IEEEARES
2009
IEEE
13 years 8 months ago
2009
IEEE
Scenarios such as online banking, mobile payment systems, stock trading, selling merchandise, and a host of other applications that need a high level of security have moved from th...
IEEEARES
2009
IEEE
13 years 8 months ago
2009
IEEE
Security is a crucial issue in many modern software systems and can lead to immense costs if required security goals are not fulfilled. Fewer techniques exist to address the syste...
IEEEARES
2009
IEEE
13 years 8 months ago
2009
IEEE
We present an automatic analyzer for measuring information flow within software systems. In this paper, we quantify leakage in terms of information theory and incorporate this comp...
IEEEARES
2009
IEEE
14 years 5 months ago
2009
IEEE
— Researchers and practitioners in computer forensics currently must base their analysis on information that is either incomplete or produced by tools that may themselves be comp...
IEEEARES
2009
IEEE
14 years 5 months ago
2009
IEEE
IEEEARES
2009
IEEE
14 years 5 months ago
2009
IEEE
The implementation of security principles, like least privilege, in a software architecture is difficult, as no systematic rules on how to apply them in practice exist. As a resu...
IEEEARES
2009
IEEE
14 years 5 months ago
2009
IEEE
—Signcryption is a cryptographic primitive that fulfills both the functions of digital signature and public key encryption simultaneously, at a cost significantly lower than th...
IEEEARES
2009
IEEE
14 years 5 months ago
2009
IEEE
Dynamic taint analysis (DTA) is a technique used for tracking information flow by propagating taint propagation across memory locations during program execution. Most implementat...
IEEEARES
2009
IEEE
14 years 5 months ago
2009
IEEE
—Targeting the operating system kernel, the core of trust in a system, kernel rootkits are able to compromise the entire system, placing it under malicious control, while eluding...
IEEEARES
2009
IEEE
14 years 5 months ago
2009
IEEE
—Alice and Bob notation is a popular way to describe security protocols: it is intuitive, succinct, and yet expressive. Several formal protocol specification languages are based...