2007 41st Annual IEEE International Carnahan Conference on Security Technology最新文献

Securing Large Applications Against Command Injections 防止命令注入保护大型应用程序

2007 41st Annual IEEE International Carnahan Conference on Security Technology Pub Date : 2009-07-10 DOI: 10.1109/MAES.2009.5161718

Guy-Vincent Jourdan

引用次数: 3

Seismic-Based Personnel Detection 基于地震的人员探测

2007 41st Annual IEEE International Carnahan Conference on Security Technology Pub Date : 2007-10-29 DOI: 10.1109/CCST.2007.4373485

L. Peck, J. Lacombe

引用次数: 20

Bacterial Survivability and Transferability on Biometric Devices 生物识别设备上细菌的生存能力和可转移性

2007 41st Annual IEEE International Carnahan Conference on Security Technology Pub Date : 2007-10-29 DOI: 10.1109/CCST.2007.4373472

C. Blomeke, S. Elliott, T. M. Walter

{"title":"Bacterial Survivability and Transferability on Biometric Devices","authors":"C. Blomeke, S. Elliott, T. M. Walter","doi":"10.1109/CCST.2007.4373472","DOIUrl":"https://doi.org/10.1109/CCST.2007.4373472","url":null,"abstract":"The purpose of this study was to investigate bacterial recovery and transfer from three biometric sensors and the survivability of bacteria on the devices. The modalities tested were fingerprint, hand geometry and hand vein recognition, all of which require sensor contact with the hand or fingers to collect the biometric. Each sensor was tested separately with two species of bacteria, Staphylococcus aureus and Escherichia coli. Survivability was investigated by sterilizing the sensor surface, applying a known volume of diluted bacterial culture to the sensor and allowing it to dry. Bacteria were recovered at 5, 20, 40 and 60 minutes after drying by touching the contaminated device with a sterile finger cot. The finger cot was re-suspended in 5 mL of saline solution, and plated dilutions to obtain live cells counts from the bacterial recovery. The transferability of bacteria from each device surface was investigated by touching the contaminated device and then touching a plate to transfer the bacteria to growth medium to obtain live cell counts. The time lapse between consecutive touches was one minute, with the number of touches was n = 50. Again, S. aureus and E. coli were used separately as detection organisms. This paper will describe the results of the study in terms of survival curves and transfer curves of each bacterial strain for each device.","PeriodicalId":422543,"journal":{"name":"2007 41st Annual IEEE International Carnahan Conference on Security Technology","volume":"2 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-10-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125299971","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 12

RFID Security Threats to Consumers: Hype vs. Reality RFID对消费者的安全威胁:炒作与现实

2007 41st Annual IEEE International Carnahan Conference on Security Technology Pub Date : 2007-10-29 DOI: 10.1109/CCST.2007.4373468

S. Rao, N. Thanthry, R. Pendse

{"title":"RFID Security Threats to Consumers: Hype vs. Reality","authors":"S. Rao, N. Thanthry, R. Pendse","doi":"10.1109/CCST.2007.4373468","DOIUrl":"https://doi.org/10.1109/CCST.2007.4373468","url":null,"abstract":"Radio frequency identification (RFID) tags are being adopted rapidly by retail giants such as Wal-Mart In the near future these tags will be used for item level tracking of consumer products such as milk cartons, television sets, and clothing. While this technology brings many benefits to consumers, such as increased convenience and efficiency through automation, it has also caused a lot of concerns about its potentially adverse impact on consumers' personal privacy. Researchers have theorized various threats relating to clandestine tracking and clandestine inventorying of RFIDs. In this paper the authors research practical security threats to consumers in an RFIO environment The authors study various RFID standards and types of RFID tags that are proposed for consumer products. Initial analysis reveals that not all theoretical security threats translate into practical concerns for consumers' privacy. Based on this analysis the authors build a risk model with which consumers can quantify various threats that RFID poses to their information security and privacy. Such evaluation will assist in creating risk-appropriate threat mitigation strategies in consumer RFID environments.","PeriodicalId":422543,"journal":{"name":"2007 41st Annual IEEE International Carnahan Conference on Security Technology","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-10-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122997356","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

Reference Material for Assessing Forensic SIM Tools 评估法医SIM工具的参考材料

2007 41st Annual IEEE International Carnahan Conference on Security Technology Pub Date : 2007-10-29 DOI: 10.1109/CCST.2007.4373494

W. Jansen, A. Delaitre

{"title":"Reference Material for Assessing Forensic SIM Tools","authors":"W. Jansen, A. Delaitre","doi":"10.1109/CCST.2007.4373494","DOIUrl":"https://doi.org/10.1109/CCST.2007.4373494","url":null,"abstract":"Subscriber identity modules (SIMs) are a fundamental standardized component of most cell phones used worldwide. A SIM can be removed from a phone handset and inserted into another, allowing users to port identity, personal information, and service between devices. All cell phones are expected to incorporate some type of identity module eventually, in part, because of this useful property. Some of the earliest, general purpose, forensic tools for cell phones targeted SIMs to recover digital evidence. While over. time the capabilities and number of such tools have increased, they are not completely free of problems. Validating a forensic SIM tool is an essential quality assurance measure. It allows a forensic specialist to determine how to compensate for any shortcomings identified or whether to use one version of the tool in lieu of another. Tool manufacturers also benefit from rigorously validating their products before releasing them. However, creating reference SIMs that contain comprehensive test data can be time consuming and difficult to accomplish. This paper describes an approach for automating the population of test data onto SIMs to create reference material for use in tool validation. It also covers details of the implementation and explains characteristics of SIMs that pertain to the solution.","PeriodicalId":422543,"journal":{"name":"2007 41st Annual IEEE International Carnahan Conference on Security Technology","volume":"59 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-10-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128605506","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 9

It's All About the System: Changing the Way We Think About Designing Security Systems 这一切都是关于系统:改变我们设计安全系统的方式

2007 41st Annual IEEE International Carnahan Conference on Security Technology Pub Date : 2007-10-29 DOI: 10.1109/CCST.2007.4373460

K. Barrett

{"title":"It's All About the System: Changing the Way We Think About Designing Security Systems","authors":"K. Barrett","doi":"10.1109/CCST.2007.4373460","DOIUrl":"https://doi.org/10.1109/CCST.2007.4373460","url":null,"abstract":"Today's world demands new ways of thinking about security solutions. The problem space is complex and ambiguous. Solutions must be multidimensional, incorporating not only technology, but the social, economic, political, and religious dynamics of a security intervention. A facilitator-led experiential training program was designed for our technical staff that leads them out of the box. The course design is based upon the theories of cognitive flexibility and situated cognition, and uses a socio-constructivist approach. Participants are led by a senior systems engineer/facilitator through a series of exercises in which they observe contextually relevant right way/wrong way videos, engage in critical thinking assessments about what they observed, and solve logic puzzles. Group interaction and problem-solving is emphasized. As in the real world, there is no one \"right\" solution. Outcomes can include a broader understanding of the threat space, creative solutions that enable survival in spite of an evolving enemy, and a deeper sense of the complex dynamics involved in any security decision. Training impact is being evaluated using a mixed qualitative/ quantitative approach. Survey data combined with ethnographic interviewing techniques will determine whether or not participants have transferred their new understandings to the work environment.","PeriodicalId":422543,"journal":{"name":"2007 41st Annual IEEE International Carnahan Conference on Security Technology","volume":"33 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-10-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133942236","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Towards Privacy in Enterprise Directory Services: A User-Centric Approach to Attribute Management 企业目录服务中的隐私:以用户为中心的属性管理方法

2007 41st Annual IEEE International Carnahan Conference on Security Technology Pub Date : 2007-10-29 DOI: 10.1109/CCST.2007.4373492

W. Claycomb, Dongwan Shin, D. Hareland

{"title":"Towards Privacy in Enterprise Directory Services: A User-Centric Approach to Attribute Management","authors":"W. Claycomb, Dongwan Shin, D. Hareland","doi":"10.1109/CCST.2007.4373492","DOIUrl":"https://doi.org/10.1109/CCST.2007.4373492","url":null,"abstract":"Enterprise directory services (EDS) are commonly used to store attributes related to individual users within a corporation, and provide those attributes to authorized users upon request. These attributes may contain sensitive personal information, such as citizenship or social security numbers. Consequently, access to such information is generally controlled, usually by traditional methods such as access control lists. However, if a user-centric identity management model is considered, in which users control their own information and control access to that information, traditional EDS implementations do not provide complete protection from a user perspective. We propose combining public key infrastructure, user-centric identity management, and EDS to allow users control of the personal information stored within a directory as well as who is allowed to access that information. We demonstrate how a user may employ PKI to encrypt individual attributes, then share decryption information with selected entities. Among other advantages, this solution eliminates the possibility of administrative access to users information, a potential threat that exists within many EDS","PeriodicalId":422543,"journal":{"name":"2007 41st Annual IEEE International Carnahan Conference on Security Technology","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-10-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133785993","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 10

Smart-Card-Based Face Verification System: Empirical Optimization of System Meta-Parameters 基于智能卡的人脸验证系统:系统元参数的实证优化

2007 41st Annual IEEE International Carnahan Conference on Security Technology Pub Date : 2007-10-29 DOI: 10.1109/CCST.2007.4373473

T. Bourlai, Josef Kittler, K. Messer

{"title":"Smart-Card-Based Face Verification System: Empirical Optimization of System Meta-Parameters","authors":"T. Bourlai, Josef Kittler, K. Messer","doi":"10.1109/CCST.2007.4373473","DOIUrl":"https://doi.org/10.1109/CCST.2007.4373473","url":null,"abstract":"The optimization of a smart card face verification system (SCFVS) design is a complex task. As the parameters involved are not independent, the search space is of exponential complexity. In our previous work the optimization task was simplified by setting the parameters of the pre-processing stage of the system to default values. Optimization was performed over those parameters involved in the remaining stages and the filtering stage was fixed. In this paper the study is widened by investigating the effect of image filtering and PCA dimension optimization on the system performance. The study is performed using the XM2VTS database. The results of the experiments show that fixing the number of PCA components by the requirement to retain 95% of the total energy does not result in the optimum system performance. A design strategy where the number of PCA components is optimized, after the careful choice of the right Gaussian filtering parameters, can improve performance. However, such an effort is computationally costly and the results are protocol dependent. An alternative solution that achieves high performance while avoiding such a complexity can be obtained by removing the low-order eigenvectors. This is realized by optimizing the binomial filtering parameters while keeping the rest of the pre-processing stage the same.","PeriodicalId":422543,"journal":{"name":"2007 41st Annual IEEE International Carnahan Conference on Security Technology","volume":"114 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-10-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124536686","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Video Encryption for Security Surveillance 用于安全监控的视频加密

2007 41st Annual IEEE International Carnahan Conference on Security Technology Pub Date : 2007-10-29 DOI: 10.1109/CCST.2007.4373491

Jun Huang, H. Qian

引用次数: 5

Spectroscopic Approach for Aliveness Detection in Biometrics Authentication 生物识别认证中活力检测的光谱方法

2007 41st Annual IEEE International Carnahan Conference on Security Technology Pub Date : 2007-10-29 DOI: 10.1109/CCST.2007.4373480

D. Pishva

引用次数: 11