检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

559 篇 会议
1 篇 期刊文献

馆藏范围

560 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

434 篇 工学
- 422 篇 计算机科学与技术...
- 143 篇 软件工程
- 107 篇 信息与通信工程
- 28 篇 网络空间安全
- 21 篇 电气工程
- 12 篇 控制科学与工程
- 9 篇 安全科学与工程
- 5 篇 建筑学
- 4 篇 生物工程
- 3 篇 动力工程及工程热...
- 3 篇 生物医学工程（可授...
- 2 篇 机械工程
- 2 篇 仪器科学与技术
- 2 篇 电子科学与技术（可...
- 2 篇 土木工程
- 2 篇 交通运输工程
117 篇 理学
- 108 篇 数学
- 10 篇 统计学（可授理学、...
- 5 篇 生物学
- 5 篇 系统科学
- 2 篇 物理学
34 篇 管理学
- 22 篇 图书情报与档案管...
- 16 篇 管理科学与工程(可...
- 9 篇 工商管理
8 篇 法学
- 7 篇 社会学
- 1 篇 法学
3 篇 经济学
- 3 篇 应用经济学
3 篇 医学
- 3 篇 基础医学(可授医学...
- 3 篇 临床医学
- 2 篇 公共卫生与预防医...
1 篇 教育学
1 篇 军事学

主题

59 篇 privacy
44 篇 security
25 篇 data privacy
21 篇 differential pri...
21 篇 machine learning
20 篇 access control
14 篇 sensitive data
11 篇 iot
11 篇 android
11 篇 mobile security
10 篇 internet of thin...
10 篇 deep learning
9 篇 static analysis
9 篇 blockchain
8 篇 federated learni...
7 篇 homomorphic encr...
7 篇 web security
7 篇 network security
7 篇 cloud security
7 篇 cloud computing

机构

8 篇 purdue univ w la...
6 篇 north carolina s...
6 篇 rhein westfal th...
6 篇 carnegie mellon ...
5 篇 univ texas dalla...
4 篇 stevens inst tec...
4 篇 fraunhofer aisec...
4 篇 purdue universit...
4 篇 carnegie mellon ...
4 篇 concordia univ m...
3 篇 singapore inst t...
3 篇 ericsson secur r...
3 篇 purdue universit...
3 篇 ecole polytech f...
3 篇 umass boston bos...
3 篇 univ illinois ur...
3 篇 tech univ darmst...
3 篇 king's college l...
3 篇 university of pi...
3 篇 university of te...

作者

13 篇 bertino elisa
11 篇 sandhu ravi
7 篇 enck william
6 篇 ghinita gabriel
6 篇 meyer ulrike
6 篇 kantarcioglu mur...
5 篇 gupta maanak
5 篇 wang lingyu
4 篇 lee adam j.
4 篇 conti mauro
4 篇 murat kantarciog...
4 篇 elisa bertino
4 篇 liu fang
4 篇 mittal sudip
4 篇 gabriel ghinita
4 篇 gunter carl a.
4 篇 pourzandi makan
4 篇 pretschner alexa...
4 篇 wetzel susanne
4 篇 majumdar suryadi...

语言

555 篇 英文
4 篇 其他
1 篇 中文

检索条件"任意字段=Proceedings of the Tenth ACM Conference on Data and Application Security and Privacy"

共 560 条记录，以下是181-190 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

CREHMA: Cache-aware REST-ful HTTP Message Authentication 20

CREHMA: Cache-aware REST-ful HTTP Message Authentication

引用

10th acm conference on data and application security and privacy (CODASPY)

作者： Hoai Viet Nguyen Lo Iacono, Luigi Cologne Univ Appl Sci Cologne Germany

ISBN: (纸本)9781450371070

Scalability and security are two important elements of contemporary distributed software systems. The Web vividly shows that while complying with the constraints defined by the architectural style REST, the layered design of software with intermediate systems enables to scale at large. Intermediaries such as caches, however, interfere with the security guarantees of the industry standard for protecting data in transit on the Web, TLS, as in these circumstances the TLS channel already terminates at the intermediate system's server. For more in-depth defense strategies, service providers require message-oriented security means in addition to TLS. These are hardly available and only in the form of HTTP signature schemes that do not take caches into account either. In this paper we introduce CREHMA, a REST-ful HTTP message signature scheme that guarantees the integrity and authenticity of Web assets from end-to-end while simultaneous allowing service providers to enjoy the benefits ofWeb caches. Decisively, CREHMA achieves these guarantees without having to trust on the integrity of the cache and without requiring making changes to existingWeb caching systems. In extensive experiments we evaluated CREHMA and found that it only introduces marginal impacts on metrics such as latency and data expansion while providing integrity protection from end to end. CREHMA thus extends the possibilities of service providers to achieve an appropriate balance between scalability and security.

关键词： HTTP Web Caching REST End-to-End security Signature

来源：评论

学校读者我要写书评

暂无评论

A Visual Tool for Supporting Decision-Making in privacy Oriented Software Development 20

A Visual Tool for Supporting Decision-Making in Privacy Orie...

引用

Working conference on Advanced Visual Interfaces (AVI)

作者： Baldassarre, Maria Teresa Santa Barletta, Vita Caivano, Danilo Piccinno, Antonio Univ Bari Aldo Moro Dept Comp Sci Bari Italy

ISBN: (纸本)9781450375351

Nowadays, the dimension and complexity of software development projects increase the possibility of cyber-attacks, information exfiltration and data breaches. In this context, developers play a primary role in addressing privacy requirements and, consequently security, in software applications. Currently, only general guidelines exist that are difficult to put in operation due to the lack of the required security skills and knowledge, and to the use of legacy software development processes that do not deal with privacy and security aspects. This paper presents a knowledge base, the privacy Knowledge Base (PKB), and the VIS-PRISE prototype (Visually Inspection to Support privacy and security) a visual tool that support developers' decisions to integrate privacy and security requirements in all software development phases. An initial experimental study with junior developers is also presented.

关键词： privacy by Design Human-Centered privacy privacy Software application

来源：评论

学校读者我要写书评

暂无评论

The Good, the Bad and the (Not So) Ugly of Out-Of-Band Authentication with eID Cards and Push Notifications 20

The Good, the Bad and the (Not So) Ugly of Out-Of-Band Authe...

引用

10th acm conference on data and application security and privacy (CODASPY)

作者： Pernpruner, Marco Carbone, Roberto Ranise, Silvio Sciarretta, Giada Fdn Bruno Kessler Secur & Trust Res Unit Trento Italy

ISBN: (纸本)9781450371070

Everyday life is permeated by new technologies allowing people to perform almost any kind of operation from their smart devices. Although this is amazing from a convenience perspective, it may result in several security issues concerning the need for authenticating users in a proper and secure way. Electronic identity cards (also called eID cards) play a very important role in this regard, due to the high level of assurance they provide in identification and authentication processes. However, authentication solutions relying on them are still uncommon and suffer from many usability limitations. In this paper, we thus present the design and implementation of a novel passwordless, multi-factor authentication protocol based on eID cards. To reduce known usability issues while keeping a high level of security, our protocol leverages push notifications and mobile devices equipped with NFC, which can be used to interact with eID cards. In addition, we evaluate the security of the protocol through a formal security analysis and a risk analysis, whose results emphasize the acceptable level of security.

关键词： eID cards Formal analysis Multi-factor authentication Passwordless Push notifications Risk analysis security protocols

来源：评论

学校读者我要写书评

暂无评论

SeCaS: Secure Capability Sharing Framework for IoT Devices in a Structured P2P Network 20

SeCaS: Secure Capability Sharing Framework for IoT Devices i...

引用

10th acm conference on data and application security and privacy (CODASPY)

作者： Aktypi, Angeliki Kalkan, Kubra Rasmussen, Kasper B. Univ Oxford Dept Comp Sci Oxford England Ozyegin Univ Dept Comp Sci Istanbul Turkiye

ISBN: (纸本)9781450371070

The emergence of the internet of Things (IoT) has resulted in the possession of a continuously increasing number of highly heterogeneous connected devices by the same owner. To make full use of the potential of a personal IoT network, there must be secure and effective cooperation between them. While application platforms (e.g., Samsung SmartThings) and interoperable protocols (e.g., MQTT) exist already, the reliance on a central hub to coordinate communication introduces a single-point of failure, provokes bottleneck problems and raises privacy concerns. In this paper we propose SeCaS, a Secure Capability Sharing framework, built on top of a peer-to-peer (P2P) architecture. SeCaS addresses the problems of fault tolerance, scalability and security in resource discovery and sharing for IoT infrastructures using a structured P2P network, in order to take advantage of the self-organised and decentralised communication it provides. SeCaS brings three main contributions: (i) a capability representation that allows each device to specify what services they offer, and can be used as a common language to search for, and exchange, capabilities, resulting in flexible service discovery that can leverage the properties on a distributed hash table (DHT);(ii) a set of four protocols that provides identification of the different devices that exist in the network and authenticity of the messages that are exchanged among them;and (iii) a thorough security and complexity analysis of the proposed scheme that shows SeCaS to be both secure and scalable.

关键词： IoT DHT Resource Sharing Scalability Fault-Tolerance privacy

来源：评论

学校读者我要写书评

暂无评论

PREDICT: Efficient Private Disease Susceptibility Testing in Direct-to-Consumer Model 20

PREDICT: Efficient Private Disease Susceptibility Testing in...

引用

10th acm conference on data and application security and privacy (CODASPY)

作者： Ugwuoke, Chibuike Erkin, Zekeriya Reinders, Marcel Lagendijk, Reginald L. Delft Univ Technol Delft Netherlands

ISBN: (纸本)9781450371070

Genome sequencing has rapidly advanced in the last decade, making it easier for anyone to obtain digital genomes at low costs from companies such as Helix, MyHeritage, and 23andMe. Companies now offer their services in a direct-to-consumer (DTC) model without the intervention of a medical institution. Thereby, providing people with direct services for paternity testing, ancestry testing and disease susceptibility testing (DST) to infer diseases' predisposition. Genome analyses are partly motivated by curiosity and people often want to partake without fear of privacy invasion. Existing privacy protection solutions for DST adopt cryptographic techniques to protect the genome of a patient from the party responsible for computing the analysis. Said techniques include homomorphic encryption, which can be computationally expensive and could take minutes for only a few single-nucleotide polymorphisms (SNPs). A predominant approach is a solution that computes DST over encrypted data, but the design depends on a medical unit and exposes test results of patients to the medical unit, making the design uncomfortable for privacy-aware individuals. Hence it is pertinent to have an efficient privacy-preserving DST solution with a DTC service. We propose a novel DTC model that protects the privacy of SNPs and prevents leakage of test results to any other party save for the genome owner. Conversely, we protect the privacy of the algorithms or trade secrets used by the genome analyzing companies. Our work utilizes a secure obfuscation technique in computing DST, eliminating expensive computations over encrypted data. Our approach significantly outperforms existing state-of-the-art solutions in runtime and scales linearly for equivalent levels of security. As an example, computing DST for 10,000 SNPs requires approximately 96 milliseconds on commodity hardware. With this efficient and privacy-preserving solution which is also simulation-based secure, we open possibilities for performi

关键词： SNP Genome privacy-Preserving Obfuscation Direct-to-customer Disease Susceptibility Testing

来源：评论

学校读者我要写书评

暂无评论

2021 2nd Asia Service Sciences and Software Engineering conference, ASSE 2021

2021 2nd Asia Service Sciences and Software Engineering Conf...

引用

2nd Asia Service Sciences and Software Engineering conference, ASSE 2021

ISBN: (纸本)9781450389082

The proceedings contain 19 papers. The topics discussed include: designing a collaborative construction-project platform on blockchain technology for transparency, traceability, and information symmetry;TheCoin: privacy and security considerations within blockchain transactions;plume: fast finality blockchain without single failure point;research on data asset management of electricity industry based on blockchain;improving business operation efficiency by using smart contract;challenges in the development of a global software user interface by multicultural teams: an industrial experience;an extensive study on multi-priority algorithm in test case prioritization and reduction;simulation model of stampede accident based on multi-agent and game theory;and optimization design and application of hybrid simulation skill training platform.

关键词：

来源：评论

学校读者我要写书评

暂无评论

TrustAV: Practical and privacy-Preserving Malware Analysis in the Cloud 20

TrustAV: Practical and Privacy-Preserving Malware Analysis i...

引用

10th acm conference on data and application security and privacy (CODASPY)

作者： Deyannis, Dimitris Papadogiannaki, Eva Kalivianakis, Giorgos Vasiliadis, Giorgos Ioannidis, Sotiris FORTH ICS Iraklion Greece Univ Crete Dept Comp Sci Rethimnon Crete Greece

ISBN: (纸本)9781450371070

While the number of connected devices is constantly growing, we observe an increased incident rate of cyber attacks that target user data. Typically, personal devices contain the most sensitive information regarding their users, so there is no doubt that they can be a very valuable target for adversaries. Typical defense solution to safeguard user devices and data, are based in malware analysis mechanisms. To amortize the processing and maintenance overheads, the outsourcing of network inspection mechanisms to the cloud has become very popular recently. However, the majority of such cloud-based applications usually offers limited privacy preserving guarantees for data processing in third-party environments. In this work, we propose TrustAV, a practical cloud-based malware detection solution destined for a plethora of device types. TrustAV is able to offload the processing of malware analysis to a remote server, where it is executed entirely inside, hardware supported, secure enclaves. By doing so, TrustAV is capable to shield the transfer and processing of user data even in untrusted environments with tolerable performance overheads, ensuring that private user data are never exposed to malicious entities or honestbut-curious providers. TrustAV also utilizes various techniques in order to overcome performance overheads, introduced by the Intel SGX technology, and reduce the required enclave memory -a limiting factor for malware analysis executed in secure enclave environments- offering up to 3x better performance.

关键词： Intel SGX trusted execution environment antivirus data processing mobile privacy

来源：评论

学校读者我要写书评

暂无评论

Right to Know, Right to Refuse: Towards UI Perception-Based Automated Fine-Grained Permission Controls for Android Apps 22

Right to Know, Right to Refuse: Towards UI Perception-Based ...

引用

proceedings of the 37th IEEE/acm International conference on Automated Software Engineering

作者： Vikas Kumar Malviya Chee Wei Leow Ashok Kasthuri Yan Naing Tun Lwin Khin Shar Lingxiao Jiang School of Computing and Information Systems Singapore Management University Singapore

ISBN: (纸本)9781450394758

It is the basic right of a user to know how the permissions are used within the Android app’s scope and to refuse the app if granted permissions are used for the activities other than specified use which can amount to malicious behavior. This paper proposes an approach and a vision to automatically model the permissions necessary for Android apps from users’ perspective and enable fine-grained permission controls by users, thus facilitating users in making more well-informed and flexible permission decisions for different app functionalities, which in turn improve the security and data privacy of the App and enforce apps to reduce permission misuses. Our proposed approach works in mainly two stages. First, it looks for discrepancies between the permission uses perceivable by users and the permissions actually used by apps via program analysis techniques. Second, it runs prediction algorithms using machine learning techniques to catch the discrepancies in permission usage and thereby alert the user for action about data violation. We have evaluated preliminary implementations of our approach and achieved promising fine-grained permission control accuracy. In addition to the benefits of users’ privacy protection, we envision that wider adoption of the approach may also enforce better privacy-aware design by responsible bodies such as app developers, governments, and enterprises.

关键词： automated permission control UI perception machine learning Android application analysis Android permissions

来源：评论

学校读者我要写书评

暂无评论

A Hypothesis Testing Approach to Sharing Logs with Confidence 20

A Hypothesis Testing Approach to Sharing Logs with Confidenc...

引用

10th acm conference on data and application security and privacy (CODASPY)

作者： Long, Yunhui Xu, Le Gunter, Carl A. Univ Illinois Urbana IL 61801 USA

ISBN: (纸本)9781450371070

Logs generated by systems and applications contain a wide variety of heterogeneous information that is important for performance profiling, failure detection, and security analysis. There is a strong need for sharing the logs among different parties to outsource the analysis or to improve system and security research. However, sharing logs may inadvertently leak confidential or proprietary information. Besides sensitive information that is directly saved in logs, such as user-identifiers and software versions, indirect evidence like performance metrics can also lead to the leakage of sensitive information about the physical machines and the system. In this work, we introduce a game-based definition of the risk of exposing sensitive information through released logs. We propose log indistinguishability, a property that is met only when the logs leak little information about the protected sensitive attributes. We design an end-to-end framework that allows a user to identify risk of information leakage in logs, to protect the exposure with log redaction and obfuscation, and to release the logs with a much lower risk of exposing the sensitive attribute. Our framework contains a set of statistical tests to identify violations of the log indistinguishability property and a variety of obfuscation methods to prevent the leakage of sensitive information. The framework views the log-generating process as a black-box and can therefore be applied to different systems and processes. We perform case studies on two different types of log datasets: Spark event log and hardware counters. We show that our framework is effective in preventing the leakage of the sensitive attribute with a reasonable testing time and an acceptable utility loss in logs.

关键词： indistinguishability hypothesis test log obfuscation privacy

来源：评论

学校读者我要写书评

暂无评论

ColoT: A consent and information assistant for the IoT 20

ColoT: A consent and information assistant for the IoT

引用

13th acm conference on security and privacy in Wireless and Mobile Networks, WiSec 2020

作者： Cunche, Mathieu Métayer, Daniel Le Morel, Victor Univ Lyon France

ISBN: (纸本)9781450380065

The Internet of Things (IoT) raises specific issues in terms of information and consent, which makes the implementation of the General data Protection Regulation (GDPR) challenging in this context. In this demo paper, we propose a prototype implementation of a consent and information assistant for the IoT coined CoIoT. This assistant is presented as an Android application called a Personal data Custodian (PDC), working with devices called BLE privacy Beacons. CoIoT enables the automatic communication of information about personal data collection, as well as a seamless management of consent to personal data collection. © 2020 Owner/Author.

关键词： data privacy

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共56页 << < 15 16 17 18 19 20 21 22 23 24 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：