Test Whats new message.
Scheduled Maintenance on Monday 1/13/2025
Single article sales and account management will be unavailable from 5:00 AM - 7:00 PM ET (09:00 - 23:00 UTC). We apologize for the inconvenience.
IEEE Transactions on Dependable and Secure Computing
Showing 1-25 of 50
Sort By
Robust Detection of Malicious URLs With Self-Paced Wide & Deep Learning
Yunji Liang;Qiushi Wang;Kang Xiong;Xiaolong Zheng;Zhiwen Yu;Daniel Zeng
Publication Year: 2022,Page(s):717 - 730
Cited by: Papers (6)
As cybercrimes grow in scale with devastating economic costs, it is important to protect potential victims against diverse attacks. In spite of the diversity of cybercrimes, it is the uniform resource locators (URLs) that connect vulnerable users with potential attacks. Although numerous solutions (e.g., rule-based solutions and machine learning-based methods) are proposed for malicious URL detect...Show More
Alert-Driven Attack Graph Generation Using S-PDFA
Publication Year: 2022,Page(s):731 - 746
Cited by: Papers (16)
Ideal cyber threat intelligence (CTI) includes insights into attacker strategies that are specific to a network under observation. Such CTI currently requires extensive expert input for obtaining, assessing, and correlating system vulnerabilities into a graphical representation, often referred to as an attack graph (AG). Instead of deriving AGs based on system vulnerabilities, this work advocates ...Show More
Phishing Email Detection Using Persuasion Cues
Publication Year: 2022,Page(s):747 - 756
Cited by: Papers (14)
Phishing is an attempt to acquire sensitive information from an unsuspecting victim by malicious means. Recent studies have shown that phishers often use persuasion techniques to get positive responses from the recipients. Still missing from this literature are studies assessing effectiveness of persuasion cues in phishing email detection. Specifically focusing on gain and loss persuasion cues, we...Show More
Explainable Intelligence-Driven Defense Mechanism Against Advanced Persistent Threats: A Joint Edge Game and AI Approach
Publication Year: 2022,Page(s):757 - 775
Cited by: Papers (22)
Advanced persistent threats (APT) have novel features such as long-term latency, precision strikes and uncertain strategies. APT poses severe threats to the resource-limited edge devices in advanced networks. Cyber threat intelligence (CTI) conducts data analysis on attack strategies by artificial intelligence (AI) and generates threat intelligence to optimize the detection model and guide defense...Show More
Open Source Intelligence for Malicious Behavior Discovery and Interpretation
Yi-Ting Huang;Chi Yu Lin;Ying-Ren Guo;Kai-Chieh Lo;Yeali S. Sun;Meng Chang Chen
Publication Year: 2022,Page(s):776 - 789
Cited by: Papers (14)
Cyber threats are one of the most pressing issues in the digital age. There has been a consensus on deploying a proactive defense to effectively detect and respond to adversary threats. The key to success is understanding the characteristics of malware, including their activities and manipulated resources on the target machines. The MITRE ATT&CK framework (ATT&CK), a popular source of open source ...Show More
An Explainable Multi-Modal Hierarchical Attention Model for Developing Phishing Threat Intelligence
Publication Year: 2022,Page(s):790 - 803
Cited by: Papers (16)
Phishing website attack, as one of the most persistent forms of cyber threats, evolves and remains a major cyber threat. Various detection methods (e.g., lookup systems, fraud cue-based methods) have been proposed to identify phishing websites. The limitations of lookup systems (e.g., failing to address newly created attacks) and the fraud cue-based methods (e.g., relying on feature engineering) m...Show More
GCI: A GPU-Based Transfer Learning Approach for Detecting Cheats of Computer Game
Md Shihabul Islam;Bo Dong;Swarup Chandra;Latifur Khan;Bhavani Thuraisingham
Publication Year: 2022,Page(s):804 - 816
Cited by: Papers (3)
Cheating in massive multiple online games (MMOGs) adversely affect the game’s popularity and reputation among its users. Therefore, game developers invest large amount of efforts to detect and prevent cheats that provide an unfair advantage to cheaters over other naive users during game play. Particularly, MMOG clients share data with the server during game play. Game developers leverage this data...Show More
Greyhound: Directed Greybox Wi-Fi Fuzzing
Publication Year: 2022,Page(s):817 - 834
Cited by: Papers (7)
The recent rise in complex Wi-Fi vulnerabilities, such as KRACK and Dragonslayer, indicates the critical need for effective Wi-Fi protocol testing tools. In this article, we conceptualize, design and implement a directed fuzzing methodology named Greyhound that automatically tests the Wi-Fi client implementations against vulnerabilities such as crashes or non-compliant behaviors. Leveraging a holi...Show More
Highly Efficient and Re-Executable Private Function Evaluation With Linear Complexity
Osman Biçer;Muhammed Ali Bingöl;Mehmet Sabir Kiraz;Albert Levi
Publication Year: 2022,Page(s):835 - 847
Cited by: Papers (9)
Private function evaluation aims to securely compute a function $f(x_1, \ldots, x_n)$f(x1,...,xn) without leaking any information other than what is revealed by the output, where $f$f is a private input of one of the parties (say $\mathsf {Party}_1$Party1) and $x_i$xi is a private input of the $i$ith party $\mathsf {Party}_i$Partyi. In this article, we propose a novel and secure two-party private ...Show More
E3X: Encrypt-Everything-Everywhere ISA eXtensions for Private Computation
Eduardo Chielle;Nektarios Georgios Tsoutsos;Oleg Mazonka;Michail Maniatakos
Publication Year: 2022,Page(s):848 - 861
Cited by: Papers (1)
The rapid increase of recent privacy attacks has significantly decreased trust on behalf of the users. A root cause to these problems is that modern computer architectures have always been designed for performance, while security protections are traditionally addressed reactively. Practical security protections, such as Intel SGX, rely on processing unencrypted data in the architectural state, whi...Show More
JSCSP: A Novel Policy-Based XSS Defense Mechanism for Browsers
Guangquan Xu;Xiaofei Xie;Shuhan Huang;Jun Zhang;Lei Pan;Wei Lou;Kaitai Liang
Publication Year: 2022,Page(s):862 - 878
Cited by: Papers (4)
To mitigate cross-site scripting attacks (XSS), the W3C group recommends web service providers to employ a computer security standard called Content Security Policy (CSP). However, less than 3.7 percent of real-world websites are equipped with CSP according to Google’s survey. The low scalability of CSP is incurred by the difficulty of deployment and non-compatibility for state-of-art browsers. To...Show More
Probabilistic Inference and Trustworthiness Evaluation of Associative Links Toward Malicious Attack Detection for Online Recommendations
Publication Year: 2022,Page(s):879 - 896
Cited by: Papers (4)
The increasing use of recommender systems as personalization recommendation services such as Amazon, TripAdvisor, and Yelp, has stressed the demand for secure and usable abnormality detection techniques, due to fundamental vulnerabilities of recommender systems and their openness. With the emergence of new attacks, how to defend diverse malicious attacks for online recommendations is a challenging...Show More
Adaptive Payload Distribution in Multiple Images Steganography Based on Image Texture Features
Publication Year: 2022,Page(s):897 - 911
Cited by: Papers (138)
With the coming era of cloud technology, cloud storage is an emerging technology to store massive digital images, which provides steganography a new fashion to embed secret information into massive images. Specifically, a resourceful steganographer could embed a set of secret information into multiple images adaptively, and share these images in cloud storage with the receiver, instead of traditio...Show More
CSI-Fuzz: Full-Speed Edge Tracing Using Coverage Sensitive Instrumentation
Xiaogang Zhu;Xiaotao Feng;Xiaozhu Meng;Sheng Wen;Seyit Camtepe;Yang Xiang;Kui Ren
Publication Year: 2022,Page(s):912 - 923
Cited by: Papers (10)
Coverage-guided fuzzing is one of the most effective solutions for vulnerability discovery. Among coverage-guided fuzzing, full-speed fuzzing, such as UnTracer, traces test cases only when they discover new coverage. Due to the high expense of tracing test cases, full-speed fuzzers improve the efficiency of fuzzing by tracing only coverage-increasing test cases. However, the existing full-speed fu...Show More
Malware in the SGX Supply Chain: Be Careful When Signing Enclaves!
Vlad Crăciun;Pascal Felber;Andrei Mogage;Emanuel Onica;Rafael Pires
Publication Year: 2022,Page(s):924 - 935
Cited by: Papers (4)
Malware attacks are a significant part of the new software security threats detected each year. Intel Software Guard Extensions (SGX) are a set of hardware instructions introduced by Intel in their recent lines of processors that are intended to provide a secure execution environment for user-developed applications. To our knowledge, there was no serious attempt yet to overcome the SGX protection ...Show More
IPANM: Incentive Public Auditing Scheme for Non-Manager Groups in Clouds
Longxia Huang;Junlong Zhou;Gongxuan Zhang;Jin Sun;Tongquan Wei;Shui Yu;Shiyan Hu
Publication Year: 2022,Page(s):936 - 952
Cited by: Papers (14)
Cloud storage services give users a great facility in data management such as data collection, storage and sharing, but also bring some potential security hazards. An utmost importance is how to ensure the integrity of data files stored in the cloud, particular for user groups without trusted managers. Existing literature focuses on integrity checking for groups with managers who have lots of perm...Show More
Defending Against Adversarial Attack Towards Deep Neural Networks Via Collaborative Multi-Task Training
Publication Year: 2022,Page(s):953 - 965
Cited by: Papers (16)
Deep neural networks (DNNs) are known to be vulnerable to adversarial examples which contain human-imperceptible perturbations. A series of defending methods, either proactive defence or reactive defence, have been proposed in the recent years. However, most of the methods can only handle specific attacks. For example, proactive defending methods are invalid against grey-box or white-box attacks, ...Show More
Remove Minimum (RM): An Error-Tolerant Scheme for Cardinality Estimate by HyperLogLog
Pedro Reviriego;Jorge Martínez;Ori Rottenstreich;Shanshan Liu;Fabrizio Lombardi
Publication Year: 2022,Page(s):966 - 977
Cited by: Papers (3)
Estimating the number of distinct elements is required in many computing applications. For example, we may want to estimate the number of unique users accessing a service, or the number of different words in a text. This problem is known as count distinct or cardinality estimate and has been widely studied. An accurate naïve approach is to keep a list of distinct elements and for each upcoming one...Show More
Secret Sharing Based Reversible Data Hiding in Encrypted Images With Multiple Data-Hiders
Publication Year: 2022,Page(s):978 - 991
Cited by: Papers (34)
The existing models of reversible data hiding in encrypted images (RDH-EI) are based on single data-hider, where the original image cannot be reconstructed when the data-hider is damaged. To address this issue, this article proposes a novel model with multiple data-hiders for RDH-EI based on secret sharing. It divides the original image into multiple different encrypted images with the same size o...Show More
Reversible Data Hiding in Encrypted Images Based on Pixel Prediction and Bit-Plane Compression
Publication Year: 2022,Page(s):992 - 1002
Cited by: Papers (39)
Reversible data hiding in encrypted images (RDHEI) receives growing attention because it protects the content of the original image while the embedded data can be accurately extracted and the original image can be reconstructed losslessly. To make full use of the correlation of the adjacent pixels, this article proposes an RDHEI scheme based on pixel prediction and bit-plane compression. First, th...Show More
How to Democratise and Protect AI: Fair and Differentially Private Decentralised Deep Learning
Lingjuan Lyu;Yitong Li;Karthik Nandakumar;Jiangshan Yu;Xingjun Ma
Publication Year: 2022,Page(s):1003 - 1017
Cited by: Papers (28)
This article first considers the research problem of fairness in collaborative deep learning, while ensuring privacy. A novel reputation system is proposed through digital tokens and local credibility to ensure fairness, in combination with differential privacy to guarantee privacy. In particular, we build a fair and differentially private decentralised deep learning framework called FDPDDL, which...Show More
Factor of Security (FoS): Quantifying the Security Effectiveness of Redundant Smart Grid Subsystems
Onur Duman;Mengyuan Zhang;Lingyu Wang;Mourad Debbabi;Ribal F. Atallah;Bernard Lebel
Publication Year: 2022,Page(s):1018 - 1035
Cited by: Papers (8)
According to International Electrotechnical Commission (IEC) 61850-90-4, most smart grid substations are designed with redundancy in order to improve their availability in case of failures. Redundancy usually takes the form of having multiple subsystems with identical functionality based on the assumption that failures in one subsystem are isolated from other subsystems. However, this is not neces...Show More
Dual Access Control for Cloud-Based Data Storage and Sharing
Jianting Ning;Xinyi Huang;Willy Susilo;Kaitai Liang;Ximeng Liu;Yinghui Zhang
Publication Year: 2022,Page(s):1036 - 1048
Cited by: Papers (43)
Cloud-based data storage service has drawn increasing interests from both academic and industry in the recent years due to its efficient and low cost management. Since it provides services in an open network, it is urgent for service providers to make use of secure data storage and sharing mechanism to ensure data confidentiality and service user privacy. To protect sensitive data from being compr...Show More
Phoenix: Towards Ultra-Low Overhead, Recoverable, and Persistently Secure NVM
Publication Year: 2022,Page(s):1049 - 1063
Cited by: Papers (16)
Emerging Non-Volatile Memories (NVMs) bring a unique challenge to the security community, namely persistent security. As NVM-based memories are expected to restore their data after recovery, the security metadata must be recovered as well. However, persisting all affected security metadata on each memory write would significantly degrade performance and exacerbate the write endurance problem. On t...Show More
Match in My Way: Fine-Grained Bilateral Access Control for Secure Cloud-Fog Computing
Shengmin Xu;Jianting Ning;Yingjiu Li;Yinghui Zhang;Guowen Xu;Xinyi Huang;Robert H. Deng
Publication Year: 2022,Page(s):1064 - 1077
Cited by: Papers (64)
Cloud-fog computing is a novel paradigm to extend the functionality of cloud computing to provide a variety of on-demand data services via the edge network. Many cryptographic tools have been introduced to preserve data confidentiality against the untrustworthy network and cloud servers. However, how to efficiently identify and retrieve useful data from a large number of ciphertexts without a cost...Show More
Contact Information
Contact Information
IEEE Account
Purchase Details
Profile Information
Need Help?
- US & Canada: +1 800 678 4333
- Worldwide: +1 732 981 0060
- Contact & Support
- About IEEE Xplore
- Contact Us
- Help
- Accessibility
- Terms of Use
- Nondiscrimination Policy
- Sitemap
- Privacy & Opting Out of Cookies
A not-for-profit organization, IEEE is the world's largest technical professional organization dedicated to advancing technology for the benefit of humanity.
© Copyright 2025 IEEE - All rights reserved. Use of this web site signifies your agreement to the terms and conditions.