检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

555 篇 会议
1 篇 期刊文献

馆藏范围

556 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

430 篇 工学
- 418 篇 计算机科学与技术...
- 139 篇 软件工程
- 104 篇 信息与通信工程
- 28 篇 网络空间安全
- 21 篇 电气工程
- 12 篇 控制科学与工程
- 9 篇 安全科学与工程
- 5 篇 建筑学
- 4 篇 生物工程
- 3 篇 动力工程及工程热...
- 3 篇 生物医学工程（可授...
- 2 篇 机械工程
- 2 篇 仪器科学与技术
- 2 篇 土木工程
- 2 篇 交通运输工程
114 篇 理学
- 105 篇 数学
- 8 篇 统计学（可授理学、...
- 5 篇 生物学
- 5 篇 系统科学
- 2 篇 物理学
33 篇 管理学
- 21 篇 图书情报与档案管...
- 15 篇 管理科学与工程(可...
- 8 篇 工商管理
8 篇 法学
- 7 篇 社会学
- 1 篇 法学
3 篇 经济学
- 3 篇 应用经济学
3 篇 医学
- 3 篇 基础医学(可授医学...
- 3 篇 临床医学
- 2 篇 公共卫生与预防医...
1 篇 教育学
- 1 篇 教育学
1 篇 军事学

主题

59 篇 privacy
44 篇 security
25 篇 data privacy
21 篇 differential pri...
21 篇 machine learning
20 篇 access control
13 篇 sensitive data
11 篇 iot
11 篇 android
11 篇 mobile security
10 篇 internet of thin...
10 篇 deep learning
9 篇 static analysis
9 篇 blockchain
8 篇 federated learni...
7 篇 homomorphic encr...
7 篇 web security
7 篇 network security
7 篇 cloud security
7 篇 cloud computing

机构

8 篇 purdue univ w la...
6 篇 north carolina s...
6 篇 rhein westfal th...
6 篇 carnegie mellon ...
5 篇 univ texas dalla...
4 篇 stevens inst tec...
4 篇 fraunhofer aisec...
4 篇 purdue universit...
4 篇 carnegie mellon ...
4 篇 concordia univ m...
3 篇 singapore inst t...
3 篇 ericsson secur r...
3 篇 purdue universit...
3 篇 ecole polytech f...
3 篇 umass boston bos...
3 篇 univ illinois ur...
3 篇 tech univ darmst...
3 篇 king's college l...
3 篇 university of pi...
3 篇 university of te...

作者

13 篇 bertino elisa
11 篇 sandhu ravi
7 篇 enck william
6 篇 ghinita gabriel
6 篇 meyer ulrike
6 篇 kantarcioglu mur...
5 篇 gupta maanak
5 篇 wang lingyu
4 篇 lee adam j.
4 篇 conti mauro
4 篇 murat kantarciog...
4 篇 elisa bertino
4 篇 liu fang
4 篇 mittal sudip
4 篇 gabriel ghinita
4 篇 gunter carl a.
4 篇 pourzandi makan
4 篇 pretschner alexa...
4 篇 wetzel susanne
4 篇 majumdar suryadi...

语言

552 篇 英文
3 篇 其他
1 篇 中文

检索条件"任意字段=Proceedings of the Fifteenth ACM Conference on Data and Application Security and Privacy"

共 556 条记录，以下是31-40 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Nothing Personal: Understanding the Spread and Use of Personally Identifiable Information in the Financial Ecosystem 24

Nothing Personal: Understanding the Spread and Use of Person...

引用

14th acm conference on data and application security and privacy (acm CODASPY)

作者： Zaeifi, Mehrnoosh Kalantari, Faezeh Oest, Adam Sun, Zhibo Ahn, Gail-Joon Shoshitaishvili, Yan Bao, Tiffany Wang, Ruoyu Doupe, Adam Arizona State Univ Tempe AZ 85287 USA Drexel Univ Philadelphia PA USA

ISBN: (纸本)9798400704215

Online services leverage various authentication methods with differing usability and reliability trade-offs, such as password-based or multi-factor authentication (MFA). However, financial service providers face a unique challenge;authenticating the user's legal identity, which involves verifying Personally Identifiable Information (PII), which we call PII-based authentication (PII-BA). These methods assume that PII is private;however, identity theft victimizes millions annually and exposes their PII to criminals. In this paper, we investigate the potential of identity fraud that breaks PII-BA with stolen PII in the financial ecosystem. First, we measure what PII is used in PII-BA across five different financial services for 17 U.S. financial institutions. We subsequently collect data where PII and associated illegal services are available for purchase by monetizers (who perform identity fraud via obtained stolen PII)-operating within the underground economy and paste sites. Finally, we analyze how monetizers can make money from stolen PII by either breaking PII-BA or directly monetizing the PII with the associated cost. Our study reveals that payment processing companies (PPCs) impose lower PII requirements for password/username recovery service PII-BA compared to commercial banks. Consequently, criminals can bypass this PII-BA service across all PPCs by paying $3.5 similar to$50 as opposed to $10.5 similar to$600 for banks. We also outline potential mitigations which could be an essential step in addressing identity fraud resulting from PII-BA in the financial ecosystem.

关键词： Authentication mechanisms security and privacy Underground community Web security

来源：评论

学校读者我要写书评

暂无评论

GROTE: Group Testing for privacy-Preserving Face Identification 23

GROTE: Group Testing for Privacy-Preserving Face Identificat...

引用

13th acm conference on data and application security and privacy (CODASPY)

作者： Ibarrondo, Alberto Chabanne, Herve Despiegel, Vincent Onen, Melek Idemia Paris France EURECOM Sophia Antipolis France

ISBN: (纸本)9798400700675

This paper proposes a novel method to perform privacy-preserving face identification based on the notion of group testing, and applies it to a solution using the Cheon-Kim-Kim-Song (CKKS) homomorphic encryption scheme. Securely computing the closest reference template to a given live template requires.. comparisons, as many as there are identities in a biometric database. Our solution, named GROTE, replaces element-wise testing by group testing to drastically reduce the number of such costly, non-linear operations in the encrypted domain from K to up to 2 root K. More specifically, we approximate the max of the coordinates of a large vector by raising to the alpha-th power and cumulative sum in a 2D layout, incurring a small impact in the accuracy of the system while greatly speeding up its execution. We implement GROTE and evaluate its performance.

关键词： Secure Biometrics Face Identification Homomorphic Encryption privacy Enhancing Technologies

来源：评论

学校读者我要写书评

暂无评论

Infotainment System Matters: Understanding the Impact and Implications of In-Vehicle Infotainment System Hacking with Automotive Grade Linux 23

Infotainment System Matters: Understanding the Impact and Im...

引用

13th acm conference on data and application security and privacy (CODASPY)

作者： Jeong, Seonghoon Ryu, Minsoo Kang, Hyunjae Kim, Huy Kang Korea Univ Sch Cybersecur Seoul South Korea

ISBN: (纸本)9798400700675

An in-vehicle infotainment (IVI) system is connected to heterogeneous networks such as Controller Area Network bus, Bluetooth, Wi-Fi, cellular, and other vehicle-to-everything communications. An IVI system has control of a connected vehicle and deals with privacy-sensitive information like current geolocation and destination, phonebook, SMS, and driver's voice. Several offensive studies have been conducted on IVI systems of commercialized vehicles to show the feasibility of car hacking. However, to date, there has been no comprehensive analysis of the impact and implications of IVI system exploitations. To understand security and privacy concerns, we provide our experience hosting an IVI system hacking competition, Cyber security Challenge 2021 (CSC2021). We use a feature-flavored infotainment operating system, Automotive Grade Linux (AGL). The participants gathered and submitted 33 reproducible and verified proofs-of-concept exploit codes targeting 11 components of the AGL-based IVI testbed. The participants exploited four vulnerabilities to steal various data, manipulate the IVI system, and cause a denial of service. The data leakage includes privacy, personally identifiable information, and cabin voice. The participants proved lateral movement to electronic control units and smartphones. We conclude with lessons learned with three mitigation strategies to enhance the security of the IVI system.

关键词： car hacking cybersecurity competition vulnerability exploit Automotive Grade Linux privacy leakage

来源：评论

学校读者我要写书评

暂无评论

Precision Guided Approach to Mitigate data Poisoning Attacks in Federated Learning 24

Precision Guided Approach to Mitigate Data Poisoning Attacks...

引用

14th acm conference on data and application security and privacy (acm CODASPY)

作者： Kumar, K. Naveen Mohan, C. Krishna Machiry, Aravind Indian Inst Technol Comp Sci & Engn Hyderabad India Purdue Univ Elect & Comp Engn Wesy Lafayatte IN USA

ISBN: (纸本)9798400704215

Federated Learning (FL) is a collaborative learning paradigm enabling participants to collectively train a shared machine learning model while preserving the privacy of their sensitive data. Nevertheless, the inherent decentralized and data-opaque characteristics of FL render its susceptibility to data poisoning attacks. These attacks introduce malformed or malicious inputs during local model training, subsequently influencing the global model and resulting in erroneous predictions. Current FL defense strategies against data poisoning attacks either involve a trade-off between accuracy and robustness or necessitate the presence of a uniformly distributed root dataset at the server. To overcome these limitations, we present FedZZ, which harnesses a zone-based deviating update (ZBDU) mechanism to effectively counter data poisoning attacks in FL. The ZBDU approach identifies the clusters of benign clients whose collective updates exhibit notable deviations from those of malicious clients engaged in data poisoning attack. Further, we introduce a precision-guided methodology that actively characterizes these client clusters (zones), which in turn aids in recognizing and discarding malicious updates at the server. Our evaluation of FedZZ across two widely recognized datasets: CIFAR10 and EMNIST, demonstrate its efficacy in mitigating data poisoning attacks, surpassing the performance of prevailing state-of-the-art methodologies in both single and multi-client attack scenarios and varying attack volumes. Notably, FedZZ also functions as a robust client selection strategy, even in highly non-IID and attack-free scenarios. Moreover, in the face of escalating poisoning rates, the model accuracy attained by FedZZ displays superior resilience compared to existing techniques. For instance, when confronted with a 50% presence of malicious clients, FedZZ sustains an accuracy of 67.43%, while the accuracy of the second-best solution, FL-Defender, diminishes to 43.36%.

关键词： Federated learning data poisonous attacks defense precision guided

来源：评论

学校读者我要写书评

暂无评论

The Design of an Ontology for ATT&CK and its application to Cybersecurity 23

The Design of an Ontology for ATT&CK and its Application to ...

引用

13th acm conference on data and application security and privacy (CODASPY)

作者： Akbar, Khandakar Ashrafi Halim, Sadaf Md Singhal, Anoop Abdeen, Basel Khan, Latifur Thuraisingham, Bhavani Univ Texas Dallas Richardson TX 75083 USA Natl Inst Stand & Technol Gaithersburg MD 20899 USA

ISBN: (纸本)9798400700675

The spread of attacks in computer networks and within systems can have severe consequences for both individuals and organizations. One approach to preventing the spread of attacks is to use ontological aid, which is the use of ontologies to provide a structured representation of knowledge about the attack and its components, especially the ones who often disguise themselves to remain undetected for a long time within the system. As soon as one particular stage of such an attack is detected, it is imperative to reduce the amount of spread so that no permanent damage can be done. For this, the security analyst must boil down to technical details from a behavioral perspective so that proper defensive initiatives can be taken. We propose an ontology that will aid security analysts to find out the list of vulnerabilities to be patched so that an ongoing attack campaign can be prevented from spreading even more.

关键词： Ontology MITRE ATT&CK Framework Cyber Response

来源：评论

学校读者我要写书评

暂无评论

Poster: privacy Risks from Misconfigured Android Content Providers 23

Poster: Privacy Risks from Misconfigured Android Content Pro...

引用

30th acm SIGSAC conference on Computer and Communications security (acm CCS)

作者： Lenk, Christopher Kinder, Johannes Zent Stelle Informat Tech Sicherheitsbe Munich Germany Ludwig Maximilians Univ Munchen LMU Munich Munich Germany

ISBN: (纸本)9798400700507

Android applications record and process personal user data, and they can share it among each other through content providers. While the access is protected through multiple mechanisms, unintentional misconfigurations can allow an attacker to access or modify private application data. In this work, we study how content providers protect private data in a systematic study on 14.4 million Android apps. We identify potentially vulnerable apps by using static analysis to successively reduce the set of target apps. Using a custom attack app, we can confirm data leakage in practice and successfully access privacy-sensitive information. We conclude that this points to an inherent problem in designing secure Android applications and discuss possible mitigations.

关键词： Android content provider data leakage static analysis privacy

来源：评论

学校读者我要写书评

暂无评论

Model theft attack against a tinyML application running on an Ultra-Low-Power Open-Source SoC 21

Model theft attack against a tinyML application running on a...

引用

21st acm International conference on Computing Frontiers (CF)

作者： Porsia, Antonio Ruospo, Annachiara Sanchez, Ernesto Politecn Torino Turin Italy

ISBN: (纸本)9798400704925

With the advent of tinyML, IoT devices have expanded their range of operations from simple data gathering and transmission to full-fledged inference. This expansion has been further enabled by the rise in popularity of open-source hardware, with the RISC-V architecture being the most prominent example. TinyML's decentralization can solve the current privacy and security issues of IoT infrastructures. However, it also shifts the burden of security on already resource-constrained devices. Ultra-low-power devices, in particular, often sacrifice security features for energy and area efficiency. This work aims at showing that, in the context of edge computing based on open-source hardware, neglecting hardware security features for the sake of efficiency is not an acceptable trade-off with respect to AI security.

关键词： Hardware security tinyML Ultra-Low-Power Hardware Open-Source Hardware

来源：评论

学校读者我要写书评

暂无评论

Demo : data Minimization and Informed Consent in Administrative Forms 23

Demo : Data Minimization and Informed Consent in Administrat...

引用

30th acm SIGSAC conference on Computer and Communications security (acm CCS)

作者： Anciaux, Nicolas Frittella, Sabine Joffroy, Baptiste Nguyen, Benjamin INRIA Saclay France Univ Paris Saclay Versailles Saclay France INSA Ctr Val Loire LIFO Bourges France Univ Orleans Orleans France

ISBN: (纸本)9798400700507

This article proposes a demonstration implementing the data minimization privacy principle, focusing on reducing data collected by government administrations through forms. data minimization is defined in many privacy regulations worldwide, but has not seen extensive real-world application. We propose a model based on logic and game theory and show that it is possible to create a practical and efficient solution for a real French welfare benefit case.

关键词： privacy data minimization GDPR Informed consent

来源：评论

学校读者我要写书评

暂无评论

IdDecoder: A Face Embedding Inversion Tool and its privacy and security Implications on Facial Recognition Systems 23

IdDecoder: A Face Embedding Inversion Tool and its Privacy a...

引用

13th acm conference on data and application security and privacy (CODASPY)

作者： Minh-Ha Le Carlsson, Niklas Linkoping Univ Linkoping Sweden

ISBN: (纸本)9798400700675

Most state-of-the-art facial recognition systems (FRS:s) use face embeddings. In this paper, we present the IdDecoder framework, capable of effectively synthesizing realistic-neutralized face images from face embeddings, and two effective attacks on state-of-the-art facial recognition models using embeddings. The first attack is a black-box version of a model inversion attack that allows the attacker to reconstruct a realistic face image that is both visually and numerically (as determined by the FRS:s) recognized as the same identity as the original face used to create a given face embedding. This attack raises significant privacy concerns regarding the membership of the gallery dataset of these systems and highlights the importance of both the people designing and deploying FRS:s paying greater attention to the protection of the face embeddings than currently done. The second attack is a novel attack that performs the model inversion, so to instead create the face of an alternative identity that is visually different from the original identity but has close identity distance (ensuring that it is recognized as being of the same identity). This attack increases the attacked system's false acceptance rate and raises significant security concerns. Finally, we use IdDecoder to visualize, evaluate, and provide insights into differences between three state-of-the-art facial embedding models.

关键词： Face embedding inversion Black-box attack Facial recognition

来源：评论

学校读者我要写书评

暂无评论

SCAtt-man: Side-Channel-Based Remote Attestation for Embedded Devices that Users Understand 23

SCAtt-man: Side-Channel-Based Remote Attestation for Embedde...

引用

13th acm conference on data and application security and privacy (CODASPY)

作者： Surminski, Sebastian Niesler, Christian Linsner, Sebastian Davi, Lucas Reuter, Christian Univ Duisburg Essen Essen Germany Tech Univ Darmstadt Darmstadt Germany

ISBN: (纸本)9798400700675

From the perspective of end-users, IoT devices behave like a black box: As long as they work as intended, users will not detect any compromise. Users have minimal control over the software. Hence, it is very likely that the user misses that illegal recordings and transmissions occur if a security camera or a smart speaker is hacked. In this paper, we present SCAtt-man, the first remote attestation scheme that is specifically designed with the user in mind. SCAtt-man deploys software-based attestation to check the integrity of remote devices, allowing users to verify the integrity of IoT devices with their smartphones. The key novelty of SCAtt-man resides in the utilization of user-observable side-channels such as light or sound in the attestation protocol. Our proof-of-concept implementation targets a smart speaker and an attestation protocol that is based on a data-over-sound protocol. Our evaluation demonstrates the effectiveness of SCAtt-man against a variety of attacks and its usability based on a user study with 20 participants.

关键词： attestation firmware security IoT smart speaker

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共56页 << < 1 2 3 4 5 6 7 8 9 10 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：