检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

64 篇 会议
22 篇 期刊文献
3 篇 学位论文

馆藏范围

89 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

64 篇 工学
- 56 篇 计算机科学与技术...
- 19 篇 软件工程
- 10 篇 电气工程
- 5 篇 控制科学与工程
- 4 篇 信息与通信工程
- 2 篇 仪器科学与技术
- 2 篇 生物医学工程（可授...
- 1 篇 电子科学与技术（可...
- 1 篇 生物工程
12 篇 教育学
- 12 篇 教育学
5 篇 理学
- 2 篇 数学
- 2 篇 物理学
- 1 篇 系统科学
2 篇 医学
- 1 篇 临床医学
- 1 篇 特种医学
2 篇 管理学
- 2 篇 管理科学与工程(可...
1 篇 法学
- 1 篇 社会学

主题

89 篇 secure coding
19 篇 cybersecurity
16 篇 security
8 篇 security injecti...
8 篇 cs1
7 篇 cs0
7 篇 industry
6 篇 hacker curriculu...
6 篇 cs2
6 篇 training
5 篇 laboratory exerc...
4 篇 serious games
4 篇 education
4 篇 cloud computing
4 篇 web application ...
4 篇 capture-the-flag
3 篇 information syst...
3 篇 java
3 篇 game analysis
3 篇 awareness

机构

10 篇 towson universit...
7 篇 union county col...
4 篇 towson univ tows...
4 篇 siemens ag munic...
4 篇 the evergreen st...
4 篇 lewis and clark ...
3 篇 univ bundeswehr ...
2 篇 sri internationa...
2 篇 univ bundeswehr ...
2 篇 inst univ lisboa...
2 篇 tech univ munich...
1 篇 univ washington ...
1 篇 siemens ag corpo...
1 篇 the university o...
1 篇 stevens inst tec...
1 篇 stephen f. austi...
1 篇 towson univ dept...
1 篇 bits pilani dept...
1 篇 dankook univ dep...
1 篇 shiraz univ sch ...

作者

12 篇 blair taylor
9 篇 siddharth kaza
8 篇 lechner ulrike
6 篇 pinto-albuquerqu...
5 篇 taylor blair
5 篇 richard weiss
5 篇 elizabeth hawtho...
5 篇 jens mache
4 篇 gasiba tiago esp...
3 篇 gasiba tiago
3 篇 michael e. locas...
3 篇 endicott-popovsk...
3 篇 chung sam
3 篇 elizabeth k. haw...
3 篇 chattopadhyay an...
2 篇 zhao tiange
2 篇 albuquerque adri...
2 篇 ambareen siraj
2 篇 leite gleidson s...
2 篇 sagar raina

语言

86 篇 英文
3 篇 其他

检索条件"主题词=secure coding"

共 89 条记录，以下是11-20 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Information Technology Security Evaluation Using CERT C secure coding Standard

Information Technology Security Evaluation Using CERT C Secu...

引用

3rd International Conference on Future Generation Information Technology

作者： Lee, Taeseung Lee, Kwangwoo Won, Dongho Park, Namje Jeju Natl Univ Teachers Coll Dept Comp Educ Cheju South Korea Sungkyunkwan Univ Sch Informat & Commun Engn Informat Secur Grp Suwon 440746 Gyeonggi Do South Korea

ISBN: (纸本)9783642271410

IT products developed without due consideration of security issues have caused many security accidents over the last ten years. As a result, the importance of security in software development is increasing. It is important to ensure that no known vulnerabilities remain in the design, development, and test stage, in order to develop secure IT products. Even when an IT product is designed securely, various security vulnerabilities can occur, such as buffer overflow, if the general coding technique is used at the development stage. Therefore, the introduction of secure coding rules becomes most critical in developing a robust information security product. This paper proposes a method of applying a secure coding standard in the CC evaluation process. The proposed method is expected to contribute to improving the security of IT products in the CC evaluation process.

关键词： Common criteria secure coding CERT C secure coding Standard Evaluation

来源：评论

学校读者我要写书评

暂无评论

Awareness of secure coding Guidelines in the Industry - A first data analysis 19

Awareness of Secure Coding Guidelines in the Industry - A fi...

引用

19th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (IEEE TrustCom)

作者： Gasiba, Tiago Espinha Lechner, Ulrike Pinto-Albuquerque, Maria Fernandez, Daniel Mendez Siemens AG Munich Germany Univ Bundeswehr Munchen Munich Germany Inst Univ Lisboa ISCTE IUL ISTAR IUL Lisbon Portugal Blekinge Inst Technol Karlskrona Sweden

ISBN: (纸本)9781665403924

Software needs to be secure, in particular, when deployed to critical infrastructures. secure coding guidelines capture practices in industrial software engineering to ensure the security of code. This study aims to assess the level of awareness of secure coding in industrial software engineering, the skills of software developers to spot weaknesses in software code, avoid them, and the organizational support to adhere to coding guidelines. The approach draws on well-established theories of policy compliance, neutralization theory, and security-related stress and the authors' many years of experience in industrial software engineering and on lessons identified from training secure coding in the industry. The paper presents the questionnaire design for the online survey and the first analysis of data from the pilot study.

关键词： Security secure coding Software Development Best Practices Security Awareness Industry

来源：评论

学校读者我要写书评

暂无评论

Teaching secure coding-Report from Summit on Education in secure Software 12

Teaching Secure Coding-Report from Summit on Education in Se...

引用

43rd ACM Technical Symposium on Computer Science Education (SIGCSE 2012)

作者： Taylor, Blair Bishop, Matt Burley, Diana Cooper, Steve Dodge, Ron Seacord, Robert Towson Univ Towson MD USA

ISBN: (纸本)9781450310987

Software is critical to life in the 21st century. It drives financial, medical, and government computer systems as well as systems that provide critical infrastructures in areas such as transportation, energy, networking, and telecommunications. As the number and severity of attacks that exploit software vulnerabilities increase, writing reliable, robust, and secure programs will substantially improve the ability of systems and infrastructure to resist such attacks. Education plays a critical role in addressing cybersecurity challenges of the future, such as designing curricula that integrate principles and practices of secure programming into educational programs. To help guide this process, the National Science Foundation Directorates of Computer and Information Science and Engineering (CISE) and Education and Human Resources (EHR) jointly sponsored the Summit on Education in secure Software (SESS), held in Washington, DC in October, 2010. The goal of this session is to share some of the key findings and challenges identified by the summit and to actively engage the community in the discussions. Each of the speakers participated in the summit and brings a unique viewpoint to the session.

关键词： Reliability Security secure coding

来源：评论

学校读者我要写书评

暂无评论

Design of secure coding Challenges for Cybersecurity Education in the Industry 13th

Design of Secure Coding Challenges for Cybersecurity Educati...

引用

13th International Conference on the Quality of Information and Communications Technology (QUATIC)

作者： Gasiba, Tiago Lechner, Ulrike Pinto-Albuquerque, Maria Zouitni, Alae Siemens AG Munich Germany Univ Bundeswehr Munchen Munich Germany ISTAR IUL Inst Univ Lisboa ISCTE IUL Lisbon Portugal Univ Passau Passau Germany

ISBN: (纸本)9783030587925;9783030587932

According to a recent survey with more than 4000 software developers, "less than half of developers can spot security holes". As a result, software products present a low-security quality expressed by vulnerabilities that can be exploited by cyber-criminals. This lack of quality and security is particularly dangerous if the software which contains the vulnerabilities is deployed in critical infrastructures. Serious games, and in particular, Capture-the-Flag (CTF) events, have shown promising results in improving secure coding awareness of software developers in the industry. The challenges in the CTF event, to be useful, must be adequately designed to address the target group. This paper presents novel contributions by investigating which challenge types are adequate to improve software developers' ability to write secure code in an industrial context. We propose 1) six challenge types usable in the industry context, and 2) a structure for the CTF challenges. Our investigation also presents results on 3) how to include hints and penalties into the cyber-security challenges. We evaluated our work through a survey with security experts. While our results show that "traditional" challenge types seem to be adequate, they also reveal a new class of challenges based on code entry and interaction with an automated coach.

关键词： Education Teaching Training secure coding Industry Cybersecurity Capture-the-flag Game analysis Game design Cybersecurity challenge

来源：评论

学校读者我要写书评

暂无评论

Supporting secure coding for Erlang 24

Supporting Secure Coding for Erlang

引用

39th Annual ACM Symposium on Applied Computing (SAC)

作者： Toth, Melinda Bozo, Istvan Eotvos Lorand Univ Fac Informat Budapest Hungary

ISBN: (纸本)9798400702433

Software developer/operator companies have to face growing cyber threats. secure coding is a development process resulting in software products that resist cyber-attacks. Although several security standards and guidelines exist to help developers create secure software, tool-supported identification of vulnerability issues is also needed. Static analyser tools can help to find security issues in the code. However, those work usually in a language-dependent way. In this paper, we show secure coding issues for the programming language Erlang and demonstrate a tool, RefactorErl, that supports the identification of these vulnerabilities in Erlang systems.

关键词： secure coding security checkers Erlang security static analysis RefactorErl

来源：评论

学校读者我要写书评

暂无评论

Raising secure coding Awareness for Software Developers in the Industry 27

Raising Secure Coding Awareness for Software Developers in t...

引用

IEEE 27th International Requirements Engineering Conference (REW)

作者： Gasiba, Tiago Lechner, Ulrike Siemens AG Munich Germany Univ Bundeswehr Munchen Munich Germany

ISBN: (纸本)9781728151656

Many industrial IT security standards and policies mandate the usage of a secure coding methodology in the software development process. This implies two different aspects: first, secure coding must be based on a set of secure coding guidelines, and second software developers must be aware of these secure coding practices. On the one side, secure coding guidelines seems a bit like a black-art: while there exist abstract guidelines that are widely accepted, low-level secure coding guidelines for different programming languages are scarce. On the other side, once a set of secure coding guidelines is chosen, a good methodology is needed to make them known by the people which should be using them, i.e. software developers. Motivated both by the secure coding requirements from industry standards and also by the mandate to train staff on IT security by the global industry initiative "Charter of Trust", this paper presents an overview of important research questions on how to choose secure coding guidelines and on how to raise software developer awareness for secure coding using serious games.

关键词： security policy secure coding guidelines IT security industry standard information systems industry serious games capture-the-flag

来源：评论

学校读者我要写书评

暂无评论

Measuring secure coding Practice and Culture: A Finger Pointing at the Moon is not the Moon 23

Measuring Secure Coding Practice and Culture: A Finger Point...

引用

45th IEEE/ACM International Conference on Software Engineering (ICSE)

作者： Ryan, Ita Roedig, Utz Stol, Klaas-Jan Univ Coll Cork Sch Comp Sci & IT Adv Ctr Res Trainin Cork Ireland Univ Coll Cork Sch Comp Sci & IT Connect Res Ctr Cork Ireland Univ Coll Cork Sch Comp Sci & IT Lero SFI Res Ctr Software Cork Ireland

ISBN: (纸本)9781665457019

Software security research has a core problem: it is impossible to prove the security of complex software. A low number of known defects may simply indicate that the software has not been attacked yet, or that successful attacks have not been detected. A high defect count may be the result of white-hat hacker targeting, or of a successful bug bounty program which prevented insecurities from persisting in the wild. This makes it difficult to measure the security of non-trivial software. Researchers instead usually measure effort directed towards ensuring software security. However, different researchers use their own tailored measures, usually devised from industry secure coding guidelines. Not only is there no agreed way to measure effort, there is also no agreement on what effort entails. Qualitative studies emphasise the importance of security culture in an organisation. Where software security practices are introduced solely to ensure compliance with legislative or industry standards, a box-ticking attitude to security may result. The security culture may be weak or non-existent, making it likely that precautions not explicitly mentioned in the standards will be missed. Thus, researchers need both a way to assess software security practice and a way to measure software security culture. To assess security practice, we converted the empirically-established 12 most common software security activities into questions. To assess security culture, we devised a number of questions grounded in prior literature. We ran a secure development survey with both sets of questions, obtaining organic responses from 1,100 software coders in 59 countries. We used proven common activities to assess security practice, and made a first attempt to quantitatively assess aspects of security culture in the broad developer population. Our results show that some coders still work in environments where there is little to no attempt to ensure code security. Security practice and culture do no

关键词： Security secure coding security compliance

来源：评论

学校读者我要写书评

暂无评论

Towards Developer-Centered secure coding Training 38

Towards Developer-Centered Secure Coding Training

引用

38th IEEE/ACM International Conference on Automated Software Engineering (ASE)

作者： Pikulin, Vladislav Kubo, Daiki Nissanka, Kaveesha Bandara, Sadeeptha Shamsiemon, Muhammad A. Yasmin, Arissha Jayatilaka, Asangi Madugalla, Anuradha Kanij, Tanjila Monash Univ Depatment Engn Kuala Lumpur Malaysia Univ Adelaide CREST Adelaide SA Australia Monash Univ Dept Software Syst & Cybersecur Melbourne Vic Australia

ISBN: (纸本)9798350330328

Software security continues to be a matter of concern for both end-users and developers, with the cost of potential lapses expected to become larger as software plays a larger role in society. Despite investments in secure coding training programmes, organisations are not achieving the expected success rate. An often overlooked reason for this among many others is that current training programmes are not tailored to consider the diversity among software developers as it relates to human aspects. In this research, data was gathered from software developers of various backgrounds on their perceptions of secure coding training, their expectations from and challenges with such a training program. The findings suggest that developers with personality traits of agreeableness tend to ignore secure coding standards. Additionally, developers with higher work experience tend to demand storage management, responsible use of privileges, security and privacy laws and testing topics to be included in the secure coding training. Furthermore, in terms of training structure, developers with higher openness tend to demand hands-on training to be included. The study's findings seek to inform future researchers and organisations on factors to consider when designing adaptive secure coding programs that would address the needs of developers from different backgrounds.

关键词： secure coding Programming Cybersecurity Training Developers Diversity Human Aspects

来源：评论

学校读者我要写书评

暂无评论

Combining Design by Contract and Programming Logic to Enhance secure coding Assistant System

Combining Design by Contract and Programming Logic to Enhanc...

引用

作者： Liang, Wenhui California State University Sacramento

学位级别：M.Sc., Master of Science

Code security or robustness has been an important topic in the recent decades for the research and software production communities. Defects in code can cause vulnerabilities in the program or system because it can be exploited by attackers. This project has enhanced secure coding Assistant system with Design by Contract and Programming Logic. The enhanced system can help programmers detect, locate, and eliminate code errors while coding. Java programmers using this enhanced system are suggested to provide their design contracts to three program structures (i.e., methods, if-then-else statements, and while-loop statements). Programmer-defined design contracts can be automatically generated and checked at the dynamic time of their program execution. Based on the inference rules of if-then-else statements and while-loop statements in the programming logic, the system can automatically generate sub-design contracts using programmer-defined design contracts. The system-generated sub-design contracts can also be automatically checked during run time to further help programmers detect and locate code errors. Furthermore, the weakest pre-conditions of certain sequences of assignments can be automatically generated from the post-conditions of the sequences based on the inference rule of the sequence statements and the assignment axiom in the programming logic. This helps programmers statically analyze the correctness of the relevant programmer-defined design contracts. With the enhancement presented, secure coding Assistant can help programmers for early detection of violations of secure coding rules and defects in Java code at the same time.

关键词： Software security Design by contract Programming logic secure coding

来源：评论

学校读者我要写书评

暂无评论

Key Generation and secure coding in Communications and Private Learning

Key Generation and Secure Coding in Communications and Priva...

引用

作者： Aldaghri, Nasser University of Michigan

学位级别：Ph.D., Doctor of Philosophy

The increasingly distributed nature of many current and future technologies has introduced many challenges for devices designed for such settings. Devices operating in such environments, such as Internet-of-Things (IoT), medical devices, connected vehicles, etc., typically have limited computational power and rely on batteries to operate. Therefore, efficiency is a paramount requirement for any algorithm designed to be implemented on these devices. Furthermore, these devices typically generate and collect huge amounts of extremely sensitive and personal data, such as health-related data, behavior-related data, etc. As a result, there is a need for security and privacy protections to guard against various attacks. Additionally, since these devices are typically resource-constrained, any algorithm or protocol needs to be efficient to enable its implementation on such devices. Efficient security and privacy solutions are essential to cope with, as well as enable, high deployment rate of such devices for various sensitive applications. In this dissertation, efficient solutions for protecting the security and privacy of data generated by such devices are explored. Low-complexity protocols for generating secret keys in static environments, along with a formulation of threshold-secure coding with a shared key and corresponding coding schemes are presented. Additionally, algorithms for coded machine unlearning for regression problems are presented, as well as a new setup and algorithm for federated learning with opt-out differential privacy are presented and evaluated.

关键词： Security Privacy Internet-of-Things Key generation Threshold security Federated learning secure coding

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共9页 << < 1 2 3 4 5 6 7 8 9 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：