Matrix Factorization Techniques for Recommender Systems

This document provides updates to IEEE Std 802.16's MIB for the MAC, PHY and asso- ciated management procedures in order to accommodate recent extensions to the standard.

IEEE Standard for Local and Metropolitan Area Networks Part 16: Air Interface for Fixed Broadband Wireless Access Systems Draft Amendment: Management Information Base Extensions

A systematic literature review of blockchain-based applications: Current status, classification and open issues

The sharp increase in the number of smartphones on the market, with the Android platform posed to becoming a market leader makes the need for malware analysis on this platform an urgent issue.In this paper we capitalize on earlier approaches for dynamic analysis of application behavior as a means for detecting malware in the Android platform. The detector is embedded in a overall framework for collection of traces from an unlimited number of real users based on crowdsourcing. Our framework has been demonstrated by analyzing the data collected in the central server using two types of data sets: those from artificial malware created for test purposes, and those from real malware found in the wild. The method is shown to be an effective means of isolating the malware and alerting the users of a downloaded malware. This shows the potential for avoiding the spreading of a detected malware to a larger community.

/pdf/crowdroid-behavior-based-malware-detection-system-for-x2tq6w9qk1.pdf

Crowdroid: behavior-based malware detection system for Android

我的台灣, 看見心靈的故鄉 =2009林磐聳藝術與設計展

Stream cipher-based hash function (SCH) is the one of new approachs to construct hash functions. However, the security and the design policy of SCH have not yet been studied sufficiently. In this paper, we analyze the security of SCHs focusing on the stream cipher function. First, we propose a model of SCHs which consist of a pre-computation function and a stream cipher. Then, we show that attacks against a stream cipher can also be threats to SCHs and discuss the security on each phase of SCH; message injection, blank rounds, and hash generation. Finally we derive the necessary conditions on the stream cipher function for an SCH to be secure.

Stream Cipher-Based Hash Function and Its Security

In large-scale networks, users want to be able to communicate securely with each other over a channel that is unreliable. When the existing 2- and 3-party protocols are realized in this situation, there are several problems: a client must hold many passwords and the load on the server concerning password management is heavy. In this paper, we define a new ideal client-to-client general authenticated key exchange functionality, where arbitrary 2-party key exchange protocols are applicable to protocols between the client and server and between servers. We also propose a client-to-client general authenticated key exchange protocol C2C-GAKE as a general form of the client-to-client model, and a client-to-client hybrid authenticated key exchange protocol C2C-HAKE as an example protocol of C2C-GAKE to solve the above problems. In C2C-HAKE, a server shares passwords only with clients in the same realm respectively, public/private keys are used between respective servers, and two clients between different realms share a final session key via the respective servers. Thus, with regard to password management in C2C-HAKE, the load on the server can be distributed to several servers. In addition, we prove that C2C-HAKE securely realizes the above functionality. C2C-HAKE is the first client-to-client hybrid authenticated key exchange protocol that is secure in a universally composable framework with a security-preserving composition property.

Universally Composable Client-to-Client General Authenticated Key Exchange

The Internet of things (IoT) has come into widespread use, and data protection and integrity are critical for connected IoT devices in order to maintain security and privacy. Low-power wide-area (LPWA) technologies for IoT wireless communication achieve data protection and integrity by using encryption and message authentication. However, side-channel analysis techniques exist that have the capacity to recover secret information from a device. In this paper, we apply a side-channel analysis technique to the payload encryption process and message authentication code generation process on a real LoRaWAN end-device. The entire AES-128 key for the payload encryption can be recovered with 260 electromagnetic(EM)-leakage traces and 12 bytes of the key for message authentication code generation can be recovered with 140 EM-leakage traces.

/pdf/experiment-on-side-channel-key-recovery-using-a-real-lpwa-ycms6wrhvv.pdf

Experiment on Side-Channel Key-Recovery using a Real LPWA End-device

In this paper, we focus on security-and-privacy-related issues that confront IT systems during disasters. We summarize these security and privacy issues in the context of two major areas of operation: information gathering and system continuity management. Then we provide the results of a survey on techniques for solving these issues. Finally, we discuss outstanding issues facing these the systems.

https://link.springer.com/content/pdf/10.1007%2F978-3-642-32498-7_33.pdf

Security-and-Privacy-Related Issues on IT Systems During Disasters

A challenging task in privacy protection for public data is to realize an algorithm that generalizes a table according to requirements of a data user. In this paper, we propose an anonymization scheme for generating a k-anonymous and l-diverse table, and show evaluation results using three different tables. Our scheme is based on both top-down and bottom-up approaches for full-domain and partial-domain generalization, and the requirements are automatically incorporated into the generated table. The generated table meets user's requirements and can be employed in the services provided by users without any modification or evaluation.

Shinsaku Kiyomoto

Papers

Stream Cipher-Based Hash Function and Its Security

Universally Composable Client-to-Client General Authenticated Key Exchange

Experiment on Side-Channel Key-Recovery using a Real LPWA End-device

Security-and-Privacy-Related Issues on IT Systems During Disasters

Privacy Frost: A User-Oriented Data Anonymization Tool