2015 10th International Conference for Internet Technology and Secured Transactions (ICITST)最新文献_第6页

Emerging new trends of location based systems security 基于位置的系统安全的新趋势

2015 10th International Conference for Internet Technology and Secured Transactions (ICITST) Pub Date : 2015-12-01 DOI: 10.1109/ICITST.2015.7412078

Fatema Al Mansoori, C. Yeun

引用次数: 1

A proposed framework for proactive vulnerability assessments in cloud deployments 提议的云部署中的主动漏洞评估框架

2015 10th International Conference for Internet Technology and Secured Transactions (ICITST) Pub Date : 2015-12-01 DOI: 10.1109/ICITST.2015.7412055

K. Torkura, Feng Cheng, C. Meinel

{"title":"A proposed framework for proactive vulnerability assessments in cloud deployments","authors":"K. Torkura, Feng Cheng, C. Meinel","doi":"10.1109/ICITST.2015.7412055","DOIUrl":"https://doi.org/10.1109/ICITST.2015.7412055","url":null,"abstract":"Vulnerability scanners are deployed in computer networks and software to timely identify security flaws and misconfigurations. However, cloud computing has introduced new attack vectors that requires commensurate change of vulnerability assessment strategies. To investigate the effectiveness of these scanners in cloud environments, we first conduct a quantitative security assessment of OpenStack's vulnerability lifecycle and discover severe risk levels resulting from prolonged patch release duration. More specifically, there are long time lags between OpenStack patch releases and patch inclusion in vulnerability scanning engines. This scenario introduces sufficient time for malicious actions and creation of exploits such as zero-days. Mitigating these concern requires systems with current knowledge on events within the vulnerability lifecycle. However, current vulnerability scanners are designed to depend on information about publicly announced vulnerabilities which mostly includes only vulnerability disclosure dates. Accordingly, we propose a framework that would mitigate these risks by gathering and correlating information from several security information sources including exploit databases, malware signature repositories and Bug Tracking Systems. The information is thereafter used to automatically generate plugins armed with current information about zero-day exploits and unknown vulnerabilities. We have characterized two new security metrics to describe the discovered risks.","PeriodicalId":249586,"journal":{"name":"2015 10th International Conference for Internet Technology and Secured Transactions (ICITST)","volume":"197 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134176749","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 8

An extension of RSA_512 to RSA_1024 core under hardware platform based on montgomery powering 基于montgomery供电的硬件平台下RSA_512到RSA_1024内核的扩展

2015 10th International Conference for Internet Technology and Secured Transactions (ICITST) Pub Date : 2015-12-01 DOI: 10.1109/ICITST.2015.7412140

Wahiba Hentabli, Fatiha Merazka

引用次数: 1

Secure distributed key generation in attribute based encryption systems 基于属性的加密系统中的安全分布式密钥生成

2015 10th International Conference for Internet Technology and Secured Transactions (ICITST) Pub Date : 2015-12-01 DOI: 10.1109/ICITST.2015.7412067

D. Pletea, Saeed Sedghi, Meilof Veeningen, M. Petkovic

{"title":"Secure distributed key generation in attribute based encryption systems","authors":"D. Pletea, Saeed Sedghi, Meilof Veeningen, M. Petkovic","doi":"10.1109/ICITST.2015.7412067","DOIUrl":"https://doi.org/10.1109/ICITST.2015.7412067","url":null,"abstract":"Nowadays usage of cloud computing is increasing in popularity and this raises new data protection challenges. In such distributed systems it is unrealistic to assume that the servers are fully trusted in enforcing the access policies. Attribute Based Encryption (ABE) is one of the solutions proposed to tackle these trust problems. In ABE the data is encrypted using the access policy and authorized users can decrypt the data only using a secret key that is associated with their attributes. The secret key is generated by a Key Generation Authority (KGA), which in small systems can be constantly audited, therefore fully trusted. In contrast, in large and distrusted systems, trusting the KGAs is questionable. This paper presents a solution which increases the trust in ABE KGAs. The solution uses several KGAs which issue secret keys only for a limited number of users. One KGA issues a secret key associated with user's attributes and the other authorities issue independently secret keys associated with generalized values of user's attributes. Decryption is possible only if the secret keys associated with the non-generalized and generalized attributes are consistent. This mitigates the risk of unauthorized data disclosure when a couple of authorities are compromised.","PeriodicalId":249586,"journal":{"name":"2015 10th International Conference for Internet Technology and Secured Transactions (ICITST)","volume":"62 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127105502","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6

Security concerns and mitigation approaches for MOOC-based applications 基于mooc的应用程序的安全问题和缓解方法

2015 10th International Conference for Internet Technology and Secured Transactions (ICITST) Pub Date : 2015-12-01 DOI: 10.1109/ICITST.2015.7412075

David Lebron, H. Shahriar, Rubana Yasmin Lupu

引用次数: 2

Conceptual maps for physical security 物理安全的概念图

2015 10th International Conference for Internet Technology and Secured Transactions (ICITST) Pub Date : 2015-12-01 DOI: 10.1109/ICITST.2015.7412118

S. Al-Fedaghi

引用次数: 0

Long running, consistent, web service transactions 长期运行的、一致的web服务事务

2015 10th International Conference for Internet Technology and Secured Transactions (ICITST) Pub Date : 2015-12-01 DOI: 10.1109/ICITST.2015.7412074

Aspen Olmsted

引用次数: 1

Low complexity linear equalization of doubly selective channel 双选择通道的低复杂度线性均衡

2015 10th International Conference for Internet Technology and Secured Transactions (ICITST) Pub Date : 2015-12-01 DOI: 10.1109/ICITST.2015.7412130

S. Ghauri, Hasan Humayun, Mobeen Iqbal

{"title":"Low complexity linear equalization of doubly selective channel","authors":"S. Ghauri, Hasan Humayun, Mobeen Iqbal","doi":"10.1109/ICITST.2015.7412130","DOIUrl":"https://doi.org/10.1109/ICITST.2015.7412130","url":null,"abstract":"A communication system is always prone to impairments, impairments such as noise, inter symbol interference (ISI) etc. are a major threat in channels but they are always compensated by the receiver in communication system. The compensation is usually done by introducing equalization and its different techniques. Submitted paper starts with equalization methods for doubly selective channel. To recognize the technique like Maximum Likelihood (ML), similarly another technique called Zero Forcing (ZF) and finally this paper will focus on Minimum Mean Square Error (MMSE) techniques and its complexity reduction by using Conjugate Gradient method. In MMSE Serial Linear Equalizer (SLE), different windows from channel are taken and recover the original out of it, whereas MMSE Block Linear Equalizer (BLE) recovers the signal from the whole block. MMSE-BLE gives better performance than MMSE-SLE considering values of Bit Error Rate (BER). The channel model considered for MMSE was SISO and MIMO. The performance of MMSE-BLE is enhanced by reducing its complexity by using the iterative methods. We use Conjugate Gradient algorithm, which is one of the best among all the iterative methods.","PeriodicalId":249586,"journal":{"name":"2015 10th International Conference for Internet Technology and Secured Transactions (ICITST)","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131859546","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Optimized hardware design and implementation of EC based key management scheme for WSN 优化了基于EC的无线传感器网络密钥管理方案的硬件设计和实现

2015 10th International Conference for Internet Technology and Secured Transactions (ICITST) Pub Date : 2015-12-01 DOI: 10.1109/ICITST.2015.7412079

P. Jilna, P. Deepthi, U. Jayaraj

引用次数: 3

Transparent authentication systems for mobile device security: A review 移动设备安全的透明认证系统:综述

2015 10th International Conference for Internet Technology and Secured Transactions (ICITST) Pub Date : 2015-12-01 DOI: 10.1109/ICITST.2015.7412131

Saud S. Alotaibi, S. Furnell, N. Clarke

引用次数: 20