检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

559 篇 会议
1 册 图书
1 篇 期刊文献

馆藏范围

561 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

434 篇 工学
- 421 篇 计算机科学与技术...
- 140 篇 软件工程
- 106 篇 信息与通信工程
- 28 篇 网络空间安全
- 21 篇 电气工程
- 12 篇 控制科学与工程
- 9 篇 安全科学与工程
- 5 篇 建筑学
- 4 篇 生物医学工程（可授...
- 4 篇 生物工程
- 3 篇 动力工程及工程热...
- 2 篇 机械工程
- 2 篇 仪器科学与技术
- 2 篇 土木工程
- 2 篇 测绘科学与技术
- 2 篇 交通运输工程
114 篇 理学
- 105 篇 数学
- 8 篇 统计学（可授理学、...
- 5 篇 生物学
- 5 篇 系统科学
- 2 篇 物理学
33 篇 管理学
- 21 篇 图书情报与档案管...
- 15 篇 管理科学与工程(可...
- 8 篇 工商管理
8 篇 法学
- 7 篇 社会学
4 篇 医学
- 4 篇 基础医学(可授医学...
- 4 篇 临床医学
- 2 篇 公共卫生与预防医...
- 2 篇 药学(可授医学、理...
3 篇 经济学
- 3 篇 应用经济学
1 篇 教育学
1 篇 军事学

主题

59 篇 privacy
44 篇 security
25 篇 data privacy
21 篇 differential pri...
21 篇 machine learning
20 篇 access control
13 篇 sensitive data
11 篇 iot
11 篇 android
11 篇 mobile security
10 篇 internet of thin...
10 篇 deep learning
9 篇 static analysis
9 篇 blockchain
8 篇 federated learni...
7 篇 homomorphic encr...
7 篇 authentication
7 篇 web security
7 篇 network security
7 篇 cloud security

机构

9 篇 purdue univ w la...
6 篇 north carolina s...
6 篇 rhein westfal th...
6 篇 carnegie mellon ...
5 篇 univ texas dalla...
4 篇 stevens inst tec...
4 篇 fraunhofer aisec...
4 篇 purdue universit...
4 篇 carnegie mellon ...
4 篇 concordia univ m...
3 篇 singapore inst t...
3 篇 ericsson secur r...
3 篇 purdue universit...
3 篇 ecole polytech f...
3 篇 umass boston bos...
3 篇 univ illinois ur...
3 篇 tech univ darmst...
3 篇 king's college l...
3 篇 university of pi...
3 篇 university of te...

作者

13 篇 bertino elisa
11 篇 sandhu ravi
7 篇 enck william
6 篇 ghinita gabriel
6 篇 meyer ulrike
6 篇 kantarcioglu mur...
5 篇 gupta maanak
5 篇 wang lingyu
4 篇 lee adam j.
4 篇 conti mauro
4 篇 murat kantarciog...
4 篇 elisa bertino
4 篇 liu fang
4 篇 mittal sudip
4 篇 gabriel ghinita
4 篇 gunter carl a.
4 篇 pourzandi makan
4 篇 pretschner alexa...
4 篇 wetzel susanne
4 篇 majumdar suryadi...

语言

557 篇 英文
3 篇 其他
1 篇 中文

检索条件"任意字段=Proceedings of the Eighth ACM Conference on Data and Application Security and Privacy"

共 561 条记录，以下是261-270 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

CODASPY 2017 - proceedings of the 7th acm conference on data and application security and privacy

CODASPY 2017 - Proceedings of the 7th ACM Conference on Data...

引用

7th acm conference on data and application security and privacy, CODASPY 2017

ISBN: (纸本)9781450345231

The proceedings contain 41 papers. The topics discussed include: Ghostbuster: a fine-grained approach for anomaly detection in file system accesses;mining attributed graphs for threat intelligence;statistical security incident forensics against data falsification in smart grid advanced metering infrastructure;canonical completeness in lattice-based languages for attribute-based access control;SAMPAC: socially-aware collaborative multi-party access control;achieving differential privacy in secure multiparty data aggregation protocols on star networks;sound and static analysis of session fixation vulnerabilities in PHP web applications;a new bloom filter structure for searchable encryption schemes;seamless and secure Bluetooth LE connection migration;differentially-private big data analytics for high-speed research network traffic measurement;comprehensive method for detecting phishing emails using correlation-based analysis and user participation;PT-CFI: transparent backward-edge control flow violation detection using Intel processor trace;fault attacks on encrypted general purpose compute platforms;analysis of exception-based control transfers;detecting ROP with statistical learning of program characteristics;and large-scale identification of malicious singleton files.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Cross-App Tracking via Nearby Bluetooth Low Energy Devices 18

Cross-App Tracking via Nearby Bluetooth Low Energy Devices

引用

8th acm conference on data and application security and privacy (CODASPY)

作者： Korolova, Aleksandra Sharma, Vinod Univ Southern Calif Los Angeles CA 90007 USA

ISBN: (纸本)9781450356329

Today an increasing number of consumer devices such as head phones, wearables, light bulbs and even baseball bats, are Bluetooth-enabled thanks to the widespread support of the technology by phone manufacturers and mobile operating system vendors. The ability for any device to seamlessly connect and exchange information with smartphones via Bluetooth Low Energy (BLE) protocol promises unlimited room for innovation. However, it also brings about new privacy challenges. We show that the BLE protocol together with the Bluetooth permission model implemented in the Android and iOS operating systems can be used for cross-app tracking unbeknownst to the individuals. Specifically, through experiments and analyses based on real-world smartphone data we show that by listening to advertising packets broadcasted by nearby BLE-enabled devices and recording information contained in them, app developers can derive fairly unique "fingerprints" for their users, which can be used for cross-app tracking, i.e., linking pseudonymous users of different apps to each other. We demonstrate that privacy protections put in place by the Bluetooth Special Interest Group, Google, and Apple are not sufficient to prevent such fingerprinting or to make cross-app tracking difficult to execute. Our main contribution is to demonstrate the feasibility of crossapp tracking using nearby BLE and raise awareness that changes are needed in order to prevent it from becoming widespread. We also propose mitigation strategies to decrease the feasibility of tracking using nearby BLE devices while preserving the utility of the BLE technology.

关键词： privacy bluetooth tracking

来源：评论

学校读者我要写书评

暂无评论

Securing Wireless Neurostimulators 18

Securing Wireless Neurostimulators

引用

8th acm conference on data and application security and privacy (CODASPY)

作者： Marin, Eduard Singelee, Dave Yang, Bohan Volski, Vladimir Vandenbosch, Guy A. E. Nuttin, Bart Preneell, Bart Katholieke Univ Leuven Imec COSIC Leuven Belgium Katholieke Univ Leuven ESAT TELEMIC Leuven Belgium UZ Leuven Neurosurg Leuven Belgium

ISBN: (纸本)9781450356329

Implantable medical devices (IMDs) typically rely on proprietary protocols to wirelessly communicate with external device programmers. In this paper, we fully reverse engineer the proprietary protocol between a device programmer and a widely used commercial neurostimulator from one of the leading IMD manufacturers. For the reverse engineering, we follow a black-box approach and use inexpensive hardware equipment. We document the message format and the protocol state-machine, and show that the transmissions sent over the air are neither encrypted nor authenticated. Furthermore, we conduct several software radio-based attacks that could compromise the safety and privacy of patients, and investigate the feasibility of performing these attacks in real scenarios. Motivated by our findings, we propose a security architecture that allows for secure data exchange between the device programmer and the neurostimulator. It relies on using a patient's physiological signal for generating a symmetric key in the neurostimulator, and transporting this key from the neurostimulator to the device programmer through a secret out-of-band (OOB) channel. Our solution allows the device programmer and the neurostimulator to agree on a symmetric session key without these devices needing to share any prior secrets;offers an effective and practical balance between security and permissive access in emergencies;requires only minor hardware changes in the devices;adds minimal computation and communication overhead;and provides forward and backward security. Finally, we implement a proof-of-concept of our solution.

关键词： Proprietary wireless communication protocol black-box reverse engineering low-cost randomness source security architecture

来源：评论

学校读者我要写书评

暂无评论

Remote Attestation for Low-End Prover Devices with Post-Quantum Capabilities 18

Remote Attestation for Low-End Prover Devices with Post-Quan...

引用

8th acm conference on data and application security and privacy (CODASPY)

作者： Liu, Xiruo Misoczki, Rafael Sastry, Manoj R. Intel Corp Intel Labs Hillsboro OR 97124 USA

ISBN: (纸本)9781450356329

Remote attestation is a well-established interactive technique to establish trust in the realm of connected devices. It allows a Prover device to attest its platform integrity to a Verifier device. Existing remote attestation protocols rely on classical asymmetric cryptography, which are too heavy for low-end Prover devices, and vulnerable to quantum attacks (a serious concern due to the long lifespan of IoT devices). Hash-Based Signatures (HBS) offer attractive performance and have capabilities to defeat quantum attacks. This paper presents several contributions in this context. First, we present an efficient remote attestation protocol that requires the Prover to perform only one-time HBS operations, which are very lightweight. Our protocol also proposes robust embedded techniques to refresh one-time keys that allow multiple attestations. Second, we present a simpler construction based on multi-time HBS scheme which does not depend on a trusted-third-party. Third, to demonstrate the feasibility of our protocols, we developed prototypes based on state-of-the-art HBS schemes (XMSS and WOTS+) for highly constrained platforms (Arduino 101) in both classical and post-quantum security settings. Finally, we present a comprehensive comparison between these strategies, including guidance on suitable use cases for each one of them. To summarize, our work demonstrates the feasibility of modern HBS constructions for remote attestation of highly-constrained devices.

关键词： Remote Attestation Hash-Based Signatures Post-Quantum Cryptography Internet of Things security

来源：评论

学校读者我要写书评

暂无评论

SecuPAN: A security Scheme to Mitigate Fragmentation-Based Network Attacks in 6LoWPAN 18

SecuPAN: A Security Scheme to Mitigate Fragmentation-Based N...

引用

8th acm conference on data and application security and privacy (CODASPY)

作者： Hossain, Mahmud Karim, Yasser Hasan, Ragib Univ Alabama Birmingham Dept Comp Sci SECRETLab Birmingham AL 35294 USA

ISBN: (纸本)9781450356329

6LoWPAN is a widely used protocol for communication over IPV6 Low-power Wireless Personal Area Networks. Unfortunately, the 6LoWPAN packet fragmentation mechanism possesses vulnerabilities that adversaries can exploit to perform network attacks. Lack of fragment authentication, payload integrity verification, and sender IP address validation lead to fabrication, duplication, and impersonation attacks. Moreover, adversaries can abuse the poor reassembly buffer management technique of the 6LoWPAN layer to perform buffer exhaustion and selective forwarding attacks. In this paper, we propose SecuPAN - a security scheme for mitigating fragmentation-based network attacks in 6LoWPAN networks and devices. We propose a Message Authentication Code based per-fragment integrity and authenticity verification scheme to defend against fabrication and duplication attacks. We also present a mechanism for computing datagram-tag and IPv6 address cryptographically to mitigate impersonation attacks. Additionally, our reputation-based buffer management scheme protects 6LoWPAN devices from buffer reservation attacks. We provide an extensive security analysis of SecuPAN to demonstrate that SecuPAN is secure against strong adversarial scenarios. We also implemented a prototype of SecuPAN on Contiki enabled IoT devices and provided a performance analysis of our proposed scheme.

关键词： Fragmentation security Service 6LoWPAN Threat Attack Adversary Internet of Things

来源：评论

学校读者我要写书评

暂无评论

SCLib: A Practical and Lightweight Defense against Component Hijacking in Android applications 18

SCLib: A Practical and Lightweight Defense against Component...

引用

8th acm conference on data and application security and privacy (CODASPY)

作者： Wu, Daoyuan Cheng, Yao Gao, Debin Li, Yingjiu Deng, Robert H. Singapore Management Univ Sch Informat Syst Singapore Singapore ASTAR Inst Infocomm Res Singapore Singapore Singapore Management Univ Singapore Singapore

ISBN: (纸本)9781450356329

Cross-app collaboration via inter-component communication is a fundamental mechanism on Android. Although it brings the benefits such as functionality reuse and data sharing, a threat called component hijacking is also introduced. By hijacking a vulnerable component in victim apps, an attack app can escalate its privilege for operations originally prohibited. Many prior studies have been performed to understand and mitigate this issue, but no defense is being deployed in the wild, largely due to the deployment difficulties and performance concerns. In this paper we present SCLib, a secure component library that performs in-app mandatory access control on behalf of app components. It does not require firmware modification or app repackaging as in previous works. The library-based nature also makes SCLib more accessible to app developers, and enables them produce secure components in the first place over fragmented Android devices. As a proof of concept, we design six mandatory policies and overcome unique implementation challenges to mitigate attacks originated from both system weaknesses and common developer mistakes. Our evaluation using ten high-profile open source apps shows that SCLib can protect their 35 risky components with negligible code footprint (less than 0.3% stub code) and nearly no slowdown to normal intra-app communication. The worst-case performance overhead is only about 5%.

关键词： android security mobile security component hijacking

来源：评论

学校读者我要写书评

暂无评论

Expiring Decisions for Stream-based data Access in a Declarative privacy Policy Framework 2

Expiring Decisions for Stream-based Data Access in a Declara...

引用

2nd International Workshop on Multimedia privacy and security (MPS)

作者： Martiny, Karsten Denker, Grit SRI Int 333 Ravenswood Ave Menlo Pk CA 94025 USA

ISBN: (纸本)9781450359887

This paper describes how a privacy policy framework can be extended with timing information to not only decide if requests for data are allowed at a given point in time, but also to decide for how long such permission is granted. Augmenting policy decisions with expiration information eliminates the need to reason about access permissions prior to every individual data access operation. This facilitates the application of privacy policy frameworks to protect multimedia streaming data where repeated re-computations of policy decisions are not a viable option. We show how timing information can be integrated into an existing declarative privacy policy framework. In particular, we discuss how to obtain valid expiration information in the presence of complex sets of policies with potentially interacting policies and varying timing information.

关键词： data privacy

来源：评论

学校读者我要写书评

暂无评论

CSP & Co. Can Save Us from a Rogue Cross-Origin Storage Browser Network! But for How Long? 18

CSP & Co. Can Save Us from a Rogue Cross-Origin Storage Brow...

引用

8th acm conference on data and application security and privacy (CODASPY)

作者： Rodriguez, Juan D. Parra Posegga, Joachim Univ Passau Passau Germany

ISBN: (纸本)9781450356329

We introduce a new browser abuse scenario where an attacker uses local storage capabilities without the website's visitor knowledge to create a network of browsers for persistent storage and distribution of arbitrary data. We describe how security-aware users can use mechanisms such as the Content security Policy (CSP), sandboxing, and third-party tracking protection, i.e., CSP & Company, to limit the network's effectiveness. From another point of view, we also show that the upcoming Suborigin standard can inadvertently thwart existing countermeasures, if it is adopted.

关键词： Web security WebRTC PostMessage Browser security Content security Policy Suborigins Parasitic Computing

来源：评论

学校读者我要写书评

暂无评论

A Domain is only as Good as its Buddies: Detecting Stealthy Malicious Domains via Graph Inference 18

A Domain is only as Good as its Buddies: Detecting Stealthy ...

引用

8th acm conference on data and application security and privacy (CODASPY)

作者： Khalil, Issa M. Guan, Bei Nabeel, Mohamed Yu, Ting Qatar Comp Res Inst Doha Qatar

ISBN: (纸本)9781450356329

Inference based techniques are one of the major approaches to analyze DNS data and detect malicious domains. The key idea of inference techniques is to first define associations between domains based on features extracted from DNS data. Then, an inference algorithm is deployed to infer potential malicious domains based on their direct/indirect associations with known malicious ones. The way associations are defined is key to the effectiveness of an inference technique. It is desirable to be both accurate (i.e., avoid falsely associating domains with no meaningful connections) and with good coverage (i.e., identify all associations between domains with meaningful connections). Due to the limited scope of information provided by DNS data, it becomes a challenge to design an association scheme that achieves both high accuracy and good coverage. In this paper, we propose a new approach to identify domains controlled by the same entity. Our key idea is an in-depth analysis of active DNS data to accurately separate public IPs from dedicated ones, which enables us to build high-quality associations between domains. Our scheme avoids the pitfall of naive approaches that rely on weak "co-IP" relationship of domains (i.e., two domains are resolved to the same IP) that results in low detection accuracy, and, meanwhile, identifies many meaningful connections between domains that are discarded by existing state-of-the-art approaches. Our experimental results show that the proposed approach not only significantly improves the domain coverage compared to existing approaches but also achieves better detection accuracy. Existing path-based inference algorithms are specifically designed for DNS data analysis. They are effective but computationally expensive. To further demonstrate the strength of our domain association scheme as well as improve the inference efficiency, we construct a new domain-IP graph that can work well with the generic belief propagation algorithm. Through compre

关键词： Malicious Domains Graph Inference DNS data Domain Association Belief Propagation

来源：评论

学校读者我要写书评

暂无评论

Secure Storage with Replication and Transparent Deduplication 18

Secure Storage with Replication and Transparent Deduplicatio...

引用

8th acm conference on data and application security and privacy (CODASPY)

作者： Leontiadis, Iraklis Curtmola, Reza Ecole Polytech Fed Lausanne Sch Comp & Commun Sci Lausanne Switzerland New Jersey Inst Technol Dept Comp Sci Newark NJ 07102 USA New Jersey Inst Technol Newark NJ 07102 USA

ISBN: (纸本)9781450356329

We seek to answer the following question: To what extent can we deduplicate replicated storage ? To answer this question, we design ReDup, a secure storage system that provides users with strong integrity, reliability, and transparency guarantees about data that is outsourced at cloud storage providers. Users store multiple replicas of their data at different storage servers, and the data at each storage server is deduplicated across users. Remote data integrity mechanisms are used to check the integrity of replicas. We consider a strong adversarial model, in which collusions are allowed between storage servers and also between storage servers and dishonest users of the system. A cloud storage provider (CSP) could store less replicas than agreed upon by contract, unbeknownst to honest users. ReDup defends against such adversaries by making replica generation to be time consuming so that a dishonest CSP cannot generate replicas on the fly when challenged by the users. In addition, ReDup employs transparent deduplication, which means that users get a proof attesting the deduplication level used for their files at each replica server, and thus are able to benefit from the storage savings provided by deduplication. The proof is obtained by aggregating individual proofs from replica servers, and has a constant size regardless of the number of replica servers. Our solution scales better than state of the art and is provably secure under standard assumptions.

关键词： remote data integrity checking RDIC replication deduplication

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共57页 << < 23 24 25 26 27 28 29 30 31 32 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：