2010 International Conference on Availability, Reliability and Security最新文献_第2页

From Contextual Permission to Dynamic Pre-obligation: An Integrated Approach 从情境许可到动态预义务:一种综合方法

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.71

Yehia Elrakaiby, F. Cuppens, N. Cuppens-Boulahia

引用次数: 12

Estimating Hidden Message Length in Binary Image Embedded by Using Boundary Pixels Steganography 利用边界像素隐写技术估计二值图像的隐藏信息长度

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.65

Chiew Kang Leng, J. Pieprzyk

引用次数: 20

Reselling Digital Content 转售数码内容

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.18

L. Aimani, Yona Raekow

引用次数: 6

A Framework to Guide the Implementation of Proactive Digital Forensics in Organisations 指导组织实施主动数字取证的框架

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.62

T. Grobler, C. Louwrens, S. V. Solms

{"title":"A Framework to Guide the Implementation of Proactive Digital Forensics in Organisations","authors":"T. Grobler, C. Louwrens, S. V. Solms","doi":"10.1109/ARES.2010.62","DOIUrl":"https://doi.org/10.1109/ARES.2010.62","url":null,"abstract":"Most organizations underestimate the demand for digital evidence [1]. Often, when evidence is required to prove fraudulent transactions, not enough or trustworthy evidence is available to link the attacker to the incident. It isessential for organizations to prepare themselves for digital Forensic (DF) investigations and ensure that entireorganizational operating environment is prepared for example for an investigation (criminal or internal) or acompliance tests. The accepted literature on DF readinessconcentrates mainly on evidence identification, handling andstorage, first line incident response and training requirements [2]. It does not consider the proactiveapplication of DF tools to enhance the corporate governancestructures (specifically Information Technology (IT) governance). Pro-active DF (ProDF) as defined in this paperwill enable an organization to take the initiative byimplementing adequate measures to become DF ready,demonstrate due diligence for good corporate Governance,specifically IT Governance and provide a mechanism toassess and improve IT Governance frameworks. The purpose of this paper is to define, identify goals, steps, anddeliverables of ProDF, identify dimensions of DF, and propose a theoretical DF management framework to guidethe implementation of ProDF in an organization.","PeriodicalId":360339,"journal":{"name":"2010 International Conference on Availability, Reliability and Security","volume":"11 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2010-03-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116915097","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 55

A Semi-Markov Survivability Evaluation Model for Intrusion Tolerant Database Systems 入侵容忍数据库系统的半马尔可夫生存能力评估模型

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.90

A. Wang, Su Yan, Peng Liu

引用次数: 17

Development of ICT Infrastructure for Local Socio-Economic System in Japan Another Approach Toward Cybersecurity in the Non-urban Area 日本地方社会经济系统的ICT基础设施发展——非城市地区网络安全的另一种途径

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.114

H. Nagano

引用次数: 0

A Probabilistic Approach for On-Line Sum-Auditing 一种基于概率的在线和审计方法

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.46

G. Canfora, B. Cavallo

引用次数: 5

A Design Pattern for Event-Based Processing of Security-Enriched SOAP Messages 基于事件处理安全增强SOAP消息的设计模式

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.23

Nils Gruschka, Meiko Jensen, Luigi Lo Iacono

引用次数: 8

A Prototype for Support of Computer Forensic Analysis Combined with the Expected Knowledge Level of an Attacker to More Efficiently Achieve Investigation Results 一种结合攻击者预期知识水平支持计算机取证分析的原型，以更有效地实现调查结果

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.25

M. Bielecki, G. Quirchmayr

{"title":"A Prototype for Support of Computer Forensic Analysis Combined with the Expected Knowledge Level of an Attacker to More Efficiently Achieve Investigation Results","authors":"M. Bielecki, G. Quirchmayr","doi":"10.1109/ARES.2010.25","DOIUrl":"https://doi.org/10.1109/ARES.2010.25","url":null,"abstract":"This paper describes a novel approach to combine the strengths of an automated presentation and argumentation support system with a classification of cybercriminals similar to the ones used in law enforcement work. The discussed concept is still in an early stage of development with no substantiated scientific results. The beginning of the paper is dedicated to the description of a prototype based on an automated forensic support system called ¿CFAA¿ (¿Computer Forensic Analyzer and Advisor¿). This description is followed by a short classification of current cybercriminals and their knowledge levels. This classification is a slight modification of the one described in \"Scene of the Cybercrime\" by Debra Littlejohn Shinder. The paper then continues with the presentation of an envisaged approach towards combining the software tool with the determined classification to increase the efficiency of the forensic analysis. The core aim of this paper is to demonstrate the possible increase of efficiency with adjusting the appropriate cybercriminal levels according to the forensic investigation.","PeriodicalId":360339,"journal":{"name":"2010 International Conference on Availability, Reliability and Security","volume":"21 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2010-03-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123201695","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 10

Supporting Authorization Policy Modification in Agile Development of Web Applications 支持Web应用敏捷开发中的授权策略修改

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.19

Steffen Bartsch

引用次数: 1