The Experts below are selected from a list of 111 Experts worldwide ranked by ideXlab platform
Pamela D. Van Epps - One of the best experts on this subject based on the ideXlab platform.
-
Software piracy and Software security measures in business schools
Information & Management, 1992Co-Authors: Pamela D. Van EppsAbstract:Abstract Many business schools have become heavily dependent on microcomputers for educational purposes. This has exposed them to a new type of risk involving Unauthorized Software copying by faculty, staff, and students. An analysis of the results of a field survey on Software piracy and Software security measures is presented here. Participants included 241 member schools of the American Assembly of Collegiate Schools of Business (AACSB). Some suggestions are then made on Software security measures designed to reduce legal consequences for copyright infringements by faculty, staff, and students.
-
Software piracy and Software security in business schools: an ethical perspective
ACM Sigmis Database, 1991Co-Authors: Pamela D. Van EppsAbstract:Many business schools have become heavily dependent on microcomputers for educational purposes. That exposes them to a new type of ethical issue---the ramifications involved with Unauthorized Software copying by faculty, staff, and students. This article presents the results of a field survey on Software piracy and Software security in 241 member schools of the American Assembly of Collegiate Schools of Business (AACSB). The authors discuss some important findings concerning Software security procedures and policies to reduce legal responsibilities for copyright infringements by faculty, staff and students. The article concludes with some recommendations for creating and sustaining an environment where conditions contributing to Software piracy and security issues are minimized.
V.a. Wegner - One of the best experts on this subject based on the ideXlab platform.
-
Software copy protection systems: structure, analysis, attacks
Proceedings 1992 International Carnahan Conference on Security Technology: Crime Countermeasures, 1992Co-Authors: A.v. Spesivtsev, A.j. Krutjakov, V.v. Seregin, V.a. Sidorov, V.a. WegnerAbstract:Copy protection systems are a reliable way to protect programmers' rights and to stimulate market development because they prevent Unauthorized Software use and copying. The main functions and structure of such systems are discussed. Possible attacks and breaking of copy protection systems are considered. One of the strongest systems, called the Iron Curtain, is described. Recommendations for selection of the right copy protection system are given. >
Weidong Shi - One of the best experts on this subject based on the ideXlab platform.
-
Towards the issues in architectural support for protection of Software execution
ACM Sigarch Computer Architecture News, 2005Co-Authors: Weidong Shi, Hsien-hsin S. Lee, Mrinmoy GhoshAbstract:Recently, there is a growing interest in the research community to employ tamper-resistant processors for Software protection. Many of these proposed systems rely on a specially tailored secure processor to prevent 1) illegal Software duplication, 2) Unauthorized Software modification, and 3) Unauthorized Software reverse engineering. Most of these works primarily focus on the feasibility demonstration and design details rather than trying to elucidate many fundamental issues that are either "elusive" or "confusing" to the architecture researchers. Furthermore, many proposed systems have been built on assumptions whose security implications have not been well studied or understood. Instead of proposing yet another new secure architecture model, in this paper, we will try to answer some of these fundamental questions with respect to using hardware-based cryptography for protecting Software execution. Those issues include, 1) Is hardware cryptography necessary? 2) Is per-process single cryptography key enough to provide the flexibility, inter-operability, and compatibility required by today's complex Software system? 3) Is OTP (one-time-pad) in combination with "lazy" authentication secure enough to protect Software confidentiality? 4) Is there way to protect Software integrity using less hardware resource? Finally, the paper defines the difference between off-line and on-line attacks and presents a very low overhead security enhancement technique that can improve protection on Software integrity over on-line attacks by several magnitudes.
-
Digital Rights Management Workshop - Attacks and risk analysis for hardware supported Software copy protection systems
Proceedings of the 4th ACM workshop on Digital rights management - DRM '04, 2004Co-Authors: Weidong Shi, Hsien-hsin S. Lee, Tao ZhangAbstract:Recently, there is a growing interest in the research community to use tamper-resistant processors for Software copy protection. Many of these tamper-resistant systems rely on a specially tailored secure processor to prevent, 1) illegal Software duplication, 2) Unauthorized Software modification, and 3)Unauthorized Software reverse engineering. The published techniques primarily focused on feasibility demonstration and design details rather than analyzing security risks and potential attacks from an adversary's perspective. The uniqueness of Software copy protection may lead to some potential attacks on such a secure environment that have been largely ignored or insufficiently addressed in the literature. One should not take security for granted just because it is implemented on a tamper-resistant secure processor. Detailed analysis on some proposed ideas reveal potential vulnerability and attacks. Some of the attacks are known to the security community, nevertheless, their implications to Software copy protection are not well understood and discussed. This paper presents these cases for designers to improve their systems and circumvent the potential security pitfalls and for users of such systems to be aware of the potential risks
A.v. Spesivtsev - One of the best experts on this subject based on the ideXlab platform.
-
Software copy protection systems: structure, analysis, attacks
Proceedings 1992 International Carnahan Conference on Security Technology: Crime Countermeasures, 1992Co-Authors: A.v. Spesivtsev, A.j. Krutjakov, V.v. Seregin, V.a. Sidorov, V.a. WegnerAbstract:Copy protection systems are a reliable way to protect programmers' rights and to stimulate market development because they prevent Unauthorized Software use and copying. The main functions and structure of such systems are discussed. Possible attacks and breaking of copy protection systems are considered. One of the strongest systems, called the Iron Curtain, is described. Recommendations for selection of the right copy protection system are given. >
Darko Kirovski - One of the best experts on this subject based on the ideXlab platform.
-
MICRO - A Hardware-Software Platform for Intrusion Prevention
37th International Symposium on Microarchitecture (MICRO-37'04), 2004Co-Authors: Milenko Drinic, Darko KirovskiAbstract:Preventing execution of Unauthorized Software on a given computer plays a pivotal role in system security. The key problem is that although a program at the beginning of its execution can be verified as authentic, its execution flow can be redirected to externally injected malicious code using, for example, a buffer overflow exploit. We introduce a novel, simplified, hardware-assisted intrusion prevention platform. Our platform introduces overlapping of program execution and MAC verification. It partitions a program binary into blocks of instructions. Each block is signed using a keyed MAC that is attached as a footer to the block. When the control flow reaches a particular block, its instructions are speculatively executed, while dedicated hardware verifies the attached MAC at run-time. The computation state is preserved during speculative execution using a mediating buffer placed between the processor and L1 data cache. Upon MAC verification, the results from this buffer are propagated externally. Central to this paper is the proposal of a novel optimization technique that initially identifies instructions that are likely to stall execution, and reorders basic blocks within a given instruction block to minimize the execution overhead. While the presented optimization technique is problem specific, it is flexible such that it can be adjusted for different optimization goals. Preliminary results showed that our optimization methods produced an average overhead reduction of 60% on the SPEC2000 benchmark suite and Microsoft Visual FoxPro.
-
ASPLOS - Enabling trusted Software integrity
Tenth international conference on architectural support for programming languages and operating systems on Proceedings of the 10th international confe, 2002Co-Authors: Darko Kirovski, Milenko Drinic, Miodrag PotkonjakAbstract:Preventing execution of Unauthorized Software on a given computer plays a pivotal role in system security. The key problem is that although a program at the beginning of its execution can be verified as authentic, while running, its execution flow can be redirected to externally injected malicious code using, for example, a buffer overflow exploit. Existing techniques address this problem by trying to detect the intrusion at run-time or by formally verifying that the Software is not prone to a particular attack.We take a radically different approach to this problem. We aim at intrusion prevention as the core technology for enabling secure computing systems. Intrusion prevention systems force an adversary to solve a computationally hard task in order to create a binary that can be executed on a given machine. In this paper, we present an exemplary system--SPEF--a combination of architectural and compilation techniques that ensure Software integrity at run-time. SPEF embeds encrypted, processor-specific constraints into each block of instructions at Software installation time and then verifies their existence at run-time. Thus, the processor can execute only properly installed programs, which makes installation the only system gate that needs to be protected. We have designed a SPEF prototype based on the ARM instruction set and validated its impact on security and performance using the MediaBench suite of applications.