检索结果-内蒙古大学图书馆

International Conference on Digital Manufacturing and Automation (ICDMA)

作者： Zhao Zhang Qiao-Yan Wen Wen Tang State Key Laboratory of Network and Switching Technology Beijing University of Posts and Telecommunications Beijing China IT Security Cooperate Technology Siemens Limited China Beijing China

Protocol state machine is very essential in network security and implementation fields, however, improper management of software evolution, compounded by changing and imprecise requirements, along with "short time to market" phenomenon, often leads to a lack of up-to-date specifications and they are often characterized by bugs, anomalies and even threads. How to mine the accurate protocol state machine under investigation is still an open problem. We address this problem by using an interactive grammar inference technique as it could generate queries to the protocol implementation in learning process. This paper describes: (1) a flexible method to construct and parse real packet according to the packet format, (2) how to generate packet queries to explore protocol state machine space, (3) applies the QSM technology to mine protocol state machine from network traces. To access the usefulness of our approach, several experiments for different protocols are performed and we could get more objective and accurate results compared with other protocol specification mining methods.

关键词： Protocols Space exploration security Software Inference algorithms Data mining Educational institutions

来源：评论

学校读者我要写书评

暂无评论

Threshold Ring Signature Scheme Based on TPM

引用

China Communications 2012年第1期9卷 80-85页

作者： Gong Bei Jiang Wei Lin Li Li Yu Zhang Xing College of Computer Science Beijing University of Technology Beijing 100124 P. R. China Institute of Electronic Technology Information Engineering University Zhengzhou 450004 P. R. China State Key Laboratory of Information Security Institute of Sottware Chinese Academy of Sciences Beijing Beijing 100049 P. R. China Key Laboratory of Information and Network Security 3rd Research Institute Ministry of Public Security Shanghai 201204 P. R. China

The conventional ring signature schemes cannot address the scenario where the rank of members of the ring needs to be distinguished, for example, in electronically commerce application. To solve this problem, we presented a Trusted Platform Module （TPM）-based threshold ring signature schen. Employing a reliable secret Share Distribution Center （SDC）, the proposed approach can authenticate the TPM-based identity rank of members of the ring but not track a specific member＇s identity. A subset including t members with the same identity rank is built. With the signing cooperation of t members of the subset, the ring signature based on Chinese remainder theorem is generated. We proved the anonymity and unforgeability of the proposed scheme and compared it with the threshold ring signature based on Lagrange interpolation polynomial. Our scheme is relatively simpler to calculate.

关键词： ring signature TPM threshold Chinese remainder theorem rank

来源：评论

学校读者我要写书评

暂无评论

A secure message delivery scheme with path tracking for delay tolerant networks

A secure message delivery scheme with path tracking for dela...

引用

2012 1st IEEE International Conference on Communications in China, ICCC 2012

作者： Jia, Zhongtian Raffay, Muhammad Ali Li, Lixiang Lin, Xiaodong Yang, Yixian Shandong Provincial Key Laboratory of Network Based Intelligent Computing University of Jinan Jinan 250022 China Information Security Center Beijing University of Posts and Telecommunications Beijing 100876 China Faculty of Business and Information Technology University of Ontario Institute of Technology Oshawa ON L1H 7K4 Canada

ISBN: (纸本)9781467328159

In delay tolerant networks (DTNs), message delivery is operated in an opportunistic way through store-carry and forward relaying, and every DTN node is in anticipation of cooperation for data forwarding from others. Unfortunately, there always exist some selfish nodes that are reluctant to contribute to this cooperative data forwarding procedure so as to save their valuable storage buffer, limited computation power and precious energy. In order to stimulate nodes' willingness to participate in data forwarding, a number of incentive schemes have been proposed recently. However, most existing incentive schemes simply ignore efforts of nodes involved in message delivery if messages delivered fail to reach their destinations. Due to the nature of DTN, such as intermittent connectivity, it is not unusual to have unreliable message delivery, which results in unrewarded or wasted efforts for participating nodes and may discourage them from participating in future data forwarding. Therefore, it is crucial to recognize contribution of every node involved in a data forwarding procedure even the message it helps to forward doesn't successfully reach its destination. However, how to track all delivery paths so as to give every intermediate node some incentive for their cooperative efforts of data forwarding is still an open research problem. To address this problem, we propose a secure message forwarding scheme with path tracking. The proposed method is end-to-end secure with data source and identity authentication. In addition, it can thwart some well known attacks including edge inserting attack, sibling inserting attack and free riding attack. © 2012 IEEE.

关键词： Delay tolerant networks

来源：评论

学校读者我要写书评

暂无评论

Trust Model Based on Structured protection for High Level security System

引用

China Communications 2012年第11期9卷 70-77页

作者： Liao Jianhua Zhao Yong Zhan Jing School of Electronics Engineering and Computer Science Peking University Beijing 100871 P. R. China School of Computer Science and Technology Beijing University of Technology Beijing 100124 P. R. China Key Laboratory of Network Security and Cryptology Fujian Normal University Fuzhou 350007 P. R. China State Key Laboratory of Information Security Institute of So ware Chinese Academy of Sciences Beijing 100049 P. R. China

In order to ensure the security of information systems, it's essential to make sure that system behaviors are trusted. By analyzing threats that exist in executing procedures, a trust model based on structured protection is proposed. We consider that functional components, system actions and message flows between components are three key factors of information systems. Structured protection requirements on components, connections and action parameters are also provided. Four trusted properties of the model are deducted through formal analysis, and trusted system behavior is defined based on these properties. Furthermore, decision theorem of trusted system behavior is proved. The developed prototype system indicates the model is practical. It is a general theory model built on logic deduction and independent on specific environment and the behaviors of the system designed and implemented following the model are trusted.

关键词： trusted computing security assurance structured protection

来源：评论

学校读者我要写书评

暂无评论

High Capacity Steganographic Method Based upon Quantization Error of JPEG

High Capacity Steganographic Method Based upon Quantization ...

引用

2012年计算机应用与系统建模国际会议

作者： Dong Xiuze Liu Shu Zhang Ru Niu Xinxin Wang Lifeng Information Security Center Beijing University of Posts and Telecommunications Electronic and Information Engineering Department Beijing Electronic Science and Technology Institute Key Laboratory of Information Network Security Ministry of Public Security Computer Science and Technology Department Beijing Electronic Science and Technology Institute

Quantizing Error during the process of JPEG compression is analyzed, and a new information hiding algorithm is proposed based on Quantizing Error of JPEG image. Experimental results show that the proposed algorithm can provide a high capacity information hiding and keep the visual quality well, also the produced stego-image are almost identical to the original cover images.

关键词： Quantization Error, Steganography, Cover-Image, Stego-Image

来源：评论

学校读者我要写书评

暂无评论

Alliance-Authentication Protocol in Clouds Computing Environment

引用

China Communications 2012年第7期9卷 42-54页

作者： Zhang Qikun Li Yuanzhang Song Danjie Tan Yuan School of Computer Science and Technology Beijing Institute of Technology Beijing 100081 P. R. China Network and Data Security Key Laboratory of Sichuan Province University of Electronic Science and Technology ofChina Chengdu 610054 P. R. China School of Computer Beijing University of Posts and Telecommunications Beijing 100876 P. R. China

security has been regarded as one of the hardest problems in the development of cloud computing. This paper proposes an AllianceAuthentication protocol among Hybrid Clouds that include multiple private clouds and/or public clouds. Mu tual authentication protocol among entities in the IntraCloud and InterCloud is proposed. Blind signature and bilinear mapping of automorphism groups are adopted to achieve the InterCloud Alli anceAuthentication, which overcome the complexi ty of certificate transmission and the problem of communication bottlenecks that happen in tradi tional certificatebased scheme. Blind key, instead of private key, is adopted for register, which avoids

关键词： Alliance-Authentication direct product decomposition bilinear mapping cloud computing

来源：评论

学校读者我要写书评

暂无评论

A SIMPLE FULLY HOMOMORPHIC ENCRYPTION SCHEME AVAILABLE IN CLOUD COMPUTING

A SIMPLE FULLY HOMOMORPHIC ENCRYPTION SCHEME AVAILABLE IN CL...

引用

2012 IEEE 2nd International Conference on Cloud Computing and Intelligence Systems

作者： Jian Li Danjie Song Sicong Chen Xiaofeng Lu School of Computer Beijing University of Posts and Telecommunications Network and Data Security Key Laboratory of Sichuan Province University of Electronic Science and Technology of China

With continuous expansion of cloud computing, problems of third-party data security become increasingly prominent. However, effective retrieval of encrypted data and other operations are difficult to achieve by traditional cryptogram systems. Thus, a practical simple fully homomorphic encryption scheme, using only elementary modular arithmetic, derived from Gentry cryptosystem is put forward to ensure the privacy-preserving in cloud storage, in which encrypted data can be operated directly without affecting the confidentiality of the encryption systems, so that it can excellently realize the need of cipertext retrieval and other processing in untrusted servers. Compared with the previous protocols Marten van Dijk et al. proposed at Advances in Cryptology-EUROCRYPT 2010 and Craig Gentry proposed in the March 2010 issue of Communications of the ACM, especially in the aspect of cipertext retrieval, the proposed scheme is much more secure and feasible. And the performance evaluation and security analysis demonstrate the practice and validity of the proposed scheme.

关键词： Cloud computing fully homomorphic encryption Ciphertext retrieval Data security

来源：评论

学校读者我要写书评

暂无评论

A measurement study on potential inter-domain routing diversity

引用

IEEE Transactions on network and Service Management 2012年第3期9卷 268-278页

作者： Hu, Chengchen Chen, Kai Chen, Yan Liu, Bin Vasilakos, Athanasios V. MoE Key Laboratory of Intelligent Networks and Network Security Department of Computer Science and Techonolgy Xi'An Jiaotong University Xi'an Shaanxi China Department of Computer Science and Engineering Hong Kong University of Science and Technology Hong Kong Department of Electrical Engineering and Computer Science Northwestern University Evanston IL United States Department of Computer Science and Technology Tsinghua University Beijing China Department of Computer and Telecommunications Engineering University of Western Macedonia GR 50100 Kozani Greece

In response to Internet emergencies, Internet resiliency is investigated directly through an autonomous system (AS) level graph inferred from policy-compliant BGP paths or/and traceroute paths. Due to policy-driven inter-domain routing, the physical connectivity does not necessarily imply network reachability in the AS-level graph, i.e., many physical paths are not visible by the inter-domain routing protocol for connectivity recovery during Internet outages. We call the invisible connectivity at the routing layer, which can be quickly restored for recovering routing failures by simple configurations, as the potential routing diversities. In this paper, we evaluate two kinds of potential routing diversities, which are recognized as Internet eXchange Points (IXPs) participant reconnection and peering policy relaxation. Using the most complete dataset containing AS-level map and IXP participants that we can achieve, we successfully evaluate the ability of potential routing diversity for routing recovery during different kinds of Internet emergencies. Encouragingly, our experimental results show that 40% to 80% of the interrupted network pairs can be recovered on average beyond policy-compliant paths, with rich path diversities and a little traffic shifts. Thus, this paper implies that the potential routing diversities are promising venues to address Internet failures. © 2004-2012 IEEE.

关键词： Recovery

来源：评论

学校读者我要写书评

暂无评论

security STRUCTURE OF CLOUD STORAGE BASED ON HOMOMORPHIC ENCRYPTION SCHEME

SECURITY STRUCTURE OF CLOUD STORAGE BASED ON HOMOMORPHIC ENC...

引用

2012 IEEE 2nd International Conference on Cloud Computing and Intelligence Systems

作者： Jian Li Sicong Chen Danjie Song School of Computer Beijing University of Posts and Telecommunications Network and Data Security Key Laboratory of Sichuan Province University of Electronic Science and Technology of China

According to the demerits of the traditional cloud storage that there exists superuser, encryption and decryption would take up many client’s sources, and the retrieval spends much time and is complex, the paper proposed a security structure of cloud storage based on homomorphic encryption scheme. The structure will reduce the use of client’s sources, and is convenient for moving to mobile devices;the homomorphic encryption scheme makes retrieval more efficient;users’ data would be more secure because they could not be achieved by superusers in the side of sever;users can operate cloud virtual disk as convenient as local disk. These merits of the structure not only could ensure the data storage’s security, but also promote highly the popularization of cloud storage.

关键词： Cloud storage Storage security Homomorphic encryption

来源：评论

学校读者我要写书评

暂无评论

Numerical Studies on Effects of Cavity Width on Smoke Spread in Double-skin Facade

引用

Procedia Engineering 2012年 45卷 695-699页

作者： Junmei Li Xuefei Xing Cheng Hu Yanfeng Li Chenchen Yin Shanshan Liu The Key Laboratory of Urban Security and Disaster Engineering Ministry of Education Beijing University of Technology Beijing 100124 China College of Architecture and Civil Engineering Beijing University of Technology Beijing 100124 China Safety & Emergency Management Lab Beijing Municipal Institute of Labour Protection Beijing 100054 China

Double-skin façade is more and more popular in modern buildings in recently years due to it can provide the building with improved thermal and sound insulation compared with a traditional glazed facade. But fire safety is a problem, the inner glass wall broken during a fire would lead to the smoke and flame spread to the adjacent levels, this might be dangerous for the occupants in those areas. Many such projects failed to comply with the fire safety codes at present. Engineering approach similar to performance-based fire codes practicing in some countries was applied to demonstrate the design is safe. Fire hazard assessment should be supported by the further investigations on the smoke and fire spread in DSF. Cavity depth effects, one of the key factors which can influence the smoke flow in DSF would be studied by numerical method in this paper. By examining the results for cavity depth of 0.5, 1.0 and 1.5 m, it is found that a wider cavity might give better fire safety under the scenarios studied. The outer glass panel would be broken rapidly for the cavity of 0.5m deep. a Cavity depth of 1.0 m might be the most risky design comparing with the other two cavity depths studied, the inner glass panel might be broken before the outer panel, this might lead to the fire spread to the adjacent upper levels, high strength glasses should be used or other protection measures should be taken for the DSF design under this condition. Further studied should be required for an in-depth understanding the smoke and fire spread in DSF in the further.

关键词： double-skin façade smoke movement cavity depth numerical study

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：