检索结果-内蒙古大学图书馆

International Conference on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom)

作者： Ravi Sandhu Khalid Zaman Bijon Xin Jin Ram Krishnan Institute for Cyber Security & Department of Computer Science University of Texas San Antonio USA Institute for Cyber Security & Department of Electrical and Computer Engineering University of Texas San Antonio USA

We develop a series of formal administrative models for recently proposed informal requirements for community cyber security information sharing [9]. Traditional enterprise-oriented administrative models are not suitable for the highly dynamic and distributed nature of this multi-organization application domain. Hence, new administrative models with robust intuitive grounding and rigorous mathematical foundations are required. We show that the role-based trust management (RT) framework [5], [7] is suitable in large measure to address the informal scenarios of [9], with one essential extension to enable self-assignment of users to selected roles. Applications of extended forms of RT, as well as its limitations, are also considered.

关键词： Surface acoustic waves Welding computer crime

来源：评论

学校读者我要写书评

暂无评论

Building malware infection trees

Building malware infection trees

引用

6th International Conference on Malicious and Unwanted Software, Malware 2011

作者： Morales, Jose Andre Main, Michael Luo, Weiliang Xu, Shouhuai Sandhu, Ravi Software Engineering Institute Carnegie Mellon University United States Institute for Cyber Security University of Texas San Antonio TX United States Department of Computer Science University of Texas San Antonio TX United States

ISBN: (纸本)9781467300339

Dynamic analysis of malware is an ever evolving and challenging task. A malware infection tree (MiT) can assist in analysis by identifying processes and files related to a specific malware sample. In this paper we propose an abstract approach to building a comprehensive MiT based on rules describing execution events essential to malware infection strategies of files and processes. The MiT is built using strong and weak bonds between processes and files which are based on transitivity of information and creator/created relationships. The abstract approach facilitates usage on any operating system platform. We implement the rules on the Windows Vista operating system using a custom built tool named MiTCoN which was used in a small scale analysis and infection tree creation of a diverse set of 5800 known malware samples. Results analysis revealed a significant occurrent of our rules within a very short span of time. We demonstrate our rule set can effectively and efficiently build infection trees linking all related processes and files of a specific malware sample with no false positives. We also tested the possible usability of a MiT in disinfecting a system which yielded a 100% success rate. © 2011 IEEE.

关键词： Malware

来源：评论

学校读者我要写书评

暂无评论

Towards secure information sharing models for community cyber security

Towards secure information sharing models for community cybe...

引用

作者： Sandhu, Ravi Krishnan, Ram White, Gregory B. Dept. of Computer Science Institute for Cyber Security University of Texas San Antonio TX United States Dept. of Electrical and Computer Engineering Institute for Cyber Security University of Texas San Antonio TX United States

ISBN: (纸本)9780984589326

In this paper, we motivate the need for new models for Secure Information Sharing (SIS) in the specific domain of community cyber security. We believe that similar models will be applicable in numerous other domains. The term community in this context refers to a county or larger city size unit with a clearly demarcated geographical boundary aligned more or less with a governance boundary. Our choice of the community domain is based on the decade long experience of the Center for Infrastructure Assurance and security (CIAS), now part of the Institute for cyber security (ICS-CIAS) at the University of Texas at San Antonio. Over the past decade ICS-CIAS has conducted cyber security preparedness exercises and training at communities throughout the nation specifically dealing with communication, incident response, disaster recovery, business continuity, security awareness and similar issues. We discuss the insights gained from these frequent exercises to illustrate the limitations of prior models for SIS, such as discretionary access control, mandatory access control and role-based access control. Specifically, we argue that these traditional models, while effective in addressing the issues that they were developed for, lack the agility to dynamically configure a system to facilitate SIS scenarios such as monitoring and response during a community cyber security incident life cycle. We discuss how our current research efforts at the Institute for cyber security on group-centric SIS models directly address the limitations of existing models in such scenarios. © 2010 ICST.

关键词： Access control

来源：评论

学校读者我要写书评

暂无评论

Towards safe and productive development of secure software: FADES and model-based software engineering 10

Towards safe and productive development of secure software: ...

引用

Proceedings of the Sixth Annual Workshop on cyber security and Information Intelligence Research

作者： Hassan, Riham Bohner, Shawn Eltoweissy, Mohamed Computer Science Arab Academy for Science and Technology Egypt Computer Science and Software Engineering Rose Hulman Institute of Technology Egypt Cyber Systems Security Pacific Northwest National Laboratory United States

ISBN: (纸本)9781450300179

Cost effective development of secure software is a key goal for many software organizations as they seek to manage the risks of misbehaving software. Employing Formal Methods (FMs) in the Model-Based Software engineering (MBSE) paradigm that systematically produces software systems through modeling, simulation, reuse and automation provides a reasonable approach for developing highly secure software in a productive manner. MBSE approaches introduce some complexities at the beginning of the lifecycle, but save substantial time in production and delivery by identifying and resolving defects/errors early and reducing rework. On the other hand, the expertise needed for FMs and the concomitant costs often inhibit their wide employment in securing large and complex software systems. In this paper, we report our experience with Formal Analysis and Design for engineering security (FADES) an approach we introduced two years ago at this venue. Through systematic and automated transformation from semiformal requirements specifications to formal design, FADES facilitates embedding FMs into the development lifecycle of secure software systems. We outline the case studies and validation of FADES feasibility for the design and implementation of secure software systems. Promising experience with FADES was a necessary precursor to our work on generalizing FADES and our proposal to direct FADES toward being an MBSE approach. We discuss how the formality, transformation, reuse and automation in FADES may further enhance the MBSE-based production and delivery of secure software. © 2010 ACM.

关键词： Formal methods

来源：评论

学校读者我要写书评

暂无评论

Towards Secure Information Sharing models for community cyber security

Towards Secure Information Sharing models for community Cybe...

引用

International Conference on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom)

作者： Ravi Sandhu Ram Krishnan Gregory B. White Department of Computer Science Institute for Cyber Security University of Texas San Antonio USA Department of Electrical and Computer Engineering Institute for Cyber Security University of Texas San Antonio USA

关键词： Communities computer security Computational modeling Mathematical model Authorization

来源：评论

学校读者我要写书评

暂无评论

The theft of business innovation: An ACM-BCS roundtable on threats to global competitiveness

引用

Queue 2010年第11期8卷 1-10页

作者： Creeger, Mache Bennett, Louise Bianco, David J. Borg, Scott Clark, Andy Epstein, Jeremy Norton, Jim Bourne, Steve Emergent Technology Associates United States BCS Security Strategic Panel United States United States U.S. Cyber Consequences Unit United States Fellow of the Institution of Engineering and Technology United Kingdom Computer Science Laboratory SRI International United States Department of Electronic Engineering Sheffield University United Kingdom El Dorado Ventures United States

关键词： Competition

来源：评论

学校读者我要写书评

暂无评论

Can people collaborate to improve the relevance of search results?

Can people collaborate to improve the relevance of search re...

引用

2008 2nd ACM International Conference on Recommender Systems, RecSys'08

作者： Agrahri, Arun Kumar Divya Anand, T.M. Riedl, John Institute of Technology University of Minnesota Twin Cities Computer Science United States Amrita School of Engineering Amrita Vishwa Vidyapeetham Cyber Security India

ISBN: (纸本)9781605580937

Search engines are among the most-used resources on the internet. However, even today's most successful search engines struggle to provide high quality search results. According to recent studies as many as 50 percent of web search sessions fail to find any relevant results for the searcher. Researchers have proposed social search techniques, in which early searchers provide feedback that is used to improve relevance for later searchers. In this paper we investigate foundational questions of social search. In particular, we directly assess the degree of agreement among users about the relevance ranking of search results. We developed a simulated search engine interface that systematically randomizes Google's normal relevance ordering of the items presented to users. Our results show that (a) people are biased toward items in the top of the search lists, even if the list is randomized;(b) people explicit feedback is not biased and (c) people's shared preferences do not always agree with Google's result order. These results suggest that social search techniques might improve the effectiveness of web search engines. © 2008 ACM.

关键词： Search engines

来源：评论

学校读者我要写书评

暂无评论

QoS Aware Dependable Distributed Stream Processing

QoS Aware Dependable Distributed Stream Processing

引用

International Symposium on Object-Oriented Real-Time Distributed Computing

作者： Vana Kalogeraki Dimitrios Gunopulos Ravi Sandhu Bhavani Thuraisingham Department of Computer Science & Engineering University of California Riverside USA Institute for Cyber Security University of Technology San Antonio USA Department of Computer Science University of Technology Dallas USA

ISBN: (纸本)9780769531328

In this paper we describe our approach for developing a QoS-aware, dependable execution environment for large-scale distributed stream processing applications. Distributed stream processing applications have strong timeliness and security demands. In particular, we address the following challenges: (1) propose a real-time dependable execution model by extending the component-based execution model with real-time and dependability properties, and (2) develop QoS-aware application composition and adaptation techniques that employ resource management strategies and security policies when discovering and selecting application components. Our approach enables us to develop a distributed stream processing environment that is predictable, secure, flexible and adaptable.

关键词： Distributed computing Application software Streaming media Large-scale systems Quality of service computer networks computer science Object oriented modeling Resource management Data security

来源：评论

学校读者我要写书评

暂无评论

Efficient linear array for multiplication over NIST recommended binary fields

Efficient linear array for multiplication over NIST recommen...

引用

6th International Workshop - Fuzzy Logic and Applications

作者： Kwon, Soonhak Kwon, Taekyoung Park, Young-Ho Inst. of Basic Science Dept. of Mathematics Sungkyunkwan University Suwon 440-746 Korea Republic of School of Computer Engineering Sejong University Seoul 143-747 Korea Republic of Dept. of Information Security Sejong Cyber University Seoul 143-747 Korea Republic of

ISBN: (纸本)3540325298

We propose a new linear array for multiplication in GF(2m) which outperforms most of the existing linear multipliers in terms of the area and time complexity. Moreover we will give a very detailed comparison of our array with other existing architectures for the five binary fields GF(2m), m = 163, 233, 283, 409, 571, recommended by NIST for elliptic curve cryptography. © Springer-Verlag Berlin Heidelberg 2006.

关键词： Artificial intelligence

来源：评论

学校读者我要写书评

暂无评论

Localized public-key management for mobile ad hoc networks

Localized public-key management for mobile ad hoc networks

引用

IEEE Conference and Exhibition on Global Telecommunications (GLOBECOM)

作者： Ruidong Li Jie Li H. Kameda Peng Liu University of Tsukuba Tsukuba Japan Department of Computer Science Graduate School of Systems and Information Engineering University of Tsukuba Tsukuba Japan Cyber Security Lab School of Information Sciences and Technology Pennsylvania State University University Park USA

A mobile ad hoc network (MANET) is the cooperative engagement of a collection of wireless mobile nodes without aid of any established infrastructure or centralized administration. The conventional security solutions to provide key management through accessing trusted authorities or centralized servers are infeasible for this new environment since mobile ad hoc networks are characterized by the absence of any infrastructure, frequent mobility, and wireless links. In this paper, we propose an on-demand, fully localized, and hop-by-hop public key management scheme for MANETs. It can be performed by generating public/private key pairs by nodes themselves, issuing certificates to neighboring nodes, holding these certificates in their certificate repositories, and providing an authentication service quickly adaptive to the dynamic topology of the network without relying on any servers. Also, our scheme can be performed successfully as long as there is a physical communication line between two nodes, and it is accustomed well to the on-demand routing of MANETs.

关键词： Public key Mobile ad hoc networks Network servers Cities and towns Communication system security Authentication computer network management computer science Systems engineering and theory computer security

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：