2019 Fifth Conference on Mobile and Secure Services (MobiSecServ)最新文献

Future Security of Smart Speaker and IoT Smart Home Devices 智能音箱和物联网智能家居设备的未来安全

2019 Fifth Conference on Mobile and Secure Services (MobiSecServ) Pub Date : 2019-03-02 DOI: 10.1109/MOBISECSERV.2019.8686545

Shawn Godwin, Brett Glendenning, K. Gagneja

引用次数: 13

Incorporating Monitoring Points in SDN to Ensure Trusted Links Against Misbehaving Traffic Flows 在SDN中加入监控点，确保可信链路不受不正常流量的影响

2019 Fifth Conference on Mobile and Secure Services (MobiSecServ) Pub Date : 2019-03-02 DOI: 10.1109/MOBISECSERV.2019.8686706

A. Almohaimeed, A. Asaduzzaman

{"title":"Incorporating Monitoring Points in SDN to Ensure Trusted Links Against Misbehaving Traffic Flows","authors":"A. Almohaimeed, A. Asaduzzaman","doi":"10.1109/MOBISECSERV.2019.8686706","DOIUrl":"https://doi.org/10.1109/MOBISECSERV.2019.8686706","url":null,"abstract":"The growing trend toward information technology increases the amount of data travelling over the network links. The problem of detecting anomalies in data streams has increased with the growth of internet connectivity. Software-Defined Networking (SDN) is a new concept of computer networking that can adapt and support these growing trends. However, the centralized nature of the SDN design is challenged by the need for an efficient method for traffic monitoring against traffic anomalies caused by misconfigured devices or ongoing attacks. In this paper, we propose a new model for traffic behavior monitoring that aims to ensure trusted communication links between the network devices. The main objective of this model is to confirm that the behavior of the traffic streams matches the instructions provided by the SDN controller, which can help to increase the trust between the SDN controller and its covered infrastructure components. According to our preliminary implementation, the behavior monitoring unit is able to read all traffic information and perform a validation process that reports any mismatching traffic to the controller.","PeriodicalId":233399,"journal":{"name":"2019 Fifth Conference on Mobile and Secure Services (MobiSecServ)","volume":"85 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-03-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132880005","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

Reference Architectures for Security-by-Design IoT: Comparative Study 物联网安全设计参考架构:比较研究

2019 Fifth Conference on Mobile and Secure Services (MobiSecServ) Pub Date : 2019-03-02 DOI: 10.1109/MOBISECSERV.2019.8686650

Valentin Vallois, F. Guenane, A. Mehaoua

引用次数: 7

Integrity Probe: Using Programmer as Root of Trust for Bare Metal Blockchain Crypto Terminal. Invited Paper 完整性探测:使用程序员作为裸机区块链加密终端的信任根。邀请报告

2019 Fifth Conference on Mobile and Secure Services (MobiSecServ) Pub Date : 2019-03-02 DOI: 10.1109/MOBISECSERV.2019.8686637

P. Urien

引用次数: 8

BYOD-Insure: A Security Assessment Model for Enterprise BYOD BYOD- insure:企业BYOD安全评估模型

2019 Fifth Conference on Mobile and Secure Services (MobiSecServ) Pub Date : 2019-03-02 DOI: 10.1109/MOBISECSERV.2019.8686551

Melva M. Ratchford, Yong Wang

{"title":"BYOD-Insure: A Security Assessment Model for Enterprise BYOD","authors":"Melva M. Ratchford, Yong Wang","doi":"10.1109/MOBISECSERV.2019.8686551","DOIUrl":"https://doi.org/10.1109/MOBISECSERV.2019.8686551","url":null,"abstract":"As organizations continue allowing employees to use their personal mobile devices to access the organizations' networks and the corporate data, a phenomenon called ‘Bring Your Own Device’ or BYOD, proper security controls need to be adopted not only to secure the corporate data but also the organizations themselves. Current literature and research have focused on specific areas or solutions regarding BYOD. This paper proposes a comprehensive security assessment model, BYOD-Insure, that assesses the security of an organization's BYOD posture. The model aims to identify security vulnerabilities in organizations that allow BYODs and answers the question how an organization can mitigate security risks associated with BYOD, in order to protect its corporate data? The paper demonstrates the use of BYOD-Insure by presenting an example where a hypothetical organization's management security posture is assessed. The assessment results are measurable and provide practical recommendations in order to mitigate the inherent risks of BYOD and thus strengthen an organization's security posture. The model is also extendible, adaptable, and flexible. The results are easily visualized using Kiviat's diagrams.","PeriodicalId":233399,"journal":{"name":"2019 Fifth Conference on Mobile and Secure Services (MobiSecServ)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-03-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125945131","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 13

When not to Offload? Analyzing Offload Feasibility in Mobile Cloud Computing 什么时候不应该卸载?移动云计算卸载可行性分析

2019 Fifth Conference on Mobile and Secure Services (MobiSecServ) Pub Date : 2019-03-02 DOI: 10.1109/MOBISECSERV.2019.8686724

Abhishek Kulkarni, Ajith Paul, H. Dholakia, G. Hossain

{"title":"When not to Offload? Analyzing Offload Feasibility in Mobile Cloud Computing","authors":"Abhishek Kulkarni, Ajith Paul, H. Dholakia, G. Hossain","doi":"10.1109/MOBISECSERV.2019.8686724","DOIUrl":"https://doi.org/10.1109/MOBISECSERV.2019.8686724","url":null,"abstract":"Cloud computing has become a global phenomenon over the last couple years. Its exponential rise in the technological world has become a major topic of discussion and one of the major topics is offloading. As cost and energy saving are important resources it is key to discuss whether to offload or not. Tabular and graphical data were analyzed to determine if initial hypothesis could be determined. The creation of testbeds for real users and cloud systems in a real setting were also used to carry out experiments to determine if offloading is convenient. After data collection and analysis of this data four major observations were made. Users tend to use Wi-Fi more than regular data coverage, Wi-Fi connection is lost at a minimal amount of time, Wi-Fi is quicker than normal data and syncing after the first instance is a lot easier and takes less time. In conclusion, it can be safely concluded that offloading is in fact feasible. The continuous updates take less time at a reasonable energy cost and bandwidth allocation. In the years to come, there will be more efficient ways to offloading, as mobile cloud computing's forecast is still positively rising.","PeriodicalId":233399,"journal":{"name":"2019 Fifth Conference on Mobile and Secure Services (MobiSecServ)","volume":"34 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-03-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128853079","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

A Novel Moving Target Defense Technique to Secure Communication Links in Software-Defined Networks 一种保护软件定义网络通信链路安全的移动目标防御新技术

2019 Fifth Conference on Mobile and Secure Services (MobiSecServ) Pub Date : 2019-03-02 DOI: 10.1109/MOBISECSERV.2019.8686530

A. Almohaimeed, A. Asaduzzaman

{"title":"A Novel Moving Target Defense Technique to Secure Communication Links in Software-Defined Networks","authors":"A. Almohaimeed, A. Asaduzzaman","doi":"10.1109/MOBISECSERV.2019.8686530","DOIUrl":"https://doi.org/10.1109/MOBISECSERV.2019.8686530","url":null,"abstract":"Software-defined networking (SDN) is a recently developed approach to computer networking that brings a centralized orientation to network control, thereby improving network architecture and management. However, as with any communication environment that involves message transmission among users, SDN is confronted by the ongoing challenge of protecting user privacy. In this “Work in Progress (WIP)” research, we propose an SDN security model that applies the moving target defense (MTD) technique to protect communication links from sensitive data leakages. MTD is a security solution aimed at increasing complexity and uncertainty for attackers by concealing sensitive information that may serve as a gateway from which to launch different types of attacks. The proposed MTD-based security model is intended to protect user identities contained in transmitted messages in a way that prevents network intruders from identifying the real identities of senders and receivers. According to the results from preliminary experiments, the proposed MTD model has potential to protect the identities contained in transmitted messages within communication links. This work will be extended to protect sensitive data if an attacker gets access to the network device.","PeriodicalId":233399,"journal":{"name":"2019 Fifth Conference on Mobile and Secure Services (MobiSecServ)","volume":"22 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-03-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127646821","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

Privacy and Security Analysis of Cryptocurrency Mobile Applications 加密货币移动应用的隐私和安全分析

2019 Fifth Conference on Mobile and Secure Services (MobiSecServ) Pub Date : 2019-03-02 DOI: 10.1109/MOBISECSERV.2019.8686583

Ashish Rajendra Sai, Jim Buckley Lero, Andrew Le Gear

{"title":"Privacy and Security Analysis of Cryptocurrency Mobile Applications","authors":"Ashish Rajendra Sai, Jim Buckley Lero, Andrew Le Gear","doi":"10.1109/MOBISECSERV.2019.8686583","DOIUrl":"https://doi.org/10.1109/MOBISECSERV.2019.8686583","url":null,"abstract":"Subsequent to the introduction of Bitcoin, the field of cryptocurrency has seen unprecedented growth. Mobile applications known as wallets often facilitate user interaction to these cryptocurrencies. With a perceived real world value these wallets are a target for attackers. Unlike mainstream financial services applications, cryptocurrency wallets are not subject to the same stringent security requirements of their regulated counterparts. In this paper, we examine the security profiles of commonly used Android cryptocurrency applications. We examine these applications for common vulnerabilities outlined by OWASP mobile top 10. We establish a baseline for our tests by evaluating commonly used banking and trading applications. We compare the results from our baseline test and establish the state of security provided by cryptocurrency wallet applications. The paper also examines the possible privacy implications of mobile applications. We report that the conventional financial services applications are only marginally better than cryptocurrency application in security provisions but they provide greater privacy.","PeriodicalId":233399,"journal":{"name":"2019 Fifth Conference on Mobile and Secure Services (MobiSecServ)","volume":"3 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-03-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126916877","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 26

Vulnerability Finding and Firmware Association in Power Grid 电网中的漏洞发现与固件关联

2019 Fifth Conference on Mobile and Secure Services (MobiSecServ) Pub Date : 2019-03-02 DOI: 10.1109/MOBISECSERV.2019.8686515

Yuyan Sun, Limin Sun, Zhiqiang Shi, Wenhao Yu, H. Ying

引用次数: 1

IoT Device Discovery for Incidence Response 针对事件响应的物联网设备发现

2019 Fifth Conference on Mobile and Secure Services (MobiSecServ) Pub Date : 2019-03-02 DOI: 10.1109/MOBISECSERV.2019.8686717

Caleb Riggs, Jesal Patel, K. Gagneja

引用次数: 6