The Experts below are selected from a list of 33 Experts worldwide ranked by ideXlab platform
Stewart S. Miller - One of the best experts on this subject based on the ideXlab platform.
-
Wi-Fi security
J. Comput. Sci. Coll., 2003Co-Authors: Stewart S. MillerAbstract:Cover and spine title: WiFi security. Includes index. Copyright; CONTENTS; PREFACE; CHAPTER 1 Introduction to Wireless LAN Security Standards ; Wireless Defined; Factors of Security; Theft; Access Control; Authentication; Encryption; Safeguards; Intrusion Detection Systems; IEEE; WECA; Wi-Fi; The Many Flavors of 802.11; FHSS; DSSS; OFDM; Bluetooth; Differences between the Wireless Standards; Conclusion: How Security Applies; CHAPTER 2 Technology Comparisons ; HomeRF; 802.11 versus SWAP; SWAP Specification; Integrating Wireless Phone and Data; Bluetooth; Wireless Hacking; NetStumbler; NetStumbler Software Uses; Script Kiddies; Facts Bluetooth TechnologyBluetooth Background; What Gives Bluetooth Its Bite?; Bluetooth Spectrum Hopping; Bluetooth Connections; Enforcing Security; Link Me Up!; Conclusion: The Future of the WLAN; CHAPTER 3 Wireless LAN Security Factors ; Enabling Encryption Security; WEP Encryption; Encrypting 802.11b?; Network Interface Cards; Cross-Platform Hacking; Eavesdropping; Breaking In!; Counterfeiting; Wireless DoS Attack; Points of Vulnerability; Your Best Defense Against an Attack; Conclusion: Keeping Your WLAN Secure; CHAPTER 4 Issues in Wireless Security ; The State of Wireless LAN Security Securing Your WLANAuthenticating Data; Client Authentication in a Closed System; Shared Key Authentication; RC4; Ensuring Privacy; Keeping Data Intact; Managing Keys; WLAN Vulnerabilities; Subtle Attacks; Common Security Pitfalls; Poor Security, Better than No Security at All!; Short Keys; Initialization Vectors; Shared Keys; Checks and Balances for Packets; Authentication; Location! Location! Location!; Attack Patterns; Active Attack Patterns; Passive Attacks; Conclusion; CHAPTER 5 The 802.11 Standard Defined ; The 802.11 Standard; Issues to Consider; Expanding the Network Standard Ad Hoc NetworksExtended Service Set; Wireless Radio Standard; The Standard Algorithm; Address Spaces; The 802.11 Standard in Security; Encryption; Timing and Power Management; Speed; Compatibility; Standard "Flavors" of 802.11; 802.11a; 802.11b; 802.11d; 802.11e; 802.11f; 802.11g; 802.11h; 802.11i; Conclusion: Evolution of the 802.11 Standard; CHAPTER 6 802.11 Security Infrastructure ; Point-to-Point Wireless Application Security; Point of Interception; Wireless Vulnerability; Building a Private Wireless Infrastructure; Vulnerable Encryption; Commercial Security Infrastructure Building a Private InfrastructureItems to Compromise; Deploying Your Wireless Infrastructure; Determining Requirements; Choosing a Flavor of 802.11; Security Design; Monitoring Activity; Conclusion: Maintaining a Secure Infrastructure; CHAPTER 7 802.11 Encryption: Wired Equivalent Privacy ; Why WEP?; Defending Your Systems; WEP Mechanics; Wireless Security Encryption; Insecure Keys; Taking a Performance Hit; Wireless Authentication; Known WEP Imperfections; Access Control; IRL Security; Points of Vulnerability; Conclusion: Finding Security in an Unsecured World
Cory Thoma - One of the best experts on this subject based on the ideXlab platform.
-
Towards Scalable, Cloud Based, Confidential Data Stream Processing
2019Co-Authors: Cory ThomaAbstract:Increasing data availability, velocity, variability, and size have lead to the development of new data processing paradigms that offer users different ways to process and manage data specific to their needs. One such paradigm is data stream processing, as managed by Data Stream Processing Systems (DSPS). In contrast to traditional database management systems wherein data is stationary and queries are transient, in stream processing systems, data is transient and queries are stationary (that is, continuous and long running). In such systems, users are expecting to process temporal data, where data is only considered for some period of time, and discarded after. Often, as with many other software applications, those who employ such systems will outsource computation to third party computation platforms such as Amazon, IBM, or Google. The use of third parties not only outsources computation, but it outsources hardware and software maintenance costs as well, relieving the user from having to incur these costs themselves. Moreover, when a user outsources their DSPS, they often have some service level agreement that places guarantees on service availability and uptime. Given the above benefits to outsourcing computation, it is clearly desirable for a user to outsource their DSPS computation. Such outsourcing, however, may violate the privacy constraints of the those who provide the data stream. Specifically, they may not wish to share their plaintext data with a third-party that they may not trust. This leads to an interesting dichotomy between the desire of the user to outsource as much of their computation as possible and the desire of the data stream providers to keep their data private and avoid leaking data to a third-party system. Current work that explores linking the two poles of this dichotomy either limits the expressiveness of supported queries, requires the data provider to trust the third-party systems, or incurs computational or monetary overheads prohibitive for the querier. In this dissertation, we explore the methods for shrinking the gap between the poles of this dichotomy and overcome the limitation of the state-of-the art systems by providing data providers and queriers with efficient access control enforcement on untrusted third party systems over encrypted data. Specifically, we introduce our system PolyStream for executing queries on encrypted data using computation-Enabling Encryption, with an online key management system. We further introduce Sanctuary to provide computation on any data on third-party systems using trusted hardware. Finally we introduce Shoal, our query optimizer that considers the heterogeneous nature of streaming systems at optimization time to improve query performance when access controls are enforced on the streaming data. Through the union of the contributions of this dissertation, we show that considering access controls at optimization time can lead to better utilization, performance, and protection for streaming data.
-
DBSec - Shoal: Query Optimization and Operator Placement for Access Controlled Stream Processing Systems.
Data and Applications Security and Privacy XXXIII, 2019Co-Authors: Cory Thoma, Alexandros LabrinidisAbstract:Distributed Data Stream Processing Systems (DDSPS) execute on transient data flowing through long-running, continuous, streaming queries, grouped together in query networks. Often, these continuous queries are outsourced by the querier to third-party computing platforms to help control the cost and maintenance associated with owning and operating such systems. Such outsourcing, however, may be contradictory to a data provider’s access controls as they may not permit their data to be viewed or accessed by an unintended third party. A data provider’s access controls may, therefore, prevent a querier from fully outsourcing their query. Current research in this space has provided alternative access control techniques that involve computation-Enabling Encryption techniques, specialized hardware, or specialized query operators that allow for a data provider to enforce access controls while still allowing a querier to employ a third-party system. However, no system considers access controls and their enforcement as part of the query optimization step. In this paper, we present Shoal, an optimizer that considers access controls as first class citizens when optimizing and distributing a network of query operators. We show that Shoal can generate more efficient queries versus the state-of-the-art, as well as detail how changes in access controls can generate new query plans at runtime.
-
CODASPY - Behind Enemy Lines: Exploring Trusted Data Stream Processing on Untrusted Systems
Proceedings of the Ninth ACM Conference on Data and Application Security and Privacy, 2019Co-Authors: Cory Thoma, Alexandros LabrinidisAbstract:Data Stream Processing Systems (DSPSs) execute long-running, continuous queries over transient streaming data, often making use of outsourced, third-party computational platforms. However, third-party outsourcing can lead to unwanted violations of data providers' access controls or privacy policies, as data potentially flows through untrusted infrastructure. To address these types of violations, data providers can elect to use stream processing techniques based upon computation-Enabling Encryption. Unfortunately, this class of solutions can leak information about underlying plaintext values, reduce the possible set of queries that can be executed, and come with detrimental performance overheads. To alleviate the concerns with cryptographically-enforced access controls in DSPSs, we have developed \system, a DSPS that makes use of Intel's Software Guard Extensions (SGX) to protect data being processed on untrusted infrastructure. We show that \system can execute arbitrary queries while leaking no more information than an idealized \baseline system. At the same time, an extensive evaluation shows that the overheads associated with stream processing in \system are comparable to its computation-Enabling Encryption counterparts for many queries.
Alexandros Labrinidis - One of the best experts on this subject based on the ideXlab platform.
-
DBSec - Shoal: Query Optimization and Operator Placement for Access Controlled Stream Processing Systems.
Data and Applications Security and Privacy XXXIII, 2019Co-Authors: Cory Thoma, Alexandros LabrinidisAbstract:Distributed Data Stream Processing Systems (DDSPS) execute on transient data flowing through long-running, continuous, streaming queries, grouped together in query networks. Often, these continuous queries are outsourced by the querier to third-party computing platforms to help control the cost and maintenance associated with owning and operating such systems. Such outsourcing, however, may be contradictory to a data provider’s access controls as they may not permit their data to be viewed or accessed by an unintended third party. A data provider’s access controls may, therefore, prevent a querier from fully outsourcing their query. Current research in this space has provided alternative access control techniques that involve computation-Enabling Encryption techniques, specialized hardware, or specialized query operators that allow for a data provider to enforce access controls while still allowing a querier to employ a third-party system. However, no system considers access controls and their enforcement as part of the query optimization step. In this paper, we present Shoal, an optimizer that considers access controls as first class citizens when optimizing and distributing a network of query operators. We show that Shoal can generate more efficient queries versus the state-of-the-art, as well as detail how changes in access controls can generate new query plans at runtime.
-
CODASPY - Behind Enemy Lines: Exploring Trusted Data Stream Processing on Untrusted Systems
Proceedings of the Ninth ACM Conference on Data and Application Security and Privacy, 2019Co-Authors: Cory Thoma, Alexandros LabrinidisAbstract:Data Stream Processing Systems (DSPSs) execute long-running, continuous queries over transient streaming data, often making use of outsourced, third-party computational platforms. However, third-party outsourcing can lead to unwanted violations of data providers' access controls or privacy policies, as data potentially flows through untrusted infrastructure. To address these types of violations, data providers can elect to use stream processing techniques based upon computation-Enabling Encryption. Unfortunately, this class of solutions can leak information about underlying plaintext values, reduce the possible set of queries that can be executed, and come with detrimental performance overheads. To alleviate the concerns with cryptographically-enforced access controls in DSPSs, we have developed \system, a DSPS that makes use of Intel's Software Guard Extensions (SGX) to protect data being processed on untrusted infrastructure. We show that \system can execute arbitrary queries while leaking no more information than an idealized \baseline system. At the same time, an extensive evaluation shows that the overheads associated with stream processing in \system are comparable to its computation-Enabling Encryption counterparts for many queries.
Lorenz Schauer - One of the best experts on this subject based on the ideXlab platform.
-
Wi-Fi Tracking Threatens Users’ Privacy in Fingerprinting Techniques
Geographical and Fingerprinting Data to Create Systems for Indoor Positioning and Indoor Outdoor Navigation, 2020Co-Authors: Lorenz SchauerAbstract:Abstract The widespread adoption of mobile devices has led to an increased usage of Wi-Fi and Bluetooth. Both communication systems leak information during operation, which has been used for localization and tracking without the user’s consent or even awareness. In case of Wi-Fi fingerprinting, additional network scans are preformed and thus, even more signal information can be captured leading to a serious privacy issue. This chapter deals with such risks for users’ privacy. First, technical aspects as well as potentials and limitations of existing approaches are presented. Second, several security mechanisms are introduced Enabling Encryption and MAC address randomization at the mobile device. Third, a privacy-preserving indoor positioning approach is proposed where no frames are sent out actively. All methods are discussed in terms of feasibility and their ability to protect users’ privacy in real-world scenarios. It is shown that an overall solution is still missing.
Jonas Törnroth - One of the best experts on this subject based on the ideXlab platform.
-
A Server Based Wireless Wallet Enabling Secure PaymentTransactions
2020Co-Authors: Jonas TörnrothAbstract:At present there is a desire from content providers and merchants for a mechanism that would allow them to enhance trade over the World Wide Web. Security issues inhibit the development of e-commerce hence a secure and user accepted payment service would be embraced. This paper introduces a solution for how secure payment transactions can be made. The server based wireless wallet is presented as a solution by which the user could replace his wallet with a SIM Application Toolkit enabled cellular phone. The wireless wallet constitutes the central part of an e-commerce gateway, which enables the application to provide secure sessions between the Mobile Station and the wireless wallet. It consists of a Wireless Internet Gateway, Transport Server and the wireless wallet. A Wireless Internet Browser stored on the SIM makes secure payment transactions possible. This browser includes a security plug-in Enabling Encryption on the SIM. The wireless wallet concept is realized and verified by a demonstration implementation and an analysis on what would be required from a live system. The conclusions drawn from this analysis will be that it is technically feasible to deploy the wireless wallet however before this can be done further security enhancements are needed. This work has been conducted at Across Wireless AB.