检索结果-内蒙古大学图书馆

Proceedings of the 33rd USENIX Conference on security Symposium

作者： Siyue Feng Yueming Wu Wenjie Xue Sikui Pan Deqing Zou Yang Liu Hai Jin National Engineering Research Center for Big Data Technology and System Services Computing Technology and System Lab Hubei Key Laboratory of Distributed System Security Hubei Engineering Research Center on Big Data Security Cluster and Grid Computing Lab and School of Cyber Science and Engineering Huazhong University of Science and Technology China Nanyang Technological University Singapore National Engineering Research Center for Big Data Technology and System Services Computing Technology and System Lab Hubei Key Laboratory of Distributed System Security Hubei Engineering Research Center on Big Data Security Cluster and Grid Computing Lab and School of Cyber Science and Engineering Huazhong University of Science and Technology China and Jinyinhu Laboratory China National Engineering Research Center for Big Data Technology and System Services Computing Technology and System Lab Hubei Key Laboratory of Distributed System Security Hubei Engineering Research Center on Big Data Security Cluster and Grid Computing Lab and School of Computer Science and Technology Huazhong University of Science and Technology China

ISBN: (纸本)9781939133441

With the continuous development of software open-sourcing, the reuse of open-source software has led to a significant increase in the occurrence of recurring vulnerabilities. These vulnerabilities often arise through the practice of copying and pasting existing vulnerabilities. Many methods have been proposed for detecting recurring vulnerabilities, but they often struggle to ensure both high efficiency and consideration of semantic information about vulnerabilities and patches. In this paper, we introduce FIRE, a scalable method for large-scale recurring vulnerability detection. It utilizes multi-stage filtering and differential taint paths to achieve precise clone vulnerability scanning at an extensive scale. In our evaluation across ten open-source software projects, FIRE demonstrates a precision of 90.0% in detecting 298 recurring vulnerabilities out of 385 ground truth instance. This surpasses the performance of existing advanced recurring vulnerability detection tools, detecting 31.4% more vulnerabilities than VUDDY and 47.0% more than MOVERY. When detecting vulnerabilities in large-scale software, FIRE outperforms MOVERY by saving about twice the time, enabling the scanning of recurring vulnerabilities on an ultra-large scale.

关键词：

来源：评论

学校读者我要写书评

暂无评论

A multi-source signals separation algorithm for identifying the threatening signals applied in Fiber-Optic Distributed Acoustic Sensor

A multi-source signals separation algorithm for identifying ...

引用

2023 Optical Fiber Communications Conference and Exhibition, OFC 2023

作者： He, Tao Zhang, Shixiong Li, Hao Yan, Zhijun Liu, Deming Sun, Qizhen School of Cyber Science and Engineering Huazhong University of Science and Technology Hubei Key Laboratory of Distributed System Security Hubei Engineering Research Center on Big Data Security Wuhan430074 China Optics Valley Laboratory Huazhong University of Science and Technology School of Optical and Electronic Information National Laboratory for Optoelectronics National Engineering Laboratory for Next Generation Internet Access System Wuhan430074 China

A multi-source signals separation algorithm is proposed to identify the potential threatening signals submerged in the strong background noises. Finally, the recognition rate of the mixed signals is improved from 62.8... 详细信息

ISBN: (纸本)9781957171180

关键词： Source separation

来源：评论

学校读者我要写书评

暂无评论

Blockchain-Enhanced Federated Learning for Secure and Intelligent Consumer Electronics : An Overview

引用

IEEE Consumer Electronics Magazine 2025年

作者： Zhu, Chenlu Wang, Shuilong Fan, Xiaoxuan Deng, Xianjun Liu, Shenghao He, Yuanyuan Wu, Celimuge Huazhong University of Science and Technology Hubei Key Laboratory of Distributed System Security Hubei Engineering Research Center on Big Data Security School of Cyber Science and Engineering Wuhan430074 China The University of Electro-Communications China

With the rapid advancement of Artificial Intelligence (AI) and Internet of Things (IoT), consumer electronics have become essential in daily life. However, these devices generate and store vast amounts of personal data, posing significant security threats. Federated learning, a distributed machine learning method, protects user privacy by training models collaboratively without sharing raw data. However, it still faces numerous challenges. To further enhance data security, the integration of blockchain technology is crucial. Blockchain's decentralized and immutable characteristics enable secure data sharing and privacy protection in consumer electronics. This paper analyzes the application of federated learning in consumer electronics, examines how blockchain can enhance federated learning, and discusses future research directions. The primary contributions of this paper include a detailed application of blockchain-enhanced federated learning in consumer electronics, intended to serve as a reference for future research. © 2012 IEEE.

关键词： Federated learning

来源：评论

学校读者我要写书评

暂无评论

DSDIR: A Two-Stage Method for Addressing Noisy Long-Tailed Problems in Malicious Traffic Detection

DSDIR: A Two-Stage Method for Addressing Noisy Long-Tailed P...

引用

International Conference on Acoustics, Speech, and Signal Processing (ICASSP)

作者： Guoliang Li Ruiqi Zhang Zhe Sun Lingkai Xing Yu Zhang College of Cyber Science Nankai University China Tianjin Key Laboratory of Network and Data Security Technology China Key Laboratory of Data and Intelligent System Security Ministry of Education China College of Computer Science Nankai University China

ISBN: (数字)9798350368741

ISBN: (纸本)9798350368758

In recent years, deep learning based malicious traffic detection (MTD) systems have demonstrated remarkable success. However, their effectiveness tend to decrease because most malicious traffic datasets are suffered from noisy-labeled and long-tailed problems. While numerous approaches have been developed to address these two problems individually, they become inefficient when confronting the combined challenge of noisy long-tailed data, as they typically tackle only a single adverse factor at a time. This paper proposes a two-stage method called Distribution-aware sample Selection and Dynamic Instance-based Relabeling (DSDIR), which simultaneously addresses the impacts of noisy-labeled and long-tailed problems. In the first stage, a noise-independent clean sample selection method is designed to obtain a clean dataset, which converts negative effects of the long-tailed problem into positive ones. In the second stage, dynamic instance-based relabeling is designed to train a model and improve the dataset’s quality simultaneously. Eventually, DSDIR not only produces a balanced and noise-tolerant model but also obtains a clean dataset. Experimental results demonstrate that in the high noise condition of 60% and 80%, the accuracy rate of DSDIR is 5% higher than the state-of-the-art methods. Our code is available at https://***/nku-ligl/DSDIR.

关键词： Deep learning Computer vision Heavily-tailed distribution Codes Accuracy Noise Speech recognition Acoustics Noise measurement Speech processing

来源：评论

学校读者我要写书评

暂无评论

An end-to-end repair-based joint training framework for weakly supervised pavement crack segmentation

引用

Multimedia Tools and Applications 2024年第16期84卷 1-19页

作者： Zhou, Hui Tao, Huanjie Duan, Qianyue Hu, Zhenwu Deng, Yishi School of Computer Science Northwestern Polytechnical University Xi’an710129 China School of Cyberspace Security Northwestern Polytechnical University Xi’an710129 China Engineering Research Center of Embedded System Integration Ministry of Education Xi’an710129 China National Engineering Laboratory for Integrated Aero-Space-Ground-Ocean Big Data Application Technology Xi’an710129 China

Weakly supervised pavement crack segmentation aims to assign each pixel of pavement surface images a category label (crack or non-crack) using limited annotation information. Most existing methods adopt the multi-stage approach based on the class activation map (CAM), which outputs from a pre-trained crack classification model, to generate the pixel-level pseudo labels, and then train a segmentation model using these pseudo labels. However, these methods have two notable drawbacks: (i) CAM focuses primarily on the most discriminative regions of the image, potentially resulting in an incomplete estimation of crack regions, and (ii) the process of obtaining pixel-level pseudo labels from CAM is complex and may introduce noise. To avoid these issues, we propose an end-to-end repair-based joint training framework for weakly supervised pavement crack segmentation. Specifically, to better guide the model to pay more attention to the repair process of crack regions, we introduce the segmentation loss, which assigns different weights for crack regions and background regions, through the Residual Project Network. Additionally, to alleviate the impact of the domain gap between synthetic and real datasets, we introduce the consistency loss through the joint training paradigm of unpaired data that incorporates both crack and non-crack images into the training process simultaneously. Furthermore, to enable the model to effectively extract local features and reduce the model's computational complexity, we introduce the Lightweight Multi-head Self-attention module. The experiment results on the CRACK500 dataset, the CFD dataset, and the AEL dataset demonstrate that our model achieves better performance than some existing weakly supervised pavement segmentation methods. © The Author(s), under exclusive licence to Springer science+Business Media, LLC, part of Springer Nature 2024.

关键词： Repair

来源：评论

学校读者我要写书评

暂无评论

Efficient and Verifiable Multi-server Framework for Secure Information Classification and Storage 20th

Efficient and Verifiable Multi-server Framework for Secure...

引用

20th International Conference on Information security and Cryptology, Inscrypt 2024

作者： Guo, Ziqing Wang, Yaohui Jin, Xuanyu Wang, Xiuhua He, Yuanyuan Dai, Yueyue Hubei Key Laboratory of Distributed System Security Hubei Engineering Research Center on Big Data Security School of Cyber Science and Engineering Huazhong University of Science and Technology Wuhan430074 China

ISBN: (纸本)9789819647330

With the rapid development of digital technology, the complexity and diversity of data sources present significant security and privacy challenges. To address these issues, this paper proposes an efficient and verifiable Multi-Server Framework for Secure Information Classification and Storage (MSF-SCS). The framework distributes sensitive data across multiple servers, proposing an opening authority to manage classified information and a semi-honest sanitizer to ensure strong authentication while preserving user anonymity. We formalize the security model of our scheme and prove that it satisfies the no-read rule, no-write rule, and unforgeability. We instantiate the scheme and conduct comprehensive experimental evaluations, which demonstrate that MSF-SCS significantly outperforms traditional architectures in terms of scalability and efficiency, making it particularly suitable for industries with stringent data protection requirements. Future work will focus on further improving the system’s security while maintaining its high performance. © The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd. 2025.

关键词： Authentication

来源：评论

学校读者我要写书评

暂无评论

G2G: Generalized Learning by Cross-Domain Knowledge Transfer for Federated Domain Generalization

G2G: Generalized Learning by Cross-Domain Knowledge Transfer...

引用

International Conference on Acoustics, Speech, and Signal Processing (ICASSP)

作者： Xinqian Chen Jin Zhang Xiaoli Gong College of Computer Science Nankai University China Key Lab of Data and Intelligent System Security Ministry of Education China

We propose G2G, based on the global model of Generalized learning to solve the Federated Domain Generalization (FedDG) task. FedDG aims to collaboratively train a global model that can directly generalize to the unseen target domain without data sharing. Existing methods face challenges from both data heterogeneity, arising from imbalanced as well as non-independent and identical distributions (non-IID) among all domains, and model heterogeneity due to personalized requirements for client models. Also, these methods suffer from unnecessary time cost due to aggregation and distribution. G2G addresses these issues by making the global model acquire in-domain classification knowledge during local knowledge transfer and gain extensive knowledge in cross-domain training. Moreover, G2G eliminates waiting time by allowing clients to train independently when not trained with the global model. G2G outperforms state-of-the-art (SOTA) methods by 1.52%, 2.35%, and 1.11% on three datasets, respectively.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Stealthy Backdoor Attack Towards Federated Automatic Speaker Verification

Stealthy Backdoor Attack Towards Federated Automatic Speaker...

引用

International Conference on Acoustics, Speech, and Signal Processing (ICASSP)

作者： Longling Zhang Lyqi Liu Dan Meng Jun Wang Shengshan Hu School of Cyber Science and Engineering Huazhong University of Science and Technology China National Engineering Research Center for Big Data Technology and System Services Computing Technology and System Lab Hubei Key Laboratory of Distributed System Security Hubei Engineering Research Center on Big Data Security OPPO Research Institute China

Automatic speech verification (ASV) authenticates individuals based on distinct vocal patterns, playing a pivotal role in many applications such as voice-based unlocking systems for devices. The ASV system comprises three stages: training, registration, and validation. The model refines using voice data in training, extracts vocal features in registration, and contrasts these with speech patterns in validation. Modern ASV models, primarily grounded in DNN architectures, require extensive data for training. Federated learning (FL) fosters model-sharing across multiple clients while ensuring data privacy. Due to its open architecture, FL is vulnerable to backdoor attacks. However, training a stealthy backdoor attack in FL presents challenges, including diminished attack generalization owing to data heterogeneity, and conspicuous triggers that render them easily detectable. In this paper, we propose a Federated Stealthy Backdoor Attack method ($FedSBA$). FedSBA aims to improve the attack model’s generalization, enhance its persistence, and elude anomaly detection under the heterogeneous data distribution. FedSBA constructs an attack model based on a personalized transformer and encompasses a stealthy trigger. Moreover, we also propose a defensive strategy that utilizes an adaptive weight aggregation scheme. The stealthiness and effectiveness of FedSBA are demonstrated by exhibiting superior performance in comparison to previous works.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Large Language Model Supply Chain: A Research Agenda

arXiv

引用

arXiv 2024年

作者： Wang, Shenao Zhao, Yanjie Hou, Xinyi Wang, Haoyu Hubei Key Laboratory of Distributed System Security Hubei Engineering Research Center on Big Data Security School of Cyber Science and Engineering Huazhong University of Science and Technology Wuhan China

The rapid advancement of large language models (LLMs) has revolutionized artificial intelligence, introducing unprecedented capabilities in natural language processing and multimodal content generation. However, the increasing complexity and scale of these models have given rise to a multifaceted supply chain that presents unique challenges across infrastructure, foundation models, and downstream applications. This paper provides the first comprehensive research agenda of the LLM supply chain, offering a structured approach to identify critical challenges and opportunities through the dual lenses of software engineering (SE) and security & privacy (S&P). We begin by establishing a clear definition of the LLM supply chain, encompassing its components and dependencies. We then analyze each layer of the supply chain, presenting a vision for robust and secure LLM development, reviewing the current state of practices and technologies, and identifying key challenges and research opportunities. This work aims to bridge the existing research gap in systematically understanding the multifaceted issues within the LLM supply chain, offering valuable insights to guide future efforts in this rapidly evolving domain. Copyright © 2024, The Authors. All rights reserved.

关键词： Natural language processing systems

来源：评论

学校读者我要写书评

暂无评论

WaDec: Decompiling WebAssembly Using Large Language Model

arXiv

引用

arXiv 2024年

作者： She, Xinyu Zhao, Yanjie Wang, Haoyu Hubei Key Laboratory of Distributed System Security Hubei Engineering Research Center on Big Data Security School of Cyber Science and Engineering Huazhong University of Science and Technology Wuhan China

WebAssembly (abbreviated Wasm) has emerged as a cornerstone of web development, offering a compact binary format that allows high-performance applications to run at near-native speeds in web browsers. Despite its advantages, Wasm’s binary nature presents significant challenges for developers and researchers, particularly regarding readability when debugging or analyzing web applications. Therefore, effective decompilation becomes crucial. Unfortunately, traditional decompilers often struggle with producing readable outputs. While some large language model (LLM)-based decompilers have shown good compatibility with general binary files, they still face specific challenges when dealing with Wasm. In this paper, we introduce a novel approach, WaDec, which is the first use of a fine-tuned LLM to interpret and decompile Wasm binary code into a higher-level, more comprehensible source code representation. The LLM was meticulously fine-tuned using a specialized dataset of wat-c code snippets, employing self-supervised learning techniques. This enables WaDec to effectively decompile not only complete wat functions but also finer-grained wat code snippets. Our experiments demonstrate that WaDec markedly outperforms current state-of-the-art tools, offering substantial improvements across several metrics. It achieves a code inflation rate of only 3.34%, a dramatic 97% reduction compared to the state-ofthe-art’s 116.94%. Unlike the output of baselines that cannot be directly compiled or executed, WaDec maintains a recompilability rate of 52.11%, a re-execution rate of 43.55%, and an output consistency of 27.15%. Additionally, it significantly exceeds state-of-the-art performance in AST edit distance similarity by 185%, cyclomatic complexity by 8%, and cosine similarity by 41%, achieving an average code similarity above 50%. In summary, WaDec enhances understanding of the code’s structure and execution flow, facilitating automated code analysis, optimization, and security auditin

关键词： Web browsers

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：