检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

1,075 篇 会议
8 篇 期刊文献
6 册 图书

馆藏范围

1,089 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

908 篇 工学
- 862 篇 计算机科学与技术...
- 346 篇 软件工程
- 281 篇 信息与通信工程
- 79 篇 电气工程
- 55 篇 网络空间安全
- 47 篇 控制科学与工程
- 30 篇 安全科学与工程
- 14 篇 生物工程
- 13 篇 建筑学
- 12 篇 电子科学与技术（可...
- 10 篇 机械工程
- 10 篇 交通运输工程
- 9 篇 动力工程及工程热...
- 8 篇 土木工程
- 8 篇 生物医学工程（可授...
178 篇 理学
- 153 篇 数学
- 17 篇 统计学（可授理学、...
- 15 篇 生物学
- 8 篇 系统科学
- 6 篇 物理学
- 5 篇 化学
88 篇 管理学
- 47 篇 图书情报与档案管...
- 43 篇 管理科学与工程(可...
- 25 篇 工商管理
28 篇 法学
- 20 篇 社会学
- 8 篇 法学
14 篇 医学
- 11 篇 基础医学(可授医学...
- 11 篇 临床医学
- 9 篇 公共卫生与预防医...
8 篇 经济学
- 8 篇 应用经济学
3 篇 教育学
3 篇 军事学
1 篇 文学
1 篇 艺术学

主题

119 篇 privacy
81 篇 security
51 篇 data privacy
45 篇 differential pri...
34 篇 machine learning
26 篇 access control
25 篇 sensitive data
23 篇 cryptography
22 篇 internet of thin...
21 篇 blockchain
19 篇 federated learni...
17 篇 deep learning
16 篇 network security
15 篇 authentication
14 篇 mobile security
13 篇 homomorphic encr...
13 篇 cloud computing
12 篇 iot
12 篇 android
11 篇 privacy-preservi...

机构

11 篇 cispa helmholtz ...
11 篇 purdue univ w la...
8 篇 zhejiang univ pe...
8 篇 carnegie mellon ...
7 篇 north carolina s...
6 篇 univ texas dalla...
6 篇 rhein westfal th...
6 篇 imperial coll lo...
5 篇 stevens inst tec...
5 篇 fraunhofer aisec...
5 篇 hong kong univ s...
5 篇 singapore manage...
5 篇 natl univ singap...
5 篇 stanford univ st...
4 篇 georgia inst tec...
4 篇 purdue universit...
4 篇 ecole polytech f...
4 篇 purdue universit...
4 篇 tech univ darmst...
4 篇 univ calif santa...

作者

15 篇 bertino elisa
11 篇 sandhu ravi
8 篇 backes michael
7 篇 conti mauro
7 篇 enck william
6 篇 gupta maanak
6 篇 ren kui
6 篇 ghinita gabriel
6 篇 meyer ulrike
6 篇 zhang yang
6 篇 kantarcioglu mur...
5 篇 wang lingyu
5 篇 yu ting
5 篇 gunter carl a.
5 篇 liu peng
4 篇 machanavajjhala ...
4 篇 lee adam j.
4 篇 sion radu
4 篇 carbunar bogdan
4 篇 wagner david

语言

1,066 篇 英文
21 篇 其他
2 篇 中文

检索条件"任意字段=Proceedings of the first ACM conference on Data and application security and privacy"

共 1089 条记录，以下是21-30 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

CoCoT: Collaborative Contact Tracing 24

CoCoT: Collaborative Contact Tracing

引用

14th acm conference on data and application security and privacy (acm CODASPY)

作者： Kann, Trevor Bauer, Lujo Cunningham, Robert K. Carnegie Mellon Univ Pittsburgh PA 15213 USA Univ Pittsburgh Pittsburgh PA USA

ISBN: (纸本)9798400704215

Contact tracing can limit the spread of infectious diseases by notifying people of potential exposure to disease. Manual contact tracing is resource-intensive, but much of it can be automated using mobile phones, which are ubiquitous and can detect and record nearby contacts. Two major problems arise with automated contact tracing (ACT): preventing abuse for mass surveillance and accurately determining contacts. For example, the most widely adopted solution-Google and Apple's Exposure Notification (GAEN)-protects user privacy but suffers from inaccurate distance measurements that result in poor risk assessments. We propose to use collaboration among nearby devices to increase distance estimation accuracy, and therefore risk assessment accuracy, while minimizing the loss of user privacy. Our protocol, CoCoT, extends GAEN, a proximity-based, distributed ACT protocol, by adding an additional broadcast to share locally-derived distance estimates. To evaluate CoCoT, we develop a method for merging phone sensor datasets with human interaction datasets to approximate realistic scenarios and test our protocol. CoCoT improves distance estimate accuracy by 28% over the current best distance estimators and we analytically show impact on privacy, security, and battery consumption are minimal.

关键词： Automatic Contact Tracing Distributed Optimization Network Localization Smartphone privacy

来源：评论

学校读者我要写书评

暂无评论

Crypto'Graph: Leveraging privacy-Preserving Distributed Link Prediction for Robust Graph Learning 24

Crypto'Graph: Leveraging Privacy-Preserving Distributed Link...

引用

14th acm conference on data and application security and privacy (acm CODASPY)

作者： Azogagh, Sofiane Birba, Zelma Aubin Gambs, Sebastien Killijian, Marc-Olivier Univ Quebec Montreal Montreal PQ Canada

ISBN: (纸本)9798400704215

Graphs are a widely used data structure for collecting and analyzing relational data. However, when the graph structure is distributed across several parties, its analysis is challenging. In particular, due to the sensitivity of the data each party might want to keep their partial knowledge of the graph private, while still be willing to collaborate with the other parties for tasks of mutual benefit, such as data curation or the removal of poisoned data. To address this challenge, we propose Crypto'Graph, an efficient protocol for privacy-preserving link prediction on distributed graphs. More precisely, it allows parties partially sharing a graph with distributed links to infer the likelihood of formation of new links in the future. Through the use of cryptographic primitives, Crypto'Graph is able to compute the likelihood of these new links on the joint network without revealing the structure of the private graph of each party, even though they know the number of nodes they have, since they share the same graph in terms of nodes but not the same links. Crypto'Graph improves on previous works by enabling the computation of a diverse set of similarity metrics in parallel without any additional cost. The use of Crypto'Graph is illustrated for defense against graph poisoning attacks, in which potential adversarial links are identified without compromising the privacy of the graphs of individual parties. The effectiveness of Crypto'Graph in mitigating graph poisoning attacks and achieving high prediction accuracy on a node classification task using graph neural networks is demonstrated through extensive experimentation on two real-world datasets.

关键词： security privacy secure multiparty computation graph

来源：评论

学校读者我要写书评

暂无评论

Towards Accurate and Stronger Local Differential privacy for Federated Learning with Staircase Randomized Response 24

Towards Accurate and Stronger Local Differential Privacy for...

引用

14th acm conference on data and application security and privacy (acm CODASPY)

作者： Varun, Matta Feng, Shuya Wang, Han Sural, Shamik Hong, Yuan Indian Inst Technol Kharagpur India Univ Connecticut Storrs CT USA Univ Kansas Lawrence KS USA

ISBN: (纸本)9798400704215

Federated Learning (FL), a privacy-preserving training approach, has proven to be effective, yet its vulnerability to attacks that extract information from model weights is widely recognized. To address such privacy concerns, Local Differential privacy (LDP) has been applied to FL: perturbing the weights trained for the local model by each client. However, besides high utility loss on the randomized model weights, we identify a new inference attack to the existing LDP method, that can reconstruct the original value from the noisy values with high confidence. To mitigate these issues, in this paper, we propose the Staircase Randomized Response (SRR)-FL framework, which assigns higher probabilities to weights closer to the true weight, reducing the distance between the true and perturbed data. This minimizes the noise for maintaining the same LDP guarantee, leading to better utility. Compared to existing LDP mechanisms (e.g., Generalized Randomized Response) on the FL, SRR-FL can further provide a more accurate privacy-preserving training model, and enhance the robustness against the inference attack while ensuring the same LDP guarantee. Furthermore, we also use the parameter shuffling method for privacy amplification. The efficacy of SRR-FL has been validated on widely used datasets MNIST, Medical-MNIST and CIFAR-10, demonstrating remarkable performance.

关键词： Local differential privacy federated learning client-level LDP

来源：评论

学校读者我要写书评

暂无评论

CCSM: Building Cross-Cluster security Models for Edge-Core Environments Involving Multiple Kubernetes Clusters 24

CCSM: Building Cross-Cluster Security Models for Edge-Core E...

引用

14th acm conference on data and application security and privacy (acm CODASPY)

作者： GholipourChoubeh, Mahmood Kermabon-Bobinnec, Hugo Majumdar, Suryadipta Jarraya, Yosr Wang, Lingyu Nour, Boubakr Pourzandi, Makan Concordia Univ Montreal PQ Canada Ericsson Secur Res Montreal PQ Canada

ISBN: (纸本)9798400704215

With the emergence of 5G networks and their large scale applications such as IoT and autonomous vehicles, telecom operators are increasingly offloading the computation closer to customers (i.e., on the edge). Such edge-core environments usually involve multiple Kubernetes clusters potentially owned by different providers. Confidentiality concerns could prevent those providers from sharing data freely with each other, which makes it challenging to perform common security tasks such as security verification across different clusters. In this work, we propose a solution for building cross-cluster security models to enable various security analyses, while preserving confidentiality for each cluster. We design a six-step methodology to model both the cross-cluster communication and cross-cluster event dependency, and we apply those models to different security use cases. We implement our solution based on a 5G edge-core environment that involves multiple Kubernetes clusters, and our experimental results demonstrate its efficiency (e.g., less than 8 seconds of processing time for a model with 3,600 edges and nodes) and accuracy (e.g., more than 96% for cross-cluster event prediction).

关键词： Cloud Computing security Kubernetes 5G security Model

来源：评论

学校读者我要写书评

暂无评论

An Overview of Threats Exploring the Confusion Between Top-Level Domains and File Type Extensions 24

An Overview of Threats Exploring the Confusion Between Top-L...

引用

14th acm conference on data and application security and privacy (acm CODASPY)

作者： Sales, Anderson Torres, Nuno Pinto, Pedro Inst Politecn Viana do Castelo Viana Do Castelo Portugal INESC TEC Porto Portugal

ISBN: (纸本)9798400704215

Cyberattacks exploit deceptions involving the Domain Name Service (DNS) to direct users to fake websites, such as typosquatting attacks, which exploit natural typographical errors, and homograph attacks, where different Unicode characters resemble the legitimate ones. The deception attacks may also exploit the confusion between DNS domain names, specifically Top-Level Domains (TLDs), and file extensions. Recently, two new TLDs were added, "zip" and "mov", sharing names with certain file types. This overlapping can be explored by malicious actors in a range of threat scenarios to compromise user security. This paper provides an overview of threats originating from the confusion between specific TLDs and file extensions, such as the recent "zip" and "mov". The threats are grouped into 6 threat scenarios that are described and discussed. This research can be part of a more comprehensive strategy that includes addressing the risks associated with these threats and designing future strategies to address the threats associated with exploiting this ambiguity.

关键词： Top-Level Domains File Extensions security Threats Cyber security Cyber Attack

来源：评论

学校读者我要写书评

暂无评论

Nothing Personal: Understanding the Spread and Use of Personally Identifiable Information in the Financial Ecosystem 24

Nothing Personal: Understanding the Spread and Use of Person...

引用

14th acm conference on data and application security and privacy (acm CODASPY)

作者： Zaeifi, Mehrnoosh Kalantari, Faezeh Oest, Adam Sun, Zhibo Ahn, Gail-Joon Shoshitaishvili, Yan Bao, Tiffany Wang, Ruoyu Doupe, Adam Arizona State Univ Tempe AZ 85287 USA Drexel Univ Philadelphia PA USA

ISBN: (纸本)9798400704215

Online services leverage various authentication methods with differing usability and reliability trade-offs, such as password-based or multi-factor authentication (MFA). However, financial service providers face a unique challenge;authenticating the user's legal identity, which involves verifying Personally Identifiable Information (PII), which we call PII-based authentication (PII-BA). These methods assume that PII is private;however, identity theft victimizes millions annually and exposes their PII to criminals. In this paper, we investigate the potential of identity fraud that breaks PII-BA with stolen PII in the financial ecosystem. first, we measure what PII is used in PII-BA across five different financial services for 17 U.S. financial institutions. We subsequently collect data where PII and associated illegal services are available for purchase by monetizers (who perform identity fraud via obtained stolen PII)-operating within the underground economy and paste sites. Finally, we analyze how monetizers can make money from stolen PII by either breaking PII-BA or directly monetizing the PII with the associated cost. Our study reveals that payment processing companies (PPCs) impose lower PII requirements for password/username recovery service PII-BA compared to commercial banks. Consequently, criminals can bypass this PII-BA service across all PPCs by paying $3.5 similar to$50 as opposed to $10.5 similar to$600 for banks. We also outline potential mitigations which could be an essential step in addressing identity fraud resulting from PII-BA in the financial ecosystem.

关键词： Authentication mechanisms security and privacy Underground community Web security

来源：评论

学校读者我要写书评

暂无评论

security Policy Generation and Verification through Large Language Models: A proposal 24

Security Policy Generation and Verification through Large La...

引用

14th acm conference on data and application security and privacy (acm CODASPY)

作者： Martinelli, Fabio Mercaldo, Francesco Petrillo, Luca Santone, Antonella CNR IIT Pisa Italy Univ Molise Campobasso Italy CNR IIT Campobasso Italy IMT Sch Adv Studies Lucca Lucca Italy CNR IIT Lucca Italy

ISBN: (纸本)9798400704215

The ability to manage and enforce security policies in a rapidly changing digital environment is vital. When enforcing and verifying policies on complex systems, it can be challenging for them to be understood by humans. Furthermore, updating access control rules or configurations that are translated from natural language documents might take considerable time and eventually cause errors and damage. It is crucial for the rules and configurations to be modified with care in order to prevent such mistakes. The aim of the following proposal is the design of a method to convert security policies written in natural language into a machine-understandable format that can easily be enforced, verified as well and understood by machines. To this end, we propose using advanced policy languages like XacmL and Rego to translate security policies into formats that are automatically enforceable and verifiable by the system. In addition, this transformation will facilitate the implementation of security policies within modern application architectures including micro-services and cloud-native environments. Therefore, under its auspices, a framework that eases policy enforcement and minimizes human errors while ensuring conformity to safety standards set out shall be born out of this research proposal.

关键词： security policy machine learning testing

来源：评论

学校读者我要写书评

暂无评论

Examining Cryptography and Randomness Failures in Open-Source Cellular Cores 24

Examining Cryptography and Randomness Failures in Open-Sourc...

引用

14th acm conference on data and application security and privacy (acm CODASPY)

作者： English, K. Virgil Bennett, Nathaniel Thorn, Seaver Butler, Kevin R. B. Enck, William Traynor, Patrick North Carolina State Univ Raleigh NC 27695 USA Univ Florida Gainesville FL USA

ISBN: (纸本)9798400704215

Industry is increasingly adopting private 5G networks to securely manage their wireless devices in retail, manufacturing, natural resources, and healthcare. As with most technology sectors, open-source software is well poised to form the foundation of deployments, whether it is deployed directly or as part of well-maintained proprietary offerings. This paper seeks to examine the use of cryptography and secure randomness in open-source cellular cores. We design a set of 13 CodeQL static program analysis rules for cores written in both C/C++ and Go and apply them to 7 open-source cellular cores implementing 4G and 5G functionality. We identify two significant security vulnerabilities, including predictable generation of TMSIs and improper verification of TLS certificates, with each vulnerability affecting multiple cores. In identifying these flaws, we hope to correct implementations to fix downstream deployments and derivative proprietary projects.

关键词： cellular core security cryptography misuse static analysis

来源：评论

学校读者我要写书评

暂无评论

Leveraging Storage Semantics to Enhance data security and privacy 24

Leveraging Storage Semantics to Enhance Data Security and Pr...

引用

31st conference on Computer and Communications security

作者： Zhu, Weidong Univ Florida Gainesville FL 32611 USA

ISBN: (纸本)9798400706363

data within a system travels through an I/O path from its generation in an application to its final storage on a device. Ensuring data security and privacy is a significant design concern, but heavily modulated storage stacks complicate understanding the data, thus presenting challenges to maintaining these properties. For example, the firmware in a storage device cannot interpret the semantics of an I/O request from the host, making it challenging to employ a semantic-aware malware defense in the storage device. Additionally, the evolution of storage media can weaken data privacy protection guarantees due to varying physical characteristics. Preserving the guarantee of data security and privacy requires understanding storage semantics, which provides insights into the data content and the architectural components within the storage system. This thesis characterizes security and privacy weaknesses in the I/O path while proposing solutions to advance data security and privacy by leveraging storage semantics. We correlate I/O requests with their semantic attributes to facilitate data security. We also demonstrate how these requests can mitigate vulnerabilities found in previous privacy-preserving storage solutions by considering the knowledge of physical storage devices. We show that data security and privacy can be vastly improved by identifying security vulnerabilities and developing new security mechanisms based on storage semantics.

关键词： storage semantics security privacy

来源：评论

学校读者我要写书评

暂无评论

Privkit: A Toolkit of privacy-Preserving Mechanisms for Heterogeneous data Types 24

Privkit: A Toolkit of Privacy-Preserving Mechanisms for Hete...

引用

14th acm conference on data and application security and privacy (acm CODASPY)

作者： Cunha, Mariana Duarte, Guilherme Andrade, Ricardo Mendes, Ricardo Vilela, Joao P. Univ Porto CISUC CRACS INESC TEC Porto Portugal Univ Porto Dept Comp Sci Porto Portugal Univ Coimbra CISUC Coimbra Portugal Univ Coimbra Dept Informat Engn Coimbra Portugal

ISBN: (纸本)9798400704215

With the massive data collection from different devices, spanning from mobile devices to all sorts of IoT devices, protecting the privacy of users is a fundamental concern. In order to prevent unwanted disclosures, several privacy-Preserving Mechanisms (PPMs) have been proposed. Nevertheless, due to the lack of a standardized and universal privacy definition, configuring and evaluating PPMs is quite challenging, requiring knowledge that the average user does not have. In this paper, we propose a privacy toolkit - Privkit - to systematize this process and facilitate automated configuration of PPMs. Privkit enables the assessment of privacy-preserving mechanisms with different configurations, while allowing the quantification of the achieved privacy and utility level of various types of data. Privkit is open source and can be extended with new data types, corresponding PPMs, as well as privacy and utility assessment metrics and privacy attacks over such data. This toolkit is available through a Python Package with several state-of-the-art PPMs already implemented, and also accessible through a Web application. Privkit constitutes a unified toolkit that makes the dissemination of new privacy-preserving methods easier and also facilitates reproducibility of research results, through a repository of Jupyter Notebooks that enable reproduction of research results.

关键词： privacy privacy Tools privacy-Preserving Mechanisms data privacy Python

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共109页 << < 1 2 3 4 5 6 7 8 9 10 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：