Black-box web application vulnerability scanners are automated tools that probe web applications for security vulnerabilities In order to assess the current state of the art, we obtained access to eight leading tools and carried out a study of: (i) the class of vulnerabilities tested by these scanners, (ii) their effectiveness against target vulnerabilities, and (iii) the relevance of the target vulnerabilities to vulnerabilities found in the wild To conduct our study we used a custom web application vulnerable to known and projected vulnerabilities, and previous versions of widely used web applications containing known vulnerabilities Our results show the promise and effectiveness of automated tools, as a group, and also some limitations In particular, "stored" forms of Cross Site Scripting (XSS) and SQL Injection (SQLI) vulnerabilities are not currently found by many tools Because our goal is to assess the potential of future research, not to evaluate specific vendors, we do not report comparative data or make any recommendations about purchase of specific tools

/pdf/state-of-the-art-automated-black-box-web-application-2o7akal2al.pdf

State of the art automated black-box web application vulnerability testing

Visual Cryptography and Secret Image Sharing

IT has moved into next generation with cloud computing being realized. The way application software and databases are stored has been changed. Now they are stored in cloud data centers in which security is a concern from client point of view. The new phenomenon which is used to store and manage data without capital investment has brought many security challenges which are not thoroughly understood. This paper focuses on the security and integrity of data stored in cloud data servers. The data integrity verification is done by using a third party auditor who is authorized to check integrity of data periodically on behalf of client. The client of the data gets notifications from third party auditor when data integrity is lost. Not only verification of data integrity, the proposed system also supports data dynamics. The work that has been done in this line lacks data dynamics and true public auditability. The auditing task monitors data modifications, insertions and deletions. The proposed system is capable of supporting both public auditability and data dynamics. The review of literature has revealed the problems with existing systems and that is the motivation behind taking up this work. Merkle Hash Tree is used to improve block level authentication. In order to handle auditing tasks simultaneously, bilinear aggregate signature is used. This enables TPA to perform auditing concurrently for multiple clients. Hence here I are presenting the evaluation of multi user based TPA system. The experiments reveal that the proposed system is very efficient and also secure.

Privacy-preserving public auditing for secure cloud storage

Survey of intelligent surveillance system for monitoring international border security

Internet is one of the most valuable resources for information communication and retrievals. Most multimedia signals today are in digital formats. The digital data can be duplicated and edited with great ease which has led to a need for data integrity and protection of digital data. The security requirements such as integrity or data authentication can be met by implementing security measures using digital watermarking techniques. In this paper a blind speech watermarking algorithm that embeds the watermark signal data in the musical (sequence) host signal by using frequency masking is used. A different logarithmic approach is proposed. In this regard a logarithmic function is first applied to watermark data. Then the transformed signal is embedded to the converted version of host signal which is obtained by applying Fast Fourier transform method. Finally using inverse Fast Fourier Transform and antilogarithmic function watermark signal is retrieved.

/pdf/secure-transmission-of-password-using-speech-watermarking-3z1mrz66k1.pdf

Secure Transmission of Password Using Speech Watermarking

The Biometrics recognition systems act as an efficient method with broad applications in the area of: security access control, personal identification to humancomputer communication. From other hand, some biometrics have only little variation over the population, have large intra-variability over time, or/and are not present in all the population. To fill these gaps, a use of multimodal biometrics is a first choice solution [1]. This paper describes a multibiometrics method for human recognition based on new teacher vector identified as spectrum eigenface, and spectrum eigenpalm. The proposed combination scheme exploits parallel mode capabilities of the fusion feature vectors in matching level and invokes certain normalization techniques that increase its robustness to variations in geometry and illumination for face and palmprint. The correlation distance is used as a similarity measure. A threshold value is used to prevent the imposter for being recognized. Experimental results demonstrate the effectiveness of the new method compared to the unimodal biometrics for spectrum eigenface/eigenpalm.

/pdf/fusion-face-and-palmprint-for-human-recognition-via-spectral-5b8aqojuez.pdf

Hana'a M. Salman

Papers

Fusion Face and Palmprint for Human Recognition via Spectral Eigenvector