2011 Third International Workshop on Cyberspace Safety and Security (CSS)最新文献

A logical high-level framework for Critical Infrastructure resilience and risk assessment 关键基础设施弹性和风险评估的逻辑高级框架

2011 Third International Workshop on Cyberspace Safety and Security (CSS) Pub Date : 2011-10-24 DOI: 10.1109/CSS.2011.6058564

S. Creese, M. Goldsmith, A. Adetoye

引用次数: 7

Identification of correlated network intrusion alerts 识别相关的网络入侵警报

2011 Third International Workshop on Cyberspace Safety and Security (CSS) Pub Date : 2011-10-24 DOI: 10.1109/CSS.2011.6058565

Mirco Marchetti, M. Colajanni, Fabio Manganiello

引用次数: 20

Guidelines for usable cybersecurity: Past and present 可用网络安全指南:过去和现在

2011 Third International Workshop on Cyberspace Safety and Security (CSS) Pub Date : 2011-10-24 DOI: 10.1109/CSS.2011.6058566

Jason R. C. Nurse, S. Creese, M. Goldsmith, K. Lamberts

{"title":"Guidelines for usable cybersecurity: Past and present","authors":"Jason R. C. Nurse, S. Creese, M. Goldsmith, K. Lamberts","doi":"10.1109/CSS.2011.6058566","DOIUrl":"https://doi.org/10.1109/CSS.2011.6058566","url":null,"abstract":"Usability is arguably one of the most significant social topics and issues within the field of cybersecurity today. Supported by the need for confidentiality, integrity, availability and other concerns, security features have become standard components of the digital environment which pervade our lives requiring use by novices and experts alike. As security features are exposed to wider cross-sections of the society, it is imperative that these functions are highly usable. This is especially because poor usability in this context typically translates into inadequate application of cybersecurity tools and functionality, thereby ultimately limiting their effectiveness. With this goal of highly usable security in mind, there have been a plethora of studies in the literature focused on identifying security usability problems and proposing guidelines and recommendations to address them. Our paper aims to contribute to the field by consolidating a number of existing design guidelines and defining an initial core list for future reference. Whilst investigating this topic, we take the opportunity to provide an up-to-date review of pertinent cybersecurity usability issues and evaluation techniques applied to date. We expect this research paper to be of use to researchers and practitioners with interest in cybersecurity systems which appreciate the human and social elements of design.","PeriodicalId":215767,"journal":{"name":"2011 Third International Workshop on Cyberspace Safety and Security (CSS)","volume":"65 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-10-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128379458","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 68

Ramifications of mobile phone advanced O/S on security perceptions and practices 移动电话先进的O/S对安全观念和实践的影响

2011 Third International Workshop on Cyberspace Safety and Security (CSS) Pub Date : 2011-10-24 DOI: 10.1109/CSS.2011.6058568

I. Androulidakis, G. Kandus

{"title":"Ramifications of mobile phone advanced O/S on security perceptions and practices","authors":"I. Androulidakis, G. Kandus","doi":"10.1109/CSS.2011.6058568","DOIUrl":"https://doi.org/10.1109/CSS.2011.6058568","url":null,"abstract":"The present paper correlates advanced operating systems (O/S) in mobile phones to the security perceptions and practices of users. It is based upon the results of a survey that took place in 17 Universities of 10 Eastern and Southern Europe countries. 7172 questionnaires were gathered and processed with the results showing that there is a statistically significant connection between the type of the phone's O/S (advanced or not) and the security feeling, awareness and practices of users. Users of advanced O/S believe they are more informed and feel more secure (both statistically proved). Unfortunately, even though they subjectively feel informed, their actual objective score in regards to awareness questions is lower than that of non advanced O/S users, while their actual security behavior, is just slightly better than that of other users. This false sense of security and awareness renders them more vulnerable than others. In any case, the overall percentages reveal general lack of awareness and moderate attention to security issues, with some even alarming findings. As such, the need for security education, combined with transparent security features in the phones is apparent. Furthermore, in regards to this specific research topic, there are not available any already validated questionnaires. Our research, apart from revealing the situation, aims at providing a basis for the formulation of similar questionnaires for future use.","PeriodicalId":215767,"journal":{"name":"2011 Third International Workshop on Cyberspace Safety and Security (CSS)","volume":"39 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-10-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128132864","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

Secure DHCPv6 that uses RSA authentication integrated with Self-Certified Address 采用RSA认证和自认证地址集成的安全DHCPv6

2011 Third International Workshop on Cyberspace Safety and Security (CSS) Pub Date : 2011-10-24 DOI: 10.1109/CSS.2011.6058569

Zhiyang Su, Hao Ma, Xiaojun Zhang, Bei Zhang

引用次数: 12

Controlling malware HTTP communications in dynamic analysis system using search engine 在搜索引擎动态分析系统中控制恶意软件HTTP通信

2011 Third International Workshop on Cyberspace Safety and Security (CSS) Pub Date : 2011-10-24 DOI: 10.1109/CSS.2011.6058563

Kazufumi Aoki, Takeshi Yagi, Makoto Iwamura, M. Itoh

{"title":"Controlling malware HTTP communications in dynamic analysis system using search engine","authors":"Kazufumi Aoki, Takeshi Yagi, Makoto Iwamura, M. Itoh","doi":"10.1109/CSS.2011.6058563","DOIUrl":"https://doi.org/10.1109/CSS.2011.6058563","url":null,"abstract":"Malware is one of the most serious threats on the Internet. Countermeasures have been developed, but still many users are infected. Detecting and preventing communication by infected users from the network side would effectively mitigate the threats of malware. For this, we need to collect information about the destinations or payloads of malware communication. Dynamic analysis is usually used to obtain this information. Since some malware requires access to the Internet, e.g., bots and downloaders, the dynamic analysis environment must connect to the Internet. Recently developed malware communicates with remote hosts by HTTP protocol for not only command-and-control (C&C) or malware downloading but also attacks. For secure dynamic analysis in an environment with Internet connectivity, it is necessary to determine if the destination is for C&C or malware downloading and to only allow connection to these servers. We propose a dynamic analysis system with Internet connection that controls HTTP communication by using a search engine. To control HTTP connections, we built a classifier using a support vector machine based on the assumption that sites for C&C or malware downloading, for example, are harder to find and have a lower backlink count than benign sites. Our classifier, which is trained on popular URLs and URLs based on malware analysis, has 99.69% cross-validation accuracy. We evaluated other known benign popular sites with our classifier, and they were all classified as benign. Our evaluation confirms that our classifier can distinguish benign sites, so the proposed dynamic analysis system is effective for safe analysis in an environment with Internet connection.","PeriodicalId":215767,"journal":{"name":"2011 Third International Workshop on Cyberspace Safety and Security (CSS)","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-10-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130666120","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 31

Reliable object rating framework for content sharing system 内容共享系统中可靠的对象分级框架

2011 Third International Workshop on Cyberspace Safety and Security (CSS) Pub Date : 2011-10-24 DOI: 10.1109/CSS.2011.6058567

Jiantao Shi, Hongli Zhang, Xiangzhan Yu, Jianhong Zhai

引用次数: 0