20. ACSAC 2004: Tucson, Arizona, USA

20th Annual Computer Security Applications Conference (ACSAC 2004), 6-10 December 2004, Tucson, AZ, USA. IEEE Computer Society 2004, ISBN 0-7695-2252-1 BibTeX

Distinguished Practitioner

Steven B. Lipner:
The Trustworthy Computing Security Development Lifecycle. 2-13
Electronic Edition (link) BibTeX

Intrusion Detection

Giovanni Vigna, Sumit Gwalani, Kavitha Srinivasan, Elizabeth M. Belding-Royer, Richard A. Kemmerer:
An Intrusion Detection Tool for AODV-Based Ad hoc Wireless Networks. 16-27
Electronic Edition (link) BibTeX
Shai Rubin, Somesh Jha, Barton P. Miller:
Automatic Generation and Analysis of NIDS Attacks. 28-38
Electronic Edition (link) BibTeX
Yan Zhai, Peng Ning, Purush Iyer, Douglas S. Reeves:
Reasoning About Complementary Intrusion Evidence. 39-48
Electronic Edition (link) BibTeX

Start Seeing Security

Julie Thorpe, Paul C. van Oorschot:
Towards Secure Design Choices for Implementing Graphical Passwords. 50-60
Electronic Edition (link) BibTeX
Zhuowei Li, Amitabha Das:
Visualizing and Identifying Intrusion Context from System Calls Trace. 61-70
Electronic Edition (link) BibTeX
J. J. Brennan, Mindy Rudell, Donald B. Faatz, Carson Zimmerman:
Visualizing Enterprise-Wide Security (VIEWS). 71-79
Electronic Edition (link) BibTeX

Software Safety

Martin C. Rinard, Cristian Cadar, Daniel Dumitran, Daniel M. Roy, Tudor Leu:
A Dynamic Technique for Eliminating Buffer Overflow Vulnerabilities (and Other Memory Errors). 82-90
Electronic Edition (link) BibTeX
Christopher Krügel, William K. Robertson, Giovanni Vigna:
Detecting Kernel-Level Rootkits Through Binary Analysis. 91-100
Electronic Edition (link) BibTeX
Haizhi Xu, Wenliang Du, Steve J. Chapin:
Detecting Exploit Code Execution in Loadable Kernel Modules. 101-110
Electronic Edition (link) BibTeX

Panel

Marshall D. Abrams:
The Relationship of System & Product Specifications and Evaluations. 112-113
Electronic Edition (link) BibTeX

Malware

Ajay K. Gupta, Daniel C. DuVarney:
Using Predators to Combat Worms and Viruses: A Simulation-Based Study. 116-125
Electronic Edition (link) BibTeX
Kalyan S. Perumalla, Srikanth Sundaragopalan:
High-Fidelity Modeling of Computer Network Worms. 126-135
Electronic Edition (link) BibTeX
Guofei Gu, Monirul I. Sharif, Xinzhou Qin, David Dagon, Wenke Lee, George F. Riley:
Worm Detection, Early Warning and Response Based on Local Victim Information. 136-145
Electronic Edition (link) BibTeX
Hisashi Kojima, Ikuya Morikawa, Yuko Nakayama, Yuji Yamaoka:
Cozilet: Transparent Encapsulation to Prevent Abuse of Trusted Applets. 146-155
Electronic Edition (link) BibTeX

Audit Analysis

Emilie Lundin Barse, Erland Jonsson:
Extracting Attack Manifestations to Determine Log Data Requirements for Intrusion Detection. 158-167
Electronic Edition (link) BibTeX
Jingyu Zhou, Giovanni Vigna:
Detecting Attacks That Exploit Application-Logic Errors Through Application-Level Auditing. 168-178
Electronic Edition (link) BibTeX
Tzi-cker Chiueh, Dhruv Pilania:
Design, Implementation, and Evaluation of A Repairable Database Management System. 179-188
Electronic Edition (link) BibTeX
Ramkumar Chinchani, Aarthie Muthukrishnan, Madhusudhanan Chandrasekaran, Shambhu J. Upadhyaya:
RACOON: Rapidly Generating User Command Data For Anomaly Detection From Customizable Templates. 189-204
Electronic Edition (link) BibTeX

Classic Papers

Marvin Schaefer:
If A1 is the Answer, What was the Question? An Edgy Na?f's Retrospective on Promulgating the Trusted Computer Systems Evaluation Criteria. 204-228
Electronic Edition (link) BibTeX
Steven M. Bellovin:
A Look Back at "Security Problems in the TCP/IP Protocol Suite". 229-249
Electronic Edition (link) BibTeX

Middleware

Mudhakar Srivatsa, Ling Liu:
Vulnerabilities and Security Threats in Structured Overlay Networks: A Quantitative Analysis. 252-261
Electronic Edition (link) BibTeX
Ninghui Li, John C. Mitchell, Derrick Tong:
Securing Java RMI-Based Distributed Applications. 262-271
Electronic Edition (link) BibTeX
Nathanael Paul, David Evans:
.NET Security: Lessons Learned and Missed from Java. 272-281
Electronic Edition (link) BibTeX

Insider Threat

Amit Purohit, Vishnu Navda, Tzi-cker Chiueh:
Tracing the Root of "Rootable" Processes. 284-303
Electronic Edition (link) BibTeX
John Marchesini, Sean W. Smith, Omen Wild, Joshua Stabiner, Alex Barsamian:
Open-Source Applications of TCPA Hardware. 294-303
Electronic Edition (link) BibTeX
Suranjan Pramanik, Vidyaraman Sankaranarayanan, Shambhu J. Upadhyaya:
Security Policies to Mitigate Insider Threat in the Document Control Domain. 304-313
Electronic Edition (link) BibTeX

Network Security

Kulesh Shanmugasundaram, Mehdi Kharrazi, Nasir D. Memon:
Nabs: A System for Detecting Resource Abuses via Characterization of Flow Content Type. 316-325
Electronic Edition (link) BibTeX
Andrew H. Sung, Jianyun Xu, Patrick Chavez, Srinivas Mukkamala:
Static Analyzer of Vicious Executables (SAVE). 326-334
Electronic Edition (link) BibTeX
Fu-Hau Hsu, Tzi-cker Chiueh:
CTCP: A Transparent Centralized TCP/IP Architecture for Network Security. 335-344
Electronic Edition (link) BibTeX

Panel

Dick Brackney, Terrance Goan, Allen Ott, Lockheed Martin:
The Cyber Enemy Within ... Countering the Threat from Malicious Insiders. 346-347
Electronic Edition (link) BibTeX

Event Correlation

Steven Noel, Eric Robertson, Sushil Jajodia:
Correlating Intrusion Events and Building Attack Scenarios Through Attack Graph Distances. 350-359
Electronic Edition (link) BibTeX
Dingbang Xu, Peng Ning:
Alert Correlation through Triggering Events and Common Resources. 360-369
Electronic Edition (link) BibTeX
Xinzhou Qin, Wenke Lee:
Attack Plan Recognition and Prediction Using Causal Networks. 370-379
Electronic Edition (link) BibTeX

Panel

Carla Marceau, Simon N. Foley:
Themes and Highlights of the New Security Paradigms Workshop 2004. 382-383
Electronic Edition (link) BibTeX

Access Control Policy

Sye Loong Keoh, Emil Lupu, Morris Sloman:
PEACE: A Policy-Based Establishment of Ad-hoc Communities. 386-395
Electronic Edition (link) BibTeX
Ezedin Barka, Ravi S. Sandhu:
Role-Based Delegation Model/ Hierarchical Roles (RBDM1). 396-404
Electronic Edition (link) BibTeX
Mohammad A. Al-Kahtani, Ravi S. Sandhu:
Mohammad A. Al-Kahtani, Ravi Sandhu. 405-415
Electronic Edition (link) BibTeX

Innovative Design

Neil C. Rowe:
Designing Good Deceptions in Defense of Information Systems. 418-427
Electronic Edition (link) BibTeX
Elvis Tombini, Hervé Debar, Ludovic Mé, Mireille Ducassé:
A Serial Combination of Anomaly and Misuse IDSes Applied to HTTP Traffic. 428-437
Electronic Edition (link) BibTeX
Alina Oprea, Dirk Balfanz, Glenn Durfee, Diana K. Smetters:
Securing a Remote Terminal Application with a Mobile Trusted Device. 438-447
Electronic Edition (link) BibTeX