Remote Security Log Collection in a Least Privilege Environment

Robust Automatic Speaker Verification has become increasingly desirable in recent years with the growing trend toward remote security verification procedures for telephone banking, bio-metric security measures and similar applications. While many approaches have been applied to this problem, Genetic Programming offers inherent feature selection and solutions that can be meaningfully analyzed, making it well suited for this task. This chapter introduces a Genetic Programming system to evolve programs capable of speaker verification and evaluates its performance with the publicly available TIMIT corpora. Also presented are the effects of a simulated telephone network on classification results which highlight the principal advantage, namely robustness to both additive and convolutive noise.

Download Full-text

Extraction of an Architectural Model for Least Privilege Analysis

International Journal of Secure Software Engineering ◽

10.4018/jsse.2012100102 ◽

2012 ◽

Vol 3 (4) ◽

pp. 27-44

Author(s):

Bernard Spitz ◽

Riccardo Scandariato ◽

Wouter Joosen

Keyword(s):

Software Architecture ◽

Building Block ◽

Source Code ◽

Software System ◽

Task Execution ◽

Design And Implementation ◽

Prototype Tool ◽

Least Privilege ◽

Architectural Model ◽

Execution Model

This paper presents the design and implementation of a prototype tool for the extraction of the so-called Task Execution Model directly from the source code of a software system. The Task Execution Model is an essential building block for the analysis of the least privilege violations in a software architecture (presented in previous work). However, the trustworthiness of the analysis results relies on the correspondence between the analyzed model and the implementation of the system. Therefore, the tool presented here is a key ingredient to provide assurance that the analysis results are significant for the system at hand.

Download Full-text

Determination and Enforcement of Least-Privilege Architecture in Android

2017 IEEE International Conference on Software Architecture (ICSA) ◽

10.1109/icsa.2017.18 ◽

2017 ◽

Cited By ~ 6

Author(s):

Mahmoud Hammad ◽

Hamid Bagheri ◽

Sam Malek

Keyword(s):

Least Privilege

Download Full-text

Toward an Integrative Model of Application-Software Security

Practicing Software Engineering in the 21st Century ◽

10.4018/978-1-93177-750-6.ch011 ◽

2003 ◽

pp. 157-163

Author(s):

Vijay V. Raghavan

Keyword(s):

Software Security ◽

Social Engineering ◽

Systems Development ◽

System Level ◽

Integrative Model ◽

Software Systems ◽

Execution Monitoring ◽

Systems Security ◽

Least Privilege ◽

Implementation Stages

Populist approaches to studying information systems security include architectural, infrastructure-related and system-level security. This study focuses on software security implemented and monitored during systems development and implementation stages. Moving away from the past checklist methods of studying software security, this study provides a model that could be used in categorizing checklists into meaningful clusters. Many constructs, such as principle of least privilege, execution monitoring, social engineering and formalism and pragmatism in security implementations, are identified in the model. The identification of useful constructs to study can form the basis of evaluating security in software systems as well as provide guidelines of implementing security in new systems developed.

Download Full-text