2018 International Carnahan Conference on Security Technology (ICCST)最新文献

Welcome 欢迎

2018 International Carnahan Conference on Security Technology (ICCST) Pub Date : 2018-10-01 DOI: 10.1109/ccst.2018.8585611

D. Alexandridis, J. Bikker

引用次数: 0

Physical Security Assessment Using Temporal Machine Learning 使用时间机器学习的物理安全评估

2018 International Carnahan Conference on Security Technology (ICCST) Pub Date : 2018-10-01 DOI: 10.1109/CCST.2018.8585705

Meghan A. Galiardi, Stephen J Verzi, G. Birch, Jaclynn J. Stubbs, Bryana L. Woo, C. Kouhestani

{"title":"Physical Security Assessment Using Temporal Machine Learning","authors":"Meghan A. Galiardi, Stephen J Verzi, G. Birch, Jaclynn J. Stubbs, Bryana L. Woo, C. Kouhestani","doi":"10.1109/CCST.2018.8585705","DOIUrl":"https://doi.org/10.1109/CCST.2018.8585705","url":null,"abstract":"Nuisance and false alarms are prevalent in modern physical security systems and often overwhelm the alarm station operators. Deep learning has shown progress in detection and classification tasks, however, it has rarely been implemented as a solution to reduce the nuisance and false alarm rates in a physical security systems. Previous work has shown that transfer learning using a convolutional neural network can provide benefit to physical security systems by achieving high accuracy of physical security targets [10]. We leverage this work by coupling the convolutional neural network, which operates on a frame-by-frame basis, with temporal algorithms which evaluate a sequence of such frames (e.g. video analytics). We discuss several alternatives for performing this temporal analysis, in particular Long Short-Term Memory and Liquid State Machine, and demonstrate their respective value on exemplar physical security videos. We also outline an architecture for developing an ensemble learner which leverages the strength of each individual algorithm in its aggregation. The incorporation of these algorithms into physical security systems creates a new paradigm in which we aim to decrease the volume of nuisance and false alarms in order to allow the alarm station operators to focus on the most relevant threats.","PeriodicalId":337704,"journal":{"name":"2018 International Carnahan Conference on Security Technology (ICCST)","volume":"51 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126622209","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Performing a Presentation Attack Detection on Voice Biometrics 基于语音生物特征的演示攻击检测

2018 International Carnahan Conference on Security Technology (ICCST) Pub Date : 2018-10-01 DOI: 10.1109/CCST.2018.8585464

Jorge Sanchez-Casanova, Ines Goicoechea-Telleria, J. Liu-Jimenez, R. Sánchez-Reillo

引用次数: 0

PSA-LOPA - A Novel Method for Physical Security Risk Analysis based on Layers of Protection Analysis 基于保护层分析的物理安全风险分析新方法PSA-LOPA

2018 International Carnahan Conference on Security Technology (ICCST) Pub Date : 2018-10-01 DOI: 10.1109/CCST.2018.8585593

F. Garzia, M. Lombardi, M. Fargnoli, S. Ramalingam

引用次数: 6

Airport Security X-Ray Screening of Hold Baggage: 2D Versus 3D Imaging and Evaluation of an on-Screen Alarm Resolution Protocol 机场安检手提行李的x射线检查:2D与3D成像和屏幕警报分辨率协议的评估

2018 International Carnahan Conference on Security Technology (ICCST) Pub Date : 2018-10-01 DOI: 10.1109/CCST.2018.8585713

Nicole Hättenschwiler, Sarah Merks, A. Schwaninger

{"title":"Airport Security X-Ray Screening of Hold Baggage: 2D Versus 3D Imaging and Evaluation of an on-Screen Alarm Resolution Protocol","authors":"Nicole Hättenschwiler, Sarah Merks, A. Schwaninger","doi":"10.1109/CCST.2018.8585713","DOIUrl":"https://doi.org/10.1109/CCST.2018.8585713","url":null,"abstract":"In airport security screening, passenger baggage that is transported in the hold of an aircraft (hold baggage) is screened using X-ray machines with explosive detection technology. Older systems are based on 2D multi-view imaging whereas newer systems are based on computer tomography (CT) that features 3D rotatable images (3D imaging). Regulators, airport operators and security providers currently discuss whether extensive and specific training is necessary for screeners who are used to 2D multi-view imaging before they start working with 3D imaging. Moreover, to facilitate the decision making of screeners, so called on-screen alarm resolution protocols (OSARP) are available for 3D imaging. However, their effectiveness has not been investigated yet. To address these issues, we compared the visual inspection performance of screeners using state-of-the-art 2D multi-view imaging versus 3D imaging versus 3D imaging following a specific on-screen alarm resolution protocol (OSARP). In a simulated hold baggage screening task, screeners had to decide whether X-ray images contained an improvised explosive device (IED) or not. Results showed that there was no difference in detection performance (d‘) between 2D and 3D imaging. Visual inspection with 3D imaging following an OSARP resulted in higher detection performance (d‘) compared to 2D and 3D imaging. In conclusion, screeners currently working with 2D multi-view technology do not need extensive and specific training to achieve comparable detection performance with 3D imaging. The application of an OSARP has the potential to further increase screeners' detection performance (d‘) with 3D imaging.","PeriodicalId":337704,"journal":{"name":"2018 International Carnahan Conference on Security Technology (ICCST)","volume":"8 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124161586","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6

Examining Threat Image Projection Artifacts and Related Issues: A Rating Study 检查威胁图像投影伪影及相关问题:一项评级研究

2018 International Carnahan Conference on Security Technology (ICCST) Pub Date : 2018-10-01 DOI: 10.1109/CCST.2018.8585428

R. R. À. Porta, Y. Sterchi, A. Schwaninger

{"title":"Examining Threat Image Projection Artifacts and Related Issues: A Rating Study","authors":"R. R. À. Porta, Y. Sterchi, A. Schwaninger","doi":"10.1109/CCST.2018.8585428","DOIUrl":"https://doi.org/10.1109/CCST.2018.8585428","url":null,"abstract":"Threat image projection (TIP) is a widely used software function of X-ray machines at airport security checkpoints. TIP projects fictional threat images (FTIs) of actual pre-recorded threat items (mainly guns, knives and improvised explosive devices) into the X-ray images of passenger baggage before they are displayed to security officers (screeners) for screening. TIP increases attention and motivation of screeners and is often used to measure their detection performance. In order to be effective, TIP has to project FTIs in a realistic way. In other words, it should not be possible to detect FTIs by simply detecting visual artifacts resulting from TIP projection. This study was conducted to evaluate TIP quality regarding potential artifacts. First, we interviewed screeners to explore which TIP artifacts they encounter in their day-to-day work. In a second step, we conducted a rating study to quantify the identified artifacts and the quality of TIP images in general. The majority of images (80%) produced by TIP were judged by screeners to appear realistic. However, in some images FTIs were positioned inadequately: the alignment (compared to the surrounding baggage items) appeared artificial (15%) or the placement appeared physically implausible (17%; e.g. an improvised explosive device going through a heel). These two issues also significantly affected the image to appear unrealistic in general. We conclude that in most cases, TIP succeeds in projecting FTIs without creating discernable artifacts. In some cases however, the FTI is positioned inadequately, which could be improved in the future.","PeriodicalId":337704,"journal":{"name":"2018 International Carnahan Conference on Security Technology (ICCST)","volume":"62 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127979619","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

AirSign: A Gesture-Based Smartwatch User Authentication AirSign:基于手势的智能手表用户认证

2018 International Carnahan Conference on Security Technology (ICCST) Pub Date : 2018-10-01 DOI: 10.1109/CCST.2018.8585571

Attaullah Buriro, Rutger Van Acker, B. Crispo, A. Mahboob

{"title":"AirSign: A Gesture-Based Smartwatch User Authentication","authors":"Attaullah Buriro, Rutger Van Acker, B. Crispo, A. Mahboob","doi":"10.1109/CCST.2018.8585571","DOIUrl":"https://doi.org/10.1109/CCST.2018.8585571","url":null,"abstract":"Smartwatches have been seen as the next generation personal devices, after smartphones, due to their use for wide range of applications, e.g., communication, financial applications, social networking, and fitness tracking, etc. These applications generate and store a lot of personal and private data which needs to be protected from unauthorized access. Several authentication schemes based on PIN/password, graphical password have been proposed, however, it is quite difficult to enter or sketch them because of small smartwatch screen. In addition, these schemes still suffer from unsolved security issues. In this paper, we present a novel movement-based behavioral biometric authentication solution for smartwatch, namely, Airsign. Airsign requires smartwatch worn user to write her name in the air. Airsign leverages the arm-movements while the user swings her finger in the air during the process of writing her name. More specifically, Airsign generates arm-movement fingerprint to profile and identify the user. We implemented and evaluated our scheme on Motorola Moto 3G smartwatch. We applied Dynamic Time Warping (DTW), in two settings, and One-class Multilayer Perceptron (OMLP) as classifiers. Airsign has the potential to replace the traditional authentication schemes and be accepted by users.","PeriodicalId":337704,"journal":{"name":"2018 International Carnahan Conference on Security Technology (ICCST)","volume":"28 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121718245","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 19

Why Ransomware Needs A Human Touch 为什么勒索软件需要人工操作

2018 International Carnahan Conference on Security Technology (ICCST) Pub Date : 2018-10-01 DOI: 10.1109/CCST.2018.8585650

A. Ferreira

{"title":"Why Ransomware Needs A Human Touch","authors":"A. Ferreira","doi":"10.1109/CCST.2018.8585650","DOIUrl":"https://doi.org/10.1109/CCST.2018.8585650","url":null,"abstract":"Ransomware is currently one of the biggest threats in malware attacks. Although the first known attack occurred in 1989, only in the last 6 years has this threat greatly increased and become more sophisticated. The lack of adequate security measures and awareness propelled the rapid spread and increased severity of ransomware variants (e.g., WannaCry ransomware in 2017). Further, there is little research work on this matter, only traditional protections are available and even state-of-the-art mobile malware detection approaches are still ineffective. This greatly increases the attack surface on the mobile domain. To better understand the research work performed on this subject, this paper presents a detailed review of the literature on ransomware, existing mainly since 2015. Results show that most work focus on the analysis of ransomware structures and development/testing of detection solutions. Very few studies focus on human related solutions or ransomware prevention. This paper also presents an analysis of a sample of ransomware email subject lines regarding the integration of persuasion content and targeted/personal aspects, so to identify and understand more human aspects of the attack. In order to avoid mistakes similar to other social engineering malware research approaches (e.g., email phishing and scams), which have been more comprehensively studied, ransomware research direction must be completely reversed. It must focus mainly on prevention and backup/restoring procedures, which are related to sociotechnical solutions that can manage and understand users' awareness, workflow, behaviours and needs.","PeriodicalId":337704,"journal":{"name":"2018 International Carnahan Conference on Security Technology (ICCST)","volume":"10 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121731607","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 9

Counter Unmanned Aerial System Security Education 反无人机系统安全教育

2018 International Carnahan Conference on Security Technology (ICCST) Pub Date : 2018-10-01 DOI: 10.1109/CCST.2018.8585651

Jaclynn J. Stubbs, C. Kouhestani, Bryana L. Woo, G. Birch

引用次数: 1

Toward a Multi-Agent System Architecture for Insight & Cybersecurity in Cyber-Physical Networks 面向信息物理网络洞察力与网络安全的多智能体系统架构研究

2018 International Carnahan Conference on Security Technology (ICCST) Pub Date : 2018-10-01 DOI: 10.1109/CCST.2018.8585632

W. Stout

{"title":"Toward a Multi-Agent System Architecture for Insight & Cybersecurity in Cyber-Physical Networks","authors":"W. Stout","doi":"10.1109/CCST.2018.8585632","DOIUrl":"https://doi.org/10.1109/CCST.2018.8585632","url":null,"abstract":"Operational Technology (OT) networks existed well before the dawn of the Internet, and had enjoyed security through being air-gapped and isolated. However, the interconnectedness of the world has found its way into these OT networks, exposing their vulnerabilities for cyber attacks. As the global Internet continues to grow, it becomes more and more embedded with the physical world. The Internet of Things is one such example of how IT is blurring the cyber-physical boundaries. The eventuality will be a convergence of IT and OT. Until that day comes, cyber practitioners must still deal with the primitive security features of OT networks, maintain a foothold on enterprise and cloud networks, and attempt to instill sound security practices in burgeoning IoT networks. In this paper, we propose a new method to bring cyber security to OT and IoT-based networks, through Multi-agent Systems (MAS). MAS are flexible enough to integrate with fixed legacy networks, such as ICS, as well with be burned into newer devices and software, such as IoT and IT networks. In this paper, we discuss the features of MAS, the opportunities that exist to benefit cyber security, and a proposed architecture for a OT-based MAS.","PeriodicalId":337704,"journal":{"name":"2018 International Carnahan Conference on Security Technology (ICCST)","volume":"45 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133519278","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0