January 16, 2015

News

• Activists Honeypot Sweden’s Security Elite with Free Conference Wifi

• Banking Trojans Disguised As SCADA Updates Infecting Plants

• Before Bridgegate, Christie Used Port Authority As Political Weapon [RE: illegal disclosure of EZ-Pass data]

• CA Car Data Proposal Sparks Privacy Fears

• Hackers Leak Bank Files After Extortion Fails

• Lizard Squad Hijacks Thousands of Home Routers

• Major Bitcoin Exchange Reopens After Breach, $5 Mil. Theft

• Microsoft Limits Patch Alerts to Paid Subscribers

• NJ Passes Law Requiring Encryption of Health Insurance Data

• North Korea’s Official News Site Delivering Malware

• Senate Report: Homeland Security Cybersecurity ‘Alarming’

• Switzerland Forced to Reveal Buyers, Cost of Surveillance Exports

• Turkey: 50 Million Exposed by Lax Government Security

• UK Threatens to Ban Encryption [along with Iran]

• US Central Command Twitter, YouTube Accounts Hijacked

• US Intelligence Council: Encryption Critical to Preventing Attacks by China, Russia

• US Seeks to Deny Twitter Warrant Canary Challenge

• White House Proposes Breach Notification Standard, Threat Data Sharing Bill [analysis: 1, 2, 3]
  

Journals / Preprints

• An Adaptive Wideband Delphi Method to Study State Cyber-Defence Requirements

• Analysis of Country-Wide Internet Outages Caused by Censorship [Request Full Text]

• Analysis of Docker Security

• Analysis and Enhancement of Desynchronization Attack on an Ultralightweight RFID Authentication Protocol [more from Cryptology ePrint Archive]

• ASArP: Automated Security Assessment & Audit of Remote Platforms Using TCG-SCAP Synergies

• Banking Behavior in Security and Multi-channel Environment [Request Full Text]

• Crowd-ML: A Privacy-Preserving Learning Framework for a Crowd of Smart Devices

• Cybersecurity: What About U.S. Policy?

• Ideal Log Setting for Database Forensics Reconstruction

• LASTor: A Low-Latency AS-Aware Tor Client [Request Full Text]

• Modified Trial Division Algorithm Using KNJ-Factorization Method To Factorize RSA Public Key Encryption

• Multi-phase IRC Botnet and Botnet Behavior Detection Model

• Network Codes Resilient to Jamming and Eavesdropping [Request Full Text]

• New Hashing Algorithm for Use in TCP Reassembly Module of IPS

• OnionBots: Subverting Privacy Infrastructure for Cyber Attacks

• On Vulnerabilities of the Security Association in the IEEE 802.15.6 Standard

• A Polynomial-Time Attack on the BBCRS Scheme

• PriCL: Creating a Precedent A Framework for Reasoning about Privacy Case Law

• Privacy and Data Protection by Design – from Policy to Engineering

• Privacy by Design: On the Conformance Between Protocols and Architectures

• Secure and Trustworthy File Sharing Over Cloud Storage Using eID Tokens

• Survey of Security and Privacy Issues of Internet of Things

• Very Static Enforcement of Dynamic Policies

• Video Manipulation Techniques for the Protection of Privacy in Remote Presence Systems

• New issue: Computers & Security
• New issue: IEEE Transactions on Information Forensics and Security [Request Full Text]
• New issue: IEEE Transactions on Secure and Dependable Computing [Request Full Text]
• New issue: International Journal of Information Security [Request Full Text]

Reports / Blogs / Etc.

• Behind the Rise of the Private Surveillance Industry in Central Asia [openDemocracy]

• Bulk Collection of Signals Intelligence: Technical Options [National Research Council]
  

• The Cost of Malware Containment [Ponemon / Damballa]

• Cybersecurity Issues and Challenges: In Brief [Congressional Research Service – download via Federation of American Scientists / also: Cyber Operations in DOD Policy and Plans: Issues for Congress ]

• Energy Sector Cybersecurity Framework Implementation Guidance [download via Dept. of Energy]

• Fact-Checking the Hype Surrounding FireChat in Hong Kong’s Protests [Global Voices]

• Hopefully the Last Post I’ll Ever Write on Dual EC DRBG [Matthew Green on NSA subversion of NIST standards]

• India’s Surveillance State: An Overview [Software Freedom Law Centre]

• Is it Possible to Ban Autonomous Weapons in Cyberwar? [Just Security – also: Cybersecurity and a New Era of Asymmetric Economic Warfare]

• KeySweeper [$10, DIY wireless keylogger – Samy Kamkar]

• Mass Surveillance: Risks and Opportunities Raised by the Current Generation of Network Services and Applications – Part 1, 2 [European Parliament]

• Need Some Espionage Done? Hackers Are for Hire Online [New York Times]

• Protecting Controlled Unclassified in Nonfederal Information Systems and Organizations [download via NIST]

• Privacy and Data Protection by Design [ENISA – also: Threat Landscape of Internet Infrastructure]

• Privacy, Security and Surveillance: Tackling Dilemmas and Dangers in the Digital Realm [download via Wilton Park]

• The Turn-Verizon Zombie Cookie [Jonathan Mayer]

• UK Exposing Personal Data in Open Datasets [Information Rights & Wrongs]