No abstract

No abstract

This paper relates to mobile malware detection for prevention against financial charge caused by the malicious behavior using SMS. In this paper, we propose the method that conducts malicious behavior monitoring and various analysis techniques to detect the attack. This method includes malware installation check, SMS sending and receiving analysis, and signature-based pattern matching. Therefore, we can effectively respond against SMS mobile malware attacks.

Batch verification is a method to verify multiple digital signatures at a batch in time less than total individual verification time. Batch verification for an identity‐based signature scheme (IBS) is attractive because a short public identity such as an e‐mail address can be used as a verification key. In this paper, we first review the recent IBS scheme proposed by Shim and its batch verifier to show that the batch verifier is vulnerable to a forgery attack. In order to resist to the attack, we propose a new efficient batch verifier for the IBS scheme. The proposed batch verifier can deal with arbitrary number of signatures as a batch. We prove formally that the proposed batch verifier is secure. Then, we analyze the computation cost of the proposed batch verifier using concrete parameters and compare it with well‐known batch verifiers. The comparison shows that our batch verifier can significantly outperform the existing batch verifiers in computation. We finally present a one‐round three‐party identity‐based key agreement protocol as an application of our batch verifier, which requires only three pairing operations in verification. Copyright © 2015 John Wiley & Sons, Ltd.

No abstract

Abstract. Socially and economically, the distributed denial-of-service (DDoS) attacks have been serious threats in the cyber world. Despite of many researches, current defense methods can be vulnerable to the DDoS attacks of unknown traffic pattern to avoid the methods. That is because most of the defense policies configured for the methods are fixed thresholds that were mainly determined by the learning of traffic volume. To overcome the problem caused by the fixed thresholds, we introduce the endpoint mitigation method based on the dynamic thresholding of DDoS defense policies according to the usage changes of system resources. We focused on the fact that the usage changes of system resources show the abnormal statuses of server if the failure/delay of service is occurred by the DDoS attacks that have not been blocked by current defense thresholds. The proposed method detects the server overload as measuring the usage changes of system resources and automatically adjusts current defense thresholds in conjunction with the strength of usage change. As the result, the service problem caused by the DDoS attacks can be gradually mitigated by the automatic threshold controlling of our method.

No abstract

Purpose – This research aims to provide standards for the judgment of “foreseeability” in the general principle of compensation for damages in Art. 74 of CISG. Design/Methodology/Approach – This research analyzes the legal interpretation of CISG’s provisions related to damage (Art.74~Art.77) and related precedents. Findings – The results revealed the “principle of rationality” as a criterion for judging the “foreseeability” of Art.74 of CISG. Research Implications – From a practical point of view, it is difficult to predict the outcome of disputes in a situation where there is no standard for “foreseeability” as to the extent of damages from the point of view of the party liable under CISG. Therefore, it can be said that the appropriate criteria for “foreseeability” are essential. This paper presents the “principle of rationality” as a standard for. The rationality principles were extracted from the following three provisions of Art.74, namely Art.75~Art.77. These criteria are that the item of recoverable loss must be reasonable, and the amount of recoverable damage must be reasonable. This research is meaningful in presenting standards of damages to trade transaction practitioners.