2013 International Conference on Availability, Reliability and Security最新文献_第2页

Counteract DNS Attacks on SIP Proxies Using Bloom Filters 使用Bloom过滤器抵消SIP代理上的DNS攻击

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.89

Ge Zhang, S. Fischer-Hübner

{"title":"Counteract DNS Attacks on SIP Proxies Using Bloom Filters","authors":"Ge Zhang, S. Fischer-Hübner","doi":"10.1109/ARES.2013.89","DOIUrl":"https://doi.org/10.1109/ARES.2013.89","url":null,"abstract":"SIP proxies play an important part in VoIP services. A Denial of Service (DoS) attack on them may cause the failure of the whole network. We investigate such a DoS attack by exploiting DNS queries. A SIP proxy needs to resolve domain names for processing a message. However, a DNS resolution may take a while. To avoid being blocked, a proxy suspends the processing task of the current message during its name resolution, so that it can continue to deal with other messages. Later when the answer is received, the suspended task will be resumed. It is an asynchronous implementation of DNS queries. Unfortunately, this implementation consumes memory storage and also brings troubles like a race condition. An attacker can collect a list of domain names which take seconds to resolve. Then, the attacker sends to a victim SIP proxy messages which contain these domain names. As a result, the victim proxy has to suspend a number of messages in a short while. Our experiments show that a SIP proxy can be easily crashed by such an attack and thus be not available anymore. To solve the problem, we analyzed the reasons that make a DNS query time-consuming, and then proposed a prevention scheme using bloom filters to blacklist suspicious DNS authoritative servers. Results of our experiments show it efficiently mitigates the attack with a reasonable false positive rate.","PeriodicalId":302747,"journal":{"name":"2013 International Conference on Availability, Reliability and Security","volume":"18 791 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-09-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127555468","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

The Big Four - What We Did Wrong in Advanced Persistent Threat Detection? 四大——我们在高级持续威胁检测中做错了什么?

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.32

Nikos Virvilis, D. Gritzalis

引用次数: 171

DNSSEC: Interoperability Challenges and Transition Mechanisms DNSSEC:互操作性挑战和转换机制

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.53

A. Herzberg, Haya Schulmann

引用次数: 10

Privacy-Preserving Publishing of Pseudonym-Based Trajectory Location Data Set 基于假名的轨迹定位数据集的隐私保护发布

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.81

K. Mano, Kazuhiro Minami, H. Maruyama

引用次数: 10

A Novel Proximity Based Trust Model for Opportunistic Networks 一种基于邻近度的机会网络信任模型

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.37

Mai H. El-Sherief, Marianne A. Azer

引用次数: 8

Enhancing CHASSIS: A Method for Combining Safety and Security 增强底盘:一种安全与保障相结合的方法

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.102

Christian Raspotnig, Vikash Katta, P. Kárpáti, A. Opdahl

引用次数: 20

Applying the SecRAM Methodology in a CLOUD-Based ATM Environment SecRAM方法在基于云的ATM环境中的应用

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.108

A. Marotta, G. Carrozza, L. Battaglia, Patrizia Montefusco, Vittorio Manetti

引用次数: 5

The Scourge of Internet Personal Data Collection 互联网收集个人资料的祸害

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.110

Esma Aïmeur, Manuel Lafond

{"title":"The Scourge of Internet Personal Data Collection","authors":"Esma Aïmeur, Manuel Lafond","doi":"10.1109/ARES.2013.110","DOIUrl":"https://doi.org/10.1109/ARES.2013.110","url":null,"abstract":"In today's age of exposure, websites and Internet services are collecting personal data-with or without the knowledge or consent of users. Not only does new technology provide an abundance of methods for organizations to gather and store information, but people are also willingly sharing data with increasing frequency, exposing their intimate lives on social media websites such as Facebook, Twitter, You tube, My space and others. Moreover, online data brokers, search engines, data aggregators and many other actors of the web are profiling people for various purposes such as the improvement of marketing through better statistics and an ability to predict consumer behaviour. Other less known reasons include understanding the newest trends in education, gathering people's medical history or observing tendencies in political opinions. People who care about privacy use the Privacy Enhancing Technologies (PETs) to protect their data, even though clearly not sufficiently. Indeed, as soon as information is recorded in a database, it becomes permanently available for analysis. Consequently even the most privacy aware users are not safe from the threat of re-identification. On the other hand, there are many people who are willing to share their personal information, even when fully conscious of the consequences. A claim from the advocates of open access information is that the preservation of privacy should not be an issue, as people seem to be confortable in a world where their tastes, lifestyle or personality are digitized and publicly available. This paper deals with Internet data collection and voluntary information disclosure, with an emphasis on the problems and challenges facing privacy nowadays.","PeriodicalId":302747,"journal":{"name":"2013 International Conference on Availability, Reliability and Security","volume":"902 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-09-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123269756","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 9

PyTrigger: A System to Trigger & Extract User-Activated Malware Behavior PyTrigger:触发&提取用户激活的恶意软件行为

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.16

D. Fleck, A. Tokhtabayev, Alex Alarif, A. Stavrou, Tomas Nykodym

{"title":"PyTrigger: A System to Trigger & Extract User-Activated Malware Behavior","authors":"D. Fleck, A. Tokhtabayev, Alex Alarif, A. Stavrou, Tomas Nykodym","doi":"10.1109/ARES.2013.16","DOIUrl":"https://doi.org/10.1109/ARES.2013.16","url":null,"abstract":"We introduce PyTrigger, a dynamic malware analysis system that automatically exercises a malware binary extracting its behavioral profile even when specific user activity or input is required. To accomplish this, we developed a novel user activity record and playback framework and a new behavior extraction approach. Unlike existing research, the activity recording and playback includes the context of every object in addition to traditional keyboard and mouse actions. The addition of the context makes the playback more accurate and avoids dependencies and pitfalls that come with pure mouse and keyboard replay. Moreover, playback can become more efficient by condensing common activities into a single action. After playback, PyTrigger analyzes the system trace using a combination of multiple states and behavior differencing to accurately extract the malware behavior and user triggered behavior from the complete system trace log. We present the algorithms, architecture and evaluate the PyTrigger prototype using 3994 real malware samples. Results and analysis are presented showing PyTrigger extracts additional behavior in 21% of the samples.","PeriodicalId":302747,"journal":{"name":"2013 International Conference on Availability, Reliability and Security","volume":"25 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-09-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"120898700","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 17

Universal Peer-to-Peer Network Investigation Framework 通用点对点网络调查框架

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.91

M. Scanlon, Mohand Tahar Kechadi

{"title":"Universal Peer-to-Peer Network Investigation Framework","authors":"M. Scanlon, Mohand Tahar Kechadi","doi":"10.1109/ARES.2013.91","DOIUrl":"https://doi.org/10.1109/ARES.2013.91","url":null,"abstract":"Peer-to-Peer (P2P) networking has fast become a useful technological advancement for a vast range of cyber criminal activities. Cyber crimes from copyright infringement and spamming, to serious, high financial impact crimes, such as fraud, distributed denial of service attacks (DDoS) and phishing can all be aided by applications and systems based on the technology. The requirement for investigating P2P based systems is not limited to the more well known cyber crimes listed above, as many more legitimate P2P based applications may also be pertinent to a digital forensic investigation, e.g., VoIP and instant messaging communications, etc. Investigating these networks has become increasingly difficult due to the broad range of network topologies and the ever increasing and evolving range of P2P based applications. This paper introduces the Universal Peer-to-Peer Network Investigation Framework (UP2PNIF), a framework which enables significantly faster and less labour intensive investigation of newly discovered P2P networks through the exploitation of the commonalities in network functionality. In combination with a reference database of known network protocols and characteristics, it is envisioned that any known P2P network can be instantly investigated using the framework. The framework can intelligently determine the best methodology dependant on the focus of the investigation resulting in a significantly expedited evidence gathering process.","PeriodicalId":302747,"journal":{"name":"2013 International Conference on Availability, Reliability and Security","volume":"76 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-09-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124935738","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4