Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:My script engines know what you did in the dark: converting engines
into script API tracers
author:Toshinori Usui and
Yuto Otsuki and
Yuhei Kawakoya and
Makoto Iwamura and
Jun Miyoshi and
Kanta Matsuura
My Script Engines Know What You Did In the Dark:
Converting Engines into Script API Tracers
Toshinori Usui
NTT Secure Platform Laboratories
Institute of Industrial Science,
The University of Tokyo
toshinori.usui.rt@hco.ntt.co.jp
Yuto Otsuki
NTT Secure Platform Laboratories
yuuto.ootsuki.uh@hco.ntt.co.jp
Yuhei Kawakoya
NTT Secure Platform Laboratories
yuuhei.kawakoya.sy@hco.ntt.co.jp
Makoto Iwamura
NTT Secure Platform Laboratories
makoto.iwamura.sw@hco.ntt.co.jp
Jun Miyoshi
NTT Secure Platform Laboratories
jun.miyoshi.fu@hco.ntt.co.jp
Kanta Matsuura
Institute of Industrial Science,
The University of Tokyo
kanta@iis.u-tokyo.ac.jp
ABSTRACT
Malicious scripts have been crucial attack vectors in recent attacks
such as malware spam (malspam) and fileless malware. Since mali-
cious scripts are generally obfuscated, statically analyzing them is
difficult due to reflections. Therefore, dynamic analysis, which is not
affected by obfuscation, is used for malicious script analysis. How-
ever, despite its wide adoption, some problems remain unsolved.
Current designs of script analysis tools do not fulfill the follow-
ing three requirements important for malicious script analysis. (1)
Universally applicable to various script languages, (2) capable of
outputting analysis logs that can precisely recover the behavior of
malicious scripts, and (3) applicable to proprietary script engines.
In this paper, we propose a method for automatically generating
script API tracer by analyzing the target script engine binaries. The
method mine the knowledge of script engine internals that are
required to append behavior analysis capability. This enables the
addition of analysis functionalities to arbitrary script engines and
generation of script API tracers that can fulfill the above require...


Instruction: 总结这篇安全研究的主要观点

Input:
title:My script engines know what you did in the dark: converting engines
into script API tracers
author:Toshinori Usui and
Yuto Otsuki and
Yuhei Kawakoya and
Makoto Iwamura and
Jun Miyoshi and
Kanta Matsuura
My Script Engines Know What You Did In the Dark:
Converting Engines into Script API Tracers
Toshinori Usui
NTT Secure Platform Laboratories
Institute of Industrial Science,
The University of Tokyo
toshinori.usui.rt@hco.ntt.co.jp
Yuto Otsuki
NTT Secure Platform Laboratories
yuuto.ootsuki.uh@hco.ntt.co.jp
Yuhei Kawakoya
NTT Secure Platform Laboratories
yuuhei.kawakoya.sy@hco.ntt.co.jp
Makoto Iwamura
NTT Secure Platform Laboratories
makoto.iwamura.sw@hco.ntt.co.jp
Jun Miyoshi
NTT Secure Platform Laboratories
jun.miyoshi.fu@hco.ntt.co.jp
Kanta Matsuura
Institute of Industrial Science,
The University of Tokyo
kanta@iis.u-tokyo.ac.jp
ABSTRACT
Malicious scripts have been crucial attack vectors in recent attacks
such as malware spam (malspam) and fileless malware. Since mali-
cious scripts are generally obfuscated, statically analyzing them is
difficult due to reflections. Therefore, dynamic analysis, which is not
affected by obfuscation, is used for malicious script analysis. How-
ever, despite its wide adoption, some problems remain unsolved.
Current designs of script analysis tools do not fulfill the follow-
ing three requirements important for malicious script analysis. (1)
Universally applicable to various script languages, (2) capable of
outputting analysis logs that can precisely recover the behavior of
malicious scripts, and (3) applicable to proprietary script engines.
In this paper, we propose a method for automatically generating
script API tracer by analyzing the target script engine binaries. The
method mine the knowledge of script engine internals that are
required to append behavior analysis capability. This enables the
addition of analysis functionalities to arbitrary script engines and
generation of script API tracers that can fulfill the above require...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:Winding Path: Characterizing the Malicious Redirection in Squatting
Domain Names
author:Yuwei Zeng and
Xunxun Chen and
Tianning Zang and
Haiwei Tsang
Winding Path: Characterizing
the Malicious Redirection in Squatting
Domain Names
Yuwei Zeng1,2, Xunxun Chen1,3, Tianning Zang1,2(B), and Haiwei Tsang4
1 Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China
{zengyuwei,zangtianning}@iie.ac.cn
2 School of Cyber Security, University of Chinese Academy of Sciences,
3 National Computer Network Emergency Response Technical Team/Coordination
Beijing, China
Center of China, Beijing, China
4 Jilin University, Changchun, China
Abstract. An increasing number of adversaries tend to cover up their
malicious sites by leveraging the elaborate redirection chains. Prior works
mostly focused on the speciﬁc attacks that users suﬀered, and seldom
considered how users were exposed to such attacks. In this paper, we con-
duct a comprehensive measurement study on the malicious redirections
that leverage squatting domain names as the start point. To this end, we
collected 101,186 resolved squatting domain names that targeted 2,302
top brands from the ISP-level DNS traﬃc. After dynamically crawling
these squatting domain names, we pioneered the application of perfor-
mance log to mine the redirection chains they involved. Afterward, we
analyzed the nodes that acted as intermediaries in malicious redirec-
tions and found that adversaries preferred to conduct URL redirection
via imported JavaScript codes and iframes. Our further investigation
indicates that such intermediaries have obvious aggregation, both in the
domain name and the Internet infrastructure supporting them.
Keywords: Domain squatting · URL redirection
1 Introduction
URL redirection has been widely used since its inception. With this technique,
website administrators are able to provide more customized navigation services
for visitors by specifying certain parameters in the URL (e.g., language). ...


Instruction: 总结这篇安全研究的主要观点

Input:
title:Winding Path: Characterizing the Malicious Redirection in Squatting
Domain Names
author:Yuwei Zeng and
Xunxun Chen and
Tianning Zang and
Haiwei Tsang
Winding Path: Characterizing
the Malicious Redirection in Squatting
Domain Names
Yuwei Zeng1,2, Xunxun Chen1,3, Tianning Zang1,2(B), and Haiwei Tsang4
1 Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China
{zengyuwei,zangtianning}@iie.ac.cn
2 School of Cyber Security, University of Chinese Academy of Sciences,
3 National Computer Network Emergency Response Technical Team/Coordination
Beijing, China
Center of China, Beijing, China
4 Jilin University, Changchun, China
Abstract. An increasing number of adversaries tend to cover up their
malicious sites by leveraging the elaborate redirection chains. Prior works
mostly focused on the speciﬁc attacks that users suﬀered, and seldom
considered how users were exposed to such attacks. In this paper, we con-
duct a comprehensive measurement study on the malicious redirections
that leverage squatting domain names as the start point. To this end, we
collected 101,186 resolved squatting domain names that targeted 2,302
top brands from the ISP-level DNS traﬃc. After dynamically crawling
these squatting domain names, we pioneered the application of perfor-
mance log to mine the redirection chains they involved. Afterward, we
analyzed the nodes that acted as intermediaries in malicious redirec-
tions and found that adversaries preferred to conduct URL redirection
via imported JavaScript codes and iframes. Our further investigation
indicates that such intermediaries have obvious aggregation, both in the
domain name and the Internet infrastructure supporting them.
Keywords: Domain squatting · URL redirection
1 Introduction
URL redirection has been widely used since its inception. With this technique,
website administrators are able to provide more customized navigation services
for visitors by specifying certain parameters in the URL (e.g., language). ...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:Blacklistable anonymous credentials: blocking misbehaving users without
ttps
author:Patrick P. Tsang and
Man Ho Au and
Apu Kapadia and
Sean W. Smith
Blacklistable Anonymous Credentials:
Blocking Misbehaving Users without TTPs
Patrick P. Tsang†, Man Ho Au§, Apu Kapadia†‡, Sean W. Smith†
†Department of Computer Science
Dartmouth College
Hanover, NH, USA
‡Institute for Security Technology Studies
Dartmouth College
Hanover, NH, USA
§Centre for Computer and Information Security Research
School of Computer Science and Software Engineering
University of Wollongong, Australia
{patrick, akapadia, sws}@cs.dartmouth.edu, mhaa456@uow.edu.au
ABSTRACT
Several credential systems have been proposed in which
users can authenticate to services anonymously.
Since
anonymity can give users the license to misbehave, some
variants allow the selective deanonymization (or linking)
of misbehaving users upon a complaint to a trusted third
party (TTP). The ability of the TTP to revoke a user’s pri-
vacy at any time, however, is too strong a punishment for
misbehavior. To limit the scope of deanonymization, sys-
tems such as “e-cash” have been proposed in which users are
deanonymized under only certain types of well-deﬁned mis-
behavior such as “double spending.” While useful in some
applications, it is not possible to generalize such techniques
to more subjective deﬁnitions of misbehavior.
We present the ﬁrst anonymous credential system in which
services can “blacklist” misbehaving users without contact-
ing a TTP. Since blacklisted users remain anonymous, mis-
behaviors can be judged subjectively without users fearing
arbitrary deanonymization by a TTP.
Categories and Subject Descriptors
K.6.5 [Operating Systems]: Security and Protection—
Authentication; E.3 [Data Encryption]: Public key cryp-
tosystems
General Terms
Algorithms, Security
Keywords
privacy,
anonymous blacklisting, revocation
anonymous authentication, user misbehavior,
Permission to make digital or hard copies of all or pa...


Instruction: 总结这篇安全研究的主要观点

Input:
title:Blacklistable anonymous credentials: blocking misbehaving users without
ttps
author:Patrick P. Tsang and
Man Ho Au and
Apu Kapadia and
Sean W. Smith
Blacklistable Anonymous Credentials:
Blocking Misbehaving Users without TTPs
Patrick P. Tsang†, Man Ho Au§, Apu Kapadia†‡, Sean W. Smith†
†Department of Computer Science
Dartmouth College
Hanover, NH, USA
‡Institute for Security Technology Studies
Dartmouth College
Hanover, NH, USA
§Centre for Computer and Information Security Research
School of Computer Science and Software Engineering
University of Wollongong, Australia
{patrick, akapadia, sws}@cs.dartmouth.edu, mhaa456@uow.edu.au
ABSTRACT
Several credential systems have been proposed in which
users can authenticate to services anonymously.
Since
anonymity can give users the license to misbehave, some
variants allow the selective deanonymization (or linking)
of misbehaving users upon a complaint to a trusted third
party (TTP). The ability of the TTP to revoke a user’s pri-
vacy at any time, however, is too strong a punishment for
misbehavior. To limit the scope of deanonymization, sys-
tems such as “e-cash” have been proposed in which users are
deanonymized under only certain types of well-deﬁned mis-
behavior such as “double spending.” While useful in some
applications, it is not possible to generalize such techniques
to more subjective deﬁnitions of misbehavior.
We present the ﬁrst anonymous credential system in which
services can “blacklist” misbehaving users without contact-
ing a TTP. Since blacklisted users remain anonymous, mis-
behaviors can be judged subjectively without users fearing
arbitrary deanonymization by a TTP.
Categories and Subject Descriptors
K.6.5 [Operating Systems]: Security and Protection—
Authentication; E.3 [Data Encryption]: Public key cryp-
tosystems
General Terms
Algorithms, Security
Keywords
privacy,
anonymous blacklisting, revocation
anonymous authentication, user misbehavior,
Permission to make digital or hard copies of all or pa...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:Automated Classification and Analysis of Internet Malware
author:Michael Bailey and
Jon Oberheide and
Jon Andersen and
Zhuoqing Morley Mao and
Farnam Jahanian and
Jose Nazario
Automated Classiﬁcation and Analysis of
Internet Malware
Michael Bailey1, Jon Oberheide1, Jon Andersen1, Z. Morley Mao1,
Farnam Jahanian1,2, and Jose Nazario2
1 Electrical Engineering and Computer Science Department
{mibailey,jonojono,janderse,zmao,farnam}@umich.edu
University of Michigan
2 Arbor Networks
{farnam,jose}@arbor.net
Abstract. Numerous attacks, such as worms, phishing, and botnets,
threaten the availability of the Internet, the integrity of its hosts, and
the privacy of its users. A core element of defense against these attacks
is anti-virus (AV) software—a service that detects, removes, and charac-
terizes these threats. The ability of these products to successfully char-
acterize these threats has far-reaching eﬀects—from facilitating sharing
across organizations, to detecting the emergence of new threats, and as-
sessing risk in quarantine and cleanup. In this paper, we examine the
ability of existing host-based anti-virus products to provide semantically
meaningful information about the malicious software and tools (or mal-
ware) used by attackers. Using a large, recent collection of malware that
spans a variety of attack vectors (e.g., spyware, worms, spam), we show
that diﬀerent AV products characterize malware in ways that are incon-
sistent across AV products, incomplete across malware, and that fail to
be concise in their semantics. To address these limitations, we propose a
new classiﬁcation technique that describes malware behavior in terms of
system state changes (e.g., ﬁles written, processes created) rather than
in sequences or patterns of system calls. To address the sheer volume
of malware and diversity of its behavior, we provide a method for auto-
matically categorizing these proﬁles of malware into groups that reﬂect
similar classes of behaviors and demonst...


Instruction: 总结这篇安全研究的主要观点

Input:
title:Automated Classification and Analysis of Internet Malware
author:Michael Bailey and
Jon Oberheide and
Jon Andersen and
Zhuoqing Morley Mao and
Farnam Jahanian and
Jose Nazario
Automated Classiﬁcation and Analysis of
Internet Malware
Michael Bailey1, Jon Oberheide1, Jon Andersen1, Z. Morley Mao1,
Farnam Jahanian1,2, and Jose Nazario2
1 Electrical Engineering and Computer Science Department
{mibailey,jonojono,janderse,zmao,farnam}@umich.edu
University of Michigan
2 Arbor Networks
{farnam,jose}@arbor.net
Abstract. Numerous attacks, such as worms, phishing, and botnets,
threaten the availability of the Internet, the integrity of its hosts, and
the privacy of its users. A core element of defense against these attacks
is anti-virus (AV) software—a service that detects, removes, and charac-
terizes these threats. The ability of these products to successfully char-
acterize these threats has far-reaching eﬀects—from facilitating sharing
across organizations, to detecting the emergence of new threats, and as-
sessing risk in quarantine and cleanup. In this paper, we examine the
ability of existing host-based anti-virus products to provide semantically
meaningful information about the malicious software and tools (or mal-
ware) used by attackers. Using a large, recent collection of malware that
spans a variety of attack vectors (e.g., spyware, worms, spam), we show
that diﬀerent AV products characterize malware in ways that are incon-
sistent across AV products, incomplete across malware, and that fail to
be concise in their semantics. To address these limitations, we propose a
new classiﬁcation technique that describes malware behavior in terms of
system state changes (e.g., ﬁles written, processes created) rather than
in sequences or patterns of system calls. To address the sheer volume
of malware and diversity of its behavior, we provide a method for auto-
matically categorizing these proﬁles of malware into groups that reﬂect
similar classes of behaviors and demonst...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:Using an assurance case to support independent assessment of the transition
to a new GPS ground control system
author:Elisabeth A. Nguyen and
William S. Greenwell and
Myron Hecht
Using an Assurance Case to Support Independent Assessment of
the Transition to a New GPS Ground Control System
Elisabeth A. Nguyen1, William S. Greenwell1, Myron J. Hecht2
The Aerospace Corporation
1Chantilly, Virginia, USA;  2El Segundo, CA, USA
{enguyen, william.s.greenwell, myron.j.hecht}@aero.org
Abstract
We  describe  a  specific  application  of  assurance  cases  to
the  problem  of  ensuring  that  a  transition  from  a  legacy
system  to  its  replacement  will  not  compromise  mission
assurance objectives. The application in question was the
transition  of  the  Global  Positioning  System  (GPS)  to  a
new  ground-control  system.  The  transition,  which  took
place over five days, required uninterrupted control of the
GPS  satellite  constellation  while  control  was  transferred
from a 1970s-era mainframe to a distributed architecture.
We  created  an  assurance  case  so  that  the  procedural
documentation we had  could  be  restructured  into  a  form
amenable  to  analysis.  The  analysis  concluded  that  there
were no major hazards; this conclusion was validated by
a successful transition.
1. Introduction
On  September  14,  2007,  the  U.S.  Air  Force  replaced
the  ground-control  system  for  the  Global  Positioning
System  (GPS)  [1].  The  new  system,  known  as  the
Architecture  Evolution  Plan  (AEP),  replaced  a  legacy
control system (referred to as Legacy)  built  on  1970s-era
mainframe computers. Since GPS is used worldwide as  a
navigation  aid,  it  was  essential  that  the  transition  was
executed without disrupting the GPS navigation signals.
The  Air  Force  asked  The  Aerospace  Corporation  to
analyze the AEP transition plan from a mission assurance
perspective and document any risks that were discovered...


Instruction: 总结这篇安全研究的主要观点

Input:
title:Using an assurance case to support independent assessment of the transition
to a new GPS ground control system
author:Elisabeth A. Nguyen and
William S. Greenwell and
Myron Hecht
Using an Assurance Case to Support Independent Assessment of
the Transition to a New GPS Ground Control System
Elisabeth A. Nguyen1, William S. Greenwell1, Myron J. Hecht2
The Aerospace Corporation
1Chantilly, Virginia, USA;  2El Segundo, CA, USA
{enguyen, william.s.greenwell, myron.j.hecht}@aero.org
Abstract
We  describe  a  specific  application  of  assurance  cases  to
the  problem  of  ensuring  that  a  transition  from  a  legacy
system  to  its  replacement  will  not  compromise  mission
assurance objectives. The application in question was the
transition  of  the  Global  Positioning  System  (GPS)  to  a
new  ground-control  system.  The  transition,  which  took
place over five days, required uninterrupted control of the
GPS  satellite  constellation  while  control  was  transferred
from a 1970s-era mainframe to a distributed architecture.
We  created  an  assurance  case  so  that  the  procedural
documentation we had  could  be  restructured  into  a  form
amenable  to  analysis.  The  analysis  concluded  that  there
were no major hazards; this conclusion was validated by
a successful transition.
1. Introduction
On  September  14,  2007,  the  U.S.  Air  Force  replaced
the  ground-control  system  for  the  Global  Positioning
System  (GPS)  [1].  The  new  system,  known  as  the
Architecture  Evolution  Plan  (AEP),  replaced  a  legacy
control system (referred to as Legacy)  built  on  1970s-era
mainframe computers. Since GPS is used worldwide as  a
navigation  aid,  it  was  essential  that  the  transition  was
executed without disrupting the GPS navigation signals.
The  Air  Force  asked  The  Aerospace  Corporation  to
analyze the AEP transition plan from a mission assurance
perspective and document any risks that were discovered...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:Zoom on the Keystrokes: Exploiting Video Calls for Keystroke Inference
Attacks
author:Mohd Sabra and
Anindya Maiti and
Murtuza Jadliwala
Zoom on the Keystrokes: Exploiting
Video Calls for Keystroke Inference Attacks
Mohd Sabra
Anindya Maiti
University of Texas at San Antonio
University of Oklahoma
mohd.sabra@utsa.edu
am@ou.edu
Murtuza Jadliwala
University of Texas at San Antonio
murtuza.jadliwala@utsa.edu
Abstract—Due to recent world events, video calls have be-
come the new norm for both personal and professional remote
communication. However, if a participant in a video call is not
careful, he/she can reveal his/her private information to others
in the call. In this paper, we design and evaluate an attack
framework to infer one type of such private information from
the video stream of a call – keystrokes, i.e., text typed during the
call. We evaluate our video-based keystroke inference framework
using different experimental settings and parameters, including
different webcams, video resolutions, keyboards, clothing, and
backgrounds. Our relatively high keystroke inference accuracies
under commonly occurring and realistic settings highlight the
need for awareness and countermeasures against such attacks.
Consequently, we also propose and evaluate effective mitigation
techniques that can automatically protect users when they type
during a video call.
I.
INTRODUCTION
Catalyzed by the ubiquity of the Internet, audio-video call-
ing has become a mainstream method of remote communica-
tion [13]. The trend has recently seen a further boost due to the
COVID-19 pandemic [4], whereby audio-video calls became
the default medium for professionals to confer remotely and
for students to attend lectures from home. Nonetheless, audio-
video calls (often referred to as just video calls) should be
considered privacy sensitive as participants may have spoken
or displayed private information during the call. To protect
video calls from eavesdropping threats, secure video callin...


Instruction: 总结这篇安全研究的主要观点

Input:
title:Zoom on the Keystrokes: Exploiting Video Calls for Keystroke Inference
Attacks
author:Mohd Sabra and
Anindya Maiti and
Murtuza Jadliwala
Zoom on the Keystrokes: Exploiting
Video Calls for Keystroke Inference Attacks
Mohd Sabra
Anindya Maiti
University of Texas at San Antonio
University of Oklahoma
mohd.sabra@utsa.edu
am@ou.edu
Murtuza Jadliwala
University of Texas at San Antonio
murtuza.jadliwala@utsa.edu
Abstract—Due to recent world events, video calls have be-
come the new norm for both personal and professional remote
communication. However, if a participant in a video call is not
careful, he/she can reveal his/her private information to others
in the call. In this paper, we design and evaluate an attack
framework to infer one type of such private information from
the video stream of a call – keystrokes, i.e., text typed during the
call. We evaluate our video-based keystroke inference framework
using different experimental settings and parameters, including
different webcams, video resolutions, keyboards, clothing, and
backgrounds. Our relatively high keystroke inference accuracies
under commonly occurring and realistic settings highlight the
need for awareness and countermeasures against such attacks.
Consequently, we also propose and evaluate effective mitigation
techniques that can automatically protect users when they type
during a video call.
I.
INTRODUCTION
Catalyzed by the ubiquity of the Internet, audio-video call-
ing has become a mainstream method of remote communica-
tion [13]. The trend has recently seen a further boost due to the
COVID-19 pandemic [4], whereby audio-video calls became
the default medium for professionals to confer remotely and
for students to attend lectures from home. Nonetheless, audio-
video calls (often referred to as just video calls) should be
considered privacy sensitive as participants may have spoken
or displayed private information during the call. To protect
video calls from eavesdropping threats, secure video callin...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:POSTER: TLS Proxies: Friend or Foe?
author:Mark O'Neill and
Scott Ruoti and
Kent E. Seamons and
Daniel Zappala
Poster – TLS Proxies: Friend or Foe?
Mark O’Neill, Scott Ruoti, Kent Seamons, Daniel Zappala
Brigham Young University
Computer Science Department
mto@byu.edu, ruoti@isrl.byu.edu, seamons@cs.byu.edu, zappala@cs.byu.edu
Provo, UT 84602
ABSTRACT
The use of TLS proxies to intercept encrypted traﬃc is
controversial since the same mechanism can be used for both
benevolent purposes, such as protecting against malware, and
for malicious purposes, such as identity theft or warrantless
government surveillance. To understand the prevalence and
uses of these proxies, we build a TLS proxy measurement
tool and deploy it via a Google AdWords campaign. We
generate 2.9 million certiﬁcate tests and ﬁnd that 1 in 250
TLS connections are proxied. The majority of these proxies
appear to be benevolent, however we identify over 1,000
cases where three malware products are using this technology
nefariously. We also ﬁnd numerous instances of negligent
and duplicitous behavior, some of which degrade security for
users without their knowledge.
Categories and Subject Descriptors
C.2.0 [Computer-Communication Networks]: General
- Security and protection
Keywords
TLS proxy; measurement; man-in-the-middle attack
1.
INTRODUCTION
Communicating securely over the Internet requires authen-
ticating the identity of a website to establish trust. Web
browsers authenticate a site by validating a chain of trust
from the site’s certiﬁcate back to one of a set of trusted root
certiﬁcates. These certiﬁcates comprise the root store and
are typically bundled with the operating system or browser.
This validation system is currently being compromised by
the use of TLS proxies, which can act as a man-in-the-middle
(MitM) for TLS connections. Companies typically employ
TLS proxies for benevolent reasons, particularly to protect
intellectual property and to protect their network from in-
truders. Pers...


Instruction: 总结这篇安全研究的主要观点

Input:
title:POSTER: TLS Proxies: Friend or Foe?
author:Mark O'Neill and
Scott Ruoti and
Kent E. Seamons and
Daniel Zappala
Poster – TLS Proxies: Friend or Foe?
Mark O’Neill, Scott Ruoti, Kent Seamons, Daniel Zappala
Brigham Young University
Computer Science Department
mto@byu.edu, ruoti@isrl.byu.edu, seamons@cs.byu.edu, zappala@cs.byu.edu
Provo, UT 84602
ABSTRACT
The use of TLS proxies to intercept encrypted traﬃc is
controversial since the same mechanism can be used for both
benevolent purposes, such as protecting against malware, and
for malicious purposes, such as identity theft or warrantless
government surveillance. To understand the prevalence and
uses of these proxies, we build a TLS proxy measurement
tool and deploy it via a Google AdWords campaign. We
generate 2.9 million certiﬁcate tests and ﬁnd that 1 in 250
TLS connections are proxied. The majority of these proxies
appear to be benevolent, however we identify over 1,000
cases where three malware products are using this technology
nefariously. We also ﬁnd numerous instances of negligent
and duplicitous behavior, some of which degrade security for
users without their knowledge.
Categories and Subject Descriptors
C.2.0 [Computer-Communication Networks]: General
- Security and protection
Keywords
TLS proxy; measurement; man-in-the-middle attack
1.
INTRODUCTION
Communicating securely over the Internet requires authen-
ticating the identity of a website to establish trust. Web
browsers authenticate a site by validating a chain of trust
from the site’s certiﬁcate back to one of a set of trusted root
certiﬁcates. These certiﬁcates comprise the root store and
are typically bundled with the operating system or browser.
This validation system is currently being compromised by
the use of TLS proxies, which can act as a man-in-the-middle
(MitM) for TLS connections. Companies typically employ
TLS proxies for benevolent reasons, particularly to protect
intellectual property and to protect their network from in-
truders. Pers...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:Genoa TIE, Advanced Boundary Controller Experiment
author:Eric Monteith
Genoa TIE, Advanced Boundary Controller Experiment
Eric Monteith
NAI Labs, Network Associates Inc.
eric_monteith@nai.com
Abstract
This
in
describes
document
two  phases,
(TIE).  Achieved
experimentation
performed as part of the Genoa Technology Integration
Experiment
the
overarching  assertion  of  the  Genoa  TIE  was  that
boundary  controllers,  in  the  form  of  an  automated
guard,  could play  an  important  role  in  the  operational
success  of  Project  Genoa  [1].  Genoa,  an  ongoing
DARPA [2] research program, is focused on developing
a  prototype  decision  support  environment  for  the
National  Command  Authority,  and  is  intended  to
mitigate  potential  international  crises  early  in  their
development. In addition to protection from Information
Warfare  attacks  across  the  Internet  and  other  sources,
boundary  controllers  could  assist  the  Genoa  system  in
managing important aspects of information sharing, by
implementing  access  control  and  content  filtering  for
inter-enclave  transactions.  The  focus  of  this  paper
includes  experimentation  with  syntactic  and  Natural
Language  Processing
the  Genoa
environment, and the measurement of their effectiveness
in filtering inter-enclave transactions.
filters  within
Introduction
in
for
support  environment
Genoa  is  focused  on  developing  a  prototype
decision
the  National
Command  Authority  (NCA)  to  identify  and  mitigate
crisis  situations  early
their  development.  The
organizations  comprising  the  NCA  span  those  of
intelligence,  operations,  execution,  and  decision/policy
control. Illustrated in Figure 1, each enclave comprising
the  NCA  represents  a  homogeneous  entity.  They  are
often organizationally oriented and can be hierarchically
organized.    However,  for  any  enclave  to  conduct  the
activities  that  it  is  responsible  for,  the  staff  in  that
...


Instruction: 总结这篇安全研究的主要观点

Input:
title:Genoa TIE, Advanced Boundary Controller Experiment
author:Eric Monteith
Genoa TIE, Advanced Boundary Controller Experiment
Eric Monteith
NAI Labs, Network Associates Inc.
eric_monteith@nai.com
Abstract
This
in
describes
document
two  phases,
(TIE).  Achieved
experimentation
performed as part of the Genoa Technology Integration
Experiment
the
overarching  assertion  of  the  Genoa  TIE  was  that
boundary  controllers,  in  the  form  of  an  automated
guard,  could play  an  important  role  in  the  operational
success  of  Project  Genoa  [1].  Genoa,  an  ongoing
DARPA [2] research program, is focused on developing
a  prototype  decision  support  environment  for  the
National  Command  Authority,  and  is  intended  to
mitigate  potential  international  crises  early  in  their
development. In addition to protection from Information
Warfare  attacks  across  the  Internet  and  other  sources,
boundary  controllers  could  assist  the  Genoa  system  in
managing important aspects of information sharing, by
implementing  access  control  and  content  filtering  for
inter-enclave  transactions.  The  focus  of  this  paper
includes  experimentation  with  syntactic  and  Natural
Language  Processing
the  Genoa
environment, and the measurement of their effectiveness
in filtering inter-enclave transactions.
filters  within
Introduction
in
for
support  environment
Genoa  is  focused  on  developing  a  prototype
decision
the  National
Command  Authority  (NCA)  to  identify  and  mitigate
crisis  situations  early
their  development.  The
organizations  comprising  the  NCA  span  those  of
intelligence,  operations,  execution,  and  decision/policy
control. Illustrated in Figure 1, each enclave comprising
the  NCA  represents  a  homogeneous  entity.  They  are
often organizationally oriented and can be hierarchically
organized.    However,  for  any  enclave  to  conduct  the
activities  that  it  is  responsible  for,  the  staff  in  that
...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:Automatic Generation of Buffer Overflow Attack Signatures: An Approach
Based on Program Behavior Models
author:Zhenkai Liang and
R. Sekar
Automatic Generation of Buffer Overﬂow Attack Signatures:
An Approach Based on Program Behavior Models(cid:3)
Zhenkai Liang and R. Sekar
Department of Computer Science,
Stony Brook University, Stony Brook, NY 11794
fzliang, sekarg@cs.sunysb.edu
Abstract
Buffer overﬂows have become the most common target
for network-based attacks. They are also the primary mech-
anism used by worms and other forms of automated attacks.
Although many techniques have been developed to prevent
server compromises due to buffer overﬂows, these defenses
still lead to server crashes. When attacks occur repeat-
edly, as is common with automated attacks, these protec-
tion mechanisms lead to repeated restarts of the victim ap-
plication, rendering its service unavailable. To overcome
this problem, we develop a new approach that can learn
the characteristics of a particular attack, and ﬁlter out fu-
ture instances of the same attack or its variants. By doing
so, our approach signiﬁcantly increases the availability of
servers subjected to repeated attacks. The approach is fully
automatic, does not require source code, and has low run-
time overheads. In our experiments, it was effective against
most attacks, and did not produce any false positives.
1 Introduction
In the past few years, there has been an alarming increase
in automated attacks that are launched by worms or zom-
bies. A key characteristic of such automated attacks is that
they are repetitive, i.e., multiple instances of the same at-
tack may be launched against the same victim machine in
a quick succession. A vast majority of these automated at-
tacks are due to buffer overﬂows, which account for more
than three-quarters of the US CERT advisories in the last
few years. Current technology for defending against buffer
overﬂows uses some form of guarding [5, 7, 8] or ran-
domization [1, 2, 3,...


Instruction: 总结这篇安全研究的主要观点

Input:
title:Automatic Generation of Buffer Overflow Attack Signatures: An Approach
Based on Program Behavior Models
author:Zhenkai Liang and
R. Sekar
Automatic Generation of Buffer Overﬂow Attack Signatures:
An Approach Based on Program Behavior Models(cid:3)
Zhenkai Liang and R. Sekar
Department of Computer Science,
Stony Brook University, Stony Brook, NY 11794
fzliang, sekarg@cs.sunysb.edu
Abstract
Buffer overﬂows have become the most common target
for network-based attacks. They are also the primary mech-
anism used by worms and other forms of automated attacks.
Although many techniques have been developed to prevent
server compromises due to buffer overﬂows, these defenses
still lead to server crashes. When attacks occur repeat-
edly, as is common with automated attacks, these protec-
tion mechanisms lead to repeated restarts of the victim ap-
plication, rendering its service unavailable. To overcome
this problem, we develop a new approach that can learn
the characteristics of a particular attack, and ﬁlter out fu-
ture instances of the same attack or its variants. By doing
so, our approach signiﬁcantly increases the availability of
servers subjected to repeated attacks. The approach is fully
automatic, does not require source code, and has low run-
time overheads. In our experiments, it was effective against
most attacks, and did not produce any false positives.
1 Introduction
In the past few years, there has been an alarming increase
in automated attacks that are launched by worms or zom-
bies. A key characteristic of such automated attacks is that
they are repetitive, i.e., multiple instances of the same at-
tack may be launched against the same victim machine in
a quick succession. A vast majority of these automated at-
tacks are due to buffer overﬂows, which account for more
than three-quarters of the US CERT advisories in the last
few years. Current technology for defending against buffer
overﬂows uses some form of guarding [5, 7, 8] or ran-
domization [1, 2, 3,...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:Mind Your Keys? A Security Evaluation of Java Keystores
author:Riccardo Focardi and
Francesco Palmarini and
Marco Squarcina and
Graham Steel and
Mauro Tempesta
Mind Your Keys?
A Security Evaluation of Java Keystores
Riccardo Focardi
Universit`a Ca’ Foscari
Francesco Palmarini
Universit`a Ca’ Foscari
Marco Squarcina
Universit`a Ca’ Foscari
Yarix
Cryptosense
Graham Steel
Mauro Tempesta
Cryptosense
Universit`a Ca’ Foscari
Cryptosense
focardi@unive.it
palmarini@unive.it
squarcina@unive.it
graham@cryptosense.com
tempesta@unive.it
Abstract—Cryptography is complex and variegate and re-
quires to combine different algorithms and mechanisms in non-
trivial ways. This complexity is often source of vulnerabilities.
Secure key management is one of the most critical aspects,
since leaking a cryptographic key vanishes any advantage of
using cryptography. In this paper we analyze Java keystores,
the standard way to manage and securely store keys in Java
applications. We consider seven keystore implementations from
Oracle JDK and Bouncy Castle, a widespread cryptographic
library. We describe, in detail, how the various keystores enforce
conﬁdentiality and integrity of the stored keys through password-
based cryptography and we show that many of the implementa-
tions do not adhere to state-of-the-art cryptographic standards.
We investigate the resistance to ofﬂine attacks and we show that,
for non-compliant keystores, brute-forcing can be up to three
orders of magnitude faster with respect to the most compliant
keystore. Additionally, when an attacker can tamper with the
keystore ﬁle, some implementations are vulnerable to denial of
service attacks or, in the worst case, arbitrary code execution.
Finally we discuss the ﬁxes implemented by Oracle and Bouncy
Castle developers following our responsible disclosure.
I.
INTRODUCTION
Cryptography is a fundamental technology for IT security.
Even if there are well established standards for cryptographic
operations, cryptography is com...


Instruction: 总结这篇安全研究的主要观点

Input:
title:Mind Your Keys? A Security Evaluation of Java Keystores
author:Riccardo Focardi and
Francesco Palmarini and
Marco Squarcina and
Graham Steel and
Mauro Tempesta
Mind Your Keys?
A Security Evaluation of Java Keystores
Riccardo Focardi
Universit`a Ca’ Foscari
Francesco Palmarini
Universit`a Ca’ Foscari
Marco Squarcina
Universit`a Ca’ Foscari
Yarix
Cryptosense
Graham Steel
Mauro Tempesta
Cryptosense
Universit`a Ca’ Foscari
Cryptosense
focardi@unive.it
palmarini@unive.it
squarcina@unive.it
graham@cryptosense.com
tempesta@unive.it
Abstract—Cryptography is complex and variegate and re-
quires to combine different algorithms and mechanisms in non-
trivial ways. This complexity is often source of vulnerabilities.
Secure key management is one of the most critical aspects,
since leaking a cryptographic key vanishes any advantage of
using cryptography. In this paper we analyze Java keystores,
the standard way to manage and securely store keys in Java
applications. We consider seven keystore implementations from
Oracle JDK and Bouncy Castle, a widespread cryptographic
library. We describe, in detail, how the various keystores enforce
conﬁdentiality and integrity of the stored keys through password-
based cryptography and we show that many of the implementa-
tions do not adhere to state-of-the-art cryptographic standards.
We investigate the resistance to ofﬂine attacks and we show that,
for non-compliant keystores, brute-forcing can be up to three
orders of magnitude faster with respect to the most compliant
keystore. Additionally, when an attacker can tamper with the
keystore ﬁle, some implementations are vulnerable to denial of
service attacks or, in the worst case, arbitrary code execution.
Finally we discuss the ﬁxes implemented by Oracle and Bouncy
Castle developers following our responsible disclosure.
I.
INTRODUCTION
Cryptography is a fundamental technology for IT security.
Even if there are well established standards for cryptographic
operations, cryptography is com...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:On the Safety and Efficiency of Virtual Firewall Elasticity Control
author:Juan Deng and
Hongda Li and
Hongxin Hu and
Kuang-Ching Wang and
Gail-Joon Ahn and
Ziming Zhao and
Wonkyu Han
On the Safety and Efﬁciency of
Virtual Firewall Elasticity Control
Juan Deng†∗, Hongda Li†∗, Hongxin Hu†, Kuang-Ching Wang†, Gail-Joon Ahn‡, Ziming Zhao‡, and Wonkyu Han‡
{jdeng, hongdal, hongxih, kwang}@clemson.edu
† Clemson University
‡Arizona State University
{gahn, zzhao30, iamhwk}@asu.edu
Abstract—Traditional hardware-based ﬁrewall appliances are
placed at ﬁxed locations with ﬁxed capacity. Such nature makes
them difﬁcult to protect today’s prevailing virtualized environ-
ments. Two emerging networking paradigms, Network Function
Virtualization (NFV) and Software-Deﬁned Networking (SDN),
offer the potential to address these limitations. NFV envisions
to implement ﬁrewall function as software instance (a.k.a virtual
ﬁrewall). Virtual ﬁrewalls provide great ﬂexibility and elasticity,
which are necessary to protect virtualized environments. In
this paper, we propose to build an innovative virtual ﬁrewall
controller, VFW Controller, to enable safe, efﬁcient and cost-
effective virtual ﬁrewall elasticity control. VFW Controller
addresses four key challenges with respect to semantic consistency,
correct ﬂow update, buffer overﬂow avoidance, and optimal scaling
in virtual ﬁrewall scaling. To demonstrate the feasibility of our ap-
proach, we implement the core components of VFW Controller
on top of NFV and SDN environments. Our experimental results
demonstrate that VFW Controller is efﬁcient to provide safe
elasticity control of virtual ﬁrewalls.
I.
INTRODUCTION
Firewall is the most critical and widely deployed network
security function that protects networks against suspicious
trafﬁc and unauthorized access. Traditional hardware-based
ﬁrewalls are often placed at ﬁxed network entry points and
have a constant capacity with respect to the maximum amount
of trafﬁc they can handle per ...


Instruction: 总结这篇安全研究的主要观点

Input:
title:On the Safety and Efficiency of Virtual Firewall Elasticity Control
author:Juan Deng and
Hongda Li and
Hongxin Hu and
Kuang-Ching Wang and
Gail-Joon Ahn and
Ziming Zhao and
Wonkyu Han
On the Safety and Efﬁciency of
Virtual Firewall Elasticity Control
Juan Deng†∗, Hongda Li†∗, Hongxin Hu†, Kuang-Ching Wang†, Gail-Joon Ahn‡, Ziming Zhao‡, and Wonkyu Han‡
{jdeng, hongdal, hongxih, kwang}@clemson.edu
† Clemson University
‡Arizona State University
{gahn, zzhao30, iamhwk}@asu.edu
Abstract—Traditional hardware-based ﬁrewall appliances are
placed at ﬁxed locations with ﬁxed capacity. Such nature makes
them difﬁcult to protect today’s prevailing virtualized environ-
ments. Two emerging networking paradigms, Network Function
Virtualization (NFV) and Software-Deﬁned Networking (SDN),
offer the potential to address these limitations. NFV envisions
to implement ﬁrewall function as software instance (a.k.a virtual
ﬁrewall). Virtual ﬁrewalls provide great ﬂexibility and elasticity,
which are necessary to protect virtualized environments. In
this paper, we propose to build an innovative virtual ﬁrewall
controller, VFW Controller, to enable safe, efﬁcient and cost-
effective virtual ﬁrewall elasticity control. VFW Controller
addresses four key challenges with respect to semantic consistency,
correct ﬂow update, buffer overﬂow avoidance, and optimal scaling
in virtual ﬁrewall scaling. To demonstrate the feasibility of our ap-
proach, we implement the core components of VFW Controller
on top of NFV and SDN environments. Our experimental results
demonstrate that VFW Controller is efﬁcient to provide safe
elasticity control of virtual ﬁrewalls.
I.
INTRODUCTION
Firewall is the most critical and widely deployed network
security function that protects networks against suspicious
trafﬁc and unauthorized access. Traditional hardware-based
ﬁrewalls are often placed at ﬁxed network entry points and
have a constant capacity with respect to the maximum amount
of trafﬁc they can handle per ...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:Detecting Third-Party Addresses in Traceroute Traces with IP Timestamp
Option
author:Pietro Marchetta and
Walter de Donato and
Antonio Pescapè
Detecting Third-Party Addresses
in Traceroute Traces with IP Timestamp Option
Pietro Marchetta, Walter de Donato, and Antonio Pescap´e
{pietro.marchetta,walter.dedonato,pescape}@unina.it
University of Napoli Federico II Italy
Abstract. Traceroute is one of the most famous and widely adopted di-
agnostic tool for computer networks. Although traceroute is often used
to infer links between Autonomous Systems (ASes), the presence of the
so-called third-party (TP) addresses may induce the inference of false
AS-level links. In this paper, we propose a novel active probing tech-
nique based on the IP timestamp option able to identify TP addresses.
For evaluating both the applicability and the utility of the proposed
technique, we perform a large-scale measurement campaign targeting –
from multiple vantage points – more than 327K destinations belonging
to about 14K ASes. The results show how TP addresses are very com-
mon and aﬀect about 17% of AS-level links extracted from traceroute
traces. Compared to a previously proposed heuristic method, our tech-
nique allows to identify many more TP addresses and to re-interpret part
of its results.
1
Introduction
An accurate knowledge of the Internet topology is essential for a deep under-
standing of such a complex and ever-evolving system [7, 11, 19, 20]. In the last
decade many attempts have been done to overcome the incompleteness of BGP-
derived AS-level topologies [12] using traceroute [4, 8, 13]. However, traceroute
is known to be inaccurate and to induce errors when its results are used to infer
the Internet topology [15, 17, 27].
One source of inaccuracy is represented by the so called third-party (TP)
addresses [14, 18], i.e. addresses associated to interfaces which are not actually
traversed by the IP packets sent toward the traceroute destination. While several
other causes...


Instruction: 总结这篇安全研究的主要观点

Input:
title:Detecting Third-Party Addresses in Traceroute Traces with IP Timestamp
Option
author:Pietro Marchetta and
Walter de Donato and
Antonio Pescapè
Detecting Third-Party Addresses
in Traceroute Traces with IP Timestamp Option
Pietro Marchetta, Walter de Donato, and Antonio Pescap´e
{pietro.marchetta,walter.dedonato,pescape}@unina.it
University of Napoli Federico II Italy
Abstract. Traceroute is one of the most famous and widely adopted di-
agnostic tool for computer networks. Although traceroute is often used
to infer links between Autonomous Systems (ASes), the presence of the
so-called third-party (TP) addresses may induce the inference of false
AS-level links. In this paper, we propose a novel active probing tech-
nique based on the IP timestamp option able to identify TP addresses.
For evaluating both the applicability and the utility of the proposed
technique, we perform a large-scale measurement campaign targeting –
from multiple vantage points – more than 327K destinations belonging
to about 14K ASes. The results show how TP addresses are very com-
mon and aﬀect about 17% of AS-level links extracted from traceroute
traces. Compared to a previously proposed heuristic method, our tech-
nique allows to identify many more TP addresses and to re-interpret part
of its results.
1
Introduction
An accurate knowledge of the Internet topology is essential for a deep under-
standing of such a complex and ever-evolving system [7, 11, 19, 20]. In the last
decade many attempts have been done to overcome the incompleteness of BGP-
derived AS-level topologies [12] using traceroute [4, 8, 13]. However, traceroute
is known to be inaccurate and to induce errors when its results are used to infer
the Internet topology [15, 17, 27].
One source of inaccuracy is represented by the so called third-party (TP)
addresses [14, 18], i.e. addresses associated to interfaces which are not actually
traversed by the IP packets sent toward the traceroute destination. While several
other causes...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:WIND: Workload-Aware INtrusion Detection
author:Sushant Sinha and
Farnam Jahanian and
Jignesh M. Patel
WIND: Workload-Aware INtrusion Detection
Sushant Sinha, Farnam Jahanian, and Jignesh M. Patel
Electrical Engineering and Computer Science,
University of Michigan,
Ann Arbor, MI-48109
{sushant, farnam, jignesh}@umich.edu
Abstract. Intrusion detection and prevention systems have become es-
sential to the protection of critical networks across the Internet. Widely
deployed IDS and IPS systems are based around a database of known ma-
licious signatures. This database is growing quickly while at the same time
the signatures are getting more complex. These trends place additional
performance requirements on the rule-matching engine inside IDSs and
IPSs, which check each signature against an incoming packet. Existing
approaches to signature evaluation apply statically-deﬁned optimizations
that do not take into account the network in which the IDS or IPS is de-
ployed or the characteristics of the signature database. We argue that for
higher performance, IDS and IPS systems should adapt according to the
workload, which includes the set of input signatures and the network traﬃc
characteristics. To demonstrate this idea, we have developed an adaptive
algorithm that systematically proﬁles attack signatures and network traf-
ﬁc to generate a high performance and memory-eﬃcient packet inspection
strategy. We have implemented our idea by building two distinct compo-
nents over Snort: a proﬁler that analyzes the input rules and the observed
network traﬃc to produce a packet inspection strategy, and an evaluation
engine that pre-processes rules according to the strategy and evaluates
incoming packets to determine the set of applicable signatures. We have
conducted an extensive evaluation of our workload-aware Snort implemen-
tation on a collection of publicly available datasets and on live traﬃc from
a border router at a large university network. Our evaluation shows that
th...


Instruction: 总结这篇安全研究的主要观点

Input:
title:WIND: Workload-Aware INtrusion Detection
author:Sushant Sinha and
Farnam Jahanian and
Jignesh M. Patel
WIND: Workload-Aware INtrusion Detection
Sushant Sinha, Farnam Jahanian, and Jignesh M. Patel
Electrical Engineering and Computer Science,
University of Michigan,
Ann Arbor, MI-48109
{sushant, farnam, jignesh}@umich.edu
Abstract. Intrusion detection and prevention systems have become es-
sential to the protection of critical networks across the Internet. Widely
deployed IDS and IPS systems are based around a database of known ma-
licious signatures. This database is growing quickly while at the same time
the signatures are getting more complex. These trends place additional
performance requirements on the rule-matching engine inside IDSs and
IPSs, which check each signature against an incoming packet. Existing
approaches to signature evaluation apply statically-deﬁned optimizations
that do not take into account the network in which the IDS or IPS is de-
ployed or the characteristics of the signature database. We argue that for
higher performance, IDS and IPS systems should adapt according to the
workload, which includes the set of input signatures and the network traﬃc
characteristics. To demonstrate this idea, we have developed an adaptive
algorithm that systematically proﬁles attack signatures and network traf-
ﬁc to generate a high performance and memory-eﬃcient packet inspection
strategy. We have implemented our idea by building two distinct compo-
nents over Snort: a proﬁler that analyzes the input rules and the observed
network traﬃc to produce a packet inspection strategy, and an evaluation
engine that pre-processes rules according to the strategy and evaluates
incoming packets to determine the set of applicable signatures. We have
conducted an extensive evaluation of our workload-aware Snort implemen-
tation on a collection of publicly available datasets and on live traﬃc from
a border router at a large university network. Our evaluation shows that
th...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 总结这篇安全研究的主要观点

Input:
title:A statistical approach to botnet virulence estimation
author:Julian L. Rrushi and
Ehsan Mokhtari and
Ali A. Ghorbani
A Statistical Approach to Botnet Virulence Estimation
Julian Rrushi, Ehsan Mokhtari, Ali A. Ghorbani
University of New Brunswick, Fredericton, NB, E3B 5A3, Canada
{jrrushi, ehsan.mokhtari, ghorbani}@unb.ca
ABSTRACT
Network vulnerability and infection rates are key factors
in mathematical models of botnet propagation dynamics,
which in turn are increasingly deemed to have potential for
playing an important role in various botnet mitigation s-
trategies. In this paper we discuss research that draws on
epidemiological models in biology in order to solve the prob-
lem of how to estimate network vulnerability and infection
rates in relation to a botnet. This research provides bot-
net propagation models with concrete measures that make
those models practical, and hence employable in mitigation
of real world botnets in a timely fashion. The proposed es-
timation approach is based on random sampling and follows
a novel application of statistical learning and inference in a
botnet-versus-network setting. We have implemented this
research in the Matlab programming language, and thus in
the paper we also discuss an experimental validation of the
eﬀectiveness of this research with respect to realistically sim-
ulated botnet propagation dynamics in a GTNetS network
simulation platform.
Categories and Subject Descriptors
C.2.0 [Computer-Communication Network]: Security
and Protection
General Terms
Security
Keywords
Computer network security, stochastic processes, statistical
learning and inference.
1.
INTRODUCTION
The tactical design of botnets, i.e. networks of compro-
mised nodes referred to as bots, which are controlled by
remote attackers known as botmasters, has been evolving
towards higher degrees of sophistication. Wang et al. [7]
Permission to make digital or hard copies of all or part of this work for
personal or classroom use is granted without fee...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:A Bi-Criteria Scheduling Heuristic for Distributed Embedded Systems
under Reliability and Real-Time Constraints
author:Ismail Assayad and
Alain Girault and
Hamoudi Kalla
A Bi-Criteria Scheduling Heuristic for Distributed Embedded Systems under
Reliability and Real-Time Constraints
Ismail Assayad
VERIMAG, 2 av. de Vignate,
38610 Gières, France.
Ismail.Assayad@imag.fr
Alain Girault
INRIA, 655 av. de l’Europe
3833 Saint-Ismier, Cedex - France
Alain.Girault@inrialpes.fr
Hamoudi Kalla
INRIA, 655 av. de l’Europe
3833 Saint-Ismier, Cedex - France
Hamoudi.Kalla@inrialpes.fr
Abstract
Multi-criteria scheduling problems, involving optimiza-
tion of more than one criterion, are subject to a growing
interest. In this paper, we present a new bi-criteria schedul-
ing heuristic for scheduling data-ﬂow graphs of operations
onto parallel heterogeneous architectures according to two
criteria: ﬁrst the minimization of the schedule length, and
second the maximization of the system reliability. Reliabil-
ity is deﬁned as the probability that none of the system com-
ponents will fail while processing. The proposed algorithm
is a list scheduling heuristics, based on a bi-criteria com-
promise function that introduces priority between the op-
erations to be scheduled, and that chooses on what subset
of processors they should be scheduled. It uses the active
replication of operations to improve the reliability. If the
system reliability or the schedule length requirements are
not met, then a parameter of the compromise function can
be changed and the algorithm re-executed. This process is
iterated until both requirements are met.
Keywords: Distributed real-time systems, safety-critical
systems, reliability, multi-criteria scheduling, heteroge-
neous systems, active software replication.
1 Introduction
Distributed systems are being increasingly used in criti-
cal real-time applications, such as avionics, air trafﬁc con-
trol, autopilot systems, and nuclear plant control, in which
the co...


Instruction: 总结这篇安全研究的主要观点

Input:
title:A Bi-Criteria Scheduling Heuristic for Distributed Embedded Systems
under Reliability and Real-Time Constraints
author:Ismail Assayad and
Alain Girault and
Hamoudi Kalla
A Bi-Criteria Scheduling Heuristic for Distributed Embedded Systems under
Reliability and Real-Time Constraints
Ismail Assayad
VERIMAG, 2 av. de Vignate,
38610 Gières, France.
Ismail.Assayad@imag.fr
Alain Girault
INRIA, 655 av. de l’Europe
3833 Saint-Ismier, Cedex - France
Alain.Girault@inrialpes.fr
Hamoudi Kalla
INRIA, 655 av. de l’Europe
3833 Saint-Ismier, Cedex - France
Hamoudi.Kalla@inrialpes.fr
Abstract
Multi-criteria scheduling problems, involving optimiza-
tion of more than one criterion, are subject to a growing
interest. In this paper, we present a new bi-criteria schedul-
ing heuristic for scheduling data-ﬂow graphs of operations
onto parallel heterogeneous architectures according to two
criteria: ﬁrst the minimization of the schedule length, and
second the maximization of the system reliability. Reliabil-
ity is deﬁned as the probability that none of the system com-
ponents will fail while processing. The proposed algorithm
is a list scheduling heuristics, based on a bi-criteria com-
promise function that introduces priority between the op-
erations to be scheduled, and that chooses on what subset
of processors they should be scheduled. It uses the active
replication of operations to improve the reliability. If the
system reliability or the schedule length requirements are
not met, then a parameter of the compromise function can
be changed and the algorithm re-executed. This process is
iterated until both requirements are met.
Keywords: Distributed real-time systems, safety-critical
systems, reliability, multi-criteria scheduling, heteroge-
neous systems, active software replication.
1 Introduction
Distributed systems are being increasingly used in criti-
cal real-time applications, such as avionics, air trafﬁc con-
trol, autopilot systems, and nuclear plant control, in which
the co...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:16th Workshop on Privacy in the Electronic Society (WPES 2017)
author:Adam J. Lee
16th Workshop on Privacy in the Electronic Society (WPES 2017)
Adam J. Lee
University of Pittsburgh
Pittsburgh, Pennsylvania
adamlee@cs.pitt.edu
ABSTRACT
The 16th Workshop on Privacy in the Electronic Society was held
on October 30, 2017 in conjunction with the 24th ACM Conference
on Computer and Communications Security (CCS 2017) in Dallas,
Texas, USA. The goal of WPES is to bring together a diverse group
of privacy researchers and practitioners to discuss privacy problems
that arise in global, interconnected societies, and potential solutions
to them. The program for the workshop contains 14 full papers
and 5 short papers selected from a total of 56 submissions. Specific
topics covered in the program include but are not limited to: de-
anonymization, fingerprinting and profiling, location privacy, and
private memory systems.
CCS CONCEPTS
• Security and privacy;
KEYWORDS
Privacy protection
ACM Reference Format:
Adam J. Lee. 2017. 16th Workshop on Privacy in the Electronic Society
(WPES 2017). In Proceedings of CCS ’17. ACM, New York, NY, USA, Article 4,
2 pages. https://doi.org/10.1145/3133956.3137047
1 INTRODUCTION
The increased power and interconnectivity of computer systems
available today create the ability to store and process large amounts
of data, resulting in networked information accessible from any-
where at any time. It is becoming easier to collect, exchange, access,
process, and link information. This global scenario has inevitably
resulted in an increasing degree of awareness with respect to pri-
vacy. Privacy issues have been the subject of public debates, and
the need for privacy-aware policies, regulations, and techniques
has been widely recognized.
The goal of this workshop is to discuss the problems of privacy
in global interconnected societies, as well as possible solutions to
these types of problems. The workshop seeks submissions from
academia and industry ...


Instruction: 总结这篇安全研究的主要观点

Input:
title:16th Workshop on Privacy in the Electronic Society (WPES 2017)
author:Adam J. Lee
16th Workshop on Privacy in the Electronic Society (WPES 2017)
Adam J. Lee
University of Pittsburgh
Pittsburgh, Pennsylvania
adamlee@cs.pitt.edu
ABSTRACT
The 16th Workshop on Privacy in the Electronic Society was held
on October 30, 2017 in conjunction with the 24th ACM Conference
on Computer and Communications Security (CCS 2017) in Dallas,
Texas, USA. The goal of WPES is to bring together a diverse group
of privacy researchers and practitioners to discuss privacy problems
that arise in global, interconnected societies, and potential solutions
to them. The program for the workshop contains 14 full papers
and 5 short papers selected from a total of 56 submissions. Specific
topics covered in the program include but are not limited to: de-
anonymization, fingerprinting and profiling, location privacy, and
private memory systems.
CCS CONCEPTS
• Security and privacy;
KEYWORDS
Privacy protection
ACM Reference Format:
Adam J. Lee. 2017. 16th Workshop on Privacy in the Electronic Society
(WPES 2017). In Proceedings of CCS ’17. ACM, New York, NY, USA, Article 4,
2 pages. https://doi.org/10.1145/3133956.3137047
1 INTRODUCTION
The increased power and interconnectivity of computer systems
available today create the ability to store and process large amounts
of data, resulting in networked information accessible from any-
where at any time. It is becoming easier to collect, exchange, access,
process, and link information. This global scenario has inevitably
resulted in an increasing degree of awareness with respect to pri-
vacy. Privacy issues have been the subject of public debates, and
the need for privacy-aware policies, regulations, and techniques
has been widely recognized.
The goal of this workshop is to discuss the problems of privacy
in global interconnected societies, as well as possible solutions to
these types of problems. The workshop seeks submissions from
academia and industry ...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:EpicRec: Towards Practical Differentially Private Framework for Personalized
Recommendation
author:Yilin Shen and
Hongxia Jin
EpicRec: Towards Practical Differentially Private
Framework for Personalized Recommendation
Yilin Shen
Samsung Research America
665 Clyde Ave, Mountain View, CA 94043
yilin.shen@samsung.com
Hongxia Jin
Samsung Research America
665 Clyde Ave, Mountain View, CA 94043
hongxia.jin@samsung.com
ABSTRACT
Recommender systems typically require users’ history data
to provide a list of recommendations and such recommen-
dations usually reside on the cloud/server. However, the
release of such private data to the cloud has been shown to
put users at risk. It is highly desirable to provide users high-
quality personalized services while respecting their privacy.
In this paper, we develop the ﬁrst Enhanced Privacy-built-
In Client for Personalized Recommendation (EpicRec) sys-
tem that performs the data perturbation on the client side
to protect users’ privacy. Our system needs no assumption
of trusted server and no change on the recommendation al-
gorithms on the server side; and needs minimum user inter-
action in their preferred manner, which makes our solution
ﬁt very well into real world practical use.
The design of EpicRec system incorporates three main
modules: (1) usable privacy control interface that enables
two user preferred privacy controls, overall and category-
based controls, in the way they understand; (2) user privacy
level quantiﬁcation that automatically quantiﬁes user pri-
vacy concern level from these user understandable inputs;
(3) lightweight data perturbation algorithm that perturbs
user private data with provable guarantees on both diﬀeren-
tial privacy and data utility.
Using large-scale real world datasets, we show that, for
both overall and category-based privacy controls, EpicRec
performs best with respect to both perturbation quality and
personalized recommendation, with negligible computational
overhead. Therefore, EpicR...


Instruction: 总结这篇安全研究的主要观点

Input:
title:EpicRec: Towards Practical Differentially Private Framework for Personalized
Recommendation
author:Yilin Shen and
Hongxia Jin
EpicRec: Towards Practical Differentially Private
Framework for Personalized Recommendation
Yilin Shen
Samsung Research America
665 Clyde Ave, Mountain View, CA 94043
yilin.shen@samsung.com
Hongxia Jin
Samsung Research America
665 Clyde Ave, Mountain View, CA 94043
hongxia.jin@samsung.com
ABSTRACT
Recommender systems typically require users’ history data
to provide a list of recommendations and such recommen-
dations usually reside on the cloud/server. However, the
release of such private data to the cloud has been shown to
put users at risk. It is highly desirable to provide users high-
quality personalized services while respecting their privacy.
In this paper, we develop the ﬁrst Enhanced Privacy-built-
In Client for Personalized Recommendation (EpicRec) sys-
tem that performs the data perturbation on the client side
to protect users’ privacy. Our system needs no assumption
of trusted server and no change on the recommendation al-
gorithms on the server side; and needs minimum user inter-
action in their preferred manner, which makes our solution
ﬁt very well into real world practical use.
The design of EpicRec system incorporates three main
modules: (1) usable privacy control interface that enables
two user preferred privacy controls, overall and category-
based controls, in the way they understand; (2) user privacy
level quantiﬁcation that automatically quantiﬁes user pri-
vacy concern level from these user understandable inputs;
(3) lightweight data perturbation algorithm that perturbs
user private data with provable guarantees on both diﬀeren-
tial privacy and data utility.
Using large-scale real world datasets, we show that, for
both overall and category-based privacy controls, EpicRec
performs best with respect to both perturbation quality and
personalized recommendation, with negligible computational
overhead. Therefore, EpicR...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:Security Namespace: Making Linux Security Frameworks Available to
Containers
author:Yuqiong Sun and
David Safford and
Mimi Zohar and
Dimitrios Pendarakis and
Zhongshu Gu and
Trent Jaeger
Security Namespace: Making Linux Security
Frameworks Available to Containers
Yuqiong Sun, Symantec Research Labs; David Safford, GE Global Research;
Mimi Zohar, Dimitrios Pendarakis, and Zhongshu Gu, IBM Research;
Trent Jaeger, Pennsylvania State University
https://www.usenix.org/conference/usenixsecurity18/presentation/sun
This paper is included in the Proceedings of the
27th USENIX Security Symposium.
August 15–17, 2018 • Baltimore, MD, USA
978-1-939133-04-5
Open access to the Proceedings of the 27th USENIX Security Symposium is sponsored by USENIX.Security Namespace : Making Linux Security
Frameworks Available to Containers
Yuqiong Sun
Symantec Research Labs
David Safford
GE Global Research
Mimi Zohar
IBM Research
Dimitrios Pendarakis
IBM Research
Zhongshu Gu
IBM Research
Trent Jaeger
Pennsylvania State University
Abstract
1
Introduction
Lightweight virtualization (i.e., containers) offers a vir-
tual host environment for applications without the need
for a separate kernel, enabling better resource utiliza-
tion and improved efﬁciency. However, the shared ker-
nel also prevents containers from taking advantage of se-
curity features that are available to traditional VMs and
hosts. Containers cannot apply local policies to gov-
ern integrity measurement, code execution, mandatory
access control, etc.
to prevent application-speciﬁc se-
curity problems. Changes have been proposed to make
kernel security mechanisms available to containers, but
such changes are often adhoc and expose the challenges
of trusting containers to make security decisions without
compromising host system or other containers. In this
paper, we propose security namespaces, a kernel abstrac-
tion that enables containers to have an autonomous con-
trol over their security. The security namespace rela...


Instruction: 总结这篇安全研究的主要观点

Input:
title:Security Namespace: Making Linux Security Frameworks Available to
Containers
author:Yuqiong Sun and
David Safford and
Mimi Zohar and
Dimitrios Pendarakis and
Zhongshu Gu and
Trent Jaeger
Security Namespace: Making Linux Security
Frameworks Available to Containers
Yuqiong Sun, Symantec Research Labs; David Safford, GE Global Research;
Mimi Zohar, Dimitrios Pendarakis, and Zhongshu Gu, IBM Research;
Trent Jaeger, Pennsylvania State University
https://www.usenix.org/conference/usenixsecurity18/presentation/sun
This paper is included in the Proceedings of the
27th USENIX Security Symposium.
August 15–17, 2018 • Baltimore, MD, USA
978-1-939133-04-5
Open access to the Proceedings of the 27th USENIX Security Symposium is sponsored by USENIX.Security Namespace : Making Linux Security
Frameworks Available to Containers
Yuqiong Sun
Symantec Research Labs
David Safford
GE Global Research
Mimi Zohar
IBM Research
Dimitrios Pendarakis
IBM Research
Zhongshu Gu
IBM Research
Trent Jaeger
Pennsylvania State University
Abstract
1
Introduction
Lightweight virtualization (i.e., containers) offers a vir-
tual host environment for applications without the need
for a separate kernel, enabling better resource utiliza-
tion and improved efﬁciency. However, the shared ker-
nel also prevents containers from taking advantage of se-
curity features that are available to traditional VMs and
hosts. Containers cannot apply local policies to gov-
ern integrity measurement, code execution, mandatory
access control, etc.
to prevent application-speciﬁc se-
curity problems. Changes have been proposed to make
kernel security mechanisms available to containers, but
such changes are often adhoc and expose the challenges
of trusting containers to make security decisions without
compromising host system or other containers. In this
paper, we propose security namespaces, a kernel abstrac-
tion that enables containers to have an autonomous con-
trol over their security. The security namespace rela...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:Platform-Oblivious Anti-Spam Gateway
author:Yihe Zhang and
Xu Yuan and
Nian-Feng Tzeng
Platform-Oblivious Anti-Spam Gateway
Yihe Zhang
yihe.zhang1@louisiana.edu
University of Louisiana at Lafayette
Lafayette, LA, USA
University of Louisiana at Lafayette
University of Louisiana at Lafayette
Nian-Feng Tzeng
tzeng@louisiana.edu
Lafayette, LA, USA
Xu Yuan∗
xu.yuan@louisiana.edu
Lafayette, LA, USA
ABSTRACT
This paper addresses a novel anti-spam gateway targeting multiple
linguistic-based social platforms to expose the outlier property of
their spam messages uniformly for effective detection. Instead of la-
beling ground truth datasets and extracting key features, which are
labor-intensive and time-consuming, we start with coarsely mining
seed corpora of spams and hams from the target data (aiming for
spam classification), before reconstructing them as the reference.
To catch each word’s rich information in the semantic and syntac-
tic perspectives, we then leverage the natural language processing
(NLP) model to embed each word into the high-dimensional vec-
tor space and use a neural network to train a spam word model.
After that, each message is encoded by using the predicted spam
scores from this model for all included stem words. The encoded
messages are processed by the prominent outlier techniques to pro-
duce their respective scores, allowing us to rank them for making
the outlier visible. Our solution is unsupervised, without relying
on specifics of any platform or dataset, to be platform-oblivious.
Through extensive experiments, our solution is demonstrated to
expose spammers’ outlier characteristics effectively, outperform
all examined unsupervised methods in almost all metrics, and may
even better supervised counterparts.
CCS CONCEPTS
• Security and privacy → Web application security; Network
security; Intrusion/anomaly detection and malware mitigation.
KEYWORDS
Anti-Spam; Unsupervised; Outlier Detection
ACM Reference Format:
Yihe Zhang, Xu Yuan, and Nian...


Instruction: 总结这篇安全研究的主要观点

Input:
title:Platform-Oblivious Anti-Spam Gateway
author:Yihe Zhang and
Xu Yuan and
Nian-Feng Tzeng
Platform-Oblivious Anti-Spam Gateway
Yihe Zhang
yihe.zhang1@louisiana.edu
University of Louisiana at Lafayette
Lafayette, LA, USA
University of Louisiana at Lafayette
University of Louisiana at Lafayette
Nian-Feng Tzeng
tzeng@louisiana.edu
Lafayette, LA, USA
Xu Yuan∗
xu.yuan@louisiana.edu
Lafayette, LA, USA
ABSTRACT
This paper addresses a novel anti-spam gateway targeting multiple
linguistic-based social platforms to expose the outlier property of
their spam messages uniformly for effective detection. Instead of la-
beling ground truth datasets and extracting key features, which are
labor-intensive and time-consuming, we start with coarsely mining
seed corpora of spams and hams from the target data (aiming for
spam classification), before reconstructing them as the reference.
To catch each word’s rich information in the semantic and syntac-
tic perspectives, we then leverage the natural language processing
(NLP) model to embed each word into the high-dimensional vec-
tor space and use a neural network to train a spam word model.
After that, each message is encoded by using the predicted spam
scores from this model for all included stem words. The encoded
messages are processed by the prominent outlier techniques to pro-
duce their respective scores, allowing us to rank them for making
the outlier visible. Our solution is unsupervised, without relying
on specifics of any platform or dataset, to be platform-oblivious.
Through extensive experiments, our solution is demonstrated to
expose spammers’ outlier characteristics effectively, outperform
all examined unsupervised methods in almost all metrics, and may
even better supervised counterparts.
CCS CONCEPTS
• Security and privacy → Web application security; Network
security; Intrusion/anomaly detection and malware mitigation.
KEYWORDS
Anti-Spam; Unsupervised; Outlier Detection
ACM Reference Format:
Yihe Zhang, Xu Yuan, and Nian...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:Flexible and scalable digital signatures in TPM 2.0
author:Liqun Chen and
Jiangtao Li
Flexible and Scalable Digital Signatures in TPM 2.0
Liqun Chen
HP Laboratories
Bristol, UK
liqun.chen@hp.com
ABSTRACT
Trusted Platform Modules (TPM) are multipurpose hard-
ware chips, which provide support for various cryptographic
functions. Flexibility, scalability and high performance are
critical features for a TPM. In this paper, we present the new
method for implementing digital signatures that has been in-
cluded in TPM version 2.0. The core part of this method
is a single TPM signature primitive, which can be called by
diﬀerent software programmes, in order to implement sig-
nature schemes and cryptographic protocols with diﬀerent
security and privacy features. We prove security of the TPM
signature primitive under the static Diﬃe-Hellman assump-
tion and the random oracle model. We demonstrate how to
call this TPM signature primitive to implement anonymous
signatures (Direct Anonymous Attestation), pseudonym sys-
tems (U-Prove), and conventional signatures (the Schnorr
signature). To the best of our knowledge, this is the ﬁrst
signature primitive implemented in a limited hardware en-
vironment capable of supporting various signature schemes
without adding additional hardware complexity compared
to a hardware implementation of a conventional signature
scheme.
Categories and Subject Descriptors
K.6.5 [Management of Computing and Information
Systems]: Security and Protection
Keywords
TPM; Digital Signatures; Direct Anonymous Attestation
1.
INTRODUCTION
A Trusted Platform Module (TPM) is a hardware chip
used to provide veriﬁable attestation and integrity for a com-
puter platform and to also provide support for multiple cryp-
tographic functions necessary to implement data protection
in the platform. The implementation of these functions in
hardware has an advantage that it provides much better
tamper resistance than any software. But the disadvantage
Permission to make ...


Instruction: 总结这篇安全研究的主要观点

Input:
title:Flexible and scalable digital signatures in TPM 2.0
author:Liqun Chen and
Jiangtao Li
Flexible and Scalable Digital Signatures in TPM 2.0
Liqun Chen
HP Laboratories
Bristol, UK
liqun.chen@hp.com
ABSTRACT
Trusted Platform Modules (TPM) are multipurpose hard-
ware chips, which provide support for various cryptographic
functions. Flexibility, scalability and high performance are
critical features for a TPM. In this paper, we present the new
method for implementing digital signatures that has been in-
cluded in TPM version 2.0. The core part of this method
is a single TPM signature primitive, which can be called by
diﬀerent software programmes, in order to implement sig-
nature schemes and cryptographic protocols with diﬀerent
security and privacy features. We prove security of the TPM
signature primitive under the static Diﬃe-Hellman assump-
tion and the random oracle model. We demonstrate how to
call this TPM signature primitive to implement anonymous
signatures (Direct Anonymous Attestation), pseudonym sys-
tems (U-Prove), and conventional signatures (the Schnorr
signature). To the best of our knowledge, this is the ﬁrst
signature primitive implemented in a limited hardware en-
vironment capable of supporting various signature schemes
without adding additional hardware complexity compared
to a hardware implementation of a conventional signature
scheme.
Categories and Subject Descriptors
K.6.5 [Management of Computing and Information
Systems]: Security and Protection
Keywords
TPM; Digital Signatures; Direct Anonymous Attestation
1.
INTRODUCTION
A Trusted Platform Module (TPM) is a hardware chip
used to provide veriﬁable attestation and integrity for a com-
puter platform and to also provide support for multiple cryp-
tographic functions necessary to implement data protection
in the platform. The implementation of these functions in
hardware has an advantage that it provides much better
tamper resistance than any software. But the disadvantage
Permission to make ...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:Control-Alt-Hack: the design and evaluation of a card game for computer
security awareness and education
author:Tamara Denning and
Adam Lerner and
Adam Shostack and
Tadayoshi Kohno
Control-Alt-Hack: The Design and Evaluation of a Card
Game for Computer Security Awareness and Education
Tamara Denning†, Adam Lerner†, Adam Shostack*, and Tadayoshi Kohno†
†
Computer Science & Engineering
University of Washington
Seattle, WA, USA
{tdenning, lerner, yoshi}@cs.washington.edu
*adam@homeport.org
ABSTRACT
We  scoped,  designed,  produced,  and  evaluated  the  effectiveness
of  a  recreational  tabletop  card  game  created  to  raise  awareness
of—and  alter  perceptions  regarding—computer  security.  We
discuss  our  process,  the  challenges  that  arose,  and  the  decisions
we  made  to  address  those  challenges.  As  of  May  2013,  we  have
shipped  approximately  800  free  copies  to  150  educators.  We
analyze and report on feedback from 22 of these educators about
their  experiences  using  Control-Alt-Hack  with  over  450  students
in classroom and non-classroom contexts. The responses from the
14 educators who reported on their use of the game in a classroom
context  variously  indicated  that:  their  students’  awareness  of
computer  security  as  a  complex  and  interesting  field  was
increased  (11/14);  they  would  use  the  game  again  in  their
classroom (10/14); and they would recommend the game to others
(13/14).  Of  note,  2  of  the  14  classroom  educators  reported  that
they would not have otherwise covered the material. Additionally,
we present results from user studies with 11 individuals and find
that  their  responses  indicate  that  8  of  the  11  had  an  increased
awareness  of  computer  security  or  a  changed  perception;
furthermore,  all  of  our  intended  goals  are  touched  upon  in  their
responses.
Categories and Subject Descriptors
K.3.2  [COMPUTERS  AND  EDUCATION]:  Computer ...


Instruction: 总结这篇安全研究的主要观点

Input:
title:Control-Alt-Hack: the design and evaluation of a card game for computer
security awareness and education
author:Tamara Denning and
Adam Lerner and
Adam Shostack and
Tadayoshi Kohno
Control-Alt-Hack: The Design and Evaluation of a Card
Game for Computer Security Awareness and Education
Tamara Denning†, Adam Lerner†, Adam Shostack*, and Tadayoshi Kohno†
†
Computer Science & Engineering
University of Washington
Seattle, WA, USA
{tdenning, lerner, yoshi}@cs.washington.edu
*adam@homeport.org
ABSTRACT
We  scoped,  designed,  produced,  and  evaluated  the  effectiveness
of  a  recreational  tabletop  card  game  created  to  raise  awareness
of—and  alter  perceptions  regarding—computer  security.  We
discuss  our  process,  the  challenges  that  arose,  and  the  decisions
we  made  to  address  those  challenges.  As  of  May  2013,  we  have
shipped  approximately  800  free  copies  to  150  educators.  We
analyze and report on feedback from 22 of these educators about
their  experiences  using  Control-Alt-Hack  with  over  450  students
in classroom and non-classroom contexts. The responses from the
14 educators who reported on their use of the game in a classroom
context  variously  indicated  that:  their  students’  awareness  of
computer  security  as  a  complex  and  interesting  field  was
increased  (11/14);  they  would  use  the  game  again  in  their
classroom (10/14); and they would recommend the game to others
(13/14).  Of  note,  2  of  the  14  classroom  educators  reported  that
they would not have otherwise covered the material. Additionally,
we present results from user studies with 11 individuals and find
that  their  responses  indicate  that  8  of  the  11  had  an  increased
awareness  of  computer  security  or  a  changed  perception;
furthermore,  all  of  our  intended  goals  are  touched  upon  in  their
responses.
Categories and Subject Descriptors
K.3.2  [COMPUTERS  AND  EDUCATION]:  Computer ...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:DIFC programs by automatic instrumentation
author:William R. Harris and
Somesh Jha and
Thomas W. Reps
DIFC Programs by Automatic Instrumentation ∗
William R. Harris
Univ. of Wisconsin, Madison
Dept. of Computer Sciences
wrharris@cs.wisc.edu
Somesh Jha
Univ. of Wisconsin, Madison
Dept. of Computer Sciences
jha@cs.wisc.edu
Thomas Reps †
Univ. of Wisconsin, Madison
Dept. of Computer Sciences
reps@cs.wisc.edu
ABSTRACT
Decentralized information ﬂow control (DIFC) operating
systems provide applications with mechanisms for enforcing
information-ﬂow policies for their data. However, signiﬁ-
cant obstacles keep such operating systems from achieving
widespread adoption. One key obstacle is that DIFC operat-
ing systems provide only low-level mechanisms for allowing
application programmers to enforce their desired policies. It
can be diﬃcult for the programmer to ensure that their use
of these mechanisms enforces their high-level policies, while
at the same time not breaking the underlying functionality
of their application. These are issues both for programmers
who would develop new applications for a DIFC operating
system and for programmers who would port existing appli-
cations to a DIFC operating system.
Our work signiﬁcantly eases these tasks. We present an
automatic technique that takes as input a program with no
DIFC code, and two policies: one that speciﬁes prohibited
information ﬂows and one that speciﬁes ﬂows that must be
allowed. Our technique then produces a new version of the
input program that satisﬁes the two policies. To evaluate our
technique, we implemented it in an automatic tool, called
Swim (for Secure What I Mean), and applied it to a set of
real-world programs and policies. The results of our evalu-
ation demonstrate that the technique is suﬃciently expres-
sive to produce programs for real-world policies, and that
it can produce such programs eﬃciently. It thus represents
a signiﬁcant contribution towards developing systems with
strong end-to-end...


Instruction: 总结这篇安全研究的主要观点

Input:
title:DIFC programs by automatic instrumentation
author:William R. Harris and
Somesh Jha and
Thomas W. Reps
DIFC Programs by Automatic Instrumentation ∗
William R. Harris
Univ. of Wisconsin, Madison
Dept. of Computer Sciences
wrharris@cs.wisc.edu
Somesh Jha
Univ. of Wisconsin, Madison
Dept. of Computer Sciences
jha@cs.wisc.edu
Thomas Reps †
Univ. of Wisconsin, Madison
Dept. of Computer Sciences
reps@cs.wisc.edu
ABSTRACT
Decentralized information ﬂow control (DIFC) operating
systems provide applications with mechanisms for enforcing
information-ﬂow policies for their data. However, signiﬁ-
cant obstacles keep such operating systems from achieving
widespread adoption. One key obstacle is that DIFC operat-
ing systems provide only low-level mechanisms for allowing
application programmers to enforce their desired policies. It
can be diﬃcult for the programmer to ensure that their use
of these mechanisms enforces their high-level policies, while
at the same time not breaking the underlying functionality
of their application. These are issues both for programmers
who would develop new applications for a DIFC operating
system and for programmers who would port existing appli-
cations to a DIFC operating system.
Our work signiﬁcantly eases these tasks. We present an
automatic technique that takes as input a program with no
DIFC code, and two policies: one that speciﬁes prohibited
information ﬂows and one that speciﬁes ﬂows that must be
allowed. Our technique then produces a new version of the
input program that satisﬁes the two policies. To evaluate our
technique, we implemented it in an automatic tool, called
Swim (for Secure What I Mean), and applied it to a set of
real-world programs and policies. The results of our evalu-
ation demonstrate that the technique is suﬃciently expres-
sive to produce programs for real-world policies, and that
it can produce such programs eﬃciently. It thus represents
a signiﬁcant contribution towards developing systems with
strong end-to-end...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:"I am uncomfortable sharing what I can't see": Privacy Concerns
of the Visually Impaired with Camera Based Assistive Applications
author:Taslima Akter and
Bryan Dosono and
Tousif Ahmed and
Apu Kapadia and
Bryan C. Semaan
“I am uncomfortable sharing what I can’t see”:
Privacy Concerns of the Visually Impaired with
Camera Based Assistive Applications
Taslima Akter, Indiana University Bloomington; Bryan Dosono, Syracuse University;
Tousif Ahmed and Apu Kapadia, Indiana University Bloomington; Bryan Semaan,
Syracuse University
https://www.usenix.org/conference/usenixsecurity20/presentation/akter
This paper is included in the Proceedings of the 29th USENIX Security Symposium.August 12–14, 2020978-1-939133-17-5Open access to the Proceedings of the 29th USENIX Security Symposium is sponsored by USENIX.“I am uncomfortable sharing what I can’t see”: Privacy Concerns of the
Visually Impaired with Camera Based Assistive Applications
Taslima Akter
Indiana University Bloomington
Bryan Dosono
Syracuse University
Tousif Ahmed
Indiana University Bloomington
Apu Kapadia
Indiana University Bloomington
Bryan Semaan
Syracuse University
Abstract
The emergence of camera-based assistive technologies has
empowered people with visual impairments (VIP) to obtain
independence in their daily lives. Popular services feature
volunteers who answer questions about photos or videos (e.g.,
to identify a medical prescription). However, people with
VIPs can (inadvertently) reveal sensitive information to these
volunteers. To better understand the privacy concerns regard-
ing the disclosure of background objects to different types of
human assistants (friends, family, and others), we conducted
an online survey with 155 visually impaired participants. In
general, our participants had varying concerns depending on
the type of assistants and the kind of information. We found
that our participants were more concerned about the privacy
of bystanders than their own when capturing people in im-
age...


Instruction: 总结这篇安全研究的主要观点

Input:
title:"I am uncomfortable sharing what I can't see": Privacy Concerns
of the Visually Impaired with Camera Based Assistive Applications
author:Taslima Akter and
Bryan Dosono and
Tousif Ahmed and
Apu Kapadia and
Bryan C. Semaan
“I am uncomfortable sharing what I can’t see”:
Privacy Concerns of the Visually Impaired with
Camera Based Assistive Applications
Taslima Akter, Indiana University Bloomington; Bryan Dosono, Syracuse University;
Tousif Ahmed and Apu Kapadia, Indiana University Bloomington; Bryan Semaan,
Syracuse University
https://www.usenix.org/conference/usenixsecurity20/presentation/akter
This paper is included in the Proceedings of the 29th USENIX Security Symposium.August 12–14, 2020978-1-939133-17-5Open access to the Proceedings of the 29th USENIX Security Symposium is sponsored by USENIX.“I am uncomfortable sharing what I can’t see”: Privacy Concerns of the
Visually Impaired with Camera Based Assistive Applications
Taslima Akter
Indiana University Bloomington
Bryan Dosono
Syracuse University
Tousif Ahmed
Indiana University Bloomington
Apu Kapadia
Indiana University Bloomington
Bryan Semaan
Syracuse University
Abstract
The emergence of camera-based assistive technologies has
empowered people with visual impairments (VIP) to obtain
independence in their daily lives. Popular services feature
volunteers who answer questions about photos or videos (e.g.,
to identify a medical prescription). However, people with
VIPs can (inadvertently) reveal sensitive information to these
volunteers. To better understand the privacy concerns regard-
ing the disclosure of background objects to different types of
human assistants (friends, family, and others), we conducted
an online survey with 155 visually impaired participants. In
general, our participants had varying concerns depending on
the type of assistants and the kind of information. We found
that our participants were more concerned about the privacy
of bystanders than their own when capturing people in im-
age...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:If you are not paying for it, you are the product: how much do advertisers
pay to reach you?
author:Panagiotis Papadopoulos and
Pablo Rodr'ıguez Rodr'ıguez and
Nicolas Kourtellis and
Nikolaos Laoutaris
If you are not paying for it, you are the product:
How much do advertisers pay to reach you?
Nicolas Kourtellis
Panagiotis Papadopoulos
FORTH-ICS, Greece
panpap@ics.forth.gr
Telefonica Research, Spain
nicolas.kourtellis@telefonica.com
Pablo Rodriguez Rodriguez
Telefonica Alpha, Spain
pablo.rodriguezrodriguez@telefonica.com
7
1
0
2
p
e
S
4
2
]
T
G
.
s
c
[
3
v
8
5
0
7
0
.
1
0
7
1
:
v
i
X
r
a
ABSTRACT
Online advertising is progressively moving towards a programmatic
model in which ads are matched to actual interests of individuals
collected as they browse the web. Le(cid:138)ing the huge debate around
privacy aside, a very important question in this area, for which li(cid:138)le
is known, is: How much do advertisers pay to reach an individual?
In this study, we develop a (cid:128)rst of its kind methodology for
computing exactly that – the price paid for a web user by the ad
ecosystem – and we do that in real time. Our approach is based
on tapping on the Real Time Bidding (RTB) protocol to collect
cleartext and encrypted prices for winning bids paid by advertisers
in order to place targeted ads. Our main technical contribution is a
method for tallying winning bids even when they are encrypted.
We achieve this by training a model using as ground truth prices
obtained by running our own “probe” ad-campaigns. We design our
methodology through a browser extension and a back-end server
that provides it with fresh models for encrypted bids. We validate
our methodology using a one year long trace of 1600 mobile users
and demonstrate that it can estimate a user’s advertising worth
with more than 82% accuracy.
1 INTRODUCTION
In today’s data-driven economy, the amount of user data an IT com-
pany holds has a direct and non-trivial contribution to its overall
market...


Instruction: 总结这篇安全研究的主要观点

Input:
title:If you are not paying for it, you are the product: how much do advertisers
pay to reach you?
author:Panagiotis Papadopoulos and
Pablo Rodr'ıguez Rodr'ıguez and
Nicolas Kourtellis and
Nikolaos Laoutaris
If you are not paying for it, you are the product:
How much do advertisers pay to reach you?
Nicolas Kourtellis
Panagiotis Papadopoulos
FORTH-ICS, Greece
panpap@ics.forth.gr
Telefonica Research, Spain
nicolas.kourtellis@telefonica.com
Pablo Rodriguez Rodriguez
Telefonica Alpha, Spain
pablo.rodriguezrodriguez@telefonica.com
7
1
0
2
p
e
S
4
2
]
T
G
.
s
c
[
3
v
8
5
0
7
0
.
1
0
7
1
:
v
i
X
r
a
ABSTRACT
Online advertising is progressively moving towards a programmatic
model in which ads are matched to actual interests of individuals
collected as they browse the web. Le(cid:138)ing the huge debate around
privacy aside, a very important question in this area, for which li(cid:138)le
is known, is: How much do advertisers pay to reach an individual?
In this study, we develop a (cid:128)rst of its kind methodology for
computing exactly that – the price paid for a web user by the ad
ecosystem – and we do that in real time. Our approach is based
on tapping on the Real Time Bidding (RTB) protocol to collect
cleartext and encrypted prices for winning bids paid by advertisers
in order to place targeted ads. Our main technical contribution is a
method for tallying winning bids even when they are encrypted.
We achieve this by training a model using as ground truth prices
obtained by running our own “probe” ad-campaigns. We design our
methodology through a browser extension and a back-end server
that provides it with fresh models for encrypted bids. We validate
our methodology using a one year long trace of 1600 mobile users
and demonstrate that it can estimate a user’s advertising worth
with more than 82% accuracy.
1 INTRODUCTION
In today’s data-driven economy, the amount of user data an IT com-
pany holds has a direct and non-trivial contribution to its overall
market...

Output: 这篇论文提供了重要的安全研究见解，对网络安全防护具有指导意义。


Instruction: 请分析这篇安全论文的内容

Output:
安全论文分析：

title:What You Need to Know About (Smart) Network Interface Cards
author:Georgios P. Katsikas and
Tom Barbette and
Marco Chiesa and
Dejan Kostic and
Gerald Q. Maguire Jr.
What You Need to Know About (Smart)
Network Interface Cards
Georgios P. Katsikas
, Tom Barbette(B)
and Gerald Q. Maguire Jr.
, Marco Chiesa , Dejan Kosti´c
,
KTH Royal Institute of Technology, Stockholm, Sweden
{katsikas,barbette,mchiesa,dmk,maguire}@kth.se
Abstract. Network interface cards (NICs) are fundamental components
of modern high-speed networked systems, supporting multi-100 Gbps
speeds and increasing programmability. Oﬄoading computation from a
server’s CPU to a NIC frees a substantial amount of the server’s CPU
resources, making NICs key to oﬀer competitive cloud services. There-
fore, understanding the performance beneﬁts and limitations of oﬄoad-
ing a networking application to a NIC is of paramount importance.
In this paper, we measure the performance of four diﬀerent NICs
from one of the largest NIC vendors worldwide, supporting 100 Gbps and
200 Gbps. We show that while today’s NICs can easily support multi-
hundred-gigabit throughputs, performing frequent update operations of
a NIC’s packet classiﬁer—as network address translators (NATs) and
load balancers would do for each incoming connection—results in a dra-
matic throughput reduction of up to 70 Gbps or complete denial of service.
Our conclusion is that all tested NICs cannot support high-speed net-
working applications that require keeping track of a large number of
frequently arriving incoming connections. Furthermore, we show a vari-
ety of counter-intuitive performance artefacts including the performance
impact of using multiple tables to classify ﬂows of packets.
Keywords: Network interface cards · Hardware classiﬁer ·
Oﬄoading · Rule operations · Performance · Benchmarking · 100 GbE
1 Introduction
With the dramatic growth of Network Interface Card (NIC) speeds, optimizing
I/O operations is essential for supporting modern-d...