The Experts below are selected from a list of 360 Experts worldwide ranked by ideXlab platform
Shiang-jiun Chen - One of the best experts on this subject based on the ideXlab platform.
-
Analysis on Cloud-Based Security Vulnerability Assessment
2010 IEEE 7th International Conference on E-Business Engineering, 2010Co-Authors: Huan-chung Li, Po-huei Liang, Jiann-min Yang, Shiang-jiun ChenAbstract:Cloud computing delivery model can significantly reduce enterprise IT costs and complexities. This technology can handle the rapidly gowning environment and provide more flexible resources sharing and hence it has become as anew information technology infrastructure recently. In contrast to traditional enterprise IT solution, cloud computing moves the application software and databases to the servers in large data centers which raise many Security challenges. The business model now allows the users to purchase the capacity they require when they require it. The providers can maximize the utilization by multiplexing customer virtual machines (VMs) across a shared physical infrastructure. In the shared cloud environment, it would be possible to launch an attack cross VMs. How to define the policies for individual virtual firewall becomes more important. In this paper, we investigate the different Security Vulnerability assessments among the cloud environments. Experiment shows there are more Vulnerability happened if Vulnerability tools and the servers are in the same LAN. In other word, the hackers can find an easier way to get the target information if sit on the same LAN. This experimental result can be used to analysis the risk in third party compute clouds.
Joshua W Busby - One of the best experts on this subject based on the ideXlab platform.
-
climate Security Vulnerability in africa mapping 3 01
Political Geography, 2014Co-Authors: Joshua W Busby, Todd G Smith, Nisha KrishnanAbstract:Abstract Climate change is expected to have severe consequences on the lives and livelihoods of millions of people around the world, but its effects will not be evenly distributed. Africa is thought to be especially vulnerable, given both high exposure to climate change and relatively low community resilience and governance capabilities. With climate change adaptation looming ever larger as an important policy area, understanding where climate vulnerabilities are located therefore has immense practical significance. This article details the methodological refinements made to an existing model of climate Security Vulnerability, the rationale for the approach, and the findings. The model introduces more fine-grained data and new methods of normalizing the data to retain more granularity, as well as other changes. The Vulnerability maps show the Horn of Africa (Somalia in particular), South Sudan, the eastern coasts of Madagascar and Mozambique, northern Nigeria and southern Mali, Burundi, Sierra Leone and Guinea, as well as pockets along rivers and coasts in Egypt and Nigeria to be the most vulnerable. For validation, the model is also compared to maps of climate-related disaster counts, fatalities, and affected populations derived from the EM-DAT International Disaster database.
-
Identifying hot spots of Security Vulnerability associated with climate change in Africa
Climatic Change, 2014Co-Authors: Joshua W Busby, Todd G Smith, Kerry H. Cook, Edward K. Vizy, Mesfin BekaloAbstract:Given its high dependence on rainfed agriculture and its comparatively low adaptive capacity, Africa is frequently invoked as especially vulnerable to climate change. Within Africa, there is likely to be considerable variation in Vulnerability to climate change both between and within countries. This paper seeks to advance the agenda of identifying the hot spots of what we term “climate Security” Vulnerability, areas where the confluence of vulnerabilities could put large numbers of people at risk of death from climate-related hazards. This article blends the expertise of social scientists and climate scientists. It builds on a model of composite Vulnerability that incorporates four “baskets” or processes that are thought to contribute to Vulnerability including: (1) physical exposure, (2) population density, (3) household and community resilience, and (4) governance and political violence. Whereas previous iterations of the model relied on historical physical exposure data of natural hazards, this paper uses results from regional model simulations of African climate in the late 20th century and mid-21st century to develop measures of extreme weather events—dry days, heat wave events, and heavy rainfall days—coupled with an indicator of low-lying coastal elevation. For the late 20th century, this mapping process reveals the most vulnerable areas are concentrated in Chad, the Democratic Republic of the Congo, Niger, Somalia, Sudan, and South Sudan, with pockets in Burkina Faso, Ethiopia, Guinea, Mauritania, and Sierra Leone. The mid 21st century projection shows more extensive Vulnerability throughout the Sahel, including Burkina Faso, Chad, Mali, northern Nigeria, Niger, and across Sudan.
Ali Ismail Awad - One of the best experts on this subject based on the ideXlab platform.
-
cyber and physical Security Vulnerability assessment for iot based smart homes
Sensors, 2018Co-Authors: Bako Ali, Ali Ismail AwadAbstract:The Internet of Things (IoT) is an emerging paradigm focusing on the connection of devices, objects, or "things" to each other, to the Internet, and to users. IoT technology is anticipated to become an essential requirement in the development of smart homes, as it offers convenience and efficiency to home residents so that they can achieve better quality of life. Application of the IoT model to smart homes, by connecting objects to the Internet, poses new Security and privacy challenges in terms of the confidentiality, authenticity, and integrity of the data sensed, collected, and exchanged by the IoT objects. These challenges make smart homes extremely vulnerable to different types of Security attacks, resulting in IoT-based smart homes being insecure. Therefore, it is necessary to identify the possible Security risks to develop a complete picture of the Security status of smart homes. This article applies the operationally critical threat, asset, and Vulnerability evaluation (OCTAVE) methodology, known as OCTAVE Allegro, to assess the Security risks of smart homes. The OCTAVE Allegro method focuses on information assets and considers different information containers such as databases, physical papers, and humans. The key goals of this study are to highlight the various Security vulnerabilities of IoT-based smart homes, to present the risks on home inhabitants, and to propose approaches to mitigating the identified risks. The research findings can be used as a foundation for improving the Security requirements of IoT-based smart homes.
Mourad Debbabi - One of the best experts on this subject based on the ideXlab platform.
-
a synergy between static and dynamic analysis for the detection of software Security vulnerabilities
Lecture Notes in Computer Science, 2009Co-Authors: Aiman Hanna, Hai Zhou Ling, Xiaochun Yang, Mourad DebbabiAbstract:The main contribution of this paper is a framework for Security testing. The key components of this framework are twofold: First, a static analyzer that automatically identifies suspicious sites of Security vulnerabilities in a control flow graph. Second, a test-data generator. The intent is to attempt proving/disproving whether, or not, the suspicious sites are actual vulnerabilities. The paper introduces the static-dynamic hybrid Vulnerability detection system, a system that targets the automation of Security Vulnerability detection in software. The system combines the detection powers of both static and dynamic analysis. Various components compose this model, namely Static Vulnerability Revealer, Goal-Path-oriented System, and Dynamic Vulnerability Detector.
Wei Li - One of the best experts on this subject based on the ideXlab platform.
-
comments on dac macs effective data access control for multiauthority cloud storage systems Security analysis of attribute revocation in multiauthority data access control for cloud storage systems
IEEE Transactions on Information Forensics and Security, 2015Co-Authors: Jianan Hong, Wei LiAbstract:In the above paper, Yang et al . have proposed a multi-authority ciphertext-policy attribute-based encryption-based data access control for cloud storage, in which the authors claimed that the mechanism in dealing with attribute revocation could achieve both forward Security and backward Security. Unfortunately, our further analysis and investigation show that their work adopts a bidirectional re-encryption method in ciphertext updating, so a Security Vulnerability appears. Our proposed attack method demonstrates that a revoked user can still decrypt new ciphertexts that are claimed to require the new-version secret keys to decrypt.