检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

559 篇 会议
1 篇 期刊文献

馆藏范围

560 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

434 篇 工学
- 422 篇 计算机科学与技术...
- 140 篇 软件工程
- 104 篇 信息与通信工程
- 28 篇 网络空间安全
- 21 篇 电气工程
- 12 篇 控制科学与工程
- 9 篇 安全科学与工程
- 5 篇 建筑学
- 4 篇 生物工程
- 3 篇 动力工程及工程热...
- 3 篇 生物医学工程（可授...
- 2 篇 机械工程
- 2 篇 仪器科学与技术
- 2 篇 电子科学与技术（可...
- 2 篇 土木工程
- 2 篇 交通运输工程
114 篇 理学
- 105 篇 数学
- 8 篇 统计学（可授理学、...
- 5 篇 生物学
- 5 篇 系统科学
- 2 篇 物理学
33 篇 管理学
- 21 篇 图书情报与档案管...
- 15 篇 管理科学与工程(可...
- 8 篇 工商管理
8 篇 法学
- 7 篇 社会学
- 1 篇 法学
3 篇 经济学
- 3 篇 应用经济学
3 篇 医学
- 3 篇 基础医学(可授医学...
- 3 篇 临床医学
- 2 篇 公共卫生与预防医...
1 篇 教育学
1 篇 军事学

主题

59 篇 privacy
44 篇 security
25 篇 data privacy
22 篇 differential pri...
21 篇 machine learning
20 篇 access control
14 篇 sensitive data
11 篇 iot
11 篇 android
11 篇 mobile security
10 篇 internet of thin...
10 篇 deep learning
9 篇 static analysis
9 篇 blockchain
8 篇 federated learni...
7 篇 homomorphic encr...
7 篇 web security
7 篇 network security
7 篇 cloud security
7 篇 cloud computing

机构

8 篇 purdue univ w la...
6 篇 north carolina s...
6 篇 rhein westfal th...
6 篇 carnegie mellon ...
5 篇 univ texas dalla...
4 篇 stevens inst tec...
4 篇 fraunhofer aisec...
4 篇 purdue universit...
4 篇 carnegie mellon ...
4 篇 concordia univ m...
3 篇 singapore inst t...
3 篇 ericsson secur r...
3 篇 purdue universit...
3 篇 ecole polytech f...
3 篇 umass boston bos...
3 篇 univ illinois ur...
3 篇 tech univ darmst...
3 篇 king's college l...
3 篇 university of pi...
3 篇 university of te...

作者

13 篇 bertino elisa
11 篇 sandhu ravi
7 篇 enck william
6 篇 ghinita gabriel
6 篇 meyer ulrike
6 篇 kantarcioglu mur...
5 篇 gupta maanak
5 篇 wang lingyu
4 篇 lee adam j.
4 篇 conti mauro
4 篇 murat kantarciog...
4 篇 elisa bertino
4 篇 liu fang
4 篇 mittal sudip
4 篇 gabriel ghinita
4 篇 gunter carl a.
4 篇 pourzandi makan
4 篇 pretschner alexa...
4 篇 wetzel susanne
4 篇 majumdar suryadi...

语言

555 篇 英文
4 篇 其他
1 篇 中文

检索条件"任意字段=Proceedings of the Twelfth ACM Conference on Data and Application Security and Privacy"

共 560 条记录，以下是541-550 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

An XacmL-based privacy-centered access control system

An XACML-based privacy-centered access control system

引用

1st acm Workshop on Information security Governance, WISG '09, Co-located with the 16th acm Computer and Communications security conference, CCS'09

作者： Ardagna, Claudio Agostino De Capitani Di Vimercati, Sabrina Paraboschi, Stefano Pedrini, Eros Samarati, Pierangela Università degli Studi di Milano 26013 Crema Italy Università di Bergamo 24044 Dalmine Italy

ISBN: (纸本)9781605587875

The widespread diffusion of the Internet as the platform for accessing distributed services makes available a huge amount of personal data, and a corresponding concern and demand from users, as well as legislation, for solutions providing users with form of control on their data. Responding to this requirement raises the emerging need of solutions supporting proper information security governance, allowing enterprises managing user information to enforce restrictions on information acquisition as well as its processing and secondary use. While the research community has acknowledged this emerging scenario, and research efforts are being devoted to it, current technologies provide still limited solutions to the problem. In this paper, we illustrate our effort in pursuing the goal of bringing information security governance restrictions deployable in current organizational contexts. Considering the large success and application of XacmL, we extend the XacmL architecture and modules complementing them with functionalities for effective credential-based management and privacy support. Our proposal combines XacmL with PRIME, a novel solution supporting privacy-aware access control, resulting in an infrastructure that provides the flexible access functionality of XacmL enriched with the data governance and privacy features of PRIME. Copyright 2009 acm.

关键词： Access control

来源：评论

学校读者我要写书评

暂无评论

Improving application security with data Flow Assertions 09

Improving Application Security with Data Flow Assertions

引用

22nd acm SIGOPS Symposium on Operating Systems Principles

作者： Yip, Alexander Wang, Xi Zeldovich, Nickolai Kaashoek, M. Frans MIT Comp Sci & Artificial Intelligence Lab Cambridge MA 02139 USA

ISBN: (纸本)9781605587523

RESIN is a new language runtime that helps prevent security vulnerabilities, by allowing programmers to specify application-level data flow assertions. RESIN provides policy objects, which programmers use to specify assertion code and metadata;data tracking, which allows programmers to associate assertions with application data, and to keep track of assertions as the data flow through the application: and filter objects. which programmers use to define data flow boundaries at which assertions are checked. RESIN'S runtime checks data flow assertions by propagating policy objects along with data, as that data moves through the application, and then invoking filter objects when data crosses a data flow boundary, such as when writing data to the network or a file. Using RESIN, Web application programmers can prevent a range of problems, from SQL injection and cross-site scripting, to inadvertent password disclosure and missing access control checks. Adding a RESIN assertion to an application requires few changes to the existing application code, and an assertion can reuse existing code and data structures. For instance, 23 lines of code detect and prevent three previously-unknown missing access control vulnerabilities in phpBB, a popular Web forum application. Other assertions comprising tens of lines of code prevent a range of vulnerabilities in Python and PHP applications. A prototype of RESIN incurs a 33% CPU overhead running the HotCRP conference management application.

关键词： sql injection security python xss privacy php web

来源：评论

学校读者我要写书评

暂无评论

Injecting purpose and trust into data anonymisation

Injecting purpose and trust into data anonymisation

引用

acm 18th International conference on Information and Knowledge Management, CIKM 2009

作者： Sun, Xiaoxun Wang, Hua Li, Jiuyong Department of Mathematics and Computing University of Southern Queensland Australia School of Computer and Information Science University of South Australia Australia

ISBN: (纸本)9781605585123

Most existing works of data anonymisation target at the optimization of the anonymisation metrics to balance the data utility and privacy, whereas they ignore the effects of a requester's trust level and application purposes during the data anonymisation. Our aim of this paper is to propose a much finer level anonymisation scheme with regard to the data requester's trust value and specific application purpose. We prioritize the attributes for anonymisation based on how important and critical they are related to the specified application purposes and propose a trust evaluation strategy to quantify the data requester's reliability, and further build the projection between the trust value and the degree of data anonymiztion, which intends to determine to what extent the data should be anonymized. The decomposition algorithm is developed to find the desired anonymous solution, which guarantees the uniqueness and correctness. Copyright 2009 acm.

关键词： data privacy

来源：评论

学校读者我要写书评

暂无评论

Automatic Creation of SQL Injection and Cross-Site Scripting Attacks 09

Automatic Creation of SQL Injection and Cross-Site Scripting...

引用

31st International conference on Software Engineering (ICSE 2009)

作者： Kiezun, Adam Guo, Philip J. Jayaraman, Karthick Ernst, Michael D. MIT Cambridge MA 02139 USA Stanford Univ Stanford CA 94305 USA Syracuse Univ Syracuse NY 13244 USA Univ Washington Seattle WA 98195 USA

ISBN: (纸本)9781424434527

We present a technique for finding security vulnerabilities in Web applications. SQL Injection (SQLI) and cross-site scripting (XSS) attacks are widespread forms of attack in which the attacker crafts the input to the application to access or modify user data and execute malicious code. In the most serious attacks (called second-order or persistent, XSS), an attacker can corrupt a database so as to cause subsequent users, to execute malicious code. This paper presents an automatic technique for creating inputs that expose SQLI and XSS vulnerabilities. The technique generates sample inputs, symbolically tracks taints through execution (including through database accesses), and mutates the inputs to produce concrete exploits. Ours is the first analysis of which we are aware that precisely addresses second-order XSS attacks. Our technique creates real attack vectors, has few false positives, incurs no runtime overhead for the deployed application, works without requiring modification of application code, and handles dynamic programming-language constructs. We implemented the technique for PHP, in a tool ARDILLA. We evaluated ARDILLA on five PHP applications and found 68 previously unknown vulnerabilities (23 SQLI. 33 first-order XSS, and 12 second-order XSS).

关键词： application software Concrete databases Testing data security Runtime Monitoring Internet privacy HTML

来源：评论

学校读者我要写书评

暂无评论

CSIIRW09: Fifth Annual Cyber security and Information Intelligence Research Workshop: Cyber security and Information Intelligence Challenges and Strategies

CSIIRW09: Fifth Annual Cyber Security and Information Intell...

引用

CSIIRW 2009: 5th Annual Cyber security and Information Intelligence Research Workshop: Cyber security and Information Intelligence Challenges and Strategies

ISBN: (纸本)9781605585185

The proceedings contain 58 papers. The topics discussed include: security-oriented program transformations;security policy testing via automated program code generation;long term data storage issues for situational awareness;ontology-based security assessment for software products;debugging support for security properties of software architectures;on building secure SCADA systems using security patterns;defending financial infrastructures through early warning systems: the intelligence cloud approach;JigDFS in container communities for international cargo security;automatic image analysis process for the detection of concealed weapons;a distributed reinforcement learning approach to mission survivability in tactical MANETs;detecting overflow vulnerabilities using automated verification;privacy-preserving multi-dimensional credentialing using veiled certificates;and decision dependability and its application to identity management.

关键词：

来源：评论

学校读者我要写书评

暂无评论

privacy Oracle: a System for Finding application Leaks with Black Box Differential Testing 08

Privacy Oracle: a System for Finding Application Leaks with ...

引用

15th acm conference on Computer and Communications security

作者： Jung, Jaeyeon Sheth, Anmol Greenstein, Ben Wetherall, David Maganis, Gabriel Kohno, Tadayoshi Intel Res Seattle WA USA

ISBN: (纸本)9781595938107

We describe the design and implementation of privacy Oracle, a system that reports oil application leaks of user information via the network traffic that they send. privacy Oracle treats each application its a black box, without access to either its internal structure or Communication protocols. This means that it call be used over a broad range of applications and information leaks (i.e., not only Web traffic content or credit card numbers). To accomplish this, we develop it differential testing technique in which perturbations in the application inputs are mapped to perturbations in the application Outputs to discover likely leaks;we leverage alignment algorithms from computational biology to find high quality mappings between different byte-sequences efficiently. privacy Oracle includes this technique and it virtual machine-based testing system. To evaluate it, we tested 26 popular applications, including system and file utilities, media players, and IM clients. We found that privacy Oracle discovered many small and previously undisclosed information leaks. In several cases, these are leaks of directly identifying information that are regularly sent in the clear (without end-to-end encryption) and which Could make users vulnerable to tracking by third parties or providers.

关键词： Personal information leaks Black-box testing Sequence alignment algorithm Differential fuzz testing data loss prevention

来源：评论

学校读者我要写书评

暂无评论

Using Hypervisor to Provide data Secrecy for User applications on a Per-Page Basis 08

Using Hypervisor to Provide Data Secrecy for User Applicatio...

引用

4th International conference on Virtual Execution Environments

作者： Yang, Jisoo Shin, Kang G. Univ Michigan Ann Arbor MI 48109 USA

ISBN: (纸本)9781595937964

Hypervisors are increasingly utilized in modem computer systems, ranging from PCs to web servers and data centers. Aside from server applications, hypervisors are also becoming a popular target for implementing many security systems, since they provide a small and easy-to-secure trusted computing base. This paper presents a novel way of using hypervisors to protect application data privacy even when the underlying operating system is not trustable. Each page in virtual address space is rendered to user applications according to the security context the application is running in. The hypervisor encrypts and decrypts each memory page requested depending on the application's access permission to the page. The main result of this system is the complete removal of the operating system from the trust base for user applications' data privacy. To reduce the runtime overhead of the system, two optimization techniques are employed. We use page-frame replication to reduce the number of cryptographic operations by keeping decrypted versions of a page frame. We also employ lazy synchronization to minimize overhead due to an update to one of the replicated page frame. Our system is implemented and evaluated by modifying the Xen hypervisor, showing that it increases the application execution time only by 3% for CPU and memory-intensive workloads.

关键词： Hypervisor application Protection data privacy Virtualization

来源：评论

学校读者我要写书评

暂无评论

New directions in privacy-preserving anomaly detection for network traffic

New directions in privacy-preserving anomaly detection for n...

引用

1st acm Workshop on Network data Anonymization, NDA'08, Co-located with the 15th acm Computer and Communications security conference, CCS'08

作者： Bianchi, Giuseppe Teofili, Simone Pomposini, Matteo CNIT Univ. Roma Tor Vergata Via del Politecnico 1 00133 Roma Italy

ISBN: (纸本)9781605583013

The enormous amount of traffic data gathered by network monitoring systems poses a serious threat on the privacy of the network customers. To face this issue, this paper promotes a new approach to privacy-preserving network monitoring. With concrete reference to a simplified anomaly detection scenario, we show how a monitoring application can be decomposed in two parts running in different components. A front-end stage is devised to capture raw (unprotected) packets and process them "on-the-fly" through performance/memory efficient data structures, and specifically Counting Bloom Filters. Captured packets are then cryptographically protected and delivered to a back-end stage along with suitably designed cryptographic material determined by the output of the counting filter. The system is conceived to technically restrict decryption only to data packets which are classified as belonging to a flow for which an anomalous behavior is suspected. The remaining traffic is by construction guaranteed that no further data processing nor, to some extent, statistical analysis may occur in the system backend. Although the anomaly detection application used as operative reference throughout this work is somewhat simplified with respect to real-world approaches, the resulting problem is significantly more complex than traditional pattern searching techniques over encrypted data. Hence, albeit preliminary and with room for improvements, we believe that our proposed approach suggests new promising research directions in privacypreserving network monitoring.

关键词： privacy-preserving techniques

来源：评论

学校读者我要写书评

暂无评论

User-controllable learning of security and privacy policies

User-controllable learning of security and privacy policies

引用

1st acm Workshop on AISec, AISec'08, Co-located with the 15th acm Computer and Communications security conference, CCS'08

作者： Kelley, Patrick Gage Drielsma, Paul Hankes Sadeh, Norman Cranor, Lorrie Faith School of Computer Science Carnegie Mellon University 5000 Forbes Ave. Pittsburgh PA 15213 United States

ISBN: (纸本)9781605582917

Studies have shown that users have great difficulty specifying their security and privacy policies in a variety of application domains. While machine learning techniques have successfully been used to refine models of user preferences, such as in recommender systems, they are generally configured as "black boxes" that take control over the entire policy and severely restrict the ways in which the user can manipulate it. This article presents an alternative approach, referred to as user-controllable policy learning. It involves the incremental manipulation of policies in a context where system and user refine a common policy model. The user regularly provides feedback on decisions made based on the current policy. This feedback is used to identify (learn) incremental policy improvements which are presented as suggestions to the user. The user, in turn, can review these suggestions and decide which, if any, to accept. The incremental nature of the suggestions enhances usability, and because the user and the system manipulate a common policy representation, the user retains control and can still make policy modifications by hand. Results obtained using a neighborhood search implementation of this approach are presented in the context of data derived from the deployment of a friend finder application, where users can share their locations with others, subject to privacy policies they refine over time. We present results showing policy accuracy, which averages 60% upon initial definition by our users, climbing as high as 90% using our technique. Copyright 2008 acm.

关键词： Feedback

来源：评论

学校读者我要写书评

暂无评论

Design of Network Management Platform and security Framework for WSN

Design of Network Management Platform and Security Framework...

引用

4th International conference on Signal Image Technology and Internet Bases Systems

作者： Lee, Byunggil Bae, Seungjo Han, Dongwon Elect & Telecommun Res Inst Taejon South Korea

ISBN: (纸本)9780769534930

Wireless sensor networks are rapidly emerging as an important area in ubiquitous computing industry. They are very tiny devices with limited energy, memory, transmission range, and computation power. So, wireless sensor networks are vulnerable to security attack such as sinkhole attack, wormhole attack, and simple power exhaustion attack. However, wireless sensor networks must be secured from obstructing the delivery of correct sensor data and from forging sensor data. The security and privacy problem related to wireless sensor network's application has become a serious issue in the real service environment. In this paper, we propose our management platform and security framework for wireless sensor networks. The proposed framework has advantages as regards secure association and intrusion detection. Furthermore, the proposed mechanism can be applied to ubiquitous application such as u-city, u-healthcare, u-defense as a secure wireless sensor network management platform.

关键词： Wireless sensor networks

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共56页 << < 47 48 49 50 51 52 53 54 55 56 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：