ISC Int. J. Inf. Secur.最新文献_第3页

Suspended Stripline Low-pass Filter Design for Wide Stopband Attenuation Applications 用于宽阻带衰减应用的悬式带状低通滤波器设计

ISC Int. J. Inf. Secur. Pub Date : 2020-11-01 DOI: 10.22042/isecure.2021.271055.613

Aymen M. Al-Kadhimi, Salim A. Mohammed Ali, S. Hasan

引用次数: 0

An Efficient Pairing-Free Identity Based Proxy Blind Signature Scheme with Message Recovery 基于消息恢复的高效无配对身份代理盲签名方案

ISC Int. J. Inf. Secur. Pub Date : 2020-10-06 DOI: 10.22042/ISECURE.2020.208473.495

Salome James, T. Gowri, P. V. Reddy

引用次数: 5

The Use of Local Sensitive Hashing for E-learner Face Identification 局部敏感哈希法在在线学习者人脸识别中的应用

ISC Int. J. Inf. Secur. Pub Date : 2020-08-30 DOI: 10.22042/ISECURE.2021.271051.612

Hachem H. Alaoui, El-Kaber Hachem, C. Ziti, Mohammed Karim

引用次数: 0

CPA on COLM Authenticated Cipher and the Protection Using Domain-Oriented Masking COLM认证密码的CPA及面向域掩蔽保护

ISC Int. J. Inf. Secur. Pub Date : 2020-07-01 DOI: 10.22042/ISECURE.2020.191916.471

M. Jahanbani, N. Bagheri, Zynolabedin Norouzi

引用次数: 0

A Fast Publicly Verifiable Secret Sharing Scheme using Non-homogeneous Linear Recursions 一种基于非齐次线性递推的快速公开可验证秘密共享方案

ISC Int. J. Inf. Secur. Pub Date : 2020-07-01 DOI: 10.22042/ISECURE.2020.212763.505

A. Zaghian, Bagher Bagherpour

引用次数: 4

Enhanced Flush+Reload Attack on AES 增强了AES的Flush+Reload攻击

ISC Int. J. Inf. Secur. Pub Date : 2020-07-01 DOI: 10.22042/ISECURE.2020.219248.519

Milad Seddigh, H. Soleimany

引用次数: 3

F-STONE: A Fast Real-Time DDOS Attack Detection Method Using an Improved Historical Memory Management F-STONE:一种基于改进历史内存管理的快速实时DDOS攻击检测方法

ISC Int. J. Inf. Secur. Pub Date : 2020-07-01 DOI: 10.22042/ISECURE.2020.167450.453

Mahsa Nooribakhsh, M. Mollamotalebi

{"title":"F-STONE: A Fast Real-Time DDOS Attack Detection Method Using an Improved Historical Memory Management","authors":"Mahsa Nooribakhsh, M. Mollamotalebi","doi":"10.22042/ISECURE.2020.167450.453","DOIUrl":"https://doi.org/10.22042/ISECURE.2020.167450.453","url":null,"abstract":"Distributed Denial of Service (DDoS) is a common attack in recent years that can deplete the bandwidth of victim nodes by flooding packets. Based on the type and quantity of traffic used for the attack and the exploited vulnerability of the target, DDoS attacks are grouped into three categories as Volumetric attacks, Protocol attacks and Application attacks. The volumetric attack, which the proposed method attempts to detect it, is the most common type of DDoS attacks. The aim of this paper is to reduce the delay of real-time detection of DDoS attacks utilizing hybrid structures based on data stream algorithms. The proposed data structure (BHM ) improves the data storing mechanism presented in STONE method and consequently reduces the detection time. STONE characterizes regular network traffic of a service by aggregating it into common prefixes of IP addresses, and detecting attacks when the aggregated traffic deviates from the regular one. In BHM, history refers to the output traffic information obtained from each monitoring period to form a reference profile. The reference profile is created by employing historical information and only includes normal traffic information. The delay of DDoS attack detection increases in STONE due to long-time intervals between each monitoring period. The proposed method (F-STONE) has been compared to STONE based on attack detection time, Expected Profile Update Time (EPUT), and rate of attack detection. The evaluation results indicated significant improvements in terms of the EPUT, acceleration of attack detection and reduction of false positive rate.","PeriodicalId":436674,"journal":{"name":"ISC Int. J. Inf. Secur.","volume":"101 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-07-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132962181","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Attribute-based Access Control for Cloud-based Electronic Health Record (EHR) Systems 基于云的电子健康记录(EHR)系统基于属性的访问控制

ISC Int. J. Inf. Secur. Pub Date : 2020-05-31 DOI: 10.22042/ISECURE.2020.174338.458

Maryam Zarezadeh, M. Ashouri-Talouki, Mohammad Siavashi

{"title":"Attribute-based Access Control for Cloud-based Electronic Health Record (EHR) Systems","authors":"Maryam Zarezadeh, M. Ashouri-Talouki, Mohammad Siavashi","doi":"10.22042/ISECURE.2020.174338.458","DOIUrl":"https://doi.org/10.22042/ISECURE.2020.174338.458","url":null,"abstract":"Electronic health record (EHR) system facilitates integrating patients' medical information and improves service productivity. However, user access to patient data in a privacy-preserving manner is still challenging problem. Many studies concerned with security and privacy in EHR systems. Rezaeibagha and Mu [1] have proposed a hybrid architecture for privacy-preserving accessing patient records in a cloud system. In their scheme, encrypted EHRs are stored in multiple clouds to provide scalability and privacy. In addition, they considered a role-based access control (RBAC) such that for any user, an EHR access policy must be determined. They also encrypt the EHRs by the public keys of all users. So, for a large amount of EHRs, this scheme is not efficient. Furthermore, using RBAC for access policy makes the policy changing difficult. In their scheme, users cannot search on encrypted EHRs based on diseases and some physicians must participate in the data retrieval by a requester physician. In this paper, we address these problems by considering a ciphertext-policy attribute-based encryption (CP-ABE) which is conceptually closer to the traditional access control methods such as RBAC. Our secure scheme can retrieve encrypted EHR based on a specific disease. Furthermore, the proposed scheme guarantees the user access control and the anonymity of the user or data owner during data retrieval. Moreover, our scheme is resistant against collusion between unauthorized retrievers to access the data. The analysis shows that our scheme is secure and efficient for cloud-based EHRs.","PeriodicalId":436674,"journal":{"name":"ISC Int. J. Inf. Secur.","volume":"79 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-05-31","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132201203","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4

Anomaly-based Web Attack Detection: The Application of Deep Neural Network Seq2Seq With Attention Mechanism 基于异常的Web攻击检测:基于注意力机制的深度神经网络Seq2Seq的应用

ISC Int. J. Inf. Secur. Pub Date : 2020-01-01 DOI: 10.22042/isecure.2020.199009.479

S. Mohammadi, A. Namadchian

{"title":"Anomaly-based Web Attack Detection: The Application of Deep Neural Network Seq2Seq With Attention Mechanism","authors":"S. Mohammadi, A. Namadchian","doi":"10.22042/isecure.2020.199009.479","DOIUrl":"https://doi.org/10.22042/isecure.2020.199009.479","url":null,"abstract":"Today, the use of the Internet and Internet sites has been an integrated part of the people’s lives, and most activities and important data are in the Internet websites. Thus, attempts to intrude into these websites have grown exponentially. Intrusion detection systems (IDS) of web attacks are an approach to protect users. But, these systems are suffering from such drawbacks as low accuracy in detecting new attacks. To tackle this problem, various methods of machine learning have been presented in recent years. Since malicious web requests have more delicate distinction than normal requests, these methods have failed to exhibit a good accuracy in new attack detection. This paper presents a new method for web attack detection using seq2seq networks using attention. The results show that this method could predict the possible responses and use the difference from the real responses of the server to model the normal traffic. Thereby, it could use the similarity measure to discriminate between normal and anomalous traffic. The highest accuracy of this method versus similar methods shows that the use of attention mechanism can cope with the challenge of studying long web requests to a great extent.","PeriodicalId":436674,"journal":{"name":"ISC Int. J. Inf. Secur.","volume":"39 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128937860","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6

The Role of Packet Tracer in Learning Wireless Networks and Managing IoT Devices 数据包跟踪器在学习无线网络和管理物联网设备中的作用

ISC Int. J. Inf. Secur. Pub Date : 2019-08-01 DOI: 10.22042/ISECURE.2019.11.0.5

R. Flifel

引用次数: 5