ZigBee/ZigBee PRO security assessment based on compromised cryptographic keys

Sensor networks have many applications in monitoring and controlling of environmental properties such as sound, acceleration, vibration and temperature. Due to limitedresources in computation capability, memory and energy, they are vulnerable to many kinds of attacks. The ZigBee specification based on the 802.15.4 standard, defines a set of layers specifically suited to sensor networks. These layers support secure messaging using symmetric cryptographic. This paper presents two different ways for grabbing the cryptographic key in ZigBee: remote attack and physical attack. It also surveys and categorizes some additional attacks which can be performed on ZigBee networks: eavesdropping, spoofing, replay and DoS attacks at different layers. From this analysis, it is shown that some vulnerabilities still in the existing security schema in ZigBee technology.

A Security Framework for JXTA-Overlay

En l'actualitat, la maduresa del camp de la investigació P2P empès a través de nous problemes, relacionats amb la seguretat. Per aquesta raó, la seguretat comença a convertir-se en una de les qüestions clau en l'avaluació d'un sistema P2P, i és important proporcionar mecanismes de seguretat per a sistemes P2P. El projecte JXTAOverlay fa un esforç per utilitzar la tecnologia JXTA per proporcionar un conjunt genèric de funcions que poden ser utilitzades pels desenvolupadors per desplegar aplicacions P2P. No obstant això, encara que el seu disseny es va centrar en qüestions com ara l'escalabilitat o el rendiment general, no va tenir en compte la seguretat. Aquest treball proposa un marc de seguretat, adaptat específicament a la idiosincràsia del JXTAOverlay.

JXTA security in mobile constrained devices

JXME is the JXTA protocols implementation formobile devices using J2ME. Two different flavors of JXME have been implemented, each one specific for a particular set of devices, according to their capabilities. The main value of JXME is its simplicity to create peer-to-peer (P2P) applications in limited devices. In addition to assessing JXME functionalities, it is also important to realize the default security level provided. This paper presents a brief analysis of the current state of security in JXME, focusing on the JXME-Proxied version, identifies existing vulnerabilities and proposes further improvements in this field.

Open Source Software : the Intersection of IP and Security in Open Source

The use of open source software continues to grow on a daily basis. Today, enterprise applications contain 40% to 70% open source code and this fact has legal, development, IT security, risk management and compliance organizations focusing their attention on its use, as never before. They increasingly understand that the open source content within an application must be detected. Once uncovered, decisions regarding compliance with intellectual property licensing obligations must be made and known security vulnerabilities must be remediated. It is no longer sufficient from a risk perspective to not address both open source issues.

Security in RFID devices

Aquest projecte inclou una aproximació als conceptes de RFID i targetes contactless centrant-se en l’ampliament usat MIFARE Classic chip. L’objectiu principal es mostrar el seu funcionament i les seves vulnerabilitats, així com alguns exemples pràctics fent una anàlisi de diferents serveis que les utilitzen.

Beyond pure public and pure private management models: Partial privatization in the European airport industry

The use of private funding and management is enjoying an increasing trend in airports. The literature has not paid enough attention to the mixed management models in this industry, although many European airports take the form of mixed public-private companies, where ownership is shared between public and private sectors. We examine the determinants of the degree of private participation in the European airport sector. Drawing on a sample of the 100 largest European airports, we estimate a multivariate equation in order to determine the role of airport characteristics, fiscal variables, and political factors on the extent of private involvement. Our results confirm the alignment between public and private interests in partially privatized airports. Fiscal constraints and market attractiveness promote private participation. Integrated governance models and the share of network carriers prevent the presence of private ownership, while the degree of private participation appears to be pragmatic rather than ideological.

The determinants of contractual choice for private involvement in infrastructure projects in the United States

Reliance on private partners to help provide infrastructure investment and service delivery is increasing in the United States. Numerous studies have examined the determinants of the degree of private participation in infrastructure projects as governed by contract type. We depart from this simple public/private dichotomy by examining a rich set of contractual arrangements. We utilize both municipal and state-level data on 472 projects of various types completed between 1985 and 2008. Our estimates indicate that infrastructure characteristics, particularly those that reflect stand alone versus network characteristics, are key factors influencing the extent of private participation. Fiscal variables, such as a jurisdiction’s relative debt level, and basic controls, such as population and locality of government, increase the degree of private participation, while a greater tax burden reduces private participation.

Beyond pure public and pure private management models: Mixed firms in the European Airport Industry

The use of private funding and management enjoys an increasing trend in airports. The literature has not paid enough attention to the mixed management models in this industry, although many European airports take the form of mixed firms or Institutional PPP, where ownership is shared between public and private sectors. We examine the determinants of the degree of private participation in the European airport sector. Drawing on a sample of the 100 largest European airports we estimate a multivariate equation in order to determine the role of airport characteristics, fiscal variables and political factors on the extent of private involvement. Our results confirm the alignment between public and private interests in PPPs. Fiscal constraints and market attractiveness promote private participation. Integrated governance models and the share of network carriers prevent the presence of private ownership, while the degree of private participation appears to be pragmatic rather than ideological.

Recovery Risk and Labor Costs in Public-Private Partnerships : Contractual Choice in the US Water industry

We use an ordered logistic model to empirically examine the factors that explain varying degrees of private involvement in the U.S. water sector through public-private partnerships. Our estimates suggest that a variety of factors help explain greater private participation in this sector. We find that the risk to private participants regarding cost recovery is an important driver of private participation. The relative cost of labor is also a key factor in determining the degree of private involvement in the contract choice. When public wages are high relative to private wages, private participation is viewed as a source of cost savings. We thus find two main drivers of greater private involvement: one encouraging private participation by reducing risk, and another encouraging government to seek out private participation in lowering costs.

Public-private sector wage differentials by type of contract: evidence from Spain

The article examines public-private sector wage differentials in Spain using microdata from the Structure of Earnings Survey (Encuesta de Estructura Salarial). When applying various decomposition techniques, we find that it is important to distinguish by gender and type of contract. Our results also highlight the presence of a positive wage premium for public sector workers that can be partially explained by their better endowment of characteristics, in particular by the characteristics of the establishment where they work. The wage premium is greater for female and fixed-term employees and falls across the wage distribution, being negative for more highly skilled workers.

Complete Analysis of Configuration Rules to Guarantee Reliable Network Security Policies

Peer-reviewed