检索结果-内蒙古大学图书馆

NDFuzz:a non-intrusive coverage-guided fuzzing framework for virtualized network devices

Cybersecurity 2023年第1期6卷 54-74页

作者： Yu Zhang Nanyu Zhong Wei You Yanyan Zou Kunpeng Jian Jiahuan Xu Jian Sun Baoxu Liu Wei Huo Institute of Information Engineering Chinese Academy of SciencesBejingChina School of Cyber Security University of Chinese Academy of SciencesBejingChina Key Laboratory of Network Assessment Technology Chinese Academy of SciencesBeijingChina Beijing Key Laboratory of Network Security and Protection Technology BeijingChina Renmin University of China BeijingChina

network function virtualization provides programmable in-network middlewares by leveraging virtualization tech-nologies and commodity hardware and has gained popularity among all mainstream network device *** it is challenging to apply coverage-guided fuzzing,one of the state-of-the-art vulnerability discovery approaches,to those virtualized network devices,due to inevitable integrity protection adopted by those *** this paper,we propose a coverage-guided fuzzing framework NDFuzz for virtualized network devices with a novel integrity protec-tion bypassing method,which is able to distinguish processes of virtualized network devices from hypervisors with a carefully designed non-intrusive page global directory inference *** implement NDFuzz atop of two black-box fuzzers and evaluate NDFuzz with three representative network protocols,SNMP,DHCP and NTP,on nine popular virtualized network *** obtains an average 36%coverage improvement in comparison with its black-box *** discovers 2 O-Day vulnerabilities and 11-Day vulnerability with coverage guidance while the black-box fuzzer can find only one of *** discovered vulnerabilities are confirmed by corresponding vendors.

关键词： Coverage-guided fuzzing network devices network function virtualization

来源：评论

学校读者我要写书评

暂无评论

Reversible Data Hiding in Encrypted Images based on Classic McEliece Cryptosystem

Reversible Data Hiding in Encrypted Images based on Classic ...

引用

Image Processing, Computer Vision and Machine Learning (ICICML), International Conference on

作者： Zongbao Jiang Minqing Zhang Fuqiang Di Weina Dong Key Laboratory of Network and Information Security of PAP Engineering University of PAP Xi’an China

Aiming at the problems that the security of traditional data hiding algorithms is difficult to be guaranteed and the existing algorithms’ embedded volume is restricted under quantum operation attacks, a reversible data hiding algorithm in encrypted images based on Classic McEliece cryptosystem is proposed. The image pixels are first decomposed into bit planes to generate a data stream, and then encrypted in groups using the Classic McEliece cipher algorithm. In the encryption process, the fault tolerance mechanism in its encryption algorithm is utilized to select the appropriate modulation noise composition and the mapping relationship between the secret data, and the error pattern is modulated into noise to interfere with the encryption process, so as to realize the embedding of the secret data. Finally, the marked encrypted image is obtained by using the exclusive-or encryption and scrambling encryption processes. The experimental results show that the algorithm has the reversibility of carrier recovery. Compared with the existing algorithms, this algorithm’s embedded volume is advantageous, and its highest embedding rate is 4.43548 bpp, which realizes large-capacity data hiding while improving security.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Reversible Data Hiding Algorithm in Encrypted Domain Based on Matrix Secret Sharing

Reversible Data Hiding Algorithm in Encrypted Domain Based o...

引用

Electronics and Communication, network and Computer Technology (ECNCT), International Conference on

作者： Zongbao Jiang Minqing Zhang Yan Ke Chao Jiang Key Laboratory of Network and Information Security of PAP Engineering University of PAP Xi 'an China

Focused on the problems of user privacy disclosure and ciphertext data management in cloud service environment, this paper proposes a reversible data hiding algorithm in encrypted domain based on matrix secret sharing. Firstly, the matrix secret sharing of the pixels of the encrypted image was used to obtain n shares, in the process of constructing shared vectors for secret segmentation, the random variables involved in encryption and the location index of ciphertext feedback were used to construct the mapping relationship between them and the secret data to be embedded to generate redundant space for data embedding. Finally, the overflow pixels were processed, and the edge information was embedded by differential extension technology to obtain n marked encrypted images. The experimental results showed that the algorithm has complete reversibility. In contrast to the current algorithms, the embedding rate of the algorithm was greatly improved. The maximized embedding rate of the (3,4)-threshold scheme was 4.00bpp, and the maximized embedding rate of the (5,5)-threshold scheme was 6.40bpp, and the statistical characteristics such as correlation coefficient of the marked encrypted images were consistent with those of random image, and the security was high. The algorithm not only has the functions of privacy data protection and ciphertext authentication management, but also has the disaster recovery feature to realize the multi-party security storage of data.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Semantic-Enhanced Static Vulnerability Detection in Baseband Firmware 24

Semantic-Enhanced Static Vulnerability Detection in Baseband...

引用

44th ACM/IEEE International Conference on Software engineering, ICSE 2024

作者： Liu, Yiming Zhang, Cen Li, Feng Li, Yeting Zhou, Jianhua Wang, Jian Zhan, Lanlan Liu, Yang Huo, Wei Institute of Information Engineering Cas School of Cyber Security Ucas Beijing China Key Laboratory of Network Assessment Technology Cas China Beijing Key Laboratory of Network Security and Protection Technology China Nanyang Technological University Singapore

ISBN: (纸本)9798400702174

Cellular network is the infrastructure of mobile communication. Baseband firmware, which carries the implementation of cellular network, has critical security impact on its vulnerabilities. To handle the inherent complexity in cellular communication, cellular protocols are usually implemented as message-centric systems, containing the common message processing phase and message specific handling phase. Though the latter takes most of the code (99.67%) and exposed vulnerabilities (74%), it is rather under-studied: existing detectors either cannot sufficiently analyze it or focused on analyzing the former phase. To fill this gap, we proposed a novel semantic-enhanced static vulnerability detector named BVFinder focusing on message specific phase vulnerability detection. Generally, it identifies a vulnerability by locating whether a predefined sensitive memory operation is tainted by any attacker-controllable input. Specifically, to reach high automation and preciseness, it made two key improvements: a semantic-based taint source identification and an enhanced taint propagation. The former employs semantic search techniques to identify registers and memory offsets that carry attacker-controllable inputs. This is achieved by matching the inputs to their corresponding message and data types using textual features and addressing patterns within the assemblies. On the other hand, the latter technology guarantees effective taint propagation by employing additional indirect call resolution algorithms. The evaluation shows that BVFinder outperforms the state-of-the-art detectors by detecting three to four times of amount of vulnerabilities in the dataset. Till now, BVFinder has found four zero-day vulnerabilities, with four CVEs and 12,410 USD bounty assigned. These vulnerabilities can potentially cause remote code execution to phones using Samsung shannon baseband, affecting hundreds of millions of end devices. © 2024 ACM.

关键词： Semantics

来源：评论

学校读者我要写书评

暂无评论

A New High-Capacity Robust Image Steganography Method via Adversarial network

A New High-Capacity Robust Image Steganography Method via Ad...

引用

Science and Technology Innovation (IAECST), International Academic Exchange Conference on

作者： Weina Dong Zongbao Jiang Lifeng Chen Wenquan Sun Key Laboratory of Network and Information Security of PAP Engineering University of PAP Xi’an Shaanxi China

Aiming at the problem that the high-capacity steganography model based on encoding-decoding network had weak robustness and could not resist noise attack and channel compression, an improved high-capacity robust image steganography algorithm based on adversarial network was proposed. In the proposed algorithm, encoder, decoder and critic based on densely connected convolutional networks (DenseNet) were designed. The secret information and the carrier image are jointly encoded into a steganographic image by the encoder, then the secret information was extracted by the decoder. The critic was used to discriminate between carrier images and steganographic images. A noise layer was added between encoder and decoder, Dropout, JPEG compression, gaussian blur, gaussian noise and salt and pepper noise were used to simulate a real environment of various kinds of noise attack. The steganography output by encoder was processed with different kinds of noise and decoded by decoder. Through model was trained, the message could be extracted from the noise-processed steganographic image by the decoder, so the ability to resist noise attacks was realized. The experiment results show that the steganographic capacity of the proposed algorithm reaches 0.450.95 bits per pixel (bpp) on $360 \times 360$ pixel images, which are 3.6 times higher than that of the earlier robust steganographic algorithms. The decoding accuracy reaches 0.72-0.97, which are 42% points higher than that of steganography without noise layer. The proposed algorithm not only guarantees high embedding quantity and high coding image quality, but also has stronger anti-noise capability.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Multi-class Bitcoin mixing service identification based on graph classification

引用

Digital Communications and networks 2024年第6期10卷 1881-1893页

作者： Xiaoyan Hu Meiqun Gui Guang Cheng Ruidong Li Hua Wu School of Cyber Science&Engineering Southeast UniversityNanjing 211189China Purple Mountain Laboratories for Network and Communication Security Nanjing 211111China Jiangsu Provincial Engineering Research Center of Security for Ubiquitous Network Nanjing 211189China Key Laboratory of Computer Network and Information Integration Southeast UniversityMinistry of EducationChina Research Base of International Cyberspace Governance Southeast UniversityNanjing 211189China Institute of Science and Engineering Kanazawa UniversityKakumaKanazawa920-1192Japan

Due to its anonymity and decentralization,Bitcoin has long been a haven for various illegal *** generally legalize illicit funds by Bitcoin mixing ***,it is critical to investigate the mixing services in cryptocurrency anti-money *** studies treat different mixing services as a class of suspicious Bitcoin ***,they are limited by relying on expert experience or needing to deal with large-scale *** far,multi-class mixing service identification has not been explored *** is challenging since mixing services share a similar procedure,presenting no sharp ***,mixing service identification facilitates the healthy development of Bitcoin,supports financial forensics for cryptocurrency regulation and legislation,and provides technical means for fine-grained blockchain *** paper aims to achieve multi-class Bitcoin Mixing Service Identification with a Graph Classification(BMSI-GC)***,BMSI-GC constructs 2-hop ego networks(2-egonets)of mixing services based on their historical ***,it applies graph2vec,a graph classification model mainly used to calculate the similarity between graphs,to automatically extract address features from the constructed ***,it trains a multilayer perceptron classifier to perform classification based on the extracted ***-GC is flexible without handling the full-size network and handcrafting address ***,the differences in transaction patterns of mixing services reflected in the 2-egonets provide adequate information for *** experimental study demonstrates that BMSI-GC performs excellently in multi-class Bitcoin mixing service identification,achieving an average identification F1-score of 95.08%.

关键词： Bitcoin Anti-money laundering Mixing service Ego network Graph classification

来源：评论

学校读者我要写书评

暂无评论

Blockchain E-voting Scheme Based on SM9 Partial Blind Signature 4

Blockchain E-voting Scheme Based on SM9 Partial Blind Signat...

引用

4th International Conference on Computer information Science and Artificial Intelligence, CISAI 2021

作者： Yin, Dongqing Zhang, Mingshu Wei, Bin University of the PAP Key Laboratory for Network and Information Security of the PAP Engineering Xi'an China

ISBN: (纸本)9781665406925

Aiming at the problems of user privacy leakage, digital signature denial and tracking in the current digital signature electronic voting system, a blockchain electronic voting scheme based on SM9 partial blind signature is proposed. The use of partial blind signature can effectively resist signature denial and tracking. The problem is to introduce a trusted third party to prevent attackers from tampering with information, and at the same time use blockchain technology to replace voting and vote counting functions, which solves the drawbacks of the centralized system. The security analysis proves that the solution can meet the security requirements of the electronic voting protocol, improve the security and voter's sense of trust in the voting system, and reduce the voting cost. © 2021 IEEE.

关键词： Smart contract

来源：评论

学校读者我要写书评

暂无评论

Optimization of Encrypted Communication Model Based on Generative Adversarial network

Optimization of Encrypted Communication Model Based on Gener...

引用

2022 International Conference on Blockchain Technology and information security, ICBCTIS 2022

作者： Duan, Xiaowei Han, Yiliang Wang, Chao Ni, Huanhuan College of Cryptographic Engineering Engineering University of Pap Xi'an China Key Laboratory of Pap for Cryptology and Information Security Xi'an China

ISBN: (数字)9781665496919

ISBN: (纸本)9781665496919

With the progress of cryptography computer science, designing cryptographic algorithms using deep learning is a very innovative research direction. Google Brain designed a communication model using generation adversarial network and explored the encrypted communication algorithm based on machine learning. However, the encrypted communication model it designed lacks quantitative evaluation. When some plaintexts and keys are leaked at the same time, the security of communication cannot be guaranteed. This model is optimized to enhance the security by adjusting the optimizer, modifying the activation function, and increasing batch normalization to improve communication speed of optimization. Experiments were performed on 16 bits and 64 bits plaintexts communication. With plaintext and key leak rate of 0.75, the decryption error rate of the decryptor is 0.01 and the attacker can't guess any valid information about the communication. © 2022 IEEE.

关键词： Generative adversarial networks

来源：评论

学校读者我要写书评

暂无评论

Global Importance Analysis of Nodes Based on Complex network Theory 3

Global Importance Analysis of Nodes Based on Complex Network...

引用

2022 3rd International Conference on Electrical, Electronic information and Communication engineering, EEICE 2022

作者： Lin, Shengnan Li, Shuai Su, Yang College of Cryptographic Engineering Engineering University of PAP Xi'an710086 China Key Laboratory of Network and Information Security under the Armed Police Force Engineering University of PAP Xi'an710086 China

Aiming at the effectiveness of global importance index of nodes in directed network, according to complex network theory, using degree index, intermediate centrality index, proximity centrality index and PageRank algorithm, the importance ranking of nodes is obtained,The global efficiency of the network and the number of nodes in the maximum connected subgraph are used as the criterion to attack the directed network with priority of node importance, analyzing the effectiveness of four indexes to evaluate the global importance of *** global importance of nodes is studied by using the index with high effectiveness. By protecting the nodes with high global importance, the survivability and the overall efficiency of the directed network can be improved. © Published under licence by IOP Publishing Ltd.

关键词： Complex networks

来源：评论

学校读者我要写书评

暂无评论

Design and Implementation of Voting System Based on Ethereum

Design and Implementation of Voting System Based on Ethereum

引用

2021 International Conference on Intelligent Computing, Automation and Applications, ICAA 2021

作者： Yin, Dongqing Zhang, Mingshu Wei, Bin Lin, Wenbing Engineering University of the PAP Key Laboratory for Network and Information Security of the PAP Xi'an710086 China

ISBN: (纸本)9781665437301

Electronic voting can greatly reduce the cost of voting activities and solve many problems of voting information leakage caused by traditional paper voting. As the development and extension of blockchain technology, Ethereum technology can well solve the centralization problem of traditional electronic voting. This solution proposes an electronic voting system based on Ethereum technology to meet the security requirements of electronic voting, and uses Ethereum smart contract technology to replace the traditional trusted third party, which solves the possible drawbacks of the centralized voting system and improves security and voters' trust in the voting system reduce voting costs. Finally, the electronic voting function is realized, and the normal operation of the system is guaranteed through the test. © 2021 IEEE.

关键词： Ethereum

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：