The Experts below are selected from a list of 13722 Experts worldwide ranked by ideXlab platform
Seungwon Shin - One of the best experts on this subject based on the ideXlab platform.
-
the smaller the shrewder a simple Malicious Application can kill an entire sdn environment
International Workshop on Security, 2016Co-Authors: Seungsoo Lee, Changhoon Yoon, Seungwon ShinAbstract:Security vulnerability assessment is an important process that must be conducted against any system before the deployment, and emerging technologies are no exceptions. Software-Defined Networking (SDN) has aggressively evolved in the past few years and is now almost at the early adoption stage. At this stage, the attack surface of SDN should be thoroughly investigated and assessed in order to mitigate possible security breaches against SDN. Inspired by the necessity, we reveal three attack scenarios that leverage SDN Application to attack SDNs, and test the attack scenarios against three of the most popular SDN controllers available today. In addition, we discuss the possible defense mechanisms against such Application-originated attacks.
-
SDN-NFV@CODASPY - The Smaller, the Shrewder: A Simple Malicious Application Can Kill an Entire SDN Environment
Proceedings of the 2016 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization - SDN-NFV Security '16, 2016Co-Authors: Changhoon Yoon, Seungwon ShinAbstract:Security vulnerability assessment is an important process that must be conducted against any system before the deployment, and emerging technologies are no exceptions. Software-Defined Networking (SDN) has aggressively evolved in the past few years and is now almost at the early adoption stage. At this stage, the attack surface of SDN should be thoroughly investigated and assessed in order to mitigate possible security breaches against SDN. Inspired by the necessity, we reveal three attack scenarios that leverage SDN Application to attack SDNs, and test the attack scenarios against three of the most popular SDN controllers available today. In addition, we discuss the possible defense mechanisms against such Application-originated attacks.
Seungsoo Lee - One of the best experts on this subject based on the ideXlab platform.
-
the smaller the shrewder a simple Malicious Application can kill an entire sdn environment
International Workshop on Security, 2016Co-Authors: Seungsoo Lee, Changhoon Yoon, Seungwon ShinAbstract:Security vulnerability assessment is an important process that must be conducted against any system before the deployment, and emerging technologies are no exceptions. Software-Defined Networking (SDN) has aggressively evolved in the past few years and is now almost at the early adoption stage. At this stage, the attack surface of SDN should be thoroughly investigated and assessed in order to mitigate possible security breaches against SDN. Inspired by the necessity, we reveal three attack scenarios that leverage SDN Application to attack SDNs, and test the attack scenarios against three of the most popular SDN controllers available today. In addition, we discuss the possible defense mechanisms against such Application-originated attacks.
Changhoon Yoon - One of the best experts on this subject based on the ideXlab platform.
-
the smaller the shrewder a simple Malicious Application can kill an entire sdn environment
International Workshop on Security, 2016Co-Authors: Seungsoo Lee, Changhoon Yoon, Seungwon ShinAbstract:Security vulnerability assessment is an important process that must be conducted against any system before the deployment, and emerging technologies are no exceptions. Software-Defined Networking (SDN) has aggressively evolved in the past few years and is now almost at the early adoption stage. At this stage, the attack surface of SDN should be thoroughly investigated and assessed in order to mitigate possible security breaches against SDN. Inspired by the necessity, we reveal three attack scenarios that leverage SDN Application to attack SDNs, and test the attack scenarios against three of the most popular SDN controllers available today. In addition, we discuss the possible defense mechanisms against such Application-originated attacks.
-
SDN-NFV@CODASPY - The Smaller, the Shrewder: A Simple Malicious Application Can Kill an Entire SDN Environment
Proceedings of the 2016 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization - SDN-NFV Security '16, 2016Co-Authors: Changhoon Yoon, Seungwon ShinAbstract:Security vulnerability assessment is an important process that must be conducted against any system before the deployment, and emerging technologies are no exceptions. Software-Defined Networking (SDN) has aggressively evolved in the past few years and is now almost at the early adoption stage. At this stage, the attack surface of SDN should be thoroughly investigated and assessed in order to mitigate possible security breaches against SDN. Inspired by the necessity, we reveal three attack scenarios that leverage SDN Application to attack SDNs, and test the attack scenarios against three of the most popular SDN controllers available today. In addition, we discuss the possible defense mechanisms against such Application-originated attacks.
Kijun Han - One of the best experts on this subject based on the ideXlab platform.
-
Counter Measuring Conceivable Security Threats on Smart Healthcare Devices
IEEE Access, 2018Co-Authors: Syeda Mariam Muzammal, Ghufran Ahmed, Shehzad Khalid, Sohail Jabbar, Shahid Hussain, Munam Ali Shah, Hasan Ali Khattak, Kijun HanAbstract:Smart devices, the carriers of a huge amount of private, sensitive and confidential data are pervasive in today’s world with innovative and enhanced functionalities. Smartphones have brought tremendous change in people’s lives with the launch of a new platform of communication and an ease of access to a wide range of Applications. Due to the swift increase in the users of Android smartphones and the increasing demands based on advanced ease and features, developers are working hard to achieve the needful. Easy access to certain features and Applications gave rise to the powerfulness and an efficacy of various threats, risks and vulnerabilities that can victimize users’ private data residing in smartphone paradigm. With the developments and enhancements in malware, for Android-based smartphones, attacks continue to occur. In this paper, we investigate one of the possibly most destructive attacks for Android, that is, screenshot attack. We have developed “ScreenStealer” Application and explored the vulnerabilities which make Android more inclined to risks and threats. Furthermore, we evaluated capture ratio of screenshots, resources consumption and execution time to determine effectiveness, efficiency and stealthiness of such a Malicious Application.
Travis Atkison - One of the best experts on this subject based on the ideXlab platform.
-
ACM Southeast Regional Conference - Applying static analysis to high-dimensional Malicious Application detection
Proceedings of the 51st ACM Southeast Conference on - ACMSE '13, 2013Co-Authors: Sean Semple, Stanislav Ponomarev, Jan Durand, Travis AtkisonAbstract:Signature based anti-virus systems inherently restrict the detection of new and previously unknown types of Malicious attacks. To that end researchers are searching for methodologies to combat this problem. One potential method is the use of static Application analysis. Using this methodology the Applications are not executed to determine whether or not they contain Malicious functionality. This paper presents a static Application analysis methodology using the information retrieval technique of n-gram analysis and the dimensionality reduction techniques of randomized projection and mutual information to create a Malicious Application detection model. For this effort, a data set was extracted from Microsoft Windows Applications that were either benign or possessed Malicious functionality. Dimensionality and prediction methodology was then applied. Initial results show promise when comparing the prediction to expected outcomes. In one performance evaluation, the Boosted J48 algorithm achieved an accuracy of 99.08%.
-
ACM Southeast Regional Conference - Using randomized projection techniques to aid in detecting high-dimensional Malicious Applications
Proceedings of the 49th Annual Southeast Regional Conference on - ACM-SE '11, 2011Co-Authors: Jan Durand, Travis AtkisonAbstract:This work is part of an on-going effort in using randomized projection as a feature extraction and reduction method to improve a cosine similarity, information retrieval technique to enhance the detection of known Malicious Applications and their variations. We follow a standard information retrieval methodology that allows software to be regarded as documents in the corpus. This provides the ability to search the corpus with a query, Malicious software, and retrieve/identify potentially Malicious software and other instances of the same type of vulnerability. In our experiments, we compare Gaussian-distributed random matrix randomized projection to two alternative methods of randomized projection, sparse matrix randomized projection and Linial-London-Rabinovich random set randomized projection, and assess their performance when applied to features of Malicious Applications extracted via the information retrieval technique of n-gram analysis. In our results, the Gaussian distributed random matrix approach outperformed the other methods with generally higher values for each observed performance metric, however, each algorithm showed promise in selected scenarios. These results support the hypothesis that applying the technique of random matrix projection as a dimensionality reduction method for the cosine similarity metric has merit in determining if an Application may contain a Malicious Application.
-
ACM Southeast Regional Conference - Aiding prediction algorithms in detecting high-dimensional Malicious Applications using a randomized projection technique
Proceedings of the 48th Annual Southeast Regional Conference on - ACM SE '10, 2010Co-Authors: Travis AtkisonAbstract:This research paper describes an on-going effort to design, develop and improve upon Malicious Application detection algorithms. This work looks specifically at improving a cosine similarity, information retrieval technique to enhance detection of known and variances of known Malicious Applications by applying the feature extraction technique known as randomized projection. Document similarity techniques, such as cosine similarity, have been used with great success in several document retrieval Applications. By following a standard information retrieval methodology, software, in machine readable format, can be regarded as documents in the corpus. These "documents" may or may not have a known Malicious functionality. The query is software, again in machine readable format, which contains a certain type of Malicious software. This methodology provides an ability to search the corpus with a query and retrieve/identify potentially Malicious software as well as other instances of the same type of vulnerability. Retrieval is based on the similarity of the query to a given document in the corpus. There have been several efforts to overcome what is known as 'the curse of dimensionality' that can occur with the use of this type of information retrieval technique including mutual information and randomized projections. Randomized projections are used to create a low-order embedding of the high dimensional data. Results from experimentation have shown promise over previously published efforts.