Abstract： In order to improve the recognition accuracy of key stroke authentication, a methodology based on feature extraction of keystroke sequence is presented in this paper. Firstly, the data of the users＇ keystr...Abstract： In order to improve the recognition accuracy of key stroke authentication, a methodology based on feature extraction of keystroke sequence is presented in this paper. Firstly, the data of the users＇ keystroke feature information that has too much deviation with the mean deviation is filtered out. Secondly, the probability of each input key is calculated and 10 values which do not have the best features are selected. Thirdly, they are weighed and a score evaluating the extent to which the user could be authenticated successfully is calculated. The benefit of using a third-party data set is more objective and comparable. At last,展开更多
In sensor networks,the adversaries can inject false data reports from compromised nodes.Previous approaches to filter false reports,e.g.,SEF,only verify the correctness of the message authentication code (MACs) carrie...In sensor networks,the adversaries can inject false data reports from compromised nodes.Previous approaches to filter false reports,e.g.,SEF,only verify the correctness of the message authentication code (MACs) carried in each data report on intermediate nodes,thus cannot filter out fake reports that are forged in a collaborative manner by a group of compromised nodes,even if these compromised nodes distribute in different geographical areas.Furthermore,if the adversary obtains keys from enough (e.g.,more than t in SEF) distinct key partitions,it then can successfully forge a data report without being detected en-route.A neighbor information based false report filtering scheme (NFFS) in wireless sensor networks was presented.In NFFS,each node distributes its neighbor information to some other nodes after deployment.When a report is generated for an observed event,it must carry the IDs and the MACs from t detecting nodes.Each forwarding node checks not only the correctness of the MACs carried in the report,but also the legitimacy of the relative position of these detecting nodes.Analysis and simulation results demonstrate that NFFS can resist collaborative false data injection attacks efficiently,and thus can tolerate much more compromised nodes than existing schemes.展开更多
There are many business needs for implementing delegation in IT （Information Technology） systems. However, existing approaches to delegation in IT systems are limited in their usability, flexibility, and capability ...There are many business needs for implementing delegation in IT （Information Technology） systems. However, existing approaches to delegation in IT systems are limited in their usability, flexibility, and capability to implement least privilege. The result is that delegation is either not implemented or is implemented informally （e.g., by sharing credentials [passwords or hardware tokens] between users）, resulting in serious security concerns and a lack of accountability. This paper describes a methodology for delegation based on the persona concept. A persona is a special category of user that embodies only delegated privileges, and which is explicitly assumed only after the ＂real＂ human user taking on that persona explicitly chooses it, This paper describes the persona delegation framework in the context of a large enclave-based architecture currently being implemented by a major enterprise. The creation of a persona solves a lot of downstream problems by allowing the persona to be treated like any other entity in the system. That is, identity, authentication, authorization, and other security processes already know how to handle an entity of this type. Benefits of the framework include increased flexibility to handle a number of different delegation business scenarios, decreased complexity of the solution, and greater accountability with only a modest amount of additional infrastructure required.展开更多
Financial planning may not meet all the accepted criteria of traditional professions such as divinity and law, it does, however, fit the post-modernist view of professions characterized by the role played by professio...Financial planning may not meet all the accepted criteria of traditional professions such as divinity and law, it does, however, fit the post-modernist view of professions characterized by the role played by professional associations. The hallmark of a profession is the presence of a common body of knowledge and it can be claimed that a theoretical body of knowledge for the ＂financial planning profession＂ has always existed, although it has only been in recent times that agreement has been reached on a common understanding of the theoretical basis of the financial planning profession. This common body of knowledge is the basis upon which the Financial Planning Standards Board [FPSB] is attempting to develop a global curriculum as part of the certification process for financial planners. The FPSB has developed a curriculum framework to be applied by its affiliate members to ensure consistency in global education standards. A review of Certified Financial Planner （CFP） certification in Australia, China, India and the United States exposes differences in how this is approached. The Intemational Organization for Standardization [ISO] has also emerged as another forum in which global financial planning education standards have been set. Although the FPSB＇s global financial planning education standards has a high degree of compatibility with the ISO standard, the ISO standard has largely remained as a shelf reference.展开更多
基金This paper has been performed in the Project "Key Technology Research of Eavesdropping Detection in the Quantum Security Communication" supported by the National Natural Science Foundation of China
文摘Abstract： In order to improve the recognition accuracy of key stroke authentication, a methodology based on feature extraction of keystroke sequence is presented in this paper. Firstly, the data of the users＇ keystroke feature information that has too much deviation with the mean deviation is filtered out. Secondly, the probability of each input key is calculated and 10 values which do not have the best features are selected. Thirdly, they are weighed and a score evaluating the extent to which the user could be authenticated successfully is calculated. The benefit of using a third-party data set is more objective and comparable. At last,
基金Projects(61173169,61103203,70921001)supported by the National Natural Science Foundation of ChinaProject(NCET-10-0798)supported by Program for New Century Excellent Talents in University of China
文摘In sensor networks,the adversaries can inject false data reports from compromised nodes.Previous approaches to filter false reports,e.g.,SEF,only verify the correctness of the message authentication code (MACs) carried in each data report on intermediate nodes,thus cannot filter out fake reports that are forged in a collaborative manner by a group of compromised nodes,even if these compromised nodes distribute in different geographical areas.Furthermore,if the adversary obtains keys from enough (e.g.,more than t in SEF) distinct key partitions,it then can successfully forge a data report without being detected en-route.A neighbor information based false report filtering scheme (NFFS) in wireless sensor networks was presented.In NFFS,each node distributes its neighbor information to some other nodes after deployment.When a report is generated for an observed event,it must carry the IDs and the MACs from t detecting nodes.Each forwarding node checks not only the correctness of the MACs carried in the report,but also the legitimacy of the relative position of these detecting nodes.Analysis and simulation results demonstrate that NFFS can resist collaborative false data injection attacks efficiently,and thus can tolerate much more compromised nodes than existing schemes.
文摘There are many business needs for implementing delegation in IT （Information Technology） systems. However, existing approaches to delegation in IT systems are limited in their usability, flexibility, and capability to implement least privilege. The result is that delegation is either not implemented or is implemented informally （e.g., by sharing credentials [passwords or hardware tokens] between users）, resulting in serious security concerns and a lack of accountability. This paper describes a methodology for delegation based on the persona concept. A persona is a special category of user that embodies only delegated privileges, and which is explicitly assumed only after the ＂real＂ human user taking on that persona explicitly chooses it, This paper describes the persona delegation framework in the context of a large enclave-based architecture currently being implemented by a major enterprise. The creation of a persona solves a lot of downstream problems by allowing the persona to be treated like any other entity in the system. That is, identity, authentication, authorization, and other security processes already know how to handle an entity of this type. Benefits of the framework include increased flexibility to handle a number of different delegation business scenarios, decreased complexity of the solution, and greater accountability with only a modest amount of additional infrastructure required.
文摘Financial planning may not meet all the accepted criteria of traditional professions such as divinity and law, it does, however, fit the post-modernist view of professions characterized by the role played by professional associations. The hallmark of a profession is the presence of a common body of knowledge and it can be claimed that a theoretical body of knowledge for the ＂financial planning profession＂ has always existed, although it has only been in recent times that agreement has been reached on a common understanding of the theoretical basis of the financial planning profession. This common body of knowledge is the basis upon which the Financial Planning Standards Board [FPSB] is attempting to develop a global curriculum as part of the certification process for financial planners. The FPSB has developed a curriculum framework to be applied by its affiliate members to ensure consistency in global education standards. A review of Certified Financial Planner （CFP） certification in Australia, China, India and the United States exposes differences in how this is approached. The Intemational Organization for Standardization [ISO] has also emerged as another forum in which global financial planning education standards have been set. Although the FPSB＇s global financial planning education standards has a high degree of compatibility with the ISO standard, the ISO standard has largely remained as a shelf reference.
