ACSAC
2004
IEEE
13 years 11 months ago
2004
IEEE
Many systems execute untrusted programs in virtual machines (VMs) to limit their access to system resources. Sun introduced the Java VM in 1995, primarily intended as a lightweigh...
ACSAC
2004
IEEE
13 years 11 months ago
2004
IEEE
In current extensible monolithic operating systems, loadable kernel modules (LKM) have unrestricted access to all portions of kernel memory and I/O space. As a result, kernel-modu...
ACSAC
2004
IEEE
13 years 11 months ago
2004
IEEE
Many real-world applications use credentials such as passwords as means of user authentication. When accessed from untrusted public terminals, such applications are vulnerable to ...
ACSAC
2004
IEEE
13 years 11 months ago
2004
IEEE
We map intrusion events to known exploits in the network attack graph, and correlate the events through the corresponding attack graph distances. From this, we construct attack sc...
ACSAC
2004
IEEE
13 years 11 months ago
2004
IEEE
ACSAC
2004
IEEE
13 years 11 months ago
2004
IEEE
We have developed a mechanism which prevents abuse of trusted Java applets, such as digitally signed applets. A signed applet is usually permitted by a user to perform certain fun...
ACSAC
2004
IEEE
13 years 11 months ago
2004
IEEE
Ad-hoc networks are perceived as communities of autonomous devices that interconnect with each other. Typically, they have dynamic topologies and cannot rely on a continuous conne...
ACSAC
2004
IEEE
13 years 11 months ago
2004
IEEE
Many network security problems can be solved in a centralized TCP (CTCP) architecture, in which an organization's edge router transparently proxies every TCP connection betwe...
ACSAC
2004
IEEE
13 years 11 months ago
2004
IEEE
One of the biggest obstacles faced by user command based anomaly detection techniques is the paucity of data. Gathering command data is a slow process often spanning months or yea...
ACSAC
2004
IEEE
13 years 11 months ago
2004
IEEE
This paper discusses VIEWS, a specification for building diagrams that describe the security features of systems. The authors' recent experience with providing security archi...