Data Mining Practical Machine Learning Tools and Techniques

Aspect] is a simple and practical aspect-oriented extension to Java With just a few new constructs, AspectJ provides support for modular implementation of a range of crosscutting concerns. In AspectJ's dynamic join point model, join points are well-defined points in the execution of the program; pointcuts are collections of join points; advice are special method-like constructs that can be attached to pointcuts; and aspects are modular units of crosscutting implementation, comprising pointcuts, advice, and ordinary Java member declarations. AspectJ code is compiled into standard Java bytecode. Simple extensions to existing Java development environments make it possible to browse the crosscutting structure of aspects in the same kind of way as one browses the inheritance structure of classes. Several examples show that AspectJ is powerful, and that programs written using it are easy to understand.

An overview of AspectJ

Digital watermarking is a key ingredient to copyright protection. It provides a solution to illegal copying of digital material and has many other useful applications such as broadcast monitoring and the recording of electronic transactions. Now, for the first time, there is a book that focuses exclusively on this exciting technology. Digital Watermarking covers the crucial research findings in the field: it explains the principles underlying digital watermarking technologies, describes the requirements that have given rise to them, and discusses the diverse ends to which these technologies are being applied. As a result, additional groundwork is laid for future developments in this field, helping the reader understand and anticipate new approaches and applications.

Digital Watermarking

National Institute of Standards and Technology における超伝導研究及び生活

The objective of this paper is to give a comprehensive introduction to applied cryptography with an engineer or computer scientist in mind. The emphasis is on the knowledge needed to create practical systems which supports integrity, confidentiality, or authenticity. Topics covered includes an introduction to the concepts in cryptography, attacks against cryptographic systems, key use and handling, random bit generation, encryption modes, and message authentication codes. Recommendations on algorithms and further reading is given in the end of the paper. This paper should make the reader able to build, understand and evaluate system descriptions and designs based on the cryptographic components described in the paper.

[서평]「Applied Cryptography」

Industrial Control Systems (ICS) help to automate various cyber-physical systems in our world The controlled processes range from rather simple traffic lights and elevators to complex networks of ICS in car manufacturing or controlling nuclear power plants With the advent of industrial Ethernet ICS are increasingly connected to networks of Information Technology (IT) Thus, novel attack vectors on ICS are possible In IT networks information hiding and steganography is increasingly used in advanced persistent threats to conceal the infection of the systems allowing the attacker to retain control over the compromised networks In parallel ICS are more and more a target for attacks as well Here, simple automated attacks as well as targeted attacks of nation state actors with the intention of damaging components or infrastructures as a part of cyber crime have already been observed Information hiding could bring such attacks to a new level by integrating backdoors and hidden/covert communication channels that allow for attacking specific processes whenever it is deemed necessary This paper sheds light on potential attack vectors on Programmable Logic Controllers (PLCs) using OPC Unified Architecture (OPC UA) network protocol based communication We implement an exemplary supply chain attack consisting of an OPC UA server (Bob, B) and a Siemens S7-1500 PLC as OPC UA client (Alice, A) The hidden storage channel is using source timestamps to embed encrypted control sequences allowing for setting digital outputs to arbitrary values The attack is solely relying on the programming of the PLC and does not require firmware level access Due to the potential harm to life caused by attacks on cyber-physical systems any presentation of novel attack vectors need to present suitable mitigation strategies Thus, we investigate potential approaches for the detection of the hidden storage channel for a warden W as well as potential countermeasures in order to increase the warden-compliance Our machine learning based detection approach using a One-Class-Classifier yields a detection performance of 895% with zero false positives within an experiment with 46,159 OPC UA read responses without a steganographic message and 7,588 OPC UA read responses with an embedded steganographic message

https://dl.acm.org/doi/pdf/10.1145/3369412.3395068

Information Hiding in Industrial Control Systems: An OPC UA based Supply Chain Attack and its Detection

The recent advances in multimedia technology have made the manipulation of digital images, videos or audio files easy. On the one hand the broad availability of these new capabilities enabled numerous new applications. On the other hand, for the same reasons, digital media can easily be forged by almost anyone. To counteract this risk, fragile watermarks were proposed to protect the integrity and authenticity of digital multimedia objects. Traditional watermarking schemes employ non-cryptographic and signal processing oriented techniques, which fail to provide any provable security guarantee against malicious modification attempts. In this paper, we give for the first time a provably secure authentication mechanism for digital multimedia files that is based on both cryptographic signatures and invertible watermarks. While traditional watermarking schemes introduce some small irreversible distortion in the digital content, invertible watermarks can be completely removed from a watermarked work.

Provably Secure Authentication of Digital Media Through Invertible Watermarks

Determining the age of a latent fingerprint trace found at a crime scene is an unresolved research issue since decades. Adopting a high-resolution, optical, non-invasive measurement device (FRT-MicroProf 200 CWL 600) from the area of surface quality measure-ment and combining it with pattern-recognition tech-niques might allow us to finally solve this important research challenge.

http://ieeexplore.ieee.org/iel5/6036253/6046561/06046683.pdf

Resolution and size of measured area influences on the short- and long-term aging of latent fingerprint traces using the binary pixel feature and a high-resolution non-invasive chromatic white light (CWL) sensor

Intrusion detection systems (IDS) provide security for network systems. They are used in computer networks to detect violations against security policies or unusual events that could lead towards a security thread. Telephone networks based on the internet protocol (IP) called IP telephony (IPT) are a recent development in network usage and will become a common application in the next years as they can provide integrated services based on telephony communications. We identify IPT security demands as well as risks and analyze the possibility of adding IDS concepts to IPT systems. Digital audio watermarking is a technology able to provide different security aspects in this context. The combination of classic IDS and audio watermarking leads to new and promising way of user and data authentication and monitoring of calls.

/pdf/intrusion-detection-systems-for-ip-telephony-networks-1bme29k24m.pdf

Intrusion detection systems for IP telephony networks

Revealing that a human face on a biometric image is a mixture of two or more faces is of immense importance for document issuing authorities and document checking services. If not done, several persons can use the same photo-ID document for identity verification without being condemned. The development of automated face morphing detectors is currently in its early phase. The detectors reported so far are not mature for the market which is reflected in high error rates when tested with “unseen” data. Here, we demonstrate that fusion of several by far non-optimal detectors may lead to significant improvement of detection accuracy compared to that of individual detectors. Among the examined fusion approaches, Dempster’s Rule of combination has the best accuracy allowing for coherent decision making even with contradicting decisions of individual detectors.

Jana Dittmann

Papers

Information Hiding in Industrial Control Systems: An OPC UA based Supply Chain Attack and its Detection

Provably Secure Authentication of Digital Media Through Invertible Watermarks

Resolution and size of measured area influences on the short- and long-term aging of latent fingerprint traces using the binary pixel feature and a high-resolution non-invasive chromatic white light (CWL) sensor

Intrusion detection systems for IP telephony networks

Dempster-Shafer Theory for Fusing Face Morphing Detectors