检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

45 篇 会议
1 篇 期刊文献

馆藏范围

46 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

39 篇 工学
- 37 篇 计算机科学与技术...
- 8 篇 软件工程
- 6 篇 信息与通信工程
- 1 篇 电气工程
- 1 篇 建筑学
- 1 篇 土木工程
- 1 篇 安全科学与工程
18 篇 理学
- 17 篇 数学
- 1 篇 物理学
4 篇 管理学
- 4 篇 管理科学与工程(可...
- 4 篇 工商管理
- 1 篇 图书情报与档案管...
3 篇 经济学
- 3 篇 应用经济学
2 篇 法学
- 2 篇 社会学
- 1 篇 法学
1 篇 教育学
- 1 篇 教育学
1 篇 军事学

主题

5 篇 privacy
3 篇 iot
3 篇 differential pri...
2 篇 smpc
2 篇 attacks
2 篇 security
1 篇 internet of thin...
1 篇 log obfuscation
1 篇 conditional gan
1 篇 hijacking
1 篇 policy language
1 篇 web tracking
1 篇 access control
1 篇 human behavior
1 篇 homomorphic encr...
1 篇 data privacy
1 篇 mobile devices
1 篇 privacy leakage
1 篇 tags
1 篇 deep learning se...

机构

2 篇 north carolina s...
2 篇 rhein westfal th...
1 篇 florida int univ...
1 篇 penn state univ ...
1 篇 univ tokyo bunky...
1 篇 univ coimbra cis...
1 篇 centre for advan...
1 篇 shenzhen huazhon...
1 篇 hunan automobile...
1 篇 chinese acad sci...
1 篇 inria le chesnay
1 篇 zhejiang key lab...
1 篇 shandong univers...
1 篇 penn state univ ...
1 篇 natl univ singap...
1 篇 ericsson secur r...
1 篇 computer science...
1 篇 nanyang technolo...
1 篇 school of comput...
1 篇 florida polytech...

作者

2 篇 klinger andreas
2 篇 meyer ulrike
2 篇 chen bo
2 篇 liu peng
1 篇 atsley ryan she
1 篇 wu dinghao
1 篇 xia luning
1 篇 gupta maanak
1 篇 li jiahao
1 篇 onen melek
1 篇 he ruhan
1 篇 alcantara nathan...
1 篇 mcdaniel patrick
1 篇 faith ayodele
1 篇 luo xiaonan
1 篇 mannan mohammad
1 篇 saji nobuyuki
1 篇 ghazali kamarul ...
1 篇 shen yanjin
1 篇 carlsson niklas

语言

44 篇 英文
2 篇 其他

检索条件"任意字段=13th ACM Conference on Data and Application Security and Privacy, CODASPY 2023"

共 46 条记录，以下是1-10 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

codaspy 2023 - Proceedings of the 13th acm conference on data and application security and privacy

CODASPY 2023 - Proceedings of the 13th ACM Conference on Dat...

引用

13th acm conference on data and application security and privacy, codaspy 2023

ISBN: (纸本)9798400700675

the proceedings contain 30 papers. the topics discussed include: comparative privacy analysis of mobile browsers;IdDecoder: a face embedding inversion tool and its privacy and security implications on facial recognition systems;attribute inference attacks in online multiplayer video games: a case study on DOTA2;AutoSpill: credential leakage from mobile password managers;multi-modality mobile datasets for behavioral biometrics research: data/toolset paper;a tenant-based two-stage approach to auditing the integrity of virtual network function chains hosted on third-party clouds;CloudShield: real-time anomaly detection in the cloud;Grote: group testing for privacy-preserving face identification;anonymous system for fully distributed and robust secure multi-party computation;and protecting encrypted virtual machines from nested page fault controlled channel.

关键词：

来源：评论

学校读者我要写书评

暂无评论

GROTE: Group Testing for privacy-Preserving Face Identification 23

GROTE: Group Testing for Privacy-Preserving Face Identificat...

引用

13th acm conference on data and application security and privacy (codaspy)

作者： Ibarrondo, Alberto Chabanne, Herve Despiegel, Vincent Onen, Melek Idemia Paris France EURECOM Sophia Antipolis France

ISBN: (纸本)9798400700675

this paper proposes a novel method to perform privacy-preserving face identification based on the notion of group testing, and applies it to a solution using the Cheon-Kim-Kim-Song (CKKS) homomorphic encryption scheme. Securely computing the closest reference template to a given live template requires.. comparisons, as many as there are identities in a biometric database. Our solution, named GROTE, replaces element-wise testing by group testing to drastically reduce the number of such costly, non-linear operations in the encrypted domain from K to up to 2 root K. More specifically, we approximate the max of the coordinates of a large vector by raising to the alpha-th power and cumulative sum in a 2D layout, incurring a small impact in the accuracy of the system while greatly speeding up its execution. We implement GROTE and evaluate its performance.

关键词： Secure Biometrics Face Identification Homomorphic Encryption privacy Enhancing Technologies

来源：评论

学校读者我要写书评

暂无评论

the Design of an Ontology for ATT&CK and its application to Cybersecurity 23

The Design of an Ontology for ATT&CK and its Application to ...

引用

13th acm conference on data and application security and privacy (codaspy)

作者： Akbar, Khandakar Ashrafi Halim, Sadaf Md Singhal, Anoop Abdeen, Basel Khan, Latifur thuraisingham, Bhavani Univ Texas Dallas Richardson TX 75083 USA Natl Inst Stand & Technol Gaithersburg MD 20899 USA

ISBN: (纸本)9798400700675

the spread of attacks in computer networks and within systems can have severe consequences for both individuals and organizations. One approach to preventing the spread of attacks is to use ontological aid, which is the use of ontologies to provide a structured representation of knowledge about the attack and its components, especially the ones who often disguise themselves to remain undetected for a long time within the system. As soon as one particular stage of such an attack is detected, it is imperative to reduce the amount of spread so that no permanent damage can be done. For this, the security analyst must boil down to technical details from a behavioral perspective so that proper defensive initiatives can be taken. We propose an ontology that will aid security analysts to find out the list of vulnerabilities to be patched so that an ongoing attack campaign can be prevented from spreading even more.

关键词： Ontology MITRE ATT&CK Framework Cyber Response

来源：评论

学校读者我要写书评

暂无评论

Infotainment System Matters: Understanding the Impact and Implications of In-Vehicle Infotainment System Hacking with Automotive Grade Linux 23

Infotainment System Matters: Understanding the Impact and Im...

引用

13th acm conference on data and application security and privacy (codaspy)

作者： Jeong, Seonghoon Ryu, Minsoo Kang, Hyunjae Kim, Huy Kang Korea Univ Sch Cybersecur Seoul South Korea

ISBN: (纸本)9798400700675

An in-vehicle infotainment (IVI) system is connected to heterogeneous networks such as Controller Area Network bus, Bluetooth, Wi-Fi, cellular, and other vehicle-to-everything communications. An IVI system has control of a connected vehicle and deals with privacy-sensitive information like current geolocation and destination, phonebook, SMS, and driver's voice. Several offensive studies have been conducted on IVI systems of commercialized vehicles to show the feasibility of car hacking. However, to date, there has been no comprehensive analysis of the impact and implications of IVI system exploitations. To understand security and privacy concerns, we provide our experience hosting an IVI system hacking competition, Cyber security Challenge 2021 (CSC2021). We use a feature-flavored infotainment operating system, Automotive Grade Linux (AGL). the participants gathered and submitted 33 reproducible and verified proofs-of-concept exploit codes targeting 11 components of the AGL-based IVI testbed. the participants exploited four vulnerabilities to steal various data, manipulate the IVI system, and cause a denial of service. the data leakage includes privacy, personally identifiable information, and cabin voice. the participants proved lateral movement to electronic control units and smartphones. We conclude with lessons learned with three mitigation strategies to enhance the security of the IVI system.

关键词： car hacking cybersecurity competition vulnerability exploit Automotive Grade Linux privacy leakage

来源：评论

学校读者我要写书评

暂无评论

privacy-Preserving Fully Online Matching with Deadlines 23

Privacy-Preserving Fully Online Matching with Deadlines

引用

13th acm conference on data and application security and privacy (codaspy)

作者： Klinger, Andreas Meyer, Ulrike Rhein Westfal TH Aachen Aachen Germany

ISBN: (纸本)9798400700675

In classical secure multi-party computation (SMPC) it is assumed that a fixed and a priori known set of parties wants to securely evaluate a function of their private inputs. this assumption implies that online problems, in which the set of parties that arrive and leave over time are not a priori known, are not covered by the classical setting. therefore, the notion of online SMPC has been introduced, and a general feasibility result has been proven that shows that any online algorithm can be implemented as a distributed protocol that is secure in this setting [22, 23]. However, so far, no online SMPC protocol that implements a concrete online algorithm has been proposed and evaluated such that the practicality of the constructive proof is an open question. We close this gap and propose the first privacy-preserving online SMPC protocol for the prominent problem of fully online matching with deadlines. In this problem an (a priori unknown) set of parties with their inputs arrive over time and can then be matched with other parties until they leave when their individual deadline is reached. We prove that our protocol is statistically secure in the presence of a semi-honest adversary that controls strictly less than half of the parties present at each point in time. We extensively evaluate the performance of our protocol in three different network settings, various input sizes and different matching conditions, as well as various numbers of parties.

关键词： SMPC online matching privacy

来源：评论

学校读者我要写书评

暂无评论

Anonymous System for Fully Distributed and Robust Secure Multi-Party Computation 23

Anonymous System for Fully Distributed and Robust Secure Mul...

引用

13th acm conference on data and application security and privacy (codaspy)

作者： Klinger, Andreas Battermann, Felix Meyer, Ulrike Rhein Westfal TH Aachen Aachen Germany

ISBN: (纸本)9798400700675

In secure multi-party computation (SMPC), it is considered that multiple parties that are known to each other evaluate a function over their private inputs in a secure fashion. the participating parties do not learn anything about each other's private inputs beyond what can be deduced from their own input and output. the assumption that the parties know each other, however, does not seem suitable for all potential applications of SMPC. In some applications participants may not only want to hide their private inputs and outputs, but may also want to hide the fact that they are participating in a given function evaluation in the first place. We therefore propose an anonymous system for SMPC that allows parties to anonymously evaluate a function of their private inputs in a fully distributed and secure fashion. the proposed system allows authorized parties to execute an SMPC protocol robust with penalty against a dishonest majority in the presence of a malicious adversary. During the protocol execution, the system guarantees that all participating parties stay anonymous w.r.t. each other as well as any third parties. In addition, it guarantees that in each function evaluation all participating parties are unique, i.e., no party can participate as more than one entity.

关键词： SMPC anonymity privacy

来源：评论

学校读者我要写书评

暂无评论

SCAtt-man: Side-Channel-Based Remote Attestation for Embedded Devices that Users Understand 23

SCAtt-man: Side-Channel-Based Remote Attestation for Embedde...

引用

13th acm conference on data and application security and privacy (codaspy)

作者： Surminski, Sebastian Niesler, Christian Linsner, Sebastian Davi, Lucas Reuter, Christian Univ Duisburg Essen Essen Germany Tech Univ Darmstadt Darmstadt Germany

ISBN: (纸本)9798400700675

From the perspective of end-users, IoT devices behave like a black box: As long as they work as intended, users will not detect any compromise. Users have minimal control over the software. Hence, it is very likely that the user misses that illegal recordings and transmissions occur if a security camera or a smart speaker is hacked. In this paper, we present SCAtt-man, the first remote attestation scheme that is specifically designed with the user in mind. SCAtt-man deploys software-based attestation to check the integrity of remote devices, allowing users to verify the integrity of IoT devices with their smartphones. the key novelty of SCAtt-man resides in the utilization of user-observable side-channels such as light or sound in the attestation protocol. Our proof-of-concept implementation targets a smart speaker and an attestation protocol that is based on a data-over-sound protocol. Our evaluation demonstrates the effectiveness of SCAtt-man against a variety of attacks and its usability based on a user study with 20 participants.

关键词： attestation firmware security IoT smart speaker

来源：评论

学校读者我要写书评

暂无评论

All Your IoT Devices Are Belong to Us: securityWeaknesses in IoT Management Platforms 23

All Your IoT Devices Are Belong to Us: SecurityWeaknesses in...

引用

13th acm conference on data and application security and privacy (codaspy)

作者： Tejaswi, Bhaskar Mannan, Mohammad Youssef, Amr Concordia Univ Montreal PQ Canada

ISBN: (纸本)9798400700675

IoT devices have become an integral part of our day to day activities, and are also being deployed to fulfil a number of industrial, enterprise and agricultural use cases. To efficiently manage and operate these devices, the IoT ecosystem relies on several IoT management platforms. Given the security-sensitive nature of the operations performed by these platforms, analyzing them for security vulnerabilities is critical to protect the ecosystem from potential cyber threats. In this work, by exploring the core functionalities offered by leading platforms, we first design a security evaluation framework. Subsequently, we use our framework to analyze 42 IoT management platforms. Our analysis uncovers a number of high severity unauthorized access vulnerabilities in 9/42 platforms, which could lead to attacks such as remote SIM deactivation, IoT SIM overcharging and device data forgery. Furthermore, we find broken authentication in 11/42 platforms, including complete account takeover on 7/42 platforms, along with remote code execution on one of the platforms. Overall, on 11/42 platforms, we find vulnerabilities that could lead to platform-wide attacks, that affect all users and all devices connected to those platforms.

关键词： IoT management platforms IoT security Web security

来源：评论

学校读者我要写书评

暂无评论

IdDecoder: A Face Embedding Inversion Tool and its privacy and security Implications on Facial Recognition Systems 23

IdDecoder: A Face Embedding Inversion Tool and its Privacy a...

引用

13th acm conference on data and application security and privacy (codaspy)

作者： Minh-Ha Le Carlsson, Niklas Linkoping Univ Linkoping Sweden

ISBN: (纸本)9798400700675

Most state-of-the-art facial recognition systems (FRS:s) use face embeddings. In this paper, we present the IdDecoder framework, capable of effectively synthesizing realistic-neutralized face images from face embeddings, and two effective attacks on state-of-the-art facial recognition models using embeddings. the first attack is a black-box version of a model inversion attack that allows the attacker to reconstruct a realistic face image that is both visually and numerically (as determined by the FRS:s) recognized as the same identity as the original face used to create a given face embedding. this attack raises significant privacy concerns regarding the membership of the gallery dataset of these systems and highlights the importance of both the people designing and deploying FRS:s paying greater attention to the protection of the face embeddings than currently done. the second attack is a novel attack that performs the model inversion, so to instead create the face of an alternative identity that is visually different from the original identity but has close identity distance (ensuring that it is recognized as being of the same identity). this attack increases the attacked system's false acceptance rate and raises significant security concerns. Finally, we use IdDecoder to visualize, evaluate, and provide insights into differences between three state-of-the-art facial embedding models.

关键词： Face embedding inversion Black-box attack Facial recognition

来源：评论

学校读者我要写书评

暂无评论

Tool/dataset Paper: Realistic ABAC data Generation using Conditional Tabular GAN 23

Tool/Dataset Paper: Realistic ABAC Data Generation using Con...

引用

13th acm conference on data and application security and privacy (codaspy)

作者： Rai, Ritwik Sural, Shamik Indian Inst Technol Kharagpur Kharagpur W Bengal India

ISBN: (纸本)9798400700675

Attribute-based Access Control (ABAC) is increasingly being used in a wide variety of applications that include cloud services, IoT, smart homes, healthcare and several others. Conducting systematic and reproducible experiments with benchmark realistic datasets, however, still remains a challenge. To address this shortcoming, in this paper we introduce a method called ConGRASS (Conditional Tabular GAN for Realistic ABAC Simulation Studies) for generating large ABAC datasets. Starting with a given real world dataset of (potentially) limited size, we first train a conditional tabular generative adversarial network for learning its distribution. the trained model is used to generate realistic datasets of arbitrarily large sizes having distribution similar to the original dataset. ConGRASS has been implemented as a free to use web-based tool in which a user can choose the name of a listed real dataset along with the desired dataset size. A CSV file containing ABAC data is generated as output. Extensive evaluation shows the ability of the model to faithfully learn the statistical properties of the selected real data. When such a dataset is used in an actual problem, significant improvement in performance is achieved, proving the utility of ConGRASS.

关键词： Attribute-based Access Control (ABAC) Conditional GAN Tabular data generation ABAC simulation studies

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共5页 << < 1 2 3 4 5 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：