检索结果-内蒙古大学图书馆

2011 4th IEEE International Conference on computer Science and information Technology(ICCSIT 2011)

作者： Yao Linlin Wang Yong He Qian Zhou Qinglun School of Computer and Engineering Guilin University of Electronic Technology Guangxi Key Lab of Information and Communications Technology Guilin University of Electronic Technology Network Center Guilin University of Electronic Technology

ISBN: (纸本)9781612848334

The traditional Firewall and Intrusion Detection System(IDS) working at the network layer can’t fully understand the application layer protocols, and there must be some omissions and errors about SQL Injection, cross site scripting attacks (XSS), privacy leaks and so on. In this paper, a reverse proxy architecture based web intrusion prevention system (RPWIPS) is designed and implemented, and the mechanism and key technologies of RPWIPS are given. It can be deployed on multi-platform. Remote agent and deep detection are used to check all the requests from the client and responses of web servers. Results show that the system can protect website effectively, prevent intrusions and privacy leaks very well, and the average delay is low.

关键词： reverse proxy Web Intrusion Prevention application layer HTTP protocol

来源：评论

学校读者我要写书评

暂无评论

Distributed lite CA key management scheme in mobile Ad Hoc networks

引用

Sichuan Daxue Xuebao (Gongcheng Kexue Ban)/Journal of Sichuan University (Engineering Science Edition) 2011年第6期43卷 133-139页

作者： Han, Lei Liu, Ji-Qiang Zhao, Jia Wei, Xue-Ye School of Electronics and Info. Eng. Beijing Jiaotong Univ. Beijing 100044 China School of Computer and Info. Technol. Beijing Jiaotong Univ. Beijing 100044 China Key Lab. of Network Security and Cryptology Fujian Normal Univ. Fuzhou 35007 China

In order to solve the problem of asymmetric key management in mobile ad hoc networks, a new distributed asymmetric key management scheme based on lite CA public key authentication framework and Shamir secret sharing scheme was presented. The public key could be certified locally by the mechanism of distributed lite CA certification authentication and so the certification management was not need in the scheme. It also avoided the inherent key escrow problem in identity-based cryptography to combine with the advantages of certificateless public key cryptography and provided the ability to resist the public key substitution attacks. security analysis and experiment results showed that the scheme is secure and efficient in implementation.

关键词： Mobile ad hoc networks

来源：评论

学校读者我要写书评

暂无评论

A security testing approach for WSN protocols based on object-oriented attack model

A security testing approach for WSN protocols based on objec...

引用

International Conference on Computational Intelligence and security

作者： Yue Qi Qingqi Pei Yong Zeng Chao Yang Shu-po Bu State Key Laboratory of Integrated Service Networks Xidian University Xi'an China Key Laboratory of Computer Networks and Information Security of Ministry of Education China Key Lab. of Comput. Networks & Inf. Security Minist. of Educ. Guangzhou China Department of Electronic Engineering Suzhou Institute of Industrial Technology Suzhou China

In this paper, we propose an object-oriented attack model to represent a protocol attack in WSN detailedly. The model describes multiple attributes of an attack, including its principle, impact, interdependent relationships with other attacks, etc. Then, on the basis of the attack model and the FSM description method, we present a security testing approach for WSN protocols, in order to evaluate the security of the tested protocols. Finally, we take the TinyPK protocol and Sybil attack for example to implement our design, and the Protocol security Testing Report shows as expected that the TinyPK cannot resist the Sybil attack. Thus, the security testing approach proposed is feasible.

关键词： Protocols Wireless sensor networks Object oriented modeling Testing Authentication Availability

来源：评论

学校读者我要写书评

暂无评论

Blind Carrier Frequency Offset Estimation for MIMO OFDMA Uplink

Blind Carrier Frequency Offset Estimation for MIMO OFDMA Upl...

引用

2011 IEEE Global Telecommunications Conference - GLOBECOM 2011

作者： Weile Zhang H. Chen Qinye Yin T. Ohtsuki MOE Key Laboratory for Intelligent Networks and Network Security Xi'an Jiaotong University Xi'an China The State Key Laboratory of Integrated Services Networks Xidian University China Institute of Industrial Science University of Tokyo Tokyo Japan Department of Information and Computer Science Keio University Yokohama Japan

In this paper, we develop a new subspace based multiuser carrier frequency offset (CFO) estimation scheme for multi-input multi- output (MIMO) orthogonal frequency division multiple access (OFDMA) uplink transmission. We exploit the rank reduction approach by equipping multiple antennas at the receiver, in which the CFO of each user is derived blindly using one dimension (1-D) search individually. The proposed scheme supports the generalized subcarrier assignment scheme and full loaded transmission with all subcarriers being allocated to users. Numerical results are provided to corroborate the proposed studies.

关键词： Estimation OFDM Vectors Frequency estimation Receiving antennas Signal to noise ratio Synthetic aperture sonar

来源：评论

学校读者我要写书评

暂无评论

Runtime-Based Boot Components Re-measurement Scheme for Trusted Platform

Runtime-Based Boot Components Re-measurement Scheme for Trus...

引用

2011 International Conference on Informatics,Cybernetics,and computer Engineering(ICCE 2011)

作者： Peng Weiping Zhou Yajian Wang Cong Yang Yixian Key Laboratory of Network and Information Attack & Defence Technology of MOE Beijing University of Posts and Telecommunications School of Computer Science and Technology Henan Polytechnic University Information Security Center State Key Laboratory of Networking and Switching TechnologyBeijing University of Posts and Telecommunications National Engineering Laboratory for Disaster Backup and Recovery Beijing University of Posts and Telecommunications

Integrity measurement is just one of the most important features in a trusted computing platform to provide evidence of platform configuration and behavior. Each set of software instructions(binary code) is measured and recorded before it is executed. Especially, all of boot components which be recorded in pre-boot stage can't be re-measured until the platform is rebooted. However, the reality is that many components belong to pre-boot stage, such as BIOS, Boot Loader and MBR, are easily modified or updated in runtime environment. If these updated results of components are treated as configuration requirements for a remote server-side to verify the access request, the remote network access connection will fail. It must restart the host to re-measure there components, and the result of the new measure is not guaranteed right absolutely. We solve this problem by embedding Integrity Measurement Agency Component(IMAC) which has the capability of monitoring transformation, verifying credibility, updating Platform Configuration Registers and recording integrity measurement logs in Linux kernel. The result of performance analysis demonstrates that the method is feasible and credible.

关键词： Trusted Computing Boot Components PCR Integrity measurement Agency Component

来源：评论

学校读者我要写书评

暂无评论

Recent advances in cloud security

引用

Journal of computers 2011年第10期6卷 2156-2163页

作者： Wu, Jiyi Shen, Qianli Wang, Tong Zhu, Ji Zhang, Jianlin Key Lab of E-Business and Information Security Hangzhou Normal University Hangzhou China School of Computer Science and Technology Zhejiang University Hangzhou China Alibaba Business School Hangzhou Normal University Hangzhou China Information and Communication Engineering College Harbin Engineering University Harbin 150001 China

Cloud computing emerges as a new computing paradigm which aims to provide reliable, customized and QoS guaranteed dynamic computing environments for endusers. Although cloud computing industry promises tremendous prospects of market growth, for users of cloud services, cloud computing has a wide range of potential risks and safety issues. This article gives a quick introduction to cloud security. It covers the key technologies of cloud computing, security challenge and problem in cloud computing, recent advances in cloud security. © 2011 ACADEMY PUBLISHER.

关键词： Quality of service

来源：评论

学校读者我要写书评

暂无评论

Cryptanalysis and Improvement of a Quantum Secret Sharing Protocol between Multiparty and Multiparty with Single Photons and Unitary Transformations

引用

Chinese Physics Letters 2010年第6期27卷 13-15页

作者： ZHU Zhen-Chao ZHANG Yu-Qing Key Lab of Computer Networks and Information Security of Ministry of Education Xidian University Xi'an 710071 National Computer Network Intrusion Protection Center Graduate University Chinese Academy of Sciences Beijing 100049

In a recent paper [Chin. Phys. Lett 25（2008）1187], a quantum secret sharing scheme between multiparty and multiparty was presented. We show that the protocol is not secure because the last member in Alice＇s group can illegally obtain most secret messages without introducing any error. Finally, a possible way to avoid the security flaw is suggested.

关键词： CRYPTOGRAPHY QUANTUM communication UNITARY transformations ERROR analysis (Mathematics) security systems

来源：评论

学校读者我要写书评

暂无评论

Multi-User Private keyword Search for Cloud Computing

Multi-User Private Keyword Search for Cloud Computing

引用

IEEE International Conference on Cloud Computing Technology and Science (CloudCom)

作者： Yanjiang Yang Haibing Lu Jian Weng Institute for Infocomm Research Singapore Department of Operations Management and Information Systems The Leavey School of Business Santa Clara University USA State Key Laboratory of Networking and Switching Technology Beijing University of Posts and Telecommunications China Department of Computer Science and Emergency Technology Research Center of Risk Department of Computer Science and Emergency Technology Research Center of Risk Evaluation and Prewarning on Public Network Security Jinan University Guangzhou China State Key Laboratory of Information Security Institute of Software Chinese Academy of Sciences China

Enterprises outsourcing their databases to the cloud and authorizing multiple users for access represents a typical use scenario of cloud storage services. In such a case of database outsourcing, data encryption is a good approach enabling the data owner to retain its control over the outsourced data. Searchable encryption is a cryptographic primitive allowing for private keyword based search over the encrypted database. The above setting of enterprise outsourcing database to the cloud requires multi-user searchable encryption, whereas virtually all of the existing schemes consider the single-user setting. To bridge this gap, we are motivated to propose a practical multi-user searchable encryption scheme, which has a number of advantages over the known approaches. The associated model and security requirements are also formulated. We further discuss to extend our scheme in several ways so as to achieve different search capabilities.

关键词： Encryption Indexes keyword search Cloud computing

来源：评论

学校读者我要写书评

暂无评论

A General Sharing Model Based on Proxy Re-encryption

A General Sharing Model Based on Proxy Re-encryption

引用

International Conference on Intelligent information Hiding and Multimedia Signal Processing (IIHMSP)

作者： Guojun Ma Qingqi Pei Yuchen Wang Xiaohong Jiang The State Key Laboratory of Integrated Services Networks Xidian University Xi'an China School of Electronic Engineering University of Electronic Science and Technology of China Chengdu China Key Lab of Computer Networks and Information Security of Ministry of Education Xidian University Xi'an China

Content sharing is one of the most significant issues of Digital Rights Management (abbr. DRM). Various schemes for content sharing have been presented in the past years. However, the main goals of these schemes are to solve portability problems instead of rational sharing between different users who are not family members. In this work, we propose an initial step toward this rational sharing and present a general sharing model based on proxy re-encryption. Our model can support the flexible sharing mechanism, with which the user can choose any of the purchased content to share with any legal device, and the content provider can know and limit the number of sharing devices to achieve some novel DRM policies such as pay-per-sharing. To our best knowledge, our sharing model is the first model for content sharing between different users' devices who are not family members using proxy re-encryption. With rational applications, our model can benefit for both the user and content provider to achieve win-win development.

关键词： Licenses Public key Computational modeling Encryption Educational institutions Law

来源：评论

学校读者我要写书评

暂无评论

Modeling of failure detector based on message delay prediction mechanism

Journal of Software

引用

Journal of Software 2011年第9期6卷 1821-1828页

作者： Liu, Bin Yang, Shifei Shi, Lei Ding, Xiaoguang Zhang, Qian Shengda Economics Trade and Management College Zhengzhou University Zhengzhou 451191 China School of Information Engineering Zhengzhou University Zhengzhou 450001 China School of Computer Science and Technology Beijing Institute of Technology Beijing 100081 China Henan Provincial Key Lab on Information Network Zhengzhou 450052 China

Failure detection is a key technology in tolerant system. Failure detectors without adaptive mechanism cannot meet the requirements of QOS (quality of service) of applications because of the variations of the network in actual distributed system. Adaptive failure detectors should dynamically adjust the detecting quality according to the variations of the real-time state of the network. Assuming that the delay and loss of the messages is a random probability, a failure detection model based on the predicted message delay is proposed in this paper. A PAC-AFD adaptive failure detection algorithm is realized based on the above model which is on the basis of the prediction from historical message delay and contains checking idea. Experimental results show that the algorithm can relieve the effect of the delay and loss of the message on the failure detection while ensuring the accuracy and completeness of detection. © 2011 ACADEMY PUBLISHER.

关键词： Quality of service

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：