检索结果-内蒙古大学图书馆

2012 IEEE 2nd International Conference on Cloud Computing and Intelligence Systems

作者： Jian Li Danjie Song Sicong Chen Xiaofeng Lu School of Computer Beijing University of Posts and Telecommunications Network and Data Security Key Laboratory of Sichuan Province University of Electronic Science and Technology of China

With continuous expansion of cloud computing, problems of third-party data security become increasingly prominent. However, effective retrieval of encrypted data and other operations are difficult to achieve by traditional cryptogram systems. Thus, a practical simple fully homomorphic encryption scheme, using only elementary modular arithmetic, derived from Gentry cryptosystem is put forward to ensure the privacy-preserving in cloud storage, in which encrypted data can be operated directly without affecting the confidentiality of the encryption systems, so that it can excellently realize the need of cipertext retrieval and other processing in untrusted servers. Compared with the previous protocols Marten van Dijk et al. proposed at Advances in Cryptology-EUROCRYPT 2010 and Craig Gentry proposed in the March 2010 issue of Communications of the ACM, especially in the aspect of cipertext retrieval, the proposed scheme is much more secure and feasible. And the performance evaluation and security analysis demonstrate the practice and validity of the proposed scheme.

关键词： Cloud computing fully homomorphic encryption Ciphertext retrieval data security

来源：评论

学校读者我要写书评

暂无评论

An efficient two-stage level set segmentation framework for overlapping plant leaf image

An efficient two-stage level set segmentation framework for ...

引用

8th International Conference on Intelligent Computing technology, ICIC 2012

作者： Wang, Xiao-Feng Min, Hai Key Lab. of Network and Intelligent Information Processing Department of Computer Science and Technology Hefei University Hefei Anhui 230022 China Intelligent Computing Lab. Hefei Institute of Intelligent Machines Chinese Academy of Sciences P.O.Box 1130 Hefei Anhui 230031 China Department of Automation University of Science and Technology of China Hefei Anhui 230027 China

ISBN: (纸本)9783642315879

In this paper, an efficient two-stage segmentation framework was proposed to address the plant leaf image with overlapping phenomenon, which is built based on the leaf approximate symmetry and level set evolution theory. In the pre-segmentation stage, a straight line was manually set on the target leaf to approximate the principal leaf vein and the Local Chan-Vese (LCV) model was used on the global image region to help searching the so-called un-overlapping contour in target leaf. In the formal segmentation stage, the symmetry detection was performed based on the pre-defined approximated principal vein to obtain the narrow-band evolution region and the second initial contour. Next, the LCV model was once again used to find the complete target leaf contour in the narrow-band evolution region. Finally, experiments on some real leaf images with overlapping phenomenon have demonstrated the efficiency and robustness of the proposed segmentation framework. © 2012 Springer-Verlag.

关键词： Image segmentation

来源：评论

学校读者我要写书评

暂无评论

A dynamic programming algorithm for QoS-aware replica placement in distributed caching systems

引用

Journal of Convergence Information technology 2012年第12期7卷 226-234页

作者： Wang, Biyao Wang, Jinlin Liu, Xue The Key Lab of Network Communication System and Control The Chinese Academy of Sciences The Key Lab of Network Communication System and Control Anhui Department of Automation University of Science and Technology China National Network New Media Engineering Research Center Institute of Acoustics Chinese Academy of Sciences China

The rapid growth of new information services, especially like new media services, providing content distribution to clients with good quality of service(QoS) while retaining efficient is a great challenge. This paper investigates the QoS-aware replica placement problem (QRPP) for distributed caching system. We propose a dynamic programming algorithm for the problem in general graph, it first ensures the QoS requirement is satisfied of each request, then places the replica along the request forward path to minimize the total cost. The simulation results show the dynamic programming algorithm can achive a good balance between the access latency and the requested availability. When the request is more concentrated, the dynamic programming algorithm can have better performance than the MODULO and LRU both in access latency and requested availability.

关键词： Dynamic programming

来源：评论

学校读者我要写书评

暂无评论

On the resistance of Boolean functions against fast algebraic attacks

On the resistance of Boolean functions against fast algebrai...

引用

14th International Conference on Information Security and Cryptology, ICISC 2011

作者： Du, Yusong Zhang, Fangguo Liu, Meicheng School of Information Science and Technology Sun Yat-sen University Guangzhou 510006 China Key Lab. of Network Security and Cryptology Fujian Normal University Fuzhou 350007 China State Key Laboratory of Information Security Institute of Software Chinese Academy of Sciences Beijing 100190 China

ISBN: (纸本)9783642319112

Boolean functions with large algebraic immunity resist algebraic attacks to a certain degree, but they may not resist fast algebraic attacks (FAA's). It is necessary to study the resistance of Boolean functions against FAA's. In this paper, we localize the optimal resistance of Boolean functions against FAA's and introduce the concept of e-fast algebraic immunity (e-FAI) for n-variable Boolean functions against FAA's, where e is a positive integer and . We give the sufficient and necessary condition of e-FAI. With e-FAI the problem of deciding the resistance of an n-variable Boolean function against FAA's can be converted into the problem of observing the properties of one given matrix. An algorithm for deciding e-FAI and the optimal resistance against FAA's is also described. © 2012 Springer-Verlag.

关键词： Boolean functions

来源：评论

学校读者我要写书评

暂无评论

Fully secure unidirectional identity-based proxy re-encryption

Fully secure unidirectional identity-based proxy re-encrypti...

引用

14th International Conference on Information Security and Cryptology, ICISC 2011

作者： Luo, Song Shen, Qingni Chen, Zhong College of Computer Science and Engineering Chongqing University of Technology Chongqing China School of Software and Microelectronics MoE Key Lab. of Network and Software Assurance Peking University Beijing China Institute of Software School of Electronics Engineering and Computer Science Peking University China Ministry of Education China

ISBN: (纸本)9783642319112

Proxy re-encryption (PRE) allows the proxy to translate a ciphertext encrypted under Alice's public key into another ciphertext that can be decrypted by Bob's secret key. Identity-based proxy re-encryption (IB-PRE) is the development of identity-based encryption and proxy re-encryption, where ciphertexts are transformed from one identity to another. In this paper, we propose two novel unidirectional identity-based proxy re-encryption schemes, which are both non-interactive and proved secure in the standard model. The first scheme is a single-hop IB-PRE scheme and has master secret security, allows the encryptor to decide whether the ciphertext can be re-encrypted. The second scheme is a multi-hop IB-PRE scheme which allows the ciphertext re-encrypted multiple times but without the size of ciphertext growing linearly as previous multi-hop IB-PRE schemes. © 2012 Springer-Verlag.

关键词： Security of data

来源：评论

学校读者我要写书评

暂无评论

Alliance-Authentication Protocol in Clouds Computing Environment

引用

China Communications 2012年第7期9卷 42-54页

作者： Zhang Qikun Li Yuanzhang Song Danjie Tan Yuan School of Computer Science and Technology Beijing Institute of Technology Beijing 100081 P. R. China Network and Data Security Key Laboratory of Sichuan Province University of Electronic Science and Technology ofChina Chengdu 610054 P. R. China School of Computer Beijing University of Posts and Telecommunications Beijing 100876 P. R. China

Security has been regarded as one of the hardest problems in the development of cloud computing. This paper proposes an AllianceAuthentication protocol among Hybrid Clouds that include multiple private clouds and/or public clouds. Mu tual authentication protocol among entities in the IntraCloud and InterCloud is proposed. Blind signature and bilinear mapping of automorphism groups are adopted to achieve the InterCloud Alli anceAuthentication, which overcome the complexi ty of certificate transmission and the problem of communication bottlenecks that happen in tradi tional certificatebased scheme. Blind key, instead of private key, is adopted for register, which avoids

关键词： Alliance-Authentication direct product decomposition bilinear mapping cloud computing

来源：评论

学校读者我要写书评

暂无评论

引用

2nd World Congress on Computer science and Information Engineering, CSIE 2011

作者： Wang, Haiyan Wang, Ying Yue, Xiwen College of Computer Science Nanjing University of Posts and Telecommunications Nanjing 210003 Jiangsu China Jiangsu High Technology Research Key Laboratory for Wireless Sensor Networks Nanjing 210003 Jiangsu China Key Lab. of Broadband Wireless Communication and Sensor Network Technology Nanjing University of Posts and Telecommunications Ministry of Education Jiangsu Province Nanjing 210003 Jiangsu China

ISBN: (纸本)9783642257650

A novel trust transmission method which is based on the similarities of nodes in trust models is proposed in this paper. Trust transmission is evaluated by calculating the similarity between recommenders when trustor does not have direct interaction with trustee. However, when there does not have direct recommenders, trust transmission is realized by guaranteed trust chains. Simulation results show that the proposed method improves the trustworthiness of node behavior to some extent and is practical especially in case when nodes do not know each other. © Springer-Verlag Berlin Heidelberg 2012.

关键词： network security

来源：评论

学校读者我要写书评

暂无评论

Research on Separation of Three Powers Architecture for Trusted OS

引用

Physics Procedia 2012年 25卷 1168-1175页

作者： Yu Li Yong Zhao Siyuan Xin College of Computer Science and Technology Beijing University of Technology Beijing 100124 China Key Lab of Information Network Security Ministry of Public Security Shanghai 201204 China Institute of Electronic Technology the PLA Information Engineering University

The privilege in the operating system (OS) often results in the break of confidentiality and integrity of the system. To solve this problem, several security mechanisms are proposed, such as Role-based Access Control, Separation of Duty. However, these mechanisms can not eliminate the privilege in OS kernel layer. This paper proposes a Separation of Three Powers Architecture (STPA). The authorizations in OS are divided into three parts: System Management Subsystem (SMS), Security Management Subsystem (SEMS) and Audit Subsystem (AS). Mutual support and mutual checks and balances which are the design principles of STPA eliminate the administrator in the kernel layer. Furthermore, the paper gives the formal description for authorization division using the graph theory. Finally, the implementation of STPA is given. Proved by experiments, the Separation of Three Powers Architecture we proposed can provide reliable protection for the OS through authorization division.

关键词： Separation of Three Powers Architecture Authorization Graph Separation of Privilege Trusted Operating System

来源：评论

学校读者我要写书评

暂无评论

WSSecTool: A web service security analysis tool based on program slicing

WSSecTool: A web service security analysis tool based on pro...

引用

2012 IEEE 8th World Congress on Services, SERVICES 2012

作者： Fu, Wei Zhang, Yingzhou Zhu, Xianting Qian, Junyan College of Computer Nanjing University of Posts and Telecommunications Nanjing Jiangsu 210003 China Jiangsu High Technology Research Key Laboratory for Wireless Sensor Networks Nanjing Jiangsu 210003 China Key Lab. of Broadband Wireless Communication and Sensor Network Technology Nanjing University of Posts and Telecommunications Ministry of Education Jiangsu Province Nanjing Jiangsu 210003 China Dept. of Computer Science and Technology Guilin Univ. of Electronic Technology Guilin 541004 China

ISBN: (纸本)9780769547565

With the development of web service, more and more attention has been drawn to web service in recent years. However, the damage caused by service security problems is becoming more and more serious nowadays. This paper develops a web service security analysis tool, WSSecTool, which is based on program slicing. This tool includes three modules namely slicing module, safety publishing module and testing module. Slicing module analyzes source codes of web service to generate method dependence graph (MDG). After MDG is generated, the tool slices MDG to detect the unsafe methods and the spread of them. Safety publishing module helps to hide unsafe methods to make them invisible to outer users after publishing. Testing module can test the services published by this tool to validate the correctness and feasibility of our analysis method. The experiments show that our tool is effective and practical. © 2012 IEEE.

关键词： Web services

来源：评论

学校读者我要写书评

暂无评论

Research on Separation of Three Powers Architecture for Trusted OS

Research on Separation of Three Powers Architecture for Trus...

引用

2012 International Conference on Solid State Devices and Materials science(SSDMS 2012)

作者： Yu Li Yong Zhao Siyuan Xin College of Computer Science and Technology Beijing University of Technology Key Lab of Information Network Security Ministry of Public Security Institute of Electronic Technology the PLA Information Engineering University

The privilege in the operating system(OS) often results in the break of confidentiality and integrity of the system. To solve this problem, several security mechanisms are proposed, such as Role-based Access Control, Separation of Duty. However, these mechanisms can not eliminate the privilege in OS kernel layer. This paper proposes a Separation of Three Powers Architecture(STPA). The authorizations in OS are divided into three parts: System Management Subsystem(SMS), Security Management Subsystem(SEMS) and Audit Subsystem(AS). Mutual support and mutual checks and balances which are the design principles of STPA eliminate the administrator in the kernel layer. Furthermore, the paper gives the formal description for authorization division using the graph theory. Finally, the implementation of STPA is given. Proved by experiments, the Separation of Three Powers Architecture we proposed can provide reliable protection for the OS through authorization division.

关键词： Separation of Three Powers Architecture Authorization Graph Separation of Privilege Trusted Operating System

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：