检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

579 篇 会议
1 篇 期刊文献

馆藏范围

580 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

454 篇 工学
- 439 篇 计算机科学与技术...
- 151 篇 软件工程
- 113 篇 信息与通信工程
- 28 篇 网络空间安全
- 27 篇 电气工程
- 14 篇 控制科学与工程
- 10 篇 安全科学与工程
- 5 篇 建筑学
- 4 篇 机械工程
- 4 篇 生物工程
- 3 篇 仪器科学与技术
- 3 篇 动力工程及工程热...
- 3 篇 电子科学与技术（可...
- 3 篇 交通运输工程
- 3 篇 生物医学工程（可授...
- 2 篇 土木工程
117 篇 理学
- 107 篇 数学
- 9 篇 统计学（可授理学、...
- 5 篇 生物学
- 5 篇 系统科学
- 4 篇 物理学
39 篇 管理学
- 21 篇 管理科学与工程(可...
- 21 篇 图书情报与档案管...
- 10 篇 工商管理
8 篇 法学
- 7 篇 社会学
- 1 篇 法学
4 篇 经济学
- 4 篇 应用经济学
3 篇 医学
- 3 篇 基础医学(可授医学...
- 3 篇 临床医学
- 2 篇 公共卫生与预防医...
1 篇 教育学
1 篇 军事学

主题

61 篇 privacy
46 篇 security
28 篇 data privacy
22 篇 machine learning
21 篇 access control
21 篇 differential pri...
14 篇 sensitive data
11 篇 iot
11 篇 android
11 篇 blockchain
11 篇 mobile security
10 篇 internet of thin...
10 篇 deep learning
9 篇 static analysis
9 篇 cryptography
8 篇 federated learni...
7 篇 homomorphic encr...
7 篇 data mining
7 篇 web security
7 篇 network security

机构

8 篇 purdue univ w la...
6 篇 north carolina s...
6 篇 rhein westfal th...
6 篇 carnegie mellon ...
5 篇 univ texas dalla...
4 篇 stevens inst tec...
4 篇 fraunhofer aisec...
4 篇 purdue universit...
4 篇 carnegie mellon ...
4 篇 concordia univ m...
3 篇 singapore inst t...
3 篇 ericsson secur r...
3 篇 purdue universit...
3 篇 ecole polytech f...
3 篇 umass boston bos...
3 篇 univ illinois ur...
3 篇 tech univ darmst...
3 篇 king's college l...
3 篇 university of pi...
3 篇 university of te...

作者

13 篇 bertino elisa
11 篇 sandhu ravi
7 篇 enck william
6 篇 ghinita gabriel
6 篇 meyer ulrike
6 篇 kantarcioglu mur...
5 篇 gupta maanak
5 篇 wang lingyu
4 篇 lee adam j.
4 篇 conti mauro
4 篇 murat kantarciog...
4 篇 elisa bertino
4 篇 liu fang
4 篇 mittal sudip
4 篇 gabriel ghinita
4 篇 gunter carl a.
4 篇 pourzandi makan
4 篇 pretschner alexa...
4 篇 wetzel susanne
4 篇 majumdar suryadi...

语言

574 篇 英文
4 篇 其他
2 篇 中文

检索条件"任意字段=Proceedings of the Seventh ACM on Conference on Data and Application Security and Privacy"

共 580 条记录，以下是341-350 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

privacy-Preserving Mining of Sequential Association Rules from Provenance Workflows 16

Privacy-Preserving Mining of Sequential Association Rules fr...

引用

6th acm conference on data and application security and privacy (CODASPY)

作者： Maruseac, Mihai Ghinita, Gabriel UMass Boston Boston MA 02125 USA

ISBN: (纸本)9781450339353

Provenance workflows capture movement and transformation of data in complex environments, such as document management in large organizations, content generation and sharing in in social media, scientific computations, etc. Sharing and processing of provenance workflows brings numerous benefits, e.g., improving productivity in an organization, understanding social media interaction patterns, etc. However, directly sharing provenance may also disclose sensitive information such as confidential business practices, or private details about participants in a social network. We propose an algorithm that privately extracts sequential association rules from provenance workflow datasets. Finding such rules has numerous practical applications, such as capacity planning or identifying hot-spots in provenance graphs. Our approach provides good accuracy and strong privacy, by leveraging on the exponential mechanism of differential privacy. We propose an heuristic that identifies promising candidate rules and makes judicious use of the privacy budget. Experimental results show that the our approach is fast and accurate, and clearly outperforms the state-of-the-art. We also identify influential factors in improving accuracy, which helps in choosing promising directions for future improvement.

关键词： differential privacy provenance

来源：评论

学校读者我要写书评

暂无评论

PANDDE: Provenance-based ANomaly Detection of data Exfiltration 16

PANDDE: Provenance-based ANomaly Detection of Data Exfiltrat...

引用

6th acm conference on data and application security and privacy (CODASPY)

作者： Fadolalkarim, Daren Sallam, Asmaa Bertino, Elisa Purdue Univ Dept Comp Sci W Lafayette IN 47906 USA Purdue Univ Cyber Ctr W Lafayette IN 47906 USA

ISBN: (纸本)9781450339353

Preventing data exfiltration by insiders is a challenging process since insiders are users that have access permissions to the data. Existing mechanisms focus on tracking users' activities while they are connected to the database, and are unable to detect anomalous actions that the users perform on the data once they gain access to it. Being able to detect anomalous actions on the data is critical as these actions are often sign of attempts to misuse data. In this paper, we propose an approach to detect anomalous actions executed on data returned to the users from a database. The approach has been implemented as part of the Provenance based ANomaly Detection of data Exfiltration (PANDDE) tool. PANDDE leverages data provenance information captured at the operating system level. Such information is then used to create profiles of users' actions on the data once retrieved from the database. The profiles indicate actions that are consistent with the tasks of the users. Actions recorded in the profiles include data printing, emailing, and storage. Profiles are then used at run-time to detect anomalous actions.

关键词： Operating System security and Reliability Insider Attacks Anomaly Detection Provenance Collection

来源：评论

学校读者我要写书评

暂无评论

On Energy security of Smartphones 16

On Energy Security of Smartphones

引用

6th acm conference on data and application security and privacy (CODASPY)

作者： Gao, Xing Liu, Dachuan Liu, Daiping Wang, Haining Univ Delaware Newark DE 19716 USA Coll William & Mary Williamsburg VA USA

ISBN: (纸本)9781450339353

The availability of smartphones is still severely restricted by the limited battery lifetime. To help users understand the energy consumption, major mobile platforms support fine-grained energy profiling for each app. In this paper, we present a new threat, called energy collateral attacks, which can abuse and mislead all existing energy modeling approaches. In particular, energy collateral attacks are able to divulge battery stealthily through interprocess communication, wakelock, and screen. To defend against those attacks, we propose E-Android to accurately profile the energy consumption in a comprehensive manner. E-Android monitors energy collateral related events and maintains energy consumption for relevant apps. We utilize E-Android to measure the energy consumption under the attack of six energy malware and two normal scenarios. While Android fails to disclose all these energy-malware-based attacks, E Android can accurately profile energy consumption and reveal the existence of energy malware.

关键词： smartphone malware security energy attack

来源：评论

学校读者我要写书评

暂无评论

JSLINQ: Building Secure applications across Tiers 16

JSLINQ: Building Secure Applications across Tiers

引用

6th acm conference on data and application security and privacy (CODASPY)

作者： Balliu, Musard Liebe, Benjamin Schoepe, Daniel Sabelfeld, Andrei Chalmers Gothenburg Sweden

ISBN: (纸本)9781450339353

Modern web and mobile applications are complex entities amalgamating different languages, components, and platforms. The rich features span the application tiers and components, some from third parties, and require substantial efforts to ensure that the insecurity of a single component does not render the entire system insecure. As of today, the majority of the known approaches fall short of ensuring security across tiers. This paper proposes a framework for end-to-end security, by tracking information flow through the client, server, and underlying database. The framework utilizes homogeneous meta-programming to provide a uniform language for programming different components. We leverage. NET meta-programming capabilities from the F# language, thus enabling language-integrated queries on databases and interoperable heterogeneous execution on the client and the server. We develop a core of our security enforcement in the form of a security type system for a functional language with mutable store and prove it sound. Based on the core, we develop JSLINQ, an extension of the WebSharper library to track information flow. We demonstrate the capabilities of JSLINQ on the case studies of a password meter, two location-based services, a movie rental database, an online Battleship game, and a friend finder app. Our experiments indicate that JSLINQ is practical for implementing high-assurance web and mobile applications.

关键词： declassification information-flow control security type system noninterference formal security model web application security

来源：评论

学校读者我要写书评

暂无评论

CODASPY 2015 - proceedings of the 5th acm conference on data and application security and privacy

CODASPY 2015 - Proceedings of the 5th ACM Conference on Data...

引用

5th acm conference on data and application security and privacy, CODASPY 2015

ISBN: (纸本)9781450331913

The proceedings contain 40 papers. The topics discussed include: DBMask: fine-grained access control on encrypted relational databases;differentially-private mining of moderately-frequent high-confidence association rules;StaDynA: addressing the problem of dynamic code updates in the security analysis of android applications;CoinParty: secure multi-party mixing of bitcoins;how your phone camera can be used to stealthily spy on you: transplantation attacks against android camera service;Pleco and Plectron two provably secure password hashing algorithms;one thing leads to another: credential based privilege escalation;epidemic behavior of negative users in online social sites;rapid screening of transformed data leaks with efficient algorithms and parallel computing;ABSS: an attribute-based sanitizable signature for integrity of outsourced database with public cloud;and privacy-preserving scanning of big content for sensitive data exposure with MapReduce.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Differentially Private K-Means Clustering 16

Differentially Private K-Means Clustering

引用

6th acm conference on data and application security and privacy (CODASPY)

作者： Su, Dong Cao, Jianneng Li, Ninghui Bertino, Elisa Jin, Hongxia Purdue Univ W Lafayette IN 47907 USA Inst Infocomm Res Singapore Singapore Samsung Res Amer Mountain View CA USA

ISBN: (纸本)9781450339353

There are two broad approaches for differentially private data analysis. The interactive approach aims at developing customized differentially private algorithms for various data mining tasks. The non-interactive approach aims at developing differentially private algorithms that can output a synopsis of the input dataset, which can then be used to support various data mining tasks. In this paper we study the effectiveness of the two approaches on differentially private k-means clustering. We develop techniques to analyze the empirical error behaviors of the existing interactive and non-interactive approaches. Based on the analysis, we propose an improvement of DPLloyd which is a differentially private version of the Lloyd algorithm. We also propose a non-interactive approach EUGkM which publishes a differentially private synopsis for k-means clustering. Results from extensive and systematic experiments support our analysis and demonstrate the effectiveness of our improvement on DPLloyd and the proposed EUGkM algorithm.

关键词： Differential privacy k-means clustering Private data publishing

来源：评论

学校读者我要写书评

暂无评论

Hacking the DBMS to Prevent Injection Attacks 16

Hacking the DBMS to Prevent Injection Attacks

引用

6th acm conference on data and application security and privacy (CODASPY)

作者： Medeiros, Iberia Beatriz, Miguel Neves, Nuno Correia, Miguel Univ Lisbon Fac Ciencias INESC ID Lisbon Portugal Univ Lisbon Inst Super Tecn INESC ID Lisbon Portugal Univ Lisbon Fac Ciencias LaSIGE Lisbon Portugal

ISBN: (纸本)9781450339353

After more than a decade of research, web application security continues to be a challenge and the backend database the most appetizing target. The paper proposes preventing injection attacks against the database management system (DBMS) behind web applications by embedding protections in the DBMS itself. The motivation is twofold. First, the approach of embedding protections in operating systems and applications running on top of them has been effective to protect these applications. Second, there is a semantic mismatch between how SQL queries are believed to be executed by the DBMS and how they are actually executed, leading to subtle vulnerabilities in protection mechanisms. The approach SEPTIC was implemented in MySQL and evaluated experimentally with web applications written in PHP and Java/Spring. In the evaluation SEPTIC has shown neither false negatives nor false positives, on the contrary of alternative approaches, causing also a low performance overhead in the order of 2.2%.

关键词： web applications injection attacks DBMS self-protection security software security

来源：评论

学校读者我要写书评

暂无评论

Neuralyzer: Flexible Expiration Times for the Revocation of Online data 16

Neuralyzer: Flexible Expiration Times for the Revocation of ...

引用

6th acm conference on data and application security and privacy (CODASPY)

作者： Zarras, Apostolis Kohls, Katharina Duermuth, Markus Poepper, Christina Tech Univ Munich D-80290 Munich Germany Ruhr Univ Bochum Bochum Germany NYU Abu Dhabi New York NY USA

ISBN: (纸本)9781450339353

Once data is released to the Internet, there is little hope to successfully delete it, as it may have been duplicated, reposted, and archived in multiple places. This poses a significant threat to users' privacy and their right to permanently erase their very own data. One approach to control the implications on privacy is to assign a lifetime value to the published data and ensure that the data is no longer accessible after this point in time. However, such an approach suffers from the inability to successfully predict the right time when the data should vanish. Consequently, the author of the data can only estimate the correct time, which unfortunately can cause the premature or belated deletion of data. This paper tackles the problem of prefixed lifetimes in data deletion from a different angle and argues that alternative approaches are a desideratum for research. In our approach, we consider different criteria when data should be deleted, such as keeping data available as long as there is sufficient interest for it or untimely delete it in cases of excessive accesses. To assist the self-destruction of data, we propose a protocol and develop a prototype, called Neuralyzer, which leverages the caching mechanisms of the Domain Name System (DNS) to ensure the successful deletion of data. Our experimental results demonstrate that our approach can completely delete published data while at the same time achieving flexible expiration times varying from few days to several months depending on the users' interest.

关键词： encryption revocation systems flexible expiration times

来源：评论

学校读者我要写书评

暂无评论

SPICE: A Software Tool for Bridging the Gap Between End-user's Insecure Cyber Behavior and Personality Traits 16

SPICE: A Software Tool for Bridging the Gap Between End-user...

引用

6th acm conference on data and application security and privacy (CODASPY)

作者： Tamrakar, Anjila Russell, Justin D. Ahmed, Irfan Richard, Golden G., III Weems, Carl F. Univ New Orleans 2000 Lakeshore Dr New Orleans LA 70122 USA Iowa State Univ Ames IA 50011 USA

ISBN: (纸本)9781450339353

End users are prone to insecure cyber behavior that may lead them to compromise the integrity, availability or confidentiality of their computer systems. For instance, replying to a phishing email may compromise an end user's login credentials. Identifying tendency toward insecure cyber behavior is critically important to improve cyber security posture and thesis of this paper is that the susceptibility of end-users to be a victim of a cyber-attack may be predicted using personality traits such as trait anxiety and callousness. This paper presents an easily configurable, script-based software tool to explore the relationships between the personality traits and insecure cyber behaviors of end users. The software utilizes well-established cognitive methods (such as dot probe) to identify a number of personality traits for a user and further allows researchers to design and conduct experiments through customizable scripting to study the end users' insecure cyber behaviors. The software also collects fine-grained data on users for analysis.

关键词： Software Psychology Personality traits computer security Human factor Test-bed

来源：评论

学校读者我要写书评

暂无评论

Auditing security Compliance of the Virtualized Infrastructure in the Cloud: application to OpenStack 16

Auditing Security Compliance of the Virtualized Infrastructu...

引用

6th acm conference on data and application security and privacy (CODASPY)

作者： Madi, Taous Majumdar, Suryadipta Wang, Yushun Jarraya, Yosr Pourzandi, Makan Wang, Lingyu Concordia Univ CIISE Montreal PQ Canada Ericsson Canada Ericsson Secur Res Montreal PQ Canada

ISBN: (纸本)9781450339353

Cloud service providers typically adopt the multi-tenancy model to optimize resources usage and achieve the promised cost-effectiveness. Sharing resources between different tenants and the underlying complex technology increase the necessity of transparency and accountability. In this regard, auditing security compliance of the provider's infrastructure against standards, regulations and customers' policies takes on an increasing importance in the cloud to boost the trust between the stakeholders. However, virtualization and scalability make compliance verification challenging. In this work, we propose an automated framework that allows auditing the cloud infrastructure from the structural point of view while focusing on virtualization-related security properties and consistency between multiple control layers. Furthermore, to show the feasibility of our approach, we integrate our auditing system into OpenStack, one of the most used cloud infrastructure management systems. To show the scalability and validity of our framework, we present our experimental results on assessing several properties related to auditing inter-layer consistency, virtual machines co-residence, and virtual resources isolation.

关键词： Cloud Virtualization OpenStack security Auditing Formal Verification Co-residence Isolation

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共58页 << < 31 32 33 34 35 36 37 38 39 40 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：