Springer Science and Business Media LLC
Công bố khoa học tiêu biểu
* Dữ liệu chỉ mang tính chất tham khảo
Sắp xếp:
Malicious origami in PDF
Springer Science and Business Media LLC - Tập 6 - Trang 289-315 - 2009
People have now come to understand the risks associated with MS Office
documents: whether those risks are caused by macros or associated breaches. PDF
documents on the contrary seem to be much more secure and reliable. This false
sense of security mainly comes from the fact that these documents appear to be
static. The widespread use of Acrobat Reader is most likely also accountable for
this pheno...
Enabling automated threat response through the use of a dynamic security policy
Springer Science and Business Media LLC - Tập 3 - Trang 195-210 - 2007
Information systems security issues are currently being addressed using
different techniques, such as authentication, encryption and access control,
through the definition of security policies, but also using monitoring
techniques, in particular intrusion detection systems. We can observe that
security monitoring is currently totally decorrelated from security policies,
that is security requiremen...
On callgraphs and generative mechanisms
Springer Science and Business Media LLC - Tập 3 - Trang 299-310 - 2007
This paper examines the structural features of callgraphs. The sample consisted
of 120 malicious and 280 non-malicious executables. Pareto models were fitted to
indegree, outdegree and basic block count distribution, and a statistically
significant difference shown for the derived power law exponent. A two-step
optimization process involving human designers and code compilers is proposed to
accoun...
Discovering and exploiting 802.11 wireless driver vulnerabilities
Springer Science and Business Media LLC - Tập 4 - Trang 25-37 - 2007
802.11 Wireless local area networks are unfortunately notoriously infamous due
to their many, critical security flaws. Last year, world-first 802.11 wireless
driver vulnerabilities were publicly disclosed, making them a critical and
recent threat. In this paper, we expose our research results on 802.11 driver
vulnerabilities by focusing on the design and implementation of a fully featured
802.11 f...
Bologna process revisited: educating information security and malware experts
Springer Science and Business Media LLC - Tập 3 - Trang 149-161 - 2007
The Bologna process has resulted in the re- structuring of undergraduate and
graduate education across Europe. This paper outlines what these changes mean
for acquiring degrees in information security and how various universities have
tried to respond to these demands. What is unclear at this stage is how the
offering of continuous master degrees at Polytechnic and Applied Science
Universities wil...
Considering the potential of criminal profiling to combat hacking
Springer Science and Business Media LLC - - 2007
Code mutation techniques by means of formal grammars and automatons
Springer Science and Business Media LLC - Tập 5 - Trang 199-207 - 2009
The paper describes formalization of existing code mutation techniques widely
used in a viruses (polymorphism and metamorphism) by means of formal grammars
and automatons. New model of metamorphic viruses and new classification of this
type of viruses are suggested. The statement about undetectable viruses of this
type is proved. In that paper are shown iterative approach toward construct
complex ...
Filter-resistant code injection on ARM
Springer Science and Business Media LLC - Tập 7 - Trang 173-188 - 2010
Code injection attacks are one of the most powerful and important classes of
attacks on software. In these attacks, the attacker sends malicious input to a
software application, where it is stored in memory. The malicious input is
chosen in such a way that its representation in memory is also a valid
representation of a machine code program that performs actions chosen by the
attacker. The attacke...
Enforcing kernel constraints by hardware-assisted virtualization
Springer Science and Business Media LLC - Tập 7 - Trang 1-21 - 2009
This article deals with kernel security protection. We propose a
characterization of malicious kernel-targeted actions, based on how the way they
act to corrupt the kernel. Then, we discuss security measures able to counter
such attacks. We finally expose our approach based on hardware-virtualization
that is partially implemented into our demonstrator Hytux, which is inspired
from bluepill (Rutkow...
Tổng số: 105
- 1
- 2
- 3
- 4
- 5
- 6
- 10