检索结果-内蒙古大学图书馆

1st ACM computer security Architectures Workshop, CSAW'07, held in association with the 14th ACM computer and Communications security Conference, CCS'07

作者： Enck, William Rueda, Sandra Schiffman, Joshua Sreenivasan, Yogesh St. Clair, Luke Jaeger, Trent McDaniel, Patrick Systems and Internet Infrastructure Security Laboratory Department of Computer Science and Engineering Pennsylvania State University University Park PA 16802 United States

ISBN: (纸本)9781595938909

computer usage and threat models have changed drastically since the advent of access control systems in the 1960s. Instead of multiple users sharing a single file system, each user has many devices with their own storage. Thus, a user's fear has shifted away from other users' impact on the same system to the threat of malice in the software they intentionally or even inadvertently run. As a result, we propose a new vision for access control: one where individual users are isolated by default and where the access of individual user applications is carefully managed. A key question is how much user administration effort would be required if a system implementing this vision were constructed. In this paper, we outline our work on just such a system, called PinUP, which manages file access on a per application basis for each user. We use historical data from our lab's users to explore how much user and system administration effort is required. Since administration is required for user sharing in PinUP, we find that sharing via mail and file repositories requires a modest amount of administrative effort, a system policy change every couple of days and a small number of user administrative operations a day. We are encouraged that practical administration on such a scale is possible given an appropriate and secure user approach. © 2007 ACM.

关键词： Access control

来源：评论

学校读者我要写书评

暂无评论

Optimal Selection and Activation of Intrusion Detection Agents for Wireless Sensor Networks

Optimal Selection and Activation of Intrusion Detection Agen...

引用

International Conference on Future Generation Communication and Networking (FGCN)

作者： Tran Hoang Hai Eui Nam Huh Internet Computing and Security Laboratory Department of Computer Engineering Kyung Hee University South Korea

ISBN: (纸本)9780769530482;0769530486

Intrusion detection is an efficient method against attacks in computer network and system. Most intrusion detection system for sensor networks and ad hoc networks are based on the cooperative of intrusion detection agents and suffered from a computation and memory usage overload. In this paper, we address this problem by proposing two algorithms to optimal select and activate the intrusion detection agents for sensor networks.

关键词： Intrusion detection Wireless sensor networks Ad hoc networks computer networks Intelligent sensors Sensor phenomena and characterization Condition monitoring IP networks computer security Laboratories

来源：评论

学校读者我要写书评

暂无评论

An energy-aware protocol for data gathering applications in wireless sensor networks

An energy-aware protocol for data gathering applications in ...

引用

IEEE International Conference on Communications (ICC 2007)

作者： Liu, Ming Zheng, Yuan Cao, Jiannong Chen, Guihai Chen, Lijun Gong, Haigang School of Computer Science and Engineering University of Electronic and Technology of China China Internet and Mobile Computing Lab. Department of Computing Hong Kong Polytechnic University Hong Kong State Key Laboratory for Novel Software Technology Nanjing University China

ISBN: (纸本)9781424403523

Data gathering is a major function of many applications in wireless sensor networks (WSNs). The most important issue in designing a data gathering algorithm is how to save energy of sensor nodes while meeting the requirement of applications/users such as sensing area coverage. In this paper, we propose a novel hierarchical clustering protocol for long-lived sensor network. EAP achieves a good performance in terms of lifetime by minimizing energy consumption for in-network communications and balancing the energy load among all nodes. EAP introduces a new clustering parameter for cluster head election, which can better handle the heterogeneous energy capacities. Furthermore, it also introduces a simple but efficient approach, namely intra-cluster coverage to cope with the area coverage problem. We evaluate the performance of the proposed protocol using a simple temperature sensing application. Simulation results show that our protocol significantly outperforms LEACH and HEED in terms of network lifetime and the amount of data gathered.

关键词： Network protocols

来源：评论

学校读者我要写书评

暂无评论

A New Architecture of Sensitive File Management Based on Dual-Core and EFI

A New Architecture of Sensitive File Management Based on Dua...

引用

International IEEE Conference on Signal-Image Technologies and internet-Based System

作者： Zijian Deng Xuejia Lai Laboratory of Information Security and National Computing Grid Southwest Jiaotong University Chengdu Sichuan China Department of Computer Science and Engineering Shanghai Jiaotong University Shanghai China

How to protect the sensitive information from unauthorized disclosure is one of the problems in computer security. In this paper we present a new method for preventing the sensitive file from unauthorized disclosure, security file management (SFM). SFM relies on dual-core technology, extensible firmware interface and trusted computing to provide a much high level of security than current solutions. All operations of sensitive files are run in trusted boundary. In this paper, we present the architecture of SFM, the initial designer and the security analysis.

关键词： security Servers Cryptography Linux Protocols Software computer architecture

来源：评论

学校读者我要写书评

暂无评论

An Energy-Aware Protocol for Data Gathering Applications in Wireless Sensor Networks

An Energy-Aware Protocol for Data Gathering Applications in ...

引用

IEEE International Conference on Communications (ICC)

作者： M. Liu Y. Zheng J. Cao G. Chen L. Chen H. Gong School of Computer Science and Engineering University of Electronic Science and Technology China Internet and Mobile Computing Lab Department of Computing Hong Kong Polytechnic University Hong Kong China State Key Laboratory for Novel Software Technology Nanjing University China

关键词： Wireless application protocol Wireless sensor networks Energy consumption Application software Temperature sensors computer networks Clustering algorithms Peer to peer computing Scalability Paper technology

来源：评论

学校读者我要写书评

暂无评论

A pairing-based signcryption scheme using self-certified public keys

引用

International Journal of computers and Applications 2007年第3期29卷 278-282页

作者： Li, F. Xin, X. Hu, Y. School of Computer Science and Engineering University of Electronic Science and Technology of China Chengdu Sichuan 610054 China Department of Information and Computing Science Zhengzhou University of Light Industry Zhengzhou Henan 450002 China Key Laboratory of Computer Networks and Information Security Xidian University Xi'an Shaanxi 710071 China

In recent years, many pairing-based signcryption schemes have been proposed. There is, however, an inherent weakness in these schemes: the private key escrow problem, in which the "trusted" private key generator (PKG) can easily impersonate any user at any time without being detected. In this paper we present a pairing-based signcryption scheme using self-certified public keys. In our scheme, users can choose their private keys independently. The public keys of users can be implicitly verified with the subsequent signature verification in a logically single step. A trusted PKG is no longer required. If the dishonest PKG impersonates an honest user to communicate with others, the user can provide a proof of treachery of the PKG afterwards, which is similar to certificate-based systems.

关键词： Public key cryptography

来源：评论

学校读者我要写书评

暂无评论

Non-Invasive Methods for Host Certification

Non-Invasive Methods for Host Certification

引用

International Conference on security and Privacy for Emerging Areas in Communications Networks (SecureComm)

作者： Patrick Traynor Michael Chien Scott Weaver Boniface Hicks Patrick McDaniel Systems and Internet Infrastructure Security (SIIS) Laboratory Department of Computer Science and Engineering Pennsylvania State University USA

Determining whether a user or system is exercising appropriate security practices is difficult in any context. Such difficulties are particularly pronounced when uncontrolled or unknown platforms join public networks. Commonly practiced techniques used to vet these hosts, such as system scans, have the potential to infringe upon the privacy of users. In this paper, we show that it is possible for clients to prove both the presence and proper functioning of security infrastructure without allowing unrestricted access to their system. We demonstrate this approach, specifically applied to anti-virus security, by requiring clients seeking admission to a network to positively identify the presence or absence of malcode in a series of puzzles. The implementation of this mechanism and its application to real networks are also explored. In so doing, we demonstrate that it is not necessary for an administrator to be invasive to determine whether a client implements good security practices

关键词： Certification Protection Authentication computer security Privacy Portable computers computer viruses Access protocols Detectors Best practices

来源：评论

学校读者我要写书评

暂无评论

Exploiting open functionality in SMS-capable cellular networks 05

Exploiting open functionality in SMS-capable cellular networ...

引用

CCS 2005 - 12th ACM Conference on computer and Communications security

作者： Enck, William Traynor, Patrick McDaniel, Patrick Porta, Thomas La Systems and Internet Infrastructure Security Laboratory Department of Computer Science and Engineering Pennsylvania State University University Park PA 16802

ISBN: (纸本)1595932267

Cellular networks are a critical component of the economic and social infrastructures in which we live. In addition to voice services, these networks deliver alphanumeric text messages to the vast majority of wireless subscribers. To encourage the expansion of this new service, telecommunications companies offer connections between their networks and the internet. The ramifications of such connections, however, have not been fully recognized. In this paper, we evaluate the security impact of the SMS interface on the availability of the cellular phone network. Specifically, we demonstrate the ability to deny voice service to cities the size of Washington D.C. and Manhattan with little more than a cable modem. Moreover, attacks targeting the entire United States are feasible with resources available to medium-sized zombie networks. This analysis begins with an exploration of the structure of cellular networks. We then characterize network behavior and explore a number of reconnaissance techniques aimed at effectively targeting attacks on these systems. We conclude by discussing countermeasures that mitigate or eliminate the threats introduced by these attacks. Copyright 2005 ACM.

关键词： Open systems

来源：评论

学校读者我要写书评

暂无评论

TARP: ticket-based address resolution protocol

TARP: ticket-based address resolution protocol

引用

Annual computer security Applications Conference

作者： W. Lootah W. Enck P. McDaniel Systems and Internet Infrastructure Security Laboratory Department of Computer Science and Engineering Pennsylvania State University USA

IP networks fundamentally rely on the address resolution protocol (ARP) for proper operation. Unfortunately, vulnerabilities in the ARP protocol enable a raft of IP-based impersonation, man-in-the-middle, or DoS attacks. Proposed countermeasures to these vulnerabilities have yet to simultaneously address backward compatibility and cost requirements. This paper introduces the ticket-based address resolution protocol (TARP). TARP implements security by distributing centrally issued secure MAC/IP address mapping attestations through existing ARP messages. We detail the TARP protocol and its implementation within the Linux operating system. Our experimental analysis shows that TARP improves the costs of implementing ARP security by as much as two orders of magnitude over existing protocols. We conclude by exploring a range of operational issues associated with deploying and administering ARP security

关键词： Protocols Costs computer security IP networks Linux Operating systems Data security Space technology Laboratories computer science

来源：评论

学校读者我要写书评

暂无评论

Exception handling in distributed workflow systems using mobile agents

Exception handling in distributed workflow systems using mob...

引用

IEEE International Conference on e-Business engineering (ICEBE)

作者： Jiannong Cao Jin Yang Wai Ting Chan C. Xu Internet and Mobile Computing Lab Department of Computing Hong Kong Polytechnic University Kowloon Hong Kong China Cluster and Internet Computing Laboratory Department of Electrical and Computer Engineering Wayne State University Detroit MI USA

Workflow management systems (WfMSs) are software systems used to automate, coordinate and streamline business processes of organizations. Most existing research on WfMSs has been focused on workflows based on well-structured and well-behaved business processes. Although its importance has been recognized, only recently, modeling and handling of workflow exceptions has been tackled by the workflow community. In this paper, we propose a mobile agent based approach to handling exceptions in distributed workflow management systems. Mobile agents are dispatched to find out the status of running processes in the system to keep track and troubleshoot them when necessary. We describe the classification of workflow exceptions into hierarchical levels and the corresponding design of different types of exception-handling mobile agents and their cooperation. A prototype of the mobile agent-based workflow exception handling mechanism has been implemented using the IBM Aglet platform

关键词： Mobile agents Workflow management software Humans internet Software systems Application software Mobile computing Prototypes Technology management Office automation

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：