检索结果-内蒙古大学图书馆

20th USENIX security Symposium

作者： Enck, William Octeau, Damien McDaniel, Patrick Chaudhuri, Swarat Systems and Internet Infrastructure Security Laboratory Department of Computer Science and Engineering Pennsylvania State University United States

ISBN: (纸本)9781931971874

The fluidity of application markets complicate smartphone security. Although recent efforts have shed light on particular security issues, there remains little insight into broader security characteristics of smartphone applications. This paper seeks to better understand smartphone application security by studying 1,100 popular free Android applications. We introduce the ded decompiler, which recovers Android application source code directly from its installation image. We design and execute a horizontal study of smartphone applications based on static analysis of 21 million lines of recovered code. Our analysis uncovered pervasive use/misuse of personal/ phone identifiers, and deep penetration of advertising and analytics networks. However, we did not find evidence of malware or exploitable vulnerabilities in the studied applications. We conclude by considering the implications of these preliminary findings and offer directions for future analysis. © 2011 by The USENIX Association.

关键词： Static analysis

来源：评论

学校读者我要写书评

暂无评论

Provably Secure Role-Based Encryption with Revocation Mechanism

引用

Journal of computer Science & Technology 2011年第4期26卷 697-710页

作者：朱岩胡宏新 Gail-Joon Ahn 王怀习王善标 Institute of Computer Science and Technology Peking University Beijing Key Laboratory of Internet Security Technology Peking University School of Computing Informatics and Decision Systems EngineeringArizona State University School of Mathematical Sciences Peking University

Role-Based Encryption （RBE） realizes access control mechanisms over encrypted data according to the widely adopted hierarchical RBAC model. In this paper, we present a practical RBE scheme with revocation mechanism based on partial-order key hierarchy with respect to the public key infrastructure, in which each user is assigned with a unique private-key to support user identification, and each role corresponds to a public group-key that is used to encrypt data. Based on this key hierarchy structure, our RBE scheme allows a sender to directly specify a role for encrypting data, which can be decrypted by all senior roles, as well as to revoke any subgroup of users and roles. We give a full proof of security of our scheme against hierarchical collusion attacks. In contrast to the existing solutions for encrypted file systems, our scheme not only supports dynamic joining and revoking users, but also has shorter ciphertexts and constant-size decryption keys.

关键词： cryptography role-based encryption role hierarchy key hierarchy collusion security revocation

来源：评论

学校读者我要写书评

暂无评论

An Efficient Key Management for Secure Multicast in Sensor-Cloud

An Efficient Key Management for Secure Multicast in Sensor-C...

引用

ACIS/JNU International Conference on computers, Networks, Systems and Industrial engineering (CNSI)

作者： Tien-Dung Nguyen Eui-Nam Huh Department of Computer Engineering Internet Computing and Security Laboratory Suwon South Korea

Nowadays, in Publish/Subscribe system, the number of subscriptions from customers can be large, the events happening in such a system are more frequent and the notification load is heavy. Combining with cloud computing that is becoming increasingly popular for scalability and availability it promises, called Sensor-Cloud, there are many approaches that improve data delivery issues in such scenario efficiently. However, there are few approaches that consider secure data delivery while security plays an important role in Sensor-Cloud. In this paper, we propose an efficient secure multicast approach by combining Group-key and Time-key (CoGKTK) to minimize number of updated key for such dynamic scenario in Sensor-Cloud. We analytically show the performance and scalability benefits of our approach over data delivery infrastructure in Sensor-Cloud.

关键词： Subscriptions Servers Cryptography Protocols Wireless sensor networks computer architecture

来源：评论

学校读者我要写书评

暂无评论

Efficient data transmission scheme for ubiquitous healthcare using wireless body area networks

Efficient data transmission scheme for ubiquitous healthcare...

引用

2nd International Conference on Software engineering and computer Systems, ICSECS 2011

作者： Kateretse, Cecile Huh, Eui-Nam Internet Computing and Security Lab. Department of Computer Engineering Kyung Hee University Seochon-dong Giheung-gu Yongin-si Gyeonggi-do 446-701 Korea Republic of

ISBN: (纸本)9783642222023

Data generated by wireless body area network (WBAN), are heterogeneous as they have different characteristics in terms of priority, transmission rate, required bandwidth, tolerable packet loss, delay demands etc;thus transmitting them in uniform fashion is unsuitable. This paper proposes an efficient data transmission scheme which classifies and prioritizes data patients according to their current status and their diseases;also we utilize multiple paths routing between the coordinator and gateway to provide a solution satisfying the delay requirements of different data types. Finally, it's shown that the proposed scheme is efficient for timely data transfer in WBAN. © 2011 Springer-Verlag.

关键词： Quality of service

来源：评论

学校读者我要写书评

暂无评论

Towards the Development of Personal Cloud computing for Mobile Thin-Clients

Towards the Development of Personal Cloud Computing for Mobi...

引用

International Conference on Information Science and Applications (ICISA)

作者： Yuan Tian Biao Song Eui-Nam Huh Department of Computer Engineering Internet Computing and Network Security Laboratory Kyung Hee University South Korea

ISBN: (纸本)9781424492220

The phenomenon of cloud computing has been driven largely these days. Personal Cloud, as the cloud computing for personal usage, has come to the forefront. Compare with traditional operating system, personal cloud shifts individual computing "from being device-centric to information-centric", which create a bridge between operating system-based computing and the more service-oriented approach to IT. Also, the mobile thin-client has brought mobility to cloud computing. In this paper, we provide a reference base for the development of methodologies tailored for personal cloud computing. Besides, we also provide a security architecture for personal cloud based on the security requirement analysis.

关键词： security Cloud computing Privacy Servers Software computer architecture

来源：评论

学校读者我要写书评

暂无评论

An IPTV service delivery model using novel virtual network topology 11

An IPTV service delivery model using novel virtual network t...

引用

Proceedings of the 5th International Conference on Ubiquitous Information Management and Communication

作者： Song, Biao Hassan, Mohammad Mehedi Huh, Eui Nam Internet Computing and Network Security Lab. Department of Computer Engineering Kyung Hee University 1 Seocheon-dong Giheung-gu Yongin-si Gyeonggi-do 446-701 Korea Republic of

ISBN: (纸本)9781450305716

Network Virtualization, as an irresistible trend for building future internet, create a virtual topology on the top of the current network architecture and provide end-to-end quality of service guarantees. By utilizing the flexibility of the virtual network, this paper proposes a novel and reliable model for IPTV service delivery using network virtualization. The challenging issues in our model are the virtual network topology construction and virtual network embedding. Since the current network topologies are not sufficient enough to be applied, an advanced topology named Multi-Depots Ring-Star with 2-Depots per Ring is proposed for improving the efficiency and reliability of the IPTV service delivery network. We also develop a VN construction and allocation framework which reduces the difficulty of topology reconstruction problem caused by the unpredictability of virtual network embedding results. Copyright 2011 ACM.

关键词： Topology

来源：评论

学校读者我要写书评

暂无评论

Cost analysis on IPTV hosting service for 3rd party providers 11

Cost analysis on IPTV hosting service for 3rd party provider...

引用

Proceedings of the 5th International Conference on Ubiquitous Information Management and Communication

作者： Aldana Diaz, Maria Elizabeth Huh, Eui Nam Department of Computer Engineering Internet Computing and Network Security Lab. Kyung Hee University 1 Seocheon-dong Giheung-gu Yongin-si Gyeonggi-do 446-701 Korea Republic of

ISBN: (纸本)9781450305716

3rd party content service expands the variety of contents that IPTV usually distributes and opens the opportunity to create new and attractive content to anyone. However, the hosting service for 3rd party content demands high cost. Therefore, IPTV provider needs an effective strategy of resource management to minimize the cost. Thereby, the cost function is based on the IPTV management of content including storage, distribution and delivery. This paper proposes three cost-based policies management. In addition, we design an experiment to evaluate each policy for two types of 3rd party content service i.e. static and dynamic and suggest the least-cost policy management that complies with Service Level Agreements (SLAs) delivering the 3rd party content in the shortest period of time. Copyright 2011 ACM.

关键词： IPTV

来源：评论

学校读者我要写书评

暂无评论

Buffer and switch: An efficient road-to-road routing scheme for VANETs

Buffer and switch: An efficient road-to-road routing scheme ...

引用

2011 7th International Conference on Mobile Ad-hoc and Sensor Networks, MSN 2011

作者： Song, Chao Liu, Ming Wen, Yonggang Cao, Jiannong Chen, Guihai School of Computer Science and Engineering University of Electronic Science and Technology of China Chengdu China School of Computer Engineering Nanyang Technological University Singapore Singapore Internet and Mobile Computing Laboratory Department of Computing Hong Kong Polytechnic University Hong Kong Hong Kong School of Computer Science and Engineering Shanghai Jiao Tong University Shanghai China

ISBN: (纸本)9780769546100

Vehicular Ad Hoc Networks (VANETs) are getting increasing attention from academic researchers and automotive industries. Timely and cost-efficient multi-hop data delivery among vehicles is essential for VANETs, and various routing protocols are envisioned for infrastructure-less vehicle-to vehicle (V2V) communications. Due to the road-constrained data delivery and highly dynamic topology of vehicle nodes, it's better to construct routing based on the road-to-road pattern than the traditional node-to-node routing pattern in MANETs. However, the challenging issue for the road-to-road routing in VANETs is the opportunistic forwarding at intersections. Therefore, we propose a novel routing scheme, called Buffer and Switch (BAS). In BAS, each road buffers the data packets with multiple duplicates propagation in order to provide more opportunities for packet switching at intersections. Different from conventional protocols in VANETs, the propagation of duplicates in BAS is bidirectional along the routing path. Moreover, BAS's cost is much lower than other flooding-based protocols due to its spatio-temporally controlled duplicates propagation. We conduct the extensive simulations to evaluate the performance of BAS based on the road map of a real city collected from Google Earth. The simulation results show that BAS can outperform the existing protocols, especially when the network resources are limited. © 2011 IEEE.

关键词： Vehicular ad hoc networks

来源：评论

学校读者我要写书评

暂无评论

A Rose by Any Other Name or an Insane Root? Adventures in Name Resolution

A Rose by Any Other Name or an Insane Root? Adventures in Na...

引用

European Conference on computer Network Defense, EC2ND

作者： Hayawardh Vijayakumar Joshua Schiffman Trent Jaeger Systems and Internet Infrastructure Security Laboratory Department of Computer Science and Engineering Pennsylvania State University USA

Namespaces are fundamental to computing systems. Each namespace maps the names that clients use to retrieve resources to the actual resources themselves. However, the indirection that namespaces provide introduces avenues of attack through the name resolution process. Adversaries can trick programs into accessing unintended resources by changing the binding between names and resources and by using names whose target resources are ambiguous. In this paper, we explore whether a unified system approach may be found to prevent many name resolution attacks. For this, we examine attacks on various namespaces and use these to derive invariants to defend against these attacks. Four prior techniques are identified that enforce aspects of name resolution, so we explore how these techniques address the proposed invariants. We find that each of these techniques are incomplete in themselves, but a combination could provide effective enforcement of the invariants. We implement a prototype system that can implement these techniques for the Linux file system namespace, and show that invariant rules specific to each, individual program system call can be enforced with a small overhead (less than 3%), indicating that fine-grained name resolution enforcement may be practical.

关键词： Servers Context Linux Process control Permission Androids

来源：评论

学校读者我要写书评

暂无评论

Strong security enabled certificateless aggregate signatures applicable to mobile computation

Strong security enabled certificateless aggregate signatures...

引用

3rd IEEE International Conference on Intelligent Networking and CollaborativeSystems, INCoS 2011

作者： Hu, Xiong Wu, Qianhong Chen, Zhong Key Laboratory of Network and Software Security Assurance of the Ministry of Education School of Electronics Engineering and Computer Science Peking University Beijing 100871 China Key Laboratory of Aerospace Information Security and Trusted Computing Wuhan University Ministry of Education China Universitat Rovira i Virgili Department of Computer Engineering and Mathematics UNESCO Av. Països Catalans 26 E-43007 Tarragona Spain

ISBN: (纸本)9780769545790

An aggregate signature scheme allows a public algorithm to aggregate n signatures of n distinct messages from n signers into a single signature. By validating the single resulting signature, one can be convinced that the messages have been endorsed by all the signers. Certificateless aggregate signatures allow the signers to authenticate messages without suffering from the complex certificate management in the traditional public key cryptography or the key escrow problem in identitybased cryptography. In this paper, we present a new efficient certificateless aggregate signature scheme. Compared with up-todate certificateless aggregate signatures, our scheme is equipped with a number of attracting features: (1) it is shown to be secure under the standard computational Diffie-Hellman assumption in the random oracle model;(2) the security is proven in the strongest security model so far;(3) the signers do not need to be synchronized;and (4) its performance is comparable to the most efficient up-to-date schemes. These features are desirable in a mobile networking and computing environment where the storage/computation capacity of the end devices are limited, and due to the wireless connection and distributed feature, the computing devices are easy to be attacked and hard to be synchronized. © 2011 IEEE.

关键词： Public key cryptography

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：