2014 IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications最新文献

筛选
英文 中文
Privacy Aware Non-linear Support Vector Machine for Multi-source Big Data 多源大数据隐私感知非线性支持向量机
Yunmei Lu, Piyaphol Phoungphol, Yanqing Zhang
{"title":"Privacy Aware Non-linear Support Vector Machine for Multi-source Big Data","authors":"Yunmei Lu, Piyaphol Phoungphol, Yanqing Zhang","doi":"10.1109/TrustCom.2014.103","DOIUrl":"https://doi.org/10.1109/TrustCom.2014.103","url":null,"abstract":"In order to build reliable prediction models and attain high classification accuracy, assembling datasets from multiple databases maintained by different sources (such as different hospitals) has become increasingly common. However, assembling these composite datasets involves the disclosure of individuals' records, therefore many local owners are reluctant to share their data due to privacy concerns. This paper presents a framework for building a Privacy-Aware Non-linear Support Vector Machine (PAN-SVM) classifier using distributed data sources. The framework with three layers can do global classification based on distributed data sources and protect individuals' records at the same time. At the bottom layer, k-means clustering is used to select landmarks that will be used by the medium layer after they are encrypted by a secure sum protocol. The medium layer employs Nystrom low-rank approximation and kernel matrix decomposition techniques to construct a global SVM classifier which is accelerated at the top layer by employing a cutting-plane technique. Simulation results on multiple datasets indicate that the new framework can solve the classification problem on distributed data sources effectively and efficiently, and protect the privacy of individuals' data as well.","PeriodicalId":268788,"journal":{"name":"2014 IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications","volume":"6 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-09-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131670075","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 5
Remote Programmatic vCloud Forensics: A Six-Step Collection Process and a Proof of Concept 远程编程vCloud取证:六步收集过程和概念证明
Ben Martini, Kim-Kwang Raymond Choo
{"title":"Remote Programmatic vCloud Forensics: A Six-Step Collection Process and a Proof of Concept","authors":"Ben Martini, Kim-Kwang Raymond Choo","doi":"10.1109/TrustCom.2014.124","DOIUrl":"https://doi.org/10.1109/TrustCom.2014.124","url":null,"abstract":"With the increasing popularity of cloud services and their potential to either be the target or the tool in a cybercrime activity, organizational cloud services users need to ensure that they are able to collect evidential data should they be involved in litigation or a criminal investigation. In this paper, we seek to contribute to a better understanding of the technical issues and processes regarding collection of evidential data in the cloud computing environment. Using VMware vCloud as a case study in this paper, we describe the various artefacts available in the cloud environment and identify several forensic preservation considerations for forensics practitioners. We then propose a six-step process for the remote programmatic collection of evidential data to ensure as few changes as possible are made as part of evidence collection and that no potential evidence is missed. The six-step process is implemented in a proof of concept application to demonstrate utility of the process.","PeriodicalId":268788,"journal":{"name":"2014 IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications","volume":"68 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-09-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132555577","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 55
A Stateful Mechanism for the Tree-Rule Firewall 树规则防火墙的状态机制
T. Chomsiri, Xiangjian He, P. Nanda, Zhiyuan Tan
{"title":"A Stateful Mechanism for the Tree-Rule Firewall","authors":"T. Chomsiri, Xiangjian He, P. Nanda, Zhiyuan Tan","doi":"10.1109/TrustCom.2014.20","DOIUrl":"https://doi.org/10.1109/TrustCom.2014.20","url":null,"abstract":"In this paper, we propose a novel connection tracking mechanism for Tree-rule firewall which essentially organizes firewall rules in a designated Tree structure. A new firewall model based on the proposed connection tracking mechanism is then developed and extended from the basic model of Net filter's Conn Track module, which has been used by many early generation commercial and open source firewalls including IPTABLES, the most popular firewall. To reduce the consumption of memory space and processing time, our proposed model uses one node per connection instead of using two nodes as appeared in Net filter model. This can reduce memory space and processing time. In addition, we introduce an extended hash table with more hashing bits in our firewall model in order to accommodate more concurrent connections. Moreover, our model also applies sophisticated techniques (such as using static information nodes, and avoiding timer objects and memory management tasks) to improve its processing speed. Finally, we implement this model on Linux Cent OS 6.3 and evaluate its speed. The experimental results show that our model performs more efficiently in comparison with the Net filter/IPTABLES.","PeriodicalId":268788,"journal":{"name":"2014 IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications","volume":"25 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-09-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122427996","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 15
A Study on Recursive Neural Network Based Sentiment Classification of Sina Weibo 基于递归神经网络的新浪微博情感分类研究
Chen Fu, Bai Xue, Shaobin Zhan
{"title":"A Study on Recursive Neural Network Based Sentiment Classification of Sina Weibo","authors":"Chen Fu, Bai Xue, Shaobin Zhan","doi":"10.1109/TrustCom.2014.88","DOIUrl":"https://doi.org/10.1109/TrustCom.2014.88","url":null,"abstract":"Analyzing sentiment hidden in Sina Weibo's huge amount of information can benefit online marketing, branding, customer relationship management and monitoring public opinions. In this paper, we show how a recursive neural network can be trained to classify Sina Weibo messages' sentiment. Considering syntactic and semantic meaning of the sentence, this method is much superior to just basing on sentiment dictionary. Extensive experiments on huge dataset of Sina Weibo demonstrate that this model consistently outperforms existing sentiment classification model on identifying hidden or implied sentiment.","PeriodicalId":268788,"journal":{"name":"2014 IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications","volume":"11 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-09-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123439368","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
An On-Line Anomaly Detection Method Based on a New Stationary Metric - Entropy-Ratio 基于新平稳度量熵比的在线异常检测方法
Ziyu Wang, Jiahai Yang, Fuliang Li
{"title":"An On-Line Anomaly Detection Method Based on a New Stationary Metric - Entropy-Ratio","authors":"Ziyu Wang, Jiahai Yang, Fuliang Li","doi":"10.1109/TrustCom.2014.16","DOIUrl":"https://doi.org/10.1109/TrustCom.2014.16","url":null,"abstract":"Anomaly detection has been a hot topic in recent years due to its capability of detecting zero day attacks. In this paper, we propose a new metric called Entropy-Ratio. We validate that the Entropy-Ratio is stationary. Making use of this observation, we combine the Least Mean Square algorithm and the Forward Linear Predictor to propose a new on-line detector called LMS-FLP detector. Using the two synthetic data sets - CEGI-6IX synthetic data and CERNET2 synthetic data, we validate that the LMS-FLP detector is very effective in detecting both anomalies involving many small IP flows and anomalies involving a few large IP flows.","PeriodicalId":268788,"journal":{"name":"2014 IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications","volume":"41 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-09-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130523772","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 5
SIMS: A Comprehensive Approach for a Secure Instant Messaging Sifter SIMS:一种安全即时通讯筛选器的综合方法
Günter Fahrnberger
{"title":"SIMS: A Comprehensive Approach for a Secure Instant Messaging Sifter","authors":"Günter Fahrnberger","doi":"10.1109/TrustCom.2014.25","DOIUrl":"https://doi.org/10.1109/TrustCom.2014.25","url":null,"abstract":"Instant messaging (IM) stands for a visual mode of communication with the chance of real time responses but without (needed or wished) face-to-face contacts. In particular, youngsters prefer instant messengers to kill time if they are bored and nothing else within range interests them. Harmfully, they may get in touch with inappropriate language there. Much worse, their habitation in such virtual venues allures child molesters as well. Even chatting majors may be sighted and hassled to obtain exploitable private data from them. This paper aids by evaluating a comprehensive threat model for censored IM traffic in order to draft a security policy for IM clients, transmission facilities and IM platforms with a bulk of desired protection properties. Finally, an innovative IM architecture kit becomes conceptually introduced that meets all advised requirements and therefore mitigates the threats. It contains a secure IM filter that guarantees not only authenticity, integrity, privacy and resilience but also prevention of abusive language, cyber bullying, molestation and others exploits.","PeriodicalId":268788,"journal":{"name":"2014 IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-09-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129457331","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 7
Computation Integrity Measurement Based on Branch Transfer 基于分支转移的计算完整性度量
Jianming Fu, Yan Lin, Xu Zhang, Pengwei Li
{"title":"Computation Integrity Measurement Based on Branch Transfer","authors":"Jianming Fu, Yan Lin, Xu Zhang, Pengwei Li","doi":"10.1109/TrustCom.2014.75","DOIUrl":"https://doi.org/10.1109/TrustCom.2014.75","url":null,"abstract":"Tasks are selectively migrated to the cloud with the widespread adoption of the cloud computing platform, but the user cannot know whether the tasks are tampered in the cloud, so it is an urgent demand for cloud users to verify the execution integrity of the program in the cloud. The computation integrity measurement based on behavior is difficult to detect carefully crafted shell code. According to the property of shell code, this paper proposes a computation integrity measurement based on branch transfer called CIMB, which is a fine-grained instruction-level integrity measurement. In this approach, all branches in the user-level have been recorded, which effectively cover all execution control flow of a program, and CIMB can detect control-flow hijacking attacks without the support of source code, such as Return-oriented Programming (ROP) and Jump-oriented Programming (JOP). Meanwhile, distance between two instruction addresses and machine code of instruction can mask the measurement inconsistency derived from address space layout randomization of program and shared libraries. Finally, we have implemented CIMB with a dynamic binary instrumentation tool Pin on ×86 32-bit version of ubuntu12.04. Its experimental results show that CIMB is feasible and it has a relatively stable measurement result, and the advantages of CIMB and factors affecting the results of measurement are analyzed and discussed.","PeriodicalId":268788,"journal":{"name":"2014 IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications","volume":"36 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-09-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114221495","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
Defensor: Lightweight and Efficient Security-Enhanced Framework for Android defender:轻量级和高效的Android安全增强框架
Xuerui Pan, Yibing Zhongyang, Zhi Xin, Bing Mao, Hao Huang
{"title":"Defensor: Lightweight and Efficient Security-Enhanced Framework for Android","authors":"Xuerui Pan, Yibing Zhongyang, Zhi Xin, Bing Mao, Hao Huang","doi":"10.1109/TrustCom.2014.36","DOIUrl":"https://doi.org/10.1109/TrustCom.2014.36","url":null,"abstract":"Recently the market of Android has shown an explosive development. Unfortunately the increasing popularity turns the Android platform into the main target of malware. At the same time, the limited security protection built-in Android makes the situation much worse. In this paper, we present a new framework named Defensor which takes the practicability and effectiveness into consideration. The core part of Defensor is built in Linux kernel, which results in a small size of TCB. Defensor is a system-wide lightweight inspecting framework. It can closely monitor the malicious behaviors within and across applications, such as sending SMS to premium rate numbers, stealing privacy from the compromised device and getting root privileges through root exploits. This type of monitor is mandatory. Any application installed on the phone and any component including malicious native code can't bypass it. Defensor can not only rebuild the high level behaviors from system calls, but also extract the context information that the behavior runs in. Context-based information likes background and foreground contributes a lot to the accuracy of malware detection. We have tested Defensor on real malware to prove its effectiveness. Finally, an experimental evaluation showing that the overhead introduced by Defensor is limited.","PeriodicalId":268788,"journal":{"name":"2014 IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications","volume":"88 2","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-09-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"120867309","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 4
A Proposal for a Reference Architecture for Long-Term Archiving, Preservation, and Retrieval of Big Data 大数据长期存档、保存和检索的参考体系结构建议
Phillip Viana, L. Sato
{"title":"A Proposal for a Reference Architecture for Long-Term Archiving, Preservation, and Retrieval of Big Data","authors":"Phillip Viana, L. Sato","doi":"10.1109/TrustCom.2014.80","DOIUrl":"https://doi.org/10.1109/TrustCom.2014.80","url":null,"abstract":"The volume of data stored in corporate data centers has been growing at a rate of 35% to 50% per year [1]. The exponential growth in data volume leads to some challenges from the technical, operational and financial perspectives. Along with this increase in the data volume the demand for preservation (or retention) of such data has also increased due to government regulations. The convergence of these two trends (growth of data volume and increased demand for preservation) implies that storage systems must support the preservation of data for very long periods of time. Several studies address the archiving, preservation and retrieval of structured data. To the best of our knowledge, there couldn't be found reference architectures specifically focused on the archiving, preservation and retrieval of both unstructured and structured data. Our research goal is to propose a reference architecture for the long term archiving, preservation and retrieval of Big Data.","PeriodicalId":268788,"journal":{"name":"2014 IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-09-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126034448","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 11
Proofs of Ownership and Retrievability in Cloud Storage 云存储中的所有权证明和可检索性
Ruiying Du, L. Deng, J. Chen, Kun He, Minghui Zheng
{"title":"Proofs of Ownership and Retrievability in Cloud Storage","authors":"Ruiying Du, L. Deng, J. Chen, Kun He, Minghui Zheng","doi":"10.1109/TrustCom.2014.44","DOIUrl":"https://doi.org/10.1109/TrustCom.2014.44","url":null,"abstract":"With the development and maturity of cloud computing technology, the demand for cloud storage is growing. Deduplication is a basic requirement for cloud storage to save storage space of cloud servers. And as clients are untrusted from the perspective of the server, the notion of Proofs of Ownership (PoWs) has been proposed in client-side deduplication. On the other hand, the clients cannot completely trust the server either, thus clients have to know whether their files are stored integrally in the cloud. However, most existing works only focus on one-way validation. In this paper, we introduce a framework called Proofs of Ownership and Retrievability (PoOR) considering the requirement of mutual validation. In our PoOR scheme, clients can prove to the server their ownership of files and verify the retrievability of the files without uploading or downloading them. For ensuring the recoverability and security of files in server, we encode files by erasure code. In order to keep the communication cost in constant, we employ Merkle Tree and homomorphic verifiable tags which also induce acceptable storage overheads. At last, we implemente our scheme and compare it with other schemes. The result shows that the PoOR scheme is efficient in computation performance, especially when the size of the file is large.","PeriodicalId":268788,"journal":{"name":"2014 IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications","volume":"4 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-09-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127602991","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 18
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
相关产品
×
本文献相关产品
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信
小红书