Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop最新文献_第6页

Initial documentation requirements for a high assurance system: lessons learned 高保证系统的初始文件要求:经验教训

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495988

P. Clark, C.E. Irvine, T. Levin, T.D. Nguyen, D. Shifflett, D. Miller

引用次数: 0

Attacking automatic wireless network selection 攻击无线网络自动选择

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495975

A., Zovi, Shane A. Macaulay

{"title":"Attacking automatic wireless network selection","authors":"A., Zovi, Shane A. Macaulay","doi":"10.1109/IAW.2005.1495975","DOIUrl":"https://doi.org/10.1109/IAW.2005.1495975","url":null,"abstract":"Wireless 802.11 networking is becoming so prevalent that many users have become accustomed to having available wireless networks in their workplace, home, and many public places such as airports and coffee shops. Modern client operating systems implement automatic wireless network discovery and known network identification to facilitate wireless networking for the end-user. In order to implement known network discovery, client operating systems remember past wireless networks that have been joined and automatically look for these networks (referred to as preferred or trusted networks) whenever the wireless network adapter is enabled. By examining these implementations in detail, we have discovered previously undisclosed vulnerabilities in the implementation of these algorithms under the two most prevalent client operating systems, Windows XP and MacOS X. With custom base station software, an attacker may cause clients within wireless radio range to associate to the attacker's wireless network without user interaction or notification. This occurs even if the user has never connected to a wireless network before or they have an empty preferred/trusted networks list. We describe these vulnerabilities as well as their implementation and impact.","PeriodicalId":252208,"journal":{"name":"Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop","volume":"61 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-06-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134146220","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 37

Honeynet maintenance procedures and tools 蜜网维护程序和工具

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495960

C.H.P.C. Chaves, L. Franco, A. Montes

引用次数: 3

Towards a third generation data capture architecture for honeynets 面向蜜网的第三代数据捕获体系结构

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495929

E. Balas, C. Viecco

引用次数: 70

Safe renewal of a random key pre-distribution scheme for trusted devices 安全更新可信设备的随机密钥预分发方案

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495945

M. Ramkumar

{"title":"Safe renewal of a random key pre-distribution scheme for trusted devices","authors":"M. Ramkumar","doi":"10.1109/IAW.2005.1495945","DOIUrl":"https://doi.org/10.1109/IAW.2005.1495945","url":null,"abstract":"Evolving application scenarios involving ubiquitous, heterogeneous devices (some of which may be severely resource constrained) forming cooperative ad hoc networks, calls for a different model for \"trust\". It is the devices that are trusted - not the operators or the \"owners\" of the devices. Any security solution based on trusted devices demands mechanisms for read-proofing the secrets stored in tamper-resistant devices. However, as perfect tamper-resistance may not be feasible, for long-lived security of such deployments, it is essential that the stored secrets be renewed periodically. This paper addresses issues involved safe renewal of secrets stored in trusted devices. For safe renewal of keys, (irrespective of the key distribution scheme used) some assurances from technology for tamper-resistance is needed. In this paper the author address issues involved in safe renewal of a recently proposed random key pre-distribution scheme, HARPS (hashed random preloaded subsets) (Ramkumar, et al., 2005). The authors discuss: 1) some \"reasonable\" assurances that technology could provide (like partial tamper resistance and circuit-delay based authentication), and 2) possible security precautions and policies (like use of a pass-phrase, use of an additional stored secret, and rest encryption), and their effect on the security of HARPS.","PeriodicalId":252208,"journal":{"name":"Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop","volume":"32 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-06-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114164071","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

Closing-the-loop: discovery and search in security visualizations 闭环:安全可视化中的发现和搜索

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495934

K. Lakkaraju, R. Bearavolu, A. Slagell, W. Yurcik

引用次数: 13

Towards collaborative security and P2P intrusion detection 协同安全与P2P入侵检测

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495971

M. Locasto, Janak J. Parekh, A. Keromytis, S. Stolfo

{"title":"Towards collaborative security and P2P intrusion detection","authors":"M. Locasto, Janak J. Parekh, A. Keromytis, S. Stolfo","doi":"10.1109/IAW.2005.1495971","DOIUrl":"https://doi.org/10.1109/IAW.2005.1495971","url":null,"abstract":"The increasing array of Internet-scale threats is a pressing problem for every organization that utilizes the network. Organizations have limited resources to detect and respond to these threats. The end-to-end (E2E) sharing of information related to probes and attacks is a facet of an emerging trend toward \"collaborative security\". The key benefit of a collaborative approach to intrusion detection is a better view of global network attack activity. Augmenting the information obtained at a single site with information gathered from across the network can provide a more precise model of an attacker's behavior and intent. While many organizations see value in adopting such a collaborative approach, some challenges must be addressed before intrusion detection can be performed on an inter-organizational scale. We report on our experience developing and deploying a decentralized system for efficiently distributing alerts to collaborating peers. Our system, worminator, extracts relevant information from alert streams and encodes it in bloom filters. This information forms the basis of a distributed watchlist. The watchlist can be distributed via a choice of mechanisms ranging from a centralized trusted third party to a decentralized P2P-style overlay network.","PeriodicalId":252208,"journal":{"name":"Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop","volume":"20 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-06-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116744489","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 168

Reverse code engineering: an in-depth analysis of the Bagle virus 反向代码工程:对Bagle病毒的深入分析

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495977

K. Rozinov

引用次数: 18

Application of zeta function to quantum cryptography ζ函数在量子密码学中的应用

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495986

Xiangdong Li, M. Anshel

引用次数: 2

MAC layer anomaly detection in ad hoc networks ad hoc网络中的MAC层异常检测

Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop Pub Date : 2005-06-15 DOI: 10.1109/IAW.2005.1495980

Yu Liu, Yang Li, H. Man

引用次数: 54