检索结果-内蒙古大学图书馆

26th International Computer Conference of the Computer-Society-of-Iran

作者： Jahanbin, Ahmad Haghighi, Mohammad Sayad Univ Tehran Coll Engn Sch Elect & Comp Engn Tehran Iran

ISBN: (纸本)9781665412414

Bitcoin, as the first and the most adopted cryptocurrency, offers many features one of which is contingent payment, that is, the owner of money can programmatically describe the condition upon which his/her money is spent. The condition is determined using a set of instructions written in the Bitcoin scripting language. Unfortunately, this scripting language is not sophisticated enough to create complex conditions or smart contracts in general. Many admirable efforts have been made to build a smart contract infrastructure on top of the Bitcoin platform. In this paper, given the inherent limitations of the Bitcoin scripting language, we critically analyze the practical effectiveness of these methods. Afterwards, we formally define what a smart contract is and introduce seven requirements that if are satisfied, can make creation of smart contracts for Bitcoin possible. Based on the introduced requirements, we examine the ability of the current methods that use secure Multi-party Computation (MPC) to create smart contracts for Bitcoin and show where they fall short. We additionally compare their pros and cons and give clues on how a comprehensive smart contract platform can be possibly built for Bitcoin.

关键词： Smart Contract Bitcoin Blockchain Secure Multiparty Computation scripting language

来源：评论

学校读者我要写书评

暂无评论

Concolic Execution of NMap Scripts for Honeyfarm Generation 8

Concolic Execution of NMap Scripts for Honeyfarm Generation

引用

8th ACM Workshop on Moving Target Defense, MTD 2021, co-located with CCS 2021

作者： Li, Zhe Chen, Bo Feng, Wu-Chang Xie, Fei Portland State University Portland United States

ISBN: (纸本)9781450386586

Attackers rely upon a vast array of tools for automating attacksagainst vulnerable servers and services. It is often the case thatwhen vulnerabilities are disclosed, scripts for detecting and exploit-ing them in tools such asNmapandMetasploitare released soonafter, leading to the immediate identification and compromise ofvulnerable systems. Honeypots, honeynets, tarpits, and other decep-tive techniques can be used to slow attackers down, however, such approaches have difficulty keeping up with the sheer number of vulnerabilities being discovered and attacking scripts that are being released. To address this issue, this paper describes an approach for applying concolic execution on attacking scripts in Nmap in order to automatically generate lightweight fake versions of the vulnerable services that can fool the scripts. By doing so in an automated and scalable manner, the approach can enable rapid deployment of custom honeyfarms that leverage the results of concolic execution to trick an attacker's script into returning a result chosen by the honeyfarm, making the script unreliable for the use by the attacker. © 2021 ACM.

关键词： honeyfarm generation nmap scripting language symbolic execution

来源：评论

学校读者我要写书评

暂无评论

A Rigorous Benchmarking and Performance Analysis Methodology for Python Workloads 16

A Rigorous Benchmarking and Performance Analysis Methodology...

引用

16th IEEE International Symposium on Workload Characterization (IISWC)

作者： Crape, Arthur Eeckhout, Lieven Univ Ghent Ghent Belgium

ISBN: (纸本)9781728176451

Computer architecture and computer systems research and development is heavily driven by benchmarking and performance analysis. It is thus of paramount importance that rigorous methodologies are used to draw correct conclusions and steer research and development in the right direction. While rigorous methodologies are widely used for native and managed programming language workloads, scripting language workloads are subject to ad-hoc methodologies which lead to incorrect and misleading conclusions. In particular, we find incorrect public statements regarding different virtual machines for Python, the most popular scripting language. The incorrect conclusion is a result of using the geometric mean speedup and not making a distinction between start-up and steady-state performance. In this paper, we propose a statistically rigorous benchmarking and performance analysis methodology for Python workloads, which makes a distinction between start-up and steady-state performance and which summarizes average performance across a set of benchmarks using the harmonic mean speedup. We find that a rigorous methodology makes a difference in practice. In particular, we find that the PyPy JIT compiler outperforms the CPython interpreter by 1.76x for steady-state while being 2% slower for start-up, which refutes the statement on the PyPy website that 'PyPy outperforms CPython by 4.4x on average' based on the geometric mean speedup and not making a distinction between start-up and steady-state. We use the proposed methodology to analyze Python workloads which yields several interesting findings regarding PyPy versus CPython performance, start-up versus steady-state performance, the impact of a workload's input size, and Python workload execution characteristics at the microarchitecture level.

关键词： benchmarking computer architecture performance analysis Python scripting language

来源：评论

学校读者我要写书评

暂无评论

Detecting Obfuscated Scripts With Machine Learning Techniques

Detecting Obfuscated Scripts With Machine Learning Technique...

引用

作者： Pogosova, Mariam Aalto University

学位级别：硕士

Complex operating system administration tasks can be automated and simplified by using scripting languages. For the Windows operating system, one of the most commonly used scripting languages is PowerShell. The PowerShell scripting language provides vast functionality for the system administrators. At the same time, it leaves a large attack surface for adversaries to bypass the OS protections. Signature and supervised machine learning based intrusion detection systems (IDS) can be used for monitoring and detecting such malicious scripts. However, the detection can be evaded by obfuscating the scripts. As the next step in the defense, we can use obfuscation itself as a reliable sign of malicious code. This thesis investigates the methods of detecting obfuscated PowerShell scripts with machine learning (ML) techniques. We trained the logistic regression, random forest and gradient boosting models on a balanced dataset. To generate the dataset, unobfuscated scripts were taken from open-source projects and they were obfuscated by open-source obfuscators. We then selected the most important independent features for obfuscation detection. The ML methods were compared using their ROC curves and AUC values. The best method turns out to be the gradient boosting model, which has the AUC close to one for the used dataset. Moreover, the model can classify a script faster than in one millisecond. Thus, the model can replace existing approaches to obfuscation detection, and it can be used by antivirus vendors in the process of detecting malicious PowerShell scripts.

关键词： machine learning PowerShell malware scripting language obfuscation detection

来源：评论

学校读者我要写书评

暂无评论

Running language Interpreters Inside SGX: A Lightweight, Legacy-Compatible Script Code Hardening Approach 19

Running Language Interpreters Inside SGX: A Lightweight, Leg...

引用

ACM Asia Conference on Computer and Communications Security (Asia CCS)

作者： Wang, Huibo Bauman, Erick Karande, Vishal Lin, Zhiqiang Cheng, Yueqiang Zhang, Yinqian Univ Texas Dallas Richardson TX 75083 USA Ohio State Univ Columbus OH 43210 USA Baidu USA Sunnyvale CA USA

ISBN: (纸本)9781450367523

Recent advances in trusted execution environments, specifically with Intel's introduction of SGX on consumer processors, have provided unprecedented opportunities to create secure applications with a small TCB. While a large number of SGX solutions have been proposed, nearly all of them focus on protecting native code applications, leaving scripting languages unprotected. To fill this gap, this paper presents ScriptShield, a framework capable of running legacy script code while simultaneously providing confidentiality and integrity for scripting code and data. In contrast to the existing schemes that either require tedious and time-consuming re-development or result in a large TCB by importing an entire library OS or container, ScriptShield keeps the TCB small and provides backwards compatibility (i.e., no changes needed to the scripting code itself). The core idea is to customize the script interpreter to run inside an SGX enclave and pass scripts to it. We have implemented ScriptShield and tested with three popular scripting languages: Lua, JavaScript, and Squirrel. Our experimental results show that ScriptShield does not cause noticeable overhead. The source code of ScriptShield has been made publicly available as an open source project.

关键词： SGX scripting language Confidentiality Integrity

来源：评论

学校读者我要写书评

暂无评论

ANTRL as a Development Platform for the Series DSL for the Learning Process 10

ANTRL as a Development Platform for the Series DSL for the L...

引用

10th IEEE International Conference on Intelligent Data Acquisition and Advanced Computing Systems - Technology and Applications (IDAACS)

作者： Kandyba, Ihor Davydenko, Yevhen Panasyuk, Valentyna Shved, Alyona Fisun, Mykola Petro Mohyla Black Sea Natl Univ 1068 Desantnykiv St UA-54003 Mykolaiv Ukraine Ternopil Natl Econ Univ 3 Peremoga Sq UA-46020 Ternopol Ukraine

ISBN: (纸本)9781728140681

Recently, domain-specific language has become more popular in the IT market. Therefore, there are several variants of the domain-oriented programming languages used in the modern world. A variant of domain-specific language that accepts wind farm modeling language at the input and GPSS code at the output to model the queuing system has been proposed in this paper. The ANTLR grammar rules for the implementation of wind farm modeling language have been formed.

关键词： domain-specific language ANTLR programing language scripting language

来源：评论

学校读者我要写书评

暂无评论

GAMESPECT: Aspect Oriented Programming for a Video Game Engine using Meta-languages

GAMESPECT: Aspect Oriented Programming for a Video Game Engi...

引用

IEEE SoutheastCon Conference

作者： Geisler, Benjamin J. Mitropoulos, Frank J. Kavage, Shane Nova Southeastern Univ Coll Engn & Comp Davie FL 33328 USA Univ Wisconsin Coll Sci Engn & Technol Green Bay WI USA

ISBN: (纸本)9781728101378

Video game programming is an area where code duplication is extremely prevalent. Similar types of tasks are performed in multiple places throughout a game engine codebase. For example: game balance, logging, and memory allocation are just a few of the areas which are located across disparate locations of the codebase. Meanwhile, aspect oriented programming (AOP) was created to make use of common themes in a codebase and allow for advice to be given during compilation or runtime. GAMESPECT is a Domain Specific language (DSL) which resides in a higher level language space, above the typical languages used by game engines such as Unreal Engine 4. The language is written with the popular XText language toolset and contains advices in the spirit of aspect oriented programming: point cuts and join points. These advices can be executed at runtime when the programmer wants to fine-tune values or perform debugging. The advising is made possible through the Clang toolchain. Unique to this approach, GAMESPECT takes a source language and converts into multiple target languages. Depending on the context, GAMESPECT can generate C++, LUA, Blueprints or Skookum Script. This type of source to source translation is made possible through GAMESPECT's "composition specifications". With GAMESPECT, video game designers can increase their productivity and reduce the required lines of code for certain tasks by a 9-40"/0 reduction. In addition, it provides for an AOP platform which is agnostic to the underlying game code. The applicability of this approach extends beyond game programming into software engineering as a whole.

关键词： multilanguage metalanguage aspect oriented DSL video game engine scripting language UE4

来源：评论

学校读者我要写书评

暂无评论

A practical solution for achieving language compatibility in scripting language compilers

引用

SCIENCE OF COMPUTER PROGRAMMING 2012年第9期77卷 971-989页

作者： Biggar, Paul de Vries, Edsko Gregg, David Trinity Coll Dublin Lero TCD Dublin 2 Ireland

Although scripting languages have become very popular, even mature scripting language implementations remain interpreted. Several compilers and reimplementations have been attempted, generally focusing on performance. Based on our survey of these reimplementations, we determine that there are three important features of scripting languages that are difficult to compile or reimplement. Since scripting languages are defined primarily through the semantics of their original implementations, they often change semantics between releases. They provide C APIs, used both for foreign-function interfaces and to write third-party extensions. These APIs typically have tight integration with the original implementation, and are used to provide large standard libraries, which are difficult to re-use, and costly to reimplement. Finally, they support run-time code generation. These features make it difficult to design a fully compatible compiler. We present a technique to support these features in an ahead-of-time compiler for PHP. Our technique uses the original PHP implementation through the provided C API, both in our compiler and in our generated code. We support all of these important scripting language features. Additionally, our approach allows us to automatically support limited future language changes. We present a discussion and performance evaluation of this technique. (c) 2011 Elsevier B.V. All rights reserved.

关键词： Compiler scripting language

来源：评论

学校读者我要写书评

暂无评论

Reusable Inline Caching for JavaScript Performance 2019

Reusable Inline Caching for JavaScript Performance

引用

40th ACM SIGPLAN Conference on Programming language Design and Implementation (PLDI) part of ACM's Federated Computing Research Conference (FCRC)

作者： Choi, Jiho Shull, Thomas Torrellas, Josep Univ Illinois Champaign IL 61820 USA

ISBN: (纸本)9781450367127

JavaScript performance is paramount to a user's browsing experience. Browser vendors have gone to great lengths to improve JavaScript's steady-state performance. This has led to sophisticated web applications. However, as users increasingly expect instantaneous page load times, another important goal for JavaScript engines is to attain minimal startup times. In this paper, we reduce the startup time of JavaScript programs by enhancing the reuse of compilation and optimization information across different executions. Specifically, we propose a new scheme to increase the startup performance of Inline Caching (IC), a key optimization for dynamic type systems. The idea is to represent a substantial portion of the IC information in an execution in a context-independent way, and reuse it in subsequent executions. We call our enhanced IC design Reusable Inline Caching (RIC). We integrate RIC into the state-of-the-art Google V8 JavaScript engine and measure its impact on the initialization time of popular JavaScript libraries. By recycling IC information collected from a previous execution, RIC reduces the average initialization time per library by 17%.

关键词： Inline Caching JavaScript scripting language Dynamic Typing

来源：评论

学校读者我要写书评

暂无评论

Reconfigurable scripting language with Programming Risk

Reconfigurable Scripting Language with Programming Risk

引用

23rd IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)

作者： Wakamori, Takuma Ide, Masahiro Sugaya, Midori Kuramitsu, Kimio Yokohama Natl Univ Yokohama Kanagawa Japan Yokohama Natl Univ CREST JST Yokohama Kanagawa Japan

ISBN: (纸本)9780769549286;9781467350488

We are studying a dependable scripting language in JST/DEOS project. We think that we can realize a dependable scripting language when it has ability to manage the risk of a program written by using it. We are developing a scripting language, which can customize its syntax by minimum language components and language extensions. However, to manage the risk of a program, the criterion for choosing the language extensions is needed. We estimated the programming risk of syntax from the frequency and impact of the failure that occur when using it. In this paper, we discuss a possibility of reducing the programming risk by syntax level restriction of a programming language.

关键词： scripting language syntactic extension risk of programming

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：