检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

24 篇 会议
12 篇 期刊文献
5 册 图书
1 篇 学位论文

馆藏范围

42 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

35 篇 工学
- 24 篇 计算机科学与技术...
- 16 篇 软件工程
- 8 篇 电气工程
- 4 篇 信息与通信工程
- 4 篇 控制科学与工程
- 2 篇 网络空间安全
- 1 篇 力学（可授工学、理...
- 1 篇 机械工程
- 1 篇 仪器科学与技术
- 1 篇 交通运输工程
- 1 篇 航空宇航科学与技...
- 1 篇 安全科学与工程
3 篇 管理学
- 3 篇 管理科学与工程(可...

主题

42 篇 integer overflow
6 篇 static analysis
6 篇 buffer overflow
5 篇 instruction
4 篇 software vulnera...
4 篇 mode
3 篇 instructions
3 篇 integer
3 篇 trap
3 篇 operand
3 篇 software securit...
3 篇 software reliabi...
3 篇 symbolic executi...
3 篇 machine learning
2 篇 address
2 篇 tools
2 篇 operand specifie...
2 篇 memory reference
2 篇 decimal string
2 篇 stack

机构

2 篇 univ missouri co...
2 篇 univ baltimore s...
2 篇 korea univ sch c...
1 篇 auburn universit...
1 篇 shan
1 篇 univ fed minas g...
1 篇 东南大学
1 篇 renmin univ chin...
1 篇 tsinghua univ de...
1 篇 univ illinois ur...
1 篇 nanjing univ sta...
1 篇 南京大学
1 篇 peter great st p...
1 篇 hai university o...
1 篇 microsoft res re...
1 篇 simula res lab o...
1 篇 univ sci & techn...
1 篇 univ calif davis...
1 篇 univ calif santa...
1 篇 concordia univ c...

作者

2 篇 lee hyuk
2 篇 raina sagar
2 篇 long fan
2 篇 demidov roman
2 篇 sun hao
2 篇 choi hong jun
2 篇 sidiroglou-dousk...
2 篇 taylor blair
2 篇 kim deokhwan
2 篇 pechenkin alexan...
2 篇 luo yu
2 篇 huang zhen
2 篇 choi jin-young
2 篇 kaza siddharth
2 篇 rinard martin
2 篇 xu dianxiang
2 篇 xu weifeng
1 篇 seladji yassamin...
1 篇 gu dawu
1 篇 quintao pereira ...

语言

40 篇 英文
2 篇 中文

检索条件"主题词=integer overflow"

共 42 条记录，以下是21-30 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Study of Analyzing and Mitigating Vulnerabilities in uC/OS Real-Time Operating System 10

Study of Analyzing and Mitigating Vulnerabilities in uC/OS R...

引用

10th International Conference on Ubiquitous and Future Networks (ICUFN)

作者： Lee, Myeonggeon Choi, Gwangjun Park, Junsang Cho, Seong-je Dankook Univ Dept Comp Sci & Engn Gyeonggi Do 16890 South Korea

ISBN: (纸本)9781538646465

Programmable Logic Controllers (PLCs) have been widely used in real-time and embedded control applications including safety-critical control systems. Due to their ubiquity and network connectivity, PLCs are prone to various security attacks. Buffer overflow attacks, which target software vulnerabilities in operating system (OS) and application software, are the most common security attacks because of their relatively easy exploitation. Therefore, it is important to have knowledge about software vulnerabilities in OSs for PLCs in order to prevent or mitigate them in PLC design and implementation. Many PLCs use Micrium uC/OS as their OS. In this paper, we present an approach to analyzing and mitigating some software two vulnerabilities, buffer overflows and integer overflows in uC/OS. We first check if there are vulnerable functions in uC/OS system. We then propose a technique to prevent or mitigate the vulnerabilities associated with the functions.

关键词： uC/OS Vulnerability Mitigation Buffer overflow integer overflow PLC

来源：评论

学校读者我要写书评

暂无评论

Applying Deep Learning and Vector Representation for Software Vulnerabilities Detection 18

Applying Deep Learning and Vector Representation for Softwar...

引用

11th International Conference on Security of Information and Networks (SIN)

作者： Pechenkin, Alexander Demidov, Roman Peter Great St Petersburg Polytech Univ 29 Politekhn Skaya St St Petersburg Russia

ISBN: (纸本)9781450366083

This paper(1) addresses a problem of vulnerability detection in software represented as assembly code. An extended approach to the vulnerability detection problem is proposed. This work concentrates on improvement of neural network-based approach described in previous works of authors. The authors propose to include the morphology of instructions in vector representations. The bidirectional recurrent neural network is used with access to the execution traces of the program. This has significantly improved the vulnerability detecting accuracy.

关键词： Vulnerability assessment deep learning vector representations neural networks integer overflow

来源：评论

学校读者我要写书评

暂无评论

Security-oriented program transformations to cure integer overflow vulnerabilities

Security-oriented program transformations to cure integer ov...

引用

2012 3rd ACM Conference on Systems, Programming, and Applications: Software for Humanity, SPLASH 2012

作者： Coker, Zack Auburn University United States

来源：评论

学校读者我要写书评

暂无评论

IntEQ: Recognizing Benign integer overflows via Equivalence Checking Across Multiple Precisions 16

IntEQ: Recognizing Benign Integer Overflows via Equivalence ...

引用

38th IEEE/ACM International Conference on Software Engineering (ICSE)

作者： Sun, Hao Zhang, Xiangyu Zheng, Yunhui Zeng, Qingkai Nanjing Univ State Key Lab Novel Software Technol Nanjing Jiangsu Peoples R China Nanjing Univ Dept Comp Sci & Technol Nanjing Jiangsu Peoples R China Purdue Univ Dept Comp Sci W Lafayette IN 47907 USA IBM TJ Watson Res Ctr Yorktown Hts NY USA

ISBN: (纸本)9781450339001

integer overflow (IO) vulnerabilities can be exploited by attackers to compromise computer systems. In the mean time, IOs can be used intentionally by programmers for benign purposes such as hashing and random number generation. Hence, differentiating exploitable and harmful IOs from intentional and benign ones is an important challenge. It allows reducing the number of false positives produced by IO vulnerability detection techniques, helping developers or security analysts to focus on fixing critical IOs without inspecting the numerous false alarms. The difficulty of recognizing benign IOs mainly lies in inferring the intent of programmers from source code. In this paper, we present a novel technique to recognize benign IOs via equivalence checking across multiple precisions. We determine if an IO is benign by comparing the effects of an overflowed integer arithmetic operation in the actual world (with limited precision) and the same operation in the ideal world (with sufficient precision to evade the IO). Specifically, we first extract the data flow path from the overflowed integer arithmetic operation to a security related program point (i.e., sink) and then create a new version of the path using more precise types with sufficient bits to represent integers so that the IO can be avoided. Using theorem proving we check whether these two versions are equivalent, that is, if they yield the same values at the sink under all possible inputs. If so, the IO is benign. We implement a prototype, named IntEQ, based on the GCC compiler and the Z3 solver, and evaluate it using 26 harmful IO vulnerabilities from 20 real-world programs, and 444 benign IOs from SPECINT 2000, SPECINT 2006, and 7 real-world applications. The experimental results show that IntEQ does not misclassify any harmful IO bugs (no false negatives) and recognizes 355 out of 444 (about 79.95%) benign IOs, whereas the state of the art can only recognize 19 benign IOs.

关键词： integer overflow Benign Equivalence Checking Precision

来源：评论

学校读者我要写书评

暂无评论

Automated Code Repair Based on Inferred Specifications

Automated Code Repair Based on Inferred Specifications

引用

IEEE Cybersecurity Development (SecDev)

作者： Klieber, William Snavely, Will Carnegie Mellon Univ Software Engn Inst Pittsburgh PA 15213 USA

ISBN: (纸本)9781509055890

Techniques for automated code repair have the potential for greatly aiding in the development of secure and correct code. There are currently a few major difficulties confronting the development and deployment of tools for automated repair;we examine these and briefly explore possible solutions. To give a flavor of what automated repair might look like, we discuss in detail three types of proposed automated repair: (1) repairing inequality comparisons involving integer overflow to behave the same as if unlimited-bitwidth integers were used, (2) inserting memory bounds checks where needed, using dynamic analysis to infer tightest correct bounds, (3) inserting missing authorization checks in a client-server application based on an inferred access control policy.

关键词： access control buffer overflow dynamic analysis integer overflow repair static analysis

来源：评论

学校读者我要写书评

暂无评论

Using Eye-tracking to Investigate Content Skipping: A Study on Learning Modules in Cybersecurity 14

Using Eye-tracking to Investigate Content Skipping: A Study ...

引用

14th IEEE International Conference on Intelligence and Security Informatics - Cybersecurity and Big Data (IEEE ISI)

作者： Raina, Sagar Bernard, Leon Taylor, Blair Kaza, Siddharth Mt St Mary Coll Div Math & Infonnat Technol Newburgh NY 12550 USA Towson Univ Dept Comp & Informat Sci Towson MD USA

ISBN: (纸本)9781509038657

Students skipping content is common in learning modules that present a large amount of information in a linear format. This may result in lower student engagement and learning. We proposed a theoretical model to reduce content skipping using an e-learning design principle of "segmentation." In this paper, we describe the segmentation principle, conduct a study to examine its effectiveness using eye-tracking and discuss the results. The study uses two eye-tracking metrics - 1) reading scores (computed using reading detection algorithm) and 2) reading depth (number of words looked at in a given area of text), as a measure to compare content skipping between linear and segmented modules. A total of 19 students participated in a randomized control-group treatment-group experimental study. Nine students completed linear modules and ten completed segmented modules. The results indicate significantly higher reading scores and reading depth (p < .05) for the students using segmented modules, implying more reading coverage and less content skipping in segmented modules as compared to the linear modules.

关键词： Cybersecurity education security injections integer overflow eye-tracking cs0 reading content-skipping segmentation

来源：评论

学校读者我要写书评

暂无评论

Dec :: Alpha :: Digital Ec-H1689-10 Alphaarchitecturehandbook 1992