2022 IEEE Conference on Dependable and Secure Computing (DSC)最新文献_第4页

Cyber Security Risks of Net Zero Technologies 净零技术带来的网络安全风险

2022 IEEE Conference on Dependable and Secure Computing (DSC) Pub Date : 2022-06-22 DOI: 10.1109/DSC54232.2022.9888883

Haiyue Yuan, Shujun Li

引用次数: 0

Curse of System Complexity and Virtue of Operational Invariants: Machine Learning based System Modeling and Attack Detection in CPS 系统复杂性的诅咒与操作不变量的优点:基于机器学习的CPS系统建模与攻击检测

2022 IEEE Conference on Dependable and Secure Computing (DSC) Pub Date : 2022-06-22 DOI: 10.1109/DSC54232.2022.9888940

Muhammad Omer Shahid, Chuadhry Mujeeb Ahmed, Venkata Reddy Palleti, Jianying Zhou

{"title":"Curse of System Complexity and Virtue of Operational Invariants: Machine Learning based System Modeling and Attack Detection in CPS","authors":"Muhammad Omer Shahid, Chuadhry Mujeeb Ahmed, Venkata Reddy Palleti, Jianying Zhou","doi":"10.1109/DSC54232.2022.9888940","DOIUrl":"https://doi.org/10.1109/DSC54232.2022.9888940","url":null,"abstract":"Cyber Physical Systems (CPS) security has gained a lot of interest in recent years. Different approaches have been proposed to tackle the security challenges. Intrusion detection has been of most interest so far, involving design-based and data-based approaches. Design-based approaches require domain expertise and are not scalable, on the other hand, data-based approaches suffer from the lack of real-world datasets available for specific critical physical processes. In this work, a data collection effort is made on a realistic Water Distribution (WADI) test-bed. Collected data consists of both the normal operation as well as a range of attack scenarios. Next, machine learning-based system-modeling techniques are considered using the data from WADI. It is shown that the accuracy of system model-based intrusion detectors depends on the model accuracy and for non-linear processes, it is non-trivial to obtain accurate system models. Moreover, an operational invariants-based attack detection technique is proposed using the system design parameters. It is shown that using a simple rule-based anomaly detector performs better than the complex black-box data-based techniques.","PeriodicalId":368903,"journal":{"name":"2022 IEEE Conference on Dependable and Secure Computing (DSC)","volume":"14 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126432011","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Protecting White-Box Block Ciphers with Galois/Counter Mode 用伽罗瓦/计数器模式保护白盒分组密码

2022 IEEE Conference on Dependable and Secure Computing (DSC) Pub Date : 2022-06-22 DOI: 10.1109/DSC54232.2022.9888845

Nanjiang Xie, Zheng Gong, Yufeng Tang, Lei Wang, Yamin Wen

引用次数: 0

LAEG: Leak-based AEG using Dynamic Binary Analysis to Defeat ASLR LAEG:基于泄漏的AEG，使用动态二进制分析来击败ASLR

2022 IEEE Conference on Dependable and Secure Computing (DSC) Pub Date : 2022-06-22 DOI: 10.1109/DSC54232.2022.9888796

Wei-Loon Mow, Shih-Kun Huang, H. Hsiao

{"title":"LAEG: Leak-based AEG using Dynamic Binary Analysis to Defeat ASLR","authors":"Wei-Loon Mow, Shih-Kun Huang, H. Hsiao","doi":"10.1109/DSC54232.2022.9888796","DOIUrl":"https://doi.org/10.1109/DSC54232.2022.9888796","url":null,"abstract":"Address space layout randomization (ASLR) is a binary protection technique that randomizes a binary's loaded base addresses in every execution. It hardens binaries against exploitation by preventing attackers from reusing identified resources (e.g., code gadgets or stack buffers found at specific memory locations) in subsequent executions. As most modern compilers and operating systems enable ASLR by default, an effective automated exploit generation (AEG) system should be resilient to ASLR when constructing exploits. However, previ-ously proposed AEG systems either assume the absence of ASLR or only bypass it under limited circumstances, and thus cannot reliably exploit binaries running on modern operating systems. With the aim of improving AEG's practicality by developing an ASLR-resilient AEG system, we designed and implemented leak-based AEG (LAEG), a system that can recover randomized base addresses by leaking additional information at runtime. Specifically, given a proof-of-crash input, LAEG uses dynamic taint analysis to analyze the black-box binary, and identifies the input and output states relevant to the base address information. By doing so, LAEG can efficiently recover base addresses from uninitialized buffers and use them to construct an exploit that is resilient to ASLR. Moreover, our tests established that LAEG could successfully construct exploits that bypass state-of-the-art types of binary protection, including not only ASLR but PIE, NX, and stack canary. Besides that, LAEG exhibited better performance than an open-source AEG solution, Zeratool; and was between 6.46x and 45.15x faster at exploit generation than human experts were.","PeriodicalId":368903,"journal":{"name":"2022 IEEE Conference on Dependable and Secure Computing (DSC)","volume":"86 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115480383","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

A Novel Approach for Providing Client-Verifiable and Efficient Access to Private Smart Contracts 一种提供客户端可验证和有效访问私有智能合约的新方法

2022 IEEE Conference on Dependable and Secure Computing (DSC) Pub Date : 2022-06-22 DOI: 10.1109/DSC54232.2022.9888820

Alexander Köberl, H. Bock, C. Steger

{"title":"A Novel Approach for Providing Client-Verifiable and Efficient Access to Private Smart Contracts","authors":"Alexander Köberl, H. Bock, C. Steger","doi":"10.1109/DSC54232.2022.9888820","DOIUrl":"https://doi.org/10.1109/DSC54232.2022.9888820","url":null,"abstract":"Distributed Ledger Technology is a powerful tool to support direct collaboration between organisations, without requiring full trust into a centralised infrastructure. By defining a program logic and access policies with smart contracts, all interactions are verified in the distributed network and the history of the data is recorded on the ledger. Blockchain implementations targeting enterprise use cases also provide means for private transactions, where the content of the transaction is only readable by authorized participants. Direct access to the ledger requires a node with reliable connection to the network and sufficient computational resources, which usually cannot be fulfilled with lightweight Internet of Things devices and mobile applications. We present an advanced system for accessing an enterprise Blockchain through dedicated gateway nodes, while preserving the functionality of private transactions. A hybrid approach is used to allow computation- and storage restricted clients to send private transactions through a central gateway, and use Light Ethereum Subprotocol to verify the data integrity based on proofs from distributed nodes. To increase the client-side security level, we introduce a dedicated Hardware Security Module for key management and efficient execution of the cryptographic primitives. A proof-of-concept implementation, using the Quorum Blockchain client and an extension for the Tessera transaction manager, validates the feasibility of the approach and can be used for further research in this field.","PeriodicalId":368903,"journal":{"name":"2022 IEEE Conference on Dependable and Secure Computing (DSC)","volume":"59 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124679206","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

A Generative Neural Network for Enhancing Android Metamorphic Malware Detection based on Behaviour Profiling 基于行为分析的生成神经网络增强Android变形恶意软件检测

2022 IEEE Conference on Dependable and Secure Computing (DSC) Pub Date : 2022-06-22 DOI: 10.1109/DSC54232.2022.9888906

Leigh Turnbull, Zhiyuan Tan, Kehinde O. Babaagba

引用次数: 1

Network Intrusion Detection in Encrypted Traffic 加密流量中的网络入侵检测

2022 IEEE Conference on Dependable and Secure Computing (DSC) Pub Date : 2022-06-22 DOI: 10.1109/DSC54232.2022.9888942

Eva Papadogiannaki, Giorgos Tsirantonakis, S. Ioannidis

引用次数: 2

Shodan Indicators Used to Detect Standard Conpot Implementations and Their Improvement Through Sophisticated Customization 用于检测标准配方实现及其通过复杂定制改进的Shodan指标

2022 IEEE Conference on Dependable and Secure Computing (DSC) Pub Date : 2022-06-22 DOI: 10.1109/DSC54232.2022.9888911

Warren Z. Cabral, L. Sikos, C. Valli

引用次数: 0

A Node-Embedding Features Based Machine Learning Technique for Dynamic Malware Detection 基于节点嵌入特征的机器学习动态恶意软件检测技术

2022 IEEE Conference on Dependable and Secure Computing (DSC) Pub Date : 2022-06-22 DOI: 10.1109/DSC54232.2022.9888836

Sudhir Kumar Rai, Ashish R. Mittal, Sparsh Mittal

引用次数: 1

A Novel Chaos-based Light-weight Image Encryption Scheme for Multi-modal Hearing Aids 一种新的基于混沌的多模态助听器轻量化图像加密方案

2022 IEEE Conference on Dependable and Secure Computing (DSC) Pub Date : 2022-02-11 DOI: 10.1109/DSC54232.2022.9888823

A. Shah, Ahsan Adeel, Jawad Ahmad, A. Al-Dubai, M. Gogate, A. Bishnu, Muhammad Diyan, Tassadaq Hussain, K. Dashtipour, T. Ratnarajah, Amir Hussain

{"title":"A Novel Chaos-based Light-weight Image Encryption Scheme for Multi-modal Hearing Aids","authors":"A. Shah, Ahsan Adeel, Jawad Ahmad, A. Al-Dubai, M. Gogate, A. Bishnu, Muhammad Diyan, Tassadaq Hussain, K. Dashtipour, T. Ratnarajah, Amir Hussain","doi":"10.1109/DSC54232.2022.9888823","DOIUrl":"https://doi.org/10.1109/DSC54232.2022.9888823","url":null,"abstract":"Multimodal hearing aids (HAs) aim to deliver more intelligible audio in noisy environments by contextually sensing and processing data in the form of not only audio but also visual information (e.g. lip reading). Machine learning techniques can play a pivotal role for the contextual processing of multimodal data, however, due to the low computational power of the HA devices, the data must be processed either on the edge or cloud which, in turn, poses privacy concerns for the users' sensitive data. Existing literature proposes several techniques for data encryption but their computational complexity is a major bottleneck to meet strict latency requirements for the development of future multi-modal hearing aids. To overcome this problem, this paper proposes a novel real-time audio/visual data encryption scheme based on chaos-based encryption using the Tangent-Delay Ellipse Reflecting Cavity-Map System (TD-ERCS) and Non-linear Chaotic (NCA) Algorithms. The results achieved against different security analysis parameters such as Correlation Coefficient, Unified Averaged Changed Intensity (UACI), Key Sensitivity Analysis, Number of Changing Pixel Rate (NPCR), Mean-Square Error (MSE), Peak Signal to Noise Ratio (PSNR), Entropy test, and Chi-test, indicate that the proposed scheme is more secure with increased key-space against modern brute-force attacks and lightweight as compared to existing schemes.","PeriodicalId":368903,"journal":{"name":"2022 IEEE Conference on Dependable and Secure Computing (DSC)","volume":"135 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-02-11","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121579492","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1