jehanweerasuriya/uni-ai-dataset huggingface dataset:
A survey: Typical security issues of software-defined networking
Authors: Yifan Liu, Bo Zhao, Pengyuan Zhao, Peiru Fan, Hui Liu
Published in: China Communications (2019-07-19)

Software-Defined Networking (SDN) has been a hot topic for future network development, which implements the different layers of control plane and data plane respectively. Despite providing high openness and programmability, the three-layer two-interface architecture of SDN changes the traditional network and increases the network attack nodes, which results in new security issues. In this paper, we firstly introduced the background, architecture and working process of SDN. Secondly, we summarized and analyzed the typical security issues from north to south: application layer, northbound interface, control layer, southbound interface and data layer. Another contribution is to review and analyze the existing solutions and latest research progress of each layer, mainly including: authorized authentication module, application isolation, DoS/DDoS defense, multi-controller deployment and flow rule consistency detection. Finally, a conclusion about the future works of SDN security and an idealized global security architecture is proposed.
Properties for Security Measures of Software Products
Authors: Yanguo Michael Liu
Published in:  (2007-01-01)

A large number of attacks on computing systems succeed because of the existence of software flaws (e.g. buffer overflow, race conditions etc.) that could be fixed through a careful design process. An effective way of improving the quality of software products consists of using metrics to guide the development process. The field of software security metrics however is still in infancy in contrast with the area of traditional software metrics such as reliability metrics for which several key results have been obtained so far. We identify in this paper a number of internal software attributes that could be related to a variety of security qualities. Since theoretical validation is an important step in the development of any metrics program, we focus in this paper on studying the measurement properties associated with these internal attributes. The properties, based on popular security design principles in use in security engineering processes, can be used to guide the search of software security metrics. We study the feasibility of our theoretical framework by presenting case studies based on metrics derived from existing security measurement frameworks, namely the attack surface metrics system and the privilege graph paradigm.
Modelling internet security software usage among undergraduate students
Authors: Ali Vafaei‐Zadeh, T. Ramayah, Wai Peng Wong, Haniruzila Hanifah
Published in: VINE Journal of Information and Knowledge Management Systems (2017-12-19)

Purpose The aim of this research is to analyse the impact of relative advantage, compatibility, ease of use, visibility, voluntariness, image, result demonstrability and trialability on intention to use internet security software using a model developed based on perceived characteristics of innovation by Moore and Benbasat (1991) among undergraduate students.
Intent-Driven Security Policy Management for Software-Defined Systems
Authors: Ankur Chowdhary, Abdulhakim Sabur, Neha Vadnere, Dijiang Huang
Published in: IEEE Transactions on Network and Service Management (2022-06-16)

Different network controllers are utilized in a multi-domain software-defined systems (SDx) to manage the networking resources. However, these controllers operate using a different high-level language (intent). Thus, the admin needs to perform cross-layer translation from the user requirements to the underlying network controller format, increasing human-in-the-loop overhead. There are two primary security and management challenges involved in managing multi-domain controllers. The first challenge is how to design an SDN controller language that can effectively convert human-specified networking policies at the control plane into the network flow rules level at the data plane. The second challenge is how to reduce the complexity of network flow rules conflict checking at the data plane. To address these challenges, we present a new intent-based security policy enforcement solution called INTPOL. First, INTPOL provides a unified intent rules that abstracts the network admin from the underlying network controller’s format. Second, INTPOL develops a networking service solution to use a bounded formal model for network service compliance checking that significantly reduces the complexity of flow rules conflicts checking at the data plane level. Finally, INTPOL is expendable from a single SDN domain to multiple SDN domains and hybrid networks by applying network service function chaining (SFC) for inter-domain policy management.
Survey on Security Measures of Software Requirement Engineering
Authors: R. Saranya
Published in: International Journal of Computer Applications (2014-03-26)

Software engineering concerns with wide use of engineering principles to achieve cost-effective software with potentiality to function on real machines. Requirement engineering in software development is more crucial. Everyone agrees that security is difficult. The requirements engineering principles are framed based on an idea that would engage the community overcoming complex problems. Security is about the prevention of several difficulties due to the presence of attackers behaving malicious activities. Software security is incredible due to the intrinsically complex task and the problem happens because of three main reasons such as networks are everywhere, systems are easily extensible and system complexity is rising.
Critique of Software Security
Authors: Geoff Cox, Martin Knahl
Published in: Research Open (London South Bank University) (2011-01-01)

Security is predicated on protection from perceived violence or terrorism, but who will protect us from security? Behind this statement is the fact that those in power regularly commit acts of real and symbolic violence and this goes unpunished – indeed it is legitimated so effectively that we think we are protected by these acts of violence against us in the form of security. This essay asks how the inherent violence encoded into software might be understood in this way. The arguement is that – rather than simply assuming that it protects the user from insecurity - security software itself constitutes violence. These are some of the conditions that produce states of emergency and that in turn create\ninsecurities
Accelerating Meta Data Checks for Software Correctness and Security
Authors: Weihaw Chuang, Satish Narayanasamy, Brad Calder
Published in:  (2007-01-01)

As high GHZ processors become prevalent, adding hardware support to ensure the correctness and security of programs will be just as important, for the average user, as further increases in processor performance. The goal of our research is to focus on developing compiler and hardware support for efficiently performing software checks that can be left on all of the time, even in production code releases, to provide a significant increase in the correctness and security of software. In this paper we focus on the performance of checking the correctness of pointers. We focus on pointers since a significant amount of bugs and security issues (buffer overflows) in programs are due to memory bugs resulting from incorrect usage of pointers. To determine if a pointer reference is correct many techniques require additional information to be kept track of called meta-data. The meta-data is checked when a pointer is dereferenced to verify some property about the pointer or the object. The first part of our paper focuses on where to efficiently keep track of this meta-data information and the overheads for performing safety checks like bounds checking and dangling pointer checks. We then focus on architecture extensions to reduce the overhead of these meta-data checks. We examine these optimizations in the presence of two meta-data checking applications – bounds checking and dangling pointer checks and show that we can reduce the overhead of these pointer checks from 148 % down to 21 % on average. 1.
Query based k-DRM for Software Security
Authors: Rajasekaran Senthilkumar, Arunkumar Thangavelu, P. Dhavachelvan, G. Gunasekaran
Published in: Indian Journal of Science and Technology (2015-08-07)

Objectives: A weakness in software development is providing security against piracy. The objective of the paper is to provide the security using the k-DRM which will reduce the rate of piracy. Methods: Advanced Rights Management (DRM) frameworks attempt to ensure copyrights and computerized substance by restricting get to by clients to substance, this paper proposes a framework for administration of advanced rights. It backs the implementation of an extensive variety of confinements on getting to secured records and progressed advanced right administration framework to ensure proprietorships. The target application is an application which the DRM structure supports to be able to get to access with the predefined controls from its holder. Findings: Current DRM structures debilitation clients by persuading them to interface with online permit/content servers to get to secured substance and impairment programming makers to change their virtual things use and record sort structures. Tragically, the current DRM structures have different deficiencies that antagonistically affect holder and client rights like permit/substance server reliance, information structures reliance, information yield bolster, and ensuring information having a place in the life cycle. This paper familiarizes another structure with pacify these deficiencies, by utilizing fitting programming understanding, low level framework programming, information security, and encryption reckonings. The Assessments of the proposed framework is showed that, dissimilar to current DRM architectures and executions, DRM fulfills holder rights and additionally client rights by permit server independency, information yield approval, information lifecycle insurance, machine reliance, virtual machine location, capacity to apply DRM without changes in target programming codes and information structures. Application: The framework fulfills manager rights and besides client rights by permit server independency, information yield respect, information lifecycle affirmation, machine reliance, virtual machine territory, capacity to apply DRM without changes in target programming codes and information structure.Keywords: DRM, k-DRM, Piracy, Query Generator, Query Classification Query Randomizer
A Survey of Deep Learning Methods for Cyber Security
Authors: Daniel S. Berman, Anna L. Buczak, Jeffrey S. Chavis, Cherita Corbett
Published in: Information (2019-04-02)

This survey paper describes a literature review of deep learning (DL) methods for cyber security applications. A short tutorial-style description of each DL method is provided, including deep autoencoders, restricted Boltzmann machines, recurrent neural networks, generative adversarial networks, and several others. Then we discuss how each of the DL methods is used for security applications. We cover a broad array of attack types including malware, spam, insider threats, network intrusions, false data injection, and malicious domain names used by botnets.
Exploring Software Security Test Generation Techniques: Challenges and Opportunities
Authors: Mamdouh Alenezi, Mohammed Akour, Hamid Abdul Basit
Published in: International Journal of Education and Information Technologies (2021-06-03)

Ensuring the security of the software has raised concerns from the research community which triggered numerous approaches that tend to eliminate it. The process of ensuring the security of software includes the introduction of processes in the Software Development Life Cycle where one of them is testing after the software is developed. Manually testing software for security is a labor-intensive task. Therefore, it is required to automate the process of testing by generating test cases by automated techniques. In this paper, we review various software security test case generation approaches and techniques. We try to explore and classify the most eminent techniques for test case generation. The techniques are summarized and presented briefly to covers all researches work that has been done in the targeted classification. Moreover, this paper aims to depict the sound of security in the current state of the art of test case generation. The findings are summarized and discussed where the opportunities and challenges are revealed narratively. Although the paper intends to provide a comprehensive view of the research in test case generation, there was a noticeable lack in the test case generation from the security perspectives
A survey on security analysis of machine learning-oriented hardware and software intellectual property
Authors: Ashraful Tauhid, Lei Xu, Md. Mostafizur Rahman, Emmett Tomai
Published in: High-Confidence Computing (2023-02-27)

Intellectual Property (IP) includes ideas, innovations, methodologies, works of authorship (viz., literary and artistic works), emblems, brands, images, etc. This property is intangible since it is pertinent to the human intellect. Therefore, IP entities are indisputably vulnerable to infringements and modifications without the owner’s consent. IP protection regulations have been deployed and are still in practice, including patents, copyrights, contracts, trademarks, trade secrets, etc., to address these challenges. Unfortunately, these protections are insufficient to keep IP entities from being changed or stolen without permission. As for this, some IPs require hardware IP protection mechanisms, and others require software IP protection techniques. To secure these IPs, researchers have explored the domain of Intellectual Property Protection (IPP) using different approaches. In this paper, we discuss the existing IP rights and concurrent breakthroughs in the field of IPP research; provide discussions on hardware IP and software IP attacks and defense techniques; summarize different applications of IP protection; and lastly, identify the challenges and future research prospects in hardware and software IP security.
Software Defined Security Service Provisioning Framework for Internet of Things
Authors: Faraz Idris, Sufian Hameed
Published in: International Journal of Advanced Computer Science and Applications (2016-01-01)

Programmable management framework have paved the way for managing devices in the network. Lately, emerging paradigm of Software Defined Networking (SDN) have rev-olutionized programmable networks. Designers of networking applications i.e. Internet of things (IoT) have started investigating potentials of SDN paradigm in improving network management. IoT envision interconnecting various embedded devices surround-ing our environment with IP to enable internet connectivity. Unlike traditional network architectures, IoT are characterized by constraint in resources and heterogeneous inter connectivity of wireless and wired medium. Therefore, unique challenges for managing IoT are raised which are discussed in this paper. Ubiquity of IoT have raised unique security challenges in IoT which is one of the aspect of management framework for IoT. In this paper, security threats and requirements are summarized in IoT extracted from the state of the art efforts in investigating security challenges of IoT. Also, SDN based security service provisioning framework for IoT is proposed.
A two level security mechanism to detect a DDoS flooding attack in software-defined networks using entropy-based and C4.5 technique
Authors: K. Muthamil Sudar, P. Deepalakshmi
Published in: Journal of High Speed Networks (2020-03-10)

Software-Defined Network (SDN) has recently emerged as a network paradigm due to its high network programmability and flexibility which can overcome the problem in traditional networks by decoupling the control plane from the data plane. The data plane will forward the packets as per the decision m ade by the controller in the control plane. This centralized control will help to provide the abstract view of the entire network infrastructure. Since the controller is a core part of SDN, it is more prone for attacks and turns as a major threat to the entire network. Distributed Denial of Service (DDoS) attack can then overload the SDN controller and switch flow table which leads to a performance degrade of the network. To address this problem, we have deployed two level security mechanisms. In level one, an entropy-based mechanism is proposed to detect the DDoS flooding attack in the early stage by temporarily holding the particular flow. In level two, a machine learning-based C4.5 technique is proposed to detect the attack by analysing additional features and send a permanent alert to drop the packets. The results are analysed with K-fold validation technique in terms of sensitivity, specificity and accuracy.
Machine Learning and Deep Learning Methods for Intrusion Detection Systems: A Survey
Authors: Hongyu Liu, Bo Lang
Published in: Applied Sciences (2019-10-17)

Networks play important roles in modern life, and cyber security has become a vital research area. An intrusion detection system (IDS) which is an important cyber security technique, monitors the state of software and hardware running in the network. Despite decades of development, existing IDSs still face challenges in improving the detection accuracy, reducing the false alarm rate and detecting unknown attacks. To solve the above problems, many researchers have focused on developing IDSs that capitalize on machine learning methods. Machine learning methods can automatically discover the essential differences between normal data and abnormal data with high accuracy. In addition, machine learning methods have strong generalizability, so they are also able to detect unknown attacks. Deep learning is a branch of machine learning, whose performance is remarkable and has become a research hotspot. This survey proposes a taxonomy of IDS that takes data objects as the main dimension to classify and summarize machine learning-based and deep learning-based IDS literature. We believe that this type of taxonomy framework is fit for cyber security researchers. The survey first clarifies the concept and taxonomy of IDSs. Then, the machine learning algorithms frequently used in IDSs, metrics, and benchmark datasets are introduced. Next, combined with the representative literature, we take the proposed taxonomic system as a baseline and explain how to solve key IDS issues with machine learning and deep learning techniques. Finally, challenges and future developments are discussed by reviewing recent representative studies.
Software Security Modeling and Checking
Authors: Zheng Qiu-mei
Published in: Jisuanji fangzhen (2007-01-01)

In order to effectively express and check security drawbacks and hazards hidden in software,a modeling and checking technique of software security,security modeling and checking by cohesion,is presented.A multi-model composition is applied to combine abstract models and application models with data models to describe security hazards.In addition,extraction of modeling information from different layers is in with automata and construction of models to fabricate models of security hazards.Finally,in collaboration with application-based slicing,security drawbacks and hazards hidden in software are checked.The technique of modeling and checking can express various security hazards.Therefore,expressivity,reusability and adaptability of modeling are improved.Meanwhile complexity of checking and analyzing is reduced.
SDSA: A framework of a software-defined security architecture
Authors: Liu Yanbing, Xingyu Lu, Jian Yi, Yunpeng Xiao
Published in: China Communications (2016-01-01)

The fact that the security facilities within a system are closely coupled and the security facilities between systems are unconnected results in an isolated protection structure for systems, and gives rise to a serious challenge to system security integrations and system controls. Also, the need for diversified services and flexible extensions of network security asks for more considerations and contributions from the perspective of software engineering in the process of designing and constructing security systems. Based on the essence of the virtualization technique and the idea of software-defined networks, we in this paper propose a novel software-defined security architecture for systems. By abstracting the traditional security facilities and techniques, the proposed security architecture provides a new, simple, effective, and programmable framework in which security operations and security controls can be decoupled, and thereby reduces the software module sizes, decreases the intensity of software developments, and improves the security extensibility of systems.
A Survey: Agent-based Software Technology Under the Eyes of Cyber Security, Security Controls, Attacks and Challenges
Authors: Bandar Alluhaybi, Mohamad Shady, Ahmed Alzhrani, Vijey Thayananthan
Published in: International Journal of Advanced Computer Science and Applications (2019-01-01)

Recently, agent-based software technology has received wide attention by the research community due to its valuable benefits, such as reducing the load on networks and providing an efficient solution for the transmission challenge problem. However, the major concern in building agent-based systems is related to the security of agents. In this paper, we explore the techniques used to build controls that guarantee both the protection of agents against malicious destination machines and the protection of destination machines against malicious agents. In addition, statistical-based analyses are employed to evaluate the level of maturity of the protection techniques to preserve the protection goals (the code and data, state, and itinerary of the agent), with and without the threat of attacks. Challenges regarding the security of agents are presented and highlighted by seven research questions related to satisfying cyber security requirements, protecting the visiting agent and the visited host machine from each other, providing robustness against advanced attacks that target protection goals, quantifying the security in agent-based systems, and providing features of self-protection and self-communication to the agent itself.