The Experts below are selected from a list of 936 Experts worldwide ranked by ideXlab platform
Philippe Aniorte - One of the best experts on this subject based on the ideXlab platform.
-
SoSE - Extending a Multi-Agent Systems Simulation Architecture for Systems-of-Systems Security Analysis
2018 13th Annual Conference on System of Systems Engineering (SoSE), 2018Co-Authors: Jamal El Hachem, Vanea Chiprianov, Valdemar Vicente Graciano Neto, Philippe AniorteAbstract:Security is an important concern for software-intensive Systems-of-Systems (SoS). Architectural analysis for SoS secturity assessment should be performed at early stages of development. Such activity could prevent vulnerabilities and avoid potential Cascading Attack emergent behaviors, i.e., a succession of security vulnerabilities that emerge from individual constituents security fragilities, potentially causing interruption and collapse of SoS operation. Model simulation can prevent these issues by predicting, at design-time, how SoS will behave regarding its reaction to potential Attacks. As security is a quality attribute, i.e., a property that comes up from the relation between software parts, software architecture analysis and simulation are an additional support for the prediction of SoS security. However, despite recent advances in such area, few simulation approaches have tackled simulation of secure SoS architectures where the basis of the described models are the SoS behavior or the interactions among the SoS Constituent Systems (CS). The main contribution of this paper is offering a big picture of how recent advances on SoS security analysis via simulations can form a robust framework for SoS security prediction. We argue the pertinence of Multi-Agent Systems (MAS) for SoS simulation due to similarities between MAS and SoS concepts, and we report how MAS simulation enables the visualization of emergent behaviors and how they impact the SoS security. Our results to foster SoS security analysis include (i) an extension of a MAS conceptual model and platform to include security concepts, (ii) a Model-Driven Engineering (MDE) approach that adopts automatic mappings between secure SoS architecture modeled using an existing SysML-based modeling language, namely the SoSSecML, and (iii) a MAS platform to support such analysis.
-
Extending a Multi-Agent Systems Simulation Architecture for Systems-of-Systems Security Analysis
2018Co-Authors: Jamal El Hachem, Vanea Chiprianov, Valdemar Vicente Garcia Neto, Philippe AniorteAbstract:Security is an important concern for software-intensive Systems-of-Systems (SoS). Architectural analysis for SoS secturity assessment should be performed at early stages of development. Such activity could prevent vulnerabilities and avoid potential Cascading Attack emergent behaviors, i.e., a succession of security vulnerabilities that emerge from individual constituents security fragilities, potentially causing interruption and collapse of SoS operation. Model simulation can prevent these issues by predicting, at design-time, how SoS will behave regarding its reaction to potential Attacks. As security is a quality attribute, i.e., a property that comes up from the relation between software parts, software architecture analysis and simulation are an additional support for the prediction of SoS security. However, despite recent advances in such area, few simulation approaches have tackled simulation of secure SoS architectures where the basis of the described models are the SoS behavior or the interactions among the SoS Constituent Systems (CS). The main contribution of this paper is offering a big picture of how recent advances on SoS security analysis via simulations can form a robust framework for SoS security prediction. We argue the pertinence of Multi-Agent Systems (MAS) for SoS simulation due to similarities between MAS and SoS concepts, and we report how MAS simulation enables the visualization of emergent behaviors and how they impact the SoS security. Our results to foster SoS security analysis include (i) an extension of a MAS conceptual model and platform to include security concepts, (ii) a Model-Driven Engineering (MDE) approach that adopts automatic mappings between secure SoS architecture modeled using an existing SysML-based modeling language, namely the SoSSecML, and (iii) a MAS platform to support such analysis.
-
Model Driven Software Security Architecture of Systems-of-Systems
2016Co-Authors: Jamal El Hachem, Zi Yang Pang, Vanea Chiprianov, Ali Babar, Philippe AniorteAbstract:Recently, there is a growing interest in Systems of Systems (SoS), their architecture, security and application domains. However, their specific characteristics such as the operational independence of SoS constituent systems (CS), the absence of central authority and their emergent behavior make the modeling of their structure, behavior and security a complex task. One of the current main security challenges in the context of SoS is the Cascading Attack problem. The challenge is to predict the concatenation/sequence of CS's vulnerabilities that could be triggered resulting in destructive Cascading failures and take corrective actions to reduce the cost, development time and effect of later changes. In this paper, we propose a domain specific modeling language (DSML) to represent SoS security rchitecture. Having SoS security models will enable the discovery, analysis and resolution of Cascading Attacks, in the architecture phase, preventing development time and cost wastage. Following a Model Driven Engineering (MDE) approach, we generate a graphical editor for our DSML and use it to model a Smart Campus case study. \textcopyright 2016 IEEE.
-
APSEC - Model Driven Software Security Architecture of Systems-of-Systems
2016 23rd Asia-Pacific Software Engineering Conference (APSEC), 2016Co-Authors: Jamal El Hachem, Zi Yang Pang, Vanea Chiprianov, Ali Babar, Philippe AniorteAbstract:Recently, there is a growing interest in Systems of Systems (SoS), their architecture, security and application domains. However, their specific characteristics such as the operational independence of SoS constituent systems (CS), the absence of central authority and their emergent behavior make the modeling of their structure, behavior and security a complex task. One of the current main security challenges in the context of SoS is the Cascading Attack problem. The challenge is to predict the concatenation/sequence of CS's vulnerabilities that could be triggered resulting in destructive Cascading failures and take corrective actions to reduce the cost, development time and effect of later changes. In this paper, we propose a domain specific modeling language (DSML) to represent SoS security rchitecture. Having SoS security models will enable the discovery, analysis and resolution of Cascading Attacks, in the architecture phase, preventing development time and cost wastage. Following a Model Driven Engineering (MDE) approach, we generate a graphical editor for our DSML and use it to model a Smart Campus case study.
Jamal El Hachem - One of the best experts on this subject based on the ideXlab platform.
-
SoSE - Extending a Multi-Agent Systems Simulation Architecture for Systems-of-Systems Security Analysis
2018 13th Annual Conference on System of Systems Engineering (SoSE), 2018Co-Authors: Jamal El Hachem, Vanea Chiprianov, Valdemar Vicente Graciano Neto, Philippe AniorteAbstract:Security is an important concern for software-intensive Systems-of-Systems (SoS). Architectural analysis for SoS secturity assessment should be performed at early stages of development. Such activity could prevent vulnerabilities and avoid potential Cascading Attack emergent behaviors, i.e., a succession of security vulnerabilities that emerge from individual constituents security fragilities, potentially causing interruption and collapse of SoS operation. Model simulation can prevent these issues by predicting, at design-time, how SoS will behave regarding its reaction to potential Attacks. As security is a quality attribute, i.e., a property that comes up from the relation between software parts, software architecture analysis and simulation are an additional support for the prediction of SoS security. However, despite recent advances in such area, few simulation approaches have tackled simulation of secure SoS architectures where the basis of the described models are the SoS behavior or the interactions among the SoS Constituent Systems (CS). The main contribution of this paper is offering a big picture of how recent advances on SoS security analysis via simulations can form a robust framework for SoS security prediction. We argue the pertinence of Multi-Agent Systems (MAS) for SoS simulation due to similarities between MAS and SoS concepts, and we report how MAS simulation enables the visualization of emergent behaviors and how they impact the SoS security. Our results to foster SoS security analysis include (i) an extension of a MAS conceptual model and platform to include security concepts, (ii) a Model-Driven Engineering (MDE) approach that adopts automatic mappings between secure SoS architecture modeled using an existing SysML-based modeling language, namely the SoSSecML, and (iii) a MAS platform to support such analysis.
-
Model Driven Software Security Architecture of Systems-of-Systems
2016Co-Authors: Jamal El Hachem, Zi Yang Pang, Vanea Chiprianov, Ali Babar, Philippe AniorteAbstract:Recently, there is a growing interest in Systems of Systems (SoS), their architecture, security and application domains. However, their specific characteristics such as the operational independence of SoS constituent systems (CS), the absence of central authority and their emergent behavior make the modeling of their structure, behavior and security a complex task. One of the current main security challenges in the context of SoS is the Cascading Attack problem. The challenge is to predict the concatenation/sequence of CS's vulnerabilities that could be triggered resulting in destructive Cascading failures and take corrective actions to reduce the cost, development time and effect of later changes. In this paper, we propose a domain specific modeling language (DSML) to represent SoS security rchitecture. Having SoS security models will enable the discovery, analysis and resolution of Cascading Attacks, in the architecture phase, preventing development time and cost wastage. Following a Model Driven Engineering (MDE) approach, we generate a graphical editor for our DSML and use it to model a Smart Campus case study. \textcopyright 2016 IEEE.
-
APSEC - Model Driven Software Security Architecture of Systems-of-Systems
2016 23rd Asia-Pacific Software Engineering Conference (APSEC), 2016Co-Authors: Jamal El Hachem, Zi Yang Pang, Vanea Chiprianov, Ali Babar, Philippe AniorteAbstract:Recently, there is a growing interest in Systems of Systems (SoS), their architecture, security and application domains. However, their specific characteristics such as the operational independence of SoS constituent systems (CS), the absence of central authority and their emergent behavior make the modeling of their structure, behavior and security a complex task. One of the current main security challenges in the context of SoS is the Cascading Attack problem. The challenge is to predict the concatenation/sequence of CS's vulnerabilities that could be triggered resulting in destructive Cascading failures and take corrective actions to reduce the cost, development time and effect of later changes. In this paper, we propose a domain specific modeling language (DSML) to represent SoS security rchitecture. Having SoS security models will enable the discovery, analysis and resolution of Cascading Attacks, in the architecture phase, preventing development time and cost wastage. Following a Model Driven Engineering (MDE) approach, we generate a graphical editor for our DSML and use it to model a Smart Campus case study.
Vanea Chiprianov - One of the best experts on this subject based on the ideXlab platform.
-
SoSE - Extending a Multi-Agent Systems Simulation Architecture for Systems-of-Systems Security Analysis
2018 13th Annual Conference on System of Systems Engineering (SoSE), 2018Co-Authors: Jamal El Hachem, Vanea Chiprianov, Valdemar Vicente Graciano Neto, Philippe AniorteAbstract:Security is an important concern for software-intensive Systems-of-Systems (SoS). Architectural analysis for SoS secturity assessment should be performed at early stages of development. Such activity could prevent vulnerabilities and avoid potential Cascading Attack emergent behaviors, i.e., a succession of security vulnerabilities that emerge from individual constituents security fragilities, potentially causing interruption and collapse of SoS operation. Model simulation can prevent these issues by predicting, at design-time, how SoS will behave regarding its reaction to potential Attacks. As security is a quality attribute, i.e., a property that comes up from the relation between software parts, software architecture analysis and simulation are an additional support for the prediction of SoS security. However, despite recent advances in such area, few simulation approaches have tackled simulation of secure SoS architectures where the basis of the described models are the SoS behavior or the interactions among the SoS Constituent Systems (CS). The main contribution of this paper is offering a big picture of how recent advances on SoS security analysis via simulations can form a robust framework for SoS security prediction. We argue the pertinence of Multi-Agent Systems (MAS) for SoS simulation due to similarities between MAS and SoS concepts, and we report how MAS simulation enables the visualization of emergent behaviors and how they impact the SoS security. Our results to foster SoS security analysis include (i) an extension of a MAS conceptual model and platform to include security concepts, (ii) a Model-Driven Engineering (MDE) approach that adopts automatic mappings between secure SoS architecture modeled using an existing SysML-based modeling language, namely the SoSSecML, and (iii) a MAS platform to support such analysis.
-
Extending a Multi-Agent Systems Simulation Architecture for Systems-of-Systems Security Analysis
2018Co-Authors: Jamal El Hachem, Vanea Chiprianov, Valdemar Vicente Garcia Neto, Philippe AniorteAbstract:Security is an important concern for software-intensive Systems-of-Systems (SoS). Architectural analysis for SoS secturity assessment should be performed at early stages of development. Such activity could prevent vulnerabilities and avoid potential Cascading Attack emergent behaviors, i.e., a succession of security vulnerabilities that emerge from individual constituents security fragilities, potentially causing interruption and collapse of SoS operation. Model simulation can prevent these issues by predicting, at design-time, how SoS will behave regarding its reaction to potential Attacks. As security is a quality attribute, i.e., a property that comes up from the relation between software parts, software architecture analysis and simulation are an additional support for the prediction of SoS security. However, despite recent advances in such area, few simulation approaches have tackled simulation of secure SoS architectures where the basis of the described models are the SoS behavior or the interactions among the SoS Constituent Systems (CS). The main contribution of this paper is offering a big picture of how recent advances on SoS security analysis via simulations can form a robust framework for SoS security prediction. We argue the pertinence of Multi-Agent Systems (MAS) for SoS simulation due to similarities between MAS and SoS concepts, and we report how MAS simulation enables the visualization of emergent behaviors and how they impact the SoS security. Our results to foster SoS security analysis include (i) an extension of a MAS conceptual model and platform to include security concepts, (ii) a Model-Driven Engineering (MDE) approach that adopts automatic mappings between secure SoS architecture modeled using an existing SysML-based modeling language, namely the SoSSecML, and (iii) a MAS platform to support such analysis.
-
Model Driven Software Security Architecture of Systems-of-Systems
2016Co-Authors: Jamal El Hachem, Zi Yang Pang, Vanea Chiprianov, Ali Babar, Philippe AniorteAbstract:Recently, there is a growing interest in Systems of Systems (SoS), their architecture, security and application domains. However, their specific characteristics such as the operational independence of SoS constituent systems (CS), the absence of central authority and their emergent behavior make the modeling of their structure, behavior and security a complex task. One of the current main security challenges in the context of SoS is the Cascading Attack problem. The challenge is to predict the concatenation/sequence of CS's vulnerabilities that could be triggered resulting in destructive Cascading failures and take corrective actions to reduce the cost, development time and effect of later changes. In this paper, we propose a domain specific modeling language (DSML) to represent SoS security rchitecture. Having SoS security models will enable the discovery, analysis and resolution of Cascading Attacks, in the architecture phase, preventing development time and cost wastage. Following a Model Driven Engineering (MDE) approach, we generate a graphical editor for our DSML and use it to model a Smart Campus case study. \textcopyright 2016 IEEE.
-
APSEC - Model Driven Software Security Architecture of Systems-of-Systems
2016 23rd Asia-Pacific Software Engineering Conference (APSEC), 2016Co-Authors: Jamal El Hachem, Zi Yang Pang, Vanea Chiprianov, Ali Babar, Philippe AniorteAbstract:Recently, there is a growing interest in Systems of Systems (SoS), their architecture, security and application domains. However, their specific characteristics such as the operational independence of SoS constituent systems (CS), the absence of central authority and their emergent behavior make the modeling of their structure, behavior and security a complex task. One of the current main security challenges in the context of SoS is the Cascading Attack problem. The challenge is to predict the concatenation/sequence of CS's vulnerabilities that could be triggered resulting in destructive Cascading failures and take corrective actions to reduce the cost, development time and effect of later changes. In this paper, we propose a domain specific modeling language (DSML) to represent SoS security rchitecture. Having SoS security models will enable the discovery, analysis and resolution of Cascading Attacks, in the architecture phase, preventing development time and cost wastage. Following a Model Driven Engineering (MDE) approach, we generate a graphical editor for our DSML and use it to model a Smart Campus case study.
Liangxiao Xin - One of the best experts on this subject based on the ideXlab platform.
-
MSWiM - Cascading Attacks on Wi-Fi Networks with Weak Interferers
Proceedings of the 21st ACM International Conference on Modeling Analysis and Simulation of Wireless and Mobile Systems, 2018Co-Authors: Liangxiao Xin, David StarobinskiAbstract:Recent work shows that an adversary can exploit a coupling effect induced by hidden nodes to launch a Cascading Attack causing global congestion in a Wi-Fi network. The underlying assumption is that the power of interference caused by a hidden node is an order of magnitude stronger than the signal sent to the receiver. In this paper, we investigate the feasibility of Cascading Attacks with weakly interfering hidden nodes, that is when the signal-to-interference ratio is high. Through extensive ns-3 simulations, including for an indoor building model, we show that Cascading Attacks are still feasible. The Attacks leverage two PHY-layer phenomena: receiver capture and bit rate adaptation. We show that the Attack relies on a coupling effect, whereby the average bit rate of a transmission pair drops sharply as the channel utilization of a neighboring pair gets higher. This coupling effect facilitates the propagation of the Attack throughout the network.
-
Cascading denial of service Attacks on Wi-Fi networks
2016 IEEE Conference on Communications and Network Security (CNS), 2016Co-Authors: Liangxiao Xin, David Starobinski, Guevara NoubirAbstract:We unveil the existence of a vulnerability in Wi-Fi, which allows an adversary to remotely launch a Denial-of-Service (DoS) Attack that propagates both in time and space. This vulnerability stems from a coupling effect induced by hidden nodes. Cascading DoS Attacks can congest an entire network and do not require the adversary to violate any protocol. We demonstrate the feasibility of such Attacks through experiments with real Wi-Fi cards, extensive ns-3 simulations, and theoretical analysis. The simulations show that the Attack is effective both in networks operating under fixed and varying bit rates, as well as ad hoc and infrastructure modes. To gain insight into the root-causes of the Attack, we model the network as a dynamical system and analyze its limiting behavior. The model predicts that a phase transition (and hence a Cascading Attack) is possible when the retry limit parameter of Wi-Fi is greater or equal to 7, and explicitly characterizes the phase transition region in terms of the system parameters.
-
CNS - Cascading denial of service Attacks on Wi-Fi networks
2016 IEEE Conference on Communications and Network Security (CNS), 2016Co-Authors: Liangxiao Xin, David Starobinski, Guevara NoubirAbstract:We unveil the existence of a vulnerability in Wi-Fi, which allows an adversary to remotely launch a Denial-of-Service (DoS) Attack that propagates both in time and space. This vulnerability stems from a coupling effect induced by hidden nodes. Cascading DoS Attacks can congest an entire network and do not require the adversary to violate any protocol. We demonstrate the feasibility of such Attacks through experiments with real Wi-Fi cards, extensive ns-3 simulations, and theoretical analysis. The simulations show that the Attack is effective both in networks operating under fixed and varying bit rates, as well as ad hoc and infrastructure modes. To gain insight into the root-causes of the Attack, we model the network as a dynamical system and analyze its limiting behavior. The model predicts that a phase transition (and hence a Cascading Attack) is possible when the retry limit parameter of Wi-Fi is greater or equal to 7, and characterizes the phase transition region in terms of the system parameters.
Woo Chaw Seng - One of the best experts on this subject based on the ideXlab platform.
-
Multi Block based Image Watermarking in Wavelet Domain Using Genetic Programming
The International Arab Journal of Information Technology, 2014Co-Authors: Almas Abbasi, Woo Chaw Seng, Imran Shafiq AhmadAbstract:The increased utilization of internet in sharing and distribution of digital data makes it is very difficult to maintain copyright and ownership of data. Digital watermarking offers a method for authentication and copyright protection. We propose a blind, still image, Genetic Programming (GP) based robust watermark scheme for copyright protection. In this scheme, pseudorandom sequence of real number is used as watermark. It is embedded into perceptually significant blocks of vertical and horizontal sub-band in wavelet domain to achieve robustness. GP is used to structure the watermark for improved imperceptibility by considering the Human Visual System (HVS) characteristics such as luminance sensitivity and self and neighbourhood contrast masking. We also present a GP function which determines the optimal watermark strength for selected coefficients irrespective of the block size. Watermark detection is performed using correlation. Our experiments show that in proposed scheme the watermark resists image processing Attack, noise Attack, geometric Attack and Cascading Attack. We compare our proposed technique with other two genetic perceptual model based techniques. Comparison results show that our multiblock based technique is approximately 5%, and 23% more robust, then the other two compared techniques.
-
Robust Image Watermarking Using Genetic Programming
2012Co-Authors: Almas Abbasi, Woo Chaw SengAbstract:The utilization, sharing and distribution of digital data have been increasing with the wide adoption of internet. This resulted difficulty in protection of copyright and ownership of digital data. Digital watermarking has been proposed as a solution for digital data authentication and copyright protection. We present a genetic programming based watermarking technique for images. Genetic programming is used to structure the watermark by taking into account human visual system characteristics such as luminance sensitivity and contrast masking. A watermark consists of a pseudorandom real number sequence is embedded into perceptually significant blocks of vertical and horizontal sub bands in the wavelet domain. Then, correlation method is applied in watermark detection. Experimental results confirmed that our technique is robust against image processing Attack, noise Attack, geometric Attack and Cascading Attack. Benchmarking results show that the proposed technique is more robust and more imperceptible compared with other genetic perceptual model-based techniques.