检索结果-内蒙古大学图书馆

International Joint Conference on Neural networks (IJCNN)

作者： Changnan Jiang Chunhe Xia Mengyao Liu Rui Fang Pengfei Li Huacheng Li Tianbo Wang Beijing Key Lab. of Network Technology Beihang University Beijing China Guangxi Collaborative Innovation Center of Multi-Source Information Integration and Intelligent Processing Guangxi Normal University Guilin China School of Cyber Science and Technology Beihang University Beijing China SNationa Innovation Center of Intelligent and Connected Vehicles Beijing China Shanghai Key Laboratory of Computer Software Evaluating and Testing China

ISBN: (数字)9798350359312

ISBN: (纸本)9798350359329

The federated Android malware classifier has attracted much attention owing to its advantages of privacy protection and multi-party joint modeling. However, the research indicates that the gradient transmitted within the federated classifier still encodes the user's sensitive information, exposing it to indirect privacy inference threats from curious servers. Differential privacy is a recognized and effective way to address this privacy breach threat by adding noise to the user's model parameters to limit the attacker's inference of sensitive information. However, the protection effect of existing differential privacy methods is at the cost of significantly reducing the model's classification accuracy, and it cannot be reasonably balanced. To address this challenge, we propose a privacy protection method, FedDADP. FedDADP performs adaptive, lightweight privacy configuration in its training time dimension and model space dimension according to the privacy risk distribution law in the federated Android malware classifier to protect users' privacy while maintaining the model's utility. Numerous experiments on the Androzoo dataset and multiple baseline classifiers show that FedDADP protects users' sensitive information better (7% more effectiveness against adversaries' inference) than baseline differential privacy methods and achieves better model utility (classification accuracy improves by about 8%) with the same privacy budget.

关键词： Training Privacy Adaptation models Differential privacy Accuracy Privacy breach Malware

来源：评论

学校读者我要写书评

暂无评论

FedDLM: A Fine-Grained Assessment Scheme for Risk of Sensitive information Leakage in Federated Learning-based Android Malware Classifier

FedDLM: A Fine-Grained Assessment Scheme for Risk of Sensiti...

引用

IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)

作者： Changnan Jiang Chunhe Xia Chen Chen Huacheng Li Tianbo Wang Xiaojian Li Beijing Key Lab. of Network Technology Beihang University Beijing China Guangxi Collaborative Innovation Center of Multi-Source Information Integration and Intelligent Processing Guangxi Normal University Guilin China School of Cyber Science and Technology Beihang University Beijing China Shanghai Key Laboratory of Computer Software Evaluating and Testing Shanghai China College of Computer Science and Information Technology Guangxi Normal University Guilin China

ISBN: (数字)9798350381993

ISBN: (纸本)9798350382006

In the traditional centralized Android malware classification framework, privacy concerns arise as it requires collecting users’ app samples containing sensitive information directly. To address this problem, new classification frameworks based on Federated Learning (FL) have emerged for privacy preservation. However, research shows that these frameworks still face risks of indirect information leakage due to adversary inference. Unfortunately, existing research lacks an effective assessment of the extent and location of this leakage risk. To bridge the gap, we propose the FedDLM, which provides a fine-grained assessment of the risk of sensitive information leakage in an FL-based Android malware classifier. FedDLM estimates attackers’ theoretical maximum inference ability from the information theory perspective to gauge the degree of leakage risk in the classifier effectively. It precisely identifies critical positions in the shared gradient where the leakage risk exists by utilizing characteristics of class activation in classifiers. Through extensive experiments on the Androzoo dataset, FedDLM demonstrates its superior effectiveness and precision compared to baseline methods in evaluating the risk of sensitive information leakage. The evaluation results provide valuable insights into information leakage problems in classifiers and targeted privacy protection methods.

关键词： Meters Privacy Federated learning information leakage Malware Security Risk management

来源：评论

学校读者我要写书评

暂无评论

AIDE: Attack Inference Based on Heterogeneous Dependency Graphs with MITRE ATT&CK

AIDE: Attack Inference Based on Heterogeneous Dependency Gra...

引用

IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)

作者： Weidong Zhou Chunhe Xia Nan Feng Xinyi Pan Tianbo Wang Xiaojian Li Beijing Key Lab. of Network Technology Beihang University Beijing China Guangxi Collaborative Innovation Center of Multi-Source Information Integration and Intelligent Processing Guangxi Normal University Guilin China School of Software & Microelectronics Peking University Beijing China School of Cyber Science and Technology Beihang University Beijing China School of Computer Science and Engineering Guangxi Normal University Guilin China

ISBN: (数字)9798331506209

ISBN: (纸本)9798331506216

The MITRE ATT&CK Framework provides a rich and actionable repository of adversarial tactics, techniques, and procedures (TTPs). By leveraging the associations among these techniques, we can infer unobserved techniques based on those have been observed. Current machine learning inference methods based on small-scale data face the following problems: "logical dependencies missing" and "complex associations missing." The former means that current association methods rely solely on the statistical dependencies between attack techniques while ignoring the logical dependencies involved in executing those techniques. The latter indicates that current inference methods simplify the complex associations between technologies based on statistical assumptions, failing to adequately capture the long-range and intricate real-world relationships between techniques. To address these problems, we propose an Attack Inference model based on heterogeneous DEpendency graphs (AIDE). First, we extract three types of logical dependencies: CVE, Pattern, and Conditional, which allows us to construct a heterogeneous dependency graph among the techniques, thus addressing the "logical dependencies missing" problem. Second, we employ Relation Graph Convolution Neural networks (RGCN) to aggregate heterogeneous dependencies into representation vectors of the techniques. Finally, we utilize the sequence inference model Decoder, which excels at capturing implicit contextual associations, to infer unknown attacks, thus addressing the "complex associations missing" problem. Experiments conducted on real datasets demonstrate that our model significantly outperforms state-of-the-art baseline models in both hits@k and map@k metrics.

关键词： Adaptation models Aggregates Refining Machine learning Vectors Threat assessment Real-time systems Decoding Security Context modeling

来源：评论

学校读者我要写书评

暂无评论

EFwork: An Efficient Framework for Constructing a Malware Knowledge Graph

EFwork: An Efficient Framework for Constructing a Malware Kn...

引用

IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)

作者： Chen Chen Chunhe Xia Tianbo Wang Wanshuang Lin Yuan Zhao Yang Li Beijing Key Lab. of Network Technology Beihang University Beijing China Guangxi Collaborative Innovation Center of Multi-Source Information Integration and Intelligent Processing Guangxi Normal University Guilin China School of Cyber Science and Technology Beihang University Beijing China Shanghai Key Laboratory of Computer Software Evaluating and Testing Shanghai China

ISBN: (数字)9798350381993

ISBN: (纸本)9798350382006

Malware Knowledge Graph (MKG) serves as an essential auxiliary tool for malware detection and analysis. However, the construction of MKG faces several challenges, such as inadequate dataset quality, incomplete entity feature extraction, and the limitations imposed by deep learning techniques. To address these issues, we present an Efficient Framework for constructing a malware knowledge graph (EFwork). Firstly, we build a High-Quality Dataset (HQDataset) and introduce a metric for data quality assessment based on knowledge coverage, timeliness, and density. Subsequently, we develop a Named Entity Recognition (NER) model that extracts character features, part-of-speech features, and word features from the data, leveraging deep learning models to identify malware-related entities. Finally, we implement a rule-based filtering mechanism, utilizing a comprehensive Rule Database to eliminate entities that do not conform to predefined rules. Experimental result shows that our HQDataset demonstrates superior data quality when compared to other open-source datasets. Furthermore, our NER model combined with our Rule Database outperforms existing models, achieving improvements of 0.67%, 0.74%, and 0.69% in Precision, Recall, and F1-Score, respectively.

关键词： Measurement Deep learning Databases Filtering Data integrity Knowledge graphs Feature extraction

来源：评论

学校读者我要写书评

暂无评论

REDA: Malicious Traffic Detection Based on Record Length and Frequency Domain Analysis

REDA: Malicious Traffic Detection Based on Record Length and...

引用

IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)

作者： Wanshuang Lin Chunhe Xia Tianbo Wang Chen Chen Yuan Zhao Weidong Zhou School of Cyber Science and Technology Beihang University Beijing China Beijing Key Lab. of Network Technology Beihang University Beijing China Guangxi Collaborative Innovation Center of Multi-Source Information Integration and Intelligent Processing Guangxi Normal University Guilin China Shanghai Key Laboratory of Computer Software Evaluating and Testing Shanghai China

ISBN: (数字)9798350381993

ISBN: (纸本)9798350382006

The TLS encryption protocol plays a vital role in securing data transmission, but it also presents challenges for payload-based network Intrusion Detection Systems (NIDS). Existing methods utilize statistical characteristics of side-channel features, such as the mean packet length, to identify encrypted traffic. However, packet lengths are constrained by the Maximum Segment Size (MSS) of the TCP protocol. This constraint causes the length-varied sequence to be encapsulated into segments of equal length, resulting in information loss. Moreover, flow-level statistical features are vulnerable to interference from noisy packets, making it challenging to detect malicious traffic injected with benign packets effectively. In this paper, we propose an encrypted traffic detection model based on Record length and frEquency Domain Analysis (REDA). First, we reconstruct the TLS Record Length Sequence (TRLS), which is a length-varied sequence, to capture differences in traffic content during transmission. Second, we employ the Discrete Fourier Transform (DFT) to extract frequency domain features of the TRLS, which are resistant to attacker interference. Finally, an improved One-Class Support Vector Machine (OCSVM) algorithm is devised for the unsupervised detection of malicious traffic, enabling the identification of unknown attacks. Experiments show that REDA is superior to other state-of-the-art methods in terms of accuracy by 2.44%.

关键词： Support vector machines Resistance Analytical models Privacy Protocols Frequency-domain analysis Computational modeling

来源：评论

学校读者我要写书评

暂无评论

FedDRC: A Robust Federated Learning-based Android Malware Classifier under Heterogeneous Distribution

FedDRC: A Robust Federated Learning-based Android Malware Cl...

引用

International Conference on computer Supported Cooperative Work in Design

作者： Changnan Jiang Chunhe Xia Mengyao Liu Chen Chen Huacheng Li Tianbo Wang Pengfei Li Beijing Key Lab. of Network Technology Beihang University Beijing China Guangxi Collaborative Innovation Center of Multi-Source Information Integration and Intelligent Processing Guangxi Normal University Guilin China School of Cyber Science and Technology Beihang University Beijing China Shanghai Key Laboratory of Computer Software Evaluating and Testing Shanghai China SNationa Innovation Center of Intelligent and Connected Vehicles Beijing China

ISBN: (数字)9798350349184

ISBN: (纸本)9798350349191

In the traditional centralized Android malware classification framework, privacy concerns exist due to collected users’ apps containing sensitive information. A new classification framework based on Federated Learning (FL) has emerged to protect privacy. However, significant spatiotemporal heterogeneity exists in the distribution of Android malware samples in different clients. It presents a huge challenge to existing FL schemes, as trained local models differ significantly, resulting in slower model convergence and lower classification accuracy. To bridge this gap, we propose FedDRC, a robust FL-based Android malware classifier. First, we design a functional semantic embedding mechanism of API features, FSEM, using word embedding to improve the robustness of the model to the time heterogeneity of the client’s samples. Secondly, we use the idea of information Bottleneck (IB) and transfer learning to design a robust local model, PAMIB, to deal with the model degradation caused by the space heterogeneity of the distribution of client samples. Extensive experiments on the Androzoo dataset show that FedDRC has the best robustness for Android malware classification tasks in various heterogeneity distribution settings: fastest convergence and best classification accuracy.

关键词： Degradation Privacy Accuracy Federated learning Transfer learning Semantics Malware

来源：评论

学校读者我要写书评

暂无评论

Disentangled high quality salient object detection

arXiv

引用

arXiv 2021年

作者： Tang, Lv Li, Bo Ding, Shouhong Song, Mofei Youtu Lab Tencent Shanghai China School of Computer Science and Engineering Key Lab of Computer Network and Information Integration Ministry of Education Southeast University Nanjing China

Aiming at discovering and locating most distinctive objects from visual scenes, salient object detection (SOD) plays an essential role in various computer vision systems. Coming to the era of high resolution, SOD methods are facing new challenges. The major limitation of previous methods is that they try to identify the salient regions and estimate the accurate objects boundaries simultaneously with a single regression task at low-resolution. This practice ignores the inherent difference between the two difficult problems, resulting in poor detection quality. In this paper, we propose a novel deep learning framework for high-resolution SOD task, which disentangles the task into a low-resolution saliency classification network (LRSCN) and a high-resolution refinement network (HRRN). As a pixel-wise classification task, LRSCN is designed to capture sufficient semantics at low-resolution to identify the definite salient, background and uncertain image regions. HRRN is a regression task, which aims at accurately refining the saliency value of pixels in the uncertain region to preserve a clear object boundary at high-resolution with limited GPU memory. It is worth noting that by introducing uncertainty into the training process, our HRRN can well address the high-resolution refinement task without using any high-resolution training data. Extensive experiments on high-resolution saliency datasets as well as some widely used saliency benchmarks show that the proposed method achieves superior performance compared to the state-of-the-art methods. © 2021, CC BY.

关键词： Pixels

来源：评论

学校读者我要写书评

暂无评论

A Private Statistic Query Scheme for Encrypted Electronic Medical Record System *

A Private Statistic Query Scheme for Encrypted Electronic Me...

引用

International Conference on computer Supported Cooperative Work in Design

作者： Xianxian Li Xuemei Fu Feng Yu Zhenkui Shi Jie Li Junhao Yang Guangxi Key Lab of Multi-source Information Mining & Security Guilin China Key Laboratory of Computer Network and Information Integration Southeast University Nanjing China

In this paper, we propose a scheme that supports statistic query and authorized access control on an Encrypted Electronic Medical Records Databases(EMDB). Different from other schemes, it is based on Differential-Privacy(DP), which can protect the privacy of patients. By deploying an improved Multi-Authority Attribute-Based Encryption(MA-ABE) scheme, all authorities can distribute their search capability to clients under different authorities without additional negotiations. To our best knowledge, there are few studies on statistical queries on encrypted data. In this work, we consider that support differentially-private statistical queries. To improve search efficiency, we leverage the Bloom Filter(BF) to judge whether the keywords queried by users exists. Finally, we use experiments to verify and evaluate the feasibility of our proposed scheme.

关键词： Access control Data privacy Privacy Histograms Databases Conferences Cryptography

来源：评论

学校读者我要写书评

暂无评论

BEIR:A Blockchain-based Encrypted Image Retrieval Scheme

BEIR:A Blockchain-based Encrypted Image Retrieval Scheme

引用

International Conference on computer Supported Cooperative Work in Design

作者： Xianxian Li Jie Li Feng Yu Xuemei Fu JunHao Yang Yue Chen Guangxi Key Lab of Multi-source Information Mining & Security Guilin China Key Laboratory of Computer Network and Information Integration Southeast University Nanjing China

ISBN: (纸本)9781728165974;9781728165981

Encrypted image retrieval may return incorrect or incomplete results due to threats from malicious cloud servers. Most of the existing solutions focus on the efficiency and accuracy of retrieval, lack of verification of the completeness of search results, to achieve the reliability of search results and the transparency of the search process, we explore characteristic such as the decentralization and tamper-proof of blockchain, proposed a blockchain-based encrypted image retrieval scheme. This scheme stores the encrypted index on the blockchain (Ethereum), through the blockchain consensus mechanism and the function of searching on the smart contract, ensures the integrity and correctness of search results, then outsources the corresponding encrypted images to the cloud server to reduce storage cost, and designs a double-layer index structure using the bag of visual word model and simhash in the process of image similarity index. Experiments show that the reliability, high retrieval efficiency, and precision of the scheme also have a good privacy protection effect.

关键词： Privacy Visualization Image retrieval Smart contracts Blockchain Search problems Encryption

来源：评论

学校读者我要写书评

暂无评论

Funny words detection via Contrastive Representations and Pre-trained Language Model

Funny words detection via Contrastive Representations and Pr...

引用

Artificial Intelligence, networking and information Technology (AINIT), International Seminar on

作者： Yiming Du Zelin Tian Key Lab of Computer Network and Information Integration School of Computer Science and Engineering- Southeast University (SEU) Nanjing China University of British Columbia Vancouver Canada

ISBN: (纸本)9781665412971

Funniness detection of news headlines is a challenging task in computational linguistics. However, most existing works on funniness detection mainly tackle the scenario by simply judging whether a sentence is humorous, whose result is unstable due to factors such as sentence length. To solve this issue, in this paper, our idea is to fine-grained mine the detailed information of the words and the contextual relationship between different words in the sentence, which help to evaluate the correlation between keywords and the funniness of news headlines quantitatively. Specifically, we propose a funny words detection algorithm based on the contrastive representations learning and BERT model. To quantify the impact of different words on the degree of humor, we first subtract the funniness grades of the original news headlines and the funniness grades of the original news headlines with a single word replaced. Both funniness grades are predicted with a pre-trained model, which is supervised by a a threshold to limit the amount of data and ensure the validity of data. To ensure the accuracy of our prediction, we further introduce the contrastive learning to constrain the differences of news headlines before and after word replacement. Finally, according to the Root Mean Square Error (RMSE) matrix in our experiment, we develop a BERT model with mixed sequence embedding to generate a table about words and their corresponding funniness improvement about the news headlines.

关键词： Seminars Representation learning Correlation Bit error rate Predictive models Data models Task analysis

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：