2019 14th Asia Joint Conference on Information Security (AsiaJCIS)最新文献

String commitment scheme with low output locality 低输出局部性的字符串承诺方案

2019 14th Asia Joint Conference on Information Security (AsiaJCIS) Pub Date : 2019-08-01 DOI: 10.1109/AsiaJCIS.2019.000-8

Hideaki Miyaji, Akinori Kawachi, A. Miyaji

引用次数: 2

[Copyright notice] (版权)

2019 14th Asia Joint Conference on Information Security (AsiaJCIS) Pub Date : 2019-08-01 DOI: 10.1109/asiajcis.2019.00003

引用次数: 0

Prediction of Crime Occurrence using Information Propagation Model and Gaussian Process 基于信息传播模型和高斯过程的犯罪发生预测

2019 14th Asia Joint Conference on Information Security (AsiaJCIS) Pub Date : 2019-08-01 DOI: 10.1109/AsiaJCIS.2019.000-2

S. Morimoto, Hajime Kawamukai, Kilho Shin

{"title":"Prediction of Crime Occurrence using Information Propagation Model and Gaussian Process","authors":"S. Morimoto, Hajime Kawamukai, Kilho Shin","doi":"10.1109/AsiaJCIS.2019.000-2","DOIUrl":"https://doi.org/10.1109/AsiaJCIS.2019.000-2","url":null,"abstract":"Prediction and prevention of crime have long been one of the main concerns of public security and safety. Due to the emergence of available data and analytic tools, research for crime prediction has been attracting more attention recently. In essence, the current techniques are based on either the analysis of discrete crime event locations or the theory with aggregated crime data. However, it is difficult to estimate the probability of future crimes based on the direct interpretation of the past crime rate. Therefore, existing methods are not good at adapting to different environment and trends of crime occurrence. Currently, there is no standard method that can simultaneously address all challenges posed by different crime data sets. A more universal solution, which can cope with the changes in the environment and the diversity of crime occurrence would be highly desirable. In this paper, we present a novel approach to crime prediction and establishes a model flexible enough to apply to different circumstances. To achieve our goal, we build an information propagation model which incorporates a concept of information entropy. This research helps security organizations to address or react to crime occurrence proactively and helps local policy-makers to prevent or manage crime risks, which would eventually improve public security and safety.","PeriodicalId":413763,"journal":{"name":"2019 14th Asia Joint Conference on Information Security (AsiaJCIS)","volume":"47 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132285873","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4

Privacy and Integrity Protection of Metering Data in Smart Grid 智能电网计量数据的隐私与完整性保护

2019 14th Asia Joint Conference on Information Security (AsiaJCIS) Pub Date : 2019-08-01 DOI: 10.1109/AsiaJCIS.2019.000-7

Yong Ding, Bingyao Wang, Yujue Wang, Kun Zhang, Huiyong Wang

引用次数: 1

Platform Design and Implementation for Flexible Data Processing and Building ML Models of IDS Alerts 灵活数据处理和IDS警报ML模型构建的平台设计与实现

2019 14th Asia Joint Conference on Information Security (AsiaJCIS) Pub Date : 2019-08-01 DOI: 10.1109/AsiaJCIS.2019.000-4

Iksoo Shin, Yunsoo Choi, Taewoong Kwon, Hyeakro Lee, Jungsuk Song

{"title":"Platform Design and Implementation for Flexible Data Processing and Building ML Models of IDS Alerts","authors":"Iksoo Shin, Yunsoo Choi, Taewoong Kwon, Hyeakro Lee, Jungsuk Song","doi":"10.1109/AsiaJCIS.2019.000-4","DOIUrl":"https://doi.org/10.1109/AsiaJCIS.2019.000-4","url":null,"abstract":"Intrusion detection system(IDS) is one of the widely adapted security systems in the world. IDS can detect malicious activities on networks or hosts and raises alerts which should be analysed by security operators. But alerts generated from IDS are too huge to analyse all of them and most of the alerts are false positive. To mitigate this problem, many approaches have been carried out using machine learning. Machine learning(ML) is a promising technique because of its outstanding performance. But sometimes it is time and effort consuming work to make a good machine learning model. Because one should consider many options on the machine learning making process including feature, normalization and model. And there should be many repetitive experiments to find proper parameters of model. In this paper, we propose a machine learning platform for classification of IDS alerts as a way of solution about the time and effort consuming works. On the platform, researcher and engineers don't need to care about implementation and can focus only on better configurations for classification of IDS alerts. Repetitive works of data processing and building models will be carried out in an automated manner on the platform. As well, we expect that many security experts unfamiliar with machine learning technique can attempt to make machine learning models easily through the platform. With the participation of many security experts, various experiments could be carried out. And it could promote the transformation of their expertise into ideas for models through their feedback. This paper presents how we designed our platform and implemented the system until these days.","PeriodicalId":413763,"journal":{"name":"2019 14th Asia Joint Conference on Information Security (AsiaJCIS)","volume":"53 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116525274","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Counter Attack Against the Bus-Off Attack on CAN 对CAN总线off攻击的反击

2019 14th Asia Joint Conference on Information Security (AsiaJCIS) Pub Date : 2019-08-01 DOI: 10.1109/AsiaJCIS.2019.00004

Masaru Takada, Yuki Osada, M. Morii

引用次数: 8

Prevention of Data Leakage due to Implicit Information Flows in Android Applications Android应用中隐式信息流导致的数据泄露预防

2019 14th Asia Joint Conference on Information Security (AsiaJCIS) Pub Date : 2019-08-01 DOI: 10.1109/AsiaJCIS.2019.00005

Hiroki Inayoshi, S. Kakei, Eiji Takimoto, Koichi Mouri, S. Saito

{"title":"Prevention of Data Leakage due to Implicit Information Flows in Android Applications","authors":"Hiroki Inayoshi, S. Kakei, Eiji Takimoto, Koichi Mouri, S. Saito","doi":"10.1109/AsiaJCIS.2019.00005","DOIUrl":"https://doi.org/10.1109/AsiaJCIS.2019.00005","url":null,"abstract":"Dynamic Taint Analysis (DTA) technique has been developed for analysis and understanding behavior of Android applications and privacy policy enforcement. Meanwhile, implicit information flows (IIFs) are major concern of security researchers because IIFs can evade DTA technique easily and give attackers an advantage over the researchers. Some researchers suggested approaches to the issue and developed analysis systems supporting privacy policy enforcement against IIF-accompanied attacks; however, there is still no effective technique of comprehensive analysis and privacy policy enforcement against IIF-accompanied attacks. In this paper, we propose an IIF detection technique to enforce privacy policy against IIF-accompanied attacks in Android applications. We developed a new analysis tool, called Smalien, that can discover data leakage caused by IIF-contained information flows as well as explicit information flows. We demonstrated practicability of Smalien by applying it to 16 IIF tricks from ScrubDroid and two IIF tricks from DroidBench. Smalien enforced privacy policy successfully against all the tricks except one trick because the trick loads code dynamically from a remote server at runtime, and Smalien cannot analyze any code outside of a target application. The results show that our approach can be a solution to the current attacker-superior situation.","PeriodicalId":413763,"journal":{"name":"2019 14th Asia Joint Conference on Information Security (AsiaJCIS)","volume":"32 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132339390","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Password Strength Measurement without Password Disclosure 不泄露密码的密码强度测量

2019 14th Asia Joint Conference on Information Security (AsiaJCIS) Pub Date : 2019-08-01 DOI: 10.1109/AsiaJCIS.2019.00013

Taku Sugai, T. Ohigashi, Yoshio Kakizaki, Akira Kanaoka

{"title":"Password Strength Measurement without Password Disclosure","authors":"Taku Sugai, T. Ohigashi, Yoshio Kakizaki, Akira Kanaoka","doi":"10.1109/AsiaJCIS.2019.00013","DOIUrl":"https://doi.org/10.1109/AsiaJCIS.2019.00013","url":null,"abstract":"As a mechanism for promoting improvement in the strength of the user password, there is a mechanism that measures the password strength and gives feedback to the user. There are a wide variety of current strength measurement methods, and there are also methods that transmit a password during input to the remote server to perform strength measurement. However, the threat of sending passwords externally during input has not been sufficiently discussed. In this paper, we first survey the current password strength measurement method, and clarify how much remote side strength measurement exists. Then, the threat of remote strength measurement is organized, and the need for its protection is indicated. The necessity of the method of measuring the password strength without disclosure as the protection method is described, and three approaches are shown. Furthermore, the feasibility of each approach is discussed, and the prototype with the highest feasibility was developed. Moreover, we evaluate the performance and usability of the prototype system. As a result, although basic performance changes depending on system configuration, the result of the user study shows that the usability is not low, and the proposed method is sufficiently practical while reducing the threat.","PeriodicalId":413763,"journal":{"name":"2019 14th Asia Joint Conference on Information Security (AsiaJCIS)","volume":"5 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128489125","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Analysis of Division Property using MILP Method for Lightweight Blockcipher Piccolo 轻量级密码短笛的MILP法除法性质分析

2019 14th Asia Joint Conference on Information Security (AsiaJCIS) Pub Date : 2019-08-01 DOI: 10.1109/AsiaJCIS.2019.000-6

Hiroki Sato, M. Mimura, Hidema Tanaka

{"title":"Analysis of Division Property using MILP Method for Lightweight Blockcipher Piccolo","authors":"Hiroki Sato, M. Mimura, Hidema Tanaka","doi":"10.1109/AsiaJCIS.2019.000-6","DOIUrl":"https://doi.org/10.1109/AsiaJCIS.2019.000-6","url":null,"abstract":"Division property is a generalized integral property which is a security evaluation against blockciphers. The Mixed Integer Linear Programming (MILP) method has been proposed to enable a more effective search of division property. In addition, improved MILP method proposed by Ling enables to apply Non-Bit -Permutation Linear layers. By using improved MILP method, we have advantage in division property analysis of Piccolo. In this paper, we revise and verify known evaluation results shown by Kubo and Shibayama. As the result, the validity of 8th and 12th evaluations are confirmed. Regarding 24th and 32nd evaluation, the validity concerning the analysis of Kubo and the effectiveness of MILP without SizeReduce are confirmed. Regarding 48th evaluation, we cannot find 7-round characteristic which is suggested from result of higher-order differential property shown by Shibayama. However, we found that assumption based on that 6-round 32nd order differential property can be extended is not appropriate. We confirmed this fact by computer simulations and conclude that 48th order characteristic does not hold after 7th round. For 63rd characteristic, we discover new result of 7-round division property which is one more round than known result. Therefore, we can clarify the characteristics of 63rd order which is theoretically upper-bound of Piccolo.","PeriodicalId":413763,"journal":{"name":"2019 14th Asia Joint Conference on Information Security (AsiaJCIS)","volume":"18 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114941781","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Measurement Study Towards a Unified Firmware Updating Scheme for Legacy IoT Devices 传统物联网设备统一固件更新方案的测量研究

2019 14th Asia Joint Conference on Information Security (AsiaJCIS) Pub Date : 2019-08-01 DOI: 10.1109/AsiaJCIS.2019.00-11

Bing-Kai Hong, Jr-Wei Huang, Tao Ban, Ryoichi Isawa, Shin-Ming Cheng, D. Inoue, K. Nakao

引用次数: 3