发布求助
文献互助 智能选刊 最新文献

2015 10th Asia Joint Conference on Information Security最新文献

筛选
英文 中文
Secure and Lightweight Authentication Protocol for NFC Tag Based Services 基于NFC标签服务的安全轻量级认证协议
2015 10th Asia Joint Conference on Information Security Pub Date : 2015-05-24 DOI: 10.1109/AsiaJCIS.2015.35
Jonghyun Baek, H. Youm
{"title":"Secure and Lightweight Authentication Protocol for NFC Tag Based Services","authors":"Jonghyun Baek, H. Youm","doi":"10.1109/AsiaJCIS.2015.35","DOIUrl":"https://doi.org/10.1109/AsiaJCIS.2015.35","url":null,"abstract":"Near Field Communication(NFC) technology is one of the most promising technologies in the field of mobile application services recently. The integration of NFC technology and smart mobile device (e.g., smart phones, tablet PC and etc.) stimulates the daily increasing popularity of NFC-based mobile applications which having proliferated in the mobile society. However, this proliferation of NFC-based mobile services in a mobile environment can cause another security threat in the field of mobile application services. Recently, mobile phishing and smishing are one of the most serious security issues in the mobile application services. And, the NFC tag-based mobile services (i.e. NFC tag based services) also have the same problem because an NFC tag have security vulnerabilities. Actually, NFC-enabled device can communicate with NFC tag using specified data format, be called NFC Data Exchange Format(NDEF). The NDEF message is composed one or more NDEF records such as text, URI, Smart post(text and URL) and so on. Therefore, if an attacker overwrite the NDEF message in a tag or replace a NFC tag with hacked tag, they might deliver a mobile malware to an NFC-enabled device. In this paper, a secure and lightweight authentication protocols for NFC tag based services is proposed which effectively achieves security with preventing spoofing, DoS, data modification and phishing attack. And, this authentication protocols are also requires less memory storage and computational power for low-cost NFC tags.","PeriodicalId":432783,"journal":{"name":"2015 10th Asia Joint Conference on Information Security","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-05-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129781169","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 15
Privacy-Preserved Key Agreement with User Authentication 具有用户身份验证的保密密钥协议
2015 10th Asia Joint Conference on Information Security Pub Date : 2015-05-24 DOI: 10.1109/AsiaJCIS.2015.18
Chien-Lung Hsu, Tzu-Wei Lin
{"title":"Privacy-Preserved Key Agreement with User Authentication","authors":"Chien-Lung Hsu, Tzu-Wei Lin","doi":"10.1109/AsiaJCIS.2015.18","DOIUrl":"https://doi.org/10.1109/AsiaJCIS.2015.18","url":null,"abstract":"With the progress of information technology, thecomputer crimes are emerging in an endless stream. It is because of the user's privacy should be protected, when the user submit a service request to the service provider, both of them should check the identity of the other, and then build a shared key to accomplish the service request. In this paper, we adopt the identity-based cryptosystem and the elliptic curve cryptosystem to design a privacy-preserved key agreement with user authentication. This protocol can achieve several properties: mutual authentication, deniability, and forward secrecy. Besides, the performance of the proposed protocol based on RSA is better than previous studies.","PeriodicalId":432783,"journal":{"name":"2015 10th Asia Joint Conference on Information Security","volume":"13 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-05-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131511814","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Hash-Based Anonymous Secure Routing Protocol in Mobile Ad Hoc Networks 移动Ad Hoc网络中基于哈希的匿名安全路由协议
2015 10th Asia Joint Conference on Information Security Pub Date : 2015-05-24 DOI: 10.1109/AsiaJCIS.2015.27
N. Lo, Meng-Chih Chiang, C. Y. Hsu
{"title":"Hash-Based Anonymous Secure Routing Protocol in Mobile Ad Hoc Networks","authors":"N. Lo, Meng-Chih Chiang, C. Y. Hsu","doi":"10.1109/AsiaJCIS.2015.27","DOIUrl":"https://doi.org/10.1109/AsiaJCIS.2015.27","url":null,"abstract":"A mobile ad hoc network (MANET) is composed of multiple wireless mobile devices in which an infrastructure less network with dynamic topology is built based on wireless communication technologies. Novel applications such as location-based services and personal communication Apps used by mobile users with handheld wireless devices utilize MANET environments. In consequence, communication anonymity and message security have become critical issues for MANET environments. In this study, a novel secure routing protocol with communication anonymity, named as Hash-based Anonymous Secure Routing (HASR) protocol, is proposed to support identity anonymity, location anonymity and route anonymity, and defend against major security threats such as replay attack, spoofing, route maintenance attack, and denial of service (DoS) attack. Security analyses show that HASR can achieve both communication anonymity and message security with efficient performance in MANET environments.","PeriodicalId":432783,"journal":{"name":"2015 10th Asia Joint Conference on Information Security","volume":"7 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-05-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131736226","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 9
The Cryptanalysis of WPA & WPA2 in the Rule-Based Brute Force Attack, an Advanced and Efficient Method WPA的密码分析WPA2在基于规则的暴力破解攻击中的一种先进高效的方法
2015 10th Asia Joint Conference on Information Security Pub Date : 2015-05-24 DOI: 10.1109/AsiaJCIS.2015.14
Chia-Mei Chen, Tien-Ho Chang
{"title":"The Cryptanalysis of WPA & WPA2 in the Rule-Based Brute Force Attack, an Advanced and Efficient Method","authors":"Chia-Mei Chen, Tien-Ho Chang","doi":"10.1109/AsiaJCIS.2015.14","DOIUrl":"https://doi.org/10.1109/AsiaJCIS.2015.14","url":null,"abstract":"The development of kinds of mobile device is a nonlinear but in a tremendous hopping way. The security of wireless LAN is far more important, and its mainly present protection is the WPA & WPA2 protocol which is a complex tough algorithm. This exploratory study shows that there is a security gap by the social human factors which are the weak passwords. Traditionally, brute force password attack is using the dictionary files that is aimless and extremely labor work. Now, we proposed 10 rule-based methods which are globally inclusive and culturally exclusive and prove the insecurity of WPA & WPA2 by 100 empirical and valuable real wireless encrypted packets of WPA & WPA2. The evidence shows that there is a 68 % of cracking rate and then do the passwords patterns analysis as well.","PeriodicalId":432783,"journal":{"name":"2015 10th Asia Joint Conference on Information Security","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-05-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114358832","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 9
An Enhanced Secure Anonymous Authentication Scheme Based on Smart Cards and Biometrics for Multi-server Environments 多服务器环境下基于智能卡和生物特征的增强安全匿名认证方案
2015 10th Asia Joint Conference on Information Security Pub Date : 2015-05-24 DOI: 10.1109/AsiaJCIS.2015.11
W. Kuo, Hong-Ji Wei, Yu-Hui Chen, Jiin-Chiou Cheng
{"title":"An Enhanced Secure Anonymous Authentication Scheme Based on Smart Cards and Biometrics for Multi-server Environments","authors":"W. Kuo, Hong-Ji Wei, Yu-Hui Chen, Jiin-Chiou Cheng","doi":"10.1109/AsiaJCIS.2015.11","DOIUrl":"https://doi.org/10.1109/AsiaJCIS.2015.11","url":null,"abstract":"In 2014, Choi proposed a security enhanced anonymous multi-server authenticated key agreement scheme using smart card and biometrics and claimed that their scheme could overcome all of security issues in Chuang-Chen's scheme, such as impersonation attack, smart card loss attack, denial of service attack and perfect forward secrecy. Unfortunately, we discover that Choi's proposed scheme is not only still vulnerable to smart card loss attack and lack of perfect forward secrecy, but also contains a flaw in design for authentication phase after our analysis in detail. In order to solve these security issues, we propose an enhanced secure anonymous authentication scheme with key agreement based on smart cards and biometrics for multi-server environments in this paper. According to our performance and security analysis, it can prove that our proposed scheme is more efficiency and security in comparison to previous schemes.","PeriodicalId":432783,"journal":{"name":"2015 10th Asia Joint Conference on Information Security","volume":"14 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-05-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127646972","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 13
A Proposal for Detecting Distributed Cyber-Attacks Using Automatic Thresholding 一种基于自动阈值检测分布式网络攻击的方法
2015 10th Asia Joint Conference on Information Security Pub Date : 2015-05-24 DOI: 10.1109/AsiaJCIS.2015.22
Yaokai Feng, Y. Hori, K. Sakurai
{"title":"A Proposal for Detecting Distributed Cyber-Attacks Using Automatic Thresholding","authors":"Yaokai Feng, Y. Hori, K. Sakurai","doi":"10.1109/AsiaJCIS.2015.22","DOIUrl":"https://doi.org/10.1109/AsiaJCIS.2015.22","url":null,"abstract":"Distributed attacks have reportedly caused the most serious losses in the modern cyber environment. Thus, how to avoid and detect distributed attacks has become one of the most important topics in the cyber security community. Of many approaches for avoiding and detecting cyber-attacks, behavior-based method has been attracting great attentions from many researchers and developers. It is well known that, for behavior-based cyber-attack detections, the algorithm for extracting normal modes from historic traffic is critically important. In this paper, after the newest algorithms for extracting normal behavior mode from historic traffics are discussed, a novel algorithm is proposed. Its efficiency is examined by experiments using dark net traffic data.","PeriodicalId":432783,"journal":{"name":"2015 10th Asia Joint Conference on Information Security","volume":"62 3 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-05-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116315815","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 4
Constructions of Fail-Stop Signatures for Multi-signer Setting 多签名者设置的失效停止签名构造
2015 10th Asia Joint Conference on Information Security Pub Date : 2015-05-24 DOI: 10.1109/AsiaJCIS.2015.26
Nobuaki Kitajima, Naoto Yanai, T. Nishide, Goichiro Hanaoka, E. Okamoto
{"title":"Constructions of Fail-Stop Signatures for Multi-signer Setting","authors":"Nobuaki Kitajima, Naoto Yanai, T. Nishide, Goichiro Hanaoka, E. Okamoto","doi":"10.1109/AsiaJCIS.2015.26","DOIUrl":"https://doi.org/10.1109/AsiaJCIS.2015.26","url":null,"abstract":"Fail-stop signatures (FSS) provide the security for a signer against a computationally unbounded adversary by enabling the signer to provide a proof of forgery. Conventional FSS schemes are for a single-signer setting, but in the real world, there is a case where a countersignature of multiple signers (e.g. A signature between a bank, a user, and a consumer) is required. In this work, we propose a framework of FSS capturing a multi-signer setting and call the primitive fail-stop multisignatures (FSMS). We propose a generic construction of FSMS via the bundling homomorphisms proposed by Pfitzmann and then propose a provably secure instantiation of the FSMS scheme from the factoring assumption. Our proposed schemes can be also extended to fail-stop aggregate signatures (FSAS).","PeriodicalId":432783,"journal":{"name":"2015 10th Asia Joint Conference on Information Security","volume":"73 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-05-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114910862","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
A Secure and Efficient Smartphone Payment Scheme in IoT/Cloud Environments 物联网/云环境下安全高效的智能手机支付方案
2015 10th Asia Joint Conference on Information Security Pub Date : 2015-05-24 DOI: 10.1109/AsiaJCIS.2015.20
Jheng-Jia Huang, Wen-Shenq Juang, Chun-I Fan
{"title":"A Secure and Efficient Smartphone Payment Scheme in IoT/Cloud Environments","authors":"Jheng-Jia Huang, Wen-Shenq Juang, Chun-I Fan","doi":"10.1109/AsiaJCIS.2015.20","DOIUrl":"https://doi.org/10.1109/AsiaJCIS.2015.20","url":null,"abstract":"In IoT/Cloud environments, to provide an efficient and flexible payment service is very important since the client/device may not have a large storage and computation capability to finish the payment process. In these environments, any thin client/device may issue a service request to the cloud. For the fast progress of smartphone systems, a smartphone can help the client/device to finish the payment process with the help of the carrier. Although the smart phone may have more storage and computation capability than the client/device, the computation ability is also restricted. In this paper, in order to provide an efficient payment and authentication service framework in the IOT/Cloud environments, we propose a secure and efficient smartphone payment scheme in IoT/Cloud environments. Our proposed scheme can satisfy the properties including low communication and computation cost, no time synchronization problem, unforgeability, non-repudiation, and integrity. Also our scheme can achieve the security requirements including mutual authentication, session key agreement, and preventing all various well-known attacks.","PeriodicalId":432783,"journal":{"name":"2015 10th Asia Joint Conference on Information Security","volume":"21 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-05-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114643205","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
An Efficient Detection Algorithm for Copy-Move Forgery 一种高效的复制-移动伪造检测算法
2015 10th Asia Joint Conference on Information Security Pub Date : 2015-05-24 DOI: 10.1109/AsiaJCIS.2015.16
C. Hsu, Jen-Chun Lee, Wei-Kuei Chen
{"title":"An Efficient Detection Algorithm for Copy-Move Forgery","authors":"C. Hsu, Jen-Chun Lee, Wei-Kuei Chen","doi":"10.1109/AsiaJCIS.2015.16","DOIUrl":"https://doi.org/10.1109/AsiaJCIS.2015.16","url":null,"abstract":"The most common method of tampering with a digital image is copy-move forgery, in which a part of an image is duplicated and used to substitute another part of the same image at a different location. In this paper, we present an efficient and robust method to detect such artifacts. First, the tampered image is segmented into overlapping fixed-size blocks, and the Gabor filter is applied to each block. Thus, the image of Gabor magnitude represents each block. Secondly, statistical features are extracted from the histogram of orientated Gabor magnitude (HOGM) of overlapping blocks, and reduced features are generated for similarity measurement. Finally, feature vectors are sorted lexicographically, and duplicated image blocks are identified by finding similarity block pairs after suitable post-processing. Experimental results demonstrate that the proposed method can detect multiple examples of copy-move forgery and locate precisely the duplicated regions, even when dealing with images distorted by translation, rotation, JPEG compression, blurring, and brightness adjustment.","PeriodicalId":432783,"journal":{"name":"2015 10th Asia Joint Conference on Information Security","volume":"113 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-05-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129889728","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 24
Encrypted Data Deduplication in Cloud Storage 云存储中的加密重复数据删除
2015 10th Asia Joint Conference on Information Security Pub Date : 2015-05-24 DOI: 10.1109/AsiaJCIS.2015.12
Chun-I Fan, Shi-Yuan Huang, Wen-Che Hsu
{"title":"Encrypted Data Deduplication in Cloud Storage","authors":"Chun-I Fan, Shi-Yuan Huang, Wen-Che Hsu","doi":"10.1109/AsiaJCIS.2015.12","DOIUrl":"https://doi.org/10.1109/AsiaJCIS.2015.12","url":null,"abstract":"Cloud storage is a remote storage service, where users can upload and download their data anytime and anywhere. However, it raises issues regarding privacy and data confidentiality because all the data are stored in the cloud storage. This is a subject of concern for users, and it affects their willingness to use cloud storage services. On the other hand, a cloud storage server typically performs a specialized data compression technique (data deduplication) to eliminate duplicate data because the storage space is not infinite. Data deduplication, which makes it possible for data owners to share a copy of the same data, can be performed to reduce the consumption of storage space. Due to the above issues, there is a research on encrypted data deduplication. In this manuscript, we propose an encrypted data deduplication mechanism which makes the cloud storage server be able to eliminate duplicate ciphertexts and improves the privacy protection.","PeriodicalId":432783,"journal":{"name":"2015 10th Asia Joint Conference on Information Security","volume":"68 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-05-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125907505","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 12
首页 上一页 下一页 尾页
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整，为了账户安全，请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
请完成安全验证×
相关产品
×
本文献相关产品
联系我们：info@booksci.cn Book学术提供免费学术资源搜索服务，方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号：604180095
Book学术官方微信
小红书