sadat2307/MSciNLI huggingface dataset:
Domain: Security and privacy
Sentence 1: The comparison is shown in Table 3.
Sentence 2: based on the unique device key and the TRS, the secure OS builds the root of trust for both secure services and the rich OS: the seal/unseal prim­itives providing implicit attestation mechanism and secure storage for secure services in the TEE, and the TPM ser­vice which provides rich trusted computing functionalities for the normal world.
Relationship: neutral
Domain: Security and privacy
Sentence 1: We also embed watermark directly in signal domain but not necessarily in LSB bit-plane; it can be embedded in multiple contiguous bit-planes which make it more resilient to estimation attacks and increases it data-carrying capacity.
Sentence 2: in the past few years, many new techniques based on encryption have been proposed including end-to-end authentication along the path towards the aggregator node or hierarchical peer-to-peer authentication with complicated dynamic key management schemes [10].
Relationship: neutral
Domain: Security and privacy
Sentence 1: Generally, image-based authentication can be divided into three categories based on their input methods: namely click­based graphical passwords, choice-based graphical passwords and draw-based graphical passwords.
Sentence 2: in the step of image selection, users are required to choose images in a story-sequence, while in the step of se­cret drawing, users are required to click-draw their secrets by using a series of clicks.
Relationship: neutral
Domain: Security and privacy
Sentence 1: Results of experimental studies Scrambling Kñò pW yµ Classical 0,81 0,132 0,211 Virtual 0,89 0,094 0,164 Adaptive virtual 0,94 0,027 0,081 Table 1 shows that the value of K is exactly consistent with ñò the generally accepted parameters, such as legibility W and p redundancy µ , as the results of evaluating the effectiveness of y the methods of scrambling.
Sentence 2: the situation is complicated by the fact that the natural unsteadiness of initial speech signal can not fully assess the effectiveness of the protection of audio information, as well as the importance of Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page.
Relationship: neutral
Domain: Security and privacy
Sentence 1: First, one would need to remove relatively few images to skew the statistics of the classi.er towards randomness, so doing this could have little e.ect on high success rate of humans found in Section 3.3.
Sentence 2: 2.2 Database To generate images for the captcha, we randomly select models from a large database of models, using randomly chosen viewing parameters.
Relationship: neutral
Domain: Security and privacy
Sentence 1: Thus, these systems operate under the assumption that derived data will be textually similar to a corpus of strings being protected.1 These approaches have the bene.t of detecting violations indepen­dent of how they were generated (thus even data manually entered from paper documents can be detected).
Sentence 2: our aim is to show the general applicability of our approach rather than to demonstrate the best method for implementing it.
Relationship: neutral
Domain: Security and privacy
Sentence 1: Secondly,securityrequirementsoftencanonlybemetthroughintegrationwithexistingsecurityservices.Oneillustrativeapplica­tionisashoppingapplication.AnauthorizationpolicygoverningthepurchaseactionwouldindicatethatthecreditcardpurchasemustbeacceptedbytheSecureElectronicTransactions(SET)pro­tocol.Becauseitisunlikelythatanygeneralpurposeinfrastruc­turewillimplementSET,itmustbeimplementedwithinthecon­dition(orapplication).Becausemanysuchdependenciesexistinrealapplications,attemptingtoconstructasingleframeworkthataddressesallconditionsisnotrealistic.
Sentence 2: 4.2 Instantiation Apolicyeditorisanapplicationusedtoissuepolicy[28].Sucheditorsareresponsibleforvalidatingthatthepolicyisconsistentwiththepolicyrepresentation,andisselfconsistent(e.g.,isen­forceable[15]).Forexample,considerthefollowingcalltothehasToken() includedaspartofalargerIsmenepolicy: hasToken(tigertoken, $cert) ApolicyeditormakinguseoftheACFwouldbeginbylookinguptheACDforhasToken() (de.nedinFigure7).TheACDindi­catesthethreeparametersareused.The.rstparameterisastringconstantde.nedbythepolicy.Thetigertoken stringful.llsthatde.nitionandtheparameterisacceptedasvalid.Thesecondpa­rameterismarkedasarun-timeattribute(i.e.,const= F ).Becausethesecondparameterismarkedasarun-time( $ -symbolsindicateattributereplacementinIsmene),thesecondparameterisaccepted.Onemightassumethatbecausede.nitionismissingthelastargu­mentthattheconditionwouldberejected.becausetheACDde.nesadefaultvalueforthelastparameter(i.e.,inthevalueelement),itisautomaticallyinserted.Becauseallparametersareconsistentwiththede.nition,theconditionisdeemedcorrect.
Relationship: neutral
Domain: Security and privacy
Sentence 1: In the .eld of disk benchmarking, Ganger [6] observed that interleaved workloads provided the most accurate approximation of recorded traces.
Sentence 2: states(M), the transition function   If Y = (M, L, next), we use Labels(Y) to denote Labels(M), States(Y) to denote States(M), and Queries(Y) to denote Queries(M).
Relationship: neutral
Domain: Security and privacy
Sentence 1: In this paper, we describe an e.cient method for detect­ing the replacement of access points (APs) by passive re­mote physical device .ngerprinting.
Sentence 2: the accuracy degradation is very slight: using only 50 training samples, on average the accuracy is as high as 80% for true positives and 10% for false positives.
Relationship: neutral
Domain: Security and privacy
Sentence 1: The Dom0 kernel may, in effect, access any page of physical memory, because it controls devices that may perform DMA from any address.
Sentence 2: vEE 08, March 5 7, 2008, Seattle, Washington, USA Copyright c &#38;#169; 2008 ACM 978-1-59593-796-4/08/03.
Relationship: neutral
Domain: Security and privacy
Sentence 1: ,.1Phase We now describe the executions .2Phaseand the and A1Phase adversary strategies A2tPhase t .
Sentence 2: so assume that there exists a two phase PSMT protocol with 0 <u = t wires in the bottom band and n =3t - u wires in the top band, tolerating At.Let .2Phase be an execu­tion of the two phase PSMT protocol where S sends mes­ sage m.Let A2Phase t be an adversarial strategy in .2Phase .
Relationship: neutral
Domain: Security and privacy
Sentence 1: Mockdroid [3] proposes modifying the Android OS so as to substitute private data with mock data such as constant values or null values when apps request it.
Sentence 2: in response to this an alternative dis­tribution channel has become popular -known as the Cydia Store -which also supports the distribution of apps that function outside of Apple s guidelines, for example those that use lower level capabilities than the public SDK o.ers in addition to OS tweaks and customizations.
Relationship: neutral
Domain: Security and privacy
Sentence 1: Checking the return address in a register avoids a potential time­of-check/time-of-use race if it were checked on the stack.
Sentence 2: the main source of overhead results from the change in representation described in Section 4.3: our V8-64 port uses the representation of small integers from V8-32, and therefore stores integers larger than 231 as heap objects.
Relationship: neutral
Domain: Security and privacy
Sentence 1: For ex­ample,VMProtect eliminates thebranch statements and moves the valueof the .agsregistertoothergeneralpurposeregistersforma­nipulation.
Sentence 2: categories andSubject Descriptors D.4.6[OperatingSystems]:SecurityandProtection InvasiveSoft­ware GeneralTerms Security  Keywords virtualization,deobfuscation, dynamic analysis 1.
Relationship: neutral
Domain: Security and privacy
Sentence 1: hile this example ismainly intended to clarify the proposals of the previous sec­tion, we also make some substantive suggestions for trust­but­verify implementations in general, particularly advocacyof role keys, carrier authority, and logging.
Sentence 2: thatsystem comprises a general framework for webpage access control, so expressible policies are potentially more compli­cated than those we propose for web services.
Relationship: neutral
Domain: Security and privacy
Sentence 1: [10] Z. Liu, J. Lee, J. Zeng, Y. Wen, Z. Lin, and W. Shi, Cpu transparent protection of os kernel and hypervisor integrity with programmable dram, in Proceedings of the 40th Annual International Symposium on Computer Architecture, ser.
Sentence 2: if we launch ATRA without .ushing the TLB (although the attack may not be e.ective), the performance degradation becomes negligible.
Relationship: neutral
Domain: Security and privacy
Sentence 1: THE PROPOSED PROTOCOL In this section, we present our new probabilistic SBD protocol (denoted as SBDp) based on the standard binary conversion algo­rithm.
Sentence 2: for 1024-bit key size (i.e., K = 1024), the proba­bility for SBDp to produce correct output in the .rst run is approxi­ - 100 2924 mately e 1.
Relationship: neutral
Domain: Security and privacy
Sentence 1: The speci.cation of the policy in a separate .le simpli.es the process of changing the policy even while the API function­alities are invoked (it is su.cient to reload the .le) without the need of re-compiling the code.
Sentence 2: third-party service providers (such as the operators in the Operations and Market domains) can ac­cess data according to the policies of consumers and the CDC, while constraining access to the data derived from their elaboration of smart metering data according to the contracts stipulated with users.
Relationship: neutral
Domain: Security and privacy
Sentence 1: As an example, if a program is found attempting to vi­olate a security setting, the user will not be prompted to permit the action: the action will simply be denied.
Sentence 2: the NAND .ash has a limited number of write/erase cycles before it ceases to function and requires replacement, meaning a piece of malicious code that wears down the chip can cause the laptop to be unusable until trained hardware intervention in this case, part replacement is performed.
Relationship: neutral
Domain: Security and privacy
Sentence 1: The data rates typical of current and emerging cellular (128 kbps -2 Mbps) and wireless LAN (2 Mbps -60 Mbps) technologies are indicated in the .gure.
Sentence 2: [29] D. W. Carman, P. S. Krus, and B. J. Matt, Constraints and approaches for distributed sensor network security, Tech.
Relationship: neutral
Domain: Security and privacy
Sentence 1: Presentation at CanSecWest, french article also published in the proceedings of SSTIC 2005 Vuln´erabilit´es applicatives li´ees `a la gestion des limites de m´emoire .
Sentence 2: it is often avoided on low cost embedded systems for the following reasons: .rst it is usually di.­cult to predict the worst case memory usage, which can quickly lead to memory exhaustion on these systems; sec­ond, memory fragmentation is a serious problem for archi­tectures without Memory Management Unit.
Relationship: neutral
Domain: Security and privacy
Sentence 1: This is analogous to what happens with related-key attacks (RKAs) and thus, as with the formal­ization ofRKA securityfrom[4],Halevi andKrawczyk[13] parameterize the advantage and de.nition of KDM secu­rity for tweakable blockciphers by a class F of functions.
Sentence 2: e.cient instantiations of tweakable blockciphers and re.nements to modes OCB and PMAC.
Relationship: neutral
Domain: Security and privacy
Sentence 1: Since large subsets of URL tokens are likely to re­appear in future URLs, and since the overlap is small, it is possible to detect phishing URLs by lexically an­alyzing previously seen phishing URLs as future phishing URLs are likely to re-use previously seen to­kens that appeared in older phishing URLs.
Sentence 2: the process is repeated until the Phishiness is calculated for each token in a given suspect URL.
Relationship: neutral
Domain: Security and privacy
Sentence 1: Our framework fails to encompass cheater detection or identi.cation [11, 34], where the adversary is capable of obstructing recovery but incapable of forcing the recov­ery of a bogus secret.
Sentence 2: tHEN IF (x= K[i] C[i]) THEN Hash[x] .H[i] ELSE IF (c,i)=(g1,g2) THEN Ki Ci .x; Yx .Y ; Yx[i] .Ki ; L.RecoverPSS (Yx) RETURN Hash [x] when (c,i) is equal to (g1,g2),adversary B2 records the candidate key as L.When A has terminated, adversary B2 re­turns Land halts.
Relationship: neutral
Domain: Security and privacy
Sentence 1: Our tool will retrieve relevant attack patterns of a certain threat categories, sorted from most relevant and useful to least relevant and useful.
Sentence 2: cIA STRIDE weight assignment (1 = Low, 2 = High) STRIDE CIA Weight table (WMot)  WC WI WA  S 2 1 1 T 1 2 1 R 1 2 1 I 2 1 1 D 1 1 2 E 2 1 1  4.4 Retrieving Relevant Attack Patterns Using Keywords We are also implementing a feature to allow users to search for relevant attack patterns using one or more keywords.
Relationship: neutral
Domain: Security and privacy
Sentence 1: Since .2J pg(i) =0, pg(i)is the optimal static importance-scanning strategy that mini­mize Y .
Sentence 2: (21) L N- 1 i=1 P P ` P ´2 m 2 m m Since pg(i)· 12 = pg(i) by Cauchy-Schwarz i=1 i=1 i=1 P m 2 1 (i) = Inequality, i=1 p g .
Relationship: neutral
Domain: Security and privacy
Sentence 1: With forward safety below we express that unless a is already authorized to c, authorizing b to c after a is authorized to b does not grant a authorization to c. From the standpoint of intuitive appeal, we see forward safety as the natural counterpart of forward avail­ability.
Sentence 2: , xk) is true, where we assume that p s arity is k. For example, in an authorization system that has the auth, dAuth and dUnauth pred­icates only, a state is a collection of auth(x, y), dAuth(x, y) and dUnauth(x, y) that are true.
Relationship: neutral
Domain: Security and privacy
Sentence 1: 3.2.2 EnhancementstoHigh-orderMimicFunction The high-order mimic function is a powerful evasion technique against statistical anomaly detection, because it ensures the trans­formation of any data into legitimate symbol sequences with ap­ 1In theory, the constant RM can be very large.
Sentence 2: in the byte frequency distribution test and entropy test, the mimicry output produced by the mimi­morphic engine falls within the ranges of normal executable .les.
Relationship: neutral
Domain: Security and privacy
Sentence 1: The proposed metric relies on RBAC enti­ties,userattributes(e.g.which organizationalunitthey be­long to),permissions(e.g.frequencyofuse) and otherhigh level information (e.g.
Sentence 2: algorithm 1 provides the following steps: Lines 3 6: Among the users assigned to level-(k -1) roles, those assigned to level k children are removed from UA, thus updating the actual support.
Relationship: neutral
Domain: Security and privacy
Sentence 1: Contrary to popular belief, SVG .les should thus not be considered to be plain images or animations, and it is necessary to treat them as fully functional, one-.le web applications capable of potentially containing HTML, Java-Script, Flash and other interactive code structures.
Sentence 2: with the integration of SVG capabilities into modern browsers, this strict parsing approach got amalgamated with their more tolerant way of processing HTML, CSS, JavaScript and the like.
Relationship: neutral
Domain: Security and privacy
Sentence 1: Because the proposed framework requires additional informa­tion to be transmitted by the Owner to both Publishers and users, we store all such information into a directory server (which can also be shared among different Owners belonging to the same do­main or to federated ones), to limit the overhead that these oper­ations require.
Sentence 2: by using the information in qt and r, u can verify that he/she receives all the portions of Vd(u)answering query q.
Relationship: neutral
Domain: Security and privacy
Sentence 1: Without the added rules, the answer of authorization (john, file2, read) and.authorization(john, file2, read) are both no according to the semantics of GCLP [5], which actually means the answer is unknown.
Sentence 2: based on GCLP and DLP, our language can specify access control policies supporting positive and negative authorization, privilege delegation and revocation, prioritized authorization conflict handling and mutual authorization exclusions.
Relationship: neutral
Domain: Security and privacy
Sentence 1: CONSTRAINTS AND COMBINATIONS 4.1 Constraint Formulation We now describe the method used to extract constraints of the various types, out of a given key-similarities matrix Mi,j obtained in previous stages of the attack.
Sentence 2: if rank(i, j)= N and rank(j, i)= N then they are very dis-similar and we infer a DIST constraint Ki Kj .
Relationship: neutral
Domain: Security and privacy
Sentence 1: 2.3.1 Partial private key extraction The ancestor Et-1 (including the PKG) of each entity Et at the level t = 1, extracts the partial private key Dt using his partial private key Dt-1 (previously acquired from his corresponding ancestor) and his secret value xt-1 as follows: Qt = H1(ID1 ID2 ... IDt) t X Dt = Dt-1 + xt-1Qt = xi-1Qi (1) i=1 Then, Et-1 sends to each entity Et its partial private key Dt over a secure and authenticated channel.
Sentence 2: [3] C. Gentry and A. Silverberg.
Relationship: neutral
Domain: Security and privacy
Sentence 1: The desire to increase the rigor of large­scale computer and network security studies extends to all three of these steps: an improved understanding of the sit­uation leads to better hypotheses, improved collection and sharing of data increases the scope of the studies that can be done, and improved analysis techniques lead to deeper insights and more useful results.
Sentence 2: new blocks can be dynamically added to nodes, as well, though we rely on access control, trusted peers and signed code to secure the implementation of the blocks.
Relationship: neutral
Domain: Security and privacy
Sentence 1: When the Algorithm stops set EXP s is equal to {Enc(tg1,K1)/Enc(tg2,K2)/Enc(tg3,K1)[/Sec- Info Node-Info[@Name=Enc(Att,K1)]/Query-Info/id[@Value= PI(IT) ]]; Enc(tg1,K1)/Enc(tg2,K2)/Enc(tg3,K3)[/Sec-Info//Node- Info[@Name= Enc(Att,K3)]/Query-Info/id[@Value= PI(IT) ]].
Sentence 2: then, 1) P is not able to read information in P S. 2) there does not exist a node n in d such that n .
Relationship: neutral
Domain: Security and privacy
Sentence 1: : Pr(m|attack) · Pr(attack) Pr(attack|m) = (1) Pr(m) Observe that Pr(m) can be desregarded because we only care about the ratio of Pr(attack|m) and Pr(nonattack|m).
Sentence 2: they can estimated from the training data, locally to each node.
Relationship: neutral
Domain: Security and privacy
Sentence 1: To preven­t such code injection attacks, researchers have proposed a large number of techniques, such as vulnerability-based sig­nature (e.g., [1] ), exploit-based signature [2, 3], and non­executable memory (e.g, PAX [4]); and they all rely on the fact that malicious executable code will be received from outside.
Sentence 2: based on this fact, several defense mechanisms have been proposed to detect the ROP malicious code.
Relationship: neutral
Domain: Security and privacy
Sentence 1: The number of automata in M2 is 37% smaller than the number of automata in M. M3 has 7 permissions automata, 5 ob­jects automata, and the observer automata, thereby in total 13 automata.
Sentence 2: syntactically, timed-automaton T A is a 6-tuple < L, l0 , C, A, E, I > where: L is a set of nodes, l0 is the initial node, C is a set of clock variables, A is a set of synchronized ac­tions, E is a .nite set of directed edges depicting transitions between nodes.
Relationship: neutral
Domain: Security and privacy
Sentence 1: [19] D.J.Pearce,P.H.J.Kelly,andC.Hankin.Ef.cient Field-SensitivePointerAnalysisforC.In Proceedings of the 5thACMSIGPLAN-SIGSOFTWorkshop onProgram AnalysisforSoftwareTools and Engineering(PASTE),2004.
Sentence 2: an edge from pointer x to pointer y means that any object pointers that can be derived from y are also derivablefromx.
Relationship: neutral
Domain: Security and privacy
Sentence 1: For example, depending on the personality we want to as­sume, we can easily con.gure the value of HTTP headers that are transmitted with each request (e.g., the User-Agent header), the settings of JavaScript attributes (such as the navigator object and its properties), and the handling of certain HTML and Java-Script features and capabilities that are implemented differently in different browsers (e.g., event handlers are registered using the addEventListener() function in Firefox and the attach-Event() function in Internet Explorer).
Sentence 2: without the contribution of useful features, the anomaly score of seven samples would be below the threshold (i.e., they would be false negatives).
Relationship: neutral
Domain: Security and privacy
Sentence 1: For =Xi N (a, d2), it is well-known that rms(f ) 1.253 · d/ n. We have cal­culated that, for k 8 n, rms * (f , k) = a · rms(f ) where = a 1 + 0.101k2 .
Sentence 2: note that the median corresponds to behave as follows: x(pn) -N a + zp d = , n p(1 - p)d2 n <(zp)2 as n -=, -1 = the case p = 1/2.
Relationship: neutral
Domain: Security and privacy
Sentence 1: AmazonIA: When Elasticity Snaps Back Sven Bugiel*, Stefan Nürnberger*, Thomas Pöppelmann , Ahmad-Reza Sadeghi* , Thomas Schneider* *System Security Lab / CASED, Fraunhofer SIT, Technische Universität Darmstadt, Germany Darmstadt, Germany ABSTRACT Cloud Computing is an emerging technology promising new business opportunities and easy deployment of web services.
Sentence 2: our attacks can be used to completely compromise several real web services of­fered by companies (including IT-security companies), e.g., for website statistics/user tracking, two-factor authentica­tion, or price comparison.
Relationship: neutral
Domain: Security and privacy
Sentence 1: Because the number of computational par­ties is independent of the number of input owners and output re­cipients, in cases of both single client computation outsourcing and secure collaborative computation it is possible to .nd three inde­pendent computational parties which are unlikely to collude with each other.
Sentence 2: including smcoutput(x,1) for private x will instruct the compiled program to output shares of x into a .le which at the end of the computation is sent to output party 1.
Relationship: neutral
Domain: Security and privacy
Sentence 1: Unfortunately, none of the available deniable .le systems pro­vide a solution for the scenario proposed earlier in this section, where an adversary obtains access to a laptop and also records com­munication.
Sentence 2: dropbox is a very powerful tool for collab­oration: users do not suffer delays introduced by the network, since they always access a local copy; updates are sent and received in background and users are quickly noti.ed when the content of a shared .le changes.
Relationship: neutral
Domain: Security and privacy
Sentence 1: [18] S. Sumpf, J. Brakensiek, Device Driver Isolation within Vir­tualized Embedded Platforms, In Proceedings of the 6th An­nual IEEE Consumer Communications &#38; Networking Confe­rence, USA, January 2009.
Sentence 2: [8] G. Coker, Xen Security Modules (XSM), 3rd Xen Summit, , IBM T.J. Watson, 2006.
Relationship: neutral
Domain: Security and privacy
Sentence 1: We found that exedit distance provided a useful balance between these two approaches: it is general enough that it ignores instance­speci.c variations due to constants and other non-executable bytes, but detailed enough that it can capture the subtle functional vari­ations.
Sentence 2: this paper develops and demonstrates a methodology for auto­matically identifying and quantifying shellcode similarity, and for using this data to create a shellcode phylogeny for a given vulner­ability.
Relationship: neutral