EAI Endorsed Transactions on Security and Safety

Issue 9, 2016

Editor(s)-in-Chief: Helge Janicke, Kevin Jones and Leandros A. Maglaras

Articles
Information

Safer Interactive Medical Device Design: Insights from the CHI+MED Project
Appears in:
sesa 16(9): e1

Authors:
Paul Curzon, Ann Blandford, Harold Thimbleby, Anna Cox

Abstract:
Interactive medical devices such as infusion pumps, monitors and diagnostic devices help save lives. However, they are also safety critical in that they may fail in use and patient harm or death ensue. It is not just that the software and hardware should meet their specification. The design should …Interactive medical devices such as infusion pumps, monitors and diagnostic devices help save lives. However, they are also safety critical in that they may fail in use and patient harm or death ensue. It is not just that the software and hardware should meet their specification. The design should help ensure users do not make mistakes. Safety factors become more important as medical devices become mobile and are used by patients as part of their everyday life rather than by trained professionals in well-defined hospital environments. Regulators are increasingly taking home-use seriously as a result of device recalls due to devices that have caused patient harm. We give insights from the research on the CHI+MED project (www.chi-med.ac.uk). It has focussed on understanding how the design of interactive medical devices can support safety. CHI+MED also developed practical tools and guidance that we review.
more »
A Deep Learning Approach for Network Intrusion Detection System
Appears in:
sesa 16(9): e2

Authors:
Ahmad Javaid, Quamar Niyaz, Weiqing Sun, Mansoor Alam

Abstract:
A Network Intrusion Detection System (NIDS) helps system administrators to detect network security breaches in their organizations. However, many challenges arise while developing a flexible and efficient NIDS for unforeseen and unpredictable attacks. We propose a deep learning based approach for…A Network Intrusion Detection System (NIDS) helps system administrators to detect network security breaches in
their organizations. However, many challenges arise while
developing a flexible and efficient NIDS for unforeseen and unpredictable attacks. We propose a deep learning based approach for developing such an efficient and flexible NIDS.
We use Self-taught Learning (STL), a deep learning based technique, on NSL-KDD - a benchmark dataset for network
intrusion. We present the performance of our approach and compare it with a few previous work. Compared metrics include accuracy, precision, recall, and f-measure values.
more »
Identity Deception and Game Deterrence via Signaling Games
Appears in:
sesa 16(9): e3

Authors:
William Casey, Parisa Memarmoshrefi, Ansgar Kellner, Jose Andre Morales, Bud Mishra

Abstract:
Maintenance and verication of persistent identities is an important problem in the area of networking. Particularly, their critical roles in Wireless Ad-hoc networks (WANETs) have become even more prominent as they begin to be deployed in several application domains. In these contexts, Sybil …Maintenance and verication of persistent identities is an
important problem in the area of networking. Particularly,
their critical roles in Wireless Ad-hoc networks (WANETs)
have become even more prominent as they begin to be deployed
in several application domains. In these contexts,
Sybil attacks, making use of replicated deceptive identities,
represent a major challenge for the designers of these networks.
Inspired by biological models of ant colonies and
their dynamics studied via information asymmetric signaling
games, we propose an architecture that can withstand Sybil
attacks, similar to ants, using complex chemical signaling
systems and associated physical actions, naturally 'authenticate'
colony members. Here, we present a biomimetic authentication
protocol with mechanisms similar to the physical
processes of chemical diffusion, and formalize approaches
to tame the deceptive use of identities; we dub the resulting
game an "identity management signaling game". To consider
network system of nodes, pursuing non-cooperative and deceptive
strategies, we develop an evolutionary game system
allowing cooperative nodes to mutate deceptive strategies.
We empirically study the dynamics using simulation experiments
to select the parameters which affect the overall behaviors.
Through experimentation we consider how an in-
centive package in the form of a shared database can impact
system behavior.
more »
Evaluation of Cryptography Usage in Android Applications
Appears in:
sesa 16(9): e4

Authors:
Alexia Chatzikonstantinou, Christoforos Ntantogian, Georgios Karopoulos, Christos Xenakis

Abstract:
Mobile application developers are using cryptography in their products to protect sensitive data like passwords, short messages, documents etc. In this paper, we study whether cryptography and related techniques are employed in a proper way, in order to protect these private data. To this end, we d…Mobile application developers are using cryptography in their products to protect sensitive data like passwords, short messages, documents etc. In this paper, we study whether cryptography and related techniques are employed in a proper way, in order to protect these private data. To this end, we downloaded 49 Android applications from the Google Play marketplace and performed static and dynamic analysis in an attempt to detect possible cryptographic misuses. The results showed that 87.8% of the applications present some kind of misuse, while for the rest of them no cryptography usage was detected during the analysis. Finally, we suggest countermeasures, mainly intended for developers, to alleviate the issues identified by the analysis.
more »
Investigating the Learning Phase of an Autonomous Authentication in Mobile Ad-hoc Networks
Appears in:
sesa 16(9): e5

Authors:
Hang Zhang, Parisa Memarmoshrefi, Fatemeh Ashrafi, Dieter Hogrefe

Abstract:
In this work we focus on investigating the learning phase of an autonomous authentication mechanism. Through a series of simulation, an experimental best cutoff point and the aggression threshold values for different network size were calculated. In the test phase, those found values are proved b…In this work we focus on investigating the learning phase of an autonomous authentication mechanism. Through a series of
simulation, an experimental best cutoff point and the aggression
threshold values for different network size were calculated. In the test phase, those found values are proved by the average good accuracy.
more »

Scope

Growing threats and increasingly also failures due to complexity may compromise the security and resilience of network and service infrastructures. Applications and services require security of data handling and we need new security architectures and scalable and interoperable security policies for this. There is a need to guarantee end-to-end security in data communications and storage, including identity management and authentication. Moreover, we need technology to enable network security monitoring and tracing and to assess the trustworthiness of infrastructures and services. It must ensure the protection of personal data and privacy and to properly assign liability and risks, together with the appropriate governance models needed to do so. Furthermore this is applied to the settings of Public Safety in general.

DOAJ
DBLP
CrossRef
EBSCO Discovery Service
[OCLC Discovery Services](h…

Yao Liu (University of South Florida, USA)
Kai Zeng (George Mason University, USA)
Linhai Song (Penn State University, USA)
Zhiguo Wan (Shangdong University, China)
Issa Khalil (Qatar Computing Research Institute, Qatar)
George Kesidis (Penn State University, USA)
Amro Awad (Uni…

Yao Liu (University of South Florida, USA)
Kai Zeng (George Mason University, USA)
Linhai Song (Penn State University, USA)
Zhiguo Wan (Shangdong University, China)
Issa Khalil (Qatar Computing Research Institute, Qatar)
George Kesidis (Penn State University, USA)
Amro Awad (University of Central Florida, USA)
Eric Chan-Tin (Loyola University Chicago, USA)
Karim Elish (Florida Polytechnic University, USA)
Joongheon Kim (Korea University, Korea)
Eugene Vasserman (Kansas State University, USA)
An Wang (Case Western Reserve University, USA)
Jiawei Yuan (Embry-Riddle Aeronautical University, USA)
Mohammad Ashiqur Rahman (Florida International University, USA)
Sachin Shetty (Old Dominion University, USA)
Jeffrey Spaulding (Niagara University, USA)
Zhongshu Gu (IBM, USA)
Shujun Li (University of Kent, UK)
Heng Zhang (Western Sydney University, Australia)
Kaiqi Xiong (University of South Florida, USA)
Mohamed Amine Ferrag (Guelma University, Algeria)
Bo Luo (University of Kansas, USA)
Zhen Huang (DePaul University, USA)
Ziming Zhao, University at Buffalo, USA

Journal Blurb

Visit the new journal website to submit and consult our contents: https://publications.eai.eu/index.php/sesa/index

Publisher: EAI
ISSN: 2032-9393
Volume: 3

Published: 2016-12-22

Safer Interactive Medical Device Design: Insights from the CHI+MED Project

A Deep Learning Approach for Network Intrusion Detection System

Identity Deception and Game Deterrence via Signaling Games

Evaluation of Cryptography Usage in Android Applications

Investigating the Learning Phase of an Autonomous Authentication in Mobile Ad-hoc Networks

About EAI

Community

Publish with EAI