISC Conference on Information Security and Cryptology (ISCISC)最新文献

Improvements on Easypaysy: The Bitcoin’s Layer-2 Accounts Protocol easyypaysy的改进:比特币的第二层账户协议

2020 17th International ISC Conference on Information Security and Cryptology (ISCISC) Pub Date : 2020-09-09 DOI: 10.1109/ISCISC51277.2020.9261905

Elnaz Ebadi, H. Yajam, M. Akhaee

引用次数: 1

Detecting Disk Sectors Data Types Using Hidden Markov Model 利用隐马尔可夫模型检测磁盘扇区数据类型

2020 17th International ISC Conference on Information Security and Cryptology (ISCISC) Pub Date : 2020-09-09 DOI: 10.1109/ISCISC51277.2020.9261906

S. Sadegh Mousavi

引用次数: 2

Analysis of Geometrical Parameters for Remote Side-Channel Attacks on Multi-Tenant FPGAs 多租户fpga远程侧信道攻击的几何参数分析

2020 17th International ISC Conference on Information Security and Cryptology (ISCISC) Pub Date : 2020-09-09 DOI: 10.1109/ISCISC51277.2020.9261904

Milad Salimian, A. Jahanian

{"title":"Analysis of Geometrical Parameters for Remote Side-Channel Attacks on Multi-Tenant FPGAs","authors":"Milad Salimian, A. Jahanian","doi":"10.1109/ISCISC51277.2020.9261904","DOIUrl":"https://doi.org/10.1109/ISCISC51277.2020.9261904","url":null,"abstract":"Considering the dependency between the power consumption of implemented cryptographic algorithms and the data being processed, side-channel analysis methods can reveal the secret information of these systems. It was previously thought that data acquisition of dynamic power needs physical access to these systems, but recent studies show, it is possible to gather information about power consumption from FPGAs without any physical access. High flexibilities of modern FPGAs cause that they are used for cloud accelerator in Platform as a Service (PaaS) system; however, new serious vulnerabilities emerged for these platforms. Although there are some reports about how switching activities from one region of FPGA affect other regions, details of this technique are not analyzed. In this paper, we analyzed the strength of this kind of attack and examined the impact of geometrical and electrical parameters of the victim/attacker modules on the efficiency of this attack. Experimental results and analyses show that the relational location, and the distance of victim/attacker modules, have considerable impacts on the quality of attack. Results of this analysis can help the FPGA manufacturer and IP developers to protect their systems against this serious attack.","PeriodicalId":206256,"journal":{"name":"2020 17th International ISC Conference on Information Security and Cryptology (ISCISC)","volume":"2 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-09-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128296468","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Cost-Effective and Practical Countermeasure against the Template Side Channel Attack 抗模板侧信道攻击的经济实用对策

2020 17th International ISC Conference on Information Security and Cryptology (ISCISC) Pub Date : 2020-09-09 DOI: 10.1109/ISCISC51277.2020.9261918

Farshideh Kordi, Hamed Hossein-Talaee, A. Jahanian

引用次数: 0

A New Method for Ransomware Detection Based on PE Header Using Convolutional Neural Networks 基于PE头卷积神经网络的勒索软件检测新方法

2020 17th International ISC Conference on Information Security and Cryptology (ISCISC) Pub Date : 2020-09-09 DOI: 10.1109/ISCISC51277.2020.9261903

F. Manavi, A. Hamzeh

{"title":"A New Method for Ransomware Detection Based on PE Header Using Convolutional Neural Networks","authors":"F. Manavi, A. Hamzeh","doi":"10.1109/ISCISC51277.2020.9261903","DOIUrl":"https://doi.org/10.1109/ISCISC51277.2020.9261903","url":null,"abstract":"With the spread of information technology in human life, data protection is a critical task. On the other hand, malicious programs are developed, which can manipulate sensitive and critical data and restrict access to this data. Ransomware is an example of such a malicious program that encrypts data, restricts users’ access to the system or their data, and then request a ransom payment. Many types of research have been proposed for ransomware detection. Most of these methods attempt to identify ransomware by relying on program behavior during execution. The main weakness of these methods is that it is not clear how long the program should be monitored to show its real behavior. Therefore, sometimes, these researches cannot early detect ransomware. In this paper, a new method for ransomware detection is proposed that does not require running the program and uses the PE header of the executable files. To extract effective features from the PE header files, an image based on PE header is constructed. Then, according to the advantages of Convolutional Neural Networks in extracting features from images and classifying them, CNN is used. The proposed method achieves 93.33% accuracy. Our results indicate the usefulness and practicality method for ransomware detection.","PeriodicalId":206256,"journal":{"name":"2020 17th International ISC Conference on Information Security and Cryptology (ISCISC)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-09-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129971051","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 13

A Decentralized App Store Using the Blockchain Technology 使用区块链技术的去中心化应用商店

2020 17th International ISC Conference on Information Security and Cryptology (ISCISC) Pub Date : 2020-09-09 DOI: 10.1109/ISCISC51277.2020.9261911

Mahsa Monem Moharrer, Sadegh Dorri Nogoorani

引用次数: 1

Enhancing Monkey to trigger malicious payloads in Android malware 增强Monkey触发Android恶意软件中的恶意载荷

2020 17th International ISC Conference on Information Security and Cryptology (ISCISC) Pub Date : 2020-09-09 DOI: 10.1109/ISCISC51277.2020.9261909

Hayyan Hasan, B. T. Ladani, B. Zamani

{"title":"Enhancing Monkey to trigger malicious payloads in Android malware","authors":"Hayyan Hasan, B. T. Ladani, B. Zamani","doi":"10.1109/ISCISC51277.2020.9261909","DOIUrl":"https://doi.org/10.1109/ISCISC51277.2020.9261909","url":null,"abstract":"Dynamic analysis is a prominent approach in analyzing the behavior of Android apps. To perform dynamic analysis, we need an event generator to execute the app. Monkey is the most popular event generator that is used in Android dynamic analysis. Monkey provides high code coverage, and yet high speed in generating events. However, in the case of malware analysis, Monkey suffers from several limitations. It only considers UI events but no system events. Moreover, it causes disconnecting the connectivity of the test environment during the analysis process. In this paper, we try to enhance Monkey to reduce its limitations while preserving its advantages. The proposed approach includes preparing Monkey with a facility for handling system events and keeping the connectivity of the test environment up during the analysis process. To evaluate the extended version of Monkey, we compare it with its original version regarding two important criteria in the case of malware analysis: the number of called sensitive APIs, and the code coverage. The evaluation process uses 100 randomly selected samples from AMD malware dataset. The results show that enhanced Monkey improves its ability to trigger sensitive APIs, and increases its code coverage.","PeriodicalId":206256,"journal":{"name":"2020 17th International ISC Conference on Information Security and Cryptology (ISCISC)","volume":"3 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-09-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122112642","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

On the Security of Some Recently Proposed Certificateless Signcryption Schemes 最近提出的几种无证书签名加密方案的安全性研究

2020 17th International ISC Conference on Information Security and Cryptology (ISCISC) Pub Date : 2020-09-09 DOI: 10.1109/ISCISC51277.2020.9261917

Parvin Rastegari

引用次数: 0

A Secure and Improved Authentication Scheme for Heterogeneous Wireless Sensor Networks in the Internet of Things Environment 物联网环境下异构无线传感器网络安全改进认证方案

2020 17th International ISC Conference on Information Security and Cryptology (ISCISC) Pub Date : 2020-09-09 DOI: 10.1109/ISCISC51277.2020.9261922

H. Yazdanpanah, M. Azizi, S. M. Pournaghi

引用次数: 2

Security Analysis of an Efficient Authentication Scheme for Vehicular Ad Hoc Networks 一种高效车载Ad Hoc网络认证方案的安全性分析

2020 17th International ISC Conference on Information Security and Cryptology (ISCISC) Pub Date : 2020-09-09 DOI: 10.1109/ISCISC51277.2020.9261912

Saeed Zarbi, Seyed Amir Mortazavi, P. Salehpour

引用次数: 4