检索结果-内蒙古大学图书馆

Annual computer security Applications Conference

作者： William Enck Kevin Butler Thomas Richardson Patrick McDaniel Adam Smith Systems and Internet Infrastructure Security (SIIS) Laboratory Department of Computer Science and Engineering Pennsylvania State University USA

Main memory contains transient information for all resident applications. However, if memory chip contents survives power-off, e.g., via freezing DRAM chips, sensitive data such as passwords and keys can be extracted. Main memory persistence will soon be the norm as recent advancements in MRAM and FeRAM position non-volatile memory technologies for widespread deployment in laptop, desktop, and embedded system main memory. Unfortunately, the same properties that provide energy efficiency, tolerance against power failure, and "instant-on'' power-up also subject systems to offline memory scanning. In this paper, we propose a memory encryption control unit (MECU) that provides memory confidentiality during system suspend and across reboots. The MECU encrypts all memory transfers between the processor-local level 2 cache and main memory to ensure plaintext data is never written to the persistent medium. The MECU design is outlined and performance and security trade-offs considered. We evaluate a MECU-enhanced architecture using the SimpleScalar hardware simulation framework on several hardware benchmarks. This analysis shows the majority of memory accesses are delayed by less than 1 ns, with higher access latencies (caused by resume state reconstruction) subsiding within 0.25 seconds of a system resume. In effect, the MECU provides zero-cost steady state memory confidentiality for non-volatile main memory.

关键词： Nonvolatile memory Cryptography Hardware Delay Resumes Data mining Random access memory Ferroelectric films Portable computers Embedded system

来源：评论

学校读者我要写书评

暂无评论

A Resource Utilization Framework Using Partial State Information on Grid

A Resource Utilization Framework Using Partial State Informa...

引用

International Conference on Computational Science and its Applications (ICCSA)

作者： Mohammad Mehedi Hassan Eui-Nam Huh Jai-Ho Oh Kyoung-Min Lee Ok-Hwan Byeon Department of Computer Engineering Internet Computing and Network Security Laboratory Kyung Hee University Suwon South Korea Department of Environmental Atmospheric Sciences Pukyong National University South Korea KISTI Daejeon South Korea

Now-a-days, many high-end applications are turning to grid computing to meet their computational and data storage needs. High-end applications require a wide variety of computational resources as well as long time to produce the desired output. These resources should be utilized efficiently and effectively for overall performance improvement. In this paper, we present an efficient resource management architecture in grid environment using grid services. The basic technique is to monitor certain values of some parameters of grid services which provide imprecise or partial state information of the services during execution time and depending on the condition values of these parameters (specified earlier at job submission), services can be stopped at any time. Thus our architecture can save a great amount of computing resources as well as time from being wasted to produce wrong output and improves overall performance by utilizing available resources to run other services. Our proposed framework can also cope with the real- time applications. Experiment result shows that our architecture efficiently manages the computing resources and significantly saves valuable time.

关键词： Resource management Grid computing Condition monitoring computer architecture computer networks Computational modeling Timing Application software Turning Memory

来源：评论

学校读者我要写书评

暂无评论

Untitled

引用

IEEE TRANSACTIONS ON DEPENDABLE AND SECURE computing 2008年第1期5卷 4-5页

作者： Gligor, Virgil D. Formal Methods Section Center for High Assurance Computer Systems Naval Research Laboratory NRL Protocol Analyzer Internet Engineering Task Force IFIP Working Group 1.7 on Foundations of Security Analysis and Design University of Texas Austin United States Boston University IFIP WG 10.4 on Dependability Microsoft's Trustworthy Computing Academic Advisory Board

来源：评论

学校读者我要写书评

暂无评论

Efficient certificate-based signcryption scheme from bilinear pairings

引用

International Journal of computers and Applications 2008年第2期30卷 129-133页

作者： Li, F. Xin, X. Hu, Y. School of Computer Science and Engineering University of Electronic Science and Technology of China Chengdu 610054 China Department of Information and Computing Science Zhengzhou University of Light Industry Zhengzhou 450002 China Key Laboratory of Computer Networks and Information Security Xidian University Xi'an 710071 China

Signcryption is a public key cryptographic primitive that performs digital signature and public key encryption simultaneously, at lower computational costs and communication overheads than the signature-then-encryption approach. In this paper, an efficient certificate-based signcryption scheme based on bilinear pairings is proposed. As compared to traditional and identity-based signcryption schemes, the proposed scheme has the following advantages: it provides implicit certification;it does not have the private key escrow feature of identity-based signcryption schemes, we also analyze the proposed scheme from security and performance points of view.

关键词： Cryptography

来源：评论

学校读者我要写书评

暂无评论

Editorial: Dependability and security

引用

IEEE Transactions on Dependable and Secure computing 2008年第1期5卷 1-3页

作者： Iyer, Ravishankar K. Gligor, Virgil D. Kalbarczyk, Zbigniew T. Kanoun, Karama Katzenbeisser, Stefan Mukherjee, Shubu Shieh, Shiuhpyng Zorian, Yervant Department of Electrical and Computer Engineering Carnegie Mellon University Microsoft's Trusted Computing Academic Advisory Board Center for Reliable and High-Performance Computing Coordinated Science Laboratory University of Illinois Urbana-Champaign United States IEEE IEEE Computer Society LAAS CNRS IFIP Working Group 10.4 on Dependable Computing and Fault Tolerance Special Interest Group on Dependability Benchmarking IFIP Working Group 10.4 French SEE Technical Committee on Trustworthy Computer Systems SEE Working Group Design and Validation for Dependability Technical University Munich Germany Darmstadt University of Technology ACM IACR Intel's SER Tech Council Intel's Architecture Patent Committee Taiwan Information Security Center NCTU IEEE Reliability Society Taipei and Tainan IACR United States Virage Logic Corp. AT and T Bell Laboratories Logic Vision Inc. University of British Columbia IEEE Test Technology Technical Council

来源：评论

学校读者我要写书评

暂无评论

ID-based threshold proxy signcryption scheme from bilinear pairings

引用

International Journal of security and Networks 2008年第3期3卷 206-215页

作者： Li, Fagen Xin, Xiangjun Hu, Yupu School of Computer Science and Engineering University of Electronic Science and Technology of China Chengdu 610054 Sichuan China Department of Information and Computing Science Zhengzhou University of Light Industry Zhengzhou 450002 Henan China Key Laboratory of Computer Networks and Information Security Xidian University Xi'an 710071 Shaanxi China

A (t, n) threshold proxy signcryption scheme allows t or more proxy signcrypters from a designated group of n proxy signcrypters to signcrypt messages on behalf of an original signcrypter. In this paper, a new identity-based threshold proxy signcryption scheme from bilinear pairings is proposed. Our construction is based on Baek and Zheng's pairing-based verifiable secret sharing scheme and Libert and Quisquater's identity-based signcryption scheme. As compared to Wang and Liu's identity-based threshold proxy signcryption scheme, our scheme is more secure and efficient. © 2008, Inderscience Publishers.

关键词： Network security

来源：评论

学校读者我要写书评

暂无评论

Resource-aware video multicasting via access gateways in wireless mesh networks

Resource-aware video multicasting via access gateways in wir...

引用

International Conference on Network Protocols

作者： Wanqing Tu Cormac J. Sreenan Chun Tung Chou Archan Misra Sanjay Jha School of Computing and Communication Technology Glyndŵr University Wrexham UK The Mobile & Internet Systems Laboratory Department of Computer University College Cork Cork Ireland School of Computer Science and Engineering University of New South Wales Sydney Australia IBM Thomas J. Watson Research Center Hawthorne NY USA

This paper studies video multicasting in large scale areas using wireless mesh networks. The focus is on the use of internet access gateways that allow a choice of alternative routes to avoid potentially lengthy multi-hop wireless paths with low capacity. A set of heuristic-based algorithms are described that together aim to maximize network capacity: the two-tier integrated architecture algorithm, the weighted gateway uploading algorithm, the link-controlled routing tree algorithm, and the alternative channel assignment algorithm. These algorithms use different approaches to arrange multicast group members into a clustered and two-tier integrated architecture in which network protocols can make use of multiple gateways to improve system throughput. Simulation results are used to determine the performance of the different approaches.

关键词： Wireless mesh networks internet Routing Clustering algorithms Multicast algorithms Telecommunication traffic Videoconference Large-scale systems Multicast protocols Throughput

来源：评论

学校读者我要写书评

暂无评论

Leveraging identity-based cryptography for node ID assignment in structured P2P systems

Leveraging identity-based cryptography for node ID assignmen...

引用

21st International Conference on Advanced Information Networking and ApplicationsWorkshops/Symposia, AINAW'07

作者： Ryu, Sunam Butler, Kevin Traynor, Patrick McDaniel, Patrick Systems and Internet Infrastructure Security Laboratory Department of Computer Science and Engineering Pennsylvania State University University Park PA 16802

ISBN: (纸本)0769528473

Structured peer-to-peer systems have grown enormously because of their scalability, efficiency and reliability. These systems assign a unique identifier to each user and object. However, current assignment schemes allow an adversary to carefully select user IDs and/or simultaneously obtain many pseudo-identities-leading ultimately to an ability to disrupt the P2P system in very targeted (and dangerous) ways. In this paper, we propose novel ID assignment protocols based on identity-based cryptography. This approach permits the acquisition of node IDs to be tightly regulated without many of the complexities and costs associated with traditional certificate solutions. We broadly consider the security requirements of ID assignment and present three protocols representing distinct threat and trust models. A detailed empirical study of the protocols is given. Our analysis shows that the cost of our identity-based protocols is nominal, and that the associated identity services can scale to millions of users using a limited number of servers. © 2007 IEEE.

关键词： Public key cryptography

来源：评论

学校读者我要写书评

暂无评论

Protecting users from "themselves"

Protecting users from "themselves"

引用

1st ACM computer security Architectures Workshop, CSAW'07, held in association with the 14th ACM computer and Communications security Conference, CCS'07

作者： Enck, William Rueda, Sandra Schiffman, Joshua Sreenivasan, Yogesh St. Clair, Luke Jaeger, Trent McDaniel, Patrick Systems and Internet Infrastructure Security Laboratory Department of Computer Science and Engineering Pennsylvania State University University Park PA 16802 United States

ISBN: (纸本)9781595938909

computer usage and threat models have changed drastically since the advent of access control systems in the 1960s. Instead of multiple users sharing a single file system, each user has many devices with their own storage. Thus, a user's fear has shifted away from other users' impact on the same system to the threat of malice in the software they intentionally or even inadvertently run. As a result, we propose a new vision for access control: one where individual users are isolated by default and where the access of individual user applications is carefully managed. A key question is how much user administration effort would be required if a system implementing this vision were constructed. In this paper, we outline our work on just such a system, called PinUP, which manages file access on a per application basis for each user. We use historical data from our lab's users to explore how much user and system administration effort is required. Since administration is required for user sharing in PinUP, we find that sharing via mail and file repositories requires a modest amount of administrative effort, a system policy change every couple of days and a small number of user administrative operations a day. We are encouraged that practical administration on such a scale is possible given an appropriate and secure user approach. © 2007 ACM.

关键词： Access control

来源：评论

学校读者我要写书评

暂无评论

Optimal Selection and Activation of Intrusion Detection Agents for Wireless Sensor Networks

Optimal Selection and Activation of Intrusion Detection Agen...

引用

International Conference on Future Generation Communication and Networking (FGCN)

作者： Tran Hoang Hai Eui Nam Huh Internet Computing and Security Laboratory Department of Computer Engineering Kyung Hee University South Korea

ISBN: (纸本)9780769530482;0769530486

Intrusion detection is an efficient method against attacks in computer network and system. Most intrusion detection system for sensor networks and ad hoc networks are based on the cooperative of intrusion detection agents and suffered from a computation and memory usage overload. In this paper, we address this problem by proposing two algorithms to optimal select and activate the intrusion detection agents for sensor networks.

关键词： Intrusion detection Wireless sensor networks Ad hoc networks computer networks Intelligent sensors Sensor phenomena and characterization Condition monitoring IP networks computer security Laboratories

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：