检索结果-内蒙古大学图书馆

International Symposium on Electronic Commerce and Security

作者： Xiongpai Qin Xiaoyun Zhou Key Laboratory of Data Engineering and Knowledge Engineering School of Information Renmin University of China Beijing China School of Information and Electrical Engineering China University of Mining and Technology Xuzhou Jiangsu China

Traditional Web database cache techniques have a major disadvantage, namely poor data freshness, because they employ an asynchronous data refresh strategy. A novel Web database cache, DB Facade, is proposed in this paper. DB Facade uses a main memory database to cache result sets of previous queries for subsequent reusing. Updates on backend database system are managed by delta tables, and then propagated to Web database cache in a near real-time manner, hence guarantee the freshness of data. DB Facade off loads query burden from backend database systems, and exploits the power of main memory database system to boost query performance. TPC-W testing result shows that the system's performance increases by about 17 percent.

关键词： database systems System testing Assembly systems Web pages Web server Electronic commerce data security Information security Laboratories data engineering

来源：评论

学校读者我要写书评

暂无评论

Against Code Injection with System Call Randomization

Against Code Injection with System Call Randomization

引用

International Conference on Networks Security, Wireless Communications and Trusted Computing, NSWCTC

作者： Zhaohui Liang Bin Liang Luping Li Wei Chen Qingqing Kang Yingqin Gu Key Laboratory of Data Engineering and Knowledge Engineering Renmin University of China Beijing China Renmin University of China Beijing CN School of Information Renmin University of China China

ISBN: (纸本)9781424442232

The existing code injection attack defense methods have some deficiencies on performance overhead and effectiveness. In order to ensure the system performance, we propose a method that uses system call randomization to counter code injection attacks based on instruction set randomization idea. An injected code would perform its actions with system calls. System call randomization on operating system level will prevent the injected code from executing correctly. Moreover, with an extended compiler, our method can perform source code randomization during compiling and implement binary executable files randomization by feature matching. The experiments show that our method can effectively counter variety code injection attacks with low overhead.

关键词： Equations Counting circuits Operating systems Kernel Communication system security data security Information security Wireless communication Computer networks Laboratories

来源：评论

学校读者我要写书评

暂无评论

Malicious Web Pages Detection Based on Abnormal Visibility Recognition

Malicious Web Pages Detection Based on Abnormal Visibility R...

引用

International Conference on E-Business and Information System Security, EBISS

作者： Bin Liang Jianjun Huang Fang Liu Dawei Wang Daxiang Dong Zhaohui Liang Key Laboratory of Data Engineering and Knowledge Engineering MOE Renmin University of China Beijing China School of Information Renmin University of China Beijing China Renmin University of China Beijing CN

In recent years, Web sites have already become the attackers' main target. When attackers embed malicious code in the Web pages, they generally change the display mode of the corresponding HTML tags to make the display effect of malicious code invisible or almost invisible to the browser users. In this paper, the concept of abnormal visibility is proposed to describe the display feature setting of malicious code embedded. According to the concept, a malicious code detection method based on abnormal visibility recognition is designed and a prototype system is implemented. Compared to traditional methods and systems, the method has higher efficiency and less maintenance cost. Besides, a special-purpose JavaScript interpreter is implemented to get the execution output of browser-end scripts that are often used to generate malicious code dynamically by attackers. Experiments show that this system can detect most of the malicious Web pages efficiently and at the same time locate the malicious code in the source code accurately.

关键词： Web pages Displays Java Prototypes HTML Costs Invasive software Fingerprint recognition Laboratories data engineering

来源：评论

学校读者我要写书评

暂无评论

Configurable ranking for XML vague retrieval

引用

Journal of Computational Information Systems 2009年第2期5卷 683-692页

作者： Jiang, Tengjiao Wan, Changxuan Liu, Xiping School of Information Technology Jiangxi University of Finance and Economics Nanchang 330013 China Jiangxi Key Laboratory of Data and Knowledge Engineering Jiangxi University of Finance and Economics Nanchang 330013 China

Ranking is one of the key factors for efficient and effective XML information retrieval. Compared with traditional IR, XML information retrieval has introduced many new challenges, one of which is that the traditional static document ranking method is no longer sufficient for ranking XML query results. As a result, we need a new ranking method. The paper studies the proper ranking model for XML vague retrieval. We first study the properties of vague retrieval over XML documents, and conclude the influencing factors of structure and content relaxation of XML vague retrieval. To improve recall and precision, we propose a new idea of confident structure query and vague structure query. Then, a configurable ranking model for twig pattern query results is proposed, in which users can configure query parameter. The model is designed to handle the new features of XML VCAS (vague content and structure). The architecture of corresponding XML search engine is also provided. © 2009 Binary Information Press March, 2009.

关键词： XML

来源：评论

学校读者我要写书评

暂无评论

Rapid Resynchronization Method for Replication In-Memory databases Supporting Mobile Communication Applications

Rapid Resynchronization Method for Replication In-Memory Dat...

引用

Computer Science and Information engineering, CSIE, WRI World Congress on FLAGGED

作者： Guoqiong Liao Jing Li Jiangxi Key Laboratory of Data and Knowledge Engineering Jiangxi University of Finance and Economics Nanchang China School of Information Technology Jiangxi University of Finance and Economics Nanchang China

In this paper, a rapid resynchronization method using intent logs is suggested for replication in-memory databases supporting mobile communication applications. Both the identifiers of unsynchronized segments and the identifiers of the slaves who have missed the updates in the segments are recorded in the intent logs. When receiving a resynchronization request from a slave, the master will scan the intent logs to find the unsynchronized segments for the salve, and then send the segments gotten directly from its memory to the slave. The performance results shown the intent logs method can reduce resynchronization time than methods using transaction logs.

关键词： Mobile communication Master-slave Transaction databases Availability Mission critical systems knowledge engineering Application software Finance Resumes Computer crashes

来源：评论

学校读者我要写书评

暂无评论

Web page malicious code detection based on embedded fingerprints

引用

Qinghua Daxue Xuebao/Journal of Tsinghua University 2009年第SUPPL. 2期49卷 2208-2214页

作者： Huang, Jianjun Liang, Bin Key Laboratory of Data Engineering and Knowledge Engineering of Ministry of Education School of Information Renmin University of China Beijing 100872 China

Web sites have become the main targets of many attackers. Signature-based detection needs to maintain a large signature database and Honeypot based methods are not efficient. Since attackers always make the malicious codes in Web pages difficult to detect by the browser users, their methods can be classified into various fingerprints. Various malicious codes were analyzed to identify 6 types of fingerprints. The system utilizes a spider integrated with script interpretation to fetch target Web pages and extract specific tags for detection by HTML parsing for matching with the fingerprints to detect malicious codes. This method needs fewer fingerprints than traditional detection methods and is more efficient. Results for 60 websites show that the system has a false negative rate of 2.63% and a false positive rate of 1.99%.

关键词： Websites

来源：评论

学校读者我要写书评

暂无评论

Synchronous replication framework of databases servers supporting reliable electronic commerce applications

引用

Journal of Computational Information Systems 2009年第2期5卷 849-858页

作者： Liao, Guoqiong Chen, Shijun School of Information Technology Jiangxi University of Finance and Economics Nanchang 330013 China Jiangxi Key Laboratory of Data and Knowledge Engineering Nanchang 330013 China Siemens Ltd. China Corporate Technology Beijing 100102 China

To support electronic commerce applications with high reliability requirements, a synchronous replication framework of database servers is designed in this paper. At first, a three-tier architecture consisting of Web Servers (WS), Electronic Commerce Servers (ECS) and database Servers (DBS) for a reliable electronic commerce system is presented. Then, a primary copy synchronous replication model under the structure is given. Finally, a data synchronization method using one-phase commit (1PC) protocol for the model is discussed in details. The analysis result shows that 1PC can reduce response time than the two-phase commit protocol. © 2009 Binary Information Press March, 2009.

关键词： Electronic commerce

来源：评论

学校读者我要写书评

暂无评论

Efficient Processing of Global Top-k Aggregate Queries in Uncertain database

Efficient Processing of Global Top-k Aggregate Queries in Un...

引用

International Conference on Information engineering and Computer Science (ICIECS)

作者： Xianli Xing Dexi Liu Principal's Office Jiangxi University of Finance and Economics Nanchang China School of Information Technology Jiangxi Key Laboratory of Data and Knowledge Engineering Jiangxi University of Finance and Economics Nanchang China

ISBN: (纸本)9781424449934

Top-k queries in uncertain databases are quite popular and useful due to its wide application usage. However, compared to top-k in traditional databases, queries over uncertain database are more complicated because of the existence of exponential possible worlds. A Top-k aggregate query ranks groups of tuples by their aggregate values, sum or average for example, and returns k groups with the highest aggregate values. As a powerful semantic of top-k, global top-k, returns A highest-ranked tuples according to their probabilities of being in the top-k anTopswers in possible worlds. We propose a dynamic programming based method to process global top-k aggregate queries in uncertain database, where the number of retrieved tuples and group states generated on these tuples are minimized. Experiment results show that our algorithm is effective.

关键词： Aggregates databases Finance Power generation economics Dynamic programming Information technology Laboratories knowledge engineering Information retrieval Performance analysis

来源：评论

学校读者我要写书评

暂无评论

Chinese integral word segmentation recognition based on reliability

引用

Journal of Information and Computational Science 2009年第1期6卷 533-542页

作者： Wan, Changxuan Wang, Fang School of Information Technology Jiangxi University of Finance and Economics Nanchang 330013 China Jiangxi Key Laboratory of Data and Knowledge Engineering Jiangxi University of Finance and Economics Nanchang 330013 China School of Humanities Nanchang University Nanchang 330013 China

As one part of preprocessing, automatic word segmentation is an key issue in Chinese information retrieval. Since integral words are put wholly together to compose into the more meaningful words and more express users' query minds in information retrieval, we combine the calculation of mutual information, prefix- and-suffix information of integral word with the reliability of composing into the integral word, and put forward three Chinese integral word segmentation recognition method based on reliability according to the characteristics of the integral words. Then, we design and realize the prototype system of three Chinese integral word segmentation recognition methods based on reliability. Finally, tests and analysis on 2nd SIGHAN (2005) PKU test corpus show that the recognition performance of the system is good, and can satisfy different needs at the same time. © 2009 Binary Information Press.

关键词： Reliability

来源：评论

学校读者我要写书评

暂无评论

Static vulnerabilities detection method based on security state tracing and checking

引用

Jisuanji Xuebao/Chinese Journal of Computers 2009年第5期32卷 899-909页

作者： Liang, Bin Hou, Kan-Kan Shi, Wen-Chang Liang, Zhao-Hui School of Information Renming University of China Beijing 100872 China MOE Key Laboratory of Data Engineering and Knowledge Engineering Beijing 100872 China

The main problem of existing static vulnerability detection methods based source code analysis is their high false positive and false negative rates. One main reason is lack of accurate and effective identification and analysis of security-related program elements, e.g. data validation checking, tainted data source, etc. A static vulnerability detection method based on data security state tracing and checking is proposed. In this method, the state space of state machine model is extended;the security state of a variable is identified by a vector that may correspond to multiple security-related properties rather than by a single property;Fine-grained state transition is provided to support accurate recognition of program security-related behaviors;The recognition of validation checking is introduced in vulnerability state machine to reduce false positives;and a systematic discrimination mechanism for tainted data is constructed to prevent false negatives result from neglecting tainted data sources. The experimental results of a prototype system show that this method can effectively detect buffer overflow and other type's vulnerabilities in software systems, and with obviously lower false positive than existing mainstream static detection methods and avoid some serious false negatives of these methods.

关键词： Static analysis

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：