检索结果-内蒙古大学图书馆

International Journal of Digital Content Technology and its Applications 2012年第4期6卷 123-132页

作者： Zhong, Jinxin Fan, Wenqing An, Jing Zhang, Miao Yang, Yixian Information Security Center Beijing University of Posts and Telecommunications Beijing China

Nowadays, vulnerability exploiting has become a major means of malicious code communication. In order to solve the problem that polymorphic and metamorphic vulnerability exploit variants is difficult to detect, it presents a method of detecting vulnerability exploits based on binary behavior analysis in this paper. The method track and monitor the memory and register changes the binary file's behavior results, and have a formal verification on application's behavior through intermediate-level language. In this paper, we examine the performance of binary analysis by taking two sets of experiments for separate targets, one is 13 local file vulnerabilities, the other is web browser vulnerabilities. The results show that the exploits detection method based on binary behavior analysis can be effectively used for analysis and detection of the vulnerabilities, also with significantly reduced time and space complexity.

关键词： Binary program behavior Formal analysis Intermediate language vulnerability exploits

来源：评论

学校读者我要写书评

暂无评论

Toward a Truly Secure Telecom Network: Analyzing and Exploiting Vulnerable Security Configurations/ Implementations in Commercial LTE/IMS Networks

引用

IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING 2024年第4期21卷 3048-3064页

作者： Yu, Chuan Chen, Shuhui Wei, Ziling Wang, Fei Natl Univ Def Technol Sch Comp Changsha 410073 Hunan Peoples R China

Authentication and data protection (both integrity and confidentiality) between the network and cellular devices are two fundamental security features in 4G/Long Term Evolution (LTE) and IP Multimedia Subsystem (IMS) networks. The first is implemented via authentication and key agreement mechanisms and can be compromised by relaying authentication parameters. The second security feature builds on the first one and is activated through corresponding security setup procedures. This work intends to investigate whether these basic security procedures are securely implemented and deployed in commercial networks. We analyzed the de facto situation of these security features in three major operators in China and found several new and previously disclosed configuration and implementation flaws that do not conform to specifications. These vulnerabilities allow attackers to disable LTE and IMS data protection mechanisms. We further propose novel proof-of-concept attacks to exploit the identified vulnerabilities including IMEI and Phone Number Catching, SMS and Call Impersonation and Interception attacks. To show the urgency of addressing these security issues and thus secure the real-world telecom networks, we successfully demonstrated these attacks in practice using open-source SDR tools as they have serious implications. For instance, the interception attacks undermine the widely-used SMS verification code security mechanism. We also discuss countermeasures to resist the proposed attacks.

关键词： Security Long Term Evolution Data protection Authentication Standards Servers Protocols Attacks defense LTE and IMS networks security vulnerability exploits

来源：评论

学校读者我要写书评

暂无评论

Exploit Prediction Scoring System (EPSS)

引用

DIGITAL THREATS: RESEARCH AND PRACTICE 2021年第3期2卷 1–17页

作者： Jacobs, Jay Romanosky, Sasha Edwards, Benjamin Adjerid, Idris Roytman, Michael Cyentia Inst Leesburg VA 20175 USA RAND Santa Monica CA USA Virginia Tech Blacksburg VA USA Kenna Secur Santa Clara CA USA

Despite the large investments in information security technologies and research over the past decades, the information security industry is still immature when it comes to vulnerability management. In particular, the prioritization of remediation efforts within vulnerability management programs predominantly relies on a mixture of subjective expert opinion and severity scores. Compounding the need for prioritization is the increase in the number of vulnerabilities the average enterprise has to remediate. This article describes the first open, data-driven framework for assessing vulnerability threat, that is, the probability that a vulnerability will be exploited in the wild within the first 12 months after public disclosure. This scoring system has been designed to be simple enough to be implemented by practitioners without specialized tools or software yet provides accurate estimates (ROC AUC = 0.838) of exploitation. Moreover, the implementation is flexible enough that it can be updated as more, and better, data becomes available. We call this system the Exploit Prediction Scoring System (EPSS).

关键词： vulnerability management vulnerability exploits machine learning EPSS

来源：评论

学校读者我要写书评

暂无评论

Benchmarking of SoC-level Hardware Vulnerabilities: A Complete Walkthrough 26

Benchmarking of SoC-level Hardware Vulnerabilities: A Comple...

引用

26th IEEE-Computer-Society Annual Symposium on VLSI (ISVLSI)

作者： Tarek, Shams Al Shaikh, Hasan Rajendran, Sree Ranjani Farahmandi, Farimah Univ Florida Gainesville FL 32611 USA

ISBN: (纸本)9798350327694

Due to the increasing complexity of modern system-on-chips (SoCs) and the diversity of the attack surface, popular SoC verification approaches used in industry and academia for detecting security-critical vulnerabilities confront several challenges. Although novel SoC security verification techniques are being proposed to overcome these challenges, qualitative and quantitative critical comparisons among them are becoming increasingly difficult due to the lack of suitable, well-validated SoC-level hardware vulnerability benchmarks that can be used to evaluate the efficacy of these security verification techniques/tools on a level playing field. In this paper, we offer a comprehensive database of SoC vulnerabilities, with a particular emphasis on emerging hardware threats that may be exploited from the software layer by attackers to violate the security requirements of the system. In this regard, 32 register transfer level (RTL) hardware vulnerability benchmarks based on three distinct RISCV-based ISA implementations have been established and made open-source to stimulate standardized research efforts in the community. In addition, we provide a comprehensive taxonomy of the benchmarks, complete with security implications and classifications. We also offer a discussion on exploitation strategies that attackers may employ, a set of security properties associated with each vulnerability in order to detect them formally, and the difficulties encountered by typical security verification methods when attempting to detect them.

关键词： SoC Security Verification Benchmarks vulnerability Database Taxonomy vulnerability exploits

来源：评论

学校读者我要写书评

暂无评论

Design and Implementation of Industrial Control Cyber Range System 12

Design and Implementation of Industrial Control Cyber Range ...

引用

12th International Conference on Cyber-Enabled Distributed Computing and Knowledge Discovery (CyberC)

作者： Low, Xuan Yang, DeQuan Yang, DengPan Beijing Inst Technol Beijing Peoples R China Sch Comp Sci & Technol Beijing Peoples R China

ISBN: (纸本)9798350331547

In the 21st century, world-leading industries are under the accelerated development of digital transformation. Along with information and data resources becoming more transparent on the Internet, many new network technologies were introduced, but cyber- attack also became a severe problem in cyberspace. Over time, industrial control networks are also forced to join the nodes of the Internet. Therefore, cybersecurity is much more complicated than before, and suffering risk of browsing unknown websites also increases. To practice defenses against cyber-attack effectively, Cyber Range is the best platform to emulate all cyber-attacks and defenses. This article will use VMware virtual machine emulation technology, research cyber range systems under industrial control network architecture, and design and implement an industrial control cyber range system. Using the industrial cyber range to perform vulnerability analyses and exploits on web servers, web applications, and operating systems. The result demonstrates the consequences of the vulnerability attack and raises awareness of cyber security among government, enterprises, education, and other related fields, improving the practical ability to defend against cybersecurity threats.

关键词： Cyber Security CyberAttack Cyber Range Industrial Control Cyber Range vulnerability exploits

来源：评论

学校读者我要写书评

暂无评论

The Attack of the Clones: A Study of the Impact of Shared Code on vulnerability Patching 36

The Attack of the Clones: A Study of the Impact of Shared Co...

引用

IEEE Symposium on Security and Privacy SP

作者： Nappa, Antonio Johnson, Richard Bilge, Leyla Caballero, Juan Dumitras, Tudor IMDEA Software Inst Madrid Spain Univ Maryland College Pk MD 20742 USA Symantec Res Labs Mountain View CA USA Univ Politecn Madrid E-28040 Madrid Spain

ISBN: (纸本)9781467369497

vulnerability exploits remain an important mechanism for malware delivery, despite efforts to speed up the creation of patches and improvements in software updating mechanisms. Vulnerabilities in client applications (e.g., browsers, multimedia players, document readers and editors) are often exploited in spear phishing attacks and are difficult to characterize using network vulnerability scanners. Analyzing their lifecycle requires observing the deployment of patches on hosts around the world. Using data collected over 5 years on 8.4 million hosts, available through Symantec's WINE platform, we present the first systematic study of patch deployment in client-side vulnerabilities. We analyze the patch deployment process of 1,593 vulnerabilities from 10 popular client applications, and we identify several new threats presented by multiple installations of the same program and by shared libraries distributed with several applications. For the 80 vulnerabilities in our dataset that affect code shared by two applications, the time between patch releases in the different applications is up to 118 days (with a median of 11 days). Furthermore, as the patching rates differ considerably among applications, many hosts patch the vulnerability in one application but not in the other one. We demonstrate two novel attacks that enable exploitation by invoking old versions of applications that are used infrequently, but remain installed. We also find that the median fraction of vulnerable hosts patched when exploits are released is at most 14%. Finally, we show that the patching rate is affected by user-specific and application specific factors;for example, hosts belonging to security analysts and applications with an automated updating mechanism have significantly lower median times to patch.

关键词： client applications patch deployment shared code software vulnerabilities vulnerability exploits

来源：评论

学校读者我要写书评

暂无评论

Advanced Penetration Testing 1

引用

2017年

作者： Wil Allsopp

ISBN: (数字)9781119367710

ISBN: (纸本)9781119367680

Build a better defense against motivated, organized, professional attacks Advanced Penetration Testing: Hacking the World's Most Secure Networks takes hacking far beyond Kali linux and Metasploit to provide a more complex attack simulation. Featuring techniques not taught in any certification prep or covered by common defensive scanners, this book integrates social engineering, programming, and vulnerability exploits into a multidisciplinary approach for targeting and compromising high security environments. From discovering and creating attack vectors, and moving unseen through a target enterprise, to establishing command and exfiltrating data--even from organizations without a direct Internet connection--this guide contains the crucial techniques that provide a more accurate picture of your system's defense. Custom coding examples use VBA, Windows Scripting Host, C, Java, JavaScript, Flash, and more, with coverage of standard library applications and the use of scanning tools to bypass common defensive measures. Typical penetration testing consists of low-level hackers attacking a system with a list of known vulnerabilities, and defenders preventing those hacks using an equally well-known list of defensive scans. The professional hackers and nation states on the forefront of today's threats operate at a much more complex level--and this book shows you how to defend your high security network. Use targeted social engineering pretexts to create the initial compromise Leave a command and control structure in place for long-term access Escalate privilege and breach networks, operating systems, and trust structures Infiltrate further using harvested credentials while expanding control Today's threats are organized, professionally-run, and very much for-profit. Financial institutions, health care organizations, law enforcement, government agencies, and other high-value targets need to harden their IT infrastructure and human capital against targeted advanced attacks fro

关键词： penetration testing advanced penetration testing IT security data security infrastructure security IT security testing IT defense hacking black hat hacking complex penetration techniques social engineering hacking modern hacking techniques advanced hacking techniques multidisciplinary penetration testing IT security audit vulnerability exploits new attack methods real-world hacking cutting edge data breach methods data defense hacking tools penetration testing code bypassing defensive scans Advanced Persistent Threats: Hacking the World's Most Secure Networks Wil Allsopp

来源：评论

学校读者我要写书评

暂无评论

APT Attack Detection Based on Graph Convolutional Neural Networks

引用

INTERNATIONAL JOURNAL OF COMPUTATIONAL INTELLIGENCE SYSTEMS 2023年第1期16卷 184-184页

作者： Ren, Weiwu Song, Xintong Hong, Yu Lei, Ying Yao, Jinyu Du, Yazhou Li, Wenjuan Changchun Univ Sci & Technol Sch Comp Sci & Technol Changchun 130000 Jilin Peoples R China Natl Comp Network Emergency Response Ctr Jilin Branch Changchun 130000 Jilin Peoples R China

Advanced persistent threat (APT) attacks are malicious and targeted forms of cyberattacks that pose significant challenges to the information security of governments and enterprises. Traditional detection methods struggle to extract long-term relationships within these attacks effectively. This paper proposes an APT attack detection model based on graph convolutional neural networks (GCNs) to address this issue. The aim is to detect known attacks based on vulnerabilities and attack contexts. We extract organization-vulnerability relationships from publicly available APT threat intelligence, along with the names and relationships of software security entities from CVE, CWE, and CAPEC, to generate triple data and construct a knowledge graph of APT attack behaviors. This knowledge graph is transformed into a homogeneous graph, and GCNs are employed to process graph features, enabling effective APT attack detection. We evaluate the proposed method on the dataset constructed in this paper. The results show that the detection accuracy of the GCN method reaches 95.9%, improving by approximately 2.1% compared to the GraphSage method. This approach proves to be effective in real-world APT attack detection scenarios.

关键词： APT attack detection Graph convolutional neural networks Knowledge graph vulnerability exploits

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：