检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

46 篇 会议

馆藏范围

46 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

37 篇 工学
- 36 篇 计算机科学与技术...
- 20 篇 软件工程
- 8 篇 信息与通信工程
- 2 篇 安全科学与工程
- 2 篇 网络空间安全
- 1 篇 动力工程及工程热...
- 1 篇 电气工程
- 1 篇 建筑学
- 1 篇 土木工程
- 1 篇 生物医学工程（可授...
- 1 篇 生物工程
7 篇 理学
- 6 篇 数学
- 1 篇 生物学
4 篇 管理学
- 3 篇 图书情报与档案管...
- 1 篇 管理科学与工程(可...
3 篇 法学
- 2 篇 社会学
- 1 篇 法学
1 篇 医学
- 1 篇 基础医学(可授医学...
- 1 篇 临床医学
- 1 篇 药学(可授医学、理...
1 篇 军事学

主题

4 篇 sensitive data
4 篇 security
2 篇 static analysis
2 篇 network security
2 篇 cloud computing
2 篇 privacy
1 篇 pattern mining
1 篇 intrusion detect...
1 篇 iot devices
1 篇 health
1 篇 role-based acces...
1 篇 data security
1 篇 access control
1 篇 bindiff
1 篇 human behavior
1 篇 graph database
1 篇 interoperability
1 篇 data privacy
1 篇 smartphones
1 篇 barbican

机构

1 篇 department of co...
1 篇 univ tokyo bunky...
1 篇 stevens inst tec...
1 篇 the pennsylvania...
1 篇 qinghai universi...
1 篇 university of mi...
1 篇 school of electr...
1 篇 kth royal inst t...
1 篇 purdue universit...
1 篇 astar inst infoc...
1 篇 north carolina s...
1 篇 politehnica univ...
1 篇 school of comput...
1 篇 university of lu...
1 篇 fraunhofer aisec...
1 篇 ibm tj watson re...
1 篇 vtt technical re...
1 篇 umass boston uni...
1 篇 bionym inc. on
1 篇 gh raisoni coll ...

作者

2 篇 rizvi syed zain ...
2 篇 islam mohammad s...
2 篇 rughinis razvan
2 篇 ghinita gabriel
2 篇 maiti rajib ranj...
2 篇 kuzu mehmet
2 篇 fong philip w. l...
2 篇 kantarcioglu mur...
1 篇 hsiao shou-ching
1 篇 sistla a. prasad
1 篇 le traon yves
1 篇 litton jan-eric
1 篇 guanyu tian
1 篇 madhavan krishna
1 篇 lovat enrico
1 篇 li yingjiu
1 篇 forg fabian
1 篇 saji nobuyuki
1 篇 michael mitchell
1 篇 chen shanji

语言

46 篇 英文

检索条件"任意字段=4th ACM Conference on Data and Application Security and Privacy, CODASPY 2014"

共 46 条记录，以下是1-10 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

IoTFuzzSentry: Hunting Bugs In the IoT Wilderness In Operational Phase Using Payload Fuzzing 24

IoTFuzzSentry: Hunting Bugs In The IoT Wilderness In Operati...

引用

14th acm conference on data and application security and privacy (acm codaspy)

作者： Chaudhary, Priyanka Rushikesh Krishna, N. Pranav Maiti, Rajib Ranjan BITS Pilani Hyderabad Campus Secunderabad India

ISBN: (纸本)9798400704215

In the operational phase, an IoT device runs a light-weight server that is responsible for responding to the user queries, like accessing video and taking a snap in a IoT camera. the flaws in the implementation of certain security mechanisms in these IoT devices can lead to varying level of security threats. In this paper, we address the problems of discovering such vulnerabilities using effective fuzzing via crafted transport and upper layer protocol packets in IoT communication. We have designed and developed a mutation-based fuzzing tool, named IoTFuzzSentry, to discover certain non-trivial vulnerabilities in commercial IoT devices and demonstrate their potential exploits. We have used IoT devices, like IP cameras and Smart Plug. We have categorized the vulnerabilities into four types (IoT Credential Leakage (V1), Sneak IP camera live video stream (V2), Creep Live IoT Image (V3), IoT Command Injection (V4)) and show their exploits using three IoT devices. We have reported all these vulnerabilities to respective vendors via email. We believe that our IoTFuzzSentry has a great potential to discover such unconventional security threats and allow IoT vendors to strengthen the security of their commercialized devices.

关键词： Mutation Fuzzing IoT Devices Vulnerability privacy

来源：评论

学校读者我要写书评

暂无评论

Examining Cryptography and Randomness Failures in Open-Source Cellular Cores 24

Examining Cryptography and Randomness Failures in Open-Sourc...

引用

14th acm conference on data and application security and privacy (acm codaspy)

作者： English, K. Virgil Bennett, Nathaniel thorn, Seaver Butler, Kevin R. B. Enck, William Traynor, Patrick North Carolina State Univ Raleigh NC 27695 USA Univ Florida Gainesville FL USA

ISBN: (纸本)9798400704215

Industry is increasingly adopting private 5G networks to securely manage their wireless devices in retail, manufacturing, natural resources, and healthcare. As with most technology sectors, open-source software is well poised to form the foundation of deployments, whether it is deployed directly or as part of well-maintained proprietary offerings. this paper seeks to examine the use of cryptography and secure randomness in open-source cellular cores. We design a set of 13 CodeQL static program analysis rules for cores written in both C/C++ and Go and apply them to 7 open-source cellular cores implementing 4G and 5G functionality. We identify two significant security vulnerabilities, including predictable generation of TMSIs and improper verification of TLS certificates, with each vulnerability affecting multiple cores. In identifying these flaws, we hope to correct implementations to fix downstream deployments and derivative proprietary projects.

关键词： cellular core security cryptography misuse static analysis

来源：评论

学校读者我要写书评

暂无评论

Guarding the Wi-Fi 4-Way Handshake against Channel-based MiTM: A case study on KRACK attack 24

Guarding the Wi-Fi 4-Way Handshake against Channel-based MiT...

引用

14th acm conference on data and application security and privacy (acm codaspy)

作者： Agrawal, Anand Maiti, Rajib Ranjan Birla Inst Technol & Sci Pilani Dept CSIS Hyderabad Campus Hyderabad India

ISBN: (纸本)9798400704215

In the rapidly evolving digital age, the security of wireless networks is paramount. In this paper, we present a comprehensive analysis and defense mechanism against Key Reinstallation Attacks (KRACKs) targeting the Wi-Fi Protected Access II (WPA2) protocol suite. WPA2 is vulnerable to KRACK, where an attacker replays a specific set of packets in the 4-way handshake used in WPA2 to install a Pairwise Transient Key (PTK) in both the client and Access Point (AP). We have proposed a scheme to add a channel feature in the packets that are exchanged in the 4-way handshake to guard against channel-based Man-in-the-Middle (MiTM), which is an essential pre-condition for KRACK. In particular, we propose to integrate message 1 (msg-1) and message 3 (msg-3) of handshake with the channel number that has been advertised in the beacon frames. In addition to the predefined parameters in the msg-1 and msg-3, the AP sends an authenticated channel number to the client. On receiving, the client first validates the authenticated channel number and then processes the other parameters in these two messages. this paper details the implementation and evaluation of our solution, demonstrating its effectiveness in thwarting KRACK without compromising network performance or user convenience.

关键词： Wi-Fi KRACK Channel-based MiTM

来源：评论

学校读者我要写书评

暂无评论

Risky Cohabitation: Understanding and Addressing Over-privilege Risks of Commodity application Virtualization Platforms in Android 24

Risky Cohabitation: Understanding and Addressing Over-privil...

引用

14th acm conference on data and application security and privacy (acm codaspy)

作者： Hsiao, Shou-Ching Li, Shih-Wei Hsiao, Hsu-Chun Natl Taiwan Univ Taipei Taiwan Acad Sinica Taipei Taiwan

ISBN: (纸本)9798400704215

the Android system protects its users' privacy via app permissions, which govern apps' access to sensitive data and resources. However, recent research has reported that, during app virtualization, the current Android permission model fails to prevent illegal permission usage: apps can exploit the User ID shared among co-hosted apps in the same virtualized environment to perform unauthorized actions. To the best of our knowledge, such over-privilege issues have not been thoroughly investigated;neither has a practical defense proposed to address them. To fill those gaps, this paper introduces a taxonomy of over-privilege issues in the context of app virtualization and presents an automated tool called PermLabel to investigate their prevalence and impact in real-world apps. By testing 826 real-world apps, PermLabel identified 254 (31%) as having over-privilege issues. Among the found apps, 244 (96%) have at least one over-privileged runtime permission, which poses a substantial risk to user privacy. Our analysis of these identified cases uncovered common causes and abuses of over-privileged permissions. Notably, the majority of such permissions grant access to sensitive data such as location, camera, and phone state. these issues predominantly stem from the app's code and third-party libraries intended for advertising and analytics. To restore compliance with the Android permission model, we also propose a defense solution, PermSep, that enforces fine-grained permission separation among co-hosted apps while preserving normal app-virtualization usage. Evaluation of PermSep on 17 virtualization apps shows successful blocking of over-privilege, achieving desired properties not attainable by previous work.

关键词： Over-privilege App Virtualization Android Permissions

来源：评论

学校读者我要写书评

暂无评论

codaspy 2014 - Proceedings of the 4th acm conference on data and application security and privacy

CODASPY 2014 - Proceedings of the 4th ACM Conference on Data...

引用

4th acm conference on data and application security and privacy, codaspy 2014

ISBN: (纸本)9781450322782

the proceedings contain 41 papers. the topics discussed include: on the suitability of dissemination-centric access control systems for group-centric sharing;Streamforce: outsourcing access control enforcement for stream data to the clouds;automated black-box detection of access control vulnerabilities in web applications;PhishSafe: leveraging modern Javascript API's for transparent and robust protection;COMPARS: toward an empirical approach for comparing the resilience of reputation systems;situational awareness through reasoning on network incidents;measuring the robustness of source program obfuscation: studying the impact of compiler optimizations on the obfuscation of C programs;interaction provenance model for unified authentication factors in service oriented computing;POSTER: a pairing-free certificateless hybrid signcryption scheme for advanced metering infrastructures;and DIVILAR: diversifying intermediate language for anti-repackaging on Android platform.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Large Scale PoC Experiment with 57,000 people to Accumulate Patterns for Lifestyle Authentication 19

Large Scale PoC Experiment with 57,000 people to Accumulate ...

引用

9th acm conference on data and application security and privacy (codaspy)

作者： Kobayashi, Ryosuke Saji, Nobuyuki Shigeta, Nobuo Yamaguchi, Rie Shigetomi Mitsubishi Elect Informat Syst Corp Minato Ku 4-13-23 Shibaura Tokyo 1080023 Japan INFOCORPUS Inc Meguro Ku 3-5-1 Shimomeguro Tokyo 1530064 Japan Univ Tokyo Bunkyo Ku 7-3-1 Hongo Tokyo 1138656 Japan

ISBN: (纸本)9781450360999

the spread of ICT has made it possible for people to use various online services via the Internet. User authentication technique is important for using online services in order to confirm that the user is legitimate. there are already some authentication methods, but several problems have been pointed out in them. We focused attention on lifestyle authentication as a new individual authentication method, that utilizes human behavior information. then, we conducted a large scale PoC experiment in order to collect human behavior information, and we succeeded in gathering data of about 57,000 people. By analyzing the collected data, we found that human behavior is patterned. In this paper, we introduce the large scale PoC experiment and the analysis result of human behavior.

关键词： Lifestyle Authentication Human Behavior IoT Smartphone

来源：评论

学校读者我要写书评

暂无评论

A deep learning approach for detecting security attacks on blockchain 4

A deep learning approach for detecting security attacks on b...

引用

4th Italian conference on Cyber security, ITASEC 2020

作者： Scicchitano, Francesco Liguori, Angelica Guarascio, Massimo Ritacco, Ettore Manco, Giuseppe ICAR-CNR Via P. Bucci 8/9c Rende Italy

In these last years, Blockchain technologies have been widely used in several application fields to improve data privacy and trustworthiness and security of systems. Although the blockchain is a powerful tool, it is not immune to cyber attacks: for instance, recently (January 2019) a successful 51% attack on Ethereum Classic has revealed security vulnerabilities of its platform. Under a statistical perspective, attacks can be seen as an anomalous observation, with a strong deviation from the regular behavior. Machine Learning is a science whose goal is to learn insights, patterns and outliers within large data repositories;hence, it can be exploit for blockchain attack detection. In this work, we define an anomaly detection system based on a encoder-decoder deep learning model, that is trained exploiting aggregate information extracted by monitoring blockchain activities. Experiments on complete historical logs of Ethereum Classic network prove the capability of the our model to effectively detect the publicly reported attacks. To the best of our knowledge, our approach is the first one that provides a comprehensive and feasible solution to monitor the security of blockchain transactions. Copyright © 2020 for this paper by its authors.

关键词： Anomaly detection

来源：评论

学校读者我要写书评

暂无评论

Efficient Authorization of Graph database Queries in an Attribute-Supporting ReBAC Model 18

Efficient Authorization of Graph Database Queries in an Attr...

引用

8th acm conference on data and application security and privacy (codaspy)

作者： Rizvi, Syed Zain R. Fong, Philip W. L. Univ Calgary Calgary AB Canada

ISBN: (纸本)9781450356329

Neo4j is a popular graph database that offers two versions;a paid enterprise edition and a free community edition. the enterprise edition offers customizable Role-Based Access Control (RBAC) features through custom developed procedures, while the community edition does not offer any access control support. Being a graph database, Neo4j is a natural application for Relationship-Based Access Control (ReBAC), an access control paradigm where authorization decisions are based on relationships between subjects and resources in the system. In this paper we present AReBAC, an attribute-supporting ReBAC model for Neo4j (applicable to both editions) that provides finer grained access control. AReBAC employs Nano-Cypher, a declarative policy language based on Neo4j's Cypher query language, the result of which allows us to weave database queries with access control policies and evaluate both simultaneously. Evaluating the combined query and policy produces a result that i) matches the search criteria, and ii) the requesting subject has access to. Our experiments show that our evaluation algorithm performs faster than Neo4j's query evaluation engine when evaluating queries that are expressible using Nano-Cypher.

关键词： Relatioship-BasedAccess Control Attributes Graph database Neo4j

来源：评论

学校读者我要写书评

暂无评论

SCLib: A Practical and Lightweight Defense against Component Hijacking in Android applications 18

SCLib: A Practical and Lightweight Defense against Component...

引用

8th acm conference on data and application security and privacy (codaspy)

作者： Wu, Daoyuan Cheng, Yao Gao, Debin Li, Yingjiu Deng, Robert H. Singapore Management Univ Sch Informat Syst Singapore Singapore ASTAR Inst Infocomm Res Singapore Singapore Singapore Management Univ Singapore Singapore

ISBN: (纸本)9781450356329

Cross-app collaboration via inter-component communication is a fundamental mechanism on Android. Although it brings the benefits such as functionality reuse and data sharing, a threat called component hijacking is also introduced. By hijacking a vulnerable component in victim apps, an attack app can escalate its privilege for operations originally prohibited. Many prior studies have been performed to understand and mitigate this issue, but no defense is being deployed in the wild, largely due to the deployment difficulties and performance concerns. In this paper we present SCLib, a secure component library that performs in-app mandatory access control on behalf of app components. It does not require firmware modification or app repackaging as in previous works. the library-based nature also makes SCLib more accessible to app developers, and enables them produce secure components in the first place over fragmented Android devices. As a proof of concept, we design six mandatory policies and overcome unique implementation challenges to mitigate attacks originated from both system weaknesses and common developer mistakes. Our evaluation using ten high-profile open source apps shows that SCLib can protect their 35 risky components with negligible code footprint (less than 0.3% stub code) and nearly no slowdown to normal intra-app communication. the worst-case performance overhead is only about 5%.

关键词： android security mobile security component hijacking

来源：评论

学校读者我要写书评

暂无评论

Efficient Commodity Matching for privacy-Preserving Two-Party Bartering 17

Efficient Commodity Matching for Privacy-Preserving Two-Part...

引用

7th acm conference on data and application security and privacy (codaspy)

作者： Forg, Fabian Wetzel, Susanne Meyer, Ulrike Stevens Inst Technol Hoboken NJ 07030 USA Rhein Westfal TH Aachen Aachen Germany

ISBN: (纸本)9781450345231

Current bartering platforms place the burden of finding simultaneously executable quotes on their users. In addition, these bartering platforms do not keep quotes private. To address these shortcomings, this paper introduces a privacy-preserving bartering protocol secure in the semi-honest model. At its core, the novel bartering protocol uses a newly-developed bipartite matching protocol which determines simultaneously executable quotes in an efficient manner. While the new privacy-preserving bipartite matching protocol does not always yield the maximal set of simultaneously executable quotes, it keeps the parties' quotes private at all times. Moreover, our new privacy-preserving bipartite matching protocol is more efficient than existing solutions in that it only requires linear communication in the number of quotes the parties specify.

关键词： secure multi-party computation bartering semi-honest model bipartite matching set intersection privacy-preserving

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共5页 << < 1 2 3 4 5 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：