检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

64 篇 会议
22 篇 期刊文献
3 篇 学位论文

馆藏范围

89 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

64 篇 工学
- 56 篇 计算机科学与技术...
- 19 篇 软件工程
- 10 篇 电气工程
- 5 篇 控制科学与工程
- 4 篇 信息与通信工程
- 2 篇 仪器科学与技术
- 2 篇 生物医学工程（可授...
- 1 篇 电子科学与技术（可...
- 1 篇 生物工程
12 篇 教育学
- 12 篇 教育学
5 篇 理学
- 2 篇 数学
- 2 篇 物理学
- 1 篇 系统科学
2 篇 医学
- 1 篇 临床医学
- 1 篇 特种医学
2 篇 管理学
- 2 篇 管理科学与工程(可...
1 篇 法学
- 1 篇 社会学

主题

89 篇 secure coding
19 篇 cybersecurity
16 篇 security
8 篇 security injecti...
8 篇 cs1
7 篇 cs0
7 篇 industry
6 篇 hacker curriculu...
6 篇 cs2
6 篇 training
5 篇 laboratory exerc...
4 篇 serious games
4 篇 education
4 篇 cloud computing
4 篇 web application ...
4 篇 capture-the-flag
3 篇 information syst...
3 篇 java
3 篇 game analysis
3 篇 awareness

机构

10 篇 towson universit...
7 篇 union county col...
4 篇 towson univ tows...
4 篇 siemens ag munic...
4 篇 the evergreen st...
4 篇 lewis and clark ...
3 篇 univ bundeswehr ...
2 篇 sri internationa...
2 篇 univ bundeswehr ...
2 篇 inst univ lisboa...
2 篇 tech univ munich...
1 篇 univ washington ...
1 篇 siemens ag corpo...
1 篇 the university o...
1 篇 stevens inst tec...
1 篇 stephen f. austi...
1 篇 towson univ dept...
1 篇 bits pilani dept...
1 篇 dankook univ dep...
1 篇 shiraz univ sch ...

作者

12 篇 blair taylor
9 篇 siddharth kaza
8 篇 lechner ulrike
6 篇 pinto-albuquerqu...
5 篇 taylor blair
5 篇 richard weiss
5 篇 elizabeth hawtho...
5 篇 jens mache
4 篇 gasiba tiago esp...
3 篇 gasiba tiago
3 篇 michael e. locas...
3 篇 endicott-popovsk...
3 篇 chung sam
3 篇 elizabeth k. haw...
3 篇 chattopadhyay an...
2 篇 zhao tiange
2 篇 albuquerque adri...
2 篇 ambareen siraj
2 篇 leite gleidson s...
2 篇 sagar raina

语言

86 篇 英文
3 篇 其他

检索条件"主题词=Secure coding"

共 89 条记录，以下是51-60 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Scalable and Reusable Attack Aware Software

Scalable and Reusable Attack Aware Software

引用

ASE International Conference on BioMedical Computing (BioMedCom)

作者： Kim, William Moon, Cheolmin Sky Chung, Sam Escrig, Teresa Endicott-Popovsky, Barbara Univ Washington Tacoma Inst Technol Tacoma WA 98402 USA Univ Washington Ctr Informat Assurance & Cybersecur Seattle WA 98105 USA

ISBN: (纸本)9780769549385;9781467354950

Developing and maintaining security software systems can be cost-prohibitive for all but the largest organizations. New requirements of hardware and software quickly outdate current security systems. Modern software architecture technology, such as Spring Framework, and the new deployment paradigm of cloud computing infrastructure services can help with the challenge of maintaining software security systems. Spring Framework allows for better reusability of our code to adapt to different input vulnerabilities and cloud computing helps to deploy quickly and easily. The application of software architectural patterns and cloud computing to the development of attack aware software improves reusability and scalability.

关键词： Attack Aware Web Application Security Security Software secure coding secure Software Design Cloud Computing

来源：评论

学校读者我要写书评

暂无评论

An Approach for Reduce Vulnerabilities in Web Information Systems 2nd

An Approach for Reduce Vulnerabilities in Web Information Sy...

引用

2nd Conference on Computational Methods in Systems and Software (CoMeSySo)

作者： Leite, Gleidson Sobreira Albuquerque, Adriano Bessa Univ Fortaleza Fortaleza Ceara Brazil

ISBN: (纸本)9783030001841;9783030001834

The evolution of the Internet has brought a significant change in the evolution of software, resulting in an increasing presence of Information Systems in Web environments and, consequently, an increase in security vulnerabilities and threats. In this context, secure application development has become a crucial component for information systems in the market. Exploring the main vulnerabilities in the coding of software for Web environments and the need for awareness and guidance for developers of information systems, this paper offers a approach for the treatment of vulnerabilities in Web applications composed by the selection and mapping of categories of major vulnerabilities, risks and existing proactive controls to prevent or treat occurrences of exploitation of vulnerabilities by malicious agents.

关键词： secure coding Information security Information systems Web applications vulnerabilities

来源：评论

学校读者我要写书评

暂无评论

Locating SQL Injection Vulnerabilities in Java Byte Code using Natural Language Techniques

Locating SQL Injection Vulnerabilities in Java Byte Code usi...

引用

IEEE SoutheastCon Conference

作者： Jackson, Kevin A. Bennett, Brian T. East Tennessee State Univ Dept Comp Johnson City TN 37614 USA

ISBN: (纸本)9781538661338

With so much our daily lives relying on digital devices like personal computers and cell phones, there is a growing demand for code that not only functions properly, but is secure and keeps user data safe. However, ensuring this is not such an easy task, and many developers do not have the required skills or resources to ensure their code is secure. Many code analysis tools have been written to find vulnerabilities in newly developed code, but this technology tends to produce many false positives, and is still not able to identify all of the problems. Other methods of finding software vulnerabilities automatically are required. This proof-of-concept study applied natural language processing on Java byte code to locate SQL injection vulnerabilities in a Java program. Preliminary findings show that, due to the high number of terms in the dataset, using singular decision trees will not produce a suitable model for locating SQL injection vulnerabilities, while random forest structures proved more promising. Still, further work is needed to determine the best classification tool.

关键词： Code analysis Natural Language Processing Security secure coding Java Python

来源：评论

学校读者我要写书评

暂无评论

A Large-Scale Study on the Security Vulnerabilities of Cloud Deployments 1

引用

1st International Conference on Ubiquitous Security (UbiSec)

作者： Iosif, Andrei-Cristian Gasiba, Tiago Espinha Zhao, Tiange Lechner, Ulrike Pinto-Albuquerque, Maria Tech Univ Munich Munich Germany Siemens AG Munich Germany Univ Bundeswehr Munchen Neubiberg Germany Inst Univ Lisboa ISCTE IUL ISTAR Lisbon Portugal

ISBN: (数字)9789811904684

ISBN: (纸本)9789811904684;9789811904677

As cloud deployments are becoming ubiquitous, the rapid adoption of this new paradigm may potentially bring additional cyber security issues. It is crucial that practitioners and researchers pose questions about the current state of cloud deployment security. By better understanding existing vulnerabilities, progress towards a more secure cloud can be accelerated. This is of paramount importance especially with more and more critical infrastructures moving to the cloud, where the consequences of a security incident can be significantly broader. This study presents a data-centric approach to security research - by using three static code analysis tools and scraping the internet for publicly available codebases, a footprint of the current state of open-source infrastructure-as-code repositories can be achieved. Out of the scraped 44485 repository links, the study is concentrated on 8256 repositories from the same cloud provider, across which 292538 security violations have been collected. Our contributions consist of: understanding on existing security vulnerabilities of cloud deployments, contributing a list of Top Guidelines for practitioners to follow to securely deploy systems in the cloud, and providing the raw data for further studies.

关键词： Cloud Security Industry Critical infrastructures Awareness Infrastructure as Code Terraform secure coding

来源：评论

学校读者我要写书评

暂无评论

OpenOSC: Open Source Object Size Checking Library With Built-in Metrics

OpenOSC: Open Source Object Size Checking Library With Built...

引用

IEEE secure Development Conference (IEEE SecDev)

作者： Han, Yongkui Shah, Pankil Van Nguyen Ma, Ling Livingston, Richard Cisco Syst Boxboro MA 01719 USA Cisco Syst Knoxville TN USA

ISBN: (纸本)9781538672891

OpenOSC provides value to software development in detecting destination buffer overruns and source buffer over-reads. OpenOSC is presented as open, extensible, object size checking (OSC) library written in C that integrates into most Linux distribution components through hardening flags. It is quite similar to FORTIFY-SOURCE [1] [2] and can complement or replace it in most cases. Like FORTIFY-SOURCE, OpenOSC uses compiler built-in functions [3] in its implementation. The facility also offers some advantages over FORTIFY-SOURCE for compiler and security researchers. Additionally it can be extended to cover more data movement functions such as SafeC library functions. OpenOSC has built-in OSC metrics support, which provides detailed information on OSC coverage. We present a few open source components compiled with OpenOSC as a means to demonstrate the utility of OpenOSC. The effectiveness of three compilers (GCC, CLANG, and ICC) is evaluated and compared. Our results summarize coverage capabilities of these compilers and provide the details on exactly where a compiler might be able to improve its effectiveness. This OpenOSC metric report can be used by product owners to understand where risk remains in the application, where the owners could focus secure code reviews or even targeted SafeC [4] [5] recoding for these calls.

关键词： object size checking fortify source secure coding buffer overflow buffer overread metrics

来源：评论

学校读者我要写书评

暂无评论

Can gamification help to teach Cybersecurity? 20

Can gamification help to teach Cybersecurity?

引用

20th International Conference on Information Technology Based Higher Education and Training (ITHET)

作者： Berisford, Christopher J. Blackburn, Leighton Ollett, Jennifer M. Tonner, Thomas B. Yuen, Chun San Hugh Walton, Ryan Olayinka, Olakunle Univ Sheffield Dept Comp Sci Sheffield England

ISBN: (纸本)9781665489089

Over the last decade, there has been an increase in the number of attacks on web applications. The proliferation of these attacks is partially a result of increased adoption of IT systems in organisations and the increasing role digital technologies play in our lives. The success of an attack relies upon the existence of vulnerabilities in the code base and there is consensus within literature that many of these vulnerabilities can be avoided through developers adopting secure code practices and standards which are often not formally taught. Whilst gamification has been shown to be an effective educational tool in fields such as health, education and security awareness, there is a scarcity of research regarding the application of gamification in the context of secure code practices. This paper evaluates the efficacy of a bespoke gamified application in creating awareness and fostering an understanding of the threats and secure coding practices. The application presented in this work focuses on JavaScript with the aim of reducing the number of vulnerabilities in web applications. The analysis is conducted using first and second-year undergraduate participants, who are viewed as the primary target for this software. As part of a participant study involving the application, it was found that gamification elements were effective in increasing user engagement. Initial findings suggest potential for the integration of secure-code gamification in traditional pedagogical methods, but further investigation is required to strengthen this claim.

关键词： gamification cybersecurity secure coding developers game-based learning

来源：评论

学校读者我要写书评

暂无评论

Code Obfuscation Technique for Enhancing Software Protection Against Reverse Engineering 2nd

Code Obfuscation Technique for Enhancing Software Protection...

引用

2nd International Conference of Artificial Intelligence, Medical Engineering, Education (AIMEE)

作者： Gnatyuk, Sergiy Kinzeryavyy, Vasyl Stepanenko, Iryna Gorbatyuk, Yana Gizun, Andrii Kotelianets, Vitalii Natl Aviat Univ Kiev Ukraine

ISBN: (纸本)9783030120825;9783030120818

Software reliability is an actual problem caused with absence of software protection techniques, especially absence of software code protection from reverse engineering. Computer piracy and illegal software usage makes big damage for state economy. The development of new approaches and modification of existed obfuscation technologies is actual task directed to growing efficiency of secure coding and protection against reverse engineering. In this paper, authors present the obfuscation method for software protection, which ensures protection from reverse engineering. The method is based on a new sequence of obfuscation transformations. Also software tool StiK was developed, and based on the submitted sequence of operations, pseudocode for protection method was created. Experimental study was conducted according to the presented technique. Experimental results show the efficiency and generality of the proposed method (StiK obfuscator is 10% faster as well as 1.37 times more protected than analogues). Consequently, the developed technique can be used to prevent or at least hamper interpretation, decoding, analysis, or reverse engineering of software.

关键词： Information security Software code protection Obfuscation technique Obfuscation Obfuscation transformations secure coding Obfuscation algorithm

来源：评论

学校读者我要写书评

暂无评论

Developer-Proof Prevention of SQL Injections 13th

Developer-Proof Prevention of SQL Injections

引用

13th International Symposium on Foundations and Practice of Security (FPS)

作者： Courant, Judicael Orange Cyberdefense Lyon France

ISBN: (纸本)9783030708818;9783030708801

SQL queries, when written by unskilled or hurried developers for web applications, are prone to SQL injections. We propose an alternative approach for querying SQL databases that does not suffer from this flaw. Our approach is based on abstract syntax trees, lets developers build dynamic queries easily, and is easier to set up than an ORM tool. We provide a proof-of-concept in Java, but our approach can be extended to other languages.

关键词： SQL injection SQLi prevention Dynamic queries Code generation Abstract syntax trees Language-based security secure coding Software security

来源：评论

学校读者我要写书评

暂无评论

Scaffolded Live coding: A Hybrid Pedagogical Approach for Enhanced Teaching of coding Skills

Scaffolded Live Coding: A Hybrid Pedagogical Approach for En...

引用

IEEE Frontiers in Education Conference (FIE)

作者： Chattopadhyay, Ankur Ryan, Drew Pockrandt, James Northern Kentucky Univ Dept Comp Sci Highland Hts KY 41076 USA Univ Wisconsin Dept Comp Sci Green Bay WI USA

ISBN: (数字)9781665462440

ISBN: (纸本)9781665462440

This Full paper in the Innovative Practice Category describes a novel research study that is based upon an experimental scaffolding of live coding techniques used towards teaching a traditional face to face undergrad computer programming class. It discusses our hybrid pedagogical model, which comprises of a scaffolded collection of our class instructional methods that include fine blend of live coding-based teaching strategies, and traditional lectures. Our combination of live coding styles, as used in this study, consists of the standard live coding technique and our live secure coding demonstrations, which lead to a uniquely blended and integrated live coding approach for teaching coding along with software security concepts. To our knowledge, this is a new research study based upon a hybrid, integrated live coding approach that represents a scaffolding of distinct teaching styles, which combines coding instructions with teaching of secure coding components. We demonstrate an improvised teaching model that enhances the classical live coding pedagogy by adding the live secure coding components, which holistically represent a new variant in a traditional undergrad coding class, for an engaged and enhanced learning experience. Existing literature indicates that there is limited number of prior educational research studies on the usage of a hybrid, non-traditional live secure coding approach blended with the traditional live coding style. Thus, this paper discusses a fresh, nifty teaching strategy that involves new variants of the standard live coding instructional method and forms a hybrid pedagogical model for a more effective and relatable learning of coding skills. We discuss the results of our experimental study in the form of data obtained over a couple of semesters from an upper-level undergrad coding class through learning assessments and collected survey data on learner experiences. We have analyzed the overall gathered learner data to evaluate the performanc

关键词： hybrid teaching pedagogy model live hacking scaffolded live-coding secure coding

来源：评论

学校读者我要写书评

暂无评论

Empirical Analysis of Software Vulnerabilities Causing Timing Side Channels

Empirical Analysis of Software Vulnerabilities Causing Timin...

引用

IEEE Conference on Communications and Network Security (CNS)

作者： Kholoosi, M. Mehdi Babar, M. Ali Yilmaz, Cemal Univ Adelaide CREST Sch Comp Sci Adelaide SA Australia Cyber Secur Cooperat Res Ctr Adelaide SA Australia Sabanci Univ Fac Engn & Nat Sci TR-34956 Istanbul Turkiye

ISBN: (纸本)9798350339451

Timing attacks are considered one of the most damaging side-channel attacks. These attacks exploit timing fluctuations caused by certain operations to disclose confidential information to an attacker. For instance, in asymmetric encryption, operations such as multiplication and division can cause time-varying execution times that can be ill-treated to obtain an encryption key. Whilst several efforts have been devoted to exploring the various aspects of timing attacks, particularly in cryptography, little attention has been paid to empirically studying the timing attack-related vulnerabilities in non-cryptographic software. By inspecting these software vulnerabilities, this study aims to gain an evidence-based understanding of weaknesses in non-cryptographic software that may help timing attacks succeed. We used qualitative and quantitative research approaches to systematically study the timing attackrelated vulnerabilities reported in the National Vulnerability Database (NVD) from March 2003 to December 2022. Our analysis was focused on the modifications made to the code for patching the identified vulnerabilities. We found that a majority of the timing attack-related vulnerabilities were introduced due to not following known secure coding practices. The findings of this study are expected to help the software security community gain evidence-based information about the nature and causes of the vulnerabilities related to timing attacks.

关键词： secure coding software vulnerability timing attack constant time

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共9页 << < 1 2 3 4 5 6 7 8 9 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：