{"id":847,"date":"2016-05-23T06:52:54","date_gmt":"2016-05-23T06:52:54","guid":{"rendered":"http:\/\/www.inforsec.org\/wp\/?p=847"},"modified":"2016-05-23T06:54:30","modified_gmt":"2016-05-23T06:54:30","slug":"5%e6%9c%8829%e6%97%a5inforsec%e8%ae%ba%e5%9d%9b%e8%a5%bf%e5%ae%89%e7%94%b5%e5%ad%90%e7%a7%91%e6%8a%80%e5%a4%a7%e5%ad%a6%e5%bc%80%e8%ae%b2","status":"publish","type":"post","link":"http:\/\/202.112.238.40\/wp\/?p=847","title":{"rendered":"5\u670829\u65e5InForSec\u8bba\u575b\u897f\u5b89\u7535\u5b50\u79d1\u6280\u5927\u5b66\u5f00\u8bb2"},"content":{"rendered":"

5\u670829\u65e5\uff0cInForSec\u4e0e\u60a8\u76f8\u7ea6\u897f\u5b89\u7535\u5b50\u79d1\u6280\u5927\u5b66\u3002\u674e\u6656\u3001\u987e\u56fd\u98de\u3001\u738b\u6653\u5cf0\u7b49\u540d\u5e08\u7cbe\u5f69\u5f00\u8bb2\uff01\u7cbe\u5f69\u4e0d\u5bb9\u9519\u8fc7\uff01<\/p>\n

\u4e3b\u529e\uff1a\u897f\u5b89\u7535\u5b50\u79d1\u6280\u5927\u5b66<\/strong><\/h3>\n

\u534f\u529e\uff1a\u7f51\u7edc\u5b89\u5168\u7814\u7a76\u56fd\u9645\u5b66\u672f\u8bba\u575b\uff08InForSec)<\/strong><\/h3>\n

\u65f6\u95f4\uff1a2016\u5e745\u670829\u65e5\uff08\u5468\u65e5\uff09\u4e0b\u53481:30-5:30<\/strong><\/h3>\n

\u5730\u70b9\uff1a\u897f\u5b89\u7535\u5b50\u79d1\u6280\u5927\u5b66\u5317\u6821\u533a\u65b0\u79d1\u6280\u697c1012\u4f1a\u8bae\u5ba4<\/strong><\/h3>\n

<\/p>\n

\u4f1a\u8bae\u65e5\u7a0b\uff1a<\/strong><\/h3>\n\n\n\n\n\n\n\n\n
\u4e8b \u9879<\/b><\/strong><\/td>\n\u4e3b\u8bb2\u5609\u5bbe<\/b><\/strong><\/td>\n\u4e3b<\/b><\/strong>\u9898<\/b><\/strong><\/td>\n<\/tr>\n
1\uff1a30-5\uff1a30<\/td>\n\u4e3b\u6301\u4eba\uff1a\u6bb5\u6d77\u65b0\u00a0\u00a0\u6e05\u534e\u5927\u5b66\u7f51\u7edc\u79d1\u5b66\u4e0e\u7f51\u7edc\u7a7a\u95f4\u7814\u7a76\u9662\u6559\u6388\uff0c\u7f51\u5b89\u56fd\u9645\u8bba\u575bInForSec\u53d1\u8d77\u4eba<\/td>\n<\/tr>\n
1:30-2:30<\/td>\n\u4e13\u5bb6\u62a5\u544a<\/td>\n\u674e\u6656 \u897f\u5b89\u7535\u5b50\u79d1\u6280\u5927\u5b66\u7f51\u7edc\u4e0e\u4fe1\u606f\u5b89\u5168\u5b66\u9662\u6267\u884c\u9662\u957f<\/td>\nS-USIM\uff1a\u57fa\u4e8eUSIM\u7684\u53cc\u94fe\u8def\u8ba4\u8bc1\u534f\u8bae\u53ca\u5176\u5e94\u7528<\/td>\n<\/tr>\n
2:30-3:30<\/td>\n\u4e13\u5bb6\u62a5\u544a<\/td>\nGuofei Gu \u00a0\u00a0\u7f8e\u56fd\u5fb7\u5dde\u519c\u5de5\u5927\u5b66\uff08TAMU\uff09\u8ba1\u7b97\u673a\u79d1\u5b66\u4e0e\u5de5\u7a0b\u7cfb\u526f\u6559\u6388<\/td>\nEmpowering Dynamic Network Defenses With SDN (Software-DefinedNetworking) Technology<\/p>\n

 <\/td>\n<\/tr>\n

3:30-4:30<\/td>\n\u4e13\u5bb6\u62a5\u544a<\/td>\n\u738b\u6653\u5cf0 \u7f8e\u56fd\u5370\u7b2c\u5b89\u7eb3\u5927\u5b66\u6559\u6388<\/td>\nSecurity Innovations in the Big-Data Era<\/td>\n<\/tr>\n
4:30-5:30<\/td>\n\u5706\u684c\u8bba\u575b\uff1a\u5982\u4f55\u64b0\u5199\u7f51\u7edc\u5b89\u5168\u56fd\u9645\u9876\u7ea7\u5b66\u672f\u4f1a\u8bae\u8bba\u6587<\/p>\n

\u4e3b\u6301\u4eba\uff1a\u6768\u73c9 \u56fd\u5bb6973\u9996\u5e2d\u79d1\u5b66\u5bb6\u3001\u590d\u65e6\u5927\u5b66\u6559\u6388<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u6f14\u8bb2<\/b><\/strong>\u5609\u5bbe\u53ca\u5185\u5bb9\u6458\u8981<\/b><\/strong><\/h3>\n

1\u3001\u62a5\u544a\u9898\u76ee S-USIM\uff1a\u57fa\u4e8eUSIM\u7684\u53cc\u94fe\u8def\u8ba4\u8bc1\u534f\u8bae\u53ca\u5176\u5e94\u7528<\/b><\/strong><\/p>\n

\"lihui\"<\/a><\/p>\n

\u6f14\u8bb2<\/b><\/strong>\u4eba<\/b><\/strong>\uff1a<\/b><\/strong>\u674e\u6656\uff0c\u6559\u6388\uff0c\u535a\u58eb\u751f\u5bfc\u5e08\u3002\u73b0\u4efb\u897f\u5b89\u7535\u5b50\u79d1\u6280\u5927\u5b66\u7f51\u7edc\u4e0e\u4fe1\u606f\u5b89\u5168\u5b66\u9662\u6267\u884c\u9662\u957f\u3002\u4e2d\u56fd\u5bc6\u7801\u5b66\u4f1a\u7406\u4e8b\u3001\u5b89\u5168\u534f\u8bae\u4e13\u4e1a\u59d4\u5458\u4f1a\u59d4\u5458\u3001\u5bc6\u7801\u82af\u7247\u4e13\u4e1a\u59d4\u5458\u4f1a\u59d4\u5458\uff0c\u4e2d\u56fd\u7535\u5b50\u5b66\u4f1a\u4fe1\u606f\u8bba\u5206\u4f1a\u59d4\u5458\uff0c\u4e2d\u56fd\u901a\u4fe1\u5b66\u4f1a\u901a\u4fe1\u5b89\u5168\u4e13\u4e1a\u59d4\u5458\u4f1a\u59d4\u5458\u4e3b\u8981\u7684\u7814\u7a76\u65b9\u5411\u662f\u5bc6\u7801\u4fe1\u606f\u5b89\u5168\u3001\u4fe1\u606f\u8bba\u4e0e\u7f16\u7801\u7406\u8bba\u3002\u4e3b\u6301\u56fd\u5bb6863\u8ba1\u5212\u3001\u56fd\u5bb6\u79d1\u6280\u652f\u6491\u8ba1\u5212\u3001\u65b0\u4e00\u4ee3\u5bbd\u5e26\u79fb\u52a8\u901a\u4fe1\u56fd\u5bb6\u91cd\u5927\u4e13\u9879\u3001\u56fd\u5bb6\u81ea\u7136\u79d1\u5b66\u57fa\u91d1\u3001\u56fd\u9632\u9884\u7814\u7b49\u9879\u76ee\uff0c\u83b7\u5f97\u7701\u90e8\u7ea7\u79d1\u6280\u8fdb\u6b65\u5956\u4e00\u7b49\u59562\u9879\uff0c\u4e8c\u7b49\u59563\u9879\uff0c\u4e09\u7b49\u59561\u9879\uff0c\u56fd\u5bb6\u7ea7\u6559\u5b66\u6210\u679c\u4e8c\u7b49\u59562\u9879\u3002\u83b7\u53d1\u660e\u4e13\u5229\u6388\u674320\u4f59\u9879\uff0c\u7533\u8bf7\u53d1\u660e\u4e13\u5229 20\u9879\u3002\u8bba\u6587170\u4f59\u7bc7\uff0c\u62c5\u4efbISPEC 2009\u548cIAS2009\u56fd\u9645\u4f1a\u8bae\u7a0b\u5e8f\u59d4\u5458\u4f1a\u5408\u4f5c\u4e3b\u5e2d\uff0ce-forensic 2010\u3001ProvSec2011\u3001ISC2011\u56fd\u9645\u5b66\u672f\u4f1a\u8bae\u5927\u4f1a\u5408\u4f5c\u4e3b\u5e2d\uff0cNSS2014\u3001ASIACCS2016\u5927\u4f1a\u8363\u8a89\u4e3b\u5e2d\uff0c\u83b7ASIACCS 2013\u6770\u51fa\u8bba\u6587\u5956\u3002<\/p>\n

\u5185\u5bb9<\/b><\/strong>\u6458\u8981<\/b><\/strong>\uff08<\/b><\/strong>Abstract<\/b><\/strong>\uff09<\/b><\/strong>:<\/b><\/strong><\/p>\n

\u5f53\u524d\u57fa\u4e8e\u77ed\u4fe1\u9a8c\u8bc1\u7801\u7684\u8ba4\u8bc1\u65b9\u5f0f\u5df2\u7ecf\u6210\u4e3a\u4e92\u8054\u7f51\u5e94\u7528\u8ba4\u8bc1\u7684\u4e3b\u6d41\u65b9\u5f0f\uff0c\u7136\u800c\u79fb\u52a8\u7ec8\u7aef\u667a\u80fd\u5316\u4ee5\u53ca\u6076\u610f\u4ee3\u7801\u7684\u6cdb\u6ee5\uff0c\u4f7f\u5f97\u7a83\u53d6\u77ed\u4fe1\u9a8c\u8bc1\u7801\u9020\u6210\u7528\u6237\u5229\u76ca\u635f\u5931\u7684\u4e8b\u4ef6\u65f6\u6709\u53d1\u751f\u3002\u6211\u4eec\u8bbe\u8ba1\u5e76\u5b9e\u73b0\u4e86\u57fa\u4e8eUSIM\u548c\u77ed\u6d88\u606f\u7684\u53cc\u94fe\u8def\u8ba4\u8bc1\u534f\u8bae\uff0c\u5728USIM\u4e0a\u5b9e\u73b0\u6570\u5b57\u7b7e\u540d\u529f\u80fd\uff0c\u5c06\u4ea4\u6613\u4fe1\u606f\u901a\u8fc7\u77ed\u6d88\u606f\u76f4\u63a5\u53d1\u9001\u5230USIM\u4e2d\uff0cUSIM\u5c06\u4ea4\u6613\u4fe1\u606f\u5728\u663e\u793a\u5728\u5c4f\u5e55\u4e0a\u7ecf\u7528\u6237\u786e\u8ba4\u540e\uff0c\u8ba1\u7b97\u6570\u5b57\u7b7e\u540d\u5e76\u8fd4\u56de\u670d\u52a1\u7aef\u3002\u534f\u8bae\u5b9e\u73b0\u4e86\u4ea4\u6613\u7684\u6570\u5b57\u7b7e\u540d\u8ba4\u8bc1\uff0c\u5df2\u7528\u4e8e\u7f51\u94f6\u7684\u652f\u4ed8\u8ba4\u8bc1\uff0c\u5e76\u53ef\u6269\u5c55\u7528\u4e8e\u5404\u7c7b\u4e92\u8054\u7f51\u8ba4\u8bc1\uff0c\u6709\u6548\u63d0\u5347\u62b5\u5fa1\u6076\u610f\u4ee3\u7801\u653b\u51fb\u7684\u80fd\u529b\u3002<\/p>\n

2\u3001\u62a5\u544a<\/b><\/strong>\u9898\u76ee<\/b><\/strong>\uff08<\/b><\/strong>Title<\/b><\/strong>\uff09<\/b><\/strong>: Empowering Dynamic Network Defenses With SDN (Software-DefinedNetworking) Technology<\/b><\/strong><\/p>\n

\"ggf\"<\/a><\/p>\n

\u6f14\u8bb2<\/b><\/strong>\u4eba<\/b><\/strong>\uff1a<\/b><\/strong>Dr. Guofei Gu is an associate professor in the Department of Computer Science & Engineering at Texas A&M University (TAMU). He received his Ph.D. degree in Computer Science from the College of Computing, Georgia Institute of Technology. His research interests are in network and system security, such as malware and APT (Advanced Persistent<\/p>\n

Threat) defense, software-defined networking (SDN) and cloud security, and mobile\/smartphone security. Dr. Gu is a recipient of 2010 NSF CAREER Award, 2013 AFOSR Young Investigator Award, IEEE S&P’10 Best Student Paper Award, and ICDCS’15 Best Paper Award. He is an active member of the security research community and has pioneered several new research directions such as botnet detection\/defense and SDN security. Dr. Gu has served on the program committees of top-tier security conferences such as IEEE S&P, ACM CCS, USENIX Security, and NDSS, among many others. He is an Associate Editor for IEEE Transactions on Information Forensics and Security (TIFS) and a Steering Committee co-chair for International Conference on Security and Privacy in Communication Networks (SecureComm). He is currently directing the SUCCESS (Secure Communication and Computer Systems) Lab at TAMU.<\/p>\n

\u5185\u5bb9<\/b><\/strong>\u6458\u8981<\/b><\/strong>\uff08<\/b><\/strong>Abstract<\/b><\/strong>\uff09<\/b><\/strong>:<\/b><\/strong><\/p>\n

Software Defined Networking (SDN) is a new networking paradigm that decouples the control logic from the closed and proprietary implementations of traditional network data plane infrastructure. SDN enables researchers to more easily design and distribute innovative flow handling and network control algorithms. We believe that SDN can, in time, prove to be one of the more impactful technologies to drive a variety of innovations in network security and security will be a new killer app for SDN. However, to date there remains a stark paucity of SDN security research and development.<\/p>\n

In this talk, I will discuss some new opportunities as well as challenges in this new direction, and demonstrate with our recent research results. I will discuss how SDN can enhance network security, e.g., by offering a dramatic simplification to the way we design and integrate complex network security applications\/services into large networks. I will also introduce our recent work, PBS (Programmable BYOD Security), a new SDN-motivated security solution to enable fine-grained, application-level network security programmability for the purpose of network management and policy enforcement on mobile apps and devices.<\/p>\n

3\u3001<\/b><\/strong>\u62a5\u544a<\/b><\/strong>\u9898\u76ee<\/b><\/strong>\uff08<\/b><\/strong>Title<\/b><\/strong>\uff09<\/b><\/strong>: Security Innovations in the Big-Data Era<\/b><\/strong><\/p>\n

\u6f14\u8bb2<\/b><\/strong>\u4eba<\/b><\/strong>\uff1a\u738b<\/b><\/strong>\u6653\u5cf0<\/b><\/strong>\u00a0\u7f8e\u56fd<\/b><\/strong>\u5370\u7b2c\u5b89\u7eb3\u5927\u5b66\u6559\u6388<\/b><\/strong><\/p>\n

\"wxf\"<\/a>d<\/p>\n

Dr. XiaoFeng Wang is a professor in the School of Informatics and Computing at Indiana University, Bloomington. He received his Ph.D. in Electrical and Computer Engineering from Carnegie Mellon University in 2004, and has since been a faculty member at IU. \u00a0Dr. Wang is a well-recognized researcher on system and network security. \u00a0 His work focuses on cloud and mobile security, and data privacy. He is a recipient of 2011 Award for Outstanding Research in Privacy Enhancing Technologies (the PET Award) and the Best Practical Paper Award at the 32nd IEEE Symposium on Security and Privacy.\u00a0 His work frequently receives attention from media, including CNN, MSNBC, Slashdot,\u00a0CNet, PC World, etc. Examples include his discovery of security-critical vulnerabilities in payment API integrations (http:\/\/money.cnn.com\/2011\/04\/13\/technology\/ecommerce_security_flaw\/<\/a>) and his recent study of the security flaws on the Apple platform (http:\/\/money.cnn.com\/2015\/06\/18\/technology\/apple-keychain-passwords\/<\/a>). His research is supported by the NIH, NSF, Department of Homeland Security, the Air Force and Microsoft Research.\u00a0 He is the director of\u00a0IU\u2019s Center for Security Informatics.<\/p>\n

\u5185\u5bb9<\/b><\/strong>\u6458\u8981<\/b><\/strong>\uff08<\/b><\/strong>Abstract<\/b><\/strong>\uff09<\/b><\/strong>: <\/b><\/strong><\/p>\n

The rapid progress in computing has produced a huge amount of data, which will continue to grow in the years to come. \u00a0In this big-data era, we envision that tomorrow\u2019s security technologies will be data-centric: new defense will become smart and proactive by using the data to understand what the attackers have already done, what they are about to do, what their strategies and infrastructures are; effective protection will be provided for dissemination and analysis of the data involving sensitive information on an unprecedented scale. \u00a0In this talk, I report our first step toward this future of secure computing. We show that through effective analysis of over a million Android apps, previously unknown malware can be detected within a few seconds, without resorting to conventional Anti-Virus means such as signatures and behavior patterns. \u00a0Also, by leveraging trillions of web pages indexed by search engines, we can capture tens of thousands of compromised websites (including those of government agencies like NIH, NSF and leading education institutions world-wide) by simply asking Google and Bing right questions and automatically analyzing their answers through Natural Language Processing. \u00a0Further, we found that an in-depth understanding about the unique features of human genomes and how they are used in biomedical research and healthcare systems can help us find a highly efficient way to protect patient privacy during a large-scale genome analysis. \u00a0\u00a0Our findings indicate that by unlocking the great value of data, we can revolutionize the security landscape, making tomorrow security technologies more intelligent and effective.<\/p>\n

\u62a5\u540d\u65b9\u5f0f\uff1a<\/strong>\u8bba\u575b\u53c2\u4e0e\u56de\u6267\u201c\u59d3\u540d+\u5355\u4f4d+\u624b\u673a+\u90ae\u7bb1\u201d\u8bf7\u4e8e5\u670825\u65e5\u524d\u53d1\u9001\u5230\uff1ainforsec@ccert.edu.cn<\/strong>\uff0c\u5e76\u6ce8\u660e\u662f\u5426\u53c2\u52a0\u665a\u9910\u6c99\u9f99\u3002
\n