2010 International Conference on Availability, Reliability and Security最新文献_第9页

A Computer Architecture with Hardwarebased Malware Detection 基于硬件的恶意软件检测的计算机体系结构

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.39

Klaus Hildebrandt, Igor Podebrad, B. Klauer

引用次数: 0

Large Scale Demonstration Experiments Towards Acheiving Practical Traceback on the Internet 在互联网上实现实际追溯的大规模示范实验

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.38

Ken Wakasa, H. Hazeyama, Toshifumi Kai, A. Hashiguchi, Masaya Yamagata, M. Fujinaga, Ryunosuke Ohshima, Takashi Shintani

{"title":"Large Scale Demonstration Experiments Towards Acheiving Practical Traceback on the Internet","authors":"Ken Wakasa, H. Hazeyama, Toshifumi Kai, A. Hashiguchi, Masaya Yamagata, M. Fujinaga, Ryunosuke Ohshima, Takashi Shintani","doi":"10.1109/ARES.2010.38","DOIUrl":"https://doi.org/10.1109/ARES.2010.38","url":null,"abstract":"Recently, attacks involving source IP spoofing have become a critical issue for Internet security and operation from the viewpoint of ISP. Research and development into traceback systems that trace an end victim host to an end spoofing host via multiple ISPs is progressing. However, many difficult issues, including those that can't be resolved by IT technology alone, have prevented traceback systems from achieving widespread adoption. We had been researching issues of widespread traceback adoption since 2005, and resolved many challenges on a step-by-step basis. In 2006 we developed an operational model that provided a solution to the three cornered deadlock affecting traceback, which consisted of interrelated operational, legal and technical issues. In 2007 we constructed a three-layer traceback system. In 2008 we conducted a first of demonstration experiments with five ISPs, and found an efficient traceback deployment scenario applicable to Japan. In this paper, we introduce the results of large scale demonstration experiments conducted in 2009, and consider issues about system performance, operational efficiency, the management system’s validity, and system adaptability, all of which are necessary for our traceback system to achieve widespread adoption.","PeriodicalId":360339,"journal":{"name":"2010 International Conference on Availability, Reliability and Security","volume":"37 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2010-03-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132021037","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Architecture-Aware Adaptive Deployment of Contextual Security Policies 上下文安全策略的体系结构感知自适应部署

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.45

Stere Preda, N. Cuppens-Boulahia, F. Cuppens, L. Toutain

引用次数: 9

Analysing and Visualising Security and Usability in IRIS IRIS的安全性和可用性分析与可视化

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.28

Shamal Faily, I. Flechais

引用次数: 11

A Continuous Authentication System Based on User Behavior Analysis 基于用户行为分析的连续认证系统

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.63

Ines Brosso, A. L. Neve, G. Bressan, W. Ruggiero

引用次数: 28

Rejuvenating High Available Virtualized Systems 恢复高可用性虚拟化系统

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.69

Arash Rezaei, M. Sharifi

{"title":"Rejuvenating High Available Virtualized Systems","authors":"Arash Rezaei, M. Sharifi","doi":"10.1109/ARES.2010.69","DOIUrl":"https://doi.org/10.1109/ARES.2010.69","url":null,"abstract":"Virtualization technology in the form of server consolidation makes running of hot-standby replicas on one system possible, while software rejuvenation provides proactive recovery of failure. Both technologies have been used to make systems more dependable. However, the deployment of rejuvenation in virtualized systems had been limited only to virtual machines (VMs) or only to virtual machine monitors (VMMs), requiring changes to applications too. We propose a new rejuvenation technique for high available virtualized systems that is applied at both VM and VMM levels and yet it does not require any modifications to applications. Our proposition leverages the encapsulation of an application into a VM using this new combinatory rejuvenation technique that uses a time-based policy for VMM and a prediction-based policy for VMs. To demonstrate how much it can improve system availability, the stochastic reward net-based models of a typical virtualized consolidated server in cases of using a prediction-based policy, using a time-based policy, and using the proposed rejuvenation technique are presented and compared. We show that our method has higher system availability and lower downtime cost.","PeriodicalId":360339,"journal":{"name":"2010 International Conference on Availability, Reliability and Security","volume":"4 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2010-03-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115675756","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 40

Practical Experience Gained from Modeling Security Goals: Using SGITs in an Industrial Project 从安全目标建模中获得的实践经验:在工业项目中使用sgi

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.12

Christian Jung, Frank Elberzhager, A. Bagnato, Fabio Raiteri

引用次数: 4

Information Flow Control Using the Java Virtual Machine Tool Interface (JVMTI) 基于Java虚拟机接口(JVMTI)的信息流控制

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.75

J. Howarth, I. Altas, B. Dalgarno

{"title":"Information Flow Control Using the Java Virtual Machine Tool Interface (JVMTI)","authors":"J. Howarth, I. Altas, B. Dalgarno","doi":"10.1109/ARES.2010.75","DOIUrl":"https://doi.org/10.1109/ARES.2010.75","url":null,"abstract":"e present an information flow control (IFC) Early attempts at preserving confidentiality in a computer system which monitors information leakage in single-threaded system relied on the use of an access control matrix to Java programs. Our implementation uses the Java Virtual identify the access rights an individual (or subject) had over Machine Tool Interface (JVMTI) and adapts the algorithms of a particular resource. But there is a problem with this Le Guernic et al. [1] for this purpose. We also offer a generic approach. The access rights that appear in the matrix only rule set for enforcing IFC. One advantage of our approach is control initial access to the resource. Once the resource is that it is dynamic, so that we are only concerned with the released from its access container there are no restrictions on security of the current execution of a program, not all possible its use. The mandatory access control (MAC) model was executions. Our system tracks flow at the level of primitive designed to prevent this type of abuse by removing the Java fields, allowing precise control over the information that ability of an arbitrary user to pass on permissions from the is monitored. Further, no modifications to the Java Virtual Machine (JVM) are needed for our system to work.","PeriodicalId":360339,"journal":{"name":"2010 International Conference on Availability, Reliability and Security","volume":"44 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2010-03-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128253167","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 9

Challenging IS and ISM Standardization for Business Benefits 为企业利益挑战信息系统和管理系统标准化

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.113

J. Anttila, J. Kajava

{"title":"Challenging IS and ISM Standardization for Business Benefits","authors":"J. Anttila, J. Kajava","doi":"10.1109/ARES.2010.113","DOIUrl":"https://doi.org/10.1109/ARES.2010.113","url":null,"abstract":"This paper deals with challenges of the Information Security (IS) and Information Security Management (ISM) standards and their beneficial use in organizations. Emphasis is in the standardization within the committee ISO/IEC JTC1/SC27 and in its management standardization. It is also considered ISM standards’ complicated links with many other management standards. Principles, concepts and definitions are not considered consistently in the ISM standards. ISM standards use the recognized business management models very superficially. Standards do not make clear relations between ISM and Information Security Assurance (ISA). A real crisis in the ISM standardization is that it has no innovative solutions for modern business environments that emphasize speed, changes, agility, and complexity.The situational knowledge for the paper is based on worldwide observations by the authors through collaboration with many different contexts, organizations and expert networks. The paper provides a practical business-dedicated approach to the issue and brings together a business practitioner and an information security researcher knowing by long-standing experiences the real difficulties and possibilities in organizations. Recognized researchers have been referred for the links to sound multifaceted theoretical foundations.","PeriodicalId":360339,"journal":{"name":"2010 International Conference on Availability, Reliability and Security","volume":"6 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2010-03-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134438076","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4

Recovery of Skype Application Activity Data from Physical Memory 从物理内存中恢复Skype应用程序活动数据

2010 International Conference on Availability, Reliability and Security Pub Date : 2010-03-25 DOI: 10.1109/ARES.2010.73

Matthew Simon, J. Slay

引用次数: 49