检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

555 篇 会议
1 篇 期刊文献

馆藏范围

556 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

430 篇 工学
- 418 篇 计算机科学与技术...
- 139 篇 软件工程
- 104 篇 信息与通信工程
- 28 篇 网络空间安全
- 21 篇 电气工程
- 12 篇 控制科学与工程
- 9 篇 安全科学与工程
- 5 篇 建筑学
- 4 篇 生物工程
- 3 篇 动力工程及工程热...
- 3 篇 生物医学工程（可授...
- 2 篇 机械工程
- 2 篇 仪器科学与技术
- 2 篇 土木工程
- 2 篇 交通运输工程
114 篇 理学
- 105 篇 数学
- 8 篇 统计学（可授理学、...
- 5 篇 生物学
- 5 篇 系统科学
- 2 篇 物理学
33 篇 管理学
- 21 篇 图书情报与档案管...
- 15 篇 管理科学与工程(可...
- 8 篇 工商管理
8 篇 法学
- 7 篇 社会学
- 1 篇 法学
3 篇 经济学
- 3 篇 应用经济学
3 篇 医学
- 3 篇 基础医学(可授医学...
- 3 篇 临床医学
- 2 篇 公共卫生与预防医...
1 篇 教育学
- 1 篇 教育学
1 篇 军事学

主题

59 篇 privacy
44 篇 security
25 篇 data privacy
21 篇 differential pri...
21 篇 machine learning
20 篇 access control
13 篇 sensitive data
11 篇 iot
11 篇 android
11 篇 mobile security
10 篇 internet of thin...
10 篇 deep learning
9 篇 static analysis
9 篇 blockchain
8 篇 federated learni...
7 篇 homomorphic encr...
7 篇 web security
7 篇 network security
7 篇 cloud security
7 篇 cloud computing

机构

8 篇 purdue univ w la...
6 篇 north carolina s...
6 篇 rhein westfal th...
6 篇 carnegie mellon ...
5 篇 univ texas dalla...
4 篇 stevens inst tec...
4 篇 fraunhofer aisec...
4 篇 purdue universit...
4 篇 carnegie mellon ...
4 篇 concordia univ m...
3 篇 singapore inst t...
3 篇 ericsson secur r...
3 篇 purdue universit...
3 篇 ecole polytech f...
3 篇 umass boston bos...
3 篇 univ illinois ur...
3 篇 tech univ darmst...
3 篇 king's college l...
3 篇 university of pi...
3 篇 university of te...

作者

13 篇 bertino elisa
11 篇 sandhu ravi
7 篇 enck william
6 篇 ghinita gabriel
6 篇 meyer ulrike
6 篇 kantarcioglu mur...
5 篇 gupta maanak
5 篇 wang lingyu
4 篇 lee adam j.
4 篇 conti mauro
4 篇 murat kantarciog...
4 篇 elisa bertino
4 篇 liu fang
4 篇 mittal sudip
4 篇 gabriel ghinita
4 篇 gunter carl a.
4 篇 pourzandi makan
4 篇 pretschner alexa...
4 篇 wetzel susanne
4 篇 majumdar suryadi...

语言

552 篇 英文
3 篇 其他
1 篇 中文

检索条件"任意字段=Proceedings of the Fifteenth ACM Conference on Data and Application Security and Privacy"

共 556 条记录，以下是141-150 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Reflections on a Decade of Mobile security Research 22

Reflections on a Decade of Mobile Security Research

引用

15th acm conference on security and privacy in Wireless and Mobile Networks (acm WiSec)

作者： Enck, William North Carolina State Univ Raleigh NC 27695 USA

ISBN: (纸本)9781450392167

The emergence of the smartphone in the late 2000s occurred during a perfect storm of technology and society. Advances in embedded technologies provided a critical balance of computing power and energy consumption. The integration of accelerometers and GPS sensors provided valuable primitives for innovative applications, and 3G cellular technologies provided enough data capacity for meaningful interactions with servers. Simultaneously, social networking was taking off, giving consumers a reason to increasingly engage with computing. The mobile industry capitalized on this opportunity, opening the traditionally tightly controlled environment to third-parties and providing a streamlined way for application developers and consumers to discover and commodify computing. Today, Web traffic from smartphones exceeds that of traditional desktops and laptops. The initial reaction of the security research community was cautious, not seeing what made this form of computing different. In many ways, smartphones are the same as traditional consumer platforms. Consumers download and run third-party software that connects to servers on the Internet. However, there are key ways in which smartphones are different. Some of these differences are technical. For example, smartphones never turn off and are continually collecting information. They also present a new runtime abstraction where each application is a security principal. Other differences are rooted in how we use them. Our smartphones are always with us, and as a result they have become the transport vehicle for micro-doses of dopamine that feeds our Internet addicted society. They are the first thing we look at in the morning, the last in the evening, and means of avoiding boredom throughout the day. Despite initial reservations, the past decade has seen a boom in security research studying smartphones and mobile technologies. While this research started at the application layer, it has gradually worked its way down the stack, c

关键词： Smartphone security mobile app security mobile device security

来源：评论

学校读者我要写书评

暂无评论

AI for security and security for AI 21

AI for Security and Security for AI

引用

11th acm conference on data and application security and privacy (CODASPY)

作者： Bertino, Elisa Kantarcioglu, Murat Akcora, Cuneyt Gurcan Samtani, Sagar Mittal, Sudip Gupta, Maanak Purdue Univ W Lafayette IN 47907 USA Univ Texas Dallas Richardson TX 75083 USA Univ Manitoba Winnipeg MB Canada Indiana Univ Bloomington IN 47405 USA Univ North Carolina Wilmington Wilmington NC USA Tennessee Technol Univ Cookeville TN 38505 USA

ISBN: (纸本)9781450381437

On one side, the security industry has successfully adopted some AI-based techniques. Use varies from mitigating denial of service attacks, forensics, intrusion detection systems, homeland security, critical infrastructures protection, sensitive information leakage, access control, and malware detection. On the other side, we see the rise of Adversarial AI. Here the core idea is to subvert AI systems for fun and profit. The methods utilized for the production of AI systems are systematically vulnerable to a new class of vulnerabilities. Adversaries are exploiting these vulnerabilities to alter AI system behavior to serve a malicious end goal. This panel discusses some of these aspects.

关键词： computer security artificial intelligence

来源：评论

学校读者我要写书评

暂无评论

Controlling security Rules Using Natural Dialogue: an application to Smart Home Care 21

Controlling Security Rules Using Natural Dialogue: an Applic...

引用

acm International Joint conference on Pervasive and Ubiquitous Computing (UbiComp) / acm International Symposium on Wearable Computers (ISWC)

作者： Goffinet, Stanley Schmitz, Donatien Zavalyshyn, Igor Legay, Axel Riviere, Etienne UCLouvain ICTEAM Ottignies Belgium

ISBN: (纸本)9781450384612

Smart home systems have revolutionized the way we interact with our living environment, but the concerns over sensor data privacy and security have become one of the major barriers to their widespread adoption. Despite a considerable research effort in designing secure access control mechanisms, the end users are still reluctant to use those either due to the complexity of the interfaces or because they do not have sufficient skills. For the elderly users the problem gets worse. Making the right security choices is increasingly more difficult for this group of users. To assist the elderly users in defining their access control policies, we design a dialogue-based system which allows to create new security rules or update existing ones in a simple and intelligible way using natural language and familiar terms.

关键词： privacy smart home elderly access control voice assistant

来源：评论

学校读者我要写书评

暂无评论

security Threats from Bitcoin Wallet Smartphone applications: Vulnerabilities, Attacks, and Countermeasures 21

Security Threats from Bitcoin Wallet Smartphone Applications...

引用

11th acm conference on data and application security and privacy (CODASPY)

作者： Hu, Yiwen Wang, Sihan Tu, Guan-Hua Xiao, Li Xie, Tian Lei, Xinyu Li, Chi-Yu Michigan State Univ Dept Comp Sci & Engn E Lansing MI 48824 USA Natl Chiao Tung Univ Dept Comp Sci Hsinchu Taiwan

ISBN: (纸本)9781450381437

Nowadays, Bitcoin is the most popular cryptocurrency. With the proliferation of smartphones and the high-speed mobile Internet, more and more users have started accessing their Bitcoin wallets on their smartphones. Users can download and install a variety of Bitcoin wallet applications (e.g., Coinbase, Luno, Bitcoin Wallet) on their smartphones and access their Bitcoin wallets anytime and anywhere. However, it is still unknown whether these Bitcoin wallet smartphone applications are secure or if they are new attack surfaces for adversaries to attack these application users. In this work, we explored the insecurity of the 10 most popular Bitcoin wallet smartphone applications and discovered three security vulnerabilities. By exploiting them, adversaries can launch various attacks including Bitcoin deanonymization, reflection and amplification spamming, and wallet fraud attacks. To address the identified security vulnerabilities, we developed a phone-side Bitcoin security Rectifier to secure Bitcoin wallet smartphone application users. The developed rectifier does not require any modifications to current wallet applications and is compliant with Bitcoin standards.

关键词： Bitcoin wallets Blockchain security Mobile networks

来源：评论

学校读者我要写书评

暂无评论

We Can Pay Less : Coordinated False data Injection Attack Against Residential Demand Response in Smart Grids 21

We Can Pay Less : Coordinated False Data Injection Attack Ag...

引用

11th acm conference on data and application security and privacy (CODASPY)

作者： Dayaratne, Thusitha Rudolph, Carsten Liebman, Ariel Salehi, Mahsa Monash Univ Clayton Vic Australia

ISBN: (纸本)9781450381437

Advanced metering infrastructure, along with home automation processes, is enabling more efficient and effective demand-side management opportunities for both consumers and utility companies. However, tight cyber-physical integration also enables novel attack vectors for false data injection attacks (FDIA) as home automation/home energy management systems reside outside the utilities' control perimeter. Authentic users themselves can manipulate these systems without causing significant security breaches compared to traditional FDIAs. This work depicts a novel FDIA that exploits one of the commonly utilised distributed device scheduling architectures. We evaluate the attack impact using a realistic dataset to demonstrate that adversaries gain significant benefits, independently from the actual algorithm used for optimisation, as long as they have control over a sufficient amount of demand. Compared to traditional FDIAs, reliable security mechanisms such as proper authentication, security protocols, security controls or, sealed/controlled devices cannot prevent this new type of FDIA. Thus, we propose a set of possible impact alleviation solutions to thwart this type of attack.

关键词： Demand response False data injection attack Impact alleviation Smart grid vulnerabilities

来源：评论

学校读者我要写书评

暂无评论

Protecting DeFi Platforms against Non-Price Flash Loan Attacks 25

Protecting DeFi Platforms against Non-Price Flash Loan Attac...

引用

proceedings of the fifteenth acm conference on data and application security and privacy

作者： Abdulrahman Alhaidari Balaji Palanisamy Prashant Krishnamurthy Informatics and Networked Systems University of Pittsburgh Pittsburgh PA USA

ISBN: (纸本)9798400714764

Smart contracts in Decentralized Finance (DeFi) platforms are attractive targets for attacks as their vulnerabilities can lead to massive amounts of financial losses. Flash loan attacks, in particular, pose a major threat to DeFi protocols that hold a Total Value Locked (TVL) exceeding 106 billion. These attacks use the atomicity property of blockchains to drain funds from smart contracts in a single transaction. While existing research primarily focuses on price manipulation attacks, such as oracle manipulation, mitigating non-price flash loan attacks that often exploit smart contracts' zero-day vulnerabilities remains largely unaddressed. These attacks are challenging to detect because of their unique patterns, time sensitivity, and complexity. In this paper, we present FlashGuard, a runtime detection and mitigation method for non-price flash loan attacks. Our approach targets smart contract function signatures to identify attacks in real-time and counterattack by disrupting the attack transaction atomicity by leveraging the short window when transactions are visible in the mempool but not yet confirmed. When FlashGuard detects an attack, it dispatches a stealthy dusting counterattack transaction to miners to change the victim contract's state which disrupts the attack's atomicity and forces the attack transaction to revert. We evaluate our approach using 20 historical attacks and several unseen attacks. FlashGuard achieves an average real-time detection latency of 150.31ms, a detection accuracy of over 99.93%, and an average disruption time of 410.92ms. FlashGuard could have potentially rescued over \405.71 million in losses if it were deployed prior to these attack instances. FlashGuard demonstrates significant potential as a DeFi security solution to mitigate and handle rising threats of non-price flash loan attacks.

关键词： DeFi security

来源：评论

学校读者我要写书评

暂无评论

IIoT-ARAS: IIoT/ICS Automated Risk Assessment System for Prediction and Prevention 21

IIoT-ARAS: IIoT/ICS Automated Risk Assessment System for Pre...

引用

11th acm conference on data and application security and privacy (CODASPY)

作者： Zahran, Bassam Hussaini, Adamu Ali-Gombe, Aisha Towson Univ Towson MD 21252 USA

ISBN: (纸本)9781450381437

As IT/OT convergence continues to evolve, the traditionally isolated ICS/OT systems are increasingly exposed to a myriad of online and offline threats. Although IIoT enhances the reachability in ICS, improved data analytics, ensuring ease of access and decision making, it unwittingly opens the ICS environment to attackers. The design of IIoT introduces multiple entry points to an isolated system, which is used to protect itself via air-gapping and risk avoidance strategies. This study explores a comprehensive mapping of threats and risks for IT/OT convergence. Additionally, we propose IIoT-ARAS - an automated risk assessment system based on OCTAVE Allegro and ISO/IEC 27030 methodologies. The design of IIoT-ARAS is aimed to be agentless, with minimum interruptions to the OT environment. Furthermore, the system performs automated regular asset inventory checks, threshold optimization, probability computation, risk evaluations, and contingency plan configuration.

关键词： Cybersecurity security IIoT ICS IT/OT Convergence

来源：评论

学校读者我要写书评

暂无评论

Towards Accurate Labeling of Android Apps for Reliable Malware Detection 21

Towards Accurate Labeling of Android Apps for Reliable Malwa...

引用

11th acm conference on data and application security and privacy (CODASPY)

作者： Salem, Aleieldin Tech Univ Munich Garching Germany

ISBN: (纸本)9781450381437

In training their newly-developed malware detection methods, researchers rely on threshold-based labeling strategies that interpret the scan reports provided by online platforms, such as VirusTotal. The dynamicity of this platform renders those labeling strategies unsustainable over prolonged periods, which leads to inaccurate labels. Using inaccurately labeled apps to train and evaluate malware detection methods significantly undermines the reliability of their results, leading to either dismissing otherwise promising detection approaches or adopting intrinsically inadequate ones. The infeasibility of generating accurate labels via manual analysis and the lack of reliable alternatives force researchers to utilize VirusTotal to label apps. In the paper, we tackle this issue in two manners. Firstly, we reveal the aspects of VirusTotal's dynamicity and how they impact threshold-based labeling strategies and provide actionable insights on how to use these labeling strategies given VirusTotal's dynamicity reliably. Secondly, we motivate the implementation of alternative platforms by (a) identifying VirusTotal limitations that such platforms should avoid, and (b) proposing an architecture of how such platforms can be constructed to mitigate VirusTotal's limitations.

关键词： android security malware detection machine learning virustotal

来源：评论

学校读者我要写书评

暂无评论

TEO: Ephemeral Ownership for IoT Devices to Provide Granular data Control 22

TEO: Ephemeral Ownership for IoT Devices to Provide Granular...

引用

20th acm International conference on Mobile Systems, applications and Services, MobiSys 2022

作者： Zhang, Han Agarwal, Yuvraj Fredrikson, Matt Carnegie Mellon University United States

ISBN: (纸本)9781450391856

As Internet-of-Things (IoT) devices rapidly gain popularity, they raise significant privacy concerns given the breadth of sensitive data they can capture. These concerns are amplified by the fact that in many situations, IoT devices collect data about people other than their owner or administrator, and these stakeholders have no say in how that data is managed, used, or shared. To address this, we propose a new model of ownership, IoT Ephemeral Ownership (TEO). TEO allows stakeholders to quickly register with an IoT device for a limited period, and thus claim co-ownership over the sensitive data that the device generates. Device admins retain the ability to decide who may become an ephemeral owner, but no longer have access or control to the private data generated by the device. The encrypted data in TEO is accessible only by entities after seeking explicit permission from the different co-owners of that data. We verify the key security properties of our protocol underpinning TEO in the symbolic model using ProVerif. We also implement a cross-platform prototype of TEO for mobile phones and embedded devices, and integrate it into three real-world application case studies. Our evaluation shows that the latency and battery impact of TEO is typically small, adding ≤ 187 ms onto one-time operations, and introducing limited ( © 2022 Owner/Author.

关键词： Internet of things

来源：评论

学校读者我要写书评

暂无评论

Integrating security and privacy in HCD-Scrum 21

Integrating Security and Privacy in HCD-Scrum

引用

14th Biannual conference of the Italian-SIGCHI-Chapter (CHIItaly)

作者： Baldassarre, Maria Teresa Santa Barletta, Vita Caivano, Danilo Piccinno, Antonio Univ Bari Aldo Moro Dept Comp Sci Bari Italy

ISBN: (纸本)9781450389778

Nowadays, software development must face the challenge of integrating security and privacy elements from the earliest stages of any software development process. A correct and complete implementation starting from the requirements definition allows to significantly increase the security level of each single phase/iteration and consequently of the final system. Therefore, it is necessary to support the team throughout the software lifecycle trying to provide operational guidelines of security by design and privacy by design. Taking these aspects into account, the paper presents a Human Centered Design (HCD) approach of security and privacy-oriented software development, integrated within the Scrum agile methodology, defined as HCD-security Scrum. The goal is to support developer decisions at all stages of software development in integrating security and privacy requirements through the formalization of key elements defined in a knowledge base, i.e., the privacy Knowledge Base.

关键词： privacy by Design Human-Centered privacy privacy Software application Agile Methods security by Design

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共56页 << < 11 12 13 14 15 16 17 18 19 20 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：