检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

555 篇 会议
1 篇 期刊文献

馆藏范围

556 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

430 篇 工学
- 418 篇 计算机科学与技术...
- 139 篇 软件工程
- 104 篇 信息与通信工程
- 28 篇 网络空间安全
- 21 篇 电气工程
- 12 篇 控制科学与工程
- 9 篇 安全科学与工程
- 5 篇 建筑学
- 4 篇 生物工程
- 3 篇 动力工程及工程热...
- 3 篇 生物医学工程（可授...
- 2 篇 机械工程
- 2 篇 仪器科学与技术
- 2 篇 土木工程
- 2 篇 交通运输工程
114 篇 理学
- 105 篇 数学
- 8 篇 统计学（可授理学、...
- 5 篇 生物学
- 5 篇 系统科学
- 2 篇 物理学
33 篇 管理学
- 21 篇 图书情报与档案管...
- 15 篇 管理科学与工程(可...
- 8 篇 工商管理
8 篇 法学
- 7 篇 社会学
- 1 篇 法学
3 篇 经济学
- 3 篇 应用经济学
3 篇 医学
- 3 篇 基础医学(可授医学...
- 3 篇 临床医学
- 2 篇 公共卫生与预防医...
1 篇 教育学
- 1 篇 教育学
1 篇 军事学

主题

59 篇 privacy
44 篇 security
25 篇 data privacy
21 篇 differential pri...
21 篇 machine learning
20 篇 access control
13 篇 sensitive data
11 篇 iot
11 篇 android
11 篇 mobile security
10 篇 internet of thin...
10 篇 deep learning
9 篇 static analysis
9 篇 blockchain
8 篇 federated learni...
7 篇 homomorphic encr...
7 篇 web security
7 篇 network security
7 篇 cloud security
7 篇 cloud computing

机构

8 篇 purdue univ w la...
6 篇 north carolina s...
6 篇 rhein westfal th...
6 篇 carnegie mellon ...
5 篇 univ texas dalla...
4 篇 stevens inst tec...
4 篇 fraunhofer aisec...
4 篇 purdue universit...
4 篇 carnegie mellon ...
4 篇 concordia univ m...
3 篇 singapore inst t...
3 篇 ericsson secur r...
3 篇 purdue universit...
3 篇 ecole polytech f...
3 篇 umass boston bos...
3 篇 univ illinois ur...
3 篇 tech univ darmst...
3 篇 king's college l...
3 篇 university of pi...
3 篇 university of te...

作者

13 篇 bertino elisa
11 篇 sandhu ravi
7 篇 enck william
6 篇 ghinita gabriel
6 篇 meyer ulrike
6 篇 kantarcioglu mur...
5 篇 gupta maanak
5 篇 wang lingyu
4 篇 lee adam j.
4 篇 conti mauro
4 篇 murat kantarciog...
4 篇 elisa bertino
4 篇 liu fang
4 篇 mittal sudip
4 篇 gabriel ghinita
4 篇 gunter carl a.
4 篇 pourzandi makan
4 篇 pretschner alexa...
4 篇 wetzel susanne
4 篇 majumdar suryadi...

语言

552 篇 英文
3 篇 其他
1 篇 中文

检索条件"任意字段=Proceedings of the Fifteenth ACM Conference on Data and Application Security and Privacy"

共 556 条记录，以下是111-120 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Right to Know, Right to Refuse: Towards UI Perception-Based Automated Fine-Grained Permission Controls for Android Apps 7

Right to Know, Right to Refuse: Towards UI Perception-Based ...

引用

37th IEEE/acm International conference on Automated Software Engineering (ASE)

作者： Malviya, Vikas K. Leow, Chee Wei Kasthuri, Ashok Tun, Yan Naing Shar, Lwin Khin Jiang, Lingxiao Singapore Management Univ Sch Comp & Informat Syst Singapore Singapore

ISBN: (纸本)9781450394758

It is the basic right of a user to know how the permissions are used within the Android app's scope and to refuse the app if granted permissions are used for the activities other than specified use which can amount to malicious behavior. This paper proposes an approach and a vision to automatically model the permissions necessary for Android apps from users' perspective and enable fine-grained permission controls by users, thus facilitating users in making more well-informed and flexible permission decisions for different app functionalities, which in turn improve the security and data privacy of the App and enforce apps to reduce permission misuses. Our proposed approach works in mainly two stages. First, it looks for discrepancies between the permission uses perceivable by users and the permissions actually used by apps via program analysis techniques. Second, it runs prediction algorithms using machine learning techniques to catch the discrepancies in permission usage and thereby alert the user for action about data violation. We have evaluated preliminary implementations of our approach and achieved promising fine-grained permission control accuracy. In addition to the benefits of users' privacy protection, we envision that wider adoption of the approach may also enforce better privacy-aware design by responsible bodies such as app developers, governments, and enterprises.

关键词： automated permission control UI perception Android application analysis Android permissions machine learning

来源：评论

学校读者我要写书评

暂无评论

ARES 2023 - 18th International conference on Availability, Reliability and security, proceedings

ARES 2023 - 18th International Conference on Availability, R...

引用

18th International conference on Availability, Reliability and security, ARES 2023

ISBN: (纸本)9798400707728

The proceedings contain 155 papers. The topics discussed include: an android application patching pipeline based on generic changesets;Nakula: coercion resistant data storage against time-limited adversary;automated side-channel attacks using black-box neural architecture search;canary in twitter mine: collecting phishing reports from experts and non-experts;actions speak louder than passwords: dynamic identity for machine-to-machine communication;mitigating intersection attacks in anonymous microblogging;a hybrid anonymization pipeline to improve the privacy-utility balance in sensitive datasets for ML purposes;adoption of information security practices in large-scale agile software development: a case study in the finance industry;universal remote attestation for cloud and edge platforms;rogue key and impersonation attacks on FIDO2: from theory to practice;real-time defensive strategy selection via deep reinforcement learning;and characterizing the MasterPrint threat on android devices with capacitive sensors.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Trilobyte: Plausibly Deniable Communications Through Single Player Games: data/Toolset Paper 25

Trilobyte: Plausibly Deniable Communications Through Single ...

引用

proceedings of the fifteenth acm conference on data and application security and privacy

作者： Yuzhou Feng Sandeep Kiran Pinjala Radu Sion Bogdan Carbunar Florida International University Miami FL USA Stony Brook University Stony Brook NY USA

ISBN: (纸本)9798400714764

Plausibly deniable communication solutions built on services popular in Western countries may invite closer scrutiny into the activities of their users in censored countries. This paper investigates the ability of popular single-player games to provide the medium for plausibly deniable communications. We introduce Trilobyte, a system that hides data in game state generated opportunistically during regular game-playing activities, and shares data-hiding state through accounts on gaming platforms. We show that even in the presence of hypothetical censors that inspect game state, Trilobyte can hide up to 5.3 MB of data in game state saved in a one hour gaming session. We investigate the practicality of Trilobyte through surveys with 285 Chinese gamers, and by renting and purchasing thousands of gaming accounts. We find that most investigated games, including games developed in China, allow users to communicate keywords considered sensitive in China, when compressed, encrypted or hidden in game state or chat channels.

关键词： covert channel

来源：评论

学校读者我要写书评

暂无评论

Towards Automated Content-based Photo privacy Control in User-Centered Social Networks 22

Towards Automated Content-based Photo Privacy Control in Use...

引用

acm conference on data and application security and privacy (CODASPY)

作者： Vishwamitra, Nishant Li, Yifang Hu, Hongxin Caine, Kelly Cheng, Long Zhao, Ziming Ahn, Gail-Joon Univ Buffalo Buffalo NY 14260 USA Clemson Univ Clemson SC USA Arizona State Univ Tempe AZ USA

ISBN: (纸本)9781450392204

A large number of photos shared online often contain private user information, which can cause serious privacy breaches when viewed by unauthorized users. Thus, there is a need for more efficient privacy control that requires automatic detection of users' private photos. However, the automatic detection of users' private photos is a challenging task, since different users may have different privacy concerns and a generalized one-size-fits-all approach for private photo detection would not be suitable for most users. User-specific detection of private photos should, therefore, be investigated. Furthermore, for effective privacy control, the exact sensitive regions in private photos need to be pinpointed, so that sensitive content can be protected via different privacy control methods. In this paper, we propose a novel system, AutoPri, to enable automatic and user-specific content-based photo privacy control in online social networks. We collect a large dataset of 31, 566 private and public photos from real-world users and present important observations on photo privacy concerns. Our system can automatically detect private photos in a user-specific manner using a detection model based on a multimodal variational autoencoder and pinpoint sensitive regions in private photos with an explainable deep learning-based approach. Our evaluations show that AutoPri can effectively determine user-specific private photos with high accuracy (94.32%) and pinpoint exact sensitive regions in them to enable effective privacy control in user-centered online social networks.

关键词： privacy control social media deep learning

来源：评论

学校读者我要写书评

暂无评论

The Ephemeral Threat: Assessing the security of Algorithmic Trading Systems powered by Deep Learning 25

The Ephemeral Threat: Assessing the Security of Algorithmic ...

引用

proceedings of the fifteenth acm conference on data and application security and privacy

作者： Advije Rizvani Giovanni Apruzzese Pavel Laskov Liechtenstein Business School University of Liechtenstein Vaduz Liechtenstein

ISBN: (纸本)9798400714764

We study the security of stock price forecasting using Deep Learning (DL) in computational finance. Despite abundant prior research on vulnerability of DL to adversarial perturbations, such work has hitherto hardly addressed practical adversarial threat models in the context of DL-powered algorithmic trading systems (ATS).Specifically, we investigate the vulnerability of ATS to adversarial perturbations launched by a realistically constrained attacker. We first show that existing literature has paid limited attention to DL security in the financial domain---which is naturally attractive for adversaries. Then, we formalize the concept of ephemeral perturbations (EP), which can be used to stage a novel type of attack tailored for DL-based ATS. Finally, we carry out an end-to-end evaluation of our EP against a profitable ATS. Our results reveal that the introduction of small changes to the input stock-prices not only (i)~induces the DL model to behave incorrectly but also (ii)~leads to the whole ATS to make suboptimal buy/sell decisions, resulting in a worse financial performance of the targeted ATS.

关键词： attack

来源：评论

学校读者我要写书评

暂无评论

Toward Deep Learning Based Access Control 22

Toward Deep Learning Based Access Control

引用

acm conference on data and application security and privacy (CODASPY)

作者： Nobi, Mohammad Nur Krishnan, Ram Huang, Yufei Shakarami, Mehrnoosh Sandhu, Ravi Univ Texas San Antonio Inst Cyber Secur ICS San Antonio TX 78285 USA Univ Texas San Antonio Dept Comp Sci San Antonio TX 78285 USA Univ Texas San Antonio ICS NSF Ctr Secur & Privacy Enhanced Cloud Comp C San Antonio TX USA Univ Texas San Antonio Dept Elect & Comp Engn San Antonio TX USA Univ Pittsburgh Dept Med Pittsburgh PA USA UPMC Hillman Canc Ctr Pittsburgh PA USA Univ Texas San Antonio ICS C SPECC San Antonio TX USA

ISBN: (纸本)9781450392204

A common trait of current access control approaches is the challenging need to engineer abstract and intuitive access control models. This entails designing access control information in the form of roles (RBAC), attributes (ABAC), or relationships (ReBAC) as the case may be, and subsequently, designing access control rules. This framework has its benefits but has significant limitations in the context of modern systems that are dynamic, complex, and large-scale, due to which it is difficult to maintain an accurate access control state in the system for a human administrator. This paper proposes Deep Learning Based Access Control (DLBAC) by leveraging significant advances in deep learning technology as a potential solution to this problem. We envision that DLBAC could complement and, in the long-term, has the potential to even replace, classical access control models with a neural network that reduces the burden of access control model engineering and updates. Without loss of generality, we conduct a thorough investigation of a candidate DLBAC model, called DLBAC(alpha), using both real-world and synthetic datasets. We demonstrate the feasibility of the proposed approach by addressing issues related to accuracy, generalization, and explainability. We also discuss challenges and future research directions.

关键词： Access control Deep learning Automation

来源：评论

学校读者我要写书评

暂无评论

Towards Resiliency of Heavy Vehicles through Compromised Sensor data Reconstruction 22

Towards Resiliency of Heavy Vehicles through Compromised Sen...

引用

acm conference on data and application security and privacy (CODASPY)

作者： Shirazi, Hossein Pickard, William Ray, Indrakshi Wang, Haonan Colorado State Univ Ft Collins CO 80523 USA

ISBN: (纸本)9781450392204

Almost all aspects of modern automobiles are controlled by embedded computers, known as Electronic Control Units (ECUs). ECUs are connected with each other over a Controller Area Network (CAN) network. ECUs communicate with each other and control the automobile's behavior using messages. Heavy vehicles, unlike passenger cars, are constructed using ECUs manufactured by different Original Equipment Manufacturers (OEMs). For reasons of interoperability, the Society of Automotive Engineers (SAE) mandates that all ECUs should communicate using the standardized SAE-J1939 protocol that gives semantics to the signals transmitted on the CAN network. security concerns have been historically ignored in protocols and standards. Consequently, an ECU having malicious code can spoof other ECUs, e.g., a message can be injected through the OBD-II port or the telematics unit into the internal network to interfere with the behavior of the vehicle. Intrusion Detection Systems (IDS) have been proposed and utilized to detect various types of security attacks. However, such systems are only capable of detecting attacks and cannot mitigate them. A compromised ECU may generate invalid data values;even if such invalid values are detected, there is still a need to counter their effects. Almost all prior works focus on detecting attacks. We demonstrate how to make the vehicle resilient to attacks. We analyze the log files of real driving scenarios and show ECUs are significantly dependent on other ECUs to operate. We demonstrate that parameters of a compromised ECU can be reconstructed from those of other non-compromised ECUs to allow the vehicle to continue operation and make it resilient to attacks. We achieve this by modeling the behavior of an ECU using the multivariate Long Short-Term Memory (LSTM) neural network. We then reconstruct compromised ECU values using information obtained from trustworthy ECUs. Despite some levels of errors, our model can reconstruct trustworthy data values tha

关键词： Heavy Vehicle security Resiliency LSTM Network

来源：评论

学校读者我要写书评

暂无评论

Conan: Distributed Proofs of Compliance for Anonymous data Collection 24

Conan: Distributed Proofs of Compliance for Anonymous Data C...

引用

31st conference on Computer and Communications security

作者： Zhou, Mingxun Fanti, Giulia Shi, Elaine Carnegie Mellon Univ Pittsburgh PA 15213 USA IC3 New York NY 10044 USA CyLab Secure Blockchain Initiat Pittsburgh PA 15213 USA

ISBN: (纸本)9798400706363

We consider how to design an anonymous data collection protocol that enforces compliance rules. Imagine that each client contributes multiple data items (e.g., votes, location crumbs, or secret shares of its input) to an abstraction of an anonymous network, which mixes all clients' data items so that the receiver cannot determine which data items belong to the same user. Now, each user must prove to an auditor that the set it contributed satisfies a compliance predicate, without identifying which items it contributed. For example, the auditor may want to ensure that no voter voted for the same candidate twice, or that a user's location crumbs are not too far apart in a given time interval. Our main contribution is a novel anonymous, compliant data collection protocol that realizes the above goal. In comparison with naive approaches such as generic multi-party computation or earlier constructions of collaborative zero-knowledge proofs, the most compelling advantage of our approach is that each client's communication and computation overhead do not grow with respect to the number of clients... In this sense, we save a factor of at least.. over prior work, which allows our technique to scale to applications with a large number of clients, such as anonymous voting and privacy-preserving federated learning. We first describe our protocol using generic cryptographic primitives that can be realized from standard assumptions. We then suggest a concrete instantiation called Conan which we implement and evaluate. In this concrete instantiation, we are willing to employ SNARKs and the random oracle model for better practical efficiency. Notably, in this practical instantiation, each client's additional communication overhead (not counting the overhead of sending its data items over the anonymous network) is only (O) over tilde ( 1). We evaluated our technique in various application settings, including secure voting, and secure aggregation protocols for histogram, summation, an

关键词： Distributed Zero Knowledge Proofs Anonymous data Collection

来源：评论

学校读者我要写书评

暂无评论

PeriScope: Comprehensive Vulnerability Analysis of Mobile App-defined Bluetooth Peripherals 22

PeriScope: Comprehensive Vulnerability Analysis of Mobile Ap...

引用

17th acm ASIA conference on Computer and Communications security 2022 (acm ASIACCS)

作者： Zhao, Qingchuan Zuo, Chaoshun Blasco, Jorge Lin, Zhiqiang City Univ Hong Kong Hong Kong Peoples R China Ohio State Univ Columbus OH 43210 USA Royal Holloway Univ London Egham Surrey England

ISBN: (纸本)9781450391405

Many IoT devices today talk to each other via Bluetooth Low Energy (BLE), a wireless communication technology often used to exchange data between a paired central and peripheral. These peripheral devices include not only firmware-defined bare-metal peripherals but also mobile application defined peripherals where a mobile app turns a smartphone into a peripheral instead of their usual central role. However, this role reversal increases the attack surface and brings vulnerabilities in bare-metal Bluetooth peripherals to mobile apps where relevant security and privacy have not been well studied. To fill this knowledge gap, this paper presents PeriScope, an automated tool to unveil the security and privacy vulnerabilities at the link layer of app-defined Bluetooth peripherals in the procedures of broadcasting, pairing, and communication by systematically analyzing their companion mobile apps. PeriScope has analyzed 1,160 Bluetooth peripheral apps from Google Play and identified 69.13% of them that broadcast device or personal identifiable information in cleartext, and, in addition, there are 95% pieces of data managed by these apps (e.g., personal health data and digital keys to unlock doors) to exchange with connected devices can be accessed without authentication. Finally, a set of guidelines for secure app-defined Bluetooth peripherals development is also provided.

关键词： Bluetooth low energy mobile app analysis IoT security

来源：评论

学校读者我要写书评

暂无评论

Probabilistic data Structures in the Wild: A security Analysis of Redis 25

Probabilistic Data Structures in the Wild: A Security Analys...

引用

proceedings of the fifteenth acm conference on data and application security and privacy

作者： Mia Fili? Jonas Hofmann Sam A. Markelon Kenneth G. Paterson Anupama Unnikrishnan ETH Zurich Zurich Switzerland ETH Zurich Zurich Germany and Technische Universität Darmstadt Darmstadt Germany University of Florida Gainesville FL USA

ISBN: (纸本)9798400714764

Redis (Remote Dictionary Server) is a general purpose, in-memory database that supports a rich array of functionality, including various Probabilistic data Structures (PDS), such as Bloom filters, Cuckoo filters, as well as cardinality and frequency estimators. These PDS typically perform well in the average case. However, given that Redis is intended to be used across a diverse array of applications, it is crucial to evaluate how these PDS perform under worst-case scenarios, i.e., when faced with adversarial inputs. We offer a comprehensive analysis to address this question. We begin by carefully documenting the different PDS implementations in Redis, explaining how they deviate from those PDS as described in the literature. Then we show that these deviations enable a total of 10 novel attacks that are more severe than the corresponding attacks for generic versions of the PDS. We highlight the critical role of Redis' decision to use non-cryptographic hash functions in the severity of these attacks. We conclude by discussing countermeasures to the attacks

关键词： PDS attack countermeasures

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共56页 << < 8 9 10 11 12 13 14 15 16 17 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：