17568245
Security metrics for software systems
Security metrics for software products provide quantitative measurement for the degree of trustworthiness for software systems. This paper proposes a new approach to define software security metrics based on vulnerabilities included in the software systems and their impacts on software quality. We use the Common Vulnerabilities and Exposures (CVE), an industry standard for vulnerability and exposure names, and the Common Vulnerability Scoring System (CVSS), a vulnerability scoring system designed to provide an open and standardized method for rating software vulnerabilities, in our metric definition and calculation. Examples are provided in the paper, which show that our definition of security metrics is consistent with the common practice and real-world experience about software quality in trustworthiness.
6984424
Ontology-based security assessment for software products
This paper proposes an ontology-based approach to analyzing and assessing the security posture for software products. It provides measurements of trust for a software product based on its security requirements and evidence of assurance, which are retrieved from an ontology built for vulnerability management. Our approach differentiates with the previous work in the following aspects: (1) It is a holistic approach emphasizing that the system assurance cannot be determined or explained by its component assurance alone. Instead, the software system as a whole determines its assurance level. (2) Our approach is based on widely accepted standards such as CVSS, CVE, CWE, CPE, and CAPEC. Our ontology integrated these standards seamlessly thus provides a solid foundation for security assessment. (3) Automated tools have been built to support our approach, delivering the environmental scores for software products.
205888828
Non-fuzzy versions of fuzzy reasoning in classical logics
Abstract Fuzzy reasoning features fuzzy logic in its narrow sense, FLn, and fuzzy modus ponens (FMP) is the core of fuzzy reasoning. As is well known, FMP is far more general and complicated than the conventional rule of modus ponens (MP) and takes the latter as special case under certain conditions. This paper proves that there exist non-fuzzy versions of FMP in classical 2-valued logic as well as in conventional multivalued systems and reveals the roots of these seemingly surprising results.
21956342
Architectural design and implementation of highly available and scalable medical system with IBM Websphere middleware
Medical systems require the end-to-end high availability and scalability. There are many components in a medical system, and each individual component contributes to the overall system availability and scalability. We present the formulas to assess the overall system availability and capacity planning, and we architect approaches and technologies to make all components highly available in all tiers by clustering, workload management, and replication. We discuss how to unify all medical systems and design the uniform framework for different kinds of medical systems to hook up with this framework so that we can maintain a highly available and highly scalable system with ease. We use the n-tier distributed component based architecture and J2EE technologies as well as Web services to interact with .NET and others. We discuss how to program in the framework for high availability and scalability and how to upgrade application software without service interruption to achieve continuous availability. We show how to add or reduce hardware capacity in each tier and how to maintain hardware and software without service interruption as well as how to balance the capacity and availability among tiers.
15916460
An approach to security and privacy of RFID system for supply chain
Radio frequency identification (RFID) is expected to become pervasive and ubiquitous, as it can be embedded into everyday items as smart labels. A typical scenario of exploiting RFID is supply chain. The RFID based supply chain management yields convenience, efficiency and productivity gains. However, RFID systems create new risks to security and privacy. We briefly present the current solutions to RFID security and privacy. A new approach is then proposed, which exploits randomized read access control and thus prevents hostile tracking and man-in-the-middle attack. In addition, compared with current schemes that achieve the similar security level, the proposed approach dramatically decreases the computation load. Another benefit is that it is suitable for RFID systems with a large number of tags
4379994
Interdomain Routing as Social Choice
Interdomain routing is essential to both the stability and efficiency of the global Internet. However, most previous studies focus only on stability, and only on a special class of routing protocols, namely BGP-type, path-vector protocols. In this paper, we conduct a systematic analysis of interdomain routing considering optimality and implementation in strategic settings. We adopt the novel perspective that an interdomain routing system is one which defines a social choice rule that aggregates individual preferences of all of the autonomous systems (ASes) in a network to select interdomain routes with a set of desirable properties. An interdomain routing protocol, then, is a mechanism to implement the identified interdomain routing social choice rule, when the ASes can adopt strategic actions. By pointing out the incompatibility among the desirable properties of an interdomain routing system and the requirements for strategic implementation in distributed settings, we reveal fundamental tradeoffs that must be made when extending BGP or designing the next-generation interdomain routing system. We also provide new insights into BGP, by "reverseengineering" its behaviors from the perspective of social choice and implementation theory.
38699742
Dependable Transaction for Electronic Commerce
Electronic transaction becomes common practice in real world business. This paper focuses on the issue of dependability in critical transactions like electronic payment, electronic contract signing. Recent fair protocols can recover transactions from network crashes, but cannot survive local system crashes. A two-party dependable transaction protocol is proposed. During the protocol, both parties can recover the transaction from network and local system failures in a transparent way, which means that after the recovery, outcome messages would be just the same as those from a successful run of the transaction.
11355624
Theory and Techniques for Automatic Generation of Vulnerability-Based Signatures
In this paper, we explore the problem of creating \emph{vulnerability signatures}. A vulnerability signature is based on a program vulnerability, and is not specific to any particular exploit. The advantage of vulnerability signatures is that their quality can be guaranteed. In particular, we create vulnerability signatures which are guaranteed to have zero false positives. We show how to automate signature creation for any vulnerability that can be detected by a runtime monitor. We provide a formal definition of a vulnerability signature, and investigate the computational complexity of creating and matching vulnerability signatures. We systematically explore the design space of vulnerability signatures. We also provide specific techniques for creating vulnerability signatures in a variety of language classes. In order to demonstrate our techniques, we have built a prototype system. Our experiments show that we can, using a single exploit, automatically generate a vulnerability signature as a regular expression, as a small program, or as a system of constraints. We demonstrate techniques for creating signatures of vulnerabilities which can be exploited via multiple program paths. Our results indicate that our approach is a viable option for signature generation, especially when guarantees are desired.