2013 2nd National Conference on Information Assurance (NCIA)最新文献

Timing filter for counter mode encryption 计数器模式加密的定时滤波器

2013 2nd National Conference on Information Assurance (NCIA) Pub Date : 2013-12-01 DOI: 10.1109/NCIA.2013.6725333

Naveed Ahmed

引用次数: 1

An efficient elliptic curve based signcryption scheme for firewalls 一种有效的基于椭圆曲线的防火墙签名加密方案

2013 2nd National Conference on Information Assurance (NCIA) Pub Date : 2013-12-01 DOI: 10.1109/NCIA.2013.6725326

Waseem Iqbal, M. Afzal, Farhan Ahmad

引用次数: 6

Experimental evaluation of Snort against DDoS attacks under different hardware configurations 不同硬件配置下Snort抗DDoS攻击的实验评估

2013 2nd National Conference on Information Assurance (NCIA) Pub Date : 2013-12-01 DOI: 10.1109/NCIA.2013.6725321

A. Saboor, M. Akhlaq, B. Aslam

{"title":"Experimental evaluation of Snort against DDoS attacks under different hardware configurations","authors":"A. Saboor, M. Akhlaq, B. Aslam","doi":"10.1109/NCIA.2013.6725321","DOIUrl":"https://doi.org/10.1109/NCIA.2013.6725321","url":null,"abstract":"Network intrusion detection systems are considered as one of the basic entities widely utilized and studied in the field of network security that aim to detect any hostile intrusion within a given network. Among many network intrusion detection systems (NIDS), open source systems have gained substantial preference due to their flexibility, support and cost effectiveness. Snort, an open source system is considered as the de-facto standard for NIDS. In this paper, effort has been made to gauge Snort in terms of performance (packet handling) and detection accuracy against TCP Flooding Distributed Denial of Service attack. The evaluation has been done using a sophisticated test-bench under different hardware configurations. This paper has analyzed the major factors affecting the performance and detection capability of Snort and has recommended techniques to make Snort a better intrusion detection system (IDS). Experimental results have shown significant improvement in Snort packet handling capability by using better hardware. However; Snort detection capability is not improved by improving hardware and is dependent upon its internal architecture (signature database and rate filtration). Furthermore, the findings can be applied to other signature based intrusion detection systems for refining their performance and detection capability.","PeriodicalId":222016,"journal":{"name":"2013 2nd National Conference on Information Assurance (NCIA)","volume":"46 21 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115394492","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 18

Survey on secure live virtual machine (VM) migration in Cloud 云环境下动态虚拟机(VM)安全迁移研究

2013 2nd National Conference on Information Assurance (NCIA) Pub Date : 2013-12-01 DOI: 10.1109/NCIA.2013.6725332

Naveed Ahmad, A. Kanwal, M. A. Shibli

引用次数: 18

Cyber security challenges and wayforward for developing countries 发展中国家面临的网络安全挑战与前进方向

2013 2nd National Conference on Information Assurance (NCIA) Pub Date : 2013-12-01 DOI: 10.1109/NCIA.2013.6725318

Muhammad Sharjeel Zareen, M. Akhlaq, M. Tariq, Umar Khalid

{"title":"Cyber security challenges and wayforward for developing countries","authors":"Muhammad Sharjeel Zareen, M. Akhlaq, M. Tariq, Umar Khalid","doi":"10.1109/NCIA.2013.6725318","DOIUrl":"https://doi.org/10.1109/NCIA.2013.6725318","url":null,"abstract":"Twenty first century has seen a new dimension of warfare; the cyber warfare. Developed countries have started exploiting the vulnerabilities of cyberspace to gain supremacy and influence over the rivals and over countries. Projects like PRISM and Boundless Information and malwares like Stuxnet and Disttrack have surprised the world by revealing how the cyberspace is being exploited by developed countries. Reliance of developing countries on a reliable and secure cyberspace do not match with that of western world but still few of their critical organizations like national, military and private sector hold significant share in cyberspace. Mostly, these developing countries rely on the products developed by western world. The dependency has inherent vulnerabilities and opportunities which place their critical organizations vulnerable to cyber exploitation. This research focuses on the cyber security challenges foreseen by the developing countries, specifically the threats crafted to avoid conventional security measures, by adversaries who have attained credible technical advancement. Finally, the solution is proposed for the developing countries to tackle the issue administratively, and organizationally.","PeriodicalId":222016,"journal":{"name":"2013 2nd National Conference on Information Assurance (NCIA)","volume":"54 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127219494","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

GSM downlink protocol analysis and decoding using open-source hardware and software GSM下行协议分析和解码采用开源硬件和软件

2013 2nd National Conference on Information Assurance (NCIA) Pub Date : 2013-12-01 DOI: 10.1109/NCIA.2013.6725322

J. Burki, Fahad M. Malik, M. Mushtaq

{"title":"GSM downlink protocol analysis and decoding using open-source hardware and software","authors":"J. Burki, Fahad M. Malik, M. Mushtaq","doi":"10.1109/NCIA.2013.6725322","DOIUrl":"https://doi.org/10.1109/NCIA.2013.6725322","url":null,"abstract":"Since its introduction in 1992, Global System for Mobile Communications (GSM) has evolved to become a worldwide standard in mobile telephony. Security in GSM, albeit being one of the most important issues, has not yet been scrutinized to a level it deserves owing mainly to the expensive hardware requirements and lack of thorough understanding of GSM protocols in general. This scenario is changing significantly with the growing rate of development of open-source tools, which can serve to harness the RF signaling and enable processing on a general purpose workstation. In this paper, these open-source tools are utilized to study the feasibility of developing a GSM Protocol Analyzer and investigating the theoretical security protocols and procedures through practical implementation of such system. Universal Software Programmable Radio Peripheral (USRP) was selected as the RF frontend for the protocol analyzer. The USRP is a general purpose, open-hardware transceiver that can be linked to a workstation via an RJ45 Gigabit Ethernet link. Various open-source software, based primarily on GNU Radio, are then utilized to synchronize, demodulate and decode the received signal.","PeriodicalId":222016,"journal":{"name":"2013 2nd National Conference on Information Assurance (NCIA)","volume":"78 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133510370","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Selective region based images encryption 基于选择区域的图像加密

2013 2nd National Conference on Information Assurance (NCIA) Pub Date : 2013-12-01 DOI: 10.1109/NCIA.2013.6725336

Irfan Ullah, Waseem Iqbal, A. Masood

引用次数: 15

Information Security Management in academic institutes of Pakistan 巴基斯坦学术机构的信息安全管理

2013 2nd National Conference on Information Assurance (NCIA) Pub Date : 2013-12-01 DOI: 10.1109/NCIA.2013.6725323

Huma Rehman, A. Masood, A. R. Cheema

引用次数: 11

A novel steganography algorithm to hide a grayscale BMP image in two grayscale BMP images for dual secrecy 一种新的隐写算法，将灰度BMP图像隐藏在两幅灰度BMP图像中，实现双重保密

2013 2nd National Conference on Information Assurance (NCIA) Pub Date : 2013-12-01 DOI: 10.1109/NCIA.2013.6725327

F. Jassim

引用次数: 2

User Centric Access control policy management framework for Cloud applications 以用户为中心的云应用访问控制策略管理框架

2013 2nd National Conference on Information Assurance (NCIA) Pub Date : 2013-12-01 DOI: 10.1109/NCIA.2013.6725338

Abdul Ghafoor, Misbah Irum, M. Qaisar

{"title":"User Centric Access control policy management framework for Cloud applications","authors":"Abdul Ghafoor, Misbah Irum, M. Qaisar","doi":"10.1109/NCIA.2013.6725338","DOIUrl":"https://doi.org/10.1109/NCIA.2013.6725338","url":null,"abstract":"Cloud computing environment is a collection of various Cloud applications deployed by different Cloud service vendors for their customers. The online availability, variety and easy access of Cloud applications allow users to create, upload and store numerous resources across the Cloud. However, Protection of these resources from different security threats in Cloud environment is still a serious concern for the Cloud users. Cloud applications provide diverse and complex authorization and access control mechanisms to different Cloud users. Moreover, Access control is limited and tightly bound to the functionality of the applications and does not cater the access control requirements of individual users. Securing every resource with different, complex and limited access control solutions is a tedious task and results in poorly protected resources susceptible to unauthorized access and different other security threats. A new approach to access control in Cloud environment is presented in this paper. It externalizes access control from Cloud applications and enables users to create, and manage access control policies on their resources according to their own security and access control requirements. The framework also provides users with a central control point, standard policy definition language and easy to use interface to specify and manage access control on all their resources scattered across the Cloud. We presented the framework and described the protocol which defines the interaction between different components of the system to specify and enforce User-Centric policies using XACML standards.","PeriodicalId":222016,"journal":{"name":"2013 2nd National Conference on Information Assurance (NCIA)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124250540","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6