The Second International Conference on Availability, Reliability and Security (ARES'07)最新文献_第4页

Supporting Compliant and Secure User Handling - A Structured Approach for In-House Identity Management 支持兼容和安全的用户处理-内部身份管理的结构化方法

The Second International Conference on Availability, Reliability and Security (ARES'07) Pub Date : 2007-04-10 DOI: 10.1109/ARES.2007.145

L. Fuchs, G. Pernul

{"title":"Supporting Compliant and Secure User Handling - A Structured Approach for In-House Identity Management","authors":"L. Fuchs, G. Pernul","doi":"10.1109/ARES.2007.145","DOIUrl":"https://doi.org/10.1109/ARES.2007.145","url":null,"abstract":"The catchword \"compliance\" dominates the actual debate about identity management and information security like few before. Companies need to comply with a variety of internal and external standards and regulations like the US SOX Act. Identity management is seen as a main provider of compliance in modern companies. However, its organisational aspects are underestimated in many projects, lacking a comprehensive approach to introduce in-house identity management. This work is based on the experiences gained from industry projects using identity management functionalities to strengthen security and to reach a high level of compliance. We develop a structured process-oriented methodology for introducing an identity management infrastructure for organisations using drivers from IT security management to evaluate, rank, and implement subprojects. The methodology consists of an iterative process which enables even large and unstructured organisations to reach a suitable and profitable level of identity management by emphasising on organisational aspects rather than taking a merely technical approach","PeriodicalId":383015,"journal":{"name":"The Second International Conference on Availability, Reliability and Security (ARES'07)","volume":"100 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-04-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115741017","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 18

How can the developer benefit from security modeling? 开发人员如何从安全建模中获益?

The Second International Conference on Availability, Reliability and Security (ARES'07) Pub Date : 2007-04-10 DOI: 10.1109/ARES.2007.96

Shanai Ardi, David Byers, P. H. Meland, Inger Anne Tøndel, N. Shahmehri

{"title":"How can the developer benefit from security modeling?","authors":"Shanai Ardi, David Byers, P. H. Meland, Inger Anne Tøndel, N. Shahmehri","doi":"10.1109/ARES.2007.96","DOIUrl":"https://doi.org/10.1109/ARES.2007.96","url":null,"abstract":"Security has become a necessary part of nearly every software development project, as the overall risk from malicious users is constantly increasing, due to increased consequences of failure, security threats and exposure to threats. There are few projects today where software security can be ignored. Despite this, security is still rarely taken into account throughout the entire software lifecycle; security is often an afterthought, bolted on late in development, with little thought to what threats and exposures exist. Little thought is given to maintaining security in the face of evolving threats and exposures. Software developers are usually not security experts. However, there are methods and tools available today that can help developers build more secure software. Security modeling, modeling of e.g., threats and vulnerabilities, is one such method that, when integrated in the software development process, can help developers prevent security problems in software. We discuss these issues, and present how modeling tools, vulnerability repositories and development tools can be connected to provide support for secure software development","PeriodicalId":383015,"journal":{"name":"The Second International Conference on Availability, Reliability and Security (ARES'07)","volume":"447 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-04-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115926499","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 26

A Security Framework in RFID Multi-domain System RFID多域系统的安全框架

The Second International Conference on Availability, Reliability and Security (ARES'07) Pub Date : 2007-04-10 DOI: 10.1109/ARES.2007.24

Dong Seong Kim, Taek-Hyun Shin, Jong Sou Park

引用次数: 34

Privacy in Pervasive Computing and Open Issues 普适计算中的隐私和开放问题

The Second International Conference on Availability, Reliability and Security (ARES'07) Pub Date : 2007-04-10 DOI: 10.1109/ARES.2007.115

P. Bhaskar, Sheikh Iqbal Ahamed

引用次数: 45

HICI: An Approach for Identifying Trust Elements The case of technological trust perspective in VBEs 基于技术信任视角的企业信任要素识别方法研究

The Second International Conference on Availability, Reliability and Security (ARES'07) Pub Date : 2007-04-10 DOI: 10.1109/ARES.2007.94

S. Msanjila, H. Afsarmanesh

{"title":"HICI: An Approach for Identifying Trust Elements The case of technological trust perspective in VBEs","authors":"S. Msanjila, H. Afsarmanesh","doi":"10.1109/ARES.2007.94","DOIUrl":"https://doi.org/10.1109/ARES.2007.94","url":null,"abstract":"The stability of a virtual organization breeding environment (VBE) requires the right balance of trust level among its members. Particularly for industry-based large-size VBEs and considering the global economy, organizations are now faced with the growing: value of information, uncertainties, and risks surrounding most businesses. As a result, creating a virtual organization (VO) within the VBE environment is becoming challenging and difficult. Establishing trust relationships among organizations in the VBE is now a promising facilitator for fluid VO creations. A priori to establishing trust relationships among member organizations however, trust levels of involved organizations must be properly assessed. In order to properly assess trust level of organizations in VBEs, trust elements and trust relationships must be thoroughly characterized. This paper presents a three-stage approach for identifying and analyzing trust elements. It also presents the general trust elements for three main trust objectives in VBEs, namely for creating trust: among VBE members, of the member to the VBE administration, and of the external stakeholder (e.g., a customer) to the VBE","PeriodicalId":383015,"journal":{"name":"The Second International Conference on Availability, Reliability and Security (ARES'07)","volume":"61 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-04-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131014295","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 23

Terrorist Networks Analysis through Argument Driven Hypotheses Model 基于论证驱动假设模型的恐怖主义网络分析

The Second International Conference on Availability, Reliability and Security (ARES'07) Pub Date : 2007-04-10 DOI: 10.1109/ARES.2007.146

D. Hussain

{"title":"Terrorist Networks Analysis through Argument Driven Hypotheses Model","authors":"D. Hussain","doi":"10.1109/ARES.2007.146","DOIUrl":"https://doi.org/10.1109/ARES.2007.146","url":null,"abstract":"Social network analysis has been used for quite some time to analyze and understand the behavior of nodes in the network. Theses nodes could be individuals or group of persons, events or organizations, etc. In fact these nodes could be any thing, importantly, these nodes propagate or do some thing and obviously these nodes have attributes. Social network analysis (SNA) is a multi-model multi-link problem and one can imagine the challenge posed by such multidimensional task. Typically, models represent various processes and their organization including the interaction between processes. Such types of models are intellective simulation models, explaining one particular aspect of the model abstracting other factors present in the model. The standard or normal representation of a typical social network model is through a graph data structure. The dynamics of larger social networks is so complex some time it becomes difficult to understand the various levels of interactions and dependencies just by mere representation through a graph. However, to overcome this limitation many analytical methods provide relationship dependencies, role of different nodes and their importance in the social networks. Since the start of the new century many terrorism events have occurred around the globe. These events have provided a new impetus for the analysis, investigation, studying the behavior and tracking terrorist networks (individuals). In this paper we are presenting a very novel and absolutely new approach to SNA for locating important key players in the network. The system also predicts a path through these nodes which shows the vulnerability of the network and if the path along with these nodes is removed it can reduce/destabilize or even destroy the structure of the network","PeriodicalId":383015,"journal":{"name":"The Second International Conference on Availability, Reliability and Security (ARES'07)","volume":"19 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-04-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131032708","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 12

Towards Secure E-Elections in Turkey: Requirements and Principles 迈向安全的电子选举在土耳其:要求和原则

The Second International Conference on Availability, Reliability and Security (ARES'07) Pub Date : 2007-04-10 DOI: 10.1109/ARES.2007.153

O. Cetinkaya, D. Cetinkaya

引用次数: 25

3G-WLAN Convergence: Vulnerability, Attacks Possibilities and Security Model 3G-WLAN融合:漏洞、攻击可能性和安全模型

The Second International Conference on Availability, Reliability and Security (ARES'07) Pub Date : 2007-04-10 DOI: 10.1109/ARES.2007.1

M. Sher, T. Magedanz

引用次数: 13

Using Space-Based Computing for More Efficient Group Coordination and Monitoring in an Event-Based Work Management System 在基于事件的工作管理系统中使用天基计算进行更有效的小组协调和监控

The Second International Conference on Availability, Reliability and Security (ARES'07) Pub Date : 2007-04-10 DOI: 10.1109/ARES.2007.158

Marcus Mor, Richard Mordinyi, Johannes Riemer

引用次数: 2

Access Control and Integration of Health Care Systems: An Experience Report and Future Challenges 访问控制和卫生保健系统的整合:经验报告和未来的挑战

The Second International Conference on Availability, Reliability and Security (ARES'07) Pub Date : 2007-04-10 DOI: 10.1109/ARES.2007.30

Lillian Røstad, Ø. Nytrø

引用次数: 15