检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

16 篇 会议
7 篇 期刊文献
2 篇 学位论文

馆藏范围

25 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

20 篇 工学
- 18 篇 计算机科学与技术...
- 5 篇 电气工程
- 5 篇 软件工程
- 4 篇 信息与通信工程
- 1 篇 电子科学与技术（可...
- 1 篇 控制科学与工程
2 篇 理学
- 2 篇 数学
- 1 篇 系统科学
1 篇 管理学
- 1 篇 图书情报与档案管...

主题

25 篇 web application ...
4 篇 cross-site scrip...
3 篇 software securit...
2 篇 penetration test...
2 篇 cross-site reque...
2 篇 world wide web
2 篇 cybersecurity
2 篇 hacking
2 篇 information secu...
2 篇 sql injection
2 篇 buffer overflow
2 篇 web application
2 篇 sql injection at...
2 篇 database protect...
2 篇 e-business
2 篇 privacy
2 篇 web application ...
1 篇 javascript code ...
1 篇 information flow...
1 篇 security vulnera...

机构

2 篇 univ lisbon fac ...
1 篇 univ tokyo ctr i...
1 篇 univ thessaly vo...
1 篇 univ teknol mara...
1 篇 universiti tekno...
1 篇 american univers...
1 篇 auckland univers...
1 篇 univ s australia...
1 篇 natl inst techno...
1 篇 uptu: cs and e i...
1 篇 univ napoli fede...
1 篇 ict research ins...
1 篇 univ fed pernamb...
1 篇 universiti tekno...
1 篇 lappeenranta uni...
1 篇 univ patras comp...
1 篇 univ fed rural p...
1 篇 oakland univ dep...
1 篇 cleveland state ...
1 篇 birla inst techn...

作者

3 篇 medeiros iberia
2 篇 neves nuno
2 篇 gupta shashank
1 篇 el-kassas sherif
1 篇 alqazzaz ali
1 篇 yan wei qi
1 篇 ain zubaidah moh...
1 篇 perrone gaetano
1 篇 bahrololum marja...
1 篇 shar lwin khin
1 篇 brito kellyton
1 篇 fakariah hani mo...
1 篇 katsidimas ioann...
1 篇 ioannis katsidim...
1 篇 vlachos vasileio...
1 篇 kamarularifin ab...
1 篇 hassan doaa
1 篇 hluchy ladislav
1 篇 rozali nur amiza...
1 篇 almashfi nabil

语言

24 篇 英文
1 篇 其他

检索条件"主题词=Web Application Vulnerabilities"

共 25 条记录，以下是11-20 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

ASPIDA: An Observatory for Security and Privacy in the Greek e-Business Sector 25

ASPIDA: An Observatory for Security and Privacy in the Greek...

引用

25th Pan-Hellenic Conference on Informatics with International Participation (PCI)

作者： Vlachos, Vasileios Katevas, Gerasimos Katsidimas, Ioannis Kerimakis, Emmanouil Nikoletseas, Sotiris Panagiotou, Stefanos Spirakis, Paul Univ Thessaly Volos Greece Comp Technol Inst & Press Diophantus CTI Volos Greece Univ Patras Comp Engn & Informat Dept Patras Greece Univ Liverpool Liverpool Merseyside England

ISBN: (纸本)9781450395557

Modern e-business policy aims to better frame and steer progress and advancements towards a legal and security aware framework. However, a large percentage of cases neglects the adoption of good security practices, exposing customers to potential risks. In this work, we present a hybrid approach upon self-assessment, self-improvement and self-regulation motivation, offered by the observAtory for Security and PrIvacy DAta (ASPIDA) system. To address privacy and security weaknesses we monitor and analyze a set of security and privacy metrics and indicators. The evaluation of the aforementioned criteria drives an outcome in the form of a digital badge of good practices for the specific website. This digital badge is a recognition and can be used by the e-business owners as an attraction that frames the services and content they offer to the public.

关键词： cybersecurity web application vulnerabilities privacy e-business world wide web

来源：评论

学校读者我要写书评

暂无评论

Towards a Deep Learning Model for Vulnerability Detection on web application Variants 13

Towards a Deep Learning Model for Vulnerability Detection on...

引用

13th IEEE International Conference on Software Testing, Verification and Validation (ICST)

作者： Fidalgo, Ana Medeiros, Iberia Antunes, Paulo Neves, Nuno Univ Lisbon Fac Ciencias LASIGE Lisbon Portugal

ISBN: (纸本)9781728110752

Reported vulnerabilities have grown significantly over the recent years, with SQL injection (SQLi) being one of the most prominent, especially in web applications. For these, such increase can be explained by the integration of multiple software parts (e.g., various plugins and modules), often developed by different organizations, composing thus web application variants. Machine Learning has the potential to be a great ally on finding vulnerabilities, aiding experts by reducing the search space or even by classifying programs on their own. However, previous work usually does not consider SQLi or utilizes techniques hard to scale. Moreover, there is a clear gap in vulnerability detection with machine learning for PHP, the most popular server-side language for web applications. This paper presents a Deep Learning model able to classify PHP slices as vulnerable (or not) to SQLi. As slices can belong to any variant, we propose the use of an intermediate language to represent the slices and interpret them as text, resorting to well-studied Natural Language Processing (NLP) techniques. Preliminary results of the use of the model show that it can discover SQLi, helping programmers and precluding attacks that would eventually cost a lot to repair.

关键词： web application vulnerabilities vulnerability detection natural language processing deep learning software security

来源：评论

学校读者我要写书评

暂无评论

A Pilot Study on Secure Code Generation with ChatGPT forweb applications 24

A Pilot Study on Secure Code Generation with ChatGPT forWeb ...

引用

Annual ACM Southeast Conference (ACMSE)

作者： Jamdade, Mahesh Liu, Yi Univ Massachusetts Dartmouth Dartmouth MA 02747 USA

ISBN: (纸本)9798400702372

Conversational Large Language Models (LLMs), such as ChatGPT, have demonstrated their potent capabilities in natural language processing tasks. This paper presents a pilot study that uses ChatGPT for generating web application code with a specific emphasis on mitigating four prevalent web application vulnerability types: SQL Injection, Cross Site Scripting, Carriage Return Line Feed Injection, and Exposure of Sensitive Information. The paper uses a case study to illustrate how the vulnerabilities in the code are mitigated with the prompts and the subsequent refinements. The study's findings summarize the security concerns in the code generated by ChatGPT, and the paper proposes a prompt pattern designed to help mitigating the potential vulnerabilities.

关键词： Secure coding web application vulnerabilities generative AI ChatGPT

来源：评论

学校读者我要写书评

暂无评论

web application Security Tools Analysis 3

Web Application Security Tools Analysis

引用

IEEE 3rd International Conference on Big Data Security on Cloud (BigDataSecurity) / 3rd IEEE International Conference on High Performance and Smart Computing (HPSC) / 2nd IEEE International Conference on Intelligent Data and Security (IDS)

作者： Alzahrani, Abdulrahman Alqazzaz, Ali Fu, Huirong Almashfi, Nabil Zhu, Ye Oakland Univ Dept Comp Sci & Engn Rochester MI 48309 USA Cleveland State Univ Elect & Comp Engn Dept Cleveland OH 44115 USA

ISBN: (纸本)9781509062966

Strong security in web applications is critical to the success of your online presence. Security importance has grown massively, especially among web applications. Dealing with web application or website security issues requires deep insight and planning, not only because of the many tools that are available but also because of the industry immaturity. Thus, finding the proper tools requires deep understanding and several steps, including analyzing the development environment, business needs, and the web applications' complexity. In this paper, we demonstrate the architecture of web applications then list and evaluate the widespread security vulnerabilities. Those vulnerabilities are: Insufficient Transport Layer Protection, Information Leakage, Cross-Site Scripting, and SQL Injection. In addition, this paper analyzes the tools that are used to scan for these widespread vulnerabilities in web applications. Finally, it evaluates tools due to security vulnerabilities and gives recommendations to the web applications' users and administrators aiming to educate them.

关键词： web application web application security web application vulnerabilities

来源：评论

学校读者我要写书评

暂无评论

Positive Security Model based Server-side Solution for prevention of Cross-site Scripting Attacks 12

Positive Security Model based Server-side Solution for preve...

引用

12 IEEE Int C Elect Energy Env Communications Computer Control

作者： Maurya, Swati Deenbandhu Chhotu Ram Univ Sci & Technol Dept Comp Sci & Engn Murthal Haryana India

ISBN: (纸本)9781467365406

The latest advancements in the internet and communication technology has made day-to-day life fully dependent on web applications as all the facilities are available at just one click. Network failure, data breaches, computer viruses and other malicious contents based Cyber-attacks have affected the security of web applications and there is always a risk of information stealing or tampering. Cross-site scripting is one of the application layer vulnerabilities that targets web applications by embedding scripts in a web page that will get executed at client side or server-side and the attacker will manipulate the information in desired manner. This paper provides a 'Positive Security Model' based server-side solution to prevent web applications and its users from XSS and provides flexibility to be integrated at any stage of development.

关键词： XSS web application vulnerabilities Cross-site Scripting Security vulnerabilities Whitelist XSS Filter

来源：评论

学校读者我要写书评

暂无评论

Towards Improving web Attack Detection: Highlighting the Significant Factors 5

Towards Improving Web Attack Detection: Highlighting the Sig...

引用

5th International Conference on IT Convergence and Security (ICITCS)

作者： Wazzan, Majda A. Awadh, Mohammad H. King Abdulaziz Univ Deanship Informat Technol Secur Tech Unit Jeddah Saudi Arabia King Abdulaziz Univ Fac Engn Dept Elect & Comp Engn Jeddah Saudi Arabia

ISBN: (纸本)9781467365376

Nowadays, with the rapid development of Internet, the use of web is increasing and the web applications have become a substantial part of people's daily life ( e. g. E-Government, E-Health and E-Learning), as they permit to seamlessly access and manage information. The main security concern for e-business is web application security. web applications have many vulnerabilities such as Injection, Broken Authentication and Session Management, and Cross-site scripting ( XSS). Subsequently, web applications have become targets of hackers, and a lot of cyber attack began to emerge in order to block the services of these web applications ( Denial of Service Attach). Developers are not aware of these vulnerabilities and have no enough time to secure their applications. Therefore, there is a significant need to study and improve attack detection for web applications through determining the most significant factors for detection. To the best of our knowledge, there is not any research that summarizes the influent factors of detection web attacks. In this paper, the author studies state-of-the-art techniques and research related to web attack detection: the author analyses and compares different methods of web attack detections and summarizes the most important factors for web attack detection independent of the type of vulnerabilities. At the end, the author gives recommendation to build a framework for web application protection.

关键词： web application web application vulnerabilities web application intrusion detection big data cloud

来源：评论

学校读者我要写书评

暂无评论

Challenges for Security Typed web Scripting Languages Design

Challenges for Security Typed Web Scripting Languages Design

引用

4th International Symposium on Information Assurance and Security

作者： Hassan, Doaa El-Kassas, Sherif Ziedan, Ibrahim National Telecomm Institute American University in Cairo Faculty of Engineering Zagazig University

ISBN: (纸本)9780769533247

This paper focuses on the different challenges to design a security typed web scripting language. It uses the type system approach on a simple imperative language that captures a subset of the security typed web language constructs to express the security properties that must be held in the language with respect to its formal semantics to prevent insecure information flow in web application system and hence the common web application security vulnerabilities.

关键词： Information flow security web application vulnerabilities web scripting language type system

来源：评论

学校读者我要写书评

暂无评论

Idea: Automatic Security Testing for web applications

Idea: Automatic Security Testing for Web Applications

引用

1st International Symposium on Engineering Secure Software and Systems

作者： Dao, Thanh-Binh Shibayama, Etsuya Tokyo Inst Technol Dept Math & Comp Sci Meguro Ku 2-12-1 O Okayama Tokyo 152 Japan Univ Tokyo Ctr Informat Technol Tokyo Japan

ISBN: (纸本)9783642001987

With the increasingly important role of web applications in online set-vices and business systems, vulnerabilities such as SQL Injection have become serious security threats. Finding these vulnerabilities by manual testing is a time-consuming and error-prone practice that may result in some potential vulnerabilities being missed due to some execution branches being missed. In this paper, we describe an automatic security testing method to find vulnerabilities in web applications;this method utilizes test data generation techniques for improving the code coverage. Our security testing involves automatic attack request generation and automatic security checking using dynamic tainting technique that detects dangerous contents originating from untrustworthy sources in commands and outputs. Automatic constraint-based test data generation helps to create test data for executing program branches that may have remained unexecuted in previous tests. The experimental results indicate that our method is effective to find new vulnerabilities, and test data generation may held to improve the effectiveness of detection.

关键词： web application vulnerabilities security testing dynamic tainting test data generation

来源：评论

学校读者我要写书评

暂无评论

Towards a Taxonomy for Security Threats on the web Ecosystem

Towards a Taxonomy for Security Threats on the Web Ecosystem

引用

IEEE/IFIP Network Operations and Management Symposium (NOMS)

作者： Silva, Carlo Batista, Ricardo Queiroz, Ruy Garcia, Vinicius Silva, Jose Gatti, Daniel Assad, Rodrigo Nascimento, Leandro Brito, Kellyton Miranda, Pericles Univ Fed Pernambuco CIn Recife PE Brazil PUC SP TiDD Sao Paulo SP Brazil Univ Fed Rural Pernambuco DEINFO Recife PE Brazil

ISBN: (纸本)9781509002238

The aim of this paper is to present a taxonomy for security threats on the web ecosystem. We proposes a classification model based on 21 vectors divided into 8 distinct security threats, making use of levels of abstraction and criteria for discrimination which consider propagation and similarity in vulnerabilities. We also propose to estimate the risk factor and impacts on assets, considering data breaches, human aspects and service reliability. In addition, we validate the taxonomic model proposed through the catalogues of attacks facing the public. Thus, it was possible to observe its applicability for most of the attacks which appear before the public.

关键词： web application vulnerabilities web Browser vulnerabilities Social Engineering Taxonomy for Security Threats

来源：评论

学校读者我要写书评

暂无评论

Cross site request forgery: A common web application weakness

Cross site request forgery: A common web application weaknes...

引用

IEEE International Conference on Communication Software and Networks

作者： Siddiqui, Mohd. Shadab Verma, Deepanker UPTU: C.S and e SRMCEM Lucknow India UPTU: CS and e IERT Allahabad India

ISBN: (纸本)9781612844855

Now a days, most of the people use internet for their business and commercial use. This advancement of technology make our daily life better but there are so many risks due to some web applications vulnerabilities. Cross Site Request Forgery (CSRF) attack is one of those common vulnerabilities, but it is less known to web developers as compared to others so it can be found easily in web applications. In CSRF attack an attacker forces victim's web browser to perform an unwanted action on a trusted website without user's interaction in that action. © 2011 IEEE.

关键词： cross site request forgery csrf web application vulnerabilities

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共3页 << < 1 2 3 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：