检索结果-内蒙古大学图书馆

IoT device identification based on network communication analysis using deep learning

Journal of Ambient Intelligence and Humanized Computing 2023年第7期14卷 9113-9129页

作者： Kotak, Jaidip Elovici, Yuval Department of Software and Information Systems Engineering Ben-Gurion University of the Negev Beer-Sheva Israel

Attack vectors for adversaries have increased in organizations because of the growing use of less secure IoT devices. The risk of attacks on an organization’s network has also increased due to the bring your own device (BYOD) policy which permits employees to bring IoT devices onto the premises and attach them to the organization’s network. To tackle this threat and protect their networks, organizations generally implement security policies in which only white-listed IoT devices are allowed on the organization’s network. To monitor compliance with such policies, it has become essential to distinguish IoT devices permitted within an organization’s network from non-white-listed (unknown) IoT devices. In this research, deep learning is applied to network communication for the automated identification of IoT devices permitted on the network. In contrast to existing methods, the proposed approach does not require complex feature engineering of the network communication, because the ’communication behavior’ of IoT devices is represented as small images which are generated from the device’s network communication payload. The proposed approach is applicable for any IoT device, regardless of the protocol used for communication. As our approach relies on the network communication payload, it is also applicable for the IoT devices behind a network address translation (NAT) enabled router. In this study, we trained various classifiers on a publicly accessible dataset to identify IoT devices in different scenarios, including the identification of known and unknown IoT devices, achieving over 99% overall average detection accuracy. © 2022, The Author(s), under exclusive licence to Springer-Verlag GmbH Germany, part of Springer Nature.

关键词： Internet of things

来源：评论

学校读者我要写书评

暂无评论

Unified Approach Integrating Machine Learning Algorithms for Detection of e-Mail Phishing Attacks 1

Unified Approach Integrating Machine Learning Algorithms for...

引用

1st International Conference on Computing, Sciences and Communications, ICCSC 2024

作者： Mathur, Abeer Dubey, Abhinav Sudhakar Mahara, Pranav Singh Gandhi, Usha Devi School of Computer Science & Engineering Vellore Institute of Technology Department of Software Systems Vellore India School of Computer Science Engineering & Information Systems Vellore Institute of Technology Department of Information Technology Vellore India

ISBN: (纸本)9798350353648

With the ever-rising risk of phishing attacks, which capitalize on vulnerable human behavior in the contemporary digital space, requires new cybersecurity methods. This literary work contributes to the solution by novel incorporation of three techniques: Support Vector Machine (SVM), Natural Language Processing (NLP) and Random Forest (RF). Utilizing NLP for deep analysis of text in phishing e-mails, SVM for strong categorization and Random Forest's decision making by group helps in improving detection. This combination of language and pattern analysis along with group learning builds a fortified system. This approach differs from prior work on a variety of factors such as reliability, security, integrity, scalability, interpretability, transparency, and robustness. Thorough evaluation on a reliable dataset aimed to demonstrate the method's effectiveness, which resulted in 98.7 % of accuracy in detection. This majorly aims at showcasing the potential of ensemble techniques to combat against cyber-attacks like phishing for laying a strong foundation for a secure digital environment. © 2024 IEEE.

关键词： Phishing

来源：评论

学校读者我要写书评

暂无评论

Optimizing beyond boundaries: empowering the salp swarm algorithm for global optimization and defective software module classification

引用

Neural Computing and Applications 2024年第30期36卷 18727-18759页

作者： Kassaymeh, Sofian Al-Betar, Mohammed Azmi Rjoubd, Gaith Fraihat, Salam Abdullah, Salwani Almasri, Ammar Software Engineering Department Faculty of Information Technology Aqaba University of Technology Aqaba Jordan College of Engineering and Information Technology Ajman University Ajman United Arab Emirates Department of Information Technology Al-Huson University College Al-Balqa Applied University Irbid Jordan Concordia Institute for Information Systems Engineering Concordia University Montreal Canada Artificial Intelligence Department Faculty of Information Technology Aqaba University of Technology Aqaba Jordan Data Mining and Optimization Research Group Center for Artificial Intelligence Technology Universiti Kebangsaan Malaysia Bangi Malaysia Management Information Systems Department Al-Balqa Applied University Amman Jordan

This work presents a new version of the salp swarm optimizer (SSA), called "mSSA," that uses complex mathematical expressions to dynamically manipulate the crucial control parameter (c1) during optimization. These expressions are carefully designed to modulate the shift in search strategy from exploratory to exploitative, improving the flexibility and speed of convergence of the algorithm. To evaluate the performance of the developed mSSA variants, a thorough examination is carried out on twenty-three benchmark test functions alongside their application to the complex task of software module classification. The process of classifying defective software modules involves developing a multilayer perceptron (MLP) classifier that is suited to the particular complexity and heterogeneity of the task. Selecting the best optimizer is made easier by systematically evaluating the different mSSA versions as MLP classifier trainers. Based on metrics like classification accuracy, convergence speed, and avoidance of local minima, a comparative analysis in opposition to six previously published metaheuristic optimizers shows that mSSA3, when combined with the developed MLP classifier, outperforms both other mSSA variations and state-of-the-art metaheuristic optimizers in terms of overall performance. The excellent classification accuracy, swift convergence, and ability to avoid local minima of mSSA3 highlight its superiority and establish it as a cutting-edge method in the application of metaheuristic algorithms. © The Author(s), under exclusive licence to Springer-Verlag London Ltd., part of Springer Nature 2024.

关键词： Global optimization

来源：评论

学校读者我要写书评

暂无评论

Discussion Paper: The Threat of Real Time Deepfakes 2

Discussion Paper: The Threat of Real Time Deepfakes

引用

2nd Workshop on the security implications of Deepfakes and Cheapfakes, WDC 2023, held in conjunction with ACM AsiaCCS 2023

作者： Frankovits, Guy Mirsky, Yisroel Department of Software and Information Systems Engineering Ben-Gurion University Beersheba Israel

ISBN: (纸本)9798400700989

Generative deep learning models are able to create realistic audio and video. This technology has been used to impersonate the faces and voices of individuals. These "deepfakes"are being used to spread misinformation, enable scams, perform fraud, and blackmail the innocent. The technology continues to advance and today attackers have the ability to generate deepfakes in real-Time. This new capability poses a significant threat to society as attackers begin to exploit the technology in advances social engineering attacks. In this paper, we discuss the implications of this emerging threat, identify the challenges with preventing these attacks and suggest a better direction for researching stronger defences. © 2023 Owner/Author.

关键词： Cybersecurity

来源：评论

学校读者我要写书评

暂无评论

Transaction transmission model for blockchain channels based on non-cooperative games

引用

Science China(information Sciences) 2023年第1期66卷 97-114页

作者： Peiyun ZHANG Chenxi LI Mengchu ZHOU Wenjun HUANG Abdullah ABUSORRAH Omaimah O.BAMASAG Engineering Research Center of Digital Forensics of Ministry of Education School of Computer and SoftwareNanjing University of Information Science and Technology School of Computer and Information Anhui Normal University Department of Electrical and Computer Engineering New Jersey Institute of Technology Center of Research Excellence in Renewable Energy and Power Systems Department of Electrical and Computer Engineering Faculty of Engineering and K.A.CARE Energy Research and Innovation CenterKing Abdulaziz University Department of Computer Science Faculty of Computing and Information Technology Center of Excellence in Smart Environment Research King Abdulaziz University

In blockchain networks, transactions can be transmitted through channels. The existing transmission methods depend on their routing information. If a node randomly chooses a channel to transmit a transaction, the transmission may be aborted due to insufficient funds(also called balance) or a low transmission rate. To increase the success rate and reduce transmission delay across all transactions, this work proposes a transaction transmission model for blockchain channels based on non-cooperative game *** balance, channel states, and transmission probability are fully considered. This work then presents an optimized channel transaction transmission algorithm. First, channel balances are analyzed and suitable channels are selected if their balance is sufficient. Second, a Nash equilibrium point is found by using an iterative sub-gradient method and its related channels are then used to transmit transactions. The proposed method is compared with two state-of-the-art approaches: Silent Whispers and Speedy Murmurs. Experimental results show that the proposed method improves transmission success rate, reduces transmission delay,and effectively decreases transmission overhead in comparison with its two competitive peers.

关键词： Blockchain channel transaction transmission channel balance channel state channel transmission probability non-cooperative game

来源：评论

学校读者我要写书评

暂无评论

Log Preservation in Custody Dual Blockchain With Energy Regime and Obfuscation Shuffle

引用

IEEE Transactions on Network Science and engineering 2024年第4期11卷 3495-3511页

作者： Chew, Chit-Jie Lee, Wei-Bin Chen, Tzu-Hao Lin, Iuon-Chang Lee, Jung-San Feng Chia University Department of Information Engineering and Computer Science Taichung407 Taiwan Hon Hai Research Institute Information Security Research Center Taipei236 Taiwan National Chung Hsing University Department of Management Information Systems Taichung402 Taiwan

The rise of cybercrime has led to an explosion of threats in recent years, resulting in the increasingly important of digital forensics. To achieve successful investigation and prosecution, the log preservation is a critical aspect of incident response. The blockchain technology is considered as one of the powerful log storage mechanism, which bringing data transparency and non-tempering property aside from taking off the hypothesis of a trusted third party. Nevertheless, the sensitivity of the data makes it vulnerable to malicious attacks, and the adoption of blockchain has significantly burdened participants regarding consensus time and storage. To address these challenges, we aim to develop a custody dual blockchain (CDB) to secure the confidentiality and integrity of log data. The design of reputation consensus attains that only attractive participants need to offer computation and storage for efficiency enhancing, while the energy regime constructs a positive feedback loop that invigorates users to contribute to CDB. Moreover, the obfuscation shuffle effectively obscures the explicit log plaintext to prevent illegal access. Thus, the confidential data on the CDB nodes can even be used as evidence of digital forensics. Simulation results have demonstrated that the ledger overhead can be significantly reduced, and CDB could pass the robust examination of two formal proof tools: Proverif (Blanchet et al. 2021) and AVISPA. © 2013 IEEE.

关键词： Blockchain

来源：评论

学校读者我要写书评

暂无评论

A Reputation-Based AODV Protocol for Blackhole and Malfunction Nodes Detection and Avoidance

引用

Computers, Materials & Continua 2024年第8期80卷 1867-1888页

作者： Qussai M.Yaseen Monther Aldwairi Ahmad Manasrah Artificial Intelligence Research Center(AIRC) College of Engineering and Information TechnologyAjman UniversityAjman346United Arab Emirates Department of Computer Information Systems Faculty of Computer and Information TechnologyJordan University of Science and TechnologyIrbid22110Jordan College of Technological Innovation Zayed UniversityAbu Dhabi144534United Arab Emirates Faculty of Information Technology and Computer Science Yarmouk UniversityIrbid21163Jordan Computer Information Systems Higher Colleges of TechnologySharjah341214United Arab Emirates

Enhancing the security of Wireless Sensor Networks(WSNs)improves the usability of their ***,finding solutions to various attacks,such as the blackhole attack,is crucial for the success of WSN *** paper proposes an enhanced version of the AODV(Ad Hoc On-Demand Distance Vector)protocol capable of detecting blackholes and malfunctioning benign nodes in WSNs,thereby avoiding them when delivering *** proposed version employs a network-based reputation system to select the best and most secure path to a *** achieve this goal,the proposed version utilizes the Watchdogs/Pathrater mechanisms in AODV to gather and broadcast reputations to all network nodes to build the network-based reputation *** minimize the network overhead of the proposed approach,the paper uses reputation aggregator nodes only for forwarding reputation ***,to reduce the overhead of updating reputation tables,the paper proposes three mechanisms,which are the prompt broadcast,the regular broadcast,and the light broadcast *** proposed enhanced version has been designed to perform effectively in dynamic environments such as mobile WSNs where nodes,including blackholes,move continuously,which is considered a challenge for other *** the proposed enhanced protocol,a node evaluates the security of different routes to a destination and can select the most secure routing *** paper provides an algorithm that explains the proposed protocol in detail and demonstrates a case study that shows the operations of calculating and updating reputation values when nodes move across different ***,the paper discusses the proposed approach’s overhead analysis to prove the proposed enhancement’s correctness and applicability.

关键词： AODV blackhole malfunction nodes pathrater reputation system wireless sensor networks(WSNs) watchdogs

来源：评论

学校读者我要写书评

暂无评论

PrinterLeak: Leaking Sensitive Data by Exploiting Printer Display Panels 23rd

PrinterLeak: Leaking Sensitive Data by Exploiting Printer D...

引用

23rd International Conference on Computational Science and Its Applications, ICCSA 2023

作者： Guri, Mordechai Department of Software and Information Systems Engineering Cyber-Security Research Center Ben-Gurion University of the Negev Be’er Sheva Israel

ISBN: (纸本)9783031371103

Sensitive networks hold and process confidential information and, therefore, are kept separate from the Internet. This defensive measure is known as an ‘air gap.’ In this paper, we show that attackers can exploit networked printers to exfiltrate data from air-gapped networks. We show that malware in the network can control the printer display screen and status LEDs and modulate sensitive information over them using documented and undocumented firmware and software level commands. Local or remote adversaries can intercept and decode these signals from a few meters to hundreds of meters away. For reception, they can use a smartphone, a local surveillance camera, or camera mounted on a drone. The display panels of printers are currently not monitored or protected by any security measures, such as intrusion detection systems (IDS) and intrusion prevention systems (IPS), which makes this attack highly evasive. We provide technical details, discuss the attack model, and present related work. We evaluate this new type of attack and discuss the necessary countermeasures, both defensive and preventive. © 2023, The Author(s), under exclusive license to Springer Nature Switzerland AG.

关键词： Firmware

来源：评论

学校读者我要写书评

暂无评论

A DSL-based Approach for Code Generation and Navigation Process Management in a Single Page Application 14

A DSL-based Approach for Code Generation and Navigation Proc...

引用

14th International Conference on Emerging Ubiquitous systems and Pervasive Networks / 13th International Conference on Current and Future Trends of information and Communication Technologies in Healthcare, EUSPN/ICTH 2023

作者： Naimi, Lahbib Abdelmalek, Hamza Jakimi, Abdeslam Software Engineering and Information Systems Engineering Team Department of Informatics Faculty of Sciences Techniques of Errachidia University of Moulay Ismail Errachidia52000 Morocco

Single page applications (SPAs) are web applications that offer a fast and responsive user experience, but also pose some challenges in terms of navigation process management and platform compatibility. In this paper, we propose a DSL-based approach for code generation and management of SPA navigation process, based on the visual vocabulary proposed by Garrett. We use a Domain-Specific Language (DSL) to describe the elements of the SPA, such as pages, connectors, and transitions, in a concise and abstract way. We also propose a metamodel for Garrett vocabulary, which defines the concepts and relationships of the DSL. Then, we apply a Model-Driven engineering (MDE) technique to transform the DSL specification into a platform-specific project architecture and basic code for an SPA. We present a case study of using our DSL to generate an Angular SPA and evaluate the benefits of our approach in terms of productivity, maintainability, and reusability. © 2024 Elsevier B.V.. All rights reserved.

关键词： Reusability

来源：评论

学校读者我要写书评

暂无评论

Enhancing secure Development in Globally Distributed software Product Lines: A Machine Learning-Powered Framework for Cyber-Resilient Ecosystems

引用

Computers, Materials & Continua 2024年第6期79卷 5031-5049页

作者： Marya Iqbal Yaser Hafeez Nabil Almashfi Amjad Alsirhani Faeiz Alserhani Sadia Ali Mamoona Humayun Muhammad Jamal University Institute of Information Technology PMAS-Arid Agriculture UniversityRawalpindiPakistan Department of Software Engineering College of Computer and Information SciencesJouf UniversityAl Jouf72388Saudi Arabia Department of Computer Science College of Computer and Information SciencesJouf UniversityAl Jouf72388Saudi Arabia Department of Computer Engineering&Networks College of Computer and Information SciencesJouf UniversityAl Jouf72388Saudi Arabia Department of Information Systems College of Computer and Information SciencesJouf UniversitySakakaAl Jouf72388Saudi Arabia Department of Mathematics Pir Mehr Ali Shah Arid Agriculture UniversityRawalpindiPakistan

Embracing software product lines(SPLs)is pivotal in the dynamic landscape of contemporary software ***,the flexibility and global distribution inherent in modern systems pose significant challenges to managing SPL variability,underscoring the critical importance of robust cybersecurity *** paper advocates for leveraging machine learning(ML)to address variability management issues and fortify the security of *** the context of the broader special issue theme on innovative cybersecurity approaches,our proposed ML-based framework offers an interdisciplinary perspective,blending insights from computing,social sciences,and ***,it employs ML for demand analysis,dynamic feature extraction,and enhanced feature selection in distributed settings,contributing to cyber-resilient *** experiments demonstrate the framework’s superiority,emphasizing its potential to boost productivity and security in *** digital threats evolve,this research catalyzes interdisciplinary collaborations,aligning with the special issue’s goal of breaking down academic barriers to strengthen digital ecosystems against sophisticated attacks while upholding ethics,privacy,and human values.

关键词： Machine Learning variability management cybersecurity digital ecosystems cyber-resilience

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：