Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop最新文献_第4页

Toward a decentralized trust-based access control system for dynamic collaboration 面向动态协作的分散信任访问控制系统

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495969

William J. Adams, Nathaniel J. Davis

引用次数: 76

A log independent distributed database damage assessment model 一个与日志无关的分布式数据库损害评估模型

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495967

Jing Zhou, B. Panda, Y. Hu

引用次数: 6

Building compact exploitation graphs for a cluster computing environment 为集群计算环境构建紧凑的开发图

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495933

Wei Li, R. Vaughn

{"title":"Building compact exploitation graphs for a cluster computing environment","authors":"Wei Li, R. Vaughn","doi":"10.1109/IAW.2005.1495933","DOIUrl":"https://doi.org/10.1109/IAW.2005.1495933","url":null,"abstract":"In this paper, a modeling process is described to address challenges in analyzing attack scenarios and mitigating vulnerabilities in networked environments. Known system vulnerability data, system configuration data, and vulnerability scanner results are combined to create exploitation graphs (e-graphs), which are used to represent attack scenarios. The modeling process consists of three primary steps. The first step is the creation of a knowledge base of known system vulnerabilities. These vulnerabilities are represented using preconditions and postconditions. A template is used to represent preconditions and postconditions, and vulnerabilities are encoded using a predefined set of attributes. The second step involves the association of multiple vulnerabilities to create an e-graph specific to the system being modeled. The third step of this process involves the development of abstraction techniques that can be used to simplify exploitation graphs. A novel abstraction technique is proposed based on host connection similarity and exploitation similarity. These techniques have been applied into a high-performance cluster computing environment to show that they facilitate a compact representation of attack scenarios and provide in-depth vulnerability assessments.","PeriodicalId":252208,"journal":{"name":"Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-06-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130992328","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

Anomaly intrusion detection based on biometrics 基于生物特征的异常入侵检测

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495997

Ahmed Awad E. Ahmed, I. Traoré

引用次数: 122

Wireless security policy development for sensitive organizations 为敏感组织开发无线安全策略

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495946

M. Manley, C. McEntee, A. Molet, J.S. Park

引用次数: 19

Community security awareness training 社区保安意识培训

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495976

Barbara E. Endicott-Popovsky, Ivan Orton, Kirk Bailey, Deb Frincke

{"title":"Community security awareness training","authors":"Barbara E. Endicott-Popovsky, Ivan Orton, Kirk Bailey, Deb Frincke","doi":"10.1109/IAW.2005.1495976","DOIUrl":"https://doi.org/10.1109/IAW.2005.1495976","url":null,"abstract":"NIST special publication 800-50 outlines standards for the development and implementation of security awareness training by Wilson, M. and Hash, J. (2003). Recognizing that the \"peoplefactor\" is the weakest link, NIST recommends that all users of any information system be made aware of their roles and responsibilities in maintaining security by Wilson, M. and Hash, J. (2003). Further, to be effective, any awareness event should be designed for the intended audience, built around a message and desired outcomes and gain attention by Wilson, M. and Hash, J. (2003). Such a security awareness event was conducted for the business community leadership in Seattle, Washington. The purpose was to alert them to the risks of identity theft through misuse of online search engines. The means adopted for focusing attention, was a Google-hacking contest. Based on observations of this trial, the authors suggest that a security awareness program, based on NIST standards, can be effective, not only for organizations, but for specifically defined communities, as well. This paper describes the event, the outcomes and the authors' conclusions. The approach presented in this paper could be repeatable in any community for a variety of purposes.","PeriodicalId":252208,"journal":{"name":"Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-06-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121524710","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 7

Efficient log authentication for forensic computing 用于取证计算的高效日志身份验证

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495955

N. Kawaguchi, N. Obata, S. Ueda, Y. Azuma, H. Shigeno, K. Okada

引用次数: 4

Malware examiner using disassembled code (MEDiC) 恶意软件审查员使用反汇编代码(MEDiC)

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495985

A. Sulaiman, K. Ramamoorthy, S. Mukkamala, A. Sung

引用次数: 12

User profiling using text classification 使用文本分类的用户分析

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495963

P. Carter

引用次数: 0

Detecting honeypots and other suspicious environments 探测蜜罐和其他可疑环境

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495930

Thorsten Holz, F. Raynal

引用次数: 186