SP
2003
IEEE
14 years 5 months ago
2003
IEEE
We present an experimental study showing that soft memory errors can lead to serious security vulnerabilities in Java and .NET virtual machines, or in any system that relies on ty...
SP
2003
IEEE
14 years 5 months ago
2003
IEEE
The call stack of a program execution can be a very good information source for intrusion detection. There is no prior work on dynamically extracting information from call stack a...
SP
2003
IEEE
14 years 5 months ago
2003
IEEE
Key establishment in sensor networks is a challenging problem because asymmetric key cryptosystems are unsuitable for use in resource constrained sensor nodes, and also because th...
SP
2003
IEEE
14 years 5 months ago
2003
IEEE
Consider a CIA agent who wants to authenticate herself to a server, but does not want to reveal her CIA credentials unless the server is a genuine CIA outlet. Consider also that t...
SP
2003
IEEE
14 years 5 months ago
2003
IEEE
We present Mixminion, a message-based anonymous remailer protocol with secure single-use reply blocks. Mix nodes cannot distinguish Mixminion forward messages from reply messages,...
SP
2003
IEEE
14 years 5 months ago
2003
IEEE
CSFW
2003
IEEE
14 years 5 months ago
2003
IEEE
To be practical, systems for ensuring secure information flow must be as permissive as possible. To this end, the author recently proposed a type system for multi-threaded progra...
CSFW
2003
IEEE
14 years 5 months ago
2003
IEEE
This paper defines a framework in which one can formalize a variety of authorization and policy issues that arise in access control of shared computing resources. Instantiations ...
CSFW
2003
IEEE
14 years 5 months ago
2003
IEEE
A type confusion attack is one in which a principal accepts data of one type as data of another. Although it has been shown by Heather et al. that there are simple formatting conv...
CSFW
2003
IEEE
14 years 5 months ago
2003
IEEE
SPKI/SDSI is a language for expressing distributed access control policy, derived from SPKI and SDSI. We provide a first-order logic (FOL) semantics for SDSI, and show that it ha...