Publications associées à Contrôle d'accès discrétionnaire

When Your AI Becomes a Target: AI Security Incidents and Best Practices

In contrast to vast academic efforts to study AI security, few real-world reports of AI security incidents exist. Released incidents prevent a thorough investigation of the attackers' motives, as crucial information about the company and AI application is ...

AAAI Press2024

Performing and Detecting Backdoor Attacks on Face Recognition Algorithms

Alexander Carl Unnervik

The field of biometrics, and especially face recognition, has seen a wide-spread adoption the last few years, from access control on personal devices such as phones and laptops, to automated border controls such as in airports. The stakes are increasingly ...

EPFL2024

SecureCells: A Secure Compartmentalized Architecture

Babak Falsafi, Mathias Josef Payer, Yuanlong Li, Andrés Sánchez Marín, Florian Hofhammer, Siddharth Gupta, Atri Bhattacharyya

Modern programs are monolithic, combining code of varied provenance without isolation, all the while running on network-connected devices. A vulnerability in any component may compromise code and data of all other components. Compartmentalization separates ...

2023

An anomaly detection approach for backdoored neural networks: face recognition as a case study

Sébastien Marcel, Alexander Carl Unnervik

Backdoor attacks allow an attacker to embed functionality jeopardizing proper behavior of any algorithm, machine learning or not. This hidden functionality can remain inactive for normal use of the algorithm until activated by the attacker. Given how steal ...

IEEE2022

Are GAN-based Morphs Threatening Face Recognition?

Sébastien Marcel, Eklavya Sarkar, Laurent Colbois

Morphing attacks are a threat to biometric systems where the biometric reference in an identity document can be altered. This form of attack presents an important issue in applications relying on identity documents such as border security or access control ...

IEEE2022

The Impact of RDMA on Agreement

Rachid Guerraoui, Mihail Igor Zablotchi, Naama Ben David

Remote Direct Memory Access (RDMA) is becoming widely available in data centers. This technology allows a process to directly read and write the memory of a remote host, with a mechanism to control access permissions. In this paper, we study the fundamenta ...

2019

BioID: a Privacy-Friendly Identity Document

Serge Vaudenay, Muhammed Fatih Balli, Fatma Betül Durak

We design a suite of protocols so that a small tamper-resistant device can be used as a biometric identity document which can be scanned by authorized terminals. We target both strongly secure identification and strong privacy. Unlike biometric passports, ...

Springer2019

MedChain: Accountable and Auditable Data Sharing in Distributed Medical Scenarios

Jean-Pierre Hubaux, Bryan Alexander Ford, Juan Ramón Troncoso-Pastoriza, Linus Gasser, Jean Louis Raisaro

The current trend towards personalized medicine creates an urgent need to share data among different hospitals and health institutions, which endangers the privacy of the data subjects if not done with the appropriate precautions. Conversely, the frequency ...

2019

Security of Distance-Bounding: A Survey

Serge Vaudenay, Gildas Avoine, Martin Benjamin, Ioana Cristina Carlson, Srdan Capkun, Aslan Tchamkerten

Distance-bounding protocols allow a verifier to both authenticate a prover and evaluate whether the latter is located in his vicinity. These protocols are of particular interest in contactless systems, e.g. electronic payment or access control systems, whi ...

2018

Implications of Position in Cryptography

Handan Kilinç Alper

In our daily lives, people or devices frequently need to learn their location for many reasons as some services depend on the absolute location or the proximity. The outcomes of positioning systems can have critical effects e.g., on military, emergency. Th ...

EPFL2018

Contactless Access Control Based on Distance Bounding

Serge Vaudenay

Contactless access control systems are critical for security but often vulnerable to relay attacks. In this paper, we define an integrated security and privacy model for access control using distance bounding (DB) which is the most robust solution to preve ...

2017

Privacy-Preserving Photo Sharing based on a Public Key Infrastructure

Touradj Ebrahimi, Lin Yuan, David Mc Nally

A significant number of pictures are posted to social media sites or exchanged through instant messaging and cloud-based sharing services. Most social media services offer a range of access control mechanisms to protect users privacy. As it is not in the b ...

Spie-Int Soc Optical Engineering2015

TOA: a tag-owner-assisting RFID authentication protocol toward access control and ownership transfer

Chao Wang, Qiang Wang, Chen Zhang, Lei Xie

This paper addresses radio frequency identification (RFID) authentication and ownership transfer in offline scenarios. Four typical related works are reviewed in detail. A series of shortcomings and vulnerabilities of them are pointed out. A new RFID authe ...

Wiley-Blackwell2014

Enhancing Park and Ride with access control: A case study of Southampton

Implementing and promoting more sustainable forms of urban transport are key policies of Local Authorities throughout the UK. Park and Ride (P&R) is one such system implemented widely in the UK, especially in historic towns and cities with limited road and ...

Elsevier2011

On the allocation of city space to multiple transport modes

Nikolaos Geroliminis, Eric Justin Gonzales

This paper analyzes urban multimodal transportation systems in an aggregated way. To describe the aggregate behavior of traffic in cities, use is made of an idea that is now receiving some attention: the macroscopic fundamental diagram (MFD). We demonstrat ...

Taylor & Francis2010

iTUG, a Sensitive and Reliable Measure of Mobility

Kamiar Aminian, Arash Salarian

Timed Up and Go (TUG) test is a widely used clinical paradigm to evaluate balance and mobility. Although TUG includes several complex subcomponents, namely: sit-to-stand, gait, 180 degrees turn, and turn-to-sit; the only outcome is the total time to perfor ...

Institute of Electrical and Electronics Engineers2010

Towards Access Control Aware P2P Data Management Systems

Karl Aberer, Zoltán Miklós

2P data management systems provide a scalable alternative to centralized architectures. Their adoption, however, is limited by the lack of possibility to control the access to the resources stored in the system. We address this problem in the case of struc ...

ACM2009

Global Stabilization of an Inverted Pendulum – Control Strategy and Experimental Verification

Dominique Bonvin

The problem of swinging up an inverted pendulum on a cart and controlling it around the upright position has traditionally been treated as two separate problems. This paper proposes a control strategy that is globally asymptotically stable under actuator s ...

2009

Access control and privacy in location-aware applications

Maria Luisa Damiani

The topic addressed in this thesis concerns the relationship between spatial knowledge and information protection in a mobile setting. The proliferation of mobile devices in an increasingly connected world raises growing concern for information security an ...

EPFL2008

Data security in location-aware applications: an approach based on RBAC

Maria Luisa Damiani

Data security in a mobile context is a critical issue. Over the last few years a new category of location-based services, the Enterprise LBS (ELBS), has emerged focusing on the demands of mobility in organisations. These applications pose challenging requi ...

2007