2015 World Congress on Internet Security (WorldCIS)最新文献_第2页

Attendance system based on the Internet of Things for supporting blended learning 基于物联网的考勤系统，支持混合式学习

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-01 DOI: 10.1109/WorldCIS.2015.7359418

S. Alotaibi

{"title":"Attendance system based on the Internet of Things for supporting blended learning","authors":"S. Alotaibi","doi":"10.1109/WorldCIS.2015.7359418","DOIUrl":"https://doi.org/10.1109/WorldCIS.2015.7359418","url":null,"abstract":"A number of learning systems have been developed in recent years to provide secure attendance systems for blended learning; however, most have not been very successful. Furthermore, alongside increasing the level of awareness of the need to deploy interoperable physical and virtual learning services for each university that supports the idea of blended learning, there exists an immediate need for the establishment of clear standards and guidelines for the successful integration of all physical and virtual attendance systems that relate to blended learning services. The importance and motivation for designing a new attendance system based on the Internet of Things that supports blended learning at Taif University in Saudi Arabia is discussed in this paper with respect to three perspectives: security, which includes identity; the Internet of Things, comprising physical and virtual objects; and blended learning, containing Blackboard system. Not many systems abide guidelines for all of these perspectives; thus, the proposed system aims to change this and provide its users with attendance and the ability to access their physical and virtual learning services in a secure and usable way.","PeriodicalId":234497,"journal":{"name":"2015 World Congress on Internet Security (WorldCIS)","volume":"8 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121688162","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 12

AODV route maintenance using HoneyPots in MANETs 基于蜜罐的多网AODV路由维护

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-01 DOI: 10.1109/WorldCIS.2015.7359424

T. Keerthi, P. Venkataram

引用次数: 8

A view on ISO/IEC 27001 compliant identity lifecycles for IT service providers IT服务提供商符合ISO/IEC 27001标准的身份生命周期的观点

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-01 DOI: 10.1109/WorldCIS.2015.7359420

S. Kurowski, Richard Litwing, Gero Lückemeyer

{"title":"A view on ISO/IEC 27001 compliant identity lifecycles for IT service providers","authors":"S. Kurowski, Richard Litwing, Gero Lückemeyer","doi":"10.1109/WorldCIS.2015.7359420","DOIUrl":"https://doi.org/10.1109/WorldCIS.2015.7359420","url":null,"abstract":"This work aims at providing guidance on the challenges of complex identity lifecycle management in organizations, especially in customer oriented IT service providers. By providing a view on necessary requirements and potential processes which may contribute to enforcing identity lifecycle management., even in a multi-organization setting, we reduce the complexity of identity lifecycle management. We build upon the identity lifecycle and refine the areas of provisioning, de-provisioning and auditing by using the mechanisms depicted in the ISO/IEC 27002. By including previous less refined contributions on information security management in IT service management along with the current version of the IT Infrastructure Library (ITIL) v3 update 2011, we provide guidance on the required tasks and the contribution of IT service management to identity lifecycle management. Additionally, we find missing aspects which require additional implementation efforts for organizations which have adopted IT service management. These missing mechanisms are mainly identified in the lifecycle phases of usage and de-provisioning of an identity.","PeriodicalId":234497,"journal":{"name":"2015 World Congress on Internet Security (WorldCIS)","volume":"14 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121181770","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

SQLi penetration testing of financial Web applications: Investigation of Bangladesh region 金融Web应用程序的SQLi渗透测试:孟加拉国地区调查

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-01 DOI: 10.1109/WorldCIS.2015.7359432

Tanjila Farah, Delwar Alam, M. Kabir, T. Bhuiyan

{"title":"SQLi penetration testing of financial Web applications: Investigation of Bangladesh region","authors":"Tanjila Farah, Delwar Alam, M. Kabir, T. Bhuiyan","doi":"10.1109/WorldCIS.2015.7359432","DOIUrl":"https://doi.org/10.1109/WorldCIS.2015.7359432","url":null,"abstract":"Business critical web applications are the most popular services provided to the client by the financial sector. These applications are bringing handsome revenue for the financial industry every year. These services are also a frequent target of attackers. Poor coding practice leads applications to vulnerability that are exploited by attackers. Information and privileges such as access to databases, admin authorization, and access to data could be retrieved through exploitation. Services provided through web applications make the exploitation easier as these could be accessed from anywhere around the world. Web based financial services are comparatively new concept in Bangladesh. Thus the security aspects of these applications are less explored. This paper represents an analysis of few basic security issues of the financial web applications of Bangladesh. It focuses on structured query language injection (SQLi) vulnerability. It presents a manual black box penetration testing approach to test the financial web applications. Same steps are used for testing all the web applications in the dataset. A vulnerability analysis of the findings collected during the penetration testing is also presented in the paper.","PeriodicalId":234497,"journal":{"name":"2015 World Congress on Internet Security (WorldCIS)","volume":"22 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129719135","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 11

Random walk with jumps: A new query search method based on analysing Gnutella protocol 带跳跃的随机漫步:一种基于Gnutella协议分析的查询搜索新方法

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-01 DOI: 10.1109/WorldCIS.2015.7359427

Kholoud Althobaiti, S. Alotaibi, H. Alqahtani

引用次数: 3

The SNAP principle for mitigating privileged account breaches: How secondary non-admin privileged accounts can reduce breach impact 用于减轻特权帐户泄露的SNAP原则:次要非管理特权帐户如何减少泄露影响

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-01 DOI: 10.1109/WorldCIS.2015.7359408

Samuel Moses, D. Rowe

引用次数: 1

Exploring mental models underlying PIN management strategies 探索PIN管理策略的心理模型

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-01 DOI: 10.1109/WorldCIS.2015.7359406

K. Renaud, M. Volkamer

引用次数: 6

Deep learning for credit card data analysis 信用卡数据分析的深度学习

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-01 DOI: 10.1109/WorldCIS.2015.7359417

A. Niimi

引用次数: 21

Taming the Ipv6 address space with hyhoneydv6 使用hyhoneydv6管理Ipv6地址空间

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-01 DOI: 10.1109/WorldCIS.2015.7359425

S. Schindler, Bettina Schnor, T. Scheffler

引用次数: 1

Anomaly detection method using network pattern analysis of process 异常检测方法采用网络模式分析过程

2015 World Congress on Internet Security (WorldCIS) Pub Date : 2015-10-01 DOI: 10.1109/WorldCIS.2015.7359435

Minho Han, Ikkyun Kim

引用次数: 1