2016 IEEE Security and Privacy Workshops (SPW)最新文献_第2页

Hold and Sign: A Novel Behavioral Biometrics for Smartphone User Authentication 持有和签名:一种用于智能手机用户认证的新型行为生物识别技术

2016 IEEE Security and Privacy Workshops (SPW) Pub Date : 2016-05-22 DOI: 10.1109/SPW.2016.20

Attaullah Buriro, B. Crispo, Filippo Del Frari, K. Wrona

引用次数: 83

Research Report: Analysis of Software for Restricted Computational Environment Applicability 研究报告:有限计算环境软件适用性分析

2016 IEEE Security and Privacy Workshops (SPW) Pub Date : 2016-05-22 DOI: 10.1109/SPW.2016.38

Jacob I. Torrey, Jonathan Miodownik

引用次数: 1

A Semi-Automated Methodology for Extracting Access Control Rules from the European Data Protection Directive 从欧洲数据保护指令中提取访问控制规则的半自动化方法

2016 IEEE Security and Privacy Workshops (SPW) Pub Date : 2016-05-22 DOI: 10.1109/SPW.2016.16

K. Fatema, C. Debruyne, D. Lewis, D. O’Sullivan, J. Morrison, Abdullah-Al Mazed

引用次数: 11

Sensor-Based Mobile Web Fingerprinting and Cross-Site Input Inference Attacks 基于传感器的移动Web指纹识别和跨站输入推理攻击

2016 IEEE Security and Privacy Workshops (SPW) Pub Date : 2016-05-22 DOI: 10.1109/SPW.2016.17

Chuan Yue

引用次数: 9

Polymorphic Malware Detection Using Sequence Classification Methods 基于序列分类方法的多态恶意软件检测

2016 IEEE Security and Privacy Workshops (SPW) Pub Date : 2016-05-22 DOI: 10.1109/SPW.2016.30

Jake Drew, T. Moore, Michael Hahsler

{"title":"Polymorphic Malware Detection Using Sequence Classification Methods","authors":"Jake Drew, T. Moore, Michael Hahsler","doi":"10.1109/SPW.2016.30","DOIUrl":"https://doi.org/10.1109/SPW.2016.30","url":null,"abstract":"Polymorphic malware detection is challenging due to the continual mutations miscreants introduce to successive instances of a particular virus. Such changes are akin to mutations in biological sequences. Recently, high-throughput methods for gene sequence classification have been developed by the bioinformatics and computational biology communities. In this paper, we argue that these methods can be usefully applied to malware detection. Unfortunately, gene classification tools are usually optimized for and restricted to an alphabet of four letters (nucleic acids). Consequently, we have selected the Strand gene sequence classifier, which offers a robust classification strategy that can easily accommodate unstructured data with any alphabet including source code or compiled machine code. To demonstrate Stand's suitability for classifying malware, we execute it on approximately 500GB of malware data provided by the Kaggle Microsoft Malware Classification Challenge (BIG 2015) used for predicting 9 classes of polymorphic malware. Experiments show that, with minimal adaptation, the method achieves accuracy levels well above 95% requiring only a fraction of the training times used by the winning team's method.","PeriodicalId":341207,"journal":{"name":"2016 IEEE Security and Privacy Workshops (SPW)","volume":"16 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-05-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134451716","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 55

From Privacy Impact Assessment to Social Impact Assessment 从隐私影响评估到社会影响评估

2016 IEEE Security and Privacy Workshops (SPW) Pub Date : 2016-05-22 DOI: 10.1109/SPW.2016.19

L. Edwards, Derek McAuley, Laurence Diver

引用次数: 15

Grammatical Inference and Machine Learning Approaches to Post-Hoc LangSec Post-Hoc LangSec的语法推理和机器学习方法

2016 IEEE Security and Privacy Workshops (SPW) Pub Date : 2016-05-22 DOI: 10.1109/SPW.2016.26

Sheridan S. Curley, Richard E. Harang

{"title":"Grammatical Inference and Machine Learning Approaches to Post-Hoc LangSec","authors":"Sheridan S. Curley, Richard E. Harang","doi":"10.1109/SPW.2016.26","DOIUrl":"https://doi.org/10.1109/SPW.2016.26","url":null,"abstract":"Formal Language Theory for Security (LangSec) applies the tools of theoretical computer science to the problem of protocol design and analysis. In practice, most results have focused on protocol design, showing that by restricting the complexity of protocols it is possible to design parsers with desirable and formally verifiable properties, such as correctness and equivalence. When we consider existing protocols, however, many of these were not subjected to formal analysis during their design, and many are not implemented in a manner consistent with their formal documentation. Determining a grammar for such protocols is the first step in analyzing them, which places this problem in the domain of grammatical inference, for which a deep theoretical literature exists. In particular, although it has been shown that the higher level categories of the Chomsky hierarchy cannot be generically learned, it is also known that certain subcategories of that hierarchy can be effectively learned. In this paper, we summarize some theoretical results for inferring well-known Chomsky grammars, with special attention to context-free grammars (CFGs) and their generated languages (CFLs). We then demonstrate that, despite negative learnability results in the theoretical regime, we can use long short-term memory (LSTM) networks, a type of recurrent neural network (RNN) architecture, to learn a grammar for URIs that appear in Apache HTTP access logs for a particular server with high accuracy. We discuss these results in the context of grammatical inference, and suggest avenues for further research into learnability of a subgroup of the context-free grammars.","PeriodicalId":341207,"journal":{"name":"2016 IEEE Security and Privacy Workshops (SPW)","volume":"32 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-05-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133101389","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

A Critical Analysis of Privacy Design Strategies 隐私设计策略的批判性分析

2016 IEEE Security and Privacy Workshops (SPW) Pub Date : 2016-05-22 DOI: 10.1109/SPW.2016.23

Michael Colesky, J. Hoepman, Christiaan Hillen

引用次数: 132

Compliance Monitoring of Third-Party Applications in Online Social Networks 在线社交网络中第三方应用合规监控

2016 IEEE Security and Privacy Workshops (SPW) Pub Date : 2016-05-22 DOI: 10.1109/SPW.2016.13

Florian Kelbert, Alexander Fromm

引用次数: 3

Activity Pattern Discovery from Network Captures 从网络捕获中发现活动模式

2016 IEEE Security and Privacy Workshops (SPW) Pub Date : 2016-05-22 DOI: 10.1109/SPW.2016.22

Alan C. Lin, Gilbert L. Peterson

引用次数: 2