2010 International Conference on Availability, Reliability and Security最新文献_第7页

Detection of Spyware by Mining Executable Files 通过挖掘可执行文件检测间谍软件

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.105

R. Shahzad, S. Haider, Niklas Lavesson

{"title":"Detection of Spyware by Mining Executable Files","authors":"R. Shahzad, S. Haider, Niklas Lavesson","doi":"10.1109/ARES.2010.105","DOIUrl":"https://doi.org/10.1109/ARES.2010.105","url":null,"abstract":"Spyware represents a serious threat to confidentiality since it may result in loss of control over private data for computer users. This type of software might collect the data and send it to a third party without informed user consent. Traditionally two approaches have been presented for the purpose of spyware detection: Signature-based Detection and Heuristic-based Detection. These approaches perform well against known Spyware but have not been proven to be successful at detecting new spyware. This paper presents a Spyware detection approach by using Data Mining (DM)technologies. Our approach is inspired by DM-based malicious code detectors, which are known to work well for detecting viruses and similar software. However, this type of detector has not been investigated in terms of how well it is able to detect spyware. We extract binary features, called n-grams, from both spyware and legitimate software and apply five different supervised learning algorithms to train classifiers that are able to classify unknown binaries by analyzing extracted n-grams. The experimental results suggest that our method is successful even when the training data is scarce.","PeriodicalId":360339,"journal":{"name":"2010 International Conference on Availability, Reliability and Security","volume":"29 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2010-03-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123846547","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 38

Pitfalls in Formal Reasoning about Security Protocols 安全协议形式推理中的陷阱

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.36

Nina Moebius, K. Stenzel, W. Reif

引用次数: 3

The Road to Hell is Paved with Good Intentions: A Story of (In)secure Software Development 通往地狱的道路是由良好的意图铺就的:一个(In)安全软件开发的故事

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.44

Richard Sasson, M. Jaatun, Jostein Jensen

引用次数: 3

Secure Monitoring of Service Level Agreements 服务水平协议的安全监控

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.33

K. Clark, M. Warnier, F. Brazier, T. Quillinan

引用次数: 23

Classification of Buffer Overflow Vulnerability Monitors 缓冲区溢出漏洞监视器的分类

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.15

H. Shahriar, Mohammad Zulkernine

引用次数: 7

A Security Decision-Reaction Architecture for Heterogeneous Distributed Network 异构分布式网络的安全决策-反应体系结构

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.57

C. Feltus, D. Khadraoui, Jocelyn Aubert

{"title":"A Security Decision-Reaction Architecture for Heterogeneous Distributed Network","authors":"C. Feltus, D. Khadraoui, Jocelyn Aubert","doi":"10.1109/ARES.2010.57","DOIUrl":"https://doi.org/10.1109/ARES.2010.57","url":null,"abstract":"The main objective of this paper is to provide a global decision-reaction architectural built on the requirements for a reaction after alert detection mechanisms in the frame of information systems security and more particularly applied to telecom infrastructures security. These infrastructures are distributed in nature, therefore the architecture is elaborated using the multi-agents system that provides the advantages of autonomous and interaction facilities, and has been associated to the ontoBayes model for decision support mechanism. This model helps agents to make decisions according to preference values and is built upon ontology based knowledge sharing, bayesian networks based uncertainty management and influence diagram based decision support. The Multi-Agent System decision-reaction architecture is developed in a distributed perspective and is composed of three basic layers: low level, intermediate level and high level. The proposed approach has been illustrated based on the network architecture for heterogeneous mobile computing developed by the BARWAN project. Accordingly: the Building Area constitutes the low level and aims to be the interface between the main architecture and the targeted infrastructure. The Campus-Area is the intermediate level responsible of correlating the alerts coming from different domains of the infrastructure and to smartly deploy the reaction actions.","PeriodicalId":360339,"journal":{"name":"2010 International Conference on Availability, Reliability and Security","volume":"3 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2010-03-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130876114","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 12

Identifying Security Relevant Warnings from Static Code Analysis Tools through Code Tainting 通过代码污染从静态代码分析工具识别安全相关警告

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.108

D. Baca

{"title":"Identifying Security Relevant Warnings from Static Code Analysis Tools through Code Tainting","authors":"D. Baca","doi":"10.1109/ARES.2010.108","DOIUrl":"https://doi.org/10.1109/ARES.2010.108","url":null,"abstract":"Static code analysis tools are often used by developers as early vulnerability detectors. Due to their automation they are less time-consuming and error-prone then manual reviews. However, they produce large quantities of warnings that developers have to manually examine and understand.In this paper, we look at a solution that makes static code analysis tools more useful as an early vulnerability detector. We use flow-sensitive, interprocedural and context-sensitive data flow analysis to determine the point of user input and its migration through the source code to the actual exploit. By determining a vulnerabilities point of entry we lower the number of warnings a tool produces and we provide the developer with more information why this warning could be a real security threat. We use our approach in three different ways depending on what tool we examined. First, With the commercial static code analysis tool, Coverity, we reanalyze its results and create a set of warnings that are specifically relevant from a security perspective. Secondly, we altered the open source analysis tool Findbugs to only analyze code that has been tainted by user input. Third, we created an own analysis tool that focuses on XSS vulnerabilities in Java code.","PeriodicalId":360339,"journal":{"name":"2010 International Conference on Availability, Reliability and Security","volume":"10 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2010-03-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122266807","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

Communal Reputation and Individual Trust (CRIT) in Wireless Sensor Networks 无线传感器网络中的公共信誉和个人信任(CRIT)

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.64

T. Zia, M. Islam

引用次数: 16

A Generic Metamodel for IT Security Attack Modeling for Distributed Systems 分布式系统IT安全攻击建模的通用元模型

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.17

André Miede, Nedislav Nedyalkov, C. Gottron, André König, N. Repp, R. Steinmetz

引用次数: 16

Risk-Based Methodology for Real-Time Security Monitoring of Interdependent Services in Critical Infrastructures 关键基础设施中相互依赖服务实时安全监控的基于风险的方法

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.102

Jocelyn Aubert, Thomas Schaberreiter, Christophe Incoul, D. Khadraoui, B. Gâteau

引用次数: 19