Applied Cryptography and Network Security

Name: Applied Cryptography and Network Security | 10th International Conference, ACNS 2012, Singapore, June 26-29, 2012, Proceedings
Brand: Springer
Price: 53.49 EUR
Availability: OnlineOnly

10th International Conference, ACNS 2012, Singapore, June 26-29, 2012, Proceedings

Feng Bao Pierangela Samarati Jianying Zhou(Herausgeber*in)

Springer (Verlag)

Erschienen am 14. Juni 2012

XIV, 580 Seiten

E-Book

PDF mit Wasserzeichen-DRM

Systemvoraussetzungen

978-3-642-31284-7 (ISBN)

53,49 €inkl. 7% MwSt.

Systemvoraussetzungen

für PDF mit Wasserzeichen-DRM

E-Book Einzellizenz

Als Download verfügbar

Beschreibung

Weitere Details

Weitere Ausgaben

Inhalt

Title
Preface
organisation
Table of Contents
Authentication
Security Analysis of a Multi-factor Authenticated Key Exchange Protocol
Introduction
Pointcheval-Zimmer Protocol
Notation
Description of Protocol
Attacks
Stealing Biometrics
Disclosing Private Key
Combining Two Attacks
Discussion
Conclusion
References
Breaking an Animated CAPTCHA Scheme
Introduction
Related Work
Breaking CAPTCHAs
Segmentation Resistant
Animated CAPTCHAs
The Targeted Animated CAPTCHA Scheme
Breaking HelloCaptcha
Type Distinction
Single Image Extraction
Pre-processing and Character Recognition
Character Recognition
Results and Discussion
Method of Attack
Security Issues
Conclusion
References
Contextual OTP: Mitigating Emerging Man-in-the-Middle Attacks with Wireless Hardware Tokens
Introduction
The Contextual Factor Protocol
The Setting
The Current OTP Protocol
The Contextual Factor Protocol
Possible Contextual Factors
URL
Server's Certificate
URL + Server's Certificate
Session Key
IP
Other Factors
System Setting Considerations and Extended Attacks
Secure Communication of the XOTP in the Client's Environment
Routing to a Different User Registered Website
Additional Types of Extended Attacks
Summary of Results: Real-Time Impersonation and More
Related Work
Concluding Remarks
References
Key Management
RIKE: Using Revocable Identities to Support Key Escrow in PKIs
Introduction
Related Work
RIKE: Supporting Key Escrow in PKIs
Background
Basic RIKE
Certificate Renewal and Revocation in Basic RIKE
Hierarchical RIKE
Hierarchical RIKE with Cross Certification
Certificate Renewal and Revocation in Hierarchical RIKE
Features of RIKE
Comparisons with other Schemes
X.509-Based RIKE
Conclusions
References
TreVisor
Introduction
Background
TRESOR
BitVisor
Design and Implementation
Compatibility
Performance
Security
Conclusions and Future Work
References
Block Ciphers
Authenticated Encryption: How Reordering Can Impact Performance
Introduction
Notations and Preliminaries
Notations
Universal Hash-Function Families
Block Ciphers
Authenticated Encryption Schemes
Adversarial Model
Properties of Odd Integers
The Odd Key Hash Family
Description of the OKH Authenticated Encryption
Theorem Statements
Security of Authentication
Security of Encryption
Design and Performance Discussions
Conclusion
References
Length-Doubling Ciphers and Tweakable Ciphers
Introduction
Preliminaries
A Fix-Input-Length Cipher
A Length-Doubling VIL Cipher
Length-Doubling VIL Tweakable Ciphers
References
Extending Higher-Order Integral: An Efficient Unified Algorithm of Constructing Integral Distinguishers for Block Ciphers
Introduction
Preliminaries
Higher-Order Integral
Matrix Characterization of a Block Cipher Structure
A Unified Approach for the Design of Integral Distinguishers
A New Representation of the 4 kinds of Integral States
Rules for Applying Encryption/Decryption Characteristic Matrix to An Integral Form in Block
Finishing Conditions for Calculus and an Extension of Higher-Order Integral
A Unified Algorithm of Constructing Integral Distinguishers
Experimental Results - Application to Gen-SMS4, Gen-Fourcell and Present
Gen-SMS4
Gen-Fourcell
Present
Selection of Initial Integral Forms
Discussion and Conclusion
References
Identity-Based Cryptography
Security Enhancements by OR-Proof in Identity-Based Identification
Introduction
Security Enhancement Transformations of Identity-Based Identification.
Our Contributions.
Organization.
Definitions
Identity-Based Identification.
+- and *-type IBI Protocols.
Security Enhancement Transformations
Dual-Identity Transformation
Master-Identity Transformation
Double-Parameter Transformation
Security of DI, MI and DP Transformations
Discussions
Comparisons
Conclusion
References
Identity-Based Extractable Hash Proofs and Their Applications
Introduction
Background
Motivation
Our Contributions
Preliminaries
Definitions
Identity-Based Key Encapsulation Mechanisms
Bilinear Diffie-Hellman Assumption
Binary Relations for Search Problems
General Hashing
Identity-Based Extractable Hash Proofs
Relation to Extractable Hash Proof System
Generic Constructions from Identity-Based Extractable Hash Proofs
IND-ID-CPA Secure IBE
IND-ID-CCA Secure IBE
Instantiations of IB-EHPS
Extension
References
Cryptographic Primitives
On Structural Signatures for Tree Data Structures
Introduction
Preliminaries, the Scheme by Kundu and Bertino and the Extended Security Model
Aggregate Signatures and Bilinear Pairings
The Scheme by Kundu and Bertino
Attacks on Kundu's Transparency and Privacy
Attacks on Kundu's Unforgeability and Structural Integrity
Our New Secure Construction
Security
Complexity Analysis
Modifications to Our Scheme
Consecutive Redaction Control
Restricting to Sanitizers and Accountability
Implementations and Performance Analysis
Conclusion and Open Questions
References
Inner-Product Lossy Trapdoor Functions and Applications
Introduction
Our Contributions
Related Works
Notations
Inner-Product Lossy Trapdoor Functions
Lossy Attribute Hiding
Inner-Product Trapdoor Functions from Lattices
An Inner-Product Trapdoor Function from Lattices
Correctness
Security
Parameter Selection
Applications
References
On the Joint Security of Signature and Encryption Schemes under Randomness Reuse: Efficiency and Security Amplification
Introduction
Related Work
Preliminaries
Compositions with Randomness Reuse
Composition-Enabling Properties
Security under Randomness-Dependent Attacks
Secure Compositions under Randomness Reuse
Instantiating the Constructions
Security under Randomness-Dependent Attacks
Compatibility, Reproducibility, and Conditional Injectivity
An Efficient Instantiation
References
Secure Accumulators from Euclidean Rings without Trusted Setup
Introduction
Collision-Resistant and Undeniable Accumulators
Module-Based Cryptography
Accumulator with Prime-Valued Injective Functions
Accumulator with Division-Intractable Function Family
Relations between New Assumptions
Example Instantiations
RSA Accumulator
Root Accumulator in Class Groups of IQ Order
References
Cryptanalysis
Linear Fault Analysis of Block Ciphers
Introduction
Preliminaries
Fault Injection
Linear Fault Analysis
Fault Model and Assumption
Principle of Linear Fault Analysis
A Key Recovery Attack on SERPENT by Using LFA
A Brief Description of SERPENT
Attacking SERPENT
Experiments and Results
Conclusion
References
Cryptanalysis of 256-Bit Key HyRAL via Equivalent Keys
Introduction
Specification of HyRAL
Existence of Equivalent Keys
Derivation of Equivalent Keys
Equivalent Key Derivation Algorithm
Time Complexity of the Algorithm
Deriving Equivalent Keys
Discussions
Summary
References
Distinguishers beyond Three Rounds of the RIPEMD-128/-160 Compression
Introduction
Differential Properties to Be Distinguished
Previously Discussed Properties
2-Dimension Sums and Suitability for Double-Branch Structure
q-Multi-second-order Collision
Remarks for the Motivation of Studying Weak Properties
Specifications
RIPEMD-128
RIPEMD-160
Attacks on RIPEMD-128
Overall Strategy
Constructing -Differential-Path
Constructing -Differential-Path
Searching for (H, M)
Complexity Evaluation and Experiments
Attacks on RIPEMD-160
Overall Strategy and Relatively Slow Differential Propagation
Scenario 1: Attack from the First Round
Scenario 2: Attack from the Second Round
Concluding Remarks
References
Side Channel Attacks
Zero-Value Point Attacks on Kummer-Based Cryptosystem
Introduction
Side Channel Attacks and Zero-Value Point (ZVP) Attack on Scalar Multiplication
Our Contributions
Scalar Multiplication on the Kummer Surface
Special Points on Kummer Surface
The Possible Special Points for Duquesne's Pseudo-addition and Doubling Formula
The Number of Special Points for Duquesne's Formula
Special Points due to other Pseudo-addition and Doubling Formula
Zero-Value Point Attacks on Kummer Surface
General Zero-Value Point Attacks on Kummer Surface
A Variant of Zero-Value Point Attack on Kummer Surface
Countermeasures Against Zero-Value Point Attacks
Conclusion
References
PICARO - A Block Cipher Allowing Efficient Higher-Order Side-Channel Resistance
Introduction
Preliminaries on Higher-Order Masking Schemes
Masking Schemes
Rivain-Prouff's Scheme
Research of a "Good" S-Box
Design Constraints
Bijective vs Non-Bijective S-Box
S-Box Description
Masked S-Box Cost Evaluation
From the S-Box to the Cipher
Using a Feistel Network with SP-Type Round Function
Why It Is Not a Good Idea
Linear Counterpart to the Previous Attack
Comparison of Specific Attacks on Feistel Ciphers with Non-bijective Round Function
Non-injective Round Functions
Non-surjective and Unbalanced Round Function
Unbalanced Round Functions with Key Dependent Output Distribution
Expansion and Compression Function
Full Description of the Block Cipher
Evaluation of the Number of Rounds
The Key Schedule
Performance Analysis
Conclusion
References
Wide Collisions in Practice
Motivation
Background
Collision Attack
Wide Collisions
Template Attack
Practical Collision Attacks
Outlier Method
Inter-Bins Variation and Inner-Bin Variation
Template-Based Collision Detection
Template-Based Collision Detection Using Iterative PCA
Experimental Results
Results for the Outlier Method
Results for Template-Based Detection
Conclusion
References
Network Security
A General Construction for 1-Round d-RMT and (0, d)-SMT
Introduction
Background and Primitives
Folded Reed-Solomon Codes
Description of Folded Reed-Solomon Codes.
Multireceiver Message Authentication Codes
New Constructions for Multireceiver MAC
Construction of 1-Round -RMT for N2t+1
An Optimal -RMT
1-Round (0, )-SMT
A Construction for 1-Round (0, )-SMT for N=2t+1
Comparison with Related Work.
1-Round (0,)-SMT for N=2t+ct, c&1/t
Concluding Remarks
References
A Prefiltering Approach to Regular Expression Matching for Network Security Systems
Introduction
Related Work
RegEx Print Generation
RegEx Print
RegEx Print Generation Algorithm
Regex Print Matching
Experimental Results
Experimental Setup
Experimental Evaluation
Effect of Expression Size Threshold
Effect of Matching Probability Threshold
Conclusions
References
Web Security
iHTTP: Efficient Authentication of Non-confidential HTTP Traffic
Introduction
Previous Work
Our Contributions
Design Goals, Assumptions, and Threat Model
Preliminaries
Our Approach - iHTTP
Authenticator Generation
Freshness Authentication
Opportunistic Hash Verification
Analysis
Security Analysis
Performance Analysis
Limitation
Implementation and Experimental Evaluation
Implementation
Experimental Evaluation
Conclusion
References
ARC: Protecting against HTTP Parameter Pollution Attacks Using Application Request Caches
Introduction
HTTP Parameter Pollution
Formal Threat Model
Extreme Cases
Application Request Cache
Implementation
Evaluation
Request Resolution
Request Throughput
Memory Footprint
Case Study
Related Work
Conclusion
References
Tracking the Trackers: Fast and Scalable Dynamic Analysis of Web Content for Privacy Violations
Introduction
Background
System Design
Principal-Based Tracking
Principal Tagging
Taint Sources and Sinks
Implementation
Instrumented Browser
Crawler
Evaluation and Findings
General Findings
Behavior Tracking Cases
History Sniffing Cases
Performance
Related Work
Detection
Protection
Conclusions
References
Security and Privacy in Social Networks
The Shy Mayor: Private Badges in GeoSocial Networks
Introduction
Related Work
Model
The System
Privacy and Correctness Properties
Tools
Spotr : Secure Location Verification
Geo-Badge
Analysis
Geo-M
Analysis
Multi-player: MP-Badge
Evaluation
Conclusions
References
Detecting Social Spam Campaigns on Twitter
Introduction
Related Work
Twitter and Related Social Spam Detection
Scope of This Paper
Characterization
Data Collection
Clustering
Ground Truth Creation
Campaign Analysis
Classification
Classification Features
Content Semantic Similarity
Machine Learning Classifier
Evaluation
Training
Cross Validation
Conclusion
References
Security and Privacy in RFID Systems
A New Framework for Privacy of RFID Path Authentication
Introduction
Background
RFID-Enabled Supply Chain Management System
Adversary Model
Existing Security and Privacy Notions
A New RFID Privacy Notion for Path Authentication
Path Privacy
Relations among Privacy Notions
A New RFID Path Authentication Protocol
Building Blocks
Protocol
Security and Privacy Analysis
Performance
Conclusions
References
GHB#: A Provably Secure HB-Like Lightweight Authentication Protocol
Introduction
Our Contribution
Outline
Background
Gold Functions
The HB# protocol
The GHB# protocol
Complexity Analysis and Implementation Issues
Security Analysis
Definition of Security Models
Security Proofs
Conclusions
References
Security and Privacy in Cloud Systems
Knox: Privacy-Preserving Auditing for Shared Data with Large Groups in the Cloud
Introduction
Related Work
Problem Statement
System Model
Threat Model
Design Goals
Preliminaries
Bilinear Maps
Complexity Assumptions
Group Signatures
Homomorphic MACs
Homomorphic Authenticators
Homomorphic Authenticable Group Signatures
Overview
Construction of HAGS
Security Analysis of HAGS
Privacy-Preserving Auditing for Shared Data
Overview
Construction of Knox
Security Analysis of Knox
Experimental Results
Conclusion
References
SPICE - Simple Privacy-Preserving Identity-Management for Cloud Environment
Introduction
Extended DIM Framework in the Cloud
Desirable Properties for DIM in the Cloud
Existing Solution and Limitations
Our Contributions
Related Work
Identity Management Systems
Other Credential-Based Authentication Systems
Overview of SPICE
Framework of SPICE
Framework of Basic Group Signatures
The Key Ideas
Randomizable Group Signatures
Design of Randomizable Group Signatures
Concrete Construction
Privacy-Preserving Identity-Management
SPICE for Web Authentication
Security, Privacy and Functional Requirements
Conclusion
References
Security and Privacy in Smart Grids
A Practical Smart Metering System Supporting Privacy Preserving Billing and Load Monitoring
Introduction
Related Work
System Model
Time Notations
Smart Metering System
Supporting Billing Applications
Supporting Load Monitoring Applications
Meter Model
Privacy Preserving Smart Metering System
Metering System Construction
Supporting Billing Application
Supporting Load Monitoring Application
Privacy Requirements and Analysis
ESP Privacy Requirement and Analysis
LMC Privacy Requirement and Analysis
Storage Security
Performance Analysis
Conclusion and Future Works
References
Private Computation of Spatial and Temporal Power Consumption with Smart Meters
Introduction
Related Work
Preliminaries
Anticipated Setting
Notation
Adversarial Model
Homomorphic Encryption
Aggregating Spatial Consumption
Generating and Exchanging Random Numbers
Encrypting Measurements
Aggregation of Encrypted Measurements
Computing Temporal Consumption
Encrypting Measurements
Obtaining Total Consumption
Coping with Malfunctions
Computing Spatio-temporal Consumption
Encrypting Measurements
Obtaining Spatial Consumption
Obtaining Temporal Consumption
Coping with Malfunctions
Security Considerations
Complexity and Data Packing
Complexity
Multiple Utility Measurements
Conclusion
References
Author Index

Systemvoraussetzungen

Als PDF speichern Als Link merken