检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

558 篇 会议
1 篇 期刊文献

馆藏范围

559 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

433 篇 工学
- 421 篇 计算机科学与技术...
- 140 篇 软件工程
- 105 篇 信息与通信工程
- 28 篇 网络空间安全
- 21 篇 电气工程
- 12 篇 控制科学与工程
- 9 篇 安全科学与工程
- 5 篇 建筑学
- 4 篇 生物工程
- 3 篇 动力工程及工程热...
- 3 篇 生物医学工程（可授...
- 2 篇 机械工程
- 2 篇 仪器科学与技术
- 2 篇 电子科学与技术（可...
- 2 篇 土木工程
- 2 篇 交通运输工程
115 篇 理学
- 106 篇 数学
- 8 篇 统计学（可授理学、...
- 5 篇 生物学
- 5 篇 系统科学
- 2 篇 物理学
33 篇 管理学
- 21 篇 图书情报与档案管...
- 15 篇 管理科学与工程(可...
- 8 篇 工商管理
8 篇 法学
- 7 篇 社会学
- 1 篇 法学
3 篇 经济学
- 3 篇 应用经济学
3 篇 医学
- 3 篇 基础医学(可授医学...
- 3 篇 临床医学
- 2 篇 公共卫生与预防医...
1 篇 教育学
1 篇 军事学

主题

60 篇 privacy
44 篇 security
25 篇 data privacy
21 篇 differential pri...
21 篇 machine learning
20 篇 access control
14 篇 sensitive data
11 篇 iot
11 篇 android
11 篇 mobile security
10 篇 internet of thin...
10 篇 deep learning
9 篇 static analysis
9 篇 blockchain
8 篇 federated learni...
7 篇 homomorphic encr...
7 篇 web security
7 篇 network security
7 篇 cloud security
7 篇 cloud computing

机构

8 篇 purdue univ w la...
6 篇 north carolina s...
6 篇 rhein westfal th...
6 篇 carnegie mellon ...
5 篇 univ texas dalla...
4 篇 stevens inst tec...
4 篇 fraunhofer aisec...
4 篇 purdue universit...
4 篇 carnegie mellon ...
4 篇 concordia univ m...
3 篇 singapore inst t...
3 篇 ericsson secur r...
3 篇 purdue universit...
3 篇 ecole polytech f...
3 篇 umass boston bos...
3 篇 univ illinois ur...
3 篇 tech univ darmst...
3 篇 king's college l...
3 篇 university of pi...
3 篇 university of te...

作者

13 篇 bertino elisa
11 篇 sandhu ravi
7 篇 enck william
6 篇 ghinita gabriel
6 篇 meyer ulrike
6 篇 kantarcioglu mur...
5 篇 gupta maanak
5 篇 wang lingyu
4 篇 lee adam j.
4 篇 conti mauro
4 篇 murat kantarciog...
4 篇 elisa bertino
4 篇 liu fang
4 篇 mittal sudip
4 篇 gabriel ghinita
4 篇 gunter carl a.
4 篇 pourzandi makan
4 篇 pretschner alexa...
4 篇 wetzel susanne
4 篇 majumdar suryadi...

语言

554 篇 英文
4 篇 其他
1 篇 中文

检索条件"任意字段=Proceedings of the Eleventh ACM Conference on Data and Application Security and Privacy"

共 559 条记录，以下是141-150 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Spend Your Budget Wisely: Towards an Intelligent Distribution of the privacy Budget in Differentially Private Text Rewriting 25

Spend Your Budget Wisely: Towards an Intelligent Distributio...

引用

proceedings of the Fifteenth acm conference on data and application security and privacy

作者： Stephen Meisenbacher Chaeeun Joy Lee Florian Matthes School of Computation Information and Technology Technical University of Munich Garching Germany

ISBN: (纸本)9798400714764

The task of Differentially Private Text Rewriting is a class of text privatization techniques in which (sensitive) input textual documents are rewritten under Differential privacy (DP) guarantees. The motivation behind such methods is to hide both explicit and implicit identifiers that could be contained in text, while still retaining the semantic meaning of the original text, thus preserving utility. Recent years have seen an uptick in research output in this field, offering a diverse array of word-, sentence-, and document-level DP rewriting methods. Common to these methods is the selection of a privacy budget (i.e., the ε parameter), which governs the degree to which a text is privatized. One major limitation of previous works, stemming directly from the unique structure of language itself, is the lack of consideration of where the privacy budget should be allocated, as not all aspects of language, and therefore text, are equally sensitive or personal. In this work, we are the first to address this shortcoming, asking the question of how a given privacy budget can be intelligently and sensibly distributed amongst a target document. We construct and evaluate a toolkit of linguistics- and NLP-based methods used to allocate a privacy budget to constituent tokens in a text document. In a series of privacy and utility experiments, we empirically demonstrate that given the same privacy budget, intelligent distribution leads to higher privacy levels and more positive trade-offs than a naive distribution of epsilon. Our work highlights the intricacies of text privatization with DP, and furthermore, it calls for further work on finding more efficient ways to maximize the privatization benefits offered by DP in text rewriting.

关键词： data privacy

来源：评论

学校读者我要写书评

暂无评论

Controlling security Rules Using Natural Dialogue: an application to Smart Home Care 21

Controlling Security Rules Using Natural Dialogue: an Applic...

引用

acm International Joint conference on Pervasive and Ubiquitous Computing (UbiComp) / acm International Symposium on Wearable Computers (ISWC)

作者： Goffinet, Stanley Schmitz, Donatien Zavalyshyn, Igor Legay, Axel Riviere, Etienne UCLouvain ICTEAM Ottignies Belgium

ISBN: (纸本)9781450384612

Smart home systems have revolutionized the way we interact with our living environment, but the concerns over sensor data privacy and security have become one of the major barriers to their widespread adoption. Despite a considerable research effort in designing secure access control mechanisms, the end users are still reluctant to use those either due to the complexity of the interfaces or because they do not have sufficient skills. For the elderly users the problem gets worse. Making the right security choices is increasingly more difficult for this group of users. To assist the elderly users in defining their access control policies, we design a dialogue-based system which allows to create new security rules or update existing ones in a simple and intelligible way using natural language and familiar terms.

关键词： privacy smart home elderly access control voice assistant

来源：评论

学校读者我要写书评

暂无评论

Enhanced Threat Modeling and Attack Scenario Generation for OAuth 2.0 Implementations: data/Toolset paper 25

Enhanced Threat Modeling and Attack Scenario Generation for ...

引用

proceedings of the Fifteenth acm conference on data and application security and privacy

作者： Pieter Philippaerts Stef Verreydt Wouter Joosen KU Leuven Leuven Belgium

ISBN: (纸本)9798400714764

OAuth 2.0 is a widely adopted authorization framework enabling secure, delegated access to resources on behalf of a user. While the protocol is robust when implemented correctly, real-world deployments often exhibit vulnerabilities due to misconfigurations, incomplete mitigations, or misunderstandings of its intricacies. (Semi-)automated testing is therefore essential to identify and address these security flaws. Among available tools, OAuch offers the most comprehensive benchmark for assessing OAuth IdP implementations by identifying potential threats based on the OAuth threat model and related standards. However, OAuch has notable limitations, including an incomplete threat model, ambiguous threat classifications, and a lack of support for multi-vulnerability attack scenarios. This paper presents enhancements to OAuch that improve the tool's usability, including enriched metadata, the introduction of attack scenarios for multi-threat analyses, and a likelihood assessment to prioritize mitigation efforts.

关键词： OAuth 2.0

来源：评论

学校读者我要写书评

暂无评论

TerrARA: Automated security Threat Modeling for Infrastructure as Code 25

TerrARA: Automated Security Threat Modeling for Infrastructu...

引用

proceedings of the Fifteenth acm conference on data and application security and privacy

作者： Anh-Duy Tran Laurens Sion Koen Yskout Wouter Joosen DistriNet KU Leuven Leuven Belgium

ISBN: (纸本)9798400714764

The emergence of DevOps is accompanied by an increased use of Infrastructure as Code (IaC) to specify and manage deployment configurations, infrastructure, and associated resources. Terraform is one such IaC solution. However, improper configurations can lead to serious security threats. This paper introduces an approach, implemented as TerrARA, that provides a systematic and structured way for automatically eliciting security threats based on Terraform configuration files. Specifically, TerrARA: (1) automates the construction of an abstract model-an enriched data Flow Diagram (DFD)-from Terraform configuration files for Amazon Web Services (AWS), and it can be extended to other resources and cloud providers via profiles; (2) encodes cloud computing threat patterns, which are utilized by the SPARTA threat modeling engine to automatically identify security threats; and (3) demonstrates its capability in accurately extracting DFDs from Terraform projects and eliciting relevant cloud computing security threats, achieving high accuracy and reasonable performance compared to existing tools and approaches like StartLeft and GPT-4o. By integrating it into CI/CD pipelines, the automated reconstruction and analysis enable continuous security assessments that systematically incorporate cloud infrastructure artifacts into the threat modeling process.

关键词： data flow diagram

来源：评论

学校读者我要写书评

暂无评论

TEO: Ephemeral Ownership for IoT Devices to Provide Granular data Control 22

TEO: Ephemeral Ownership for IoT Devices to Provide Granular...

引用

20th acm International conference on Mobile Systems, applications and Services, MobiSys 2022

作者： Zhang, Han Agarwal, Yuvraj Fredrikson, Matt Carnegie Mellon University United States

ISBN: (纸本)9781450391856

As Internet-of-Things (IoT) devices rapidly gain popularity, they raise significant privacy concerns given the breadth of sensitive data they can capture. These concerns are amplified by the fact that in many situations, IoT devices collect data about people other than their owner or administrator, and these stakeholders have no say in how that data is managed, used, or shared. To address this, we propose a new model of ownership, IoT Ephemeral Ownership (TEO). TEO allows stakeholders to quickly register with an IoT device for a limited period, and thus claim co-ownership over the sensitive data that the device generates. Device admins retain the ability to decide who may become an ephemeral owner, but no longer have access or control to the private data generated by the device. The encrypted data in TEO is accessible only by entities after seeking explicit permission from the different co-owners of that data. We verify the key security properties of our protocol underpinning TEO in the symbolic model using ProVerif. We also implement a cross-platform prototype of TEO for mobile phones and embedded devices, and integrate it into three real-world application case studies. Our evaluation shows that the latency and battery impact of TEO is typically small, adding ≤ 187 ms onto one-time operations, and introducing limited ( © 2022 Owner/Author.

关键词： Internet of things

来源：评论

学校读者我要写书评

暂无评论

CODASPY 2019 - proceedings of the 9th acm conference on data and application security and privacy

CODASPY 2019 - Proceedings of the 9th ACM Conference on Data...

引用

9th acm conference on data and application security and privacy, CODASPY 2019

ISBN: (纸本)9781450360999

The proceedings contain 35 papers. The topics discussed include: understanding the responsiveness of mobile app developers to software library updates;acminer: extraction and analysis of authorization checks in android’s middleware;verifiable round-robin scheme for smart homes;dynamic groups and attribute-based access control for next-generation smart cars;a study of data store-based home automation;detection of threats to iot devices using scalable VPN-forwarded honeypots;deep neural networks classification over encrypted data;curie: policy-based secure data exchange;result-based detection of insider threats to relational databases;custom-made anonymization by data analysis program provided by recipient;and toward efficient spammers gathering in twitter social networks.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Integrating security and privacy in HCD-Scrum 21

Integrating Security and Privacy in HCD-Scrum

引用

14th Biannual conference of the Italian-SIGCHI-Chapter (CHIItaly)

作者： Baldassarre, Maria Teresa Santa Barletta, Vita Caivano, Danilo Piccinno, Antonio Univ Bari Aldo Moro Dept Comp Sci Bari Italy

ISBN: (纸本)9781450389778

Nowadays, software development must face the challenge of integrating security and privacy elements from the earliest stages of any software development process. A correct and complete implementation starting from the requirements definition allows to significantly increase the security level of each single phase/iteration and consequently of the final system. Therefore, it is necessary to support the team throughout the software lifecycle trying to provide operational guidelines of security by design and privacy by design. Taking these aspects into account, the paper presents a Human Centered Design (HCD) approach of security and privacy-oriented software development, integrated within the Scrum agile methodology, defined as HCD-security Scrum. The goal is to support developer decisions at all stages of software development in integrating security and privacy requirements through the formalization of key elements defined in a knowledge base, i.e., the privacy Knowledge Base.

关键词： privacy by Design Human-Centered privacy privacy Software application Agile Methods security by Design

来源：评论

学校读者我要写书评

暂无评论

Trilobyte: Plausibly Deniable Communications Through Single Player Games: data/Toolset Paper 25

Trilobyte: Plausibly Deniable Communications Through Single ...

引用

proceedings of the Fifteenth acm conference on data and application security and privacy

作者： Yuzhou Feng Sandeep Kiran Pinjala Radu Sion Bogdan Carbunar Florida International University Miami FL USA Stony Brook University Stony Brook NY USA

ISBN: (纸本)9798400714764

Plausibly deniable communication solutions built on services popular in Western countries may invite closer scrutiny into the activities of their users in censored countries. This paper investigates the ability of popular single-player games to provide the medium for plausibly deniable communications. We introduce Trilobyte, a system that hides data in game state generated opportunistically during regular game-playing activities, and shares data-hiding state through accounts on gaming platforms. We show that even in the presence of hypothetical censors that inspect game state, Trilobyte can hide up to 5.3 MB of data in game state saved in a one hour gaming session. We investigate the practicality of Trilobyte through surveys with 285 Chinese gamers, and by renting and purchasing thousands of gaming accounts. We find that most investigated games, including games developed in China, allow users to communicate keywords considered sensitive in China, when compressed, encrypted or hidden in game state or chat channels.

关键词： covert channel

来源：评论

学校读者我要写书评

暂无评论

Secure Pull Printing with QR Codes and National eID Cards: A Software-oriented Design and an Open-source Implementation 21

Secure Pull Printing with QR Codes and National eID Cards: A...

引用

11th acm conference on data and application security and privacy, CODASPY 2021

作者： Leonelli, Matteo Morelli, Umberto Sciarretta, Giada Ranise, Silvio Fondazione Bruno Kessler Trento Italy Fondazione Bruno Kessler University of Trento Trento Italy

ISBN: (纸本)9781450381437

With more systems becoming digitised, enterprises are adopting cloud technologies and outsourcing non-critical services to reduce the pressure on IT departments. In this process, it is crucial to achieving the right balance between costs, usability and security;prioritising security over the rest when handling sensitive data. Considering the print management, often off-premise, many enterprises report at least one print-related security incident that led to data loss in the past year. This problem can damage the enterprise business, especially considering the fines prescribed by current regulations or its reputation. Focusing on securing enterprise printing, pull printing is the set of technologies and processes that allow the release of print jobs according to specific conditions;typically user authentication and proximity to a printer. We design a software-oriented pull printing infrastructure that supports a print release mechanism using QR codes and electronic IDentity cards as a second-factor authenticator. Our solution addresses the costs, as any medium-size organisation can adopt our open-source solution without additional devices or access badges;and the user experience, as we offer a driverless print environment and a user-friendly mobile application. © 2021 acm.

关键词： Sensitive data

来源：评论

学校读者我要写书评

暂无评论

The Ephemeral Threat: Assessing the security of Algorithmic Trading Systems powered by Deep Learning 25

The Ephemeral Threat: Assessing the Security of Algorithmic ...

引用

proceedings of the Fifteenth acm conference on data and application security and privacy

作者： Advije Rizvani Giovanni Apruzzese Pavel Laskov Liechtenstein Business School University of Liechtenstein Vaduz Liechtenstein

ISBN: (纸本)9798400714764

We study the security of stock price forecasting using Deep Learning (DL) in computational finance. Despite abundant prior research on vulnerability of DL to adversarial perturbations, such work has hitherto hardly addressed practical adversarial threat models in the context of DL-powered algorithmic trading systems (ATS).Specifically, we investigate the vulnerability of ATS to adversarial perturbations launched by a realistically constrained attacker. We first show that existing literature has paid limited attention to DL security in the financial domain---which is naturally attractive for adversaries. Then, we formalize the concept of ephemeral perturbations (EP), which can be used to stage a novel type of attack tailored for DL-based ATS. Finally, we carry out an end-to-end evaluation of our EP against a profitable ATS. Our results reveal that the introduction of small changes to the input stock-prices not only (i)~induces the DL model to behave incorrectly but also (ii)~leads to the whole ATS to make suboptimal buy/sell decisions, resulting in a worse financial performance of the targeted ATS.

关键词： attack

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共56页 << < 11 12 13 14 15 16 17 18 19 20 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：