检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

43 篇 会议

馆藏范围

43 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

30 篇 工学
- 28 篇 计算机科学与技术...
- 16 篇 软件工程
- 6 篇 信息与通信工程
- 3 篇 电气工程
- 3 篇 安全科学与工程
- 2 篇 控制科学与工程
- 1 篇 电子科学与技术（可...
- 1 篇 石油与天然气工程
7 篇 管理学
- 5 篇 图书情报与档案管...
- 3 篇 管理科学与工程(可...
- 2 篇 工商管理
6 篇 理学
- 6 篇 数学
- 1 篇 系统科学
- 1 篇 统计学（可授理学、...
1 篇 经济学
- 1 篇 应用经济学

主题

4 篇 privacy
3 篇 machine learning
3 篇 mobile security
2 篇 access control
2 篇 big data
2 篇 androids
2 篇 sensitive data
2 篇 static analysis
2 篇 security
1 篇 obstruction
1 篇 consumers
1 篇 human behavior
1 篇 data privacy
1 篇 privacy policy
1 篇 linux
1 篇 smartphones
1 篇 security model
1 篇 business process
1 篇 one time passwor...
1 篇 cryptography mis...

机构

2 篇 computer science...
2 篇 google inc. irvi...
1 篇 natl res univ hi...
1 篇 department of ps...
1 篇 linköping univer...
1 篇 univ tokyo bunky...
1 篇 mobileevolution ...
1 篇 dept. of electri...
1 篇 key laboratory o...
1 篇 ericsson secur r...
1 篇 astar inst infoc...
1 篇 north carolina s...
1 篇 dept. of compute...
1 篇 university of pi...
1 篇 snt university o...
1 篇 department of co...
1 篇 unc dept comp sc...
1 篇 university of pa...
1 篇 mitsubishi elect...
1 篇 purdue universit...

作者

2 篇 shu xiaokui
2 篇 yao danfeng daph...
2 篇 krishnan ram
2 篇 ravishankar chin...
2 篇 sandhu ravi
2 篇 dautrich jonatha...
1 篇 crispo bruno
1 篇 hu xiaohan
1 篇 günter karjoth
1 篇 jiang rong
1 篇 li xiong
1 篇 lee adam j.
1 篇 li yingjiu
1 篇 saji nobuyuki
1 篇 carlsson niklas
1 篇 hornsburg kurt
1 篇 feng wu-chun
1 篇 patel hiren
1 篇 ahmadi mansour
1 篇 bharavi mishra

语言

43 篇 英文

检索条件"任意字段=5th ACM Conference on Data and Application Security and Privacy, CODASPY 2015"

共 43 条记录，以下是21-30 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

StaDynA: Addressing the problem of dynamic code updates in the security analysis of android applications 15

StaDynA: Addressing the problem of dynamic code updates in t...

引用

5th acm conference on data and application security and privacy, codaspy 2015

作者： Zhauniarovich, Yury Ahmad, Maqsood Gadyatskaya, Olga Crispo, Bruno Massacci, Fabio University of Trento Trento Italy SnT University of Luxembourg Luxembourg Luxembourg DistriNet KU Leuven Leuven Belgium

ISBN: (纸本)9781450331913

Static analysis of Android applications can be hindered by the presence of the popular dynamic code update techniques: dynamic class loading and reflection. Recent Android mal- ware samples do actually use these mechanisms to conceal their malicious behavior from static analyzers. these tech- niques defuse even the most recent static analyzers (e.g., [12, 21, 31]) that usually operate under the "closed world" assumption (the targets of reflective calls can be resolved at analysis time;only classes reachable from the class path at analysis time are used at runtime). Our proposed solution allows existing static analyzers to remove this assumption. this is achieved by combining static and dynamic analysis of applications in order to reveal the hidden/updated behav- ior and extend static analysis results with this information. this paper presents design, implementation and preliminary evaluation results of our solution called StaDynA. Copyright © 2015 acm.

关键词： Static analysis

来源：评论

学校读者我要写书评

暂无评论

CryptStream: Cryptographic access controls for streaming data 15

CryptStream: Cryptographic access controls for streaming dat...

引用

5th acm conference on data and application security and privacy, codaspy 2015

作者： thoma, Cory Lee, Adam J. Labrinidis, Alexandros University of Pittsburgh PittsburghPA15260 United States

ISBN: (纸本)9781450331913

With data becoming available in larger quantities and at higher rates, new data processing paradigms have been pro- posed to handle large and fast data. data Stream Processing is one such paradigm wherein transient data ows as streams through sets of continuous queries, only returning results when data is of interest to the querier, allowing uninterest- ing data to be ignored. To process these data streams, users are employing third party computational platforms or large private platforms to reduce the individual cost for querying and computing over data streams. Utilizing third parties for outsourcing computation means data being processed is available to the third party as well, which could violate the data provider's privacy. there has been research done into access control for streaming data, and these works provide a good first step, but fall short of a complete system. In this paper, we introduce CryptStream for cryptographically enforcing access controls over streaming data. CryptStream combines data providers access control policies with ones prescribed by the data consumer and the server as well. We show that CryptStream improves over earlier work in the same design space while providing smaller overheads and more flexibility. Copyright © 2015 acm.

关键词： Access control

来源：评论

学校读者我要写书评

暂无评论

Can't you hear me knocking: Identification of user actions on android apps via traffic analysis 15

Can't you hear me knocking: Identification of user actions o...

引用

5th acm conference on data and application security and privacy, codaspy 2015

作者： Conti, Mauro Mancini, Luigi V. Spolaor, Riccardo Verde, Nino V. University of Padua Padua Italy Sapienza University of Rome Rome Italy

ISBN: (纸本)9781450331913

While smartphone usage become more and more pervasive, people start also asking to which extent such devices can be maliciously exploited as "tracking devices". the concern is not only related to an adversary taking physical or remote control of the device, but also to what a passive adversary without the above capabilities can observe from the device communications. Work in this latter direction aimed, for example, at inferring the apps a user has installed on his device, or identifying the presence of a specific user within a network. In this paper, we move a step forward: we investigate to which extent it is feasible to identify the specific actions that a user is doing on mobile apps, by eavesdropping their encrypted network traffic. We design a system that achieves this goal by using advanced machine learning techniques. We did a complete implementation of this system and run a thorough set of experiments, which show that it can achieve accuracy and precision higher than 95% for most of the considered actions. Copyright © 2015 acm.

关键词： Mobile security

来源：评论

学校读者我要写书评

暂无评论

Virtual resource orchestration constraints in cloud infrastructure as a service 15

Virtual resource orchestration constraints in cloud infrastr...

引用

5th acm conference on data and application security and privacy, codaspy 2015

作者： Bijon, Khalid Krishnan, Ram Sandhu, Ravi Institute for Cyber Security Univ of Texas at San Antonio United States

ISBN: (纸本)9781450331913

In an infrastructure as a service (IaaS) cloud, virtualized IT resources such as compute, storage and network are offered on demand by a cloud service provider (CSP) to its tenants (customers). A major problem for enterprise-scale tenants that typically obtain significant amount of resources from a CSP concerns orchestrating those resources in a secure manner. For instance, unlike configuring physical hardware, virtual resources in IaaS are configured using software, and hence prone to misconfigurations that can lead to critical security violations. Examples of such resource orchestration operations include creating virtual machines with appropri- ate operating system and software images depending on their purpose, creating networks, connecting virtual machines to networks, attaching a storage volume to a particular virtual machine, etc. In this paper, we propose attribute-based con- straints specification and enforcement as a means to mitigate this issue. High-level constraints specified using attributes of virtual resources prevent resource orchestration operations that can lead to critical misconfigurations. Our model al- lows tenants to customize the attributes of their resources and specify fine-grained constraints. We further propose a constraint mining approach to automatically generate con- straints once the tenants specify the attributes for virtual re- sources. We present our model, enforcement challenges, and its demonstration in OpenStack, the de facto open-source cloud IaaS software. Copyright © 2015 acm.

关键词： Virtual machine

来源：评论

学校读者我要写书评

暂无评论

Tunably-oblivious memory: Generalizing ORAM to enable privacy-efficiency tradeoffs 15

Tunably-oblivious memory: Generalizing ORAM to enable privac...

引用

5th acm conference on data and application security and privacy, codaspy 2015

作者： Dautrich, Jonathan Ravishankar, Chinya Google Inc. IrvineCA United States Computer Science and Engineering University of California Riverside United States

ISBN: (纸本)9781450331913

We consider the challenge of providing privacy-preserving access to data outsourced to an untrusted cloud provider. Even if data blocks are encrypted, access patterns may leak valuable information. Oblivious RAM (ORAM) protocols guarantee full access pattern privacy, but even the most efficient ORAMs to date require roughly l log2 N block transfers to satisfy an l-block query, for block store capacity N. We propose a generalized form of ORAM called Tunably- Oblivious Memory (λ-TOM) that allows a query's public access pattern to assume any of λ possible lengths. Increasing λ yields improved efficiency at the cost of weaker privacy guarantees. 1-TOM protocols are as secure as ORAM. We also propose a novel, special-purpose TOM protocol called Staggered-Bin TOM (SBT), which efficiently handles large queries that are not cache-friendly. We also propose a read-only SBT variant called Multi-SBT that can satisfy such queries with only O(l + logN) block transfers in the best case, and only O(l logN) transfers in the worst case, while leaking only O(log log logN) bits of information per query. Our experiments show that for N = 224 blocks, Multi-SBT achieves practical bandwidth costs as low as 6X those of an unprotected protocol for large queries, while leaking at most 3 bits of information per query. Copyright © 2015 acm.

关键词： Random access storage

来源：评论

学校读者我要写书评

暂无评论

Dimensions of risk in mobile applications: A user study 15

Dimensions of risk in mobile applications: A user study

引用

5th acm conference on data and application security and privacy, codaspy 2015

作者： Jorgensen, Zach Chen, Jing Gates, Christopher S. Li, Ninghui Proctor, Robert W. Yu, Ting Department of Computer Science North Carolina State University RaleighNC United States Department of Psychological Sciences CERIAS Purdue University West LafayetteIN United States Department of Computer Science CERIAS Purdue University West LafayetteIN United States Qatar Computing Research Institute Doha Qatar

ISBN: (纸本)9781450331913

Mobile platforms, such as Android, warn users about the permissions an app requests and trust that the user will make the correct decision about whether or not to install the app. Unfortunately many users either ignore the warning or fail to understand the permissions and the risks they imply. As a step toward developing an indicator of risk that decomposes risk into several categories, or dimensions, we conducted two studies designed to assess the dimensions of risk deemed most important by experts and novices. In Study 1, semi-structured interviews were conducted with 19 security experts, who also performed a card sorting task in which they categorized permissions. the experts identified three major risk dimensions in the interviews (personal information privacy, monetary risk, and device availability/ stability), and a forth dimension (data integrity) in the card sorting task. In Study 2, 350 typical Android users, recruited via Amazon Mechanical Turk, filled out a questionnaire in which they (a) answered questions concerning their mobile device usage, (b) rated how often they considered each of several types of information when installing apps, (c) indicated what they considered to be the biggest risk associated with installing an app on their mobile device, and (d) rated their concerns with regard to specific risk types and about apps having access to specific types of information. In general, the typical users' concerns were similar to those of the security experts. the results of the studies suggest that risk information should be organized into several risk types that can be better understood by users and that a mid-level risk summary should incorporate the dimensions of personal information privacy, monetary risk, device availability/ stability risk and data integrity risk. Copyright © 2015 acm.

关键词： Mobile security

来源：评论

学校读者我要写书评

暂无评论

Distributed search over encrypted big data 15

Distributed search over encrypted big data

引用

5th acm conference on data and application security and privacy, codaspy 2015

作者： Kuzu, Mehmet Islam, Mohammad Saiful Kantarcioglu, Murat Department of Computer Science University of Texas at Dallas RichardsonTX United States

ISBN: (纸本)9781450331913

Nowadays, huge amount of documents are increasingly trans- ferred to the remote servers due to the appealing features of cloud computing. On the other hand, privacy and se- curity of the sensitive information in untrusted cloud envi- ronment is a big concern. To alleviate such concerns, en- cryption of sensitive data before its transfer to the cloud has become an important risk mitigation option. Encrypted storage provides protection at the expense of a significant increase in the data management complexity. For effective management, it is critical to provide efficient selective doc- ument retrieval capability on the encrypted collection. In fact, considerable amount of searchable symmetric encryp- tion schemes have been designed in the literature to achieve this task. However, with the emergence of big data every- where, available approaches are insufficient to address some crucial real-world problems such as scalability. In this study, we focus on practical aspects of a secure keyword search mechanism over encrypted data. First, we propose a provably secure distributed index along with a parallelizable retrieval technique that can easily scale to big data. Second, we integrate authorization into the search scheme to limit the information leakage in multi-user setting where users are allowed to access only particular documents. third, we offer efficient updates on the distributed secure index. In addition, we conduct extensive empirical analysis on a real dataset to illustrate the efficiency of the proposed practical techniques. Copyright © 2015 acm.

关键词： Sensitive data

来源：评论

学校读者我要写书评

暂无评论

DetAnom: Detecting anomalous database transactions by insiders 15

DetAnom: Detecting anomalous database transactions by inside...

引用

5th acm conference on data and application security and privacy, codaspy 2015

作者： Hussain, Syed Rafiul Sallam, Asmaa Bertino, Elisa Dept. of Computer Science Purdue University United States Dept. of Computer Science Cyber Center Purdue University United States

ISBN: (纸本)9781450331913

databaseManagement Systems (DBMSs) provide access con- trol mechanisms that allow database administrators (DBA) to grant application programs access privileges to databases. However, securing the database alone is not enough, as at- tackers aiming at stealing data can take advantage of vul- nerabilities in the privileged applications and make applica- tions to issue malicious database queries. therefore, even though the access control mechanism can prevent applica- tion programs from accessing the data to which the pro- grams are not authorized, it is unable to prevent misuse of the data to which application programs are authorized for access. Hence, we need a mechanism able to detect mali- cious behavior resulting from previously authorized applica- tions. In this paper, we design and implement an anomaly detection mechanism, DetAnom, that creates a profile of the application program which can succinctly represent the ap- plication's normal behavior in terms of its interaction (i.e., submission of SQL queries) with the database. For each query, the profile keeps a signature and also the correspond- ing constraints that the application program must satisfy to submit that query. Later in the detection phase, whenever the application issues a query, the corresponding signature and constraints are checked against the current context of the application. If there is a mismatch, the query is marked as anomalous. the main advantage of our anomaly detection mechanism is that we need neither any previous knowledge of application vulnerabilities nor any example of possible at- tacks to build the application profiles. As a result, our De- tAnom mechanism is able to protect the data from attacks tailored to database applications such as code modification attacks, SQL injections, and also from other data-centric attacks as well. We have implemented our mechanism with a software testing technique called concolic testing and the PostgreSQL DBMS. Experimental results show that our

关键词： application programs

来源：评论

学校读者我要写书评

暂无评论

A privacy Enhanced security Framework for Android Users 5

A Privacy Enhanced Security Framework for Android Users

引用

5th International conference on IT Convergence and security (ICITCS)

作者： Singh, Shirish Kumar Mishra, Bharavi Gera, Poonam LNM Inst Informat Technol Comp Sci & Engn Dept Jaipur Rajasthan India

ISBN: (纸本)9781467365376

In the past few years, the primary focus of computing has shifted from PCs to smart-phones and tablets. As a result, smart-phones have become more than a communication device, now it can store vast amount of users sensitive data. Further, its popularity also opens a new era of application development;because of which Googles Play Store now contains millions of free Android applications. To use these applications users are bound to give the permission to access their data as a cost of the application. the required permissions, sometimes are genuine (such as location information required by Google map, etc), however in most of the cases they need unnecessary permissions due to which security and the privacy of user are hampered. Considering these facts, in this paper, we proposed a computationally efficient framework to enhance the privacy as well as the security of Android users.

关键词： privacy Methyltestosterone Androids Consumers security POSITION INFORMATION permission Micro computer Personal computers Popularity flexible AC transmission systems communication equipment

来源：评论

学校读者我要写书评

暂无评论

security of Web applications with short web service : a review Study 5

Security of Web Applications with short web service : a revi...

引用

5th International conference on Advanced Computing & Communication Technologies (ACCT)

作者： Ajay, Anadi Jaiswal, Arunima Verma, Kritika Amity Univ Comp Sci & Engn Noida 201313 India Amity Univ Noida 201313 India

ISBN: (纸本)9781479984886

Web application (WA) is considered as a secured communication different users. Whereas the data that can be held by the SMS is very limited (short) therefore it is called Short Messaging Service. At the SMS follow web application center Store and Forward technique is used for the routing and delivery of the SMS over a communication network. As in the case of emails the SMS may pass through different or many SMS Center in the process of routing of the SMS before it is received at the receiver's mobile.

关键词： web services security privacy requirement web security security architecture HTML XML

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共5页 << < 1 2 3 4 5 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：