{"id":1453,"date":"2016-11-10T00:35:34","date_gmt":"2016-11-10T00:35:34","guid":{"rendered":"https:\/\/www.inforsec.org\/wp\/?p=1453"},"modified":"2016-11-10T00:36:32","modified_gmt":"2016-11-10T00:36:32","slug":"%e5%b8%a6%e4%bd%a0%e8%b5%b0%e8%bf%9b%e7%bb%b4%e4%b9%9f%e7%ba%b3%e7%89%88%e7%9a%84ccs2016%ef%bc%88%e7%8e%b0%e5%9c%ba%e6%8a%a5%e5%91%8a%e7%82%b9%e8%af%84%e4%ba%8c%ef%bc%89","status":"publish","type":"post","link":"http:\/\/202.112.238.40\/wp\/?p=1453","title":{"rendered":"\u5e26\u4f60\u8d70\u8fdb\u7ef4\u4e5f\u7eb3\u7248\u7684CCS2016\uff08\u73b0\u573a\u62a5\u544a\u70b9\u8bc4\u4e8c\uff09"},"content":{"rendered":"<h3>\u7f16\u8005\u6309\uff1a<\/h3>\n<h3>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0ACM Conference on Computer and Communications Security (CCS)\u00a0\u662f\u7cfb\u7edf\u548c\u7f51\u7edc\u5b89\u5168\u9886\u57df\u7684\u56db\u5927\u9876\u7ea7\u5b66\u672f\u4f1a\u8bae\uff08BIG4\uff09\u4e4b\u4e00\uff0c\u4e00\u822c\u5728\u6bcf\u5e74\u7684\u5341\u6708\u4efd\u4e3e\u884c\uff0c\u5730\u70b9\u4e0d\u5b9a\u3002\u4eca\u5e74\u7684CCS\uff08\u7b2c23\u5c4a\uff09\u4e8e10\u670824-28\u53f7\u65e5\u5965\u5730\u5229\u7684\u9996\u90fd\u7ef4\u4e5f\u7eb3\u4e3e\u884c\u3002\u4f1a\u8bae\u5730\u70b9\u9009\u5728\u5965\u5730\u5229\u603b\u7edf\u5b98\u90b8\u6240\u5728\u7684\u970d\u592b\u5821\u5bab\u6bbf(Hofburg Palace) \u3002<\/h3>\n<h3>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0CCS\u7684\u4e3b\u4f1a\u662f\u572810\u670825\u300126\u548c27\u65e5\u4e09\u5929\u3002\u4ece831\u7bc7\u6295\u7a3f\u4e2d\uff0c\u5f55\u53d6\u4e86137\u7bc7\u8bba\u6587\uff0c\u5f55\u53d6\u7387\u4e3a16.5%\u3002 \u4f1a\u8bae\u7684\u7b2c\u4e00\u5929\uff0824\u65e5\uff09\u548c\u6700\u540e\u4e00\u5929\uff0828\u65e5\uff09\u5206\u522b\u662fpre-workshops \uff087\u4e2a\uff09\u548cpost-workshops\uff086\u4e2a\uff09\uff0c\u53c2\u4f1a\u603b\u4eba\u6570\u8d85\u8fc71000\u4eba\uff0c\u5927\u6982\u662f\u5b89\u5168\u9886\u57df\u6709\u53f2\u4ee5\u6765\uff0c\u89c4\u6a21\u6700\u5927\u7684\u4e00\u6b21\u4f1a\u8bae\u3002<\/h3>\n<h3>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u6211\u4eec\u5c06\u9646\u7eed\u5206\u4eab\u9999\u6e2f\u4e2d\u6587\u5927\u5b66\u5b59\u8317\u73c5\u535a\u58eb\u63d0\u4f9b\u7684\u53c2\u4f1a\u603b\u7ed3\u548c\u611f\u60f3\u3002\u5b59\u535a\u58eb\u7684\u603b\u7ed3\u56fe\u6587\u5e76\u8302\uff0c\u5185\u5bb9\u8be6\u7ec6\u3002\u65e2\u6709\u5bf9CCS\u76f8\u5173\u8bba\u6587\u7684\u6982\u8ff0\uff0c\u4e5f\u6709\u81ea\u5df1\u7684\u601d\u8003\u548c\u8bc4\u8bba\u3002\u76f8\u4fe1\u8fd9\u4e00\u7cfb\u5217\u6587\u7ae0\uff0c\u4f1a\u7ed9\u8bfb\u8005\u5e26\u6765\u8eab\u4e34\u5176\u5883\u7684\u53c2\u4f1a\u611f\u53d7\u3002<\/h3>\n<h3 style=\"text-align: right;\">\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u2014\u2014\u4e07\u6d9b \u00a0\u534e\u4e3a\u52a0\u62ff\u5927<\/h3>\n<h3 style=\"text-align: right;\"><!--more--><\/h3>\n<h3 style=\"text-align: center;\"><strong><b>\u5e26\u4f60\u8d70\u8fdb\u7ef4\u4e5f\u7eb3\u7248\u7684CCS2016\uff08\u73b0\u573a\u62a5\u544a\u70b9\u8bc4<\/b><\/strong><strong><b>\u4e8c<\/b><\/strong><strong><b>\uff09<\/b><\/strong><\/h3>\n<h3><strong><b>Technical Session: Privacy<\/b><\/strong><\/h3>\n<p>\u4e0b\u5348\u7684 Privacy session \u6709\u56db\u7bc7 paper\uff0c\u4e24\u7bc7\u662f\u8bb2 permission \u5206\u6790\u7684\uff0c\u4e00\u7bc7\u8bb2\u89c6\u9891\u9690\u79c1\uff0c\u53e6\u5916\u4e00\u7bc7\u8bb2\u7535\u8bdd\u53f7\u7801\u7684\u95ee\u9898\u3002\u6211\u6311\u6709\u610f\u601d\u7684\u91cd\u70b9\u8bb2\u4e00\u4e0b\uff0c\u5176\u4ed6\u7684\u5c31\u7b80\u5355\u4ecb\u7ecd\u4e00\u4e0b\u601d\u8def\u3002<\/p>\n<h4><strong><b>SecuRank: Starving Permission-Hungry Apps Using Contextual Permission Analysis<\/b><\/strong><\/h4>\n<p>sVincent Taylor (University of Oxford), Ivan Martinovic (University of Oxford)<\/p>\n<p>\u73b0\u5728\u5e02\u573a\u4e0a\u7684\u5e94\u7528\u76f8\u540c\u529f\u80fd\u7684\u975e\u5e38\u591a\uff0c\u4e0d\u540c\u7684\u5e94\u7528\u4f7f\u7528\u7684 permission \u4e5f\u4e0d\u5c3d\u76f8\u540c\uff0cSecuRank \u53ef\u4ee5\u63a8\u8350\u76f8\u4f3c\u529f\u80fd\u7684\uff0c\u5e76\u4e14\u4e0d\u4f1a\u9700\u8981\u90a3\u4e48\u591a permission \u7684 app\u3002\u8fd9\u4e2a\u7cfb\u7edf\u63d0\u53d6\u5e94\u7528\u7684\u63cf\u8ff0\u53e5\u5b50\uff0c\u7528 NLP \u7684\u65b9\u6cd5\u5224\u65ad\u76f8\u4f3c\u5ea6\uff0c\u7136\u540e\u4f7f\u7528 permission prevalence metric \u6765\u5b9a\u4e49\u7a00\u6709\u7684\u53ef\u80fd\u662f\u654f\u611f\u7684 permission\u3002\u901a\u8fc7\u8fd9\u4e24\u79cd\u65b9\u6cd5\uff0c\u5c31\u53ef\u4ee5\u7ed9\u7528\u6237\u63a8\u8350\u76f8\u5bf9\u5b89\u5168\uff0c\u529f\u80fd\u7c7b\u4f3c\u7684App\u4e86\u3002<\/p>\n<h4><strong><b>Securing Recognizers for Rich Video Applications<\/b><\/strong><\/h4>\n<p>Christopher Thompson (University of California, Berkeley), David Wagner (University of California, Berkeley)<\/p>\n<p>\u8fd9\u7bc7\u6587\u7ae0\u8ba8\u8bba\u7684\u662f\u5982\u4f55\u4fdd\u62a4\u89c6\u9891\u9690\u79c1\u7684\u95ee\u9898\u3002\u89e3\u51b3\u65b9\u6cd5\u5c31\u662f\u5728\u89c6\u9891\u9001\u7ed9\u5e94\u7528\u7684\u65f6\u5019\uff0c\u52a0\u5165\u4e00\u4e2a\u9884\u5904\u7406\uff0c\u53ea\u63d0\u4f9b\u5fc5\u8981\u7684\u4fe1\u606f\uff0c\u5c3d\u91cf\u51cf\u5c11\u5176\u4ed6\u4e0d\u76f8\u5173\u7684\u4fe1\u606f\u6cc4\u6f0f\u3002\u6587\u7ae0\u7528 privacy budget \u8868\u793a\u4e00\u4e2a\u89c6\u9891\u5305\u542b\u7684\u4fe1\u606f\u91cf\u3002\u4e0b\u9762\u8fd9\u4e2a\u4f8b\u5b50\u5c31\u662f\u5904\u7406\u540e\u7684\u89c6\u9891\uff0c\u51e0\u4e4e\u65e0\u6cd5\u5206\u8fa8\u80cc\u666f\u4fe1\u606f\uff0c\u4f46\u662f\u80fd\u8bc6\u522b\u51fa\u6765\u6709\u4e2a\u4eba\u5728\u91cc\u9762\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1456\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u72477.png\" alt=\"%e5%9b%be%e7%89%877\" width=\"600\" height=\"345\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u72477.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u72477-300x173.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u72477-250x144.png 250w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u72477-150x86.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><em><i>securing-recognizers<\/i><\/em><\/p>\n<h4><strong><b>On a (Per)Mission: Building Privacy Into the<\/b><\/strong><strong><b>App<\/b><\/strong><strong><b>Marketplace<\/b><\/strong><\/h4>\n<p>Hannah Quay-De La Vallee (Brown University), Paige Selby (Brown University), Shriram Krishnamurthi (Brown University)<\/p>\n<p>\u8fd9\u7bc7\u6587\u7ae0\u7814\u7a76\u4e86\u5982\u4f55\u5728\u5e94\u7528\u5e02\u573a\u4e2d\u7684\u663e\u793aApp\u7684 permission\/privacy \u60c5\u51b5\uff0c\u4f5c\u8005\u7528 Amazon Mechanical Turk \u6d4b\u8bd5\u4e0d\u540c\u7528\u6237\u5bf9\u4e8e\u4e0d\u540c\u5f62\u5f0f\u7684 privacy \u7ea7\u522b\u663e\u793a\u7684\u7406\u89e3\u3002\u6bd4\u5982\u8bf4\u4e0b\u9762\u51e0\u4e2a\u4f8b\u5b50\uff0c\u4e0d\u540c\u7684\u4eba\u770b\u5230\u7684\u4fe1\u606f\u662f\u4e0d\u4e00\u6837\u7684\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-large wp-image-1457\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u72478-1024x340.png\" alt=\"%e5%9b%be%e7%89%878\" width=\"800\" height=\"266\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u72478-1024x340.png 1024w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u72478-300x100.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u72478-768x255.png 768w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u72478-250x83.png 250w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u72478-150x50.png 150w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u72478.png 1283w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/p>\n<p><em><i>on-a-permission<\/i><\/em><\/p>\n<h4><strong><b>Exploiting Phone Numbers and Cross-Application Features in Targeted Mobile Attacks<\/b><\/strong><\/h4>\n<p>Srishti Gupta (Indraprastha Institute of Information Technology, Delhi), Payas Gupta (School of Information Systems, Singapore Management University), Mustaque Ahamad (Georgia Institute of Technology &amp; New York University Abu Dhabi), Ponnurangam Kumaraguru (IIITD)<\/p>\n<p>\u8fd9\u7bc7\u6587\u7ae0\u601d\u8def\u5f88\u7b80\u5355\uff0c\u73b0\u5728\u5f88\u591a\u5e94\u7528\u90fd\u4f1a\u628a\u624b\u673a\u53f7\u7801\u5f53\u4f5c\u767b\u9646\uff0c\u6216\u8005\u7528\u6237\u7684ID\u3002\u4f5c\u8005\u968f\u673a\u751f\u6210\u624b\u673a\u53f7\u7801\uff0c\u901a\u8fc7 Truecaller \u548c\u5176\u4ed6\u4e00\u4e9b\u793e\u4ea4\u7f51\u7edc\u5e94\u7528\u7684\u6570\u636e\uff0c\u5c31\u53ef\u4ee5\u53d1\u8d77\u6709\u76ee\u6807\u7684\u653b\u51fb\u3002\u7b80\u5355\u6765\u8bf4\u66f4\u50cf\u662f\u4e00\u4e2a\u81ea\u52a8\u7684\u201c\u793e\u5de5\u201d\u6846\u67b6\uff0c\u80fd\u5feb\u901f\u7684\u627e\u5230\u624b\u673a\u53f7\u5bf9\u5e94\u7684\u4eba\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1458\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u72479.png\" alt=\"%e5%9b%be%e7%89%879\" width=\"641\" height=\"311\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u72479.png 641w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u72479-300x146.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u72479-250x121.png 250w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u72479-150x73.png 150w\" sizes=\"auto, (max-width: 641px) 100vw, 641px\" \/><\/p>\n<p><em><i>ex<\/i><\/em><em><i>ploiting-phone-numbers<\/i><\/em><\/p>\n<h3><strong><b>Technical Session: Attacks and Defenses<\/b><\/strong><\/h3>\n<h4><strong><b>Hardened Setup of Personalized Security Indicators to Counter Phishing Attacks in Mobile Banking<\/b><\/strong><\/h4>\n<p>Claudio Marforio (ETH Zurich), Ramya Masti (ETH Zurich), Claudio Soriente (Telefonica), Kari Kostiainen (ETH Zurich), Srdjan Capkun (ETH Zurich)<\/p>\n<p>\u8fd9\u7bc7 paper \u8bb2\u7684\u662f\u5982\u4f55\u7528 personlized security indicator \u6765\u533a\u5206 phishingApp\u548c\u5b98\u65b9\u7684 app\u3002\u8fd9\u4e2a personlized seurity indicator \u5c31\u662f\u4e00\u4e2a PIN\uff0c\u94f6\u884c\u901a\u8fc7\u90ae\u5bc4\u7684\u65b9\u5f0f\u5bc4\u5230\u7528\u6237\u624b\u91cc\u9762\u3002\u60f3\u8981\u907f\u514d phising app\uff0c\u9700\u8981\u4f7f\u7528\u624b\u673a\u7684\u53e6\u5916\u4e00\u4e2a app: broker\uff0c\u8f93\u5165 PIN \u624d\u80fd\u8fdb\u5165\u771f\u6b63\u7684\u5b98\u65b9\u94f6\u884c app\u3002\u53ef\u80fd\u662f\u4e4b\u524d\u6ca1\u6709\u4eba\u7814\u7a76\u8fc7\u8fd9\u4e2a\u6d41\u7a0b\uff0c\u6240\u4ee5\u8fd9\u7bc7\u6587\u7ae0\u53c8\u91cd\u65b0\u7684\u8bbe\u8ba1\u4e86\u6d41\u7a0b\uff0c\u5e76\u4e14 evaluate \u4e86\u8fd9\u79cd protocol \u7684 performance\u3002\u4e0d\u77e5\u9053\u5e02\u9762\u4e0a\u6709\u94f6\u884c\u5728\u4f7f\u7528\u8fd9\u79cd\u65b9\u5f0f\u6ca1\u6709\uff0c\u4f46\u662f\u5b9e\u4f53\u7684 key\uff0cU\u76fe\u8fd9\u79cd\u65b9\u5f0f\u7684\u8ba4\u8bc1\u73b0\u5728\u8fd8\u662f\u633a\u5e38\u89c1\u7684\u3002\u4e0d\u77e5\u9053\u94f6\u884c\u6709\u6ca1\u6709\u8fd9\u4e2a\u52a8\u529b\uff0c\u907f\u514d phising malware \u76d7\u53d6\u7528\u6237\u4fe1\u606f\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1459\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724710.png\" alt=\"%e5%9b%be%e7%89%8710\" width=\"567\" height=\"494\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724710.png 567w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724710-300x261.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724710-172x150.png 172w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724710-150x131.png 150w\" sizes=\"auto, (max-width: 567px) 100vw, 567px\" \/><\/p>\n<p><em><i>hardened-setup<\/i><\/em><\/p>\n<h4><strong><b>Picasso: Lightweight Device Class Fingerprinting for Web Clients<\/b><\/strong><\/h4>\n<p>Elie Bursztein (Google), Artem Malyshev (Google), Tadek Pietraszek (Google), Kurt Thomas (Google)<\/p>\n<p>Picasso \u6839\u636e HTML5 \u7684 graphical API \u5728 canvase \u4e0a\u9762\u751f\u6210\u56fe\u7247\uff0c\u56e0\u4e3a\u4e0d\u540c\u5e73\u53f0\u7684\u6d4f\u89c8\u5668\u4f1a\u751f\u6210\u7684\u4e0d\u53ef\u9884\u6d4b\u7684 noise\uff0c\u8fd9\u4e9b noise \u5c31\u53ef\u4ee5\u7528\u6765\u533a\u5206\u6d4f\u89c8\u5668\u3002Picasso \u7684\u5de5\u4f5c\u6d41\u7a0b\u662f\u8fd9\u6837\u7684\uff0c\u9996\u5148\u670d\u52a1\u5668\u4f1a\u53d1\u9001\u4e00\u4e2a challenge \u7ed9\u5ba2\u6237\u7aef\uff0c\u4e5f\u5c31\u662f\u6d4f\u89c8\u5668\u3002\u6d4f\u89c8\u5668\u4f1a\u6839\u636e challenge \u6e32\u67d3\u51fa\u76f8\u5e94\u7684\u56fe\u7247\u8fd4\u56de\u7ed9\u670d\u52a1\u5668\u3002\u6700\u540e\uff0c\u670d\u52a1\u5668\u6839\u636e\u56fe\u7247\u7684\u4e0d\u540c\u6765\u5224\u65ad\u662f\u7531\u90a3\u79cd\u6d4f\u89c8\u5668\u751f\u6210\u7684\uff0c\u533a\u5206\u51fa\u662f iOS \u7684 Safari \u6216\u662f Linux \u4e0a\u7684 PhantomJS\u3002<\/p>\n<p>Picasso \u53ef\u4ee5\u5e94\u7528\u5728\u7edf\u8ba1\u8bbf\u95ee\u6765\u6e90\uff0c\u8bc6\u522b\u722c\u866b\uff0c\u5224\u65ad\u8fd0\u884c\u73af\u5883\u7b49\u65b9\u9762\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1461\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724711-1.png\" alt=\"%e5%9b%be%e7%89%8711\" width=\"600\" height=\"371\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724711-1.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724711-1-300x186.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724711-1-243x150.png 243w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724711-1-150x93.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><em><i>picasso<\/i><\/em><\/p>\n<p>\u4e0b\u9762\u8fd9\u4e2a\u4f8b\u5b50\u5c31\u662f\u5728\u4e0d\u540c\u6d4f\u89c8\u5668\u4e0b\u751f\u6210\u76f8\u540c\u7684\u56fe\u7247\uff0c\u56fe\u7247\u770b\u8d77\u6765\u662f\u4e00\u6837\u7684\uff0c\u4f46\u662f\u50cf\u7d20\u548c\u50cf\u7d20\u5bf9\u6bd4\u4e00\u4e0b\u5c31\u80fd\u53d1\u73b0\u4e0d\u540c\uff1a<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1462\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724712.png\" alt=\"%e5%9b%be%e7%89%8712\" width=\"641\" height=\"187\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724712.png 641w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724712-300x88.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724712-250x73.png 250w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724712-150x44.png 150w\" sizes=\"auto, (max-width: 641px) 100vw, 641px\" \/><\/p>\n<p><em><i>picasso-2<\/i><\/em><\/p>\n<h4><strong><b>Detecting Misuse of Google Cloud Messaging in Android Badware<\/b><\/strong><\/h4>\n<p>Mansour Ahmadi (University of Cagliari), Battista Biggio (University of Cagliari), Steven Arzt (Technische Universitat Darmstadt), Davide Ariu (University of Cagliari), Giorgio Giacinto (University of Cagliari)<\/p>\n<p>\u8fd9\u7bc7\u6587\u7ae0\u63d0\u51fa\u4e86\u68c0\u6d4b\u4f7f\u7528 GCM (Google Cloud Messaging) \u670d\u52a1\u7684 Android Badware \u7684\u65b9\u6cd5\uff0c\u7b80\u5355\u6765\u8bf4\u5c31\u662f\u4f7f\u7528\u9759\u6001\u68c0\u6d4b\u7684\u65b9\u6cd5\uff0c\u53d1\u73b0 GCM \u7684 control flow\uff0c\u63d0\u53d6\u7279\u5f81\uff0c\u7136\u540e\u4f7f\u7528 SVM, decision tree \u7684 classification \u65b9\u6cd5\u6765\u505a\u5206\u7c7b\uff0c\u4ece\u800c\u68c0\u6d4b\u51fa\u76f8\u4f3c\u7684\u8c03\u7528\u3002\u8fd9\u7bc7\u6587\u7ae0\u601d\u8def\u548c\u65b9\u6cd5\u6bd4\u8f83\u7b80\u5355\uff0c\u6211\u5c31\u4e0d\u8be6\u7ec6\u5206\u6790\u4e86\u3002<\/p>\n<h4><strong><b>[Short Paper] On the CCA (in)security of MTProto<\/b><\/strong><\/h4>\n<p>Jakob Jakobsen (Aarhus University), Claudio Orlandi (Aarhus University)<\/p>\n<p>\u672c\u6587\u5206\u6790\u4e86 Telegram \u7684\u52a0\u5bc6\u65b9\u5f0f\uff0c\u53d1\u73b0 Telegram \u7684 protocal MTProto \u4e0d\u662f IND-CCA (indistinguishability under chosen-ciphertext attack) secure\u3002\u8bc1\u660e\u4e86\u5728\u67d0\u4e9b\u60c5\u51b5\u4e0b\u53ef\u4ee5\u628a\u4efb\u610f\u5bc6\u6587\u66ff\u6362\u6210\u66ff\u6362\u4e3a\u53e6\u5916\u4e00\u4e2a\u5bc6\u6587\uff0c\u4f7f\u5f97\u4ed6\u4eec\u89e3\u5bc6\u540e\u7684\u539f\u6587\u662f\u4e00\u6837\u7684\u3002\u4f5c\u8005\u7ed9\u7684 take-away message \u662f\uff1a<strong><b>\u90a3\u4e9b\u5df2\u7ecf\u8bc1\u660e\u8fc7\u7684\u5b89\u5168\u52a0\u5bc6\u65b9\u6cd5\u8981\u6bd4\u81ea\u5df1\u53d1\u660e\u7684 (home-brewed) \u52a0\u5bc6\u65b9\u6cd5\u66f4\u5b89\u5168<\/b><\/strong>\u3002<\/p>\n<h4><strong><b>[Short Paper] Breaking TETRA Location Privacy and Network Availability<\/b><\/strong><\/h4>\n<p>Martin Pfeiffer (Secure Mobile Networking Lab, TU Darmstadt), Jan-Pascal Kwiotek (Secure Mobile Networking Lab, TU Darmstadt), Jiska Classen (Secure Mobile Networking Lab, TU Darmstadt), Robin Klose (Secure Mobile Networking Lab, TU Darmstadt), Matthias Hollick (Secure Mobile Networking Lab, TU Darmstadt)<\/p>\n<p>\u8fd9\u7bc7\u6587\u7ae0\u4e3b\u8981\u8bb2\u4e86\u6b27\u6d32\u4f7f\u7528\u7684 TETRA (Terrestrial Trunked Radio) \u901a\u4fe1\u534f\u8bae\u3002\u4f5c\u8005\u5b9e\u73b0\u4e86\u4e00\u4e2a TETRA \u653b\u51fb\u8bbe\u5907\uff0c\u7528\u6765 fuzz \u548c jam \u5e7f\u6cdb\u4f7f\u7528\u7684 TETRA \u8bbe\u5907\u3002<\/p>\n<h3><strong><b>Other References<\/b><\/strong><\/h3>\n<ul>\n<li>ACM Library of Proceedings of the 6th Workshop on Security and Privacy in Smartphones and Mobile Devices: http:\/\/dl.acm.org\/citation.cfm?id=2994459&amp;picked=prox&amp;CFID=859933739&amp;CFTOKEN=37757414<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>\u7f16\u8005\u6309\uff1a \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0ACM Conference on Computer and Communi&#8230; <a class=\"continue-reading-link\" href=\"http:\/\/202.112.238.40\/wp\/?p=1453\"> Continue reading <span class=\"meta-nav\">&rarr; <\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-1453","post","type-post","status-publish","format-standard","hentry","category-research"],"_links":{"self":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/1453","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1453"}],"version-history":[{"count":3,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/1453\/revisions"}],"predecessor-version":[{"id":1465,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/1453\/revisions\/1465"}],"wp:attachment":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1453"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1453"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1453"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}