检索结果-内蒙古大学图书馆

Enhancing wircless channel authentication in industrial control: Attack-resistant CSI-based PUF

Ad Hoc networks 2025年 178卷

作者： Yubo Song Wenchang Liu Hongyu Zhu Yi Gong Yang Li Jiyuan Huang Yazhi Deng Key Laboratory of Computer Network Technology of Jiangsu Province School of Cyber Science and Engineering Southeast University No. 2 Southeast University Road Jiangning District Nanjing 211151 Jiangsu China Purple Mountain Laboratories No. 9 Mozhou east road Jiangning District Nanjing 211151 Jiangsu China Hunan Key Laboratory for Internet of Things in Electricity No. 398 Xin Shaodong Road Tianxin District Changsha 410002 Hunan China State Grid Hunan Electric Power Company Limited Information and Communication Company No. 398 Xin Shaodong Road Tianxin District Changsha 410002 Hunan China State Grid Hunan Electric Power Co. Ltd. No. 398 Xin Shaodong Road Tianxin District Changsha 410002 Hunan China

The extensive deployment of wireless networks in industrial settings has led to a surge in wireless-connected devices, presenting formidable security challenges. Traditional encryption approaches, relying on cryptographic keys without binding to physical hardware details, are highly susceptible to cloning attacks when the keys are compromised. This paper presents a novel solution: a Channel State information-based Physical Unclonable Function (CSI-PUF) for wireless devices. By leveraging CSI, it generates a unique device identity. A meticulously designed fuzzy extractor algorithm is incorporated. In the enrollment phase, random numbers are generated and encoded with BCH error correction codes. During the reconstruction phase, errors in the CSI-PUF output bit sequence are transferred to the BCH-encoded random numbers. This allows for error elimination through decoding, safeguarding the confidentiality of CSI. A prototype WiFi terminal authentication system based on this CSI-PUF framework is developed and implemented. Experimental evaluations in an interference-free industrial control environment reveal that the system attains an average authentication success rate exceeding 95%. This significantly bolsters the security of WiFi-enabled devices, indicating that the CSI-PUF can effectively enhance the authentication security of wireless devices in industrial scenarios.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Whether android applications broadcast your private information: A naive Bayesian-based analysis approach 30

Whether android applications broadcast your private informat...

引用

30th International Conference on Software Engineering and Knowledge Engineering, SEKE 2018

作者： Lin, Li Ni, Jian Mao, Xinya Zhang, Jianbiao College of Computer Science Faculty of Information Technology Beijing University of Technology Beijing100124 China Beijing Key Laboratory of Trusted Computing Beijing100124 China National Engineering Laboratory for Classified Information Security Protection Beijing100124 China

ISBN: (纸本)1891706446

With the rapid development of android smart terminals, android applications are exhibiting explosive growth. However, there remains a challenging issue facing android system, a malicious application may broadcast user's private information. In this paper, we propose a Naive Bayesian-based approach for analyzing private information leakage under the android broadcast mechanism, which calls BRbysA. Firstly, broadcast actions registered in *** are picked up statically by keyword matching technique. Secondly, with the Xposed framework, the broadcast actions specified at run time are discovered by hooking broadcast callback onReceive() function. Combining the above two ways, we can capture all real-Time broadcast actions in an android application. Thirdly, we adopt Naive Bayesian learning algorithm, all broadcast actions which involved in users' privacy leakage are analyzed and classified. Finally, we evaluate the proposed approach by using the dataset from Drebin and Google Play. © 2018 Universitat zu Koln. All rights reserved.

关键词： Android (operating system)

来源：评论

学校读者我要写书评

暂无评论

Quantum network communication: a discrete-time quantum-walk approach

引用

Science China(information Sciences) 2018年第4期61卷 199-208页

作者： Yuguang YANG Jiajie YANG Yihua ZHOU Weimin SHI Xiubo CHEN Jian LI Huijuan ZUO Faculty of Information Technology Beijing University of Technology State Key Laboratory of Information Security (Institute of Information Engineering Chinese Academy of Sciences) Information Security Center State Key Laboratory of Networking and Switching TechnologyBeijing University of Posts and Telecommunications School of Computer Beijing University of Posts and Telecommunications College of Mathematics and Information Science Hebei Normal University

We study the problem of quantum multi-unicast communication over the butterfly network in a quantum-walk architecture, where multiple arbitrary single-qubit states are transmitted simultaneously between multiple source-sink pairs. Here, by introducing quantum walks, we demonstrate a quantum multiunicast communication scheme over the butterfly network and the inverted crown network, respectively,where the arbitrary single-qubit states can be efficiently transferred with both the probability and the state fidelity one. The presented result concerns only the butterfly network and the inverted crown network, but our techniques can be applied to a more general graph. It paves a way to combine quantum computation and quantum network communication.

关键词： network coding quantum network coding quantum walk state fidelity butterfly network inverted crown network

来源：评论

学校读者我要写书评

暂无评论

Prediction of σ54 promoters in prokaryotes based on SVM–Adaboost

Prediction of σ54 promoters in prokaryotes based on SVM–Ad...

引用

Chinese Automation Congress (CAC)

作者： Yongxian Fan Qingqi Zhu Chengwei Lv Xianyong Pan School of Computer and Information Security Guilin University of Electronic Technology Guilin Guangxi Key Laboratory of System Control and Information Processing Ministry of Education of China Institute of Image Processing and Pattern Recognition Shanghai Jiao Tong University Shanghai China

σ 54 promoters are responsible for transcriptional carbon and nitrogen in prokaryotes. However, it is costly and difficult by experimental identification of them, especially in the postgenomic era with avalanche of sequencing data. Thus, it is imperative to develop efficiently and rapidly computational algorithms to identify the σ 54 promoters. In this study, a novel predictor named SVM-Adaboost was developed to predict σ 54 promoters from sequences alone, it used the Adaboost algorithm as the core, and support vector machine (SVM) as weak base predictors. SVM-Adaboost integrated SVM predictors to construct a more powerful and robust ensemble predictor. In SVM-Adaboost, we used pseudo k-tuple nucleotide composition method to encode DNA sequences, and then a feature selection method was used to further select the discriminate features for subsequent classification. We strictly evaluate the SVM-Adaboost on a constructed gold-standard σ 54 promoter dataset using ten-fold cross validation 100 times, and achieved an average accuracy of 96.06%.

关键词： DNA Support vector machines Feature extraction Training Prediction algorithms Benchmark testing Computational modeling

来源：评论

学校读者我要写书评

暂无评论

Research on iOS Application of Internal Privacy Leakage Detection Technology

Research on iOS Application of Internal Privacy Leakage Dete...

引用

International Conference on Intelligent Computation Technology and Automation, ICICTA

作者： Lu Chen Congcong Shi Yuanyuan Ma Zhipeng Shao State Grid Key Laboratory of Information & Network Security Nanjing Jiangsu China

In order to solve the problem of user privacy leakage in iOS applications, and make up for the limitations that existing techniques can not detect the leakage of internal privacy, this paper proposes a technology of internal privacy leakage detection based on dynamic detection and forensics. Firstly, identifying the user privacy data using the dynamic detection technology. Then, monitoring the application of run-time data combined with the forensics technology. Finally, locating the leaked user privacy in the network communication, local storage and log information. Experiments selected and tested 40 popular applications from different categories in the App Store. The experiments found that more than half of the applications have serious privacy leakage problems, and the main leak points are network traffic and local files.

关键词： Handheld computers Automation

来源：评论

学校读者我要写书评

暂无评论

A static technique for detecting input validation vulnerabilities in Android apps

引用

Science China(information Sciences) 2017年第5期60卷 210-225页

作者： Zhejun FANG Qixu LIU Yuqing ZHANG Kai WANG Zhiqiang WANG Qianru WU National Computer Network Intrusion Protection Center University of Chinese Academy of Sciences National Computer Network Emergency Response Technical Team/Coordination Center of China State Key Laboratory of Information Security Institute of Information EngineeringChinese Academy of Sciences Beijing Electronic Science and Technology Institute

Input validation vulnerabilities are common in Android apps, especially in inter-component communications. Malicious attacks can exploit this kind of vulnerability to bypass Android security mechanism and compromise the integrity, confidentiality and availability of Android devices. However, so far there is not a sound approach at the source code level for app developers aiming to detect input validation vulnerabilities in Android apps. In this paper, we propose a novel approach for detecting input validation flaws in Android apps and we implement a prototype named Easy IVD, which provides practical static analysis of Java source *** IVD leverages backward program slicing to extract transaction and constraint slices from Java source *** Easy IVD validates these slices with predefined security rules to detect vulnerabilities in a known *** detect vulnerabilities in an unknown pattern, Easy IVD extracts implicit security specifications as frequent patterns from the duplicated slices and verifies them. Then Easy IVD semi-automatically confirms the suspicious rule violations and reports the confirmed ones as vulnerabilities. We evaluate Easy IVD on four versions of original Android apps spanning from version 2.2 to 5.0. It detects 58 vulnerabilities including confused deputy attacks and denial of service attacks. Our results prove that Easy IVD can provide a practical defensive solution for app developers.

关键词： input validation static analysis program slicing vulnerability detection Android security

来源：评论

学校读者我要写书评

暂无评论

network Equipment Safety Assessment Based on Alert Data

Network Equipment Safety Assessment Based on Alert Data

引用

International Conference on Intelligent Computation Technology and Automation, ICICTA

作者： Lu Chen Zesheng Xi Zi’ang Lu Mu Chen State Grid Key Laboratory of Information & Network Security Nanjing Jiangsu China

In order to dynamically evaluate the security of network equipment operation, a security evaluation method of network equipment based on alarm data is proposed. The method makes full use of the alarm log containing network equipment running rules and status information, deeply analyzes the distribution of alarm type and puts forward a new algorithm AoR to evaluate Alarm event for network equipment damage value, then get the safety index of network equipment and quantitative description of the network security equipment running status. Finally, the experiment shows that the network equipment security assessment model proposed in this paper can find the high-risk network equipment and provide effective decision support for network security operation and maintenance personnel.

关键词： Handheld computers Automation

来源：评论

学校读者我要写书评

暂无评论

Design and Implementation of a 780MHz Wireless Sensor network for Electric Vehicle Management System

Design and Implementation of a 780MHz Wireless Sensor Networ...

引用

International Conference on Communication Technology (ICCT)

作者： Yan Liang Xiaoming Wu Xiangyan Meng Kun Zhang Acoustic Information Security Team Qilu University of Technology (Shandong Academy of Sciences) Jinan Acoustic Information Security Team Qilu University of Technology (Shandong Academy of Sciences) Shandong Computer Science Center (National Super computer Center in Jinan) and Shandong Provincial Key Laboratory of Computer Networks Jinan China Department of Communications State grid Shandong electric power company Jinan China

A 780MHz wireless sensor network applied for Electric Vehicle Management System is designed and implemented in this paper, which meets the requirements of RFID 800 MHz / 900 MHz band. This project has less interference, good anti-multipath attenuation effect, longer transmission distance and stronger diffraction ability. Compared with 2.4 GHz sensor network on the market, it consumes less energy, and it is more environmentally friendly and energy saving at the same transmission distance. In addition, the system reduces the probability of interference and destruction in the same frequency band, reduces the risk of theft of electric vehicles, and will become the mainstream scheme of the future Electric Vehicle Management System. The transmission distance of the 780MHz wireless sensor network designed in this paper is more than 1km in the urban area. After applied to the Electric Vehicle Management System in the residential area, it shows the characteristics of long transmission distance and strong anti-interference.

关键词： Wireless sensor networks Electric vehicles Transceivers Wireless communication Radio frequency Interference Power control

来源：评论

学校读者我要写书评

暂无评论

Power Mobile Terminal security Assessment Based on Weights Self-Learning

Power Mobile Terminal Security Assessment Based on Weights S...

引用

International Conference on Communication Software and networks, ICCSN

作者： Zesheng Xi Lu Chen Mu Chen Zaojian Dai Yong Li State Grid Key Laboratory of Information & Network Security Nanjing Jiangsu China

At present, mobile terminals are widely used in power system and easy to be the target or springboard to attack the power system. It is necessary to have security assessment of power mobile terminal system to enable early warning of potential risks. In the context, this paper builds the security assessment system against to power mobile terminals, with features from security assessment system of general mobile terminals and power application scenarios. Compared with the existing methods, this paper introduces machine learning to the Rank Correlation Analysis method, which relies on expert experience, and uses objective experimental data to optimize the weight parameters of the indicators. From experiments, this paper proves that weights self-learning method can be used to evaluate the security of power mobile terminal system and improve credibility of the result.

关键词： security Hardware Indexes Correlation Software Machine learning Training

来源：评论

学校读者我要写书评

暂无评论

Power Attack and Evaluation on Elliptic Curve Cryptosystem in a Commercial Smart Card

Power Attack and Evaluation on Elliptic Curve Cryptosystem i...

引用

International Conference on Cyber-Enabled Distributed Computing and Knowledge Discovery, CyberC

作者： Annv Liu An Wang Yongyin Dong Ying Shi Caisen Chen Guoshuang Zhang School of Computer Science Beijing Institute of Technology Beijing China State Key Laboratory of Information Security Chinese Academy of Sciences Beijing China Military Exercise and Training Center Army Academy of Armored Forces Beijing China Science and Technology on Information Assurance Laboratory Beijing China

Elliptic Curve Cryptography (ECC) is a widely used cryptographic algorithm in our life. Although its theory has become one of the focuses, it is difficult to ensure its security during the process of implementation. One can break it easily by using side-channel attack such as power attack. In this paper, a key recovery platform is built with computer, filter, signal acquisition module, oscilloscope, and so on. Then, we implement the simple power attack on ECC, and employ self-correlation analysis to make it easy to recover the secret key automatically. Finally, some relevant and effective countermeasures are suggested against power attacks.

关键词： Elliptic curve cryptography Smart cards Elliptic curves Encryption Side-channel attacks

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：