Automated sandbox-based analysis systems are dominantly focused on sequences of API calls, which are widely acknowledged as discriminative and easily extracted features. In this paper, we argue that an extension of the feature set beyond API calls may improve the malware detection performance. For this purpose, we apply the Cuckoo open-source sandbox system, carefully configured for the production of a novel dataset for dynamic malware analysis containing 22,200 annotated samples (11,735 benign and 10,465 malware). Each sample represents a full-featured report generated by the Cuckoo sandbox when a corresponding binary file is submitted for analysis. To support our position that the discriminative power of the full-featured sandbox reports is greater than the discriminative power of just API call sequences, we consider samples obtained from binary files whose execution induced API calls. In addition, we derive an additional dataset from samples in the full-featured dataset, whose samples contain only information on API calls. In a three-way factorial design experiment (considering the feature set, the feature representation technique, and the random forest model hyperparameter settings), we trained and tested a set of random forest models in a two-class classification task. The obtained results demonstrate that resorting to full-featured sandbox reports improves malware detection performance. The accuracy of 95.56 percent obtained for API call sequences was increased to 99.74 percent when full-featured sandbox reports were considered.

Introduction/purpose: Nowadays, user identification systems play a very important role in modern society. Complex security requirements have led experts to explore ways in which biometric data can be used to identify user identities. This paper presents an overview of biometric standards and methods which can be used to identify users in biometric systems, and therefore to protect information and communication systems. Methods: This paper deals with the problem of standardization in the field of biometrics. The first part of the paper presents concrete examples of the most widely used biometric standards. The second part of the paper gives an overview of the most used biometric methods. Results: The obtained results show that the development of biometric systems and biometric sensors contributes to better protection of identity from misuse, because biometric technologies have great potential for improving the security and accuracy of system operation. Biometric systems improve the security of users and also provide much greater precision in establishing identity. Conclusion: The development of biometric standards should focus on their interconnectivity, as well as on increasing connectivity with other IT standards.

Introduction/purpose: The security of systems can be jeopardized by compromising emanations. This paper provides an overview of computer screen attacks. New technologies can be used to exfiltrate sensitive data from computer screens. Emission security is the prevention of electromagnetic signal attacks that are conducted or radiated. Methods: This paper examines the impact of a side-channel attack that intercepts compromised information from a computer screen. The leakage of electromagnetic data is also explained. Software-defined radios are described to explain malicious attacks on computer monitors. Results: The source of the electromagnetic signal determines the nature of the side-channel information they carry. The most well-known issue associated with revealing emissions is the possibility of intercepting visual information displayed on computer monitors. Conclusion: Visual data displayed on computer monitors could be intercepted by a software-defined radio which can digitize the desired frequency spectrum directly from an antenna, present it to a digital signal processor, and output it to an application for revealing sensitive data. A Grdović, M. et al, Screen reading: electromagnetic information leakage from the computer monitor, pp.836-855 variety of countermeasures, such as shielding, zoning, soft TEMPEST, and similar techniques, can be used to prevent data leakage.

Complexity of non-orthogonal multiple access (NOMA) digital signal processing schemes is particularly relevant in mobile environments because of the varying channel conditions of every single user. In contrast to legacy modulation and coding schemes (MCSs), NOMA MCSs typically have irregular symbol constellations with asymmetric symbol decision regions affecting synchronization at the receiver. Research papers investigating signal processing in this emerging field usually lack sufficient details for facilitating software-defined radio (SDR) implementation. This work presents a new symbolic framework approach for simulating signal processing functions in SDR transmit–receive paths in a dynamic NOMA downlink use case. The proposed framework facilitates simple and intuitive implementation and testing of NOMA schemes and can be easily expanded and implemented on commercially available SDR hardware. We explicitly address several important design and measurement parameters and their relationship to different tasks, including variable constellation processing, carrier and symbol synchronization, and pulse shaping, focusing on quadrature amplitude modulation (QAM). The advantages of the proposed approach include intuitive symbolic modeling in a dynamic framework for NOMA signals; efficient, more accurate, and less time-consuming design flow; and generation of synthetic training data for machine-learning models that could be used for system optimization in real-world use cases.

Izazov na koji treba da odgovori sifrovanje multimedijalnih podataka jeste da, na efikasan nacin, implementira bezbednost video toka podataka. Za razliku od tradicionalnih metoda koje u potpunosti sifruju podatke, tehnike selektivnog sifrovanja odgovaraju na izazov tako sto kriptografski obraduju samo deo video toka podataka, istovremeno pruzajuci zadovoljavajuci nivo bezbednosti. Na taj nacin se optimizuje i vreme obrade i velicina kriptografski obradenih podataka. Nezavisno od primenjene tehnike sifrovanja, ne postoje implementirani mehanizmi kriptografske sinhronizacije prilikom operacije slucajnog pristupa izabranom delu sifrovanog video toka.