DSpace

Now showing 1 - 7 of 7

Can Malware Be Exterminated by Better Understanding Its Roots?
(2014-11-01)
Cho, Michael Cheng Yi
;
Hsu, Chia-Wei
;
Shieh, Shiuhpyng
;
Wang, Chi-Wei
;
資訊工程學系
Light-Weight CSRF Protection by Labeling User-Created Contents
(2013)
Sung, Yin-Chang
;
Cho, Michael Cheng Yi
;
Wang, Chi-Wei
;
Hsu, Chia-Wei
;
Shieh, Shiuhpyng Winston
Cross-site request forgery (CSRF/XSRF) is a serious vulnerability in Web 2.0 environment. With CSRF, an adversary can spoof the payload of an HTTP request and entice the victim's browser to transmit an HTTP request to the web server. Consequently, the server cannot determine legitimacy of the HTTP request. This paper presents a light-weight CSRF prevention method by introducing a quarantine system to inspect suspicious scripts on the server-side. Instead of using script filtering and rewriting approach, this scheme is based on a new labeling mechanism (we called it Content Box) which enables the web server to distinguish the malicious requests from the harmless requests without the need to modify the user created contents (UCCs). Consequently, a malicious request can be blocked when it attempts to access critical web services that was defined by the web administrator. To demonstrate the effectiveness of the proposed scheme, the proposed scheme was implemented and the performance was evaluated.
Divergence Detector: A Fine-grained Approach to Detecting VM-Awareness Malware
(2013)
Hsu, Chia-Wei
;
Shih, Fan-Syun
;
Wang, Chi-Wei
;
Shieh, Shiuhpyng Winston
;
資訊工程學系
Virtualized execution has become an effective mechanism to analyze malware in a dynamic way. To conceal its malicious behaviors, VM-aware malware probes the execution environment for analysis-resistance. These malware programs hide their malicious behaviors if they are launched in a virtual machine (VM). VM awareness becomes a barrier for malware analysis due to the concealment of malicious behaviors. In this paper, we discover that uncertain factors have significant influence on the effectiveness of malware detection. To cope with the problems, a new VM-aware detection scheme, namely Divergence Detector, is proposed to address the swindle of the evolved malware. Unlike conventional schemes, the Divergence Detector reduces the uncertain factors at instruction level, and can detect the divergence of multi-execution traces across heterogeneous virtual machines. The proposed Divergence Detector is implemented across the three commonly used VM platforms, that is, QEMU, Bochs and Xen. It compares the code coverage of the execution traces on various VM platforms to discover the deviation of behavior, thereby precisely detecting the VM-awareness. We will formally predict the effectiveness of Divergence Detector by constructing a mathematic model, which shows the maximum false positive rate is exponentially decreased with respect to the number of multi-executions. Representative samples utilizing seven types of commonly used VM-aware techniques were also employed for evaluation. The evaluation results indicate that the maximum false positive rate complies with our prediction. The uncertain factors play the major role in the VM-awareness detection. To reduce uncertain factors causing false positives, a method is proposed for VM-aware detection. The Divergence Detector can also enable the identification of new types of malware since the benign programs do not need to be aware of execution environment.
Characterisation of a suspended nanowire channel thin-film transistor with sub-100 nm air gap
(2011-07-01)
Kuo, Chia-Hao
;
Hsu, Chia-Wei
;
Lin, Horng-Chih
;
Huang, Tiao-Yuan
;
電子工程學系及電子研究所
A novel suspended nanowire (NW) channel thin-film transistor (TFT) with sub-100 nm air gap has been fabricated and characterised. With a simple and low-cost over-etching-time-controlled reactive ion etching technique and a buffered-oxide etch wet-etching process, a suspended NW of 27 nm and an air gap of 10 nm were achieved. The resultant suspended-NW-channel TFTs showed an ultra-low subthreshold swing (52 mV/dec) and considerable hysteresis window (3.7 V). Finally, the impacts of device dimensions on the characteristics of suspended NW TFTs were also investigated.
Stepwise Construction of the Cr-Cr Quintuple Bond and Its Destruction upon Axial Coordination
(2012)
Huang, Yu-Lun
;
Lu, Duan-Yen
;
Yu, Hsien-Cheng
;
Yu, Jen-Shiang K.
;
Hsu, Chia-Wei
Quintuply-Bonded Dichromium(I) Complexes Featuring Metal-Metal Bond Lengths of 1.74 angstrom
(2008)
Hsu, Chia-Wei
;
Yu, Jen-Shiang K.
;
Yen, Chun-Hsu
;
Lee, Gene-Hsiang
;
Wang, Yu
Remarkably short metal-metal bonds: A lantern-type quintuply bonded Dichromium(I) complex
(2008)
Tsai, Yi-Chou
;
Hsu, Chia-Wei
;
Yu, Jen-Shiang K.
;
Lee, Gene-Hsiang
;
Wang, Yu

學術出版;;Publications

Browse

Filters

Settings

Sort By

Results per page

🏛️國立陽明交通大學機構典藏

Search Results