Open Access. Powered by Scholars. Published by Universities.®
- Discipline
-
- Engineering (80)
- Social and Behavioral Sciences (75)
- Law (71)
- Computer Law (67)
- Forensic Science and Technology (64)
-
- Legal Studies (64)
- Computer Engineering (60)
- Electrical and Computer Engineering (47)
- Sociology (23)
- OS and Networks (21)
- Other Computer Sciences (20)
- Aviation (18)
- Defense and Security Studies (18)
- Public Affairs, Public Policy and Public Administration (18)
- Aviation Safety and Security (17)
- National Security Law (17)
- Social Control, Law, Crime, and Deviance (17)
- Databases and Information Systems (15)
- Medicine and Health Sciences (11)
- Health Information Technology (8)
- Software Engineering (7)
- Systems Architecture (7)
- Communication (5)
- Theory and Algorithms (5)
- Business (4)
- Programming Languages and Compilers (4)
- Criminology (3)
- Institution
-
- Embry-Riddle Aeronautical University (70)
- Edith Cowan University (44)
- Singapore Management University (37)
- University of New Haven (8)
- Nova Southeastern University (7)
-
- The University of San Francisco (6)
- Maurer School of Law: Indiana University (3)
- San Jose State University (3)
- DePauw University (2)
- Franklin University (2)
- Kennesaw State University (2)
- Rose-Hulman Institute of Technology (2)
- University of Dayton (2)
- Air Force Institute of Technology (1)
- Boise State University (1)
- California Polytechnic State University, San Luis Obispo (1)
- East Tennessee State University (1)
- Eastern Michigan University (1)
- Governors State University (1)
- LSU New Orleans (1)
- Marquette University (1)
- Northern Michigan University (1)
- Parkland College (1)
- Portland State University (1)
- Sacred Heart University (1)
- Syracuse University (1)
- University of Arkansas, Fayetteville (1)
- University of Central Florida (1)
- University of Richmond (1)
- Western University (1)
- Keyword
-
- Digital forensics (18)
- Security (15)
- Big data (8)
- Privacy (7)
- Approximate matching (6)
-
- Mrsh-v2 (6)
- Android (5)
- Authentication (5)
- Computer security (5)
- Cyber security (5)
- Digital evidence (5)
- Forensics (5)
- Bloom filter (4)
- Data privacy (4)
- Encryption (4)
- Information security (4)
- Mobile device forensics (4)
- Network forensics (4)
- Sdhash (4)
- Smartphone (4)
- Social media (4)
- [RSTDPub] (4)
- Analytics (3)
- Cloud forensics (3)
- Communications (3)
- Cybersecurity (3)
- Data protection (3)
- Discrete logarithm (3)
- Hashing (3)
- Healthcare (3)
- Publication
-
- Journal of Digital Forensics, Security and Law (50)
- Research Collection School Of Computing and Information Systems (36)
- Annual ADFSL Conference on Digital Forensics, Security and Law (17)
- Australian Information Security Management Conference (13)
- Australian Digital Forensics Conference (12)
-
- Australian eHealth Informatics and Security Conference (8)
- Electrical & Computer Engineering and Computer Science Faculty Publications (8)
- CCAC Theses and Dissertations (7)
- Media Studies (6)
- Australian Information Warfare and Security Conference (4)
- Research outputs 2014 to 2021 (4)
- Articles by Maurer Faculty (3)
- Australian Security and Intelligence Conference (3)
- Master's Projects (3)
- All Faculty and Staff Scholarship (2)
- Computer Science Faculty Publications (2)
- Publications (2)
- A with Honors Projects (1)
- All Capstone Projects (1)
- Annual Student Research Poster Session (1)
- Bookshelf (1)
- College of Arts and Sciences Presentations (1)
- Conference Papers in Published Proceedings (1)
- Department of Electrical Engineering and Computer Science - Daytona Beach (1)
- Dissertations (1934 -) (1)
- Dissertations and Theses (1)
- Dissertations and Theses Collection (Open Access) (1)
- Dissertations, Theses and Capstone Projects (1)
- Electrical Engineering and Computer Science - All Scholarship (1)
- Electrical and Computer Engineering Publications (1)
- Publication Type
Articles 91 - 120 of 205
Full-Text Articles in Information Security
The Security Of Simplified Data Encryption Standard, Brandon Barker
The Security Of Simplified Data Encryption Standard, Brandon Barker
College of Arts and Sciences Presentations
The Data Encryption Standard (DES) is the most widely used symmetric key cryptosystem in the commercial world. DES was published in 1975 by the National Bureau of Standards, and since then it and its variants have been commonly used. DES is utilized in many modern industries and products including the Blackberry, electronic financial transactions, and access cards to corporate offices. An efficient but secure cryptosystem is challenging to produce and even after it has been deemed “secure” new attacks and vulnerabilities are often discovered. By investigating the algebraic structure of a simplified version of DES we are able to analyze …
Automatic Objects Removal For Scene Completion, Jianjun Yang, Yin Wang, Honggang Wang, Kun Hua, Wei Wang, Ju Shen
Automatic Objects Removal For Scene Completion, Jianjun Yang, Yin Wang, Honggang Wang, Kun Hua, Wei Wang, Ju Shen
Computer Science Faculty Publications
With the explosive growth of Web-based cameras and mobile devices, billions of photographs are uploaded to the Internet. We can trivially collect a huge number of photo streams for various goals, such as 3D scene reconstruction and other big data applications. However, this is not an easy task due to the fact the retrieved photos are neither aligned nor calibrated. Furthermore, with the occlusion of unexpected foreground objects like people, vehicles, it is even more challenging to find feature correspondences and reconstruct realistic scenes. In this paper, we propose a structure-based image completion algorithm for object removal that produces visually …
A Hybrid Scheme For Authenticating Scalable Video Codestreams, Zhuo Wei, Yongdong Wu, Robert H. Deng, Xuhua Ding
A Hybrid Scheme For Authenticating Scalable Video Codestreams, Zhuo Wei, Yongdong Wu, Robert H. Deng, Xuhua Ding
Research Collection School Of Computing and Information Systems
A scalable video coding (SVC) codestream consists of one base layer and possibly several enhancement layers. The base layer, which contains the lowest quality and resolution images, is the foundation of the SVC codestream and must be delivered to recipients, whereas enhancement layers contain richer contour/texture of images in order to supplement the base layer in resolution, quality, and temporal scalabilities. This paper presents a novel hybrid authentication (HAU) scheme. The HAU employs both cryptographic authentication and content-based authentication techniques to ensure integrity and authenticity of the SVC codestreams. Our analysis and experimental results indicate that the HAU is able …
Semantic Privacy Policies For Service Description And Discovery In Service-Oriented Architecture, Diego Z. Garcia, Miriam A M Capretz, M. Beatriz F. Toledo
Semantic Privacy Policies For Service Description And Discovery In Service-Oriented Architecture, Diego Z. Garcia, Miriam A M Capretz, M. Beatriz F. Toledo
Electrical and Computer Engineering Publications
Privacy preservation in Service-Oriented Architecture (SOA) is an open problem. This paper focuses on the areas of service description and discovery. The problems in these areas are that currently it is not possible to describe how a service provider deals with information received from a service consumer as well as discover a service that satisfies the privacy preferences of a consumer. There is currently no framework which offers a solution that supports a rich description of privacy policies and their integration in the process of service discovery. Thus, the main goal of this paper is to propose a privacy preservation …
How Many Credit Card Frauds Must We Endure Before Security Improves?, Maritza Martinez
How Many Credit Card Frauds Must We Endure Before Security Improves?, Maritza Martinez
UCF Forum
Yes, it can happen to you…
Inferences & Connections, Tamara Kneese
Inferences & Connections, Tamara Kneese
Media Studies
Data-oriented systems are inferring relationships between people based on genetic material, behavioral patterns (e.g., shared geography imputed by phone carriers), and performed associations (e.g., "friends" online or shared photographs). What responsibilities do entities who collect data that imputes connections have to those who are implicated by association? For example, as DNA and other biological materials are collected outside of medicine (e.g., at point of arrest, by informatics services like 23andme, for scientific inquiry), what rights do relatives (living, dead, and not-yet-born) have? In what contexts is it acceptable to act based on inferred associations and in which contexts is it …
Algorithmic Accountability, Tamara Kneese
Algorithmic Accountability, Tamara Kneese
Media Studies
Accountability is fundamentally about checks and balances to power. In theory, both government and corporations are kept accountable through social, economic, and political mechanisms. Journalism and public advocates serve as an additional tool to hold powerful institutions and individuals accountable. But in a world of data and algorithms, accountability is often murky. Beyond questions about whether the market is sufficient or governmental regulation is necessary, how should algorithms be held accountable? For example what is the role of the fourth estate in holding data-oriented practices accountable?
Data Supply Chains, Tamara Kneese
Data Supply Chains, Tamara Kneese
Media Studies
As data moves between actors and organizations, what emerges is a data supply chain. Unlike manufacturing supply chains, transferred data is often duplicated in the process, challenging the essence of ownership. What does ethical data labor look like? How are the various stakeholders held accountable for being good data guardians? What does clean data transfer look like? What kinds of best practices can business and government put into place? What upstream rights to data providers have over downstream commercialization of their data?
Predicting Human Behavior, Tamara Kneese
Predicting Human Behavior, Tamara Kneese
Media Studies
Countless highly accurate predictions can be made from trace data, with varying degrees of personal or societal consequence (e.g., search engines predict hospital admission, gaming companies can predict compulsive gambling problems, government agencies predict criminal activity). Predicting human behavior can be both hugely beneficial and deeply problematic depending on the context. What kinds of predictive privacy harms are emerging? And what are the implications for systems of oversight and due process protections? For example, what are the implications for employment, health care and policing when predictive models are involved? How should varied organizations address what they can predict?
Inequalities And Asymmetries, Tamara Kneese
Inequalities And Asymmetries, Tamara Kneese
Media Studies
The availability of data is not evenly distributed. Some organizations, agencies, and sectors are better equipped to gather, use, and analyze data than others. If data is transformative, what are the consequences of defense and security agencies having greater capacity to leverage data than, say, education or social services? Financial wherewithal, technical capacity, and political determinants all affect where data is employed. As data and analytics emerge, who benefits and who doesn't, both at the individual level and the institutional level? What about the asymmetries between those who provide the data and those who collect it? How does uneven data …
Using Spammers' Computing Resources For Volunteer Computing, Thai Le Quy Bui
Using Spammers' Computing Resources For Volunteer Computing, Thai Le Quy Bui
Dissertations and Theses
Spammers are continually looking to circumvent counter-measures seeking to slow them down. An immense amount of time and money is currently devoted to hiding spam, but not enough is devoted to effectively preventing it. One approach for preventing spam is to force the spammer's machine to solve a computational problem of varying difficulty before granting access. The idea is that suspicious or problematic requests are given difficult problems to solve while legitimate requests are allowed through with minimal computation. Unfortunately, most systems that employ this model waste the computing resources being used, as they are directed towards solving cryptographic problems …
Keystroke Biometrics: The User Perspective, Chee Meng Tey, Payas Gupta, Kartik Muralidaran, Debin Gao
Keystroke Biometrics: The User Perspective, Chee Meng Tey, Payas Gupta, Kartik Muralidaran, Debin Gao
Research Collection School Of Computing and Information Systems
Usability is an important aspect of security, because poor usability motivates users to find shortcuts that bypass the system. Existing studies on keystroke biometrics evaluate the usability issue in terms of the average false rejection rate (FRR). We show in this paper that such an approach underestimates the user impact in two ways. First, the FRR of keystroke biometrics changes for the worse under a range of common conditions such as background music, exercise and even game playing. In a user study involving 111 participants, the average penalties (increases) in FRR are 0.0360 and 0.0498, respectively, for two different classifiers. …
Ropsteg: Program Steganography With Return Oriented Programming, Kangjie Lu, Siyang Xiong, Debin Gao
Ropsteg: Program Steganography With Return Oriented Programming, Kangjie Lu, Siyang Xiong, Debin Gao
Research Collection School Of Computing and Information Systems
Many software obfuscation techniques have been proposed to hide program instructions or logic and to make reverse engineering hard. In this paper, we introduce a new property in software obfuscation, namely program steganography, where certain instructions are "diffused" in others in such a way that they are non-existent until program execution. Program steganography does not raise suspicion in program analysis, and conforms to the W⊕X and mandatory code signing security mechanisms. We further implement RopSteg, a novel software obfuscation system, to provide (to a certain degree) program steganography using return-oriented programming. We apply RopSteg to eight Windows executables and evaluate …
Key-Aggregate Cryptosystem For Scalable Data Sharing In Cloud Storage, Cheng-Kang Chu, Sherman S. M. Chow, Wen-Guey Tzeng, Jiangying Zhou, Robert H. Deng
Key-Aggregate Cryptosystem For Scalable Data Sharing In Cloud Storage, Cheng-Kang Chu, Sherman S. M. Chow, Wen-Guey Tzeng, Jiangying Zhou, Robert H. Deng
Research Collection School Of Computing and Information Systems
Data sharing is an important functionality in cloud storage. In this article, we show how to securely, efficiently, and flexibly share data with others in cloud storage. We describe new public-key cryptosystems which produce constant-size ciphertexts such that efficient delegation of decryption rights for any set of ciphertexts are possible. The novelty is that one can aggregate any set of secret keys and make them as compact as a single key, but encompassing the power of all the keys being aggregated. In other words, the secret key holder can release a constant-size aggregate key for flexible choices of ciphertext set …
Ropecker: A Generic And Practical Approach For Defending Against Rop Attack, Yueqiang Cheng, Zongwei Zhou, Yu Miao, Xuhua Ding, Robert H. Deng
Ropecker: A Generic And Practical Approach For Defending Against Rop Attack, Yueqiang Cheng, Zongwei Zhou, Yu Miao, Xuhua Ding, Robert H. Deng
Research Collection School Of Computing and Information Systems
Return-Oriented Programming (ROP) is a sophisticated exploitation technique that is able to drive target applications to perform arbitrary unintended operations by constructing a gadget chain reusing existing small code sequences (gadgets). Existing defense mechanisms either only handle specific types of gadgets, require access to source code and/or a customized compiler, break the integrity of application binary, or suffer from high performance overhead. In this paper, we present a novel system, ROPecker, to efficiently and effectively defend against ROP attacks without relying on any other side information (e.g., source code and compiler support) or binary rewriting. ROPecker detects an ROP attack …
Identity Based Identification From Algebraic Coding Theory, Guomin Yang, Chik How Tan, Yi Mu, Willy Susilo, Duncan S. Wong
Identity Based Identification From Algebraic Coding Theory, Guomin Yang, Chik How Tan, Yi Mu, Willy Susilo, Duncan S. Wong
Research Collection School Of Computing and Information Systems
Cryptographic identification schemes allow a remote user to prove his/her identity to a verifier who holds some public information of the user, such as the user public key or identity. Most of the existing cryptographic identification schemes are based on numbertheoretic hard problems such as Discrete Log and Factorization. This paper focuses on the design and analysis of identity based identification (IBI) schemes based on algebraic coding theory. We first revisit an existing code-based IBI scheme which is derived by combining the Courtois–Finiasz–Sendrier signature scheme and the Stern zero-knowledge identification scheme. Previous results have shown that this IBI scheme is …
Hardware Components In Cybersecurity Education, Dan Chia-Tien Lo, Max North, Sarah North
Hardware Components In Cybersecurity Education, Dan Chia-Tien Lo, Max North, Sarah North
Faculty Articles
Hardware components have been designated as required academic content for colleges to be recognized as a center of academic excellence in cyber operations by the National Security Agency (NSA). To meet the hardware requirement, computer science and information technology programs must cover hardware concepts and design skills, topics which are less emphasized in existing programs. This paper describes a new pedagogical model for hardware based on network intrusion detection taught at college and graduate levels in a National Center of Academic Excellence in Information Assurance Education Program (CAE/IAE). The curriculum focuses on the fundamental concepts of network intrusion detection mechanisms, …
12th Australian Digital Forensics Conference, 2014, Edith Cowan University: Conference Details, Security Research Institute, Edith Cowan University
12th Australian Digital Forensics Conference, 2014, Edith Cowan University: Conference Details, Security Research Institute, Edith Cowan University
Australian Digital Forensics Conference
No abstract provided.
A Forensic Overview Of The Lg Smart Tv, Iain Sutherland, Konstantino Xynos, Huw Read, Andy Jones, Tom Drange
A Forensic Overview Of The Lg Smart Tv, Iain Sutherland, Konstantino Xynos, Huw Read, Andy Jones, Tom Drange
Australian Digital Forensics Conference
The emerging Smart TV platform will likely replace traditional television sets over time as the entertainment and communication centrepiece in people’s homes. Given its expanded functionality and now, its online presence, there is a need to identify how they may become part of forensic investigations. The purpose of this paper is to introduce the area of Smart TVs and the potential forensic value these systems present in combination with their ever advancing functionality and capabilities. We provide an overview of Smart TV systems highlighting functionality and potential issues. We also take an initial look at two particular models, from the …
Forensic Examination And Analysis Of The Prefetch Files On The Banking Trojan Malware Incidents, Andri P. Heriyanto
Forensic Examination And Analysis Of The Prefetch Files On The Banking Trojan Malware Incidents, Andri P. Heriyanto
Australian Digital Forensics Conference
Whenever a program runs within the operating system, there will be data or artefacts created on the system. This condition applies to the malicious software (malware). Although they intend to obscure their presence on the system with anti-forensic techniques, still they have to run on the victim’s system to acquire their objective. Modern malware creates a significant challenge to the digital forensic community since they are being designed to leave limited traces and misdirect the examiner. Therefore, every examiner should consider performing all the forensics approaches such as memory forensic, live-response and Windows file analysis in the related malware incidents …
Prerequisites For Creating Resources And Compositions For Cyber Defence, Tuija Kuusisto, Rauno Kuusisto
Prerequisites For Creating Resources And Compositions For Cyber Defence, Tuija Kuusisto, Rauno Kuusisto
Australian Information Warfare and Security Conference
The aim of this paper is to increase understanding about the prerequisites which evolving cyber society sets for actors, activities and structures of the defenders of society. The research proposes an approach for identifying, analysing and scheduling these prerequisites for decision-making. The paper presents results of two case studies where the proposed approach is applied. The case studies indicate that in the future compositions are needed for forming of joint defence cyber community and resources for joining this community in affordable and beneficial ways. These are the next steps on the strategic path to jointly defended cyber community of global …
The Bad Guys Are Using It, Are You?, Hong-Eng Koh
The Bad Guys Are Using It, Are You?, Hong-Eng Koh
Australian Security and Intelligence Conference
From Occupy Wall Street to 2011 England riots to Arab Spring to Mumbai 26/11 to the ethnic cleansing rumors in India and increasingly used by pedophiles, social media is a very powerful tool for pedophiles, troublemakers, criminals and even terrorists to target individuals and even to go against the establishment. On the other hand, social media can save lives in a disaster, and its a natural extension of community policing or engagement. Community engagement is a must-have strategy for any public safety and security agency. However, this strategy requires the removal of stovepipe processes and systems within an agency, allowing …
German Foreign Policy In The Cyber Age, Patrick Schmitz 14
An Efficient Similarity Digests Database Lookup -- A Logarithmic Divide And Conquer Approach, Frank Breitinger, Christian Rathgeb, Harald Baier
An Efficient Similarity Digests Database Lookup -- A Logarithmic Divide And Conquer Approach, Frank Breitinger, Christian Rathgeb, Harald Baier
Electrical & Computer Engineering and Computer Science Faculty Publications
Investigating seized devices within digital forensics represents a challenging task due to the increasing amount of data. Common procedures utilize automated file identification, which reduces the amount of data an investigator has to examine manually. In the past years the research field of approximate matching arises to detect similar data. However, if n denotes the number of similarity digests in a database, then the lookup for a single similarity digest is of complexity of O(n). This paper presents a concept to extend existing approximate matching algorithms, which reduces the lookup complexity from O(n) to O(log(n)). Our proposed approach is based …
Virtualization-Based System Hardening Against Untrusted Kernels, Yueqiang Cheng
Virtualization-Based System Hardening Against Untrusted Kernels, Yueqiang Cheng
Dissertations and Theses Collection (Open Access)
Applications are integral to our daily lives to help us processing sensitive I/O data, such as individual passwords and camera streams, and private application data, such as financial information and medical reports. However, applications and sensitive data all surfer from the attacks from kernel rootkits in the traditional architecture, where the commodity OS that is supposed to be the secure foothold of the system is routinely compromised due to the large code base and the broad attack surface. Fortunately, the virtualization technology has significantly reshaped the landscape of the modern computer system, and provides a variety of new opportunities for …
Mobile Device Vulnerabilities & Securities, Luke Rondeau
Mobile Device Vulnerabilities & Securities, Luke Rondeau
Senior Honors Theses and Projects
An investigation on current mobile vulnerabilities and research into security. Also, a proof of concept to show the ease of injecting an Android phone with a virus.
Listening To Botnet Communication Channels To Protect Information Systems, Brian Cusack, Sultan Almutairi
Listening To Botnet Communication Channels To Protect Information Systems, Brian Cusack, Sultan Almutairi
Australian Digital Forensics Conference
Botnets are a weapon of choice for people who wish to exploit information systems for economic advantage. A large percentage of high value commercial targets such as banking transaction systems and human customers are web connected so that access is gained through Internet services. A Botnet is designed to maximise the possibility of an economic success through the low cost of attacks and the high number that may be attempted in any small time unit. In this paper we report exploratory research into the communications of Botnets. The research question was: How do Botnets talk with the command and control …