2016 International Conference on Information Science and Security (ICISS)最新文献

All-or-Nothing Key Derivation Function Based on Quasigroup String Transformation 基于拟群串变换的全或无键派生函数

2016 International Conference on Information Science and Security (ICISS) Pub Date : 2016-12-01 DOI: 10.1109/ICISSEC.2016.7885839

Abdulkadir Hassan Disina, Sapiee Jamel, Z. Pindar, M. M. Deris

{"title":"All-or-Nothing Key Derivation Function Based on Quasigroup String Transformation","authors":"Abdulkadir Hassan Disina, Sapiee Jamel, Z. Pindar, M. M. Deris","doi":"10.1109/ICISSEC.2016.7885839","DOIUrl":"https://doi.org/10.1109/ICISSEC.2016.7885839","url":null,"abstract":"Traditionally, Cryptographic ciphers (Block and Stream) uses Key Derivation Function (KDF) to generate cryptographic keys for encryption purpose. These KDFs are usually designed based on existing Hash functions and ciphers as primitives, to achieve better security. However, this method of construction can be costly to resources- constrain environments. The main function of KDFs is to generate random and unpredictable secret keys. Therefore, the use of predefined public string increases the predictability level and provides some partial knowledge of the key to cryptanalyst, thus jeopardies the security. This paper proposed a new algorithm to minimize the use of cryptographic Hash function and ciphers as a key derivation function and to optimally mitigate the use of predefined public string in KDF. The proposed KDF is entirely key-dependent and cryptanalyst has to correctly predict all the elements in the key string otherwise he got nothing. To achieve that, a new definition of Quasigroup string transformation, a Quasigroup- based expansion function, and key-metadata expansion function as well as reduction function are integrated together in the design of the proposed KDF. The proposed algorithm will be evaluated using statistical test for Randomness developed and recommended by the National Institute of Standard and Technology (NIST), Avalanche, Brute Force and Correlation Assessment test. The proposed algorithm will ensure not only confidentiality of information but integrity as well.","PeriodicalId":420224,"journal":{"name":"2016 International Conference on Information Science and Security (ICISS)","volume":"23 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122330671","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

Enhanced Weighted Method for Test Case Prioritization in Regression Testing Using Unique Priority Value 基于唯一优先级值的回归测试用例优化加权方法

2016 International Conference on Information Science and Security (ICISS) Pub Date : 2016-12-01 DOI: 10.1109/ICISSEC.2016.7885851

A. Ammar, S. Baharom, A. Ghani, J. Din

引用次数: 10

Reconstruction of 'Phi' in Thresholding Process for a Better Compressed Image Quality 阈值分割过程中“Phi”的重构以获得更好的压缩图像质量

2016 International Conference on Information Science and Security (ICISS) Pub Date : 2016-12-01 DOI: 10.1109/ICISSEC.2016.7885868

N. Taujuddin, R. Ibrahim, S. Sari

引用次数: 1

Hybrid Intrusion Detection in Information Systems 信息系统中的混合入侵检测

2016 International Conference on Information Science and Security (ICISS) Pub Date : 2016-12-01 DOI: 10.1109/ICISSEC.2016.7885857

D. Pierrot, Nouria Harbi, J. Darmont

引用次数: 7

An Evaluation Framework for Intrusion Detection Dataset 一种入侵检测数据集评估框架

2016 International Conference on Information Science and Security (ICISS) Pub Date : 2016-12-01 DOI: 10.1109/ICISSEC.2016.7885840

Amirhossein Gharib, Iman Sharafaldin, Arash Habibi Lashkari, A. Ghorbani

引用次数: 167

Information Security between Standards, Certifications and Technologies: An Empirical Study 标准、认证和技术之间的信息安全：实证研究

2016 International Conference on Information Science and Security (ICISS) Pub Date : 2016-12-01 DOI: 10.1109/ICISSEC.2016.7885859

Y. Benslimane, Zijiang Yang, B. Bahli

引用次数: 8

Development of Inventory Checking System Based on UAV and RFID in Open Storage Yard 基于无人机和RFID的开放式堆场库存盘点系统的开发

2016 International Conference on Information Science and Security (ICISS) Pub Date : 2016-12-01 DOI: 10.1109/ICISSEC.2016.7885849

S. Bae, K. Han, C. Cha, Hwa Yong Lee

引用次数: 26

Prioritizing Software Maintenance Plan by Analyzing User Feedback 通过分析用户反馈确定软件维护计划的优先级

2016 International Conference on Information Science and Security (ICISS) Pub Date : 2016-12-01 DOI: 10.1109/ICISSEC.2016.7885865

Kittiya Srewuttanapitikul, Pornsiri Muengchaisri

引用次数: 5

An Improved Smartcard for the South African Social Security Agency (SASSA): A Proof of Life Based Solution 为南非社会保障局(SASSA)改进的智能卡:基于生命证明的解决方案

2016 International Conference on Information Science and Security (ICISS) Pub Date : 2016-12-01 DOI: 10.1109/ICISSEC.2016.7885842

Sthembile Mthethwa, Graham Barbour, M. Thinyane

{"title":"An Improved Smartcard for the South African Social Security Agency (SASSA): A Proof of Life Based Solution","authors":"Sthembile Mthethwa, Graham Barbour, M. Thinyane","doi":"10.1109/ICISSEC.2016.7885842","DOIUrl":"https://doi.org/10.1109/ICISSEC.2016.7885842","url":null,"abstract":"The rapid growth of biometric technologies and wide accessibility of capturing devices has resulted in biometric systems becoming increasingly common in different applications. This has led to the introduction of ATMs in countries like Japan that have adapted biometrics, whereby fingerprints are used instead of PINs. Whilst in South Africa, biometrics is still not regulated in financial sectors. South Africa has one of the largest cash transfer systems in Africa, whereby approximately 16, 900, 000 grants are paid out monthly. SASSA is responsible for the administration and payments of grants with the help of a third entity, namely; Cash Paymaster Services (CPS). These grants are a way of fighting against poverty and recipients are known as beneficiaries. SASSA has a challenge when it comes to proving whether a beneficiary is still alive. Cases of impersonation have been identified, which led to money being paid out to people who are not eligible to receive it. Thus, the main aim of this paper is to propose a solution for this challenge. Therefore, an improved biometric-based smartcard is presented as a solution. Whereby, fingerprints are used to activate a smartcard before it is inserted into a machine (POS/ATM). This approach allows the owner of the card to be the only one that can use the card, which at the end links the transaction to the card-owner.","PeriodicalId":420224,"journal":{"name":"2016 International Conference on Information Science and Security (ICISS)","volume":"73 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127234649","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4

Formulation of Certificate Policy and Certification Practice Statement Framework for Subordinate Certification Authorities Indonesia 印度尼西亚下级认证机构的证书政策和认证实践声明框架的制定

2016 International Conference on Information Science and Security (ICISS) Pub Date : 2016-12-01 DOI: 10.1109/ICISSEC.2016.7885854

Arfive Gandhi, Y. G. Sucahyo, T. Sirait

{"title":"Formulation of Certificate Policy and Certification Practice Statement Framework for Subordinate Certification Authorities Indonesia","authors":"Arfive Gandhi, Y. G. Sucahyo, T. Sirait","doi":"10.1109/ICISSEC.2016.7885854","DOIUrl":"https://doi.org/10.1109/ICISSEC.2016.7885854","url":null,"abstract":"Certificate Policy (CP) and Certification Practice Statement (CPS) are mandatory documents for Subordinate Certification Authorities (Sub-CAs) to explain their process business in Indonesia National Public Key Infrastructure (INPKI). Due to Sub-CAs' low proficiency in preparing CP and CPS, Ministry of Communication and Information Technology (MCIT) need to formulate CP and CPS framework for them. The usage of Request For Comment (RFC) 3647 as standard of CP and CPS format should be complemented with statements to comply with legal aspect of information security in Indonesia. This compliance explained in the relevant of provisions in CP and CPS. The research will contribute the acceleration of Sub-CA's readiness in CP and CPS requirements, both in technical and legal aspect. Sub-CAs CP and CPS are important in gaining trust from government as regulator and citizen as subscriber. This research provides guidance for Sub-CAs to compose sufficient CP and CPS related to three aspects: governance, technical, and human resources requirements. This research also promote future analysis about Level of Assurance, DN structure modification, and physical infrastructure standardization as recommendation for MCIT and Sub-CAs.","PeriodicalId":420224,"journal":{"name":"2016 International Conference on Information Science and Security (ICISS)","volume":"64 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122964070","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1