2009 Third International Conference on Emerging Security Information, Systems and Technologies最新文献_第4页

Multi-level Authentication Scheme Utilizing Smart Cards and Biometrics 利用智能卡和生物识别技术的多级认证方案

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.22

Mücahit Mutlugün, I. Sogukpinar

引用次数: 2

Quantification of the Effect of Security on Performance in Wireless LANs 无线局域网中安全性对性能影响的量化

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.16

G. R. Begh, A. H. Mir

引用次数: 9

The Pushdown Attack on AES AES的下推攻击

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.50

M. El-Fotouh, K. Diepold

引用次数: 3

Towards Proactive Policies Supporting Event-Based Task Delegation 面向支持基于事件的任务委派的主动策略

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.23

Khaled Gaaloul, P. Miseldine, F. Charoy

引用次数: 5

Personalized Filtering of Polymorphic E-mail Spam 多态垃圾邮件的个性化过滤

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.45

Masaru Takesue

引用次数: 2

Secrecy for Bounded Security Protocols without Freshness Check 无新鲜度检查的有限安全协议的保密性

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.13

Catalin V. Bîrjoveanu

引用次数: 1

Replay Attack of Dynamic Rights within an Authorised Domain 授权域中动态权限重放攻击

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.30

I. Abbadi, Muntaha Alawneh

{"title":"Replay Attack of Dynamic Rights within an Authorised Domain","authors":"I. Abbadi, Muntaha Alawneh","doi":"10.1109/SECURWARE.2009.30","DOIUrl":"https://doi.org/10.1109/SECURWARE.2009.30","url":null,"abstract":"Digital Rights Management (DRM), unlike access control techniques, associates content with a rights object specifying content usage rules. The rights object is always bound with content and enforced wherever content is transferred and used. Such a rights object, in many cases, contains dynamic rights, which change with usage and time, e.g. play period, print count, and expire after a specific period. Most existing DRM techniques do not address the replay attack problem for dynamic rights. This problem has the greatest impact when the DRM mechanisms get integrated with authorised domains. In this paper we mainly focus on the replay attack for dynamic rights when it is transferred between member devices in an authorised domain, and when it is restored from an old backup enabling the reuse of an expired license. We also propose a novel mechanism for controlling and managing the consumption of dynamic rights between member devices in a domain. This is to provide a controlled environment for a user to transfer dynamic rights back and forth between domain devices in order to use content on any device member in the domain at a chosen time.","PeriodicalId":382947,"journal":{"name":"2009 Third International Conference on Emerging Security Information, Systems and Technologies","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-06-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130837091","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 11

Using Object-Oriented Concepts to Develop a High-Level Information Privacy Risk Management Model 用面向对象的概念开发高级信息隐私风险管理模型

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.11

K. Reddy, H. Venter

引用次数: 1

The Process of Engineering of Security of Information Systems (ESIS): The Formalism of Business Processes 信息系统安全工程（ESIS）流程：业务流程的形式主义

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.24

Wilson Goudalo, D. Seret

{"title":"The Process of Engineering of Security of Information Systems (ESIS): The Formalism of Business Processes","authors":"Wilson Goudalo, D. Seret","doi":"10.1109/SECURWARE.2009.24","DOIUrl":"https://doi.org/10.1109/SECURWARE.2009.24","url":null,"abstract":"Companies and organizations are faced with quite a tough competition and increasing regulatory and legal constraints. Therefore, the use of security risk management is evolving and becoming more and more important in companies and organizations. We define Engineering of security of information systems as a process whose aim is to guarantee the global security of information systems, in their eco-system in order to meet the stakes of companies. After our article focused on the encapsulation of Security know-how into UML profiles, we focus this work on the presentation of the Process of Engineering of Security into the formalism of Business Processes. The main idea is to succeed the adherence, of all stakeholders of the enterprise, into the security problem. To meet these pragmatic and actual needs of companies and organizations, we would suggest an approach to engineering of security, firstly, based on the standards and good practices of security and, secondly, inspired from the best practices and feedback of advances in the engineering of information systems. This paper shows the feasibility of mapping the process of engineering of Security of Information Systems into the formalism of business process, and presents the concepts of engineering of Security of Information Systems using the foundations and models of Information Systems Engineering.","PeriodicalId":382947,"journal":{"name":"2009 Third International Conference on Emerging Security Information, Systems and Technologies","volume":"16 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-06-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126429026","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

On the Tradeoff between MAC-Layer and Network-Layer Topology-Controlled Malware Spreading Schemes in Ad Hoc and Sensor Networks Ad Hoc和传感器网络中mac层和网络层拓扑控制恶意软件传播方案的权衡

2009 Third International Conference on Emerging Security Information, Systems and Technologies Pub Date : 2009-06-18 DOI: 10.1109/SECURWARE.2009.46

V. Karyotis, Anastasios Kakalis, S. Papavassiliou

{"title":"On the Tradeoff between MAC-Layer and Network-Layer Topology-Controlled Malware Spreading Schemes in Ad Hoc and Sensor Networks","authors":"V. Karyotis, Anastasios Kakalis, S. Papavassiliou","doi":"10.1109/SECURWARE.2009.46","DOIUrl":"https://doi.org/10.1109/SECURWARE.2009.46","url":null,"abstract":"Significant interest has been raised recently in wireless networks in modeling and dealing effectively with different types of attacks. In this paper, emphasis is placed on the attacker's perspective and based on a probabilistic framework we study intelligent strategies for spreading malicious software, in order to realize the potentials of such attacks. The considered attack schemes are based on the topology control capabilities of wireless nodes and may be realized either at the Network layer by using node degree related information or the MAC layer by setting attackers to sleep for energy conservation purposes. To the best of our knowledge this is the first attempt to adopt the use of sleeping schedules in order to eventually increase attack efficiency. We compare the performance of the two families of strategies using both time-independent and time-dependent attack metrics. Our evaluation analysis reveals an inherent tradeoff between the two families that depends, among others, on the idle energy consumption and the network density.","PeriodicalId":382947,"journal":{"name":"2009 Third International Conference on Emerging Security Information, Systems and Technologies","volume":"91 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-06-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122843078","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2