检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

556 篇 会议
1 篇 期刊文献

馆藏范围

557 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

431 篇 工学
- 419 篇 计算机科学与技术...
- 140 篇 软件工程
- 104 篇 信息与通信工程
- 28 篇 网络空间安全
- 21 篇 电气工程
- 12 篇 控制科学与工程
- 9 篇 安全科学与工程
- 5 篇 建筑学
- 4 篇 生物工程
- 3 篇 动力工程及工程热...
- 3 篇 生物医学工程（可授...
- 2 篇 机械工程
- 2 篇 仪器科学与技术
- 2 篇 电子科学与技术（可...
- 2 篇 土木工程
- 2 篇 交通运输工程
114 篇 理学
- 105 篇 数学
- 8 篇 统计学（可授理学、...
- 5 篇 生物学
- 5 篇 系统科学
- 2 篇 物理学
33 篇 管理学
- 21 篇 图书情报与档案管...
- 15 篇 管理科学与工程(可...
- 8 篇 工商管理
8 篇 法学
- 7 篇 社会学
- 1 篇 法学
3 篇 经济学
- 3 篇 应用经济学
3 篇 医学
- 3 篇 基础医学(可授医学...
- 3 篇 临床医学
- 2 篇 公共卫生与预防医...
1 篇 教育学
1 篇 军事学

主题

59 篇 privacy
44 篇 security
25 篇 data privacy
21 篇 differential pri...
21 篇 machine learning
20 篇 access control
14 篇 sensitive data
11 篇 iot
11 篇 android
11 篇 mobile security
10 篇 internet of thin...
10 篇 deep learning
9 篇 static analysis
9 篇 blockchain
8 篇 federated learni...
7 篇 homomorphic encr...
7 篇 web security
7 篇 network security
7 篇 cloud security
7 篇 cloud computing

机构

8 篇 purdue univ w la...
6 篇 north carolina s...
6 篇 rhein westfal th...
6 篇 carnegie mellon ...
5 篇 univ texas dalla...
4 篇 stevens inst tec...
4 篇 fraunhofer aisec...
4 篇 purdue universit...
4 篇 carnegie mellon ...
4 篇 concordia univ m...
3 篇 singapore inst t...
3 篇 ericsson secur r...
3 篇 purdue universit...
3 篇 ecole polytech f...
3 篇 umass boston bos...
3 篇 univ illinois ur...
3 篇 tech univ darmst...
3 篇 king's college l...
3 篇 university of pi...
3 篇 university of te...

作者

13 篇 bertino elisa
11 篇 sandhu ravi
7 篇 enck william
6 篇 ghinita gabriel
6 篇 meyer ulrike
6 篇 kantarcioglu mur...
5 篇 gupta maanak
5 篇 wang lingyu
4 篇 lee adam j.
4 篇 conti mauro
4 篇 murat kantarciog...
4 篇 elisa bertino
4 篇 liu fang
4 篇 mittal sudip
4 篇 gabriel ghinita
4 篇 gunter carl a.
4 篇 pourzandi makan
4 篇 pretschner alexa...
4 篇 wetzel susanne
4 篇 majumdar suryadi...

语言

552 篇 英文
4 篇 其他
1 篇 中文

检索条件"任意字段=Proceedings of the Fifteenth ACM Conference on Data and Application Security and Privacy"

共 557 条记录，以下是301-310 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

A Study of security Vulnerabilities on Docker Hub 17

A Study of Security Vulnerabilities on Docker Hub

引用

7th acm conference on data and application security and privacy (CODASPY)

作者： Shu, Rui Gu, Xiaohui Enck, William North Carolina State Univ Raleigh NC 27695 USA

ISBN: (纸本)9781450345231

Docker containers have recently become a popular approach to provision multiple applications over shared physical hosts in a more lightweight fashion than traditional virtual machines. This popularity has led to the creation of the Docker Hub registry, which distributes a large number of official and community images. In this paper, we study the state of security vulnerabilities in Docker Hub images. We create a scalable Docker image vulnerability analysis (DIVA) framework that automatically discovers, downloads, and analyzes both official and community images on Docker Hub. Using our framework, we have studied 356,218 images and made the following findings: (1) both official and community images contain more than 180 vulnerabilities on average when considering all versions;(2) many images have not been updated for hundreds of days;and (3) vulnerabilities commonly propagate from parent images to child images. These findings demonstrate a strong need for more automated and systematic methods of applying security updates to Docker images and our current Docker image analysis framework provides a good foundation for such automatic security update.

关键词： Docker Images security Vulnerabilities Vulnerability Propagation

来源：评论

学校读者我要写书评

暂无评论

Synthesis of Probabilistic privacy Enforcement 17

Synthesis of Probabilistic Privacy Enforcement

引用

24th acm-SIGSAC conference on Computer and Communications security (acm CCS)

作者： Kucera, Martin Tsankov, Petar Gehr, Timon Guarnieri, Marco Vechev, Martin Swiss Fed Inst Technol Zurich Switzerland

ISBN: (纸本)9781450349468

Existing probabilistic privacy enforcement approaches permit the execution of a program that processes sensitive data only if the information it leaks is within the bounds specified by a given policy. Thus, to extract any information, users must manually design a program that satisfies the policy. In this work, we present a novel synthesis approach that automatically transforms a program into one that complies with a given policy. Our approach consists of two ingredients. First, we phrase the problem of determining the amount of leaked information as Bayesian inference, which enables us to leverage existing probabilistic programming engines. Second, we present two synthesis procedures that add uncertainty to the program's outputs as a way of reducing the amount of leaked information: an optimal one based on SMT solving and a greedy one with quadratic running time. We implemented and evaluated our approach on 10 representative programs from multiple application domains. We show that our system can successfully synthesize a permissive enforcement mechanism for all examples.

关键词： privacy enforcement bayesian inference program synthesis

来源：评论

学校读者我要写书评

暂无评论

SAMPAC: Socially-Aware collaborative Multi-Party Access Control 17

SAMPAC: Socially-Aware collaborative Multi-Party Access Cont...

引用

7th acm conference on data and application security and privacy (CODASPY)

作者： Ilia, Panagiotis Carminati, Barbara Ferrari, Elena Fragopoulou, Paraskevi Ioannidis, Sotiris FORTH Iraklion Greece Univ Insubria Varese Italy

ISBN: (纸本)9781450345231

According to the current design of content sharing services, such as Online Social Networks (OSNs), typically (i) the service provider has unrestricted access to the uploaded resources and (ii) only the user uploading the resource is allowed to define access control permissions over it. This results in a lack of control from other users that are associated, in some way, with that resource. To cope with these issues, in this paper, we propose a privacy-preserving system that allows users to upload their resources encrypted, and we design a collaborative multi-party access control model allowing all the users related to a resource to participate in the specification of the access control policy. Our model employs a threshold-based secret sharing scheme, and by exploiting users' social relationships, sets the trusted friends of the associated users responsible to partially enforce the collective policy. Through replication of the secret shares and delegation of the access control enforcement role, our model ensures that resources are timely available when requested. Finally, our experiments demonstrate that the performance overhead of our model is minimal and that it does not significantly affect user experience.

关键词： online social networks secret sharing privacy multi-party access control

来源：评论

学校读者我要写书评

暂无评论

Sound and Static Analysis of Session Fixation Vulnerabilities in PHP Web applications 17

Sound and Static Analysis of Session Fixation Vulnerabilitie...

引用

7th acm conference on data and application security and privacy (CODASPY)

作者： Amira, Abdelouahab Ouadjaout, Abdelraouf Derhab, Abdelouahid Badache, Nadjib CERIST Res Ctr Sci & Tech Informat Algiers Algeria A MIRA Univ Bejaia Algeria Univ Paris 06 LIP6 Paris France King Saud Univ Ctr Excellence Informat Assurance CoEIA Riyadh Saudi Arabia

ISBN: (纸本)9781450345231

Web applications use authentication mechanisms to provide user-friendly content to users. However, some dangerous techniques like session fixation attacks target these mechanisms, by making the legitimate user use a session identifier that is controlled by the attacker. In this way, he can then impersonate the legitimate user without the need to know his credentials. In this paper, we present SAWFIX, a PHP static analyzer that checks web applications for session fixation vulnerabilities. To the best of our knowledge, SAWFIX is the first analyzer that checks exhaustively for this type of vulnerabilities, while the other methods only ensure partial correctness that is limited to a fraction of possible executions. SAWFIX is based on abstract interpretation, which is a theory for approximating the semantics of programs and allows designing static analyzers that are fully automatic and sound by construction. We implemented a prototype of our approach and tested it on several complex web applications. We obtained promising results in terms of detection accuracy and processing time, which reflects the efficiency of our system.

关键词： Session fixation attacks Web application security Static program analysis Abstract interpretation

来源：评论

学校读者我要写书评

暂无评论

Share a pie? privacy-Preserving Knowledge Base Export through Count-min Sketches 17

<i>Share a pie</i>? Privacy-Preserving Knowledge Base Export...

引用

7th acm conference on data and application security and privacy (CODASPY)

作者： Ucci, Daniele Aniello, Leonardo Baldoni, Roberto Univ Roma La Sapienza Res Ctr Cyber Intelligence & Informat Secur CIS Dept Comp Control & Management Engn Antonio Ruber Rome Italy

ISBN: (纸本)9781450345231

Knowledge base (KB) sharing among parties has been proven to be beneficial in several scenarios. However such sharing can arise considerable privacy concerns depending on the sensitivity of the information stored in each party's KB. In this paper, we focus on the problem of exporting a (part of a) KB of a party towards a receiving one. We introduce a novel solution that enables parties to export data in a privacy-preserving fashion, based on a probabilistic data structure, namely the count-min sketch. With this data structure, KBs can be exported in the form of key-value stores and inserted into a set of count-min sketches, where keys can be sensitive and values are counters. Count-min sketches can be tuned to achieve a given key collision probability, which enables a party to deny having certain keys in its own KB, and thus to preserve its privacy. We also introduce a metric, the gamma-deniability (novel for count-min sketches), to measure the privacy level obtainable with a count-min sketch. Furthermore, since the value associated to a key can expose to linkage attacks, noise can be added to a count-min sketch to ensure controlled error on retrieved values. Key collisions and noise alter the values contained in the exported KB, and can affect negatively the accuracy of a computation performed on the exported *** explore the tradeoff between privacy preservation and computation accuracy by experimental evaluations in two scenarios related to malware detection.

关键词： Information sharing knowledge base export privacy metric count-min sketches

来源：评论

学校读者我要写书评

暂无评论

Graph Automorphism-Based, Semantics-Preserving security for the Resource Description Framework (RDF) 17

Graph Automorphism-Based, Semantics-Preserving Security for ...

引用

7th acm conference on data and application security and privacy (CODASPY)

作者： Lin, Zhiyuan Tripunitara, Mahesh Univ Waterloo ECE Waterloo ON Canada

ISBN: (纸本)9781450345231

We address security in the context of the Resource Description Framework (RDF), a graph-like data model for the web. One of RDF's compelling features is a precise, model-theoretic semantics. We first propose a threat model, and under it, observe that the technical challenge is really in hiding information that may be revealed by the structure of an RDF graph. We choose two quantitative, unconditional notions for securing graph-structure from the literature that address the threat model, and adapt them for RDF. We then consider the problem of devising algorithms for achieving a certain level of security while preserving the semantics of the input RDF graph. We observe that there are operations we can perform on an RDF graph that both provide such security and preserve semantics. We observe, further, that there is a natural way to quantify information-loss under these operations, and that there appears to be a natural trade-off between security and information-quality. We study this trade-off and establish fundamental results. We show that the RDF graphs that result from applying the operations induce a lattice that leads to a natural quantification of information-quality. We show also that achieving a certain level of security while retaining a certain level of information-quality is NP-complete under polynomialtime Turing reductions. Finally, towards an empirical assessment, we discuss our design and implementation of a reduction to CNF-SAT, and empirical results for two classes of RDF graphs. In summary, our work makes fundamental and practical contributions to semantics-preserving security for RDF.

关键词： unconditional security ISO computational complexity NP semantics graphs

来源：评论

学校读者我要写书评

暂无评论

Achieving Differential privacy in Secure Multiparty data Aggregation Protocols on Star Networks 17

Achieving Differential Privacy in Secure Multiparty Data Agg...

引用

7th acm conference on data and application security and privacy (CODASPY)

作者： Bindschaedler, Vincent Rane, Shantanu Brito, Alejandro E. Rao, Vanishree Uzun, Ersin Univ Illinois Urbana IL 61801 USA Palo Alto Res Ctr Palo Alto CA USA

ISBN: (纸本)9781450345231

We consider the problem of privacy-preserving data aggregation in a star network topology, i.e., several untrusting participants connected to a single aggregator. We require that the participants do not discover each other's data, and the service provider remains oblivious to each participant's individual contribution. Furthermore, the final result is to be published in a differentially private manner, i.e., the result should not reveal the contribution of any single participant to a (possibly external) adversary who knows the contributions of all other participants. In other words, we require a secure multiparty computation protocol that also incorporates a differentially private mechanism. Previous solutions have resorted to caveats such as postulating a trusted dealer to distribute keys to the participants, or introducing additional entities to withhold the decryption key from the aggregator, or relaxing the star topology by allowing pairwise communication amongst the participants. In this paper, we show how to obtain a noisy (differentially private) aggregation result using Shamir secret sharing and additively homomorphic encryption without these mitigating assumptions. More importantly, while we assume semi-honest participants, we allow the aggregator to be stronger than semi-honest, specifically in the sense that he can try to reduce the noise in the differentially private result. To respect the differential privacy requirement, collusions of mutually untrusting entities need to be analyzed differently from traditional secure multiparty computation: It is not sufficient that such collusions do not reveal the data of honest participants;we must also ensure that the colluding entities cannot undermine differential privacy by reducing the amount of noise in the final result. Our protocols avoid this by requiring that no entity - neither the aggregator nor any participant - knows how much noise a participant contributes to the final result. We also ensure that if

关键词： secret sharing homomorphic encryption differential privacy

来源：评论

学校读者我要写书评

暂无评论

DroidSieve: Fast and Accurate Classification of Obfuscated Android Malware 17

DroidSieve: Fast and Accurate Classification of Obfuscated A...

引用

7th acm conference on data and application security and privacy (CODASPY)

作者： Suarez-Tangil, Guillermo Dash, Santanu Kumar Ahmadi, Mansour Kinder, Johannes Giacinto, Giorgio Cavallaro, Lorenzo Royal Holloway Univ London London England Univ Cagliari Cagliari Italy

ISBN: (纸本)9781450345231

With more than two million applications, Android marketplaces require automatic and scalable methods to efficiently vet apps for the absence of malicious threats. Recent techniques have successfully relied on the extraction of lightweight syntactic features suitable for machine learning classification, but despite their promising results, the very nature of such features suggest they would unlikely-on their own-be suitable for detecting obfuscated Android malware. To address this challenge, we propose DroidSieve, an Android malware classifier based on static analysis that is fast, accurate, and resilient to obfuscation. For a given app, DroidSieve first decides whether the app is malicious and, if so, classifies it as belonging to a family of related malware. DroidSieve exploits obfuscation-invariant features and artifacts introduced by obfuscation mechanisms used in malware. At the same time, these purely static features are designed for processing at scale and can be extracted quickly. For malware detection, we achieve up to 99.82% accuracy with zero false positives;for family identification of obfuscated malware, we achieve 99.26% accuracy at a fraction of the computational cost of state-of-the-art techniques.

关键词： Android Malware Detection Malware Family Identification Obfuscation Native Code security Machine Learning Classification Scalability

来源：评论

学校读者我要写书评

暂无评论

"If You Can't Beat them, Join them": A Usability Approach to Interdependent privacy in Cloud Apps 17

"If You Can't Beat them, Join them": A Usability Approach to...

引用

7th acm conference on data and application security and privacy (CODASPY)

作者： Harkous, Hamza Aberer, Karl Ecole Polytech Fed Lausanne Lausanne Switzerland

ISBN: (纸本)9781450345231

Cloud storage services, like Dropbox and Google Drive, have growing ecosystems of 3rd party apps that are designed to work with users' cloud files. Such apps often request full access to users' files, including files shared with collaborators. Hence, whenever a user grants access to a new vendor, she is inflicting a privacy loss on herself and on her collaborators too. Based on analyzing a real dataset of 183 Google Drive users and 131 third party apps, we discover that collaborators inflict a privacy loss which is at least 39% higher than what users themselves cause. We take a step toward minimizing this loss by introducing the concept of History-based decisions. Simply put, users are informed at decision time about the vendors which have been previously granted access to their data. Thus, they can reduce their privacy loss by not installing apps from new vendors whenever possible. Next, we realize this concept by introducing a new privacy indicator, which can be integrated within the cloud apps' authorization interface. Via a web experiment with 141 participants recruited from CrowdFlower, we show that our privacy indicator can significantly increase the user's likelihood of choosing the app that minimizes her privacy loss. Finally, we explore the network effect of History-based decisions via a simulation on top of large collaboration networks. We demonstrate that adopting such a decision-making process is capable of reducing the growth of user privacy loss by 40% in a Google Drive-based network and by 70% in an author collaboration network. This is despite the fact that we neither assume that users cooperate nor that they exhibit altruistic behavior. To our knowledge, our work is the first to provide quantifiable evidence of the privacy risk that collaborators pose in cloud apps. We are also the first to mitigate this problem via a usable privacy approach.

关键词： interdependent privacy 3rd party apps privacy cloud computing usability google drive DropBox

来源：评论

学校读者我要写书评

暂无评论

Model-Driven Software Engineering in Practice: privacy-Enhanced Filtering of Network Traffic 2017

Model-Driven Software Engineering in Practice: Privacy-Enhan...

引用

11th Joint Meeting of European Software Engineering conference (ESEC) / acm SIGSOFT Symposium on the Foundations of Software Engineering (FSE)

作者： van Dijk, Roel Creeten, Christophe van der Ham, Jeroen van den Bos, Jeroen Netherlands Forens Inst The Hague Netherlands Delft Univ Technol Delft Netherlands Natl Cyber Secur Ctr The Hague Netherlands Zuyd Univ Appl Sci Heerlen Netherlands

ISBN: (纸本)9781450351058

Network traffic data contains a wealth of information for use in security analysis and application development. Unfortunately, it also usually contains confidential or otherwise sensitive information, prohibiting sharing and analysis. Existing automated anonymization solutions are hard to maintain and tend to be outdated. We present privacy-Enhanced Filtering (PEF), a model-driven prototype framework that relies on declarative descriptions of protocols and a set of filter rules, which are used to automatically transform network traffic data to remove sensitive information. This paper discusses the design, implementation and application of PEF, which is available as open-source software and configured for use in a typical malware detection scenario.

关键词： model-driven engineering domain-specific languages open-source prototype privacy-enhancing technology

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共56页 << < 27 28 29 30 31 32 33 34 35 36 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：