2015 World Congress on Internet Security (WorldCIS)最新文献

An ethnographic study to assess the enactment of information security culture in a retail store 一项评估零售商店资讯安全文化制定的人种志研究

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-12-16 DOI: 10.1109/WorldCIS.2015.7359415

A. Greig, K. Renaud, Stephen Flowerday

引用次数: 11

Securing the internet through the detection of anonymous proxy usage 通过检测匿名代理使用来保护互联网

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-22 DOI: 10.1109/WorldCIS.2015.7359434

Shane Miller, K. Curran, T. Lunney

{"title":"Securing the internet through the detection of anonymous proxy usage","authors":"Shane Miller, K. Curran, T. Lunney","doi":"10.1109/WorldCIS.2015.7359434","DOIUrl":"https://doi.org/10.1109/WorldCIS.2015.7359434","url":null,"abstract":"Businesses and educational facilities employ network filtering to control what internet sites their users access. This is done to help protect network assets, to protect data from being stolen and to comply with company policies on internet usage. Anonymous proxies can be used to bypass most filtering systems put in place and this can remove the protection that the filtering systems provide. Unless the web proxy being used is being hosted by the end user or someone they know, then the identity of whoever is hosting the proxy is unknown and they are potentially untrustworthy. The proxy website could have been set up to eavesdrop on the data flow between the end user's machine and the internet. Sites like this would normally log information for later inspection and data sent from a business user's machine could contain confidential information about the company or the user. This research aims to identify the characteristics or signatures whenever a user is using a web proxy by developing a Detection System that records packets and analyses them looking for identifying patterns of web proxies. One of the main focuses of the research will be detecting the usage of proxy websites that use SSL encryption.","PeriodicalId":234497,"journal":{"name":"2015 World Congress on Internet Security (WorldCIS)","volume":"17 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-10-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133621124","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6

Analysing threats in cloud storage 分析云存储中的威胁

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-01 DOI: 10.1109/WorldCIS.2015.7359411

F. Yahya, R. Walters, G. Wills

引用次数: 1

Provoking security: Spoofing attacks against crypto-biometric systems 挑衅安全:针对加密生物识别系统的欺骗攻击

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-01 DOI: 10.1109/WorldCIS.2015.7359416

Christina-Angeliki Toli, B. Preneel

{"title":"Provoking security: Spoofing attacks against crypto-biometric systems","authors":"Christina-Angeliki Toli, B. Preneel","doi":"10.1109/WorldCIS.2015.7359416","DOIUrl":"https://doi.org/10.1109/WorldCIS.2015.7359416","url":null,"abstract":"Over the past decade, the trustworthiness of biometrics during authentication, and mostly, verification processes has been compromised by spoofing attackers sprang up to exploit the security gaps. In terms of spoofing, a non-colluding honest entity tries to fake somebody else's identity by presenting samples of that person's traits, or tries to gain benefit from the “leakage” of stored biometric information in a database or an electronic chip. Literature efforts are devoted to studying model threats and problems raised by targeted malicious actions for biometric systems. However, prevention mechanisms for supporting complicated schemes and the cryptography's role in the area have not received much attention. This paper presents crypto-biometric techniques, analyzing comparatively the different categories according to the main goal of the design and the methodology used in. Intrusions and countermeasures for single and multiple modalities based cryptographic approaches are covered. Finally, a novel bimodal system is suggested, able to reject such kind of attacks, presenting an anti-spoofing behavior under the cooperation between user and the function. The aim of this multidisciplinary work is to organize the current performances on how to develop security, pinpoint the potentiality for improvements and contribute to research in addressing fraud for real-world cases.","PeriodicalId":234497,"journal":{"name":"2015 World Congress on Internet Security (WorldCIS)","volume":"30 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124869609","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4

Development of an anti-forensic tool for hiding message in a directory index of NTFS 在NTFS目录索引中隐藏消息的反取证工具的开发

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-01 DOI: 10.1109/WorldCIS.2015.7359431

Gyusang Cho

引用次数: 2

Ecurrency threat modeling and hardening 货币威胁建模和强化

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-01 DOI: 10.1109/WorldCIS.2015.7359412

Aspen Olmsted

引用次数: 0

Security analysis of revocable and bipartite biotokens 可撤销和二分生物令牌的安全性分析

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-01 DOI: 10.1109/WorldCIS.2015.7359422

Neyire Deniz Sarier

引用次数: 0

Runtime-behavior based malware classification using online machine learning 使用在线机器学习的基于运行时行为的恶意软件分类

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-01 DOI: 10.1109/WorldCIS.2015.7359437

Abdurrahman Pektas, T. Acarman, Yliès Falcone, Jean-Claude Fernandez

{"title":"Runtime-behavior based malware classification using online machine learning","authors":"Abdurrahman Pektas, T. Acarman, Yliès Falcone, Jean-Claude Fernandez","doi":"10.1109/WorldCIS.2015.7359437","DOIUrl":"https://doi.org/10.1109/WorldCIS.2015.7359437","url":null,"abstract":"Identification of malware's family is an intricate process whose success and accuracy depends on different factors. These factors are mainly related to the process of extracting of meaningful and distinctive features from a set of malware samples, modeling malware via its static or dynamic features and particularly techniques used to classify malware samples. In this paper, we propose a new malware classification method based on behavioral features. File system, network, registry activities observed during the execution traces of the malware samples are used to represent behavior based features. Existing classification schemes apply machine-learning algorithms to the stored data, i.e., they are off-line. In this study, we use on-line machine learning algorithms that can provide instantaneous update about the new malware sample by following its introduction to the classification scheme. To validate the effectiveness and scalability of our method, we have evaluated our method by using 18,000 recent malicious files. Experimental results show that our method classifies malware with an accuracy of 92.","PeriodicalId":234497,"journal":{"name":"2015 World Congress on Internet Security (WorldCIS)","volume":"6 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129509901","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 9

Ensemble learning utilising feature pairings for intrusion detection 利用特征对进行入侵检测的集成学习

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-01 DOI: 10.1109/WorldCIS.2015.7359407

Michael Milliken, Y. Bi, L. Galway, G. Hawe

引用次数: 8

Founding a cybersecurity club in a higher education environment: A case study 在高等教育环境中建立网络安全俱乐部:一个案例研究

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-01 DOI: 10.1109/WorldCIS.2015.7359430

M. Piazza, Aspen Olmsted

引用次数: 1