2010 2nd International Workshop on Security and Communication Networks (IWSCN)最新文献

Unlinking database entries: Implementation issues in privacy preserving secure logging 解除数据库条目的链接:保护隐私的安全日志记录的实现问题

2010 2nd International Workshop on Security and Communication Networks (IWSCN) Pub Date : 2010-05-26 DOI: 10.1109/IWSCN.2010.5497998

Hans Hedbom, T. Pulls

引用次数: 5

Constraints on autonomous use of standard GPU components for asynchronous observations and intrusion detection 异步观察和入侵检测中自主使用标准GPU组件的约束

2010 2nd International Workshop on Security and Communication Networks (IWSCN) Pub Date : 2010-05-26 DOI: 10.1109/IWSCN.2010.5497999

Reinhard Riedmuller, Mark M. Seeger, Harald Baier, C. Busch, S. Wolthusen

{"title":"Constraints on autonomous use of standard GPU components for asynchronous observations and intrusion detection","authors":"Reinhard Riedmuller, Mark M. Seeger, Harald Baier, C. Busch, S. Wolthusen","doi":"10.1109/IWSCN.2010.5497999","DOIUrl":"https://doi.org/10.1109/IWSCN.2010.5497999","url":null,"abstract":"The high computational power of graphics processing units (GPU) is used for several purposes nowadays. Factoring integers, computing discrete logarithms, and pattern matching in network intrusion detection systems (IDS) are popular tasks in the field of information security where GPUs are used for acceleration. GPUs are commodity components and are widely available in computer systems which would make them an ideal platform for a wide-spread IDS. We investigate the feasibility to use current GPUs for asynchronous host intrusion detection as proposed in a former work and come to the conclusion that several constraints of GPUs limit the use for concurrent and asynchronous off-CPU processing in host IDSs. GPUs have restrictions in terms of continuity, asynchronism, and unrestricted access to perform this task. We propose an observation mechanism and discuss current constraints on autonomous use of standard GPU components for intrusion detection. Finally, we come to the conclusion that several modifications to graphics cards are necessary to enable our approach.","PeriodicalId":217163,"journal":{"name":"2010 2nd International Workshop on Security and Communication Networks (IWSCN)","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2010-05-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122693246","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

A delegation-based HIP signaling scheme for the Ultra Flat Architecture 一种基于委托的超平面架构的HIP信令方案

2010 2nd International Workshop on Security and Communication Networks (IWSCN) Pub Date : 2010-05-26 DOI: 10.1109/IWSCN.2010.5498001

L. Bokor, Z. Faigl, S. Imre

{"title":"A delegation-based HIP signaling scheme for the Ultra Flat Architecture","authors":"L. Bokor, Z. Faigl, S. Imre","doi":"10.1109/IWSCN.2010.5498001","DOIUrl":"https://doi.org/10.1109/IWSCN.2010.5498001","url":null,"abstract":"The Ultra Flat Architecture is a new concept of fixed-mobile convergent networks that aims to scale well with the mobile Internet traffic explosion prognosticated for the next 5–10 years. This paper presents a new delegation-based UFA signaling framework using HIP, IEEE 802.21 and the context transfer protocol. The main procedures contributed by this signaling framework are terminal attachment, session establishment, proactive handover preparation and handover execution services. The paper introduces several novel Host Identity Protocol extensions, i.e., two different HIP delegation service types for optimized message exchange in HIP-based UFA mobility and multihoming operations, a context transfer scheme for HIP and IPsec associations supporting and extending the mechanisms of the delegation-based UFA functions, and a fast operator-centric method for HIP-level access authorization. The proposed UFA signaling framework is compared with the existing SIP-based UFA signaling solution. The comparison shows that our scheme is able to support legacy Internet applications in an operator based environment, it is stronger in security, but its deployment requires more additional modules in the architecture. For IMS applications, the SIP-based alternative is a better choice.","PeriodicalId":217163,"journal":{"name":"2010 2nd International Workshop on Security and Communication Networks (IWSCN)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2010-05-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133464194","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 18

Eigensteps: A giant leap for gait recognition 特征步:步态识别的巨大飞跃

2010 2nd International Workshop on Security and Communication Networks (IWSCN) Pub Date : 2010-05-26 DOI: 10.1109/IWSCN.2010.5497991

Patrick A. H. Bours, R. Shrestha

引用次数: 42

Definition of entity authentication 实体认证的定义

2010 2nd International Workshop on Security and Communication Networks (IWSCN) Pub Date : 2010-05-26 DOI: 10.1109/IWSCN.2010.5498000

Naveed Ahmed, C. Jensen

引用次数: 9

Fragment retention characteristics in slack space — Analysis and measurements 松弛空间中的碎片保留特性。分析和测量

2010 2nd International Workshop on Security and Communication Networks (IWSCN) Pub Date : 2010-05-26 DOI: 10.1109/IWSCN.2010.5497996

T. Holleboom, Johan Garcia

引用次数: 8

A framework for detecting anomalies in HTTP traffic using instance-based learning and k-nearest neighbor classification 一个使用基于实例的学习和k近邻分类来检测HTTP流量异常的框架

2010 2nd International Workshop on Security and Communication Networks (IWSCN) Pub Date : 2010-05-26 DOI: 10.1109/IWSCN.2010.5497997

Michael Kirchner

{"title":"A framework for detecting anomalies in HTTP traffic using instance-based learning and k-nearest neighbor classification","authors":"Michael Kirchner","doi":"10.1109/IWSCN.2010.5497997","DOIUrl":"https://doi.org/10.1109/IWSCN.2010.5497997","url":null,"abstract":"Attacks against web applications and web-based services that use HTTP as a communication protocol pose a serious threat to today's information technology infrastructures. A common countermeasure is to apply misuse detection and prevention systems that compare the contents of HTTP traffic against signatures of known attacks, as it is for example done by web application firewalls. A serious drawback of these systems is the fact that the used signatures often are not tailored for the individual web applications to be protected. Furthermore, signatures can often be circumvented by rewriting attacks into different forms, resulting in successful exploitation and circumvention of a misuse detection or prevention system. This paper presents the design and implementation of an anomaly detection framework for HTTP traffic that operates without signatures of known attacks. It rather learns normal usage patterns of web-based applications by inspecting full HTTP request and response contents. The results are then used for anomaly detection. The framework automatically adjusts to the applications to be monitored, derives normal usage patterns and compares subsequent HTTP traffic to the built knowledge base.","PeriodicalId":217163,"journal":{"name":"2010 2nd International Workshop on Security and Communication Networks (IWSCN)","volume":"27 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2010-05-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125010042","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 12

Evaluation of delay performance of traffic shapers 交通整形器的延迟性能评价

2010 2nd International Workshop on Security and Communication Networks (IWSCN) Pub Date : 2010-05-26 DOI: 10.1109/IWSCN.2010.5497994

Junaid M. Shaikh, T. N. Minhas, P. Arlos, M. Fiedler

{"title":"Evaluation of delay performance of traffic shapers","authors":"Junaid M. Shaikh, T. N. Minhas, P. Arlos, M. Fiedler","doi":"10.1109/IWSCN.2010.5497994","DOIUrl":"https://doi.org/10.1109/IWSCN.2010.5497994","url":null,"abstract":"In network emulation, traffic shapers are used to shape the performance of the network. They are provided with certain inputs in a test environment to vary the network performance accordingly in order to investigate the effects of different network conditions on applications in real yet emulated scenarios. However, it is very important for the shapers to work as supposed in order to successfully realize the desired network conditions. They may make the results of network emulations unrealistic and unreliable if their functioning is not according to the desired specification. In this work, we evaluate the delay shaping of three traffic shapers, NIST Net, Netem and KauNet through the results obtained from a number of experiments. A comparison of the output of their delay shaping is presented. This comparison can enable us to select the most suitable shaper based on the required shaping. Effects of hardware platforms on the shaping are also filtered out by performing the experiments with shapers installed on Advance Micro Devices (AMD) and Intel platforms separately. Different Protocol Data Unit (PDU) sizes are used in the experiments to test the influence of packet sizes on the shaping. These delay evaluation results are then complemented by the Coefficient of Throughput Variation (CoTV) results.","PeriodicalId":217163,"journal":{"name":"2010 2nd International Workshop on Security and Communication Networks (IWSCN)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2010-05-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121068339","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 21

Biometric template data protection in mobile device environment using XML-database 基于xml数据库的移动设备环境下的生物识别模板数据保护

2010 2nd International Workshop on Security and Communication Networks (IWSCN) Pub Date : 2010-05-26 DOI: 10.1109/IWSCN.2010.5497993

Rubathas Thirumathyam, M. Derawi

引用次数: 2

Proposal of a VPN configuration delivery system VPN配置下发系统的建议

2010 2nd International Workshop on Security and Communication Networks (IWSCN) Pub Date : 2010-05-26 DOI: 10.1109/IWSCN.2010.5497992

Yoshinao Kikuchi, Takaaki Koyama, Kazuhiro Kishi, Sotetsu Iwamura

引用次数: 0