检索结果-内蒙古大学图书馆

Try-CybSI: An Extensible Cybersecurity Learning and Demonstration Platform 17

Try-CybSI: An Extensible Cybersecurity Learning and Demonstr...

18th Annual Conference on Information Technology Education (SIGITE) / 6th Annual Conference on Research in Information Technology (RIIT)

作者： Kalyanam, Rajesh Yang, Baijian Purdue Univ Res Comp W Lafayette IN 47907 USA Purdue Polytech Inst Dept Comp & Informat Technol W Lafayette IN 47907 USA

ISBN: (纸本)9781450351003

The increasing use of web applications for tasks such as banking, social media, and travel reservations and the frequent news of hacker attacks has brought cybersecurity to the forefront of public discussion. It is vital to ensure that the new generation of programmers is aware of the importance of cybersecurity and the various solutions in existence that address these issues. While college instructional programs incorporate optional courses on cybersecurity, the enrolled students may not receive sufficient hands-on experience or have access to resources that foster writing secure code. The goal of the Try-CybSI project is to provide a web platform that demonstrates various cybersecurity flaws and solutions, while providing users with access to containerized environments to explore and develop secure coding practices. We believe that this platform can be incorporated as a requirement in college instruction and security certification programs. In addition, researchers can contribute new applications to the platform that will enable them to publicize their work while supporting research reproducibility.

关键词： Cybersecurity instruction containerized cloud computing secure coding reproducible research

来源：评论

学校读者我要写书评

暂无评论

Study on the Principle and Defense of Buffer Overflow Attacks

Study on the Principle and Defense of Buffer Overflow Attack...

引用

4th International Conference on Graphic and Image Processing (ICGIP)

作者： Lin, Wang Beijing City Univ Network Informat Ctr Beijing Peoples R China

ISBN: (纸本)9780819495662

Buffer overflow attacks have been the most common form in the network attacks and become a predominant problem in the system and network security area. With specific programs, this paper describes in detail the type of buffer overflow attacks and technical principles, so we have a good understanding of them, and then gives several common preventive measures.

关键词： buffer overflow attacks secure coding bounds checking

来源：评论

学校读者我要写书评

暂无评论

Integrating Hands-on Cybersecurity Exercises into the Curriculum in 2018 18

Integrating Hands-on Cybersecurity Exercises into the Curric...

引用

49th ACM SIGCSE Technical Symposium on Computer Science Education (SIGCSE)

作者： Weiss, Richard Siraj, Ambareen Mache, Jens Taylor, Blair Kozo, Siddharth Chattopadhyay, Ankur Locasto, Michael E. Evergreen State Coll Olympia WA 98505 USA Tennessee Technol Univ Cookeville TN USA Lewis & Clark Coll Portland OR 97219 USA Towson Univ Towson MD USA Univ Wisconsin Green Bay WI 54302 USA SRI Int 333 Ravenswood Ave Menlo Pk CA 94025 USA

ISBN: (纸本)9781450351034

We need to greatly expand the community of faculty teaching cybersecurity using hands-on exercises. The number of security-focused competitions and exercises has increased in recent years so that faculty need to choose those that can best be integrated into their courses. As a community, we can contribute to each other/s projects. We would like to bring together both new and experienced faculty to build community. Our Facebook group (https://***/groups/TeachingCyber/) allows us to work together outside of SIGCSE events, and we are developing a critical mass of users. In the BoF, participants can sign up for the closed group. Participants will discuss answers to specific questions on teaching security. One goal of our BoF is to provide support for new members to learn about resources and get help. These resources include exercises, webinars, and slides. We will share experiences, practices and ongoing efforts, including our own (e.g. Security Injections, the Security Knitting Kit project, and EDURange). The BoF also benefits experienced members, helping them to disseminate their work and reach other faculty with similar interests. As a community we have begun to share exercises and discuss what works and what problems students and instructors have encountered. We will discuss ways to integrate security-related exercises into existing courses. The questions we will ask are, What materials and exercises have you tried? What are your experiences? How do we expand and improve cybersecurity education?

关键词： security laboratory exercises hacker curriculum secure coding cybersecurity

来源：评论

学校读者我要写书评

暂无评论

Extracting Cryptographic Keys *** Applications

引用

Semiconductor Science and Information Devices 2021年第2期3卷 1-11页

作者： Shaun Mc Brearty william Farrelly Kevin Curran Institute of Technology SligoIreland Letterkenny Institute of Technology LetterkennyIreland Ulster University DerryUnited Kingdom

In the absence of specialized encryption hardware,cryptographic operationsmust be performed in main *** such,it is common place for cybercriminals to examine the content of main memory with a view to retrievinghigh-value data in plaintext form and/or the associated decryption *** paper,the author presents a number of simple methods for identifyingand extracting crypfographic keys from memory dumps of softwareapplications that utilize the *** Framework,as well as source-code level countermeasures to protect against *** the EXE file ofan application and a basic knowledge of the cryptographic libraries utilizedin the NET Framework,the author shows how to create a memory dumpof a running application and how to extract cryptographic keys from sameusing WinDBG-without any prior knowledgel of the cryptographic *** the proof-of-concept application utilized as part of thispaper uses an implementation of the DES cipher,it should be noted that thesteps shown can be utilized against all three generations of symmetric andasymmetric ciphers supported within the NET Framework.

关键词： Cryptography Cryptanalysis Memory dump analysis Memory hygiene Key finding attack secure coding .NET framework

来源：评论

学校读者我要写书评

暂无评论

Cybersecurity Challenges in Industry: Measuring the Challenge Solve Time to Inform Future Challenges

引用

INFORMATION 2020年第11期11卷 533页

作者： Espinha Gasiba, Tiago Lechner, Ulrike Pinto-Albuquerque, Maria Siemens AG D-81379 Munich Germany Univ Bundeswehr Munchen Inst Angew Informat D-85579 Neubiberg Germany Inst Univ Lisboa ISCTE IUL ISTAR IUL Dept Ciencias & Tecnol Informacao P-1649026 Lisbon Portugal

Cybersecurity vulnerabilities in industrial control systems have been steadily increasing over the last few years. One possible way to address this issue is through raising the awareness (through education) of software developers, with the intent to increase software quality and reduce the number of vulnerabilities. CyberSecurity Challenges (CSCs) are a novel serious game genre that aims to raise industrial software developers' awareness of secure coding, secure coding guidelines, and secure coding best practices. An important industry-specific requirement to consider in designing these kinds of games is related to the whole event's duration and how much time it takes to solve each challenge individually-the challenge solve time. In this work, we present two different methods to compute the challenge solve time: one method based on data collected from the CSC dashboard and another method based on a challenge heartbeat. The results obtained by both methods are presented;both methods are compared to each other, and the advantages and limitations of each method are discussed. Furthermore, we introduce the notion of a player profile, which is derived from dashboard data. Our results and contributions aim to establish a method to measure the challenge solve time, inform the design of future challenges, and improve coaching during CSC gameplay.

关键词： education training secure coding industry cybersecurity capture-the-flag game analysis cybersecurity challenge challenge solve time

来源：评论

学校读者我要写书评

暂无评论

Interactive e-learning modules for teaching secure: a pilot study (abstract only) 14

Interactive e-learning modules for teaching secure: a pilot ...

引用

Proceedings of the 45th ACM technical symposium on Computer science education

作者： Sagar Raina Blair Taylor Siddharth Kaza Towson University Towson MD USA

ISBN: (纸本)9781450326056

Addressing the crucial need for cybersecurity learning materials, the Security Injections @ Towson project (***/securityinjections) has developed modules for CS0, CS1, CS2 and Computer Literacy courses that target key secure coding concepts including integer overflow, buffer overflow, and input validation. Assessment results indicate that these modules have led to an increase in students' security-awareness and their ability to apply secure coding principles. Each security injection module includes four sections - background, code responsibly (includes methods to avoid security issues), laboratory assignment with a security checklist, and discussion questions. In this study, we are proposing to enhance these modules by incorporating e-learning strategies including lesson segmentation, instant feedback, and self-paced lessons to increase student learning. In addition, we are designing a system with auto-grading functionality and dashboards to encourage adoption by instructors. Segmenting modules into smaller sections and including --gatekeeper questions will facilitate learning and reduce cognitive overload. Providing feedback on incorrect answers encourages students to revisit relevant sections. The goal of this feedback based approach is to improve student learning and content retention. The nature of the enhanced modules allows for self-paced learning which is applicable for online learning environments. We conducted a pilot study using a module in CS0 undergraduate computer science class that included 60 in-class and 9 online students. The results of the pilot study indicated increased attention towards the content and possible improvement in retention of concepts. This project is partially supported by NSF under grant DUE-1241738

关键词： feedback-based learning e-learning CS2 CS1 CS0 security injections secure coding

来源：评论

学校读者我要写书评

暂无评论

Building and Supporting a Community of CS Educators Teaching Cybersecurity in 2017 (Abstract Only) 17

Building and Supporting a Community of CS Educators Teaching...

引用

Proceedings of the 2017 ACM SIGCSE Technical Symposium on Computer Science Education

作者： Richard Weiss Ambareen Siraj Jens Mache Elizabeth Hawthorne Blair Taylor Siddharth Kaza Michael E. Locasto The Evergreen State College Olympia WA USA Tennessee Tech University Cookeville TN USA Lewis and Clark College Portland OR USA Union County College Cranford NJ USA Towson University Towson MD USA SRI International New York NY USA

ISBN: (纸本)9781450346986

We have been teaching cybersecurity using hands-on, interactive exercises that have successfully engaged students. However, in order to meet the increasing demand for security professionals, we need to greatly expand the community of faculty teaching in this area. We would like to bring together new and experienced faculty to do this. Ambareen Siraj has set up a dedicated Facebook group to allow us to work together outside of SIGCSE events, but we need to develop a critical mass of users. During the BoF, we will encourage participants to sign up for the closed group, and we will have an exercise where they ask and answer questions about what they want from this learning community. One benefit of having a learning community is that it will be easier to provide support for new members to learn about resources and get help. These resources include exercises, webinars, and slides. We will share experiences, practices and ongoing efforts, including our own (e.g. Security Injections, the Security Knitting Kit project, and EDURange). The BoF also benefits experienced members, helping them to reach other faculty with similar interests. As a community we have begun to share exercises and discuss what works and what problems students and instructors have encountered. For the last five years, we have been doing that at SIGCSE. We will discuss ways to integrate security-related exercises into existing courses. The questions we will ask are, "What exercises have you tried? What are your experiences? What are you looking for from the community?"

关键词： security laboratory exercises hacker curriculum secure coding cybersecurity

来源：评论

学校读者我要写书评

暂无评论

Scalable and Reusable Attack Aware Software

Scalable and Reusable Attack Aware Software

引用

ASE/IEEE International Conference on BioMedical Computing (BioMedCom)

作者： William Kim Cheolmin Sky Moon Sam Chung Teresa Escrig Barbara Endicott-Popovsky Institute of Technology University of Washington Tacoma Tacoma WA USA Center for Information Assurance and Cybersecurity University of Washington Seattle Seattle WA USA

ISBN: (纸本)9781467354950

Developing and maintaining security software systems can be cost-prohibitive for all but the largest organizations. New requirements of hardware and software quickly outdate current security systems. Modern software architecture technology, such as Spring Framework, and the new deployment paradigm of cloud computing infrastructure services can help with the challenge of maintaining software security systems. Spring Framework allows for better reusability of our code to adapt to different input vulnerabilities and cloud computing helps to deploy quickly and easily. The application of software architectural patterns and cloud computing to the development of attack aware software improves reusability and scalability.

关键词： Attack Aware Web Application Security Security Software secure coding secure Software Design Cloud Computing

来源：评论

学校读者我要写书评

暂无评论

OPTIMAL COMMUNICATION OF REAL TIME DATA ON secure CDMA IP RAN NETWORK

OPTIMAL COMMUNICATION OF REAL TIME DATA ON SECURE CDMA IP RA...

引用

International Conference on Signal Processing, Communication, Power and Embedded System

作者： E. Venkat Reddy K. Srinivasa Rao ECE BIET R.R Dist Hyderabad Telangana-India ECE DRK Institute of Science & Technology R.R Dist Hyderabad Telangana-India

ISBN: (纸本)9781509046218

This paper presents an optimal and secure communication of real time data over a CDMA based IP RAN network. In the process of data transmission, a new coding approach for security enhancement and quality improvement based on spectrum utilization and antenna coding is suggested. The traffic model is developed for image and audio data transmission over a wireless channel, having an interference of AWGN noise with fading effects. An optimal spectrum sensing approach for proper resource allocation is developed, and communicated using the secure WeP protocol. This approach is evaluated for different communication parameters and these are compared with those obtained using conventional modeling of CDMA system. The results obtained using the developed model shows an improvement in the quality of audio and video signals compared to conventional modeling.

关键词： Optimal Communication Image and audio data secure coding CDMA system channel coding

来源：评论

学校读者我要写书评

暂无评论

Designing a serious game: teaching developers to embed privacy into software systems 20

Designing a serious game: teaching developers to embed priva...

引用

Proceedings of the 35th IEEE/ACM International Conference on Automated Software Engineering

作者： Nalin Asanka Gamagedara Arachchilage Mumtaz Abdul Hameed La Trobe University Australia Technovation Consulting & Training PVT

ISBN: (纸本)9781450381284

Software applications continue to challenge user privacy when users interact with them. Privacy practices (e.g. Data Minimisation (DM), Privacy by Design (PbD) or General Data Protection Regulation (GDPR)) and related "privacy engineering" methodologies exist and provide clear instructions for developers to implement privacy into software systems they develop that preserve user privacy. However, those practices and methodologies are not yet a common practice in the software development community. There has been no previous research focused on developing "educational" interventions such as serious games to enhance software developers' coding behaviour. Therefore, this research proposes a game design framework as an educational tool for software developers to improve (secure) coding behaviour, so they can develop privacy-preserving software applications that people can use. The elements of the proposed framework were incorporated into a gaming application scenario that enhances the software developers' coding behaviour through their motivation. The proposed work not only enables the development of privacy-preserving software systems but also helping the software development community to put privacy guidelines and engineering methodologies into practice.

关键词： privacy-preserving systems usable security and privacy secure coding DevSecOps

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：