Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop最新文献_第2页

An e-mail honeypot addressing spammers' behavior in collecting and applying addresses 解决垃圾邮件发送者在收集和申请地址时的行为的电子邮件蜜罐

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495931

G. Schryen

引用次数: 12

In the search of the "gene of self-replication" in malicious codes 在恶意代码中寻找“自我复制基因”

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495952

V. Skormin, A. Volynkin, Douglas Summervil, J. Moronski

引用次数: 4

Designing security courses and lab for undergraduate and graduate students 为本科生和研究生设计安全课程和实验室

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1496001

Xiangdong Li, M. Anshel

引用次数: 0

Biometrics for massive access control - traditional problems and innovative approaches 大规模访问控制的生物识别技术——传统问题和创新方法

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495937

L. Riccardi, B. Peticone, M. Savastano

{"title":"Biometrics for massive access control - traditional problems and innovative approaches","authors":"L. Riccardi, B. Peticone, M. Savastano","doi":"10.1109/IAW.2005.1495937","DOIUrl":"https://doi.org/10.1109/IAW.2005.1495937","url":null,"abstract":"The increase in security measures due to the complex international situation is forcing the realization of several access control systems equipped with biometric identifiers. Apart from technical problems, a number of nontechnical issues, strongly related to the user's acceptance, may have a strong influence on the design of the application and suggest particular choices in the selection of the biometric technique to be adopted. Starting from the assumption that facial recognition represents one of the most widely \"accepted\" biometric techniques, and that, due to contradictory performances shown in operating conditions, this methodology is seldom considered for high-security applications, the authors have investigated the possibility of improving the error figures by means of an original approach. The innovation consists in \"enriching\" the template obtained by means of canonical facial recognition algorithms with additional information extracted from behavioral characteristics of the user. The study, still in the early stage, is carried out in the framework of a collaboration between the National Research Council of Italy (CNR) and the Italian Ministry of the Defense (MoD) in the area of the strong authentication for physical access to military compounds. The aim of the present paper is only the highlighting of the potentiality of such an approach since first experimental data are not mature to generate consolidated error figures such as FAR and FRR. In any event, a very good capability in distinguishing between identical twins, a very well known problem in facial recognition, is a promising preamble for the continuation of the research.","PeriodicalId":252208,"journal":{"name":"Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop","volume":"10 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-06-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130864738","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

Flow based observations from NETI@home and honeynet data 基于流量的观察从NETI@home和蜜网数据

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495959

J. Grizzard, C. R. Simpson, S. Krasser, Henry L Owen, G. Riley

引用次数: 11

FABS: file and block surveillance system for determining anomalous disk accesses 用于确定异常磁盘访问的文件和块监视系统

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495954

P. Stanton, W. Yurcik, L. Brumbaugh

引用次数: 7

A new on-line certificate validation method using LDAP component matching technology 提出了一种新的基于LDAP组件匹配技术的在线证书验证方法

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495964

Jong Hyuk Choi, Sang Seok Lim, Kurt D. Zeilenga

{"title":"A new on-line certificate validation method using LDAP component matching technology","authors":"Jong Hyuk Choi, Sang Seok Lim, Kurt D. Zeilenga","doi":"10.1109/IAW.2005.1495964","DOIUrl":"https://doi.org/10.1109/IAW.2005.1495964","url":null,"abstract":"This paper presents a new on-line certificate validation method which provides higher degree of security, scalability, and interoperability than do the pre-existing approaches. It combines two basic data structures for certificate revocation, certificate revocation list (CRL) and the authenticated dictionary such as certificate revocation tree (CRT), into a single framework by utilizing the component matching enabled lightweight directory access protocol (LDAP) service. With the new method, end entities that want to check the validity of certificates can request an extended LDAP search operation with a component matching assertion against all revoked certificate components in a CRL and check whether a revoked certificate having the asserted serial number is found. In order to ensure strong security without requiring trusted directories, CRLs are represented as an authenticated dictionary when decoded from distinguished encoding rules (DER) to an internal ASN.1 representation. The information required to construct the authenticated dictionary is conveyed from the certificate authority (CA) via a new CRL extension. The proposed method facilitates a number of advantages over the previous approaches like online certificate status protocol (OCSP): 1) it enables higher security because it does not require trusted entities other than the CA such as trusted LDAP servers and trusted OCSP responders; 2) it improves scalability and performance because it does not require responses to be signed as in OCSP; 3) it can intemperate well with the existing CRL framework; and 4) it does not need support for additional protocols for on-line certificate validation because it is built on LDAP which is the main access method to download CRLs. The proposed method can also be used as a CRL back-end of OCSP to offload CRL management and to enhance its trust model.","PeriodicalId":252208,"journal":{"name":"Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop","volume":"50 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-06-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116562157","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Investigating performance and impacts on fingerprint recognition systems 研究指纹识别系统的性能和影响

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495926

M. Arnold, C. Busch, Heinrich Ihmor

引用次数: 15

Host anomalies from network data 主机网络数据异常

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495970

Carrie Gates, Damon Becknel

引用次数: 18

CuPIDS enhances StUPIDS: exploring a co-processing paradigm shift in information system security CuPIDS增强StUPIDS:探索信息系统安全中的协同处理范式转变

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495943

Paul D. Williams Eugene H. Spafford

引用次数: 1