检索结果-内蒙古大学图书馆

20th International Conference on Information and Communications security, ICICS 2018

作者： Yin, Jie Lv, Heyang Zhang, Fangjiao Tian, Zhihong Cui, Xiang Institute of Information Engineering Chinese Academy of Sciences Beijing China School of Cyber Security University of Chinese Academy of Sciences Beijing China Institute of Computing Technology Chinese Academy of Sciences Beijing China Cyberspace Institute of Advanced Technology Guangzhou University Guangzhou China

ISBN: (纸本)9783030019495

In recent years, botnets continue to be an ever-increasing threat on the Internet. To be well prepared for future attacks and ensure the cyberspace security, defenders take more attention on advanced botnet designs that could be used by botmasters. In this paper, we design an advanced botnet based on publicly available resources, and implement its prototype system, which is named as PR-Bot. First of all, in terms of system design, PR-Bot is completely constructed based on the third-party publicly available resources and supports the bidirectional communication between the control end and the controlled end. At the same time, the system’s command and control (C&C) channel consists of three sub-channels: command control channel (CC channel), command addressing (CA channel) and result feedback (RF channel), making it extremely robust and concealed. Secondly, in terms of defense technology, this paper proposes the targeted defense strategies from the perspective of detection, measurement and tracking, so as to achieve the goal of combating against such botnets. In short, the ultimate purpose of this paper is not to design a highly harmful botnet, but to accurately predict the techniques that the botnet may adopt in the future and assess its new threats from the point of attack and defense. © Springer Nature Switzerland AG 2018.

关键词： Botnet

来源：评论

学校读者我要写书评

暂无评论

Structural transition in interdependent networks with regular interconnections

引用

Physical Review E 2019年第1期99卷 012311-012311页

作者： Xiangrong Wang Robert E. Kooij Yamir Moreno Piet Van Mieghem Faculty of Electrical Engineering Mathematics and Computer Science Delft University of Technology Delft The Netherlands iTrust Centre for Research in Cyber Security Singapore University of Technology and Design Singapore Institute for Biocomputation and Physics of Complex Systems (BIFI) University of Zaragoza Zaragoza 50009 Spain Department of Theoretical Physics University of Zaragoza Zaragoza 50009 Spain ISI Foundation Turin Italy

Networks are often made up of several layers that exhibit diverse degrees of interdependencies. An interdependent network consists of a set of graphs G that are interconnected through a weighted interconnection matrix B, where the weight of each intergraph link is a non-negative real number p. Various dynamical processes, such as synchronization, cascading failures in power grids, and diffusion processes, are described by the Laplacian matrix Q characterizing the whole system. For the case in which the multilayer graph is a multiplex, where the number of nodes in each layer is the same and the interconnection matrix B=pI, I being the identity matrix, it has been shown that there exists a structural transition at some critical coupling p*. This transition is such that dynamical processes are separated into two regimes: if p>p*, the network acts as a whole; whereas when p

关键词： Collective behavior in networks Dynamics of networks Network phase transitions Topological phase transition

来源：评论

学校读者我要写书评

暂无评论

Cooperative Game Model of Delegation Computing: Verifier Separated from Calculators

Cooperative Game Model of Delegation Computing: Verifier Sep...

引用

IEEE Conference on Computer Communications Workshops, INFOCOM Wksps

作者： Duo Zhang Youliang Tian Linjie Wang Sheng Gao Jianfeng Ma State Key Laboratory of Public Big Data College of Computer Science and Technology College of Mathematics and Statistics Guizhou University Guiyang China State Key Laboratory of Public Big Data College of Computer Science and Technology Institute of Cryptography and Date Security Guizhou University Guiyang China State Key Laboratory of Public Big Data College of Computer Science and Technology Guizhou University Guiyang China School of Information Central University of Finance and Economics Beijing China School of Cyber Engineering College of Computer Science and Technology Xi'dian University Xi'an China

ISBN: (数字)9781728186955

ISBN: (纸本)9781728186962

In cloud computing, the delegation computation service is required because end users usually are resource-constrained, and at the same time the correctness of computing results needs to be verified. However, all the existing and available technologies have a high cost to verify which is the main problem faced by the delegation computing under the cloud platform. In order to address this issue, based on the game theory and a smart contract, we construct three protocols. The client and the calculator sign the Prisoner's Protocol to incentivize correct computation by asking the calculator to pay a deposit upfront; The client and the verifier sign the Long-acting Mechanism Protocol to ensure the validity of the verification results; The calculator and the verifier sign the Collusion Protocol to make collusion the most profitable strategy for all colluding parties. Through the combination of these protocols, the work is realized by separation the computing task and the verification task, and the heavy verification task is avoided. Finally, the performance analysis of the results shows that the combination of all the protocols not only solves the problem of verification complexity in the traditional delegation computing, but also guarantees the benefit of the honest player.

关键词： Calculators Contracts Protocols Task analysis Computational modeling Cloud computing security

来源：评论

学校读者我要写书评

暂无评论

Detection of malicious domain names based on hidden Markov model 3

Detection of malicious domain names based on hidden Markov m...

引用

3rd IEEE International Conference on Data Science in cyberspace, DSC 2018

作者： Lv, Pin Bai, Lingling Liu, Tingwen Ning, Zhenhu Shi, Jinqiao Fang, Binxing School of Cyber Security University of Chinese Academy of Sciences Beijing China Institute of Information Engineering Chinese Academy of Sciences Beijing China Faculty of Information Technology Beijing University of Technology Beijing China Guangdong Institute of Electronic Information Engineering University of Electronic Science and Technology Dongguan Guangdong China

ISBN: (纸本)9781538642108

The Domain Name System (DNS) is an important core infrastructure of the Internet, domain names and IP addresses is a distributed database that maps to each other, however, due to the defects of its own protocol, there have been many malicious attacks against domain names, such as spoofing attacks, botnets, and domain name registrations, as a result, the security of domain names has become one of the problems that must be solved for the safe and reliable operation of the Internet. Based on the hidden Markov model (HMM), this paper analyzes the difference between the malicious domain name and the normal domain name in the various characteristics of DNS communication, and uses Spark's fast extraction to distinguish their attributes, the Baum-Welch algorithm and Viterbi algorithm in the Markov model can quickly classify unknown domain names accurately to achieve effective detection of malicious domain names. Finally, the HMM was compared with the commonly used random forest model through experiments, and the accuracy and recall rate were compared. The results show that the application of HMM improves the performance of the classifier to obtain more accurate detection results. © 2018 IEEE.

关键词： Hidden Markov models

来源：评论

学校读者我要写书评

暂无评论

NTIRE 2021 challenge on video super-resolution

arXiv

引用

arXiv 2021年

作者： Son, Sanghyun Lee, Suyoung Nah, Seungjun Timofte, Radu Lee, Kyoung Mu Chan, Kelvin C.K. Zhou, Shangchen Xu, Xiangyu Loy, Chen Change Jiang, Boyuan Lin, Chuming Dong, Yuchun Luo, Donghao Chu, Wenqing Ji, Xiaozhong Yang, Siqian Tai, Ying Wang, Chengjie Li, Jilin Huang, Feiyue Chen, Chengpeng Chu, Xiaojie Zhang, Jie Lu, Xin Chen, Liangyu Lin, Jing Du, Guodong Hao, Jia Zou, Xueyi Zhang, Qi Jiang, Lielin Li, Xin Zheng, He Liu, Fanglong He, Dongliang Li, Fu Dang, Qingqing Yi, Peng Wang, Zhongyuan Jiang, Kui Jiang, Junjun Ma, Jiayi Chen, Yuxiang Wang, Yutong Liu, Ting Sun, Qichao Liang, Huanwei Li, Yiming Li, Zekun Ruan, Zhubo Shang, Fanjie Guo, Chen Li, Haining Luo, Renjun Shen, Longjie Zafirouli, Kassiani Karageorgos, Konstantinos Konstantoudakis, Konstantinos Dimou, Anastasios Daras, Petros Song, Xiaowei Zhuo, Xu Liu, Hanxi Guo, Mengxi Li, Junlin Li, Yu Zhu, Ye Wang, Qing Zhao, Shijie Sun, Xiaopeng Zhan, Gen Xie, Tangxin Jia, Yu Lu, Yunhua Zhang, Wenhao Sun, Mengdi Michelini, Pablo Navarrete Zhang, Xueheng Jiang, Hao Chen, Zhiyu Chen, Li Xiong, Zhiwei Xiao, Zeyu Xu, Ruikang Cheng, Zhen Fu, Xueyang Song, Fenglong Luo, Zhipeng Yao, Yuehan Dutta, Saikat Shah, Nisarg A. Das, Sourya Dipta Zhao, Peng Shi, Yukai Liu, Hongying Shang, Fanhua Liu, Yuanyuan Chen, Fei Yu, Fangxu Gao, Ruisheng Bai, Yixin Heo, Jeonghwan Yue, Shijie Li, Chenghua Li, Jinjing Zheng, Qian Gang, Ruipeng Song, Ruixia Wee, Seungwoo Jeong, Jechang Li, Chen Wen, Geyingjie Chai, Xinning Song, Li Department of ECE ASRI SNU Korea Republic of Computer Vision Lab ETH Zurich Switzerland S-Lab Nanyang Technological University Singapore YouTu Lab Tencent East China Normal University China Megvii Peking University China Fudan University China Noah's Ark Lab Huawei Canada Technologies Co. Ltd Baidu Inc National Engineering Research Center for Multimedia Software Wuhan University China School of Computer Science and Technology Harbin Institute of Technology China Electronic Information School Wuhan University China School of Computer Science and Engineering University of Electronic Science and Technology of China China MTlab Meitu Inc Xidian university China ITI CERTH Greece Southeast University China Tencent PCG South China University of Technology China ByteDance Sun Yat-Sen University China Electronic Technology Cyber Security Co. Ltd. AIoT R&D Centre BOE Technology Group Co. Ltd. Shanghai Jiao Tong University China University of Science and Technology of China China Huawei Noah's Ark Lab DeepBlue Technology Shanghai Co. Ltd Indian Institute of Technology Madras India Indian Institute of Technology Jodhpur India Jadavpur University India Xidian University China Hanyang University Korea Republic of NCUT China CASIA China CUC China NRTA China

Super-Resolution (SR) is a fundamental computer vision task that aims to obtain a high-resolution clean image from the given low-resolution counterpart. This paper reviews the NTIRE 2021 Challenge on Video Super-Resolution. We present evaluation results from two competition tracks as well as the proposed solutions. Track 1 aims to develop conventional video SR methods focusing on the restoration quality. Track 2 assumes a more challenging environment with lower frame rates, casting spatio-temporal SR problem. In each competition, 247 and 223 participants have registered, respectively. During the final testing phase, 14 teams competed in each track to achieve state-of-the-art performance on video SR tasks. © 2021, CC BY-NC-ND.

关键词： Optical resolving power

来源：评论

学校读者我要写书评

暂无评论

Towards Fine-grained Fingerprinting of Firmware in Online Embedded Devices

Towards Fine-grained Fingerprinting of Firmware in Online Em...

引用

2018 IEEE Conference on Computer Communications, INFOCOM 2018

作者： Li, Qiang Feng, Xuan Wang, Raining Li, Zhi Sun, Limin School of Computer and Information Technology Beijing Jiaotong University China Beijing Key Laboratory of IOT Information Security Technology Institute of Information Enzineering CAS China Department of Electrical and Computer Engineering University of Delaware United States School of Cyber Security University of Chinese Academy of Sciences China

ISBN: (纸本)9781538641286

An increasing number of embedded devices are connecting to the Internet at a surprising rate. Those devices usually run firmware and are exposed to the public by device search engines. Firmware in embedded devices comes from different manufacturers and product versions. More importantly, many embedded devices are still using outdated versions of firmware due to compatibility and release-time issues, raising serious security concerns. In this paper, we propose generating fine-grained fingerprints based on the subtle differences between the filesystems of various firmware images. We leverage the natural language processing technique to process the file content and the document object model to obtain the firmware fingerprint. To validate the fingerprints, we have crawled 9,716 firmware images from official websites of device vendors and conducted real-world experiments for performance evaluation. The results show that the recall and precision of the firmware fingerprints exceed 90%. Furthermore, we have deployed the prototype system on Amazon EC2 and collected firmware in online embedded devices across the IPv4 space. Our findings indicate that thousands of devices are still using vulnerable firmware on the Internet. © 2018 IEEE.

关键词： Firmware

来源：评论

学校读者我要写书评

暂无评论

Detecting fingerprints of audio steganography software

引用

Forensic Science International: Reports 2020年 2卷 100075-100075页

作者： Gong, Chen Zhang, Jinghong Yang, Yunzhao Yi, Xiaowei Zhao, Xianfeng Ma, Yi State Key Laboratory of Information Security Institute of Information Engineering Chinese Academy of Sciences Beijing 100093 China School of Cyber Security University of Chinese Academy of Sciences Beijing 100093 China Beijing Information Technology Institute Beijing 100094 China

AbstractSteganography has experienced rapidly growth with spreading access to the Internet in recent decades. Such low cost, simple process and easy promotion steganographic softwares pose serious and growing threats and challenges to network security. The fingerprint of steganography has proven itself an effective solution. However, large gaps exist between experiments results and practical applications. Few attention has been paid on the fingerprint of steganography. In this paper, we provide highly effective solutions to identify the fingerprints of audio steganography. Based on the analysis of audio stego produced by three kinds of audio steganographic softwares, including Xiao Steganography, Invisible Secrets, Deep Sound, we successfully detect audio stego across WAV files. Besides, we summarize a general approach of fingerprint extraction, and its effectiveness has been confirmed through experiments. The results solve an urgent need for further research on reverse engineering steganography softwares and detecting audio stego.

关键词： Audio steganography Steganalysis Fingerprint

来源：评论

学校读者我要写书评

暂无评论

Understanding and Constructing AKE via Double-Key Key Encapsulation Mechanism 24th

Understanding and Constructing AKE via Double-Key Key Encaps...

引用

24th Annual International Conference on Theory and Application of Cryptology and Information security, ASIACRYPT 2018

作者： Xue, Haiyang Lu, Xianhui Li, Bao Liang, Bei He, Jingnan State Key Laboratory of Information Security Institute of Information Engineering Chinese Academy of Sciences Beijing China Data Assurance and Communication Security Research Center Chinese Academy of Sciences Beijing China School of Cyber Security University of Chinese Academy of Sciences Beijing China Chalmers University of Technology Gothenburg Sweden

ISBN: (纸本)9783030033286

Motivated by abstracting the common idea behind several implicitly authenticated key exchange (AKE) protocols, we introduce a primitive that we call double-key key encapsulation mechanism (2-key KEM). It is a special type of KEM involving two pairs of secret-public keys and satisfying some function and security property. Such 2-key KEM serves as the core building block and provides alternative approaches to simplify the constructions of AKE. To see the usefulness of 2-key KEM, we show how several existing constructions of AKE can be captured as 2-key KEM and understood in a unified framework, including widely used HMQV, NAXOS, Okamoto-AKE, and FSXY12-13 schemes. Then, we show (1) how to construct 2-key KEM from concrete assumptions, (2) how to adapt the classical Fujisaki-Okamoto transformation and KEM combiner to achieve the security requirement of 2-key KEM, (3) an elegant Kyber-AKE over lattice using the improved Fujisaki-Okamoto technique. © 2018, International Association for Cryptologic Research.

关键词： Public key cryptography

来源：评论

学校读者我要写书评

暂无评论

MaliceScript: A novel browser-based intranet threat 3

MaliceScript: A novel browser-based intranet threat

引用

3rd IEEE International Conference on Data Science in cyberspace, DSC 2018

作者： Liu, Chaoge Cui, Xiang Wang, Zhi Wang, Xiaoxi Feng, Yun Li, Xiaoyun Institute of Information Engineering Chinese Academy of Sciences Beijing China School of Cyber Security University of Chinese Academy of Sciences Beijing China Cyberspace Institute of Advanced Technology Guangzhou University Guangzhou China Beijing University of Posts and Telecommunications Beijing China

ISBN: (纸本)9781538642108

Recently, we have seen a sharp increase in browser-based threats that are specifically designed to attack intranet, especially in APT. In response to such attacks, it is both important to deal with the existing attacks and predict potential attacks from attacker's perspective. In this paper, we propose a new browser-based Web attack model that allows a browser to collect intranet topology and further to infiltrate a website from the intranet instead of from the extranet, leveraging some features of browsers. To verify the effectiveness of the proposed attack model, we design and implement a project named MaliceScript, and we systemically describe the technical details of the MaliceScript as well. Moreover, we demonstrate the MaliceScript in controlled experiments, and the related results prove that the MaliceScript can detect the intranet topology correctly and infiltrate intranet website secretly. Both the theory and experiment indicate that the proposed threat will probably become a reality in the near future, because it is easy to launch but difficult to be detected. In order to prevent the proposed threat, we give some practical suggestions at the end of this paper. © 2018 IEEE.

关键词： Intranets

来源：评论

学校读者我要写书评

暂无评论

Initial ASEAN digital security and interoperability standard proposal

引用

AIP Conference Proceedings 2023年第1期2739卷

作者： Sangsuree Vasupongayya Gunawan Hutagalung Obrina Candra Chalee Vorakulpipat Doni Purnomo Parinda Wattanasri Eko Supriyanto Shukor Abd Razak Othman Ibrahim Anazida Zainal Sri Devi Ravana Hiep Cong Pham Tharith Sriv Daw Khin Myo Su Mora Hertanto Agus Winarno Prabaswari Raden Muhammad Taufik Yuniantoro Badrus Zaman Fatmawati Retna Apsari Yutika Amelia Effendi Norjihan Abdul Ghani Zarina Shukur Hamidah Ibrahim Nur Izura Udzir Marnel Peradilla Jude Michael Teves Nestor Michael Tiglao Cenon Alfonso Pg Emeroylariffion Abas Mueen Uddin Agustin Kusumayati Brian Sri Prahastuti Department of Computer Engineering Faculty of Engineering Prince of Songkla University Hatyai Songkhla 90110 THAILAND Directorate General of Post and Information Technology Ministry of Communication and Information Technology Jakarta INDONESIA Politeknik Siber dan Sandi Negara National Cyber & Crypto Agency (BSSN) Depok West Java INDONESIA Information Security Research Team at National Electronics and Computer Technology Center Bangkok THAILAND National Standardization Agency of Indonesia Jakarta INDONESIA Department of Disease Control Ministry of Public Health Mueang Nonthaburi Nonthaburi THAILAND School of Biomedical Engineering and Health Sciences Faculty of Engineering Universiti Teknologi Malaysia Johor Bahru Johor MALAYSIA IJN-UTM Cardiovascular Engineering Center Institute of Human Centered Engineering Universiti Teknologi Malaysia Johor Bahru Johor MALAYSIA School of Computing Faculty of Engineering Universiti Teknologi Malaysia Johor Bahru Johor MALAYSIA Faculty of Computer Science & Information Technology Universiti Malaya Kuala Lumpur MALAYSIA RMIT University Vietnam Ho Chi Minh City VIETNAM Royal University of Phnom Penh Phnom Penh CAMBODIA Yangon University of Economics Yangon MYANMAR Agency for the Assessment and Application of Technology (BPPT) Jakarta INDONESIA Faculty of Science and Technology Universitas Airlangga Surabaya East Java INDONESIA Faculty of Advanced Technology and Multidiscipline Universitas Airlangga Surabaya East Java INDONESIA Centre for Cyber Security Universiti Kebangsaan Malaysia Bangi Selangor MALAYSIA Faculty of Computer Science and Information Technology Universiti Putra Malaysia Serdang Selangor MALAYSIA Computer Technology Department College of Computer Studies De La Salle University Manila PHILIPPINES Software Technology Department College of Computer Studies De La Salle University Manila PHILIPPINES Electrical and Electronics Engineering Institute University of the Philippines Diliman Quezon City P

In this work, the result of the initial attempt to propose an Association of Southeast Asian Nations (ASEAN) digital security and interoperability standard to support the mobility among ASEAN countries is presented. Literature reviews on existing coronavirus disease 2019 (COVID-19) related digital technologies of six ASEAN member countries are conducted. Several concerns related to creating/implementing the ASEAN digital security and interoperability standard are discussed including the technology accessing concern, the data security and privacy concern, and the data interoperability and availability concern. The proposed solution toward creating an ASEAN digital security and interoperability standard is then presented. To evaluate the proposed solution, a survey has been conducted on representatives of nine ASEAN countries on four main issues including the security standards and requirements, the interoperability standard and requirements, the certifications, and the implementation challenges. According to the survey and the discussion, seven recommendations were proposed toward creating an ASEAN digital security and interoperability standard. First, each country collects and maintains the data of its own citizens and also provides a method to authenticate and access the data by authorized requests. Second, QR code standard or ASEAN QR code standard must be agreed upon so that it can be authenticated and verified by ASEAN countries. Third, health risk assessment must be agreed upon to be used. Forth, the security standard, the data, the data format and the exchange protocol must be agreed upon at the ASEAN policy level while adoption of international standards as an implementation guideline will ease of the process and neutralize different requirements from various countries. Fifth, any accountability of incidents must be agreed upon at the ASEAN policy level. Sixth, certification might be extended to certification of risk assessment for organizations, products or

关键词：

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：