检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

579 篇 会议
1 篇 期刊文献

馆藏范围

580 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

454 篇 工学
- 439 篇 计算机科学与技术...
- 151 篇 软件工程
- 113 篇 信息与通信工程
- 28 篇 网络空间安全
- 27 篇 电气工程
- 14 篇 控制科学与工程
- 10 篇 安全科学与工程
- 5 篇 建筑学
- 4 篇 机械工程
- 4 篇 生物工程
- 3 篇 仪器科学与技术
- 3 篇 动力工程及工程热...
- 3 篇 电子科学与技术（可...
- 3 篇 交通运输工程
- 3 篇 生物医学工程（可授...
- 2 篇 土木工程
117 篇 理学
- 107 篇 数学
- 9 篇 统计学（可授理学、...
- 5 篇 生物学
- 5 篇 系统科学
- 4 篇 物理学
39 篇 管理学
- 21 篇 管理科学与工程(可...
- 21 篇 图书情报与档案管...
- 10 篇 工商管理
8 篇 法学
- 7 篇 社会学
- 1 篇 法学
4 篇 经济学
- 4 篇 应用经济学
3 篇 医学
- 3 篇 基础医学(可授医学...
- 3 篇 临床医学
- 2 篇 公共卫生与预防医...
1 篇 教育学
1 篇 军事学

主题

61 篇 privacy
46 篇 security
28 篇 data privacy
22 篇 machine learning
21 篇 access control
21 篇 differential pri...
14 篇 sensitive data
11 篇 iot
11 篇 android
11 篇 blockchain
11 篇 mobile security
10 篇 internet of thin...
10 篇 deep learning
9 篇 static analysis
9 篇 cryptography
8 篇 federated learni...
7 篇 homomorphic encr...
7 篇 data mining
7 篇 web security
7 篇 network security

机构

8 篇 purdue univ w la...
6 篇 north carolina s...
6 篇 rhein westfal th...
6 篇 carnegie mellon ...
5 篇 univ texas dalla...
4 篇 stevens inst tec...
4 篇 fraunhofer aisec...
4 篇 purdue universit...
4 篇 carnegie mellon ...
4 篇 concordia univ m...
3 篇 singapore inst t...
3 篇 ericsson secur r...
3 篇 purdue universit...
3 篇 ecole polytech f...
3 篇 umass boston bos...
3 篇 univ illinois ur...
3 篇 tech univ darmst...
3 篇 king's college l...
3 篇 university of pi...
3 篇 university of te...

作者

13 篇 bertino elisa
11 篇 sandhu ravi
7 篇 enck william
6 篇 ghinita gabriel
6 篇 meyer ulrike
6 篇 kantarcioglu mur...
5 篇 gupta maanak
5 篇 wang lingyu
4 篇 lee adam j.
4 篇 conti mauro
4 篇 murat kantarciog...
4 篇 elisa bertino
4 篇 liu fang
4 篇 mittal sudip
4 篇 gabriel ghinita
4 篇 gunter carl a.
4 篇 pourzandi makan
4 篇 pretschner alexa...
4 篇 wetzel susanne
4 篇 majumdar suryadi...

语言

574 篇 英文
4 篇 其他
2 篇 中文

检索条件"任意字段=Proceedings of the Seventh ACM on Conference on Data and Application Security and Privacy"

共 580 条记录，以下是131-140 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Reflections on a Decade of Mobile security Research 22

Reflections on a Decade of Mobile Security Research

引用

15th acm conference on security and privacy in Wireless and Mobile Networks (acm WiSec)

作者： Enck, William North Carolina State Univ Raleigh NC 27695 USA

ISBN: (纸本)9781450392167

The emergence of the smartphone in the late 2000s occurred during a perfect storm of technology and society. Advances in embedded technologies provided a critical balance of computing power and energy consumption. The integration of accelerometers and GPS sensors provided valuable primitives for innovative applications, and 3G cellular technologies provided enough data capacity for meaningful interactions with servers. Simultaneously, social networking was taking off, giving consumers a reason to increasingly engage with computing. The mobile industry capitalized on this opportunity, opening the traditionally tightly controlled environment to third-parties and providing a streamlined way for application developers and consumers to discover and commodify computing. Today, Web traffic from smartphones exceeds that of traditional desktops and laptops. The initial reaction of the security research community was cautious, not seeing what made this form of computing different. In many ways, smartphones are the same as traditional consumer platforms. Consumers download and run third-party software that connects to servers on the Internet. However, there are key ways in which smartphones are different. Some of these differences are technical. For example, smartphones never turn off and are continually collecting information. They also present a new runtime abstraction where each application is a security principal. Other differences are rooted in how we use them. Our smartphones are always with us, and as a result they have become the transport vehicle for micro-doses of dopamine that feeds our Internet addicted society. They are the first thing we look at in the morning, the last in the evening, and means of avoiding boredom throughout the day. Despite initial reservations, the past decade has seen a boom in security research studying smartphones and mobile technologies. While this research started at the application layer, it has gradually worked its way down the stack, c

关键词： Smartphone security mobile app security mobile device security

来源：评论

学校读者我要写书评

暂无评论

AI for security and security for AI 21

AI for Security and Security for AI

引用

11th acm conference on data and application security and privacy (CODASPY)

作者： Bertino, Elisa Kantarcioglu, Murat Akcora, Cuneyt Gurcan Samtani, Sagar Mittal, Sudip Gupta, Maanak Purdue Univ W Lafayette IN 47907 USA Univ Texas Dallas Richardson TX 75083 USA Univ Manitoba Winnipeg MB Canada Indiana Univ Bloomington IN 47405 USA Univ North Carolina Wilmington Wilmington NC USA Tennessee Technol Univ Cookeville TN 38505 USA

ISBN: (纸本)9781450381437

On one side, the security industry has successfully adopted some AI-based techniques. Use varies from mitigating denial of service attacks, forensics, intrusion detection systems, homeland security, critical infrastructures protection, sensitive information leakage, access control, and malware detection. On the other side, we see the rise of Adversarial AI. Here the core idea is to subvert AI systems for fun and profit. The methods utilized for the production of AI systems are systematically vulnerable to a new class of vulnerabilities. Adversaries are exploiting these vulnerabilities to alter AI system behavior to serve a malicious end goal. This panel discusses some of these aspects.

关键词： computer security artificial intelligence

来源：评论

学校读者我要写书评

暂无评论

Spend Your Budget Wisely: Towards an Intelligent Distribution of the privacy Budget in Differentially Private Text Rewriting 25

Spend Your Budget Wisely: Towards an Intelligent Distributio...

引用

proceedings of the Fifteenth acm conference on data and application security and privacy

作者： Stephen Meisenbacher Chaeeun Joy Lee Florian Matthes School of Computation Information and Technology Technical University of Munich Garching Germany

ISBN: (纸本)9798400714764

The task of Differentially Private Text Rewriting is a class of text privatization techniques in which (sensitive) input textual documents are rewritten under Differential privacy (DP) guarantees. The motivation behind such methods is to hide both explicit and implicit identifiers that could be contained in text, while still retaining the semantic meaning of the original text, thus preserving utility. Recent years have seen an uptick in research output in this field, offering a diverse array of word-, sentence-, and document-level DP rewriting methods. Common to these methods is the selection of a privacy budget (i.e., the ε parameter), which governs the degree to which a text is privatized. One major limitation of previous works, stemming directly from the unique structure of language itself, is the lack of consideration of where the privacy budget should be allocated, as not all aspects of language, and therefore text, are equally sensitive or personal. In this work, we are the first to address this shortcoming, asking the question of how a given privacy budget can be intelligently and sensibly distributed amongst a target document. We construct and evaluate a toolkit of linguistics- and NLP-based methods used to allocate a privacy budget to constituent tokens in a text document. In a series of privacy and utility experiments, we empirically demonstrate that given the same privacy budget, intelligent distribution leads to higher privacy levels and more positive trade-offs than a naive distribution of epsilon. Our work highlights the intricacies of text privatization with DP, and furthermore, it calls for further work on finding more efficient ways to maximize the privatization benefits offered by DP in text rewriting.

关键词： data privacy

来源：评论

学校读者我要写书评

暂无评论

Controlling security Rules Using Natural Dialogue: an application to Smart Home Care 21

Controlling Security Rules Using Natural Dialogue: an Applic...

引用

acm International Joint conference on Pervasive and Ubiquitous Computing (UbiComp) / acm International Symposium on Wearable Computers (ISWC)

作者： Goffinet, Stanley Schmitz, Donatien Zavalyshyn, Igor Legay, Axel Riviere, Etienne UCLouvain ICTEAM Ottignies Belgium

ISBN: (纸本)9781450384612

Smart home systems have revolutionized the way we interact with our living environment, but the concerns over sensor data privacy and security have become one of the major barriers to their widespread adoption. Despite a considerable research effort in designing secure access control mechanisms, the end users are still reluctant to use those either due to the complexity of the interfaces or because they do not have sufficient skills. For the elderly users the problem gets worse. Making the right security choices is increasingly more difficult for this group of users. To assist the elderly users in defining their access control policies, we design a dialogue-based system which allows to create new security rules or update existing ones in a simple and intelligible way using natural language and familiar terms.

关键词： privacy smart home elderly access control voice assistant

来源：评论

学校读者我要写书评

暂无评论

security Threats from Bitcoin Wallet Smartphone applications: Vulnerabilities, Attacks, and Countermeasures 21

Security Threats from Bitcoin Wallet Smartphone Applications...

引用

11th acm conference on data and application security and privacy (CODASPY)

作者： Hu, Yiwen Wang, Sihan Tu, Guan-Hua Xiao, Li Xie, Tian Lei, Xinyu Li, Chi-Yu Michigan State Univ Dept Comp Sci & Engn E Lansing MI 48824 USA Natl Chiao Tung Univ Dept Comp Sci Hsinchu Taiwan

ISBN: (纸本)9781450381437

Nowadays, Bitcoin is the most popular cryptocurrency. With the proliferation of smartphones and the high-speed mobile Internet, more and more users have started accessing their Bitcoin wallets on their smartphones. Users can download and install a variety of Bitcoin wallet applications (e.g., Coinbase, Luno, Bitcoin Wallet) on their smartphones and access their Bitcoin wallets anytime and anywhere. However, it is still unknown whether these Bitcoin wallet smartphone applications are secure or if they are new attack surfaces for adversaries to attack these application users. In this work, we explored the insecurity of the 10 most popular Bitcoin wallet smartphone applications and discovered three security vulnerabilities. By exploiting them, adversaries can launch various attacks including Bitcoin deanonymization, reflection and amplification spamming, and wallet fraud attacks. To address the identified security vulnerabilities, we developed a phone-side Bitcoin security Rectifier to secure Bitcoin wallet smartphone application users. The developed rectifier does not require any modifications to current wallet applications and is compliant with Bitcoin standards.

关键词： Bitcoin wallets Blockchain security Mobile networks

来源：评论

学校读者我要写书评

暂无评论

We Can Pay Less : Coordinated False data Injection Attack Against Residential Demand Response in Smart Grids 21

We Can Pay Less : Coordinated False Data Injection Attack Ag...

引用

11th acm conference on data and application security and privacy (CODASPY)

作者： Dayaratne, Thusitha Rudolph, Carsten Liebman, Ariel Salehi, Mahsa Monash Univ Clayton Vic Australia

ISBN: (纸本)9781450381437

Advanced metering infrastructure, along with home automation processes, is enabling more efficient and effective demand-side management opportunities for both consumers and utility companies. However, tight cyber-physical integration also enables novel attack vectors for false data injection attacks (FDIA) as home automation/home energy management systems reside outside the utilities' control perimeter. Authentic users themselves can manipulate these systems without causing significant security breaches compared to traditional FDIAs. This work depicts a novel FDIA that exploits one of the commonly utilised distributed device scheduling architectures. We evaluate the attack impact using a realistic dataset to demonstrate that adversaries gain significant benefits, independently from the actual algorithm used for optimisation, as long as they have control over a sufficient amount of demand. Compared to traditional FDIAs, reliable security mechanisms such as proper authentication, security protocols, security controls or, sealed/controlled devices cannot prevent this new type of FDIA. Thus, we propose a set of possible impact alleviation solutions to thwart this type of attack.

关键词： Demand response False data injection attack Impact alleviation Smart grid vulnerabilities

来源：评论

学校读者我要写书评

暂无评论

IIoT-ARAS: IIoT/ICS Automated Risk Assessment System for Prediction and Prevention 21

IIoT-ARAS: IIoT/ICS Automated Risk Assessment System for Pre...

引用

11th acm conference on data and application security and privacy (CODASPY)

作者： Zahran, Bassam Hussaini, Adamu Ali-Gombe, Aisha Towson Univ Towson MD 21252 USA

ISBN: (纸本)9781450381437

As IT/OT convergence continues to evolve, the traditionally isolated ICS/OT systems are increasingly exposed to a myriad of online and offline threats. Although IIoT enhances the reachability in ICS, improved data analytics, ensuring ease of access and decision making, it unwittingly opens the ICS environment to attackers. The design of IIoT introduces multiple entry points to an isolated system, which is used to protect itself via air-gapping and risk avoidance strategies. This study explores a comprehensive mapping of threats and risks for IT/OT convergence. Additionally, we propose IIoT-ARAS - an automated risk assessment system based on OCTAVE Allegro and ISO/IEC 27030 methodologies. The design of IIoT-ARAS is aimed to be agentless, with minimum interruptions to the OT environment. Furthermore, the system performs automated regular asset inventory checks, threshold optimization, probability computation, risk evaluations, and contingency plan configuration.

关键词： Cybersecurity security IIoT ICS IT/OT Convergence

来源：评论

学校读者我要写书评

暂无评论

Enhanced Threat Modeling and Attack Scenario Generation for OAuth 2.0 Implementations: data/Toolset paper 25

Enhanced Threat Modeling and Attack Scenario Generation for ...

引用

proceedings of the Fifteenth acm conference on data and application security and privacy

作者： Pieter Philippaerts Stef Verreydt Wouter Joosen KU Leuven Leuven Belgium

ISBN: (纸本)9798400714764

OAuth 2.0 is a widely adopted authorization framework enabling secure, delegated access to resources on behalf of a user. While the protocol is robust when implemented correctly, real-world deployments often exhibit vulnerabilities due to misconfigurations, incomplete mitigations, or misunderstandings of its intricacies. (Semi-)automated testing is therefore essential to identify and address these security flaws. Among available tools, OAuch offers the most comprehensive benchmark for assessing OAuth IdP implementations by identifying potential threats based on the OAuth threat model and related standards. However, OAuch has notable limitations, including an incomplete threat model, ambiguous threat classifications, and a lack of support for multi-vulnerability attack scenarios. This paper presents enhancements to OAuch that improve the tool's usability, including enriched metadata, the introduction of attack scenarios for multi-threat analyses, and a likelihood assessment to prioritize mitigation efforts.

关键词： OAuth 2.0

来源：评论

学校读者我要写书评

暂无评论

TerrARA: Automated security Threat Modeling for Infrastructure as Code 25

TerrARA: Automated Security Threat Modeling for Infrastructu...

引用

proceedings of the Fifteenth acm conference on data and application security and privacy

作者： Anh-Duy Tran Laurens Sion Koen Yskout Wouter Joosen DistriNet KU Leuven Leuven Belgium

ISBN: (纸本)9798400714764

The emergence of DevOps is accompanied by an increased use of Infrastructure as Code (IaC) to specify and manage deployment configurations, infrastructure, and associated resources. Terraform is one such IaC solution. However, improper configurations can lead to serious security threats. This paper introduces an approach, implemented as TerrARA, that provides a systematic and structured way for automatically eliciting security threats based on Terraform configuration files. Specifically, TerrARA: (1) automates the construction of an abstract model-an enriched data Flow Diagram (DFD)-from Terraform configuration files for Amazon Web Services (AWS), and it can be extended to other resources and cloud providers via profiles; (2) encodes cloud computing threat patterns, which are utilized by the SPARTA threat modeling engine to automatically identify security threats; and (3) demonstrates its capability in accurately extracting DFDs from Terraform projects and eliciting relevant cloud computing security threats, achieving high accuracy and reasonable performance compared to existing tools and approaches like StartLeft and GPT-4o. By integrating it into CI/CD pipelines, the automated reconstruction and analysis enable continuous security assessments that systematically incorporate cloud infrastructure artifacts into the threat modeling process.

关键词： data flow diagram

来源：评论

学校读者我要写书评

暂无评论

Towards Accurate Labeling of Android Apps for Reliable Malware Detection 21

Towards Accurate Labeling of Android Apps for Reliable Malwa...

引用

11th acm conference on data and application security and privacy (CODASPY)

作者： Salem, Aleieldin Tech Univ Munich Garching Germany

ISBN: (纸本)9781450381437

In training their newly-developed malware detection methods, researchers rely on threshold-based labeling strategies that interpret the scan reports provided by online platforms, such as VirusTotal. The dynamicity of this platform renders those labeling strategies unsustainable over prolonged periods, which leads to inaccurate labels. Using inaccurately labeled apps to train and evaluate malware detection methods significantly undermines the reliability of their results, leading to either dismissing otherwise promising detection approaches or adopting intrinsically inadequate ones. The infeasibility of generating accurate labels via manual analysis and the lack of reliable alternatives force researchers to utilize VirusTotal to label apps. In the paper, we tackle this issue in two manners. Firstly, we reveal the aspects of VirusTotal's dynamicity and how they impact threshold-based labeling strategies and provide actionable insights on how to use these labeling strategies given VirusTotal's dynamicity reliably. Secondly, we motivate the implementation of alternative platforms by (a) identifying VirusTotal limitations that such platforms should avoid, and (b) proposing an architecture of how such platforms can be constructed to mitigate VirusTotal's limitations.

关键词： android security malware detection machine learning virustotal

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共58页 << < 10 11 12 13 14 15 16 17 18 19 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：