检索结果-内蒙古大学图书馆

Using evolutionary process for cross-version software defect prediction

International Journal of Performability Engineering 2019年第9期15卷 2484-2493页

作者： Li, Yong Liu, Zhandong Zhang, Haijun College of Computer Science and Technology Xinjiang Normal University Urumqi830054 China Data Security Key Laboratory Xinjiang Normal University Urumqi830054 China Key Laboratory of Safety-Critical Software Ministry of Industry and Information Technology Nanjing211106 China

Cross-version defect prediction can effectively reduce the construction cost of a model, which is of great significance for understanding the causes of defects in subsequent software versions and improving the quality of software products. The objective of this work is to validate the feasibility of the cross-version defect predictor using the evolutionary process in different scenarios and to investigate practical guidelines for the choice of evolutionary process and historical data of a given project. Firstly, we verified the effectiveness of the evolutionary process attributes in the cross-version prediction model. Then, we analyzed the cross-version model prediction performance based on multi-version historical data. Finally, multiple benchmark models were selected for experimental comparison to further verify the effectiveness of the proposed method. The experimental conclusions can not only effectively reduce the construction cost of the defect prediction model in the version evolution scenarios, but also help developers understand the defect generation mechanism in the subsequent versions and improve the software development process in a targeted way. © 2019 Totem Publisher, Inc. All rights reserved.

关键词： Defects

来源：评论

学校读者我要写书评

暂无评论

A CPK-Based Identity Authentication Scheme for IoT

引用

Computer Systems Science & Engineering 2022年第3期40卷 1217-1231页

作者： Mingming Zhang Jiaming Mao Yuanyuan Ma Liangjie Xu Chuanjun Wang Ran Zhao Zhihao Li Lu Chen Wenbing Zhao State Grid Jiangsu Electric Power Co. Ltd.Information&Telecommunication BranchNanjing210008China State Grid Key Laboratory of Information&Network Security Institute of Information and CommunicationGlobal Energy Interconnection Research InstituteNanjing210003China Anhui Jiyuan Software Co.Ltd SGITGHefei230088China Engineering Research Center of Post Big Data Technology and Application of Jiangsu Province Research and Development Center of Post Industry Technology of the State Posts Bureau(Internet of Things Technology)Engineering Research Center of Broadband Wireless Communication Technology of the Ministry of EducationNanjing University of Posts and TelecommunicationsNanjing210003China Department of Electrical Engineering and Computer Science Cleveland State UniversityCleveland44115USA

As the power Internet of Things(IoT)enters the security construction stage,the massive use of perception layer devices urgently requires an identity authentication scheme that considers both security and *** existing public key infrastructure(PKI)-based security authentication scheme is currently difficult to apply in many terminals in *** key distribution and management costs are high,which hinders the development of power IoT security *** Public key(CPK)technology uses a small number of seeds to generate unlimited public *** is very suitable for identity authentication in the power Internet of *** this paper,we propose a novel identity authentication scheme for power *** scheme combines the physical unclonable function(PUF)with improved CPK technology to achieve mutual identity authentication between power IoT terminals and *** proposed scheme does not require third-party authentication and improves the security of identity authentication for power ***,the scheme reduces the resource consumption of power IoT *** improved CPK algorithm solves the key collision problem,and the third party only needs to save the private key and the public key *** results show that the amount of storage resources occupied in our scheme is *** proposed scheme is more suitable for the power IoT.

关键词： Power Internet of Things terminal equipment identity authentication CPK PUF

来源：评论

学校读者我要写书评

暂无评论

CDEdit: A Highly Applicable Redactable blockchain with Controllable Editing Privilege and Diversified Editing Types

arXiv

引用

arXiv 2022年

作者： Chen, Xiaofeng Gao, Ying School of Cyber Science and Technology Beihang University China Key Laboratory of Aerospace Network Security Ministry of Industry and Information Technology China

Redactable blockchains allow modifiers or voting committees with modification privileges to edit the data on the chain. Trapdoor holders in chameleon-based hash redactable blockchains can quickly compute hash collisions for arbitrary data, and without breaking the link of the hash-chain. However, chameleon-based hash redactable blockchain schemes have difficulty solving the problem of multi-level editing requests and competing for modification privileges. In this paper, we propose CDEdit, a highly applicable redactable blockchain with controllable editing privilege and diversified editing types. The proposed scheme increases the cost of invalid or malicious requests by paying the deposit on each edit request. At the same time, the editing privilege is subdivided into request, modification, and verification privileges, and the modification privilege token is distributed efficiently to prevent the abuse of the modification privilege and collusion attacks. We use chameleon hashes with ephemeral trapdoor (CHET) and ciphertext policy attribute-based encryption (CP-ABE) to implement two editing types of transaction-level and block-level, and present a practical instantiation and security analysis. Finally, the implementation and evaluation show that our scheme only costs low-performance overhead and is suitable for multi-level editing requests and modification privilege competition scenarios. Copyright © 2022, The Authors. All rights reserved.

关键词： blockchain

来源：评论

学校读者我要写书评

暂无评论

SQLStateGuard: Statement-Level SQL Injection Defense Based on Learning-Driven Middleware 15

SQLStateGuard: Statement-Level SQL Injection Defense Based o...

引用

15th Annual ACM Symposium on Cloud Computing, SoCC 2024

作者： Liu, Xin Huang, Yuanyuan Wang, Tianyi Li, Song Niu, Weina Shen, Jun Zhou, Qingguo Zhou, Xiaokang School of Information Science and Engineering Lanzhou University Gansu Lanzhou China The State Key Laboratory of Blockchain and Data Security Zhejiang University Zhejiang Hangzhou China School of Computer Science and Engineering University of Electronic Science and Technology of China Sichuan Chengdu China School of Computing and Information Technology University of Wollongong WollongongNSW Australia Kansai University Osaka Suita Japan

ISBN: (纸本)9798400712869

SQL injection is a significant and persistent threat to web services. Most existing protections against SQL injections rely on traffic-level anomaly detection, which often results in high false-positive rates and can be easily bypassed by attackers. This paper introduces SQLStateGuard, the world's first middleware-driven statement-level SQL injection defense approach, to address these issues. The SQLStateGuard uses a custom SQL middleware based on the idea of Runtime Application Self-Protection to capture raw SQL statements. These statements are then analyzed by SQLSG-Net, a database-oriented detection network based on gated linear units. If SQLSG-Net detects malicious SQL statements, the SQL middleware will block them. Experiments show that the detection accuracy of SQLStateGuard exceeds 99%, outperforming existing approaches, and it can identify the type of a specific SQL injection. Additionally, SQLStateGuard has no fingerprint and does not respond to SQL syntax errors, making it more challenging for attackers to gather information. This paper also presents a novel dataset generation process for SQLStateGuard and shares two statement-level SQL injection datasets with the research community, including over 145,000 malicious SQL statements categorized by the type of SQL injection. © 2024 ACM.

关键词： Middleware

来源：评论

学校读者我要写书评

暂无评论

CDEdit: Redactable blockchain with Cross-audit and Diversity Editing

CDEdit: Redactable Blockchain with Cross-audit and Diversity...

引用

IEEE International Conference on Trust, security and Privacy in Computing and Communications (TrustCom)

作者： Xiaofeng Chen Ying Gao School of Cyber Science and Technology Beihang University China Key Laboratory of Aerospace Network Security Ministry of Industry and Information Technology China

Redactable blockchain allows modifiers or voting committees with modification privileges to edit the data on the chain. Among them, trapdoor holders in chameleon-based hash redactable blockchains can quickly compute hash collisions for arbitrary data without breaking the link of the hash-chain. However, chameleon-based hash redactable blockchain schemes have difficulty solving issues such as editing operations with different granularity or conflicts and auditing modifiers that abuse editing privileges. To address the above challenges, we propose a redactable blockchain with Cross-audit and Diversity Editing (CDEdit). The proposed scheme distributes subdivided transaction-level and block-level tokens to the matching modifier committee to weaken the influence of central power. A number of modifiers are unpredictably selected based on reputation value proportions and the mapping of the consistent hash ring to enable diversity editing operations, and resist Sybil attacks. Meanwhile, an adaptive cross-auditing protocol is proposed to adjust the roles of modifiers and auditors dynamically. This protocol imposes a reputation penalty on the modifiers of illegal edits and solves the problems of abuse of editing privileges and collusion attacks. In addition, We used ciphertext policy attribute-based encryption (CP-ABE) and chameleon hashes with ephemeral trapdoor (CHET) for data modification, and present a system steps and security analysis of CDEdit. Finally, the extensive comparisons and evaluations show that our scheme costs less time overhead than other schemes and is suitable for complex application scenarios, e.g. IoT data management.

关键词： Performance evaluation data privacy Protocols Costs System performance Resists blockchains

来源：评论

学校读者我要写书评

暂无评论

Unbiased multi-label learning from crowdsourced annotations 24

Unbiased multi-label learning from crowdsourced annotations

引用

Proceedings of the 41st International Conference on Machine Learning

作者： Mingxuan Xia Zenan Huang Runze Wu Gengyu Lyu Junbo Zhao Gang Chen Haobo Wang School of Software Technology Zhejiang University Ningbo China and State Key Laboratory of Blockchain and Data Security Zhejiang University Hangzhou China State Key Laboratory of Blockchain and Data Security Zhejiang University Hangzhou China Fuxi AI Lab NetEase Inc. Hangzhou China Faculty of Information Technology Beijing University of Technology Beijing China

This work studies the novel Crowdsourced Multi-Label Learning (CMLL) problem, where each instance is related to multiple true labels but the model only receives unreliable labels from different annotators. Although a few Crowdsourced Multi-Label Inference (CMLI) methods have been developed, they require both the training and testing sets to be assigned crowdsourced labels and focus on true label inferring rather than prediction, making them less practical. In this paper, by excavating the generation process of crowdsourced labels, we establish the first unbiased risk estimator for CMLL based on the crowdsourced transition matrices. To facilitate transition matrix estimation, we upgrade our unbiased risk estimator by aggregating crowdsourced labels and transition matrices from all annotators while guaranteeing its theoretical characteristics. Integrating with the unbiased risk estimator, we further propose a decoupled autoencoder framework to exploit label correlations and boost performance. We also provide a generalization error bound to ensure the convergence of the empirical risk estimator. Experiments on various CMLL scenarios demonstrate the effectiveness of our proposed method. The source code is available at https://***/MingxuanXia/CLEAR.

关键词：

来源：评论

学校读者我要写书评

暂无评论

A Novel Lexicon Enhanced Named Entity Recognition Model for Network security Domain

A Novel Lexicon Enhanced Named Entity Recognition Model for ...

引用

2024 China Automation Congress, CAC 2024

作者： Jin, Zhiyang Fu, Yusun Huan, Yuehui Xue, Jinliang Wang, Chengguang Chen, Yuanfang Ningbo Artificial Intelligence Institute Shanghai Jiao Tong University Ningbo China School of Electronic Information and Electrical Engineering Shanghai Jiao Tong University Shanghai China Zhejiang Guoli Security Technology Co. Ltd Ningbo China Ningbo Industrial Internet Institute Ningbo China State Key Laboratory of Blockchain and Data Security Zhejiang University Hangzhou China

ISBN: (纸本)9798350368604

Named Entity Recognition (NER) technology serves as the foundation for solving many Natural Language Processing(NLP) problems, particularly in the domain of building knowledge graphs, where an effective NER model is crucial for creating efficient knowledge representations. However, when constructing knowledge graphs in the Industrial Internet security(IIS) domain, security-related incidents, as significant entities, pose challenges for existing NER models. In this paper, we propose security Lexicon Enhanced Bidirectional Encoder Representations from Transformers(SEBERT). SEBERT enhances semantic processing by integrating security lexicon information into one transformer layer of BERT, assigning vocabulary to each character in input sentences. Then we use a Residual-Knowledge-Arnold Network(RKAN) to optimize the semantic features learned from SEBERT, utilizing the properties of residual networks to learn identity mapping features without significantly increasing computational complexity. Finally, the Conditional Random Field (CRF) is used to learn the sequence information and dependencies of adjacent labels. Experimental results demonstrate that SEBERT-RKAN-CRF model achieves superior performance in recognizing entities in the IIS domain, with improvements of 1.99%, 3.34%, and 2.66% in accuracy rate, recall rate, and F1-score compared to the baseline model. © 2024 IEEE.

关键词： Semantics

来源：评论

学校读者我要写书评

暂无评论

Research on the Cross-Correlation Characteristics of Signals from Ocean Bottom Seismometer

Research on the Cross-Correlation Characteristics of Signals...

引用

IEEE/OES China Ocean Acoustics (COA)

作者： Dejin Cao Haigang Zhang Jinhuai Xie Xiao Gao National Key Laboratory of Underwater Acoustic Technology Key Laboratory of Marine Information Acquisition and Security of Ministry of Industry and Information Technology College of Underwater Acoustic Engineering Harbin Engineering University Harbin China

ISBN: (数字)9798350340297

ISBN: (纸本)9798350340303

In this study, considerable differences in waveform between vector signals and acoustic pressure signals were received from the seabed interface. The cross-correlation characteristics between the acoustic pressure and particle velocity signals received via an ocean bottom seismometer were analyzed using experimental data obtained from very low-frequency sound propagation experiments conducted in the South China Sea area. On th basis of the spectral element method, the correlation coefficient of the pressure and particle velocity signals in seawater and seabed interface was simulated and compared with experimental data to validate the cross-correlation characteristics at the seabed interface. Finally, the correlation coefficients between pressure and particle velocity in different types of seabed environments were analyzed. The results reveal that the elastic characteristics of the seabed can have a certain impact on the cross-correlation characteristics of the pressure and particle velocity signals received by an ocean bottom seismometer, which results in a relatively small cross-correlation coefficient between the seabed interface acoustic pressure and horizontal particle velocity signals.

关键词： Correlation coefficient Water Correlation Fluids Fluctuations Oceans Acoustic propagation Vectors Underwater acoustics Stress

来源：评论

学校读者我要写书评

暂无评论

Research on YOLOv7-tiny Improved Algorithm for Compli-ance Detection of Production Personnel Wearing

Research on YOLOv7-tiny Improved Algorithm for Compli-ance D...

引用

2023 International Conference on Communication Network and Machine Learning, CNML 2023

作者： Shen, Qiao Huang, Hanming Wang, Pengfei Key Lab of Education Blockchain and Intelligent Technology Ministry of Education Guangxi Normal University Guangxi Guilin541004 China Guangxi Key Lab of Multi-Source Information Mining and Security Guangxi Normal University Guangxi Guilin541004 China School of Computer Science and Engineering Guangxi Normal University Guangxi Guilin541004 China Hunan Aerospace Industry General Corp Aircraft Technology Branch Hunan Changsha410006 China

ISBN: (纸本)9798400716683

Proposed is an improved production personnel wearing target detection algorithm based on YOLOv7, aiming to address the issues of false positives and false negatives caused by occlusion and detection of small to medium-sized objects in complex backgrounds. The algorithm introduces a Transformer module into the Backbone to better capture global feature information of images. The spatial pyramid pooling layer (SPPCSP) is enhanced to improve the model's detection speed. Additionally, the detection head of the model is replaced with the decoupled YOLOX detection head to enhance detection accuracy. Experiments were conducted on the publicly available safety helmet dataset SHWD, with the addition of two classes of targets: reflective clothing and people wearing reflective clothing. The experimental results demonstrate that the improved algorithm achieves a detection accuracy of 89.6% on this dataset, which is an improvement of 1.5 percentage points compared to the original algorithm. The detection speed reaches 85 FPS, showing good accuracy and real-time performance. Furthermore, compared with some mainstream target detection algorithms, the proposed improved algorithm also exhibits certain advantages. © 2023 ACM.

关键词： Personnel

来源：评论

学校读者我要写书评

暂无评论

A New Method of Construction of Permutation Trinomials with Coefficients 1

A New Method of Construction of Permutation Trinomials with ...

引用

IEEE International Conference on Big data security on Cloud (Bigdatasecurity), High Performance and Smart Computing (HPSC) and Intelligent data and security (IDS)

作者： Hua Guo Shuo Wang Hutao Song Yiran Han Xiyong Zhang Jianwei Liu Key Laboratory of Aerospace Network Security Ministry of Industry and Information Technology Beihang University State Key Laboratory of Software Development Environment Beihang University Beijing China School of Electronic and Information Engineering Beihang University Beijing China Key Laboratory of Aerospace Network Security Ministry of Industry and Information Technology Beihang University Beijing China Beijing Institute of Satellite Information Engineering Beijing China

While big data technology is developing rapidly, it also brings numerous security and privacy issues, such as the security of communication between devices in Internet of Things and the confidentiality of stored data. The application of cryptography technology is the key to solving these problems. Permutation polynomials are widely utilized in both symmetric cryptography and public key cryptography. In recent years, the study of permutation polynomials with simple algebraic forms has attracted the interest of scholars. In this work, a novel approach for constructions of permutation trinomials with coefficients 1 is proposed by characterizing permutation polynomials with Niho-type exponents using the reverse method of Tu. In addition, for a three-term PP under a special case, this paper calculates its compositional inverse with explicit form.

关键词： data privacy Big data Public key cryptography Cryptography Internet of Things Galois fields

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：