2013 International Conference on Availability, Reliability and Security最新文献_第6页

Collaborative Security Management: Developing Ideas in Security Management for Air Traffic Control 协同安全管理:空中交通管制安全管理的发展思路

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.107

M. Hawley, P. Howard, R. Koelle, Peter Saxton

引用次数: 8

Beyond Traceability: Compared Approaches to Consistent Security Risk Assessments 超越可追溯性:一致安全风险评估的比较方法

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.109

F. Bergomi, S. Paul, Bjørnar Solhaug, Raphaël Vignon-Davillier

{"title":"Beyond Traceability: Compared Approaches to Consistent Security Risk Assessments","authors":"F. Bergomi, S. Paul, Bjørnar Solhaug, Raphaël Vignon-Davillier","doi":"10.1109/ARES.2013.109","DOIUrl":"https://doi.org/10.1109/ARES.2013.109","url":null,"abstract":"As military and civil software-intensive information systems grow and become more and more complex, structured approaches, called architecture frameworks (AF), were developed to support their engineering. The concepts of these approaches were standardised under ISO/IEC 42010 - Systems and Software Engineering - Architecture Description. An Architecture Description is composed of Views, where each View addresses one or more engineering concerns. As mentioned in the standard, a multi-viewpoint approach requires the capacity to capture the different views, and maintain their mutual consistency. This paper addresses primarily the problem of integrating a model-based security risk assessment view to the mainstream system engineering view(s) and, to a lesser extent, the problem of maintaining the overall consistency of the views. Both business stakes and technical means are studied. We present two specific approaches, namely CORAS and Rinforzando. Both come with techniques and tool support to facilitate security risk assessment of complex and evolving critical infrastructures, such as ATM systems. The former approach offers static import/export relationships between artefacts, whereas the latter offers dynamic relationships. The pros and cons of each technical approach are discussed.","PeriodicalId":302747,"journal":{"name":"2013 International Conference on Availability, Reliability and Security","volume":"94 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-09-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131478575","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 7

Automated Synthesis and Ranking of Secure BPMN Orchestrators 安全BPMN协调器的自动合成和排序

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.4018/ijsse.2014040103

V. Ciancia, José Antonio Martín, F. Martinelli, I. Matteucci, M. Petrocchi, E. Pimentel

引用次数: 4

A Reputation-Based Clustering Mechanism for MANET Routing Security 基于声誉的MANET路由安全聚类机制

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.42

Aida Ben Chehida Douss, Ryma Abassi, S. Fatmi

{"title":"A Reputation-Based Clustering Mechanism for MANET Routing Security","authors":"Aida Ben Chehida Douss, Ryma Abassi, S. Fatmi","doi":"10.1109/ARES.2013.42","DOIUrl":"https://doi.org/10.1109/ARES.2013.42","url":null,"abstract":"A Mobile Ad hoc NETwork (MANET) is a collection of mobile nodes having no fixed topology and cooperating with each other. Due to these particularities, classical routing protocols cannot be used and some specific ones have been proposed. Because routing process is fundamental in a MANET deployment, it constitutes a privileged target of attackers. In this paper we propose a novel reputation-based clustering mechanism to locate malicious nodes and isolate them. In order to reduce network overhead and to handle network topology dynamicity, the proposed mechanism is based on a specific clustering environment. The clustering maintenance complexity is for its part reduced by the use of a reputation based delegation process allowing the cluster-head to delegate its privileges to a chosen cluster member in case of displacement or lack of energy. Moreover, node's reputation handling allows the detection and isolation of malicious nodes. Five modules constitute this mechanism: a monitoring module to detect malicious nodes, a reputation module to update reputation values, an isolation module to discard malicious nodes, an identity recognition module to assess alerts sources and a delegation module to allow clusterhead privileges delegation.","PeriodicalId":302747,"journal":{"name":"2013 International Conference on Availability, Reliability and Security","volume":"194 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-09-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124316486","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 16

Sink or SWIM: Information Security Requirements in the Sky 下沉或游泳:天空中的信息安全要求

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.106

M. Jaatun, Tor Erlend Fægri

引用次数: 4

iOS Forensics: How Can We Recover Deleted Image Files with Timestamp in a Forensically Sound Manner? iOS取证:我们如何恢复删除的图像文件与时间戳在法医声音的方式?

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.50

A. Ariffin, Christian D'Orazio, Kim-Kwang Raymond Choo, J. Slay

引用次数: 22

An Approach Based on Model-Driven Engineering to Define Security Policies Using OrBAC 基于模型驱动工程的OrBAC安全策略定义方法

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.44

Denisse Muñante Arzapalo, L. Gallon, P. Aniorté

引用次数: 9

Model-Assisted Access Control Implementation for Code-centric Ruby-on-Rails Web Application Development 以代码为中心的Ruby-on-Rails Web应用程序开发的模型辅助访问控制实现

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.47

S. Munetoh, Nobukazu Yoshioka

引用次数: 8

Isolation of Malicious External Inputs in a Security Focused Adaptive Execution Environment 在以安全为重点的自适应执行环境中隔离恶意外部输入

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.15

Aaron M. Paulos, P. Pal, R. Schantz, B. Benyo, David Johnson, Mike Hibler, E. Eide

引用次数: 4

Towards Web-Based Biometric Systems Using Personal Browsing Interests 基于个人浏览兴趣的基于网络的生物识别系统

2013 International Conference on Availability, Reliability and Security Pub Date : 2013-09-02 DOI: 10.1109/ARES.2013.36

Lukasz Olejnik, C. Castelluccia

引用次数: 15