2009 Third International Conference on Emerging Security Information, Systems and Technologies最新文献

Analysis of a Password Strengthening Technique and Its Practical Use 一种密码强化技术分析及其实际应用

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.52

B. Groza

引用次数: 1

Detection of Security and Dependability Threats: A Belief Based Reasoning Approach 安全与可靠性威胁的检测:基于信念的推理方法

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.55

Davide Lorenzoli, G. Spanoudakis

引用次数: 6

A Formal IT-Security Model for a Weak Fair-Exchange Cooperation with Non-repudiation Proofs 具有不可抵赖证明的弱公平交换合作的形式化it安全模型

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.15

Rüdiger Grimm

引用次数: 6

Secure Routing Approach for Unstructured P2P Systems 非结构化P2P系统的安全路由方法

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.39

Stefan Kraxberger, Udo Payer

引用次数: 6

True Positive Cost Curve: A Cost-Based Evaluation Method for High-Interaction Client Honeypots 真正成本曲线:一种基于成本的高交互客户端蜜罐评价方法

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.17

C. Seifert, P. Komisarczuk, I. Welch

引用次数: 15

Secure Distributed Multiplication of Two Polynomially Shared Values: Enhancing the Efficiency of the Protocol 两个多项式共享值的安全分布式乘法:提高协议的效率

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.51

P. Lory

引用次数: 14

List of Criteria for a Secure Computer Architecture 安全计算机体系结构标准列表

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.19

Igor Podebrad, Klaus Hildebrandt, B. Klauer

引用次数: 8

A New Approach to Protect the OS from Off-line Attacks Using the Smart Card 一种利用智能卡保护操作系统免受离线攻击的新方法

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.57

H. R. Ghaleh, Shahin Norouzi

{"title":"A New Approach to Protect the OS from Off-line Attacks Using the Smart Card","authors":"H. R. Ghaleh, Shahin Norouzi","doi":"10.1109/SECURWARE.2009.57","DOIUrl":"https://doi.org/10.1109/SECURWARE.2009.57","url":null,"abstract":"Since the present computer systems use layered and modular architectures and execute the instructions in a number of different phases, therefore it has become an imperative to establish a trusted chain between various layers. It usually is integrity checking by hashing of executable codes. With guarantee of software integrity, the web servers and other network entities can trust to client systems or workstations. Several methods have been proposed for this purpose, each of them have their own advantages and weakness. Recently a group of big software and hardware companies working in Information Technology field known as Trusted Computing Group (TCG) are engaged in designing and making standards of various aspects of trusted computer systems including applications, PCs, networks, cryptography modules and so on. These standards can make the system trusted, but they need some hardware changes such as BIOS and Trusted Platform Module (TPM). These changes are not applicable for present systems and we have to purchase new hardware. This paper is an attempt at propose a new method that can make the present systems trusted. This method uses are movable trusted storage that is compatible with TCG storage standard.","PeriodicalId":382947,"journal":{"name":"2009 Third International Conference on Emerging Security Information, Systems and Technologies","volume":"51 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-06-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129024916","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

Detecting Man-in-the-Middle Attacks by Precise Timing 精确定时检测中间人攻击

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.20

B. Aziz, G. Hamilton

引用次数: 37

Criteria for Evaluating the Privacy Protection Level of Identity Management Services 身份管理服务隐私保护水平评价标准

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.31

Hyangjin Lee, Inkyoung Jeun, Hyuncheol Jung

{"title":"Criteria for Evaluating the Privacy Protection Level of Identity Management Services","authors":"Hyangjin Lee, Inkyoung Jeun, Hyuncheol Jung","doi":"10.1109/SECURWARE.2009.31","DOIUrl":"https://doi.org/10.1109/SECURWARE.2009.31","url":null,"abstract":"Identity Management is the one of web services that manages the digital identity and the personally identifiable information of the user who subscribed for various web services in Internet. It was developed to provide user with an easy way to use and manage various user's digital identities that were provided from each web service. If the user subscribes to an Identity Management service, the user can access the other web sites affiliated with the Identity Management service and use their web services by using the identity issued by the Identity Management service. And the user can manage the user's personally identifiable information distributed among various web sites in an integrated way through this service. However, if the identity provider, which provides this Identity Management service, discloses the user’s identity and personal identifiable information, identity theft can happen throughout the entire affiliated web sites. As a result, the privacy protection level of the Identity provider, that is, the level of protection for personally identifiable information, is the critical factor of successful Identity Management service. Therefore, Identity Provider should provide an easy way to the internal or external auditor of them for assessing the privacy protection level. This paper describes privacy threats for each identity life cycle, such as Identity provision, propagation, use and maintain, and destruction, and proposes the criteria that evaluate the privacy protection level provided by the Identity provider as a countermeasure against these threats. The internal or external auditor can use the criteria described in this paper, as a way of assessing the privacy protection level of Identity Provider","PeriodicalId":382947,"journal":{"name":"2009 Third International Conference on Emerging Security Information, Systems and Technologies","volume":"7 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-06-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126237023","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 17