检索结果-内蒙古大学图书馆

ivannikov Memorial Workshop (IVMEM)

作者： Mikhail Lebedev Pavel Belecky Plekhanov Russian University of Economics Moscow Russia Ivannikov Institute for System Programming of the RAS Moscow Russia

ISBN: (纸本)9781665423281

During the recent years artificial neural networks have become a great part of everyday life. One of the big problems in AI is acceleration of neural network inference using different hardware: from CPUs and GPUs to FPGAs and ASICs. Many open-source tools have been proposed for this purpose. This article contains a review of a range of open-source tools for neural network optimization, acceleration and hardware synthesis. Tools of three types have been chosen for evaluation: 1) translating neural network models into synthesizable C; 2) accelerating neural network models using custom hardware accelerators; 3) synthesizing Verilog from neural network models. Some of the tools have been tested using five simple neural network examples. Intel CPU, NVIDIA GPU and Cyclone V FPGA hardware platforms have been used for evaluation. Results show that the tested tools can successfully process neural network models and optimize them for CPU and GPU execution, whereas FPGA execution results are controversial.

关键词： Conferences Graphics processing units Artificial neural networks Cyclones Artificial intelligence Hardware design languages Field programmable gate arrays

来源：评论

学校读者我要写书评

暂无评论

Strong Optimistic Solving for Dynamic Symbolic Execution

arXiv

引用

arXiv 2022年

作者： Parygina, Darya Vishnyakov, Alexey Fedotov, Andrey Ivannikov Institute for System Programming of the RAS Russia Lomonosov Moscow State University Moscow Russia

Dynamic symbolic execution (DSE) is an effective method for automated program testing and bug detection. It is increasing the code coverage by the complex branches exploration during hybrid fuzzing. DSE tools invert the branches along some execution path and help fuzzer examine previously unavailable program parts. DSE often faces over- and underconstraint problems. The first one leads to significant analysis complication while the second one causes inaccurate symbolic execution. We propose strong optimistic solving method that eliminates irrelevant path predicate constraints for target branch inversion. We eliminate such symbolic constraints that the target branch is not control dependent on. Moreover, we separately handle symbolic branches that have nested control transfer instructions that pass control beyond the parent branch scope, e.g. return, goto, break, etc. We implement the proposed method in our dynamic symbolic execution tool Sydr. We evaluate the strong optimistic strategy, the optimistic strategy that contains only the last constraint negation, and their combination. The results show that the strategies combination helps increase either the code coverage or the average number of correctly inverted branches per one minute. It is optimal to apply both strategies together in contrast with other configurations. © 2022, CC BY-NC-ND.

关键词： Security of data

来源：评论

学校读者我要写书评

暂无评论

A Study of Graph Neural Networks for Link Prediction on Vulnerability to Membership Attacks

引用

Journal of Mathematical Sciences (United States) 2024年第2期285卷 234-244页

作者： Shaikhelislamov, D. Lukyanov, K. Severin, N. Drobyshevskiy, M. Makarov, I. Turdakov, D. Ivannikov Institute for System Programming of the Russian Academy of Sciences Moscow Russian Federation Moscow Institute of Physics and Technology (National Research University) Moscow Russian Federation HSE University Moscow Russian Federation ISP RAS Research Center for Trusted Artificial Intelligence Moscow Russian Federation

Graph neural networks (GNNs) have shown great promise in a variety of tasks involving graph data, including recommendation systems. However, as GNNs become more widely adopted in practical applications, concerns have arisen about their vulnerability to adversarial attacks. These attacks can lead to biased recommendations, potentially causing economic losses and safety risks. In this work, we consider an industrial application of recommendation systems for transport logistics and study their vulnerability to membership inference attacks. The dataset represents real train flows in Russia, published in the ETIS project. Experiments with three popular GNN architectures show that all of them can be successfully attacked even when the adversary has minimal background knowledge. Specifically, an attacker with access to only 1-2% of the actual data can successfully train their own GNN model to infer the membership of a shipper-consignee association in the training set with an accuracy over 94%. Our study also confirms that overfitting is the primary factor that influences the attack performance of recommendation systems. © The Author(s), under exclusive licence to Springer Nature Switzerland AG 2024.

关键词：

来源：评论

学校读者我要写书评

暂无评论

LibAFL-DiFuzz: Advanced Architecture Enabling Directed Fuzzing

LibAFL-DiFuzz: Advanced Architecture Enabling Directed Fuzzi...

引用

ivannikov ISPras Open Conference (ISPras)

作者： Darya Parygina Timofey Mezhuev Daniil Kuts Ivannikov Institute for System Programming of the RAS Moscow Russia Lomonosov Moscow State University Moscow Russia

ISBN: (数字)9798331526023

ISBN: (纸本)9798331526030

Directed fuzzing performs best for targeted program testing via estimating the impact of each input in reaching predefined program points. But due to insufficient analysis of the program structure and lack of flexibility and configurability it can lose efficiency. In this paper, we enhance directed fuzzing with context weights for graph nodes and resolve indirect edges during call graph construction. We construct flexible tool for directed fuzzing with components able to be easily combined with other techniques. We implement proposed method in three separate modules: DiFuzzLLVM library for graph construction and indirect calls resolving, DiFuzz static analysis tool for processing program graphs and computing proximity metrics, and LibAFL-DiFuzz directed fuzzer based on LibAFL fuzzing library. We create additional LibAFL modules for enabling custom power scheduling and static instrumentation. We evaluate indirect calls resolving and get increase in directed fuzzing efficiency for reaching deeper target points. We evaluate context weights contribution and get benefits in TTE and scheduling iterations number. We evaluate our fuzzer in comparison with AFLGo and BEACON, and reveal speedup in time to exposure on several benchmarks. Furthermore, our tool implements some important usability features that are not available in mentioned tools: target points detection, multiple target points support, etc.

关键词： Measurement Processor scheduling Instruments Image edge detection Prototypes Static analysis Fuzzing Libraries Service-oriented architecture Usability

来源：评论

学校读者我要写书评

暂无评论

Using open source software for solving aeroelasticity case for wind turbine blade 6

Using open source software for solving aeroelasticity case f...

引用

6th ECCOMAS European Conference on Computational Mechanics: Solids, Structures and Coupled Problems, ECCM 2018 and 7th ECCOMAS European Conference on Computational Fluid Dynamics, ECFD 2018

作者： Lukashin, Pavel S. Melnikova, Valeriia G. Shcheglov, Georgy A. Strijhak, Sergei V. Bauman Moscow State Technical University 5/1 2-nd Baumanskaya st. Moscow105005 Russia Ivannikov Institute for System Programming of the RAS 25 Alexander Solzhenitsyn st. Moscow109004 Russia

ISBN: (纸本)9788494731167

Due to the development of Wind Energy and construction of new wind farms in the Russian Federation and Europe there is a need for solution of application-oriented problems and development of effective methods for numerical modelling of wind turbine's elements. One of the directions for computational continuous mechanics is connected with problems in aeroelasticity (fluid-structure interaction). The possibility of solving one of the problem in aeroelasticity using a complex program approach on the basis of open source software OpenFOAM and Code_Aster is shown in this article. On the example of the blade for wind turbine, which has 61.5 meters long, the techniques of solving problem for a static and dynamic aeroelasticity in which flow simulation of the blade with a subsonic air flow is done in OpenFOAM library (solvers simpleFoam and pimpleFoam) are considered. The calculation of the stress-strain state of the blade is done in Code_Aster. The flowcharts for four different approaches for solving problems of aeroelasticity are provided in article. The finite-volume mesh consisting hexahedral elements, the total number is about 400000 elements, for simulation of the flow around the blade is created in OpenFOAM library, the finite-element mesh consisting of triangular shell elements of first order, the total number is 7714, for calculation of the stress-strain state is created in Salome-Meca. The results of analysis are provided in the form of pressure and velocities fields;projections of aerodynamic force from time;displacement and stress diagrams;the values of pressure for two points on the surface of the blade and displacement of the tip of the blade from time. The calculations are run using resources of UniHUB web-laboratory ISPras. Copyright © Crown copyright (2018).All right reserved.

关键词： Fluid structure interaction

来源：评论

学校读者我要写书评

暂无评论

Casr-Cluster: Crash Clustering for Linux Applications

arXiv

引用

arXiv 2021年

作者： Savidov, Georgy Fedotov, Andrey Ivannikov Institute for System Programming of the RAS Moscow Russia Lomonosov Moscow State University Moscow Russia

Crash report analysis is a necessary step before developers begin fixing errors. Fuzzing or hybrid (with dynamic symbolic execution) fuzzing is often used in the secure development lifecycle. Modern fuzzers could produce many crashes and developers do not have enough time to fix them till release date. There are two approaches that could reduce developers’ effort on crash analysis: crash clustering and crash severity estimation. Crash severity estimation could help developers to prioritize crashes and close security issues first. Crash clustering puts similar crash reports in one cluster what could speed up the analyzing time for all crash reports. In this paper, we focus on crash clustering. We propose an approach for clustering and deduplicating of crashes that occurred in Linux applications. We implement this approach as a tool that could cluster Casr [1] crash reports. We evaluated our tool on a set of crash reports that was collected from fuzzing results. © 2021, CC BY-NC-ND.

关键词： Life cycle

来源：评论

学校读者我要写书评

暂无评论

Verifying cryptographic protocols by Tamarin Prover

Verifying cryptographic protocols by Tamarin Prover

引用

ivannikov Memorial Workshop (IVMEM)

作者： Evgenii Vinarskii Alexey Demakov Alexander Kamkin Nina Yevtushenko Lomonosov Moscow State University Moscow Russia Ivannikov Institute for System Programming of the RAS Moscow Russia Ivannikov Institute for System Programming of the RAS Moscow Institute of Physics and Technology Higher School of Economics Moscow Russia Higher School of Economics Moscow Russia

ISBN: (数字)9781728190884

ISBN: (纸本)9781728190891

Cryptographic protocols are utilized for establishing a secure session between “honest” agents which communicate strictly according to the protocol rules as well as for ensuring the authenticated and confidential transmission of messages. The specification of a cryptographic protocol is usually presented as a set of requirements for the sequences of transmitted messages including the format of such messages. Note that protocol can describe several execution scenarios. All these requirements lead to a huge formal specification for a real cryptographic protocol and therefore, it is difficult to verify the security of the whole cryptographic protocol at once. In this paper, to overcome this problem, we suggest verifying the protocol security for its fragments. Namely, we verify the security properties for a special set of so-called traces of the cryptographic protocol. Intuitively, a trace of the cryptographic protocol is a sequence of computations, value checks, and transmissions on the sides of “honest” agents permitted by the protocol. In order to choose such set of traces, we introduce an Adversary model and the notion of a similarity relation for traces. We then verify the security properties of selected traces with Tamarin Prover. Experimental results for the EAP and Noise protocols clearly show that this approach can be promising for automatic verification of large protocols.

关键词： Planing Computational modeling Complexity theory Security Formal specifications Cryptography Cryptographic protocols

来源：评论

学校读者我要写书评

暂无评论

A Comprehensive Approach to Finding Resource Leaks via Static Analysis

A Comprehensive Approach to Finding Resource Leaks via Stati...

引用

ivannikov ISPras Open Conference (ISPras)

作者： Nikita Malyshev Alexey Borodin Andrey Belevantsev Ivannikov Institute for System Programming of the RAS Moscow Russia Lomonosov Moscow State University Moscow Russia

ISBN: (数字)9798331526023

ISBN: (纸本)9798331526030

In the last 15 years many dedicated leak detection tools utilizing novel approaches were designed. Unfortunately, most of them are hard to implement and fully utilize in the scope of a multi-purpose industrial analyzer. In this paper we present a full-fledged approach to static analysis through the lens of resource leak detection. We show how general analysis architecture without much of a focus for specific defects can still be effective at finding leaks both in terms of performance and number of warnings. We briefly describe an overall structure of the Svace static analyzer and how it achieves context and path sensitivities as well as interprocedurality, while allowing for checking many program properties and being highly extensible. We also show how to use this system to implement leak detection algorithm with including a few unique extensions that we have never seen in other instruments. Our test results show a low false positive rate, relatively good performance for a multi-detector static analyzer and great scalability potential both in terms of adding new algorithms and analyzing millions of lines of code.

关键词： Codes Sensitivity Instruments Source coding Scalability Merging Memory management Static analysis Libraries Leak detection

来源：评论

学校读者我要写书评

暂无评论

Static Analysis for Go: Build Interception

Static Analysis for Go: Build Interception

引用

ivannikov ISPras Open Conference (ISPras)

作者： Varvara Dvortsova Alexey Izbyshev Alexey Borodin Andrey Belevantsev Ivannikov Institute for System Programming of the RAS Moscow Russia Lomonosov Moscow State University Moscow Russia

This paper presents a method for build interception of Go projects and utilizing the intercepted information for building an intermediate representation used in a static analyzer. The paper discusses two approaches: handling invocations of the higher-level go build command and handling invocations of the lower-level compile tool. The second solution is applicable not only to the built-in Go build system but also to other build systems that directly utilize the low-level compile tool, such as Bazel, Please, Pants. It also covers compilations involving CGO.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Sydr-Fuzz: Continuous Hybrid Fuzzing and Dynamic Analysis for Security Development Lifecycle

Sydr-Fuzz: Continuous Hybrid Fuzzing and Dynamic Analysis fo...

引用

ivannikov ISPras Open Conference (ISPras)

作者： Alexey Vishnyakov Daniil Kuts Vlada Logunova Darya Parygina Eli Kobrin Georgy Savidov Andrey Fedotov Ivannikov Institute for System Programming of the RAS Moscow Institute of Physics and Technology Moscow Russia Lomonosov Moscow State University

Nowadays automated dynamic analysis frameworks for continuous testing are in high demand to ensure software safety and satisfy the security development lifecycle (SDL) requirements. The security bug hunting efficiency of cutting-edge hybrid fuzzing techniques outperforms widely utilized coverage-guided fuzzing. We propose an enhanced dynamic analysis pipeline to leverage productivity of automated bug detection based on hybrid fuzzing. We implement the proposed pipeline in the continuous fuzzing toolset Sydr-Fuzz which is powered by hybrid fuzzing orchestrator, integrating our DSE tool Sydr with libFuzzer and AFL++. Sydr-Fuzz also incorporates security predicate checkers, crash triaging tool Casr, and utilities for corpus minimization and coverage gathering. The benchmarking of our hybrid fuzzer against alternative state-of-the-art solutions demonstrates its superiority over coverage-guided fuzzers while remaining on the same level with advanced hybrid fuzzers. Furthermore, we approve the relevance of our approach by discovering 85 new real-world software flaws within the OSS-Sydr-Fuzz project. Finally, we open Casr source code to the community to facilitate examination of the existing crashes.

关键词： Productivity Source coding Pipelines Computer bugs Fuzzing Benchmark testing Minimization

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：