2015 IEEE 28th Computer Security Foundations Symposium最新文献_第4页

Program Actions as Actual Causes: A Building Block for Accountability 作为实际原因的计划行动:问责制的基石

2015 IEEE 28th Computer Security Foundations Symposium Pub Date : 2015-05-05 DOI: 10.1109/CSF.2015.25

Anupam Datta, D. Garg, D. Kaynar, Divya Sharma, Arunesh Sinha

引用次数: 28

Decomposing, Comparing, and Synthesizing Access Control Expressiveness Simulations 访问控制表达性仿真的分解、比较与综合

2015 IEEE 28th Computer Security Foundations Symposium Pub Date : 2015-04-29 DOI: 10.1109/CSF.2015.9

W. C. Garrison, Adam J. Lee

{"title":"Decomposing, Comparing, and Synthesizing Access Control Expressiveness Simulations","authors":"W. C. Garrison, Adam J. Lee","doi":"10.1109/CSF.2015.9","DOIUrl":"https://doi.org/10.1109/CSF.2015.9","url":null,"abstract":"Access control is fundamental to computer security, and has thus been the subject of extensive formal study. In particular, relative expressiveness analysis techniques have used formal mappings called simulations to explore whether one access control system is capable of emulating another, thereby comparing the expressive power of these systems. Unfortunately, the notions of expressiveness simulation that have been explored vary widely, which makes it difficult to compare results in the literature, and even leads to apparent contradictions between results. Furthermore, some notions of expressiveness simulation make use of non-determinism, and thus cannot be used to define mappings between access control systems that are useful in practical scenarios. In this work, we define the minimum set of properties for an implementable access control simulation, i.e., a deterministic \"recipe\" for using one system in place of another. We then define a wide range of properties spread across several dimensions that can be enforced on top of this minimum definition. These properties define a taxonomy that can be used to separate and compare existing notions of access control simulation, many of which were previously incomparable. We position existing notions of simulation within our properties lattice by formally proving each simulation's equivalence to a corresponding set of properties. Lastly, we take steps towards bridging the gap between theory and practice by exploring the systems implications of points within our properties lattice. This shows that relative expressive analysis is more than just a theoretical tool, and can also guide the choice of the most suitable access control system for a specific application or scenario.","PeriodicalId":210917,"journal":{"name":"2015 IEEE 28th Computer Security Foundations Symposium","volume":"10 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-04-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121396662","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4

BitWhisper: Covert Signaling Channel between Air-Gapped Computers Using Thermal Manipulations 使用热操作的气隙计算机之间的隐蔽信号通道

2015 IEEE 28th Computer Security Foundations Symposium Pub Date : 2015-03-26 DOI: 10.1109/CSF.2015.26

Mordechai Guri, Matan Monitz, Yisroel Mirsky, Y. Elovici

{"title":"BitWhisper: Covert Signaling Channel between Air-Gapped Computers Using Thermal Manipulations","authors":"Mordechai Guri, Matan Monitz, Yisroel Mirsky, Y. Elovici","doi":"10.1109/CSF.2015.26","DOIUrl":"https://doi.org/10.1109/CSF.2015.26","url":null,"abstract":"It has been assumed that the physical separation ('air-gap') of computers provides a reliable level of security, such that should two adjacent computers become compromised, the covert exchange of data between them would be impossible. In this paper, we demonstrate BitWhisper, a method of bridging the air-gap between adjacent compromised computers by using their heat emissions and built-in thermal sensors to create a covert communication channel. Our method is unique in two respects: it supports bidirectional communication, and it requires no additional dedicated peripheral hardware. We provide experimental results based on the implementation of the Bit-Whisper prototype, and examine the channel's properties and limitations. Our experiments included different layouts, with computers positioned at varying distances from one another, and several sensor types and CPU configurations (e.g., Virtual Machines). We also discuss signal modulation and communication protocols, showing how BitWhisper can be used for the exchange of data between two computers in a close proximity (positioned 0-40 cm apart) at an effective rate of 1-8 bits per hour, a rate which makes it possible to infiltrate brief commands and exfiltrate small amount of data (e.g., passwords) over the covert channel.","PeriodicalId":210917,"journal":{"name":"2015 IEEE 28th Computer Security Foundations Symposium","volume":"77 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-03-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128564740","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 154

A Cut Principle for Information Flow 信息流的切割原则

2015 IEEE 28th Computer Security Foundations Symposium Pub Date : 2014-10-16 DOI: 10.1109/CSF.2015.15

J. Guttman, Paul D. Rowe

引用次数: 14

A Methodology for Information Flow Experiments 信息流实验的方法论

2015 IEEE 28th Computer Security Foundations Symposium Pub Date : 2014-05-09 DOI: 10.1109/CSF.2015.40

Michael Carl Tschantz, Amit Datta, Anupam Datta, Jeannette M. Wing

引用次数: 33