2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing最新文献_第6页

Performance Metrics of Local Cloud Computing Architectures 本地云计算架构的性能指标

2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing Pub Date : 2015-11-03 DOI: 10.1109/CSCloud.2015.61

Travis Brummett, Pezhman Sheinidashtegol, Debadrita Sarkar, Jeffrey M. Galloway

引用次数: 8

Designing ARINC653 Partition Constrained Scheduling for Secure Real Time Embedded Avionics 安全实时嵌入式航空电子设备ARINC653分区约束调度设计

2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing Pub Date : 2015-11-03 DOI: 10.1109/CSCloud.2015.23

Xiang Tao, Yongxin Zhu, Yishu Mao, Han Song, Mengyun Liu, Xinyi Liu, Weiguang Sheng, Weiwei Shi

{"title":"Designing ARINC653 Partition Constrained Scheduling for Secure Real Time Embedded Avionics","authors":"Xiang Tao, Yongxin Zhu, Yishu Mao, Han Song, Mengyun Liu, Xinyi Liu, Weiguang Sheng, Weiwei Shi","doi":"10.1109/CSCloud.2015.23","DOIUrl":"https://doi.org/10.1109/CSCloud.2015.23","url":null,"abstract":"Being a high end embedded system, an avionic system calls for stringent real time constraints as well as secure guarantees. In terms of logical architecture, avionic systems have recently grown into the form of Integrated Modular Avionics (IMA) from the traditional federated avionics system whose redundancy level is overwhelming for modern large aircrafts. The key idea of IMA system lies in the rules of time and space partitioning, which guarantees system predictability and reliability. However, existing industrial practices of IMA partition and priority settings usually incur significant waste of resources, which would eventually lower the performance of IMA tasks in terms of latency or throughput. This issue was not properly addressed by previous researchers who assumed settings of priority variances and fixed partitions, which differ from practical applications. In this paper, a secure real time scheduling scheme with partition readjustment is proposed with inputs of features exhibited by tasks under partition. In our scheme, the resource costs are reduced by merging and restructuring partitions without compromising hard real time constraints. The simulation results of actual flight missions show that significant improvement by our method in terms of the average response time of tasks as well as number of partitions.","PeriodicalId":278090,"journal":{"name":"2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing","volume":"454 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125791381","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

An Efficiency Optimization Scheme for the On-the-Fly Statistical Randomness Test 动态统计随机性检验的效率优化方案

2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing Pub Date : 2015-11-03 DOI: 10.1109/CSCloud.2015.10

Jiahui Shen, Tianyu Chen, Lei Wang, Yuan Ma

{"title":"An Efficiency Optimization Scheme for the On-the-Fly Statistical Randomness Test","authors":"Jiahui Shen, Tianyu Chen, Lei Wang, Yuan Ma","doi":"10.1109/CSCloud.2015.10","DOIUrl":"https://doi.org/10.1109/CSCloud.2015.10","url":null,"abstract":"The randomness of random number generators (RNGs) significantly influences the security of cryptographic systems. Although RNGs are allowed to adopt in practical systems only after strict analysis and security evaluation, the randomness of generated sequences may degrade due to aging effects of electronic devices, change of temperature and humidity, or even malicious attacks. Therefore, before the generated sequence being used (as a secret key or any other critical cryptography parameter), it is necessary to execute the on-the-fly statistical randomness test (on-the-fly test) on the candidate sequence to ensure the security. On-the-fly test should be finished efficiently; otherwise, it would impact the cryptographic systems' performance. In this paper, we propose a scheme to optimize the efficiency of randomness test suites, that is, provide an optimized order of the tests in the test suite, so that an unqualified sequence can be rejected as early as possible. We apply this optimization scheme on the NIST test suite (SP 800-22) [1] as an instance. Experimental results of 128- and 256- bit sequence, demonstrate that the optimized efficiency approximates to the theoretical optimum and the scheme can be quickly implemented.","PeriodicalId":278090,"journal":{"name":"2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126439911","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Next Generation of Impersonator Bots: Mimicking Human Browsing on Previously Unvisited Sites 下一代模拟机器人:模仿人类浏览以前未访问过的网站

2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing Pub Date : 2015-11-03 DOI: 10.1109/CSCloud.2015.93

Yang Yang, N. Vlajic, U. T. Nguyen

{"title":"Next Generation of Impersonator Bots: Mimicking Human Browsing on Previously Unvisited Sites","authors":"Yang Yang, N. Vlajic, U. T. Nguyen","doi":"10.1109/CSCloud.2015.93","DOIUrl":"https://doi.org/10.1109/CSCloud.2015.93","url":null,"abstract":"The development of Web bots capable of exhibiting human-like browsing behavior has long been the goal of practitioners on both side of security spectrum - malicious hackers as well as security defenders. For malicious hackers such bots are an effective vehicle for bypassing various layers of system/network protection or for obstructing the operation of Intrusion Detection Systems (IDSs). For security defenders, the use of human-like behaving bots is shown to be of great importance in the process of system/network provisioning and testing. In the past, there have been many attempts at developing accurate models of human-like browsing behavior. However, most of these attempts/models suffer from one of following drawbacks: they either require that some previous history of actual human browsing on the target web-site be available (which often is not the case), or, they assume that 'think times' and 'page popularities' follow the well-known Poisson and Zipf distribution (an old hypothesis that does not hold well in the modern-day WWW). To our knowledge, our work is the first attempt at developing a model of human-like browsing behavior that requires no prior knowledge or assumption about human behavior on the target site. The model is founded on a more general theory that defines human behavior as an 'interest-driven' process. The preliminary simulation results are very encouraging - web bots built using our model are capable of mimicking real human browsing behavior 1000-fold better compared to bots that deploy random crawling strategy.","PeriodicalId":278090,"journal":{"name":"2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing","volume":"14 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121999985","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6

Understanding Model Risk Management -- Model Rationalization in Financial Industry 理解模型风险管理——金融行业的模型合理化

2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing Pub Date : 2015-11-03 DOI: 10.1109/CSCloud.2015.68

Hevel Jean-Baptiste, Lixin Tao, Meikang Qiu, Keke Gai

{"title":"Understanding Model Risk Management -- Model Rationalization in Financial Industry","authors":"Hevel Jean-Baptiste, Lixin Tao, Meikang Qiu, Keke Gai","doi":"10.1109/CSCloud.2015.68","DOIUrl":"https://doi.org/10.1109/CSCloud.2015.68","url":null,"abstract":"Building a good financial Model Risk Management (MRM) system requires advanced skills in technology, econometrics and financial businesses. Very often we have businesses that have different models with similar functionality. The question that we are trying to answer in the paper is how to rationalize different models within an Enterprise Risk Management (ERM) of in organization. It is a dilemma that Risk Management Practitioners are struggling with. Very often they are looking for someone who can understand their business ideas and transform them to technology solutions or come up with technology solutions to support their MRM ideas. While quantitative Analysts are very critical in this type of project, very often they fail in the software development skills that are required. We are witnesses these struggles where some model risk leaders fail to find some good technologists or econometricians to implement their risk management philosophy. Also we have cases where technologists or econometricians cannot receive proper requirements to implement the functionality that the business needs. Here we are trying to understand how we can rationalize on different models that have some common functionality. For example how to look at or consolidate the functionality of the following models, such as Probability of Default (PD), Loss Given Default (LGD), Allowance for Loan and Lease Losses (ALLL), Stress Testing (ST) and others Financial Models. In this paper, we will present a framework for Model Rationalization or how to consolidate models. Also we will present a methodology that can be used to test a model that has been consolidated through our framework, Model Rationalization.","PeriodicalId":278090,"journal":{"name":"2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing","volume":"34 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132740353","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6

Game Theoretic Modeling to Enforce Security Information Sharing among Firms 加强企业安全信息共享的博弈论模型

2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing Pub Date : 2015-11-03 DOI: 10.1109/CSCloud.2015.81

Deepak K. Tosh, S. Sengupta, S. Mukhopadhyay, C. Kamhoua, K. Kwiat

{"title":"Game Theoretic Modeling to Enforce Security Information Sharing among Firms","authors":"Deepak K. Tosh, S. Sengupta, S. Mukhopadhyay, C. Kamhoua, K. Kwiat","doi":"10.1109/CSCloud.2015.81","DOIUrl":"https://doi.org/10.1109/CSCloud.2015.81","url":null,"abstract":"Robust CYBersecurity information EXchange (CYBEX) infrastructure is envisioned to protect the firms from future cyber attacks via collaborative threat intelligence sharing, which might be difficult to achieve via sole effort. The executive order from the U. S. federal government clearly encourages the firms to share their cybersecurity breach and patch related information among other federal and private firms for strengthening their as well as nation's security infrastructure. In this paper, we present a game theoretic framework to investigate the economic benefits of cyber-threat information sharing and analyze the impacts and consequences of not participating in the game of information exchange. We model the information exchange framework as distributed non-cooperative game among the firms and investigate the implications of information sharing and security investments. The proposed incentive model ensures and self-enforces the firms to share their breach information truthfully for maximization of its gross utility. Theoretical analysis of the incentive framework has been conducted to find the conditions under which firms' net benefit for sharing security information and investment can be maximized. Numerical results verify that the proposed model promotes such sharing, which helps to relieve their total security technology investment too.","PeriodicalId":278090,"journal":{"name":"2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing","volume":"44 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130204847","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 30

A Novel Anomaly Detection Approach for Mitigating Web-Based Attacks Against Clouds 一种新的基于web的云攻击异常检测方法

2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing Pub Date : 2015-11-03 DOI: 10.1109/CSCloud.2015.46

Simin Zhang, B. Li, Jianxin Li, Mingming Zhang, Yang Chen

引用次数: 12

Two-Way Graphic Password for Mobile User Authentication 移动用户双向图形密码认证

2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing Pub Date : 2015-11-03 DOI: 10.1109/CSCloud.2015.45

Ming Jiang, A. He, Kuangyu Wang, Zhengyi Le

引用次数: 7

Detecting Malware for Android Platform: An SVM-Based Approach 基于svm的Android平台恶意软件检测方法

2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing Pub Date : 2015-11-03 DOI: 10.1109/CSCloud.2015.50

Wenjia Li, Jigang Ge, Guqian Dai

引用次数: 71

Extending OWL to Support Custom Relations 扩展OWL以支持自定义关系

2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing Pub Date : 2015-11-03 DOI: 10.1109/CSCloud.2015.74

K. Patel, Ishaan Dube, Lixin Tao, Ning Jiang

{"title":"Extending OWL to Support Custom Relations","authors":"K. Patel, Ishaan Dube, Lixin Tao, Ning Jiang","doi":"10.1109/CSCloud.2015.74","DOIUrl":"https://doi.org/10.1109/CSCloud.2015.74","url":null,"abstract":"Web Ontology Language (OWL) is used by domain experts to encode knowledge. OWL primarily only supports the subClassOf (is-a or inheritance) relation. Various other relations, such as partOf, are essential for representing information in various fields including all engineering disciplines. The current syntax of OWL does not support the declaration and usage of new custom relations. Workarounds to emulate custom relations do exist, but they add syntax burden to knowledge modelers and don't support accurate semantics for inference engines. This paper proposes minimal syntax extension to OWL for declaring custom relations with special attributes, and applying them in knowledge representation. Domain experts can apply custom relations intuitively and concisely as they do with the familiar built-in subClassOf relation. We present our additions to the OWL API for the declaration, application, and visualization of custom relations. We outline our revision and additions to the ontology editor Protégé so its users could visually declare, apply and remove custom relations according to our enriched OWL syntax. Work relating to our modification of the OWLViz plugin for custom relations visualization is also discussed.","PeriodicalId":278090,"journal":{"name":"2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing","volume":"59 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114286445","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 9