检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

64 篇 会议
22 篇 期刊文献
3 篇 学位论文

馆藏范围

89 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

64 篇 工学
- 56 篇 计算机科学与技术...
- 19 篇 软件工程
- 10 篇 电气工程
- 5 篇 控制科学与工程
- 4 篇 信息与通信工程
- 2 篇 仪器科学与技术
- 2 篇 生物医学工程（可授...
- 1 篇 电子科学与技术（可...
- 1 篇 生物工程
12 篇 教育学
- 12 篇 教育学
5 篇 理学
- 2 篇 数学
- 2 篇 物理学
- 1 篇 系统科学
2 篇 医学
- 1 篇 临床医学
- 1 篇 特种医学
2 篇 管理学
- 2 篇 管理科学与工程(可...
1 篇 法学
- 1 篇 社会学

主题

89 篇 secure coding
19 篇 cybersecurity
16 篇 security
8 篇 security injecti...
8 篇 cs1
7 篇 cs0
7 篇 industry
6 篇 hacker curriculu...
6 篇 cs2
6 篇 training
5 篇 laboratory exerc...
4 篇 serious games
4 篇 education
4 篇 cloud computing
4 篇 web application ...
4 篇 capture-the-flag
3 篇 information syst...
3 篇 java
3 篇 game analysis
3 篇 awareness

机构

10 篇 towson universit...
7 篇 union county col...
4 篇 towson univ tows...
4 篇 siemens ag munic...
4 篇 the evergreen st...
4 篇 lewis and clark ...
3 篇 univ bundeswehr ...
2 篇 sri internationa...
2 篇 univ bundeswehr ...
2 篇 inst univ lisboa...
2 篇 tech univ munich...
1 篇 univ washington ...
1 篇 siemens ag corpo...
1 篇 the university o...
1 篇 stevens inst tec...
1 篇 stephen f. austi...
1 篇 towson univ dept...
1 篇 bits pilani dept...
1 篇 dankook univ dep...
1 篇 shiraz univ sch ...

作者

12 篇 blair taylor
9 篇 siddharth kaza
8 篇 lechner ulrike
6 篇 pinto-albuquerqu...
5 篇 taylor blair
5 篇 richard weiss
5 篇 elizabeth hawtho...
5 篇 jens mache
4 篇 gasiba tiago esp...
3 篇 gasiba tiago
3 篇 michael e. locas...
3 篇 endicott-popovsk...
3 篇 chung sam
3 篇 elizabeth k. haw...
3 篇 chattopadhyay an...
2 篇 zhao tiange
2 篇 albuquerque adri...
2 篇 ambareen siraj
2 篇 leite gleidson s...
2 篇 sagar raina

语言

86 篇 英文
3 篇 其他

检索条件"主题词=secure coding"

共 89 条记录，以下是61-70 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Scaffolded Live coding: A Hybrid Pedagogical Approach for Enhanced Teaching of coding Skills

Scaffolded Live Coding: A Hybrid Pedagogical Approach for En...

引用

IEEE Frontiers in Education Conference (FIE)

作者： Chattopadhyay, Ankur Ryan, Drew Pockrandt, James Northern Kentucky Univ Dept Comp Sci Highland Hts KY 41076 USA Univ Wisconsin Dept Comp Sci Green Bay WI USA

ISBN: (数字)9781665462440

ISBN: (纸本)9781665462440

This Full paper in the Innovative Practice Category describes a novel research study that is based upon an experimental scaffolding of live coding techniques used towards teaching a traditional face to face undergrad computer programming class. It discusses our hybrid pedagogical model, which comprises of a scaffolded collection of our class instructional methods that include fine blend of live coding-based teaching strategies, and traditional lectures. Our combination of live coding styles, as used in this study, consists of the standard live coding technique and our live secure coding demonstrations, which lead to a uniquely blended and integrated live coding approach for teaching coding along with software security concepts. To our knowledge, this is a new research study based upon a hybrid, integrated live coding approach that represents a scaffolding of distinct teaching styles, which combines coding instructions with teaching of secure coding components. We demonstrate an improvised teaching model that enhances the classical live coding pedagogy by adding the live secure coding components, which holistically represent a new variant in a traditional undergrad coding class, for an engaged and enhanced learning experience. Existing literature indicates that there is limited number of prior educational research studies on the usage of a hybrid, non-traditional live secure coding approach blended with the traditional live coding style. Thus, this paper discusses a fresh, nifty teaching strategy that involves new variants of the standard live coding instructional method and forms a hybrid pedagogical model for a more effective and relatable learning of coding skills. We discuss the results of our experimental study in the form of data obtained over a couple of semesters from an upper-level undergrad coding class through learning assessments and collected survey data on learner experiences. We have analyzed the overall gathered learner data to evaluate the performanc

关键词： hybrid teaching pedagogy model live hacking scaffolded live-coding secure coding

来源：评论

学校读者我要写书评

暂无评论

Mining Cryptography Misuse in Online Forums 2

Mining Cryptography Misuse in Online Forums

引用

IEEE International Conference on Software Quality, Reliability and Security Companion (QRS-C)

作者： Braga, Alexandre Dahab, Ricardo State Univ Campinas UNICAMP Inst Comp Campinas SP Brazil

ISBN: (纸本)9781509037131

This work analyzes cryptography misuse by software developers, from their contributions to online forums on cryptography-based security and cryptographic programming. We studied three popular forums: Oracle Java Cryptography, Google Android Developers, and Google Android Security Discussions. We applied a data mining technique, namely Apriori, to elicit association rules among cryptographic bad practices, platform-specific issues, cryptographic programming tasks, and cryptography-related use cases. We found that, with surprisingly high probabilities (90% for Java and 71% for Android), several types of cryptography misuse can be found in the posts, but unfortunately masked by technology-specific issues and programming concerns. We also found that cryptographic bad practices frequently occur in pairs or triples. We related triple associations to use cases and tasks, characterizing worst case scenarios of cryptography misuse. Finally, we observed that hard-to-use architectures confuse developers and contribute to perpetuate recurring errors in cryptographic programming.

关键词： cryptography misuse Apriori algorithm data mining Java cryptographic architecture secure coding

来源：评论

学校读者我要写书评

暂无评论

secure Modules for Undergraduate Software Engineering Courses 48

Secure Modules for Undergraduate Software Engineering Course...

引用

48th IEEE Frontiers in Education Conference (FIE)

作者： Yang, Jeong Lodgher, Akhtar Lee, Young Texas A&M Univ Comp & Cyber Secur San Antonio TX 78224 USA

ISBN: (纸本)9781538611746

Security affects every software component in different types of computing systems. Many vulnerabilities and attacks on software systems are due to security weaknesses in the software itself. During the process of software specification, development, or testing, security issues are either taken into consideration insufficiently or not at all. Such software, due to internal weaknesses is prone to new attacks. By teaching secure software engineering techniques for designing and developing software modules, students would learn systematic secure software development techniques, such as defect detecting and security testing. This paper presents a series of modules that are designed to be integrated into undergraduate software engineering courses from a security perspective. The goal of the modules is to teach the building of robust software security requirements, secure software design and development, and secure software verification through a secure software development lifecycle.

关键词： secure software engineering secure design secure coding security testing security assessment

来源：评论

学校读者我要写书评

暂无评论

Designing a Serious Game: Teaching Developers to Embed Privacy into Software Systems 35

Designing a Serious Game: Teaching Developers to Embed Priva...

引用

35th IEEE/ACM International Conference on Automated Software Engineering (ASE)

作者： Arachchilage, Nalin Asanka Gamagedara Hameed, Mumtaz Abdul La Trobe Univ Bundoora Vic Australia Technovat Consulting & Amp Training PVT Male Maldives

ISBN: (纸本)9781450381284

Software applications continue to challenge user privacy when users interact with them. Privacy practices (e.g. Data Minimisation (DM), Privacy by Design (PbD) or General Data Protection Regulation (GDPR)) and related "privacy engineering" methodologies exist and provide clear instructions for developers to implement privacy into software systems they develop that preserve user privacy. However, those practices and methodologies are not yet a common practice in the software development community. There has been no previous research focused on developing "educational" interventions such as serious games to enhance software developers' coding behaviour. Therefore, this research proposes a game design framework as an educational tool for software developers to improve (secure) coding behaviour, so they can develop privacy-preserving software applications that people can use. The elements of the proposed framework were incorporated into a gaming application scenario that enhances the software developers' coding behaviour through their motivation. The proposed work not only enables the development of privacy-preserving software systems but also helping the software development community to put privacy guidelines and engineering methodologies into practice.

关键词： secure coding DevSecOps Privacy-preserving Systems Usable Security and Privacy

来源：评论

学校读者我要写书评

暂无评论

A Study on the Evaluation System through Software Weakness Analysis 11

A Study on the Evaluation System through Software Weakness A...

引用

Joint 11th International Conference on Soft Computing and Intelligent Systems and 21st International Symposium on Advanced Intelligent Systems (SCIS-ISIS)

作者： Kim, Kyung-won Chang, Seokmin Park, Kyubin Son, Yunsik Dongguk Univ Dept Comp Sci & Engn Seoul South Korea

ISBN: (纸本)9781728197326

Recently, Due to the rapid development of IT technology the software in the social infrastructure is increasing. However, cyber attacks that exploit software vulnerabilities are also increasing. This paper designed and proposed the evaluation system considering in various programming languages and environments for cyber security. In addition, the effectiveness of research was proved by analyzing the results of selecting and evaluating weaknesses.

关键词： Weakness Vulnerability Evaluation System secure coding

来源：评论

学校读者我要写书评

暂无评论

VaultBox: Enhancing the Security and Effectiveness of Security Analytics 5th

VaultBox: Enhancing the Security and Effectiveness of Securi...

引用

5th International Conference on Science of Cyber Security (SciSec)

作者： Trivedi, Devharsh Triandopoulos, Nikos Stevens Inst Technol Hoboken NJ 07030 USA

ISBN: (纸本)9783031459320;9783031459337

Security tools like Firewalls, IDS, IPS, SIEM, EDR, and NDR effectively detect and block threats. However, these tools depend on the system, application, and event logs. Logs are the key ingredient for various purposes, including troubleshooting performance issues, satisfying compliance mandates, and monitoring and improving security. In addition, logs from multiple machines are collected and fed to the Security Information and Event Management (SIEM) system for further security analysis. Therefore, a SIEM system's efficiency and effectiveness depend heavily on the quality and quantity of logs provided. Unfortunately, logs are often targeted brutally and tampered with after a successful intrusion to cover the attack's traces. Thus it becomes critical to protect the confidentiality, integrity, availability, and authenticity of logs at rest or transit. This paper proposes a novel scheme to prevent logs from tampering, detect any tampering, and recuperate logs if lost or corrupt. Our scheme is forward-secure, replicated, randomized, and rate-less, aiming to help securely store and transmit logs to SIEM.

关键词： Security analytics Rateless encoding secure logging SIEM security LT codes secure coding

来源：评论

学校读者我要写书评

暂无评论

Minimizing Cognitive Overload in Cybersecurity Learning Materials: An Experimental Study Using Eye-Tracking 14th

Minimizing Cognitive Overload in Cybersecurity Learning Mate...

引用

14th IFIP WG 11.8 World Conference on Information Security Education (WISE)

作者： Bernard, Leon Raina, Sagar Taylor, Blair Kaza, Siddharth Towson Univ Dept Comp & Informat Sci Baltimore MD 21252 USA Mt St Mary Coll Div Maths & Informat Technol Newburgh NY USA

ISBN: (纸本)9783030808655;9783030808648

Cybersecurity education is critical in addressing the global cyber crisis. However, cybersecurity is inherently complex and teaching cyber can lead to cognitive overload among students. Cognitive load includes: 1) intrinsic load (IL-due to inherent difficulty of the topic), 2) extraneous (EL- due to presentation of material), and 3) germane (GL- due to extra effort put in for learning). The challenge is to minimize IL and EL and maximize GL. We propose a model to develop cybersecurity learning materials that incorporate both the Bloom's taxonomy cognitive framework and the design principles of content segmentation and interactivity. We conducted a randomized control/treatment group study to test the proposed model by measuring cognitive load using two eye-tracking metrics (fixation duration and pupil size) between two cybersecurity learning modalities - 1) segmented and interactive modules, and 2) traditional-without segmentation and interactivity (control). Nineteen computer science majors in a large comprehensive university participated in the study and completed a learning module focused on integer overflow in a popular programming language. Results indicate that students in the treatment group had significantly less IL (p < 0.05), EL (p < 0.05), and GL (p < 0.05) as compared to the control group. The results are promising, and we plan to further the work by focusing on increasing the GL. This has interesting potential in designing learning materials in cybersecurity and other computing areas.

关键词： Bloom's taxonomy Cognitive overload Cybersecurity Eye tracking Pupillometry secure coding Curriculum

来源：评论

学校读者我要写书评

暂无评论

Support for secure Code Execution in Unix-Like Operating Systems 12

Support for Secure Code Execution in Unix-Like Operating Sys...

引用

12th International Conference on Cyber Warfare and Security (ICCWS)

作者： Bhuse, Vijay Nandigam, Jagadeesh Grand Valley State Univ Sch Comp & Informat Syst Allendale MI 49401 USA

ISBN: (纸本)9781911218265

FreeBSD and OpenBSD are BSD-based Unix-like operating systems. OpenBSD is one of the most secure operating systems. We review various secure coding technologies and processes that were invented and implemented by the OpenBSD. We also compare different types of vulnerabilities encountered in OpenBSD and FreeBSD systems, over the years.

关键词： secure coding OpenBSD Write XOR Executable ASLR Stackgap buffer overflow

来源：评论

学校读者我要写书评

暂无评论

The Importance of Safe coding Practices and Possible Impacts on the Lack of Their Application 8th

The Importance of Safe Coding Practices and Possible Impacts...

引用

8th Computer Science On-Line Conference (CSOC)

作者： Leite, Gleidson Sobreira Albuquerque, Adriano Bessa Univ Fortaleza Fortaleza CE Brazil

ISBN: (纸本)9783030198138;9783030198121

A significant change in the way organizations and companies use software has been brought by the evolution of the Internet over the time, resulting in an increasing presence of Information Systems in Web environments and, consequently, an increase in security vulnerabilities and threats. In this context, secure application development has become a crucial component for information systems in the market. This paper aims to contribute to a greater awareness of the importance of secure software coding by exposing possible impacts examples resulting from the lack of safe coding practices, as well as to present some existing recommendations from specialized agencies to avoid or treat occurrences of exploitation of vulnerabilities by malicious agents.

关键词： secure coding Information security Information systems Web applications vulnerabilities

来源：评论

学校读者我要写书评

暂无评论

Securing Web Applications: Web Application Flow Whitelisting to Improve Security

Securing Web Applications: Web Application Flow Whitelisting...

引用

作者： Alabdulrazzaq, Haneen Khalid Auburn University

学位级别：Ph.D., Doctor of Philosophy

The explosion in the availability of data fueled by mobile devices has pushed security to the forefront. As of 2016, Internet users worldwide are estimated at a staggering 3.47 billion. Such large numbers of users dictate the importance of online presence for organizations across different industries, and with that come security considerations for web-facing applications. Many web development frameworks offer common security features, such as authentication and session management out of the box (e.g. Rails, Django, and CakePHP). However, developers must still direct their efforts toward addressing application specific security issues. In this dissertation we introduce a novel web application security enhancing practice, called web application flow whitelisting. It targets two of OWASP's top ten web vulnerabilities; A4: Insecure Direct Object References and A7: Missing Function Level Access Control. Initially, we create a workflow based on intended behavior. From the workflow, we define a whitelist as a tuple , where C is a set of all components within the system boundary, D is a set containing conditions for transitions that occur within an application, W is a set of all ordered pairs representing allowed transitions, and finally S is a matrix containing safe components to redirect to in case a transition fails. Validation of web application flow whitelisting was carried out in two phases. For phase one, a static whitelist was created and applied to a total of 15 applications developed by students in course COMP4970: Web Development with Django at Auburn University. For phase two, a static whitelist was created and applied on an existing open source Django application in production use. Application specific vulnerabilities were found and quantified through manual testing methods. Our results show that by conforming to a whitelist of flow, all unintended application behavior is eliminated while intended behavior is preserved.

关键词： secure Software Development Web Application Security secure coding Insecure Direct Object References Missing Function Level Access Control Whitelisting

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共9页 << < 1 2 3 4 5 6 7 8 9 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：