检索结果-内蒙古大学图书馆

6th IEEE Information Technology, Networking, Electronic and Automation Control Conference, ITNEC 2023

作者： Sun, Yuanbo Dong, Weiyu State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China

ISBN: (纸本)9781665460033

Device simulation is an important method of embedded device security analysis, due to the extensive and heterogeneous nature of the current peripherals, the existing simulation technology for peripheral simulation is mostly fuzzy, to find the input and output that meet the firmware requirements as the main goal. In order to construct a template based on IO interface identification to extend the peripheral simulation scheme, this paper identifies the IO interface without firmware source code based on the characteristics of the IO configuration process in MCU firmware. Through experimental comparison, this method has a certain effect in MCU firmware interface recognition. © 2023 IEEE.

关键词： Firmware

来源：评论

学校读者我要写书评

暂无评论

Critical Variable Guided Mutation for Directed Greybox Fuzzing

Critical Variable Guided Mutation for Directed Greybox Fuzzi...

引用

2023 IEEE International Conference on Control, Electronics and Computer Technology, ICCECT 2023

作者： He, Yubo Liu, Long The State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China

ISBN: (纸本)9798350399028

Directed greybox fuzzing directs fuzzers to specified code areas and has gained great achievements in 1-day vulnerability detection. However, existing directed graybox fuzzers fail to generate the crash sample even if they found a testcase reaching the target site. There are mainly two questions that affect the effectiveness of directed greybox fuzzing: basic block-level target is coarse enough for 1-day vulnerability detection and the fuzzers follow a specific rule to select operators regardless of the vulnerability itself. This paper points out that only a few vulnerability-related variables are related to the vulnerability triggering. Based on the vulnerability-related variables, this paper proposes critical variable guided mutation, a mutation scheduling method to enhance the crash reproduction capability of directed greybox fuzzing. We implemented a prototype MDGF based on the critical variable guided mutation and evaluate it on real world programs. Evaluation of MDGF on various real-world programs showed that MDGF found vulnerabilities faster than the mainstream directed greybox fuzzers. The experimental results showed that the speed of MDGF is 6.18 times faster than that of AFLGo and 1.40 times faster than Beacon, and MDGF can find 1.71x more bugs than AFLGo. © 2023 IEEE.

关键词： Cell proliferation

来源：评论

学校读者我要写书评

暂无评论

Research on Cross-site Scripting Attack Detection Technology Based on Few-shot Learning 6

Research on Cross-site Scripting Attack Detection Technology...

引用

6th IEEE Information Technology, Networking, Electronic and Automation Control Conference, ITNEC 2023

作者： Lu, Dongzhe Liu, Long State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China

ISBN: (纸本)9781665460033

With the intensification of informatization and mobility, various web security threats are emerging. Cross-site scripting (XSS) attack is the most common type of web attack. Most traditional detection methods have been difficult to adapt to the existing confusion variants of XSS attacks. In this paper, we extract features based on big data collected from 2017 to 2022. In order to improve the XSS detection effect of detection tools, we build machine learning models based on more than 210,000 positive and negative samples, among which CNN has the best performance. Furthermore, we propose a new algorithm that improves the traditional virtual sample generation technology based on prior knowledge in order to improve the generalization of the models. Experimental results show that in most cases, the performance of the algorithm in this paper is better than other VSG methods, and the ability to detect and discover unknown attacks is improved to a certain extent. © 2023 IEEE.

关键词： Informatization

来源：评论

学校读者我要写书评

暂无评论

On the complete weight distributions of quantum error-correcting codes

引用

Chinese Physics B 2023年第5期32卷 272-287页

作者：杜超马智熊茂胜 State Key Laboratory of Mathematical Engineering and Advanced Computing Zhenghzhou 450001China Henan Key Laboratory of Network Cryptography Technology Zhenghzhou 450001China Department of Mathematics Hong Kong University of Science and TechnologyHong KongChina

In a recent paper, Hu et al. defined the complete weight distributions of quantum codes and proved the Mac Williams identities, and as applications they showed how such weight distributions may be used to obtain the singleton-type and hamming-type bounds for asymmetric quantum codes. In this paper we extend their study much further and obtain several new results concerning the complete weight distributions of quantum codes and applications. In particular, we provide a new proof of the Mac Williams identities of the complete weight distributions of quantum codes. We obtain new information about the weight distributions of quantum MDS codes and the double weight distribution of asymmetric quantum MDS codes. We get new identities involving the complete weight distributions of two different quantum codes. We estimate the complete weight distributions of quantum codes under special conditions and show that quantum BCH codes by the Hermitian construction from primitive, narrow-sense BCH codes satisfy these conditions and hence these estimate applies.

关键词： quantum codes complete weight distributions Mac Williams identities BCH codes

来源：评论

学校读者我要写书评

暂无评论

Research on Intrusion Tolerance System Based on Behavioral Baseline and Defense-in-Depth Architecture

Research on Intrusion Tolerance System Based on Behavioral B...

引用

2024 International Conference on Mechatronics and Intelligent Control, ICMIC 2024

作者： Meng, Qi Wang, Xuemeng Yang, Kai Meng, Long Wang, Jiancheng Fei, Jinlong State Key Laboratory of Mathematical Engineering and Advanced Computing PLA Strategic Support Force Information Engineering University Zhengzhou China

ISBN: (数字)9781510686847

ISBN: (纸本)9781510686830

Tolerance technology is the third-generation network security technology commonly used in the world. It is derived from the category of information survival and endogenous security technology. A scholar from Carnegie Mellon University gave this survival technology a definition: the so-called "invasion survival technology".It is the ability of the system to perform its own tasks within a limited time when external attacks, failures and accidents have occurred. It assumes that we cannot detect intrusions to the system completely and correctly. When external intrusions or failures occur suddenly, we can use tolerance technology to solve the problem of survival of the system to ensure the confidentiality, integrity, and integrity of the information system. reliability and non-repudiation. In the current Internet security incidents, countless experiences and lessons tell us that it is not enough to rely on blocking and defensing for network *** on the existing network defense-in-depth architecture and the common behavior and parameter baselines of current emergency response systems, this paper designs an intrusion-tolerant system based on the behavioral baseline and network-in-depth architecture, which realizes intrusion tolerance and malicious behavior blocking under high confrontation intensity. To adapt to the maximum recovery and necessary tolerance under the attack technology of international APT organizations, and to protect the integrity and availability of the system to the greatest extent. © 2025 SPIE.

关键词： Network intrusion

来源：评论

学校读者我要写书评

暂无评论

A Survey of Security Analysis on Industrial Control Devices via Rehosting 3

A Survey of Security Analysis on Industrial Control Devices ...

引用

3rd IEEE International Conference on Information Technology, Big Data and Artificial Intelligence, ICIBA 2023

作者： Liu, Houzhi Ma, Rongkuan Wei, Qiang State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou450001 China

ISBN: (纸本)9781665490788

At present, the network security of embedded devices has received more and more attention. However, the existing dynamic analysis tools can't performance in embedded devices as common softwares. The main reason is that the internal state information of the embedded device can not be directly obtained, and the debugging interface usually shields the device after the manufacturer produces it. Thus, this paper introduces rehosting techniques for embedded systems and the differences between each way. Then we talk about the Deficiencies and future works in emulate execution. © 2023 IEEE.

关键词： Network security

来源：评论

学校读者我要写书评

暂无评论

IPDF: Directed Fuzzer for Input Parsing Program

IPDF: Directed Fuzzer for Input Parsing Program

引用

2023 International Conference on Electronic Information engineering and Data Processing, EIEDP 2023

作者： He, Yubo Liu, Long State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou450000 China

ISBN: (纸本)9781510666160

Directed greybox fuzzing aims to test specific code and has made many advances in several areas. However, most vulnerabilities of input parsing programs are triggered in the particular state of the program, so existing directed greybox fuzzing works face path explosion problem when they fuzz the input parsing program and need more ability to explore the particular state of the program. To address the above problem, we propose a call-relationship-based fitness function. The main idea is to use the function call relationship to guide directed fuzzing before reaching the target. Call-relationship-based fitness function extracts the function calls and call relationship from the program, uses an intra-procedural reachability analysis to get all concerned edges, and constructs the fitness function based on the edges. Based on the above method, we implemented the directed greybox fuzzing IPDF and evaluated it with the mainstream directed greybox fuzzers Beacon and AFLGo on real-world programs. Evaluation of IPDF showed that IPDF found vulnerabilities faster than the state-of-the-art directed greybox fuzzers. The experimental results showed that the speed of MDGF is 3.01 times faster than that of AFLGo and 1.15 times faster than Beacon. © 2023 SPIE.

关键词： Prototyping engineering Equipment Visualization

来源：评论

学校读者我要写书评

暂无评论

An anonymous authentication and secure data transmission scheme for the Internet of Things based on blockchain

引用

Frontiers of Computer Science 2024年第3期18卷 183-197页

作者： Xingxing CHEN Qingfeng CHENG Weidong YANG Xiangyang LUO State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou Institute of Information Science and TechnologyZhengzhou 450001China Henan Key Laboratory of Grain Photoelectric Detection and Control Henan University of TechnologyZhengzhou 450001China Henan Province Key Laboratory of Cyberspace Situation Awareness Zhengzhou Institute of Information Science and TechnologyZhengzhou 450001China

With the widespread use of network infrastructures such as 5G and low-power wide-area networks,a large number of the Internet of Things(IoT)device nodes are connected to the network,generating massive amounts of ***,it is a great challenge to achieve anonymous authentication of IoT nodes and secure data *** present,blockchain technology is widely used in authentication and s data storage due to its decentralization and ***,Fan et *** a secure and efficient blockchain-based IoT authentication and data sharing *** studied it as one of the state-of-the-art protocols and found that this scheme does not consider the resistance to ephemeral secret compromise attacks and the anonymity of IoT *** overcome these security flaws,this paper proposes an enhanced authentication and data transmission scheme,which is verified by formal security proofs and informal security ***,Scyther is applied to prove the security of the proposed ***,it is demonstrated that the proposed scheme achieves better performance in terms of communication and computational cost compared to other related schemes.

关键词： Internet of Things blockchain authentication data transmission

来源：评论

学校读者我要写书评

暂无评论

A Network Deception Defense Mechanism Based on Virtual Topology Generation

A Network Deception Defense Mechanism Based on Virtual Topol...

引用

2023 International Conference on Intelligent Systems, Communications, and Computer Networks, ISCCN 2023

作者： Wang, Binghui Lu, Bin State Key Laboratory of Mathematical Engineering and Advanced Computing Information Engineering University Zhengzhou China

ISBN: (纸本)9781510666238

To address the problem that traditional network defense techniques are difficult to cope with scanning attacks launched by internal attackers, this paper proposes a Virtual Network Topology Deception Defense mechanism(VNTDD)based on the idea of deception defense. In order to solve the problem of lack of randomness and security of virtual network topology, we divide the virtual network topology into three categories: forwarding nodes, real nodes and virtual nodes, and analyze their deployment locations and numbers respectively to generate a random virtual network topology, and enables the deployment of virtual network topology on the underlying real network through traffic control mechanisms. Finally, through experimental analysis, the VNTDD deception defense mechanism proposed in this paper can effectively prolong the scanning process of the intranet by internal attackers. © 2023 SPIE. All rights reserved.

关键词： Topology

来源：评论

学校读者我要写书评

暂无评论

IP-geolocater:a more reliable IP geolocation algorithm based on router error training

引用

Frontiers of Computer Science 2022年第1期16卷 101-111页

作者： Shuodi ZU Xiangyang LUO Fan ZHANG State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou450001China Zhengzhou Science and Technology Institute Zhengzhou450001China

Location based services(LBS)are widely utilized,and determining the location of users’IP is the foundation for *** by unstable delay and insufficient landmarks,the existing geolocation algorithms have problems such as low geolocation accuracy and uncertain geolocation error,difficult to meet the requirements of LBS for accuracy and reliability.A new IP geolocation algorithm based on router error training is proposed in this manuscript to improve the accuracy of geolocation results and obtain the current geolocation error ***,bootstrapping is utilized to divide the landmark data into training set and verification set,and/24 subnet distribution is utilized to extend the training ***,the path detection is performed on nodes in the three data sets respectively to extract the metropolitan area network(MAN)of the target city,and the geolocation result and error of each router in MAN are obtained by training the detection ***,the MAN is utilized to get the target’s *** on China’s 24,254 IP geolocation experiments,the proposed algorithm has higher geolocation accuracy and lower median error than existing typical geolocation algorithms LBG,SLG,NNG and RNBG,and in most cases the difference is less than 10km between estimated error and actual error.

关键词： estimated error geolocation path detection network measurement

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：