首页 > 最新文献

2016 11th International Conference for Internet Technology and Secured Transactions (ICITST)最新文献

英文 中文
Face-deidentification in images using Restricted Boltzmann Machines 基于受限玻尔兹曼机的图像人脸去识别
A. Rafique, Shoaib Azam, M. Jeon, Sangwook Lee
In this work, we discuss utility of Restricted Boltzmann Machine (RBM) in face-deidentification challenge. GRBM is a generative modeling technique and its unsupervised learning provides vantage of using raw faces data. Faces are deidentified by reconstructed face images from the trained GRBM model. The reconstructed image uses random information from the stochastic units which makes it hard to re-identify from the deidentified face. Experiments show the proposed technique maintain emotions in the test face, which is intrinsic to the modeling capacity of RBM.
在这项工作中,我们讨论了限制玻尔兹曼机(RBM)在人脸去识别挑战中的应用。GRBM是一种生成建模技术,它的无监督学习提供了使用原始人脸数据的优势。利用训练好的GRBM模型重构人脸图像去识别人脸。重建后的图像使用随机单元中的随机信息,这使得从被识别的人脸中重新识别变得困难。实验表明,该方法能够保持被试面部的情绪,这是RBM建模能力的内在特征。
{"title":"Face-deidentification in images using Restricted Boltzmann Machines","authors":"A. Rafique, Shoaib Azam, M. Jeon, Sangwook Lee","doi":"10.1109/ICITST.2016.7856669","DOIUrl":"https://doi.org/10.1109/ICITST.2016.7856669","url":null,"abstract":"In this work, we discuss utility of Restricted Boltzmann Machine (RBM) in face-deidentification challenge. GRBM is a generative modeling technique and its unsupervised learning provides vantage of using raw faces data. Faces are deidentified by reconstructed face images from the trained GRBM model. The reconstructed image uses random information from the stochastic units which makes it hard to re-identify from the deidentified face. Experiments show the proposed technique maintain emotions in the test face, which is intrinsic to the modeling capacity of RBM.","PeriodicalId":258740,"journal":{"name":"2016 11th International Conference for Internet Technology and Secured Transactions (ICITST)","volume":"16 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131200478","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
PRS signal in acquiring evidence of Digital Chain of Custody 数字监管链证据获取中的PRS信号
Tomas Marques-Arpa, Jordi Serra-Ruiz
One of the main problems in the analysis of Digital Chain of Custody (CoC) in computer forensics is the traceability of the procedure of evidence. Generally, it is obtained by Corps and Forces of State Security and later it is examined and analyzed by forensic information experts. Therefore, the maximum guarantees both judicial and procedural are imperative for information sharing. However, the moment of capturing the proof has been cited as the most critical moment in the CoC. Consequently, in order to meet the exact capture place and right time, Global Positioning Satellite (GPS) has been proposed to be used by some authors. Another problem is created then: the possibility of attacks to capture system, based on jamming (interference) and spoofing (wrong place and time transmission) threats. To prevent the latter, this research work has been developed: the proposal for using encrypted signal of Public Regulated Service (PRS) which it is one of the signals of Galileo satellites. Thereby, the metadata of evidence will contain right and secure geolocation and time.
计算机取证中数字监管链分析的主要问题之一是证据过程的可追溯性。一般由国家安全总队和部队取得,由法医信息专家鉴定分析。因此,最大限度的司法和程序保障是信息共享的必要条件。然而,取证的时刻被认为是准则中最关键的时刻。因此,为了满足准确的捕获地点和正确的捕获时间,一些作者提出使用全球定位卫星(GPS)。另一个问题产生了:基于干扰(干扰)和欺骗(错误的地点和时间传输)威胁的攻击捕获系统的可能性。为了防止后者,本研究工作已展开:建议使用公共管制服务(PRS)的加密信号,它是伽利略卫星的信号之一。因此,证据元数据将包含正确和安全的地理位置和时间。
{"title":"PRS signal in acquiring evidence of Digital Chain of Custody","authors":"Tomas Marques-Arpa, Jordi Serra-Ruiz","doi":"10.1109/ICITST.2016.7856711","DOIUrl":"https://doi.org/10.1109/ICITST.2016.7856711","url":null,"abstract":"One of the main problems in the analysis of Digital Chain of Custody (CoC) in computer forensics is the traceability of the procedure of evidence. Generally, it is obtained by Corps and Forces of State Security and later it is examined and analyzed by forensic information experts. Therefore, the maximum guarantees both judicial and procedural are imperative for information sharing. However, the moment of capturing the proof has been cited as the most critical moment in the CoC. Consequently, in order to meet the exact capture place and right time, Global Positioning Satellite (GPS) has been proposed to be used by some authors. Another problem is created then: the possibility of attacks to capture system, based on jamming (interference) and spoofing (wrong place and time transmission) threats. To prevent the latter, this research work has been developed: the proposal for using encrypted signal of Public Regulated Service (PRS) which it is one of the signals of Galileo satellites. Thereby, the metadata of evidence will contain right and secure geolocation and time.","PeriodicalId":258740,"journal":{"name":"2016 11th International Conference for Internet Technology and Secured Transactions (ICITST)","volume":"44 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125007893","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
Temporal resource scheduling equity 时间资源调度公平性
Madeline Little, Aspen Olmsted
This paper examines the process used in scheduling limited resources for blocks of time. The paper compares a complex algorithm current used to a random assignment system on scheduling equity. This research involved scheduling contracted guides with non-regular schedules to tours in advance or the day of the scheduling process. The random assignment algorithm, which is analyzed by equity, replaces a more complex algorithm that includes a ratio to prioritize guide assignment. Data from the Gettysburg Foundation was used to compare equity between the two assignment algorithms.
本文研究了在调度有限资源的时间块中使用的过程。本文将一种复杂的调度公平性算法与随机分配系统进行了比较。这项研究涉及安排合同导游不定期安排旅游提前或当天的安排过程。随机分配算法,用公平分析,取代了一个更复杂的算法,其中包括一个比例优先级指导分配。来自葛底斯堡基金会的数据被用来比较两种分配算法之间的公平性。
{"title":"Temporal resource scheduling equity","authors":"Madeline Little, Aspen Olmsted","doi":"10.1109/ICITST.2016.7856716","DOIUrl":"https://doi.org/10.1109/ICITST.2016.7856716","url":null,"abstract":"This paper examines the process used in scheduling limited resources for blocks of time. The paper compares a complex algorithm current used to a random assignment system on scheduling equity. This research involved scheduling contracted guides with non-regular schedules to tours in advance or the day of the scheduling process. The random assignment algorithm, which is analyzed by equity, replaces a more complex algorithm that includes a ratio to prioritize guide assignment. Data from the Gettysburg Foundation was used to compare equity between the two assignment algorithms.","PeriodicalId":258740,"journal":{"name":"2016 11th International Conference for Internet Technology and Secured Transactions (ICITST)","volume":"71 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115856215","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Employing miniaturized computers for distributed vulnerability assessment 采用小型化计算机进行分布式脆弱性评估
Y. Hu, D. Sulek, Anthony Carella, Joshua Cox, Allyson Frame, Karen Cipriano
Vulnerability assessment is the practice of testing a computer system, network or application to identify, measure and rank vulnerabilities within the system. This project's goal is to create a distributed vulnerability assessment architecture utilizing multiple miniaturized computers such as Raspberry Pi 2 Model B. The scheme delegates scanning tasks to low-cost and self-contained miniaturized devices for pursuing vulnerability assessment to achieve load balancing and enhanced performance. A cloud based dashboard application allows each miniaturized computer to register itself and controls the vulnerability assessment process for multiple networks. This allows the security professional to conduct assessment process and view vulnerability reports remotely. This paper describes the detailed design and implementation of the proposed architecture. The performance and assessment results prove the viability of automated vulnerability assessment using miniaturized computers.
漏洞评估是对计算机系统、网络或应用程序进行测试,以识别、测量和排列系统内的漏洞。本项目的目标是利用多台小型化计算机(如Raspberry Pi 2 Model b)创建分布式漏洞评估架构,方案将扫描任务委托给低成本、自包含的小型化设备进行漏洞评估,实现负载均衡和性能提升。基于云的仪表板应用程序允许每个小型化计算机注册自己并控制多个网络的漏洞评估过程。这允许安全专业人员远程执行评估过程并查看漏洞报告。本文描述了所提出的体系结构的详细设计和实现。性能和评估结果证明了利用小型化计算机进行自动化漏洞评估的可行性。
{"title":"Employing miniaturized computers for distributed vulnerability assessment","authors":"Y. Hu, D. Sulek, Anthony Carella, Joshua Cox, Allyson Frame, Karen Cipriano","doi":"10.1109/ICITST.2016.7856666","DOIUrl":"https://doi.org/10.1109/ICITST.2016.7856666","url":null,"abstract":"Vulnerability assessment is the practice of testing a computer system, network or application to identify, measure and rank vulnerabilities within the system. This project's goal is to create a distributed vulnerability assessment architecture utilizing multiple miniaturized computers such as Raspberry Pi 2 Model B. The scheme delegates scanning tasks to low-cost and self-contained miniaturized devices for pursuing vulnerability assessment to achieve load balancing and enhanced performance. A cloud based dashboard application allows each miniaturized computer to register itself and controls the vulnerability assessment process for multiple networks. This allows the security professional to conduct assessment process and view vulnerability reports remotely. This paper describes the detailed design and implementation of the proposed architecture. The performance and assessment results prove the viability of automated vulnerability assessment using miniaturized computers.","PeriodicalId":258740,"journal":{"name":"2016 11th International Conference for Internet Technology and Secured Transactions (ICITST)","volume":"46 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122379955","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 9
Interactive querying and data visualization for abuse detection in social network sites 社交网站滥用检测的交互式查询和数据可视化
Leandro Ordoñez-Ante, Thomas Vanhove, Gregory van Seghbroeck, T. Wauters, F. Turck
Big Data technologies have traditionally operated in an offline setting, collecting large batches of information on clusters of commodity machines and performing complex and time-consuming computations over it. While frameworks following this approach served well for most applications involving big data analysis during the last decade, other use cases have recently emerged posing challenging requirements on latency and demanding real-time data processing, querying and visualization. That is the case for applications aiming at detecting threatening behaviors in social network platforms, where timely action is required to avoid adverse consequences. In this sense, more and more attention has been drawn towards online data processing systems claiming to address the limitations of batch-oriented frameworks. This paper reports a work in progress on distributed data processing for enabling low-latency querying over big data sets. Two software architectures are discussed for addressing the problem and an experimental evaluation is performed on a proof of concept implementation showing how an approach based on query pre-processing and stateful distributed stream computation can meet the requirements for supporting interactive querying on large and continuously generated data.
传统上,大数据技术是在离线环境下运行的,在商用机器集群上收集大量信息,并对其进行复杂而耗时的计算。虽然在过去十年中,遵循这种方法的框架很好地服务于大多数涉及大数据分析的应用程序,但最近出现的其他用例对延迟提出了挑战性的要求,并要求实时数据处理、查询和可视化。对于旨在检测社交网络平台上的威胁行为的应用程序来说,情况就是如此,需要及时采取行动以避免不良后果。从这个意义上讲,越来越多的注意力被吸引到在线数据处理系统上,这些系统声称可以解决面向批处理框架的局限性。本文报告了一项正在进行的分布式数据处理工作,以实现对大数据集的低延迟查询。讨论了用于解决该问题的两种软件架构,并对概念验证实现进行了实验评估,展示了基于查询预处理和有状态分布式流计算的方法如何满足支持大型连续生成数据的交互式查询的要求。
{"title":"Interactive querying and data visualization for abuse detection in social network sites","authors":"Leandro Ordoñez-Ante, Thomas Vanhove, Gregory van Seghbroeck, T. Wauters, F. Turck","doi":"10.1109/ICITST.2016.7856676","DOIUrl":"https://doi.org/10.1109/ICITST.2016.7856676","url":null,"abstract":"Big Data technologies have traditionally operated in an offline setting, collecting large batches of information on clusters of commodity machines and performing complex and time-consuming computations over it. While frameworks following this approach served well for most applications involving big data analysis during the last decade, other use cases have recently emerged posing challenging requirements on latency and demanding real-time data processing, querying and visualization. That is the case for applications aiming at detecting threatening behaviors in social network platforms, where timely action is required to avoid adverse consequences. In this sense, more and more attention has been drawn towards online data processing systems claiming to address the limitations of batch-oriented frameworks. This paper reports a work in progress on distributed data processing for enabling low-latency querying over big data sets. Two software architectures are discussed for addressing the problem and an experimental evaluation is performed on a proof of concept implementation showing how an approach based on query pre-processing and stateful distributed stream computation can meet the requirements for supporting interactive querying on large and continuously generated data.","PeriodicalId":258740,"journal":{"name":"2016 11th International Conference for Internet Technology and Secured Transactions (ICITST)","volume":"37 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123427069","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
A generic, personalized electronic program guide system for accessing multiple online TV providers 用于访问多个在线电视提供商的通用、个性化电子节目指南系统
Emad Al-Mohammed, N. Linge
Television viewing is changing with a growing trend towards online consumption of content and a proliferation of providers. This is now starting to bring into question the future of the traditional television channel as the program itself becomes more dominant. However, this, in turn, poses a problem for the viewer in that it will become increasingly difficult to locate those programs of interest across such a broad range of providers. While broadcasters and content providers currently offer an Electronic Program Guide (EPG) to allow viewers to browse through their offerings, these are limited in scope. This is warranting an EPG that can truly work across all online providers. This paper introduces a new architecture for EPGs that has been developed to meet this challenge. A key feature of this architecture is the way in which it can access content from multiple providers and be personalized depending on viewer's preferences and interests, viewing device, internet connection speed and their social network interactions. The results that have been included shows that the system is able to communicate with different content sources and recommend a list of programs that match the user viewing pattern and their friends' recommendations within the social networks.
随着内容在线消费的增长趋势和提供商的激增,电视观看正在发生变化。现在,随着节目本身变得越来越占主导地位,传统电视频道的未来开始受到质疑。然而,这反过来又给观众带来了一个问题,因为在如此广泛的供应商中找到感兴趣的节目将变得越来越困难。虽然广播公司和内容提供商目前提供电子节目指南(EPG),让观众浏览他们提供的节目,但范围有限。这保证了EPG能够真正跨所有在线提供商工作。本文介绍了为应对这一挑战而开发的一种新的epg架构。这种架构的一个关键特征是,它可以访问来自多个提供商的内容,并根据观看者的偏好和兴趣、观看设备、互联网连接速度和他们的社交网络互动进行个性化。所包含的结果表明,该系统能够与不同的内容来源进行通信,并在社交网络中推荐与用户观看模式和他们的朋友推荐相匹配的节目列表。
{"title":"A generic, personalized electronic program guide system for accessing multiple online TV providers","authors":"Emad Al-Mohammed, N. Linge","doi":"10.1109/ICITST.2016.7856715","DOIUrl":"https://doi.org/10.1109/ICITST.2016.7856715","url":null,"abstract":"Television viewing is changing with a growing trend towards online consumption of content and a proliferation of providers. This is now starting to bring into question the future of the traditional television channel as the program itself becomes more dominant. However, this, in turn, poses a problem for the viewer in that it will become increasingly difficult to locate those programs of interest across such a broad range of providers. While broadcasters and content providers currently offer an Electronic Program Guide (EPG) to allow viewers to browse through their offerings, these are limited in scope. This is warranting an EPG that can truly work across all online providers. This paper introduces a new architecture for EPGs that has been developed to meet this challenge. A key feature of this architecture is the way in which it can access content from multiple providers and be personalized depending on viewer's preferences and interests, viewing device, internet connection speed and their social network interactions. The results that have been included shows that the system is able to communicate with different content sources and recommend a list of programs that match the user viewing pattern and their friends' recommendations within the social networks.","PeriodicalId":258740,"journal":{"name":"2016 11th International Conference for Internet Technology and Secured Transactions (ICITST)","volume":"18 4 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125782083","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Applying different classification techniques in reciprocal job recommender system for considering job candidate preferences 在考虑求职者偏好的互惠工作推荐系统中应用不同的分类技术
Gozde Ozcan, Ş. Öğüdücü
In this paper, a reciprocal job recommendation system, CCRS (Classification - Candidate Reciprocal Recommendation), is proposed. With this proposed system, offering job advertisements in a sequence for candidates that they can get feedback reciprocally by using the user's profile, interaction and preference information is aimed all together. An approach has been used based on the preference information of the candidates to determine the jobs' order in the proposed list and the success of different classification methods has been compared to estimate the feedback rate of the advertisements for the target candidate. CCRS also addresses the cold start problem of new candidates joining the site by providing recommendations based on their profiles. The performance of the proposed method was evaluated by using various performance measurements on an actual data set received from an online recruiting website. Evaluation results show that the proposed method outperforms the compared methods for the top 10 ranked recommendations.
本文提出了一种互惠的职位推荐系统CCRS(分类-候选人互惠推荐)。在这个提议的系统中,按顺序为候选人提供招聘广告,他们可以通过使用用户的个人资料、互动和偏好信息来获得相互反馈。采用基于候选人偏好信息的方法来确定候选列表中职位的排序,并比较了不同分类方法的成功率来估计目标候选人广告的反馈率。CCRS还通过提供基于个人资料的推荐来解决新候选人加入网站的冷启动问题。通过使用从在线招聘网站收到的实际数据集的各种性能测量来评估所提出方法的性能。评价结果表明,对于排名前10位的推荐,所提方法优于所比较的方法。
{"title":"Applying different classification techniques in reciprocal job recommender system for considering job candidate preferences","authors":"Gozde Ozcan, Ş. Öğüdücü","doi":"10.1109/ICITST.2016.7856703","DOIUrl":"https://doi.org/10.1109/ICITST.2016.7856703","url":null,"abstract":"In this paper, a reciprocal job recommendation system, CCRS (Classification - Candidate Reciprocal Recommendation), is proposed. With this proposed system, offering job advertisements in a sequence for candidates that they can get feedback reciprocally by using the user's profile, interaction and preference information is aimed all together. An approach has been used based on the preference information of the candidates to determine the jobs' order in the proposed list and the success of different classification methods has been compared to estimate the feedback rate of the advertisements for the target candidate. CCRS also addresses the cold start problem of new candidates joining the site by providing recommendations based on their profiles. The performance of the proposed method was evaluated by using various performance measurements on an actual data set received from an online recruiting website. Evaluation results show that the proposed method outperforms the compared methods for the top 10 ranked recommendations.","PeriodicalId":258740,"journal":{"name":"2016 11th International Conference for Internet Technology and Secured Transactions (ICITST)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127692206","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 6
An approach for detecting encrypted insider attacks on OpenFlow SDN Networks 一种检测OpenFlow SDN网络加密内部攻击的方法
C. V. Neu, A. Zorzo, Alex M. S. Orozco, Regio A. Michelin
Data traffic on the Internet is growing continuously due to the high number of connected devices and increased number of applications and transactions performed online. To ensure information security, integrity and confidentiality, cryptography is applied over transmitted or stored data. Hence, even if an attacker capture data packets, its reading is hampered or not even possible. However, an attacker can also use cryptography to mask an attack in order to avoid detection, for example, by an Intrusion Detection System (IDS). Recent studies in network technologies introduced a new paradigm called Software Defined Networking (SDN). By decoupling data and control plans, the SDN architecture allows centralizing the network management, intelligence and control into a single point, called Controller. The OpenFlow protocol, widely adopted in SDN, provides specific messages to get statistical information of an OpenFlow switch. A Controller can request this information, which enables the development of new IDS models to detect encrypted attacks. In this work, we intend to identify encrypted insider attacks in SDN by developing a new IDS approach that can detect encrypted attacks.
由于连接设备的数量和在线执行的应用程序和事务数量的增加,Internet上的数据流量正在不断增长。为了确保信息的安全性、完整性和保密性,对传输或存储的数据采用加密技术。因此,即使攻击者捕获了数据包,它的读取也受到阻碍,甚至不可能。然而,攻击者也可以使用加密技术来掩盖攻击,以避免被入侵检测系统(IDS)检测到。最近的网络技术研究引入了一种称为软件定义网络(SDN)的新范式。通过解耦数据和控制计划,SDN架构允许将网络管理、智能和控制集中到一个称为控制器的单点。OpenFlow协议在SDN中被广泛采用,它提供了特定的消息来获取OpenFlow交换机的统计信息。控制器可以请求此信息,从而可以开发新的IDS模型来检测加密攻击。在这项工作中,我们打算通过开发一种可以检测加密攻击的新的IDS方法来识别SDN中的加密内部攻击。
{"title":"An approach for detecting encrypted insider attacks on OpenFlow SDN Networks","authors":"C. V. Neu, A. Zorzo, Alex M. S. Orozco, Regio A. Michelin","doi":"10.1109/ICITST.2016.7856698","DOIUrl":"https://doi.org/10.1109/ICITST.2016.7856698","url":null,"abstract":"Data traffic on the Internet is growing continuously due to the high number of connected devices and increased number of applications and transactions performed online. To ensure information security, integrity and confidentiality, cryptography is applied over transmitted or stored data. Hence, even if an attacker capture data packets, its reading is hampered or not even possible. However, an attacker can also use cryptography to mask an attack in order to avoid detection, for example, by an Intrusion Detection System (IDS). Recent studies in network technologies introduced a new paradigm called Software Defined Networking (SDN). By decoupling data and control plans, the SDN architecture allows centralizing the network management, intelligence and control into a single point, called Controller. The OpenFlow protocol, widely adopted in SDN, provides specific messages to get statistical information of an OpenFlow switch. A Controller can request this information, which enables the development of new IDS models to detect encrypted attacks. In this work, we intend to identify encrypted insider attacks in SDN by developing a new IDS approach that can detect encrypted attacks.","PeriodicalId":258740,"journal":{"name":"2016 11th International Conference for Internet Technology and Secured Transactions (ICITST)","volume":"18 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131454504","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 11
Smartphone as a biometric service for web authentication 智能手机作为网络认证的生物识别服务
Regio A. Michelin, A. Zorzo, M. B. Campos, C. V. Neu, Alex M. S. Orozco
Authentication is a crucial solution to be considered for securing an application or user's personal data. It is a mechanism that plays a role to allow only the rightful user to access an application and the corresponding data, without allowing any kind of impersonation. To avoid this impersonation, biometric mechanisms have been used to read some biological characteristic from the user. However, the extra hardware needed for reading the biometric feature is usually a problem. Besides, in some scenarios, this will definitely avoid its adoption. Nonetheless, nowadays, this problem may be reduced since almost every adult person possesses a smartphone, which contains several sensors that can be used to read biometric information from a user. This work proposes a mechanism to allow a smartphone to act as a biometric reader for different levels of task/data available in a web application. In order to bind a smartphone to a web application, we use QR-Code sent from a web server to a web client, which will have to be read by a smartphone and then be sent back to the web server, so the web server knows that the actual user is close to the web client. This paper also provides a discussion on how to evaluate the usability of the proposed mechanism.
身份验证是保护应用程序或用户个人数据的关键解决方案。它是一种机制,其作用是只允许合法的用户访问应用程序和相应的数据,而不允许任何类型的模拟。为了避免这种模仿,生物识别机制被用来读取用户的一些生物特征。然而,读取生物特征所需的额外硬件通常是个问题。此外,在某些情况下,这肯定会避免它的采用。尽管如此,如今,这个问题可能会减少,因为几乎每个成年人都拥有一部智能手机,其中包含几个传感器,可以用来读取用户的生物特征信息。这项工作提出了一种机制,允许智能手机作为生物识别阅读器,用于web应用程序中不同级别的任务/数据。为了将智能手机绑定到web应用程序,我们使用从web服务器发送到web客户端的qr码,这些qr码必须由智能手机读取,然后发送回web服务器,这样web服务器就知道实际用户离web客户端很近。本文还讨论了如何评估所提议机制的可用性。
{"title":"Smartphone as a biometric service for web authentication","authors":"Regio A. Michelin, A. Zorzo, M. B. Campos, C. V. Neu, Alex M. S. Orozco","doi":"10.1109/ICITST.2016.7856740","DOIUrl":"https://doi.org/10.1109/ICITST.2016.7856740","url":null,"abstract":"Authentication is a crucial solution to be considered for securing an application or user's personal data. It is a mechanism that plays a role to allow only the rightful user to access an application and the corresponding data, without allowing any kind of impersonation. To avoid this impersonation, biometric mechanisms have been used to read some biological characteristic from the user. However, the extra hardware needed for reading the biometric feature is usually a problem. Besides, in some scenarios, this will definitely avoid its adoption. Nonetheless, nowadays, this problem may be reduced since almost every adult person possesses a smartphone, which contains several sensors that can be used to read biometric information from a user. This work proposes a mechanism to allow a smartphone to act as a biometric reader for different levels of task/data available in a web application. In order to bind a smartphone to a web application, we use QR-Code sent from a web server to a web client, which will have to be read by a smartphone and then be sent back to the web server, so the web server knows that the actual user is close to the web client. This paper also provides a discussion on how to evaluate the usability of the proposed mechanism.","PeriodicalId":258740,"journal":{"name":"2016 11th International Conference for Internet Technology and Secured Transactions (ICITST)","volume":"14 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131910698","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 6
Using the Panama Papers to explore the financial networks of the Middle East
Abdullateef Rabab'ah, M. Al-Ayyoub, M. Shehab, Y. Jararweh, B. Jansen
In what has been described as the WikiLeaks of the financial world, the release of millions of documents (known as the “Panama Papers”) have placed at the center of global media attention the elaborate ways used by some of the elite to hide their financial assets leading to serious allegation of financial corruption. In this work, we explore the information contained in these documents using social network analytics. Due to the large size of the network constructed from the Panama Papers, we limit our attention to a specific region, which is the Middle East. The analysis reveals that while the constructed network enjoys some typical characteristics, there are many interesting observations and properties worth discussing. Specifically, using the extracted network consisting of 37,442 nodes and 79,544 edges, our social network analysis finding show that, perhaps surprisingly, the nodes or the social network are not necessarily directly correlation with perceived financial influence.
在这项工作中,我们使用社交网络分析来探索这些文档中包含的信息。分析表明,所构建的网络虽然具有一些典型的特征,但也有许多有趣的观察结果和性质值得讨论。具体来说,使用提取的由37,442个节点和79,544条边组成的网络,我们的社会网络分析结果表明,也许令人惊讶的是,节点或社会网络不一定与感知到的金融影响力直接相关。
{"title":"Using the Panama Papers to explore the financial networks of the Middle East","authors":"Abdullateef Rabab'ah, M. Al-Ayyoub, M. Shehab, Y. Jararweh, B. Jansen","doi":"10.1109/ICITST.2016.7856674","DOIUrl":"https://doi.org/10.1109/ICITST.2016.7856674","url":null,"abstract":"In what has been described as the WikiLeaks of the financial world, the release of millions of documents (known as the “Panama Papers”) have placed at the center of global media attention the elaborate ways used by some of the elite to hide their financial assets leading to serious allegation of financial corruption. In this work, we explore the information contained in these documents using social network analytics. Due to the large size of the network constructed from the Panama Papers, we limit our attention to a specific region, which is the Middle East. The analysis reveals that while the constructed network enjoys some typical characteristics, there are many interesting observations and properties worth discussing. Specifically, using the extracted network consisting of 37,442 nodes and 79,544 edges, our social network analysis finding show that, perhaps surprisingly, the nodes or the social network are not necessarily directly correlation with perceived financial influence.","PeriodicalId":258740,"journal":{"name":"2016 11th International Conference for Internet Technology and Secured Transactions (ICITST)","volume":"60 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133014874","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 13
期刊
2016 11th International Conference for Internet Technology and Secured Transactions (ICITST)
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1