Network and System Security: 13th International Conference, NSS 2019, Sapporo, Japan, December 15–18, 2019, Proceedings

740 Pages·2019·40.331 MB·English

by  Joseph K. Liu, Xinyi Huang

Joseph K. Liu
Xinyi Huang (Eds.)
8
2 Network and
9
1
1

S
System Security
C
N
L
13th International Conference, NSS 2019
Sapporo, Japan, December 15–18, 2019
Proceedings
Lecture Notes in Computer Science 11928
Founding Editors
Gerhard Goos
Karlsruhe Institute of Technology, Karlsruhe, Germany
Juris Hartmanis
Cornell University, Ithaca, NY, USA
Editorial Board Members
Elisa Bertino
Purdue University, West Lafayette, IN, USA
Wen Gao
Peking University, Beijing, China
Bernhard Steffen
TU Dortmund University, Dortmund, Germany
Gerhard Woeginger
RWTH Aachen, Aachen, Germany
Moti Yung
Columbia University, New York, NY, USA
More information about this series at http://www.springer.com/series/7410
Joseph K. Liu Xinyi Huang (Eds.)
(cid:129)
Network and
System Security
13th International Conference, NSS 2019
–
Sapporo, Japan, December 15 18, 2019
Proceedings
123
Editors
JosephK.Liu XinyiHuang
MonashUniversity Fujian NormalUniversity
Clayton, VIC,Australia Fuzhou,China
ISSN 0302-9743 ISSN 1611-3349 (electronic)
Lecture Notesin Computer Science
ISBN 978-3-030-36937-8 ISBN978-3-030-36938-5 (eBook)
https://doi.org/10.1007/978-3-030-36938-5
LNCSSublibrary:SL4–SecurityandCryptology
©SpringerNatureSwitzerlandAG2019
Thisworkissubjecttocopyright.AllrightsarereservedbythePublisher,whetherthewholeorpartofthe
material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation,
broadcasting, reproduction on microfilms or in any other physical way, and transmission or information
storageandretrieval,electronicadaptation,computersoftware,orbysimilarordissimilarmethodologynow
knownorhereafterdeveloped.
Theuseofgeneraldescriptivenames,registerednames,trademarks,servicemarks,etc.inthispublication
doesnotimply,evenintheabsenceofaspecificstatement,thatsuchnamesareexemptfromtherelevant
protectivelawsandregulationsandthereforefreeforgeneraluse.
Thepublisher,theauthorsandtheeditorsaresafetoassumethattheadviceandinformationinthisbookare
believedtobetrueandaccurateatthedateofpublication.Neitherthepublishernortheauthorsortheeditors
give a warranty, expressed or implied, with respect to the material contained herein or for any errors or
omissionsthatmayhavebeenmade.Thepublisherremainsneutralwithregardtojurisdictionalclaimsin
publishedmapsandinstitutionalaffiliations.
ThisSpringerimprintispublishedbytheregisteredcompanySpringerNatureSwitzerlandAG
Theregisteredcompanyaddressis:Gewerbestrasse11,6330Cham,Switzerland
Preface
This volume contains the papers presented at the 13th International Conference on
Network and System Security (NSS 2019) held in Sapporo, Japan, during December
15–18, 2019.
Therewere89submissions.Eachsubmissionwasreviewedbyatleast2,andonthe
average 2.8, Program Committee members. The committee decided to accept 36 full
papers and 7 short papers. The program also included 4 invited papers to cover the
hottest areas in cybersecurity.
WewouldliketothankourgeneralchairsChunhuaSu,JunShao,HiroakiKikuchi,
andZheLiu;ourpublicationchairsWeizhi MengandThomasTan;ourwebchairYu
Wang; the local organization team; and all the Program Committee members for their
support to this conference. Without their tremendous effort, we could not have orga-
nized the conference successfully.
Finally, we also thank the University of Aizu and Zhejiang Gongshang University
for their full support in organizing NSS 2019.
December 2019 Joseph K. Liu
Xinyi Huang
Organization
Program Committee
Man Ho Au The Hong Kong Polytechnic University, Hong Kong,
China
Joonsang Baek University of Wollongong, Australia
Zubair Baig Deakin University, Australia
Chao Chen Swinburne University of Technology, Australia
Fei Chen Shenzhen University, China
Jiageng Chen Central China Normal University, China
Xiaofeng Chen Xidian University, China
Cheng-Kang Chu Huawei, Singapore
Hui Cui Murdoch University, Australia
Chunpeng Ge Nanjing University of Aeronautics and Astronautics,
China
Xinyi Huang Fujian Normal University, China
Julian Jang-Jaccard Massey University, New Zealand
Veronika Kuchta Monash University, Australia
Miroslaw Kutylowski Wrocław University of Science and Technology,
Poland
Junzuo Lai Jinan University, China
Li Li Monash University, Australia
Kaitai Liang University of Surrey, UK
Joseph Liu Monash University, Australia
Shengli Liu Shanghai Jiao Tong University, China
Jiqiang Lu Beihang University, China
Rongxing Lu University of New Brunswick, Canada
Xiapu Luo The Hong Kong Polytechnic University, Hong Kong,
China
Siqi Ma CSIRO, Australia
Weizhi Meng Technical University of Denmark, Denmark
Kazuhiko Minematsu NEC Corporation, Japan
Chris Mitchell Royal Holloway University of London, UK
Ruben Rios University of Malaga, Spain
Jun Shao Zhejiang Gongshang University, China
Chunhua Su University of Aizu, Japan
Shi-Feng Sun Monash University, Australia
Shamik Sural Indian Institute of Technology, India
Willy Susilo University of Wollongong, Australia
Ding Wang Peking University, China
Hua Wang Victoria University, Australia
viii Organization
Yu Wang Guangzhou University, China
Ian Welch Victoria University of Wellington, New Zealand
Ste en Wendzel University of Applied Sciences, Worms and
Fraunhofer FKIE, Germany
Qianhong Wu Beihang University, China
Toshihiro Yamauchi Okayama University, Japan
Guomin Yang University of Wollongong, Australia
Yanjiang Yang Huawei, Singapore
Wun-She Yap Universiti Tunku Abdul Rahman, Malaysia
Jiangshan Yu Monash University, Australia
Yong Yu Shaanxi Normal University, China
Tsz Hon Yuen The University of Hong Kong, Hong Kong, China
Lu Zhou University of Aizu, Japan
Additional Reviewers
Al-Shaboti, Mohammed Pan, Jing
Cui, Handong Praitheeshan, Purathani
Cui, Nan Qin, Xianrui
Dai, Pingsuang Shen, Jun
Enkhtaivan, Batnyam Sui, Zhimei
Feng, Hanwen Tang, Wenyi
Geeraerts, Gilles Wang, Hao
Haseeb, Junaid Wang, Jianfeng
Isshiki, Toshiyuki Wang, Mingming
Li, Wanpeng Wang, Shenqing
Li, Yiming Wang, Yunling
Li, Zengpeng Wu, Mingli
Liu, Mengjiang Yang, Hao
Lu, Alex Zhang, Xiaoyu
Ma, Xinshu Zhao, Liangrong
Contents
Invited Papers
MeasuringSecurityofSymmetricEncryptionSchemesAgainstOn-the-Fly
Side-Channel Key-Recovery Attacks. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Bagus Santoso, Yasutada Oohama, and Chunhua Su
Unsupervised Insider Detection Through Neural Feature Learning
and Model Optimisation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Liu Liu, Chao Chen, Jun Zhang, Olivier De Vel, and Yang Xiang
Dynamic Searchable Symmetric Encryption with Forward
and Backward Privacy: A Survey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Qingqing Gan, Cong Zuo, Jianfeng Wang, Shi-Feng Sun,
and Xiaoming Wang
A Graph Database-Based Approach to Analyze Network Log Files. . . . . . . . 53
LarsDiederichsen,Kim-KwangRaymondChoo,andNhien-AnLe-Khac
Full Papers
A Privacy-Enhancing Framework for Internet of Things Services . . . . . . . . . 77
Lukas Malina, Gautam Srivastava, Petr Dzurenda, Jan Hajny,
and Sara Ricci
Using Audio Characteristics for Mobile Device Authentication. . . . . . . . . . . 98
Matthew Dekker and Vimal Kumar
Ethereum Analysis via Node Clustering. . . . . . . . . . . . . . . . . . . . . . . . . . . 114
Hanyi Sun, Na Ruan, and Hanqing Liu
Strong Known Related-Key Attacks and the Security of ECDSA . . . . . . . . . 130
Tsz Hon Yuen and Siu-Ming Yiu
Threat Assessment of Enterprise Applications via Graphical Modelling . . . . . 146
Manjunath Bilur, Anugrah Gari, and R. K. Shyamasundar
A Blockchain-Based IoT Data Management System for Secure
and Scalable Data Sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167
Yawei Wang, Chenxu Wang, Xiapu Luo, Kaixiang Zhang,
and Huizhong Li
Towards Secure Open Banking Architecture: An Evaluation with OWASP. . . 185
Deina Kellezi, Christian Boegelund, and Weizhi Meng
x Contents
OUTGENE: Detecting Undefined Network Attacks with Time Stretching
and Genetic Zooms. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 199
Luís Dias, Hélder Reia, Rui Neves, and Miguel Correia
OVERSCAN: OAuth 2.0 Scanner for Missing Parameters . . . . . . . . . . . . . . 221
Karin Sumongkayothin, Pakpoom Rachtrachoo, Arnuphap Yupuech,
and Kasidit Siriporn
LaT-Voting: Traceable Anonymous E-Voting on Blockchain . . . . . . . . . . . . 234
Peng Li and Junzuo Lai
Distributed Secure Storage System Based on Blockchain and TPA . . . . . . . . 255
Huili Wang, Wenping Ma, Haibin Zheng, and Qianhong Wu
SSHTDNS: A Secure, Scalable and High-Throughput Domain Name
System via Blockchain Technique. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 272
Zhentian Xiong, Zoe L. Jiang, Shuqiang Yang, Xuan Wang,
and Junbin Fang
A Practical Dynamic Enhanced BFT Protocol. . . . . . . . . . . . . . . . . . . . . . . 288
FengShen,YuLong,ZhenLiu,ZhiqiangLiu,HongyangLiu,DawuGu,
and Ning Liu
Pre-adjustment Based Anti-collusion Mechanism for Audio Signals. . . . . . . . 305
Juan Zhao, Tianrui Zong, Yong Xiang, Longxiang Gao,
and Gleb Beliakov
Detecting Intruders by User File Access Patterns. . . . . . . . . . . . . . . . . . . . . 320
Shou-Hsuan S. Huang, Zechun Cao, Calvin E. Raines, Mai N. Yang,
and Camille Simon
Blockchain-EnabledPrivacy-PreservingInternetofVehicles:Decentralized
and Reputation-Based Network Architecture. . . . . . . . . . . . . . . . . . . . . . . . 336
Xinshu Ma, Chunpeng Ge, and Zhe Liu
Privacy Preserving Machine Learning with Limited Information Leakage. . . . 352
Wenyi Tang, Bo Qin, Suyun Zhao, Boning Zhao, Yunzhi Xue,
and Hong Chen
Blockchain Based Owner-Controlled Secure Software Updates
for Resource-Constrained IoT. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 371
GabrielJeromeSolomon,PengZhang,YuhongLiu,andRachaelBrooks
Sequential Aggregate MACs with Detecting Functionality Revisited . . . . . . . 387
Shingo Sato, Shoichi Hirose, and Junji Shikata