检索结果-内蒙古大学图书馆

作者： Zúñiga-Prieto, Miguel González-Huerta, Javier Insfran, Emilio Abrahão, Silvia Department of Information Systems and Computation Universitat Politècnica de València Camino de Vera s/n Valencia46022 Spain Department of Computer Science Universidad de Cuenca Av. 12 de Abril y Agustín Cueva 01.01.168 Cuenca Ecuador Software Engineering Research Lab Sweden Blekinge Institute of Technology Campus Gräsvik Karlskrona371 79 Sweden

Service-based cloud applications are software systems that continuously evolve to satisfy new user requirements and technological changes. This kind of applications also require elasticity, scalability, and high availability, which means that deployment of new functionalities or architectural adaptations to fulfill service level agreements (SLAs) should be performed while the application is in execution. Dynamic architectural reconfiguration is essential to minimize system disruptions while new or modified services are being integrated into existing cloud applications. Thus, cloud applications should be developed following principles that support dynamic reconfiguration of services, and also tools to automate these reconfigurations at runtime are needed. This paper presents an extension of a model-driven method for dynamic and incremental architecture reconfiguration of cloud services that allows developers to specify new services as software increments, and the tool to generate the implementation code for the services integration logic and the deployment and architectural reconfiguration scripts specific to the cloud environment in which the service will be deployed (e.g., Microsoft Azure). We also report the results of a quasi-experiment that empirically validate our method. It was conducted to evaluate their perceived ease of use, perceived usefulness, and perceived intention to use. The results show that the participants perceive the method to be useful, and they also expressed their intention to use the method in the future. Although further experiments must be carried out to corroborate these results, the method has proven to be a promising architectural reconfiguration process for cloud applications in the context of agile and incremental development processes. Copyright © 2016 John Wiley & Sons, Ltd. Copyright © 2016 John Wiley & Sons, Ltd.

关键词： Cloud computing architecture

来源：评论

学校读者我要写书评

暂无评论

Enhancing Secure software Development Education Through Relevant Active Learning

Enhancing Secure Software Development Education Through Rele...

引用

IEEE SoutheastCon

作者： Lixin Tao Fan Wu Kai Qian Dan Lo Reza M. Parizi Bei-Tseng Chu Department of Computer Science Pace University 861 Bedford Road Pleasantville NY USA Department of Computer Science Tuskegee University 1200 W. Montgomery Rd. Tuskegee AL USA Department of Computer Science Department of Software Engineering and Game Development Kennesaw State University 1100 South Marietta Pkwy SE Marietta GA USA Department of Software and Information Systems University of North Carolina at Charlotte 9201 University City Blvd Charlotte NC

ISBN: (纸本)9781538661345

While the mobile applications are increasing dramatically, the mobile security threat landscape is also growing explosively. The malicious malware may attack vulnerable mobile apps to get personal or enterprise confidential data anywhere and anytime. Most vulnerabilities should be addressed and fixed in the early stage of mobile software development. However, many development professionals lack the awareness of the importance of security vulnerability and the necessary secure knowledge and skills at the development stage. Also, secure software development is still a relatively weak area and is not well represented in most schools' computing curriculum. This poster addresses the needs and challenges of the lack of pedagogical materials and real world learning environment in Secure Mobile software Development (SMSD) through effective, engaging, and investigative authentic learning approaches.

关键词： SMSD Andriod Relevant Active Learning

来源：评论

学校读者我要写书评

暂无评论

Using Sparse Matrices to Prevent Information Leakage in Cloud Computing

Using Sparse Matrices to Prevent Information Leakage in Clou...

引用

International Conference on Future Internet of Things and Cloud (FiCloud)

作者： Khaled Khan Mahboob Shaheen Yongge Wang Computer Science and Engineering KINDI Computing Lab Qatar University Qatar Department of Math and Physics North South University Dhaka Bangladesh Software and Information Systems University of North Carolina Charlotte USA

ISBN: (纸本)9781538675045

Cloud computing represents the promise of outsourcing of scientific computing such as matrix multiplication. However, this can introduce new vulnerabilities such as information leakage. Cloud server intentionally or unintentionally may reveal sensitive input matrices of the client as well as multiplication results to unauthorised entities. In this paper, we propose two protocols that use sparse matrices to prevent information leakage in outsourcing matrix multiplications to cloud computing without encryption. The protocols are considered lightweight compared to other comparable approaches. We also provide a running example to demonstrate how the protocols ensure no information leakage of client data.

关键词： Sparse matrices Cloud computing Servers Protocols Encryption software

来源：评论

学校读者我要写书评

暂无评论

A fine-grained data set and analysis of tangling in bug fixing commits

arXiv

引用

arXiv 2020年

作者： Herbold, Steffen Trautsch, Alexander Ledel, Benjamin Aghamohammadi, Alireza Ghaleb, Taher Ahmed Chahal, Kuljit Kaur Bossenmaier, Tim Nagaria, Bhaveet Makedonski, Philip Ahmadabadi, Matin Nili Szabados, Kristof Spieker, Helge Madeja, Matej Hoy, Nathaniel G. Lenarduzzi, Valentina Wang, Shangwen Rodríguez-Pérez, Gema Colomo-Palacios, Ricardo Verdecchia, Roberto Singh, Paramvir Qin, Yihao Chakroborti, Debasish Davis, Willard Walunj, Vijay Wu, Hongjun Marcilio, Diego Alam, Omar Aldaeej, Abdullah Amit, Idan Turhan, Burak Eismann, Simon Wickert, Anna-Katharina Malavolta, Ivano Sulír, Matúš Fard, Fatemeh Henley, Austin Z. Kourtzanidis, Stratos Tuzun, Eray Treude, Christoph Shamasbi, Simin Maleki Pashchenko, Ivan Wyrich, Marvin Davis, James C. Serebrenik, Alexander Albrecht, Ella Aktas, Ethem Utku Strüber, Daniel Erbel, Johannes Institute for Software and Systems Engineering TU Clausthal Clausthal-Zellefeld Germany Institute of Computer Science University of Goettingen Goettingen Germany Department of Computer Engineering Sharif University of Technology Tehran Iran School of Computing Queen's University Kingston Canada Department of Computer Science Guru Nanak Dev University Amritsar India Karlsruhe Germany Brunel University London Uxbridge United Kingdom Institute of Computer Science University of Goettingen Germany University of Tehran Tehran Iran Ericsson Hungary Ltd. Budapest Hungary Simula Research Laboratory Fornebu Norway Technical University of Košice Košice Slovakia LUT University Finland National University of Defense Technology Changsha China University of British Columbia Kelowna Canada Østfold University College Halden Norway Vrije Universiteit Amsterdam Amsterdam Netherlands University of Auckland Auckland New Zealand University of Saskatchewan Saskatoon Canada IBM Boulder United States University of Missouri-Kansas City Kansas City United States Università della Svizzera italiana Lugano Switzerland Trent University Peterborough Canada University of Maryland Baltimore County United States Imam Abdulrahman Bin Faisal University Saudi Arabia The Hebrew University Acumen Jerusalem Israel University of Oulu Oulu Finland Monash University Melbourne Australia University of Würzburg Würzburg Germany Technische Universität Darmstadt Darmstadt Germany University of Tennessee Knoxville United States University of Macedonia Thessaloniki Greece Department of Computer Engineering Bilkent University Ankara Turkey University of Melbourne Melbourne Australia Independent Researcher Tehran Iran University of Trento Trento Italy University of Stuttgart Stuttgart Germany Purdue University West LafayetteIN United States Eindhoven University of Technology Eindhoven Netherlands Softtech Inc. Research and Development Center Istanbul34947 Turkey Radboud Universi

Context: Tangled commits are changes to software that address multiple concerns at once. For researchers interested in bugs, tangled commits mean that they actually study not only bugs, but also other concerns irrelevant for the study of bugs. Objective: We want to improve our understanding of the prevalence of tangling and the types of changes that are tangled within bug fixing commits. Methods: We use a crowd sourcing approach for manual labeling to validate which changes contribute to bug fixes for each line in bug fixing commits. Each line is labeled by four participants. If at least three participants agree on the same label, we have consensus. Results: We estimate that between 17% and 32% of all changes in bug fixing commits modify the source code to fix the underlying problem. However, when we only consider changes to the production code files this ratio increases to 66% to 87%. We find that about 11% of lines are hard to label leading to active disagreements between participants. Due to confirmed tangling and the uncertainty in our data, we estimate that 3% to 47% of data is noisy without manual untangling, depending on the use case. Conclusion: Tangled commits have a high prevalence in bug fixes and can lead to a large amount of noise in the data. Prior research indicates that this noise may alter results. As researchers, we should be skeptics and assume that unvalidated data is likely very noisy, until proven otherwise. Copyright © 2020, The Authors. All rights reserved.

关键词： Uncertainty analysis

来源：评论

学校读者我要写书评

暂无评论

Faculty Workshops for Teaching Information Assurance through Hands-On Exercises and Case Studies

引用

Journal of Information systems Education 2017年第1期28卷 11-19页

作者： Yuan, Xiaohong Williams, Kenneth Yu, Huiming Rorrer, Audrey Chu, Bei-Tseng Yang, Li Winters, Kathy Kizza, Joseph Department of Computer Science North Carolina A&T State University GreensboroNC27411 United States Charlotte NC28223 United States Software and Information Systems University of North Carolina – Charlotte CharlotteNC28223 United States Department of Computer Science and Engineering University of Tennessee – Chattanooga ChattanoogaTN37403 United States

Though many Information Assurance (IA) educators agree that hands-on exercises and case studies improve student learning, hands-on exercises and case studies are not widely adopted due to the time needed to develop them and integrate them into curricula. Under the support of the National science Foundation (NSF) Scholarship for Service program, we organized two faculty development workshops to disseminate effective hands-on exercises and case studies developed through multiple previous and ongoing grants. To develop faculty expertise in IA, the workshop covered a wide range of IA topics. This paper describes the hands-on exercises and case studies we disseminated through the workshops and reports our experiences of holding the faculty summer workshops. The evaluation results show that workshop participants demonstrated high levels of satisfaction with knowledge and skills gained in both the 2012 and 2013 workshops. Workshop participants also reported use of hands-on lab and case study materials in our follow-up survey and interviews. The workshops provided a valuable opportunity for IA educators to communicate and form collaborations in teaching and research in IA. © 2017. All Rights Reserved.

关键词： Curricula

来源：评论

学校读者我要写书评

暂无评论

Managing IoT-Based Smart Healthcare systems Traffic with software Defined Networks

Managing IoT-Based Smart Healthcare Systems Traffic with Sof...

引用

International Symposium on Networks, computers and Communications (ISNCC)

作者： Farag Sallabi Faisal Naeem Mamoun Awad Khaled Shuaib Department of Computer and Network Engineering United Arab Emirates University Al Ain UAE Department of Computing and Technology Abasyn University Peshawar Pakistan Department of Computer Science and Software Engineering United Arab Emirates University Al Ain UAE Department of Information Systems and Security United Arab Emirates University Al Ain UAE

Internet of things (IoT) aims to connect billions of devices to the Internet. These devices generate an enormous amount of traffic. A Wireless Body Area Network (WBAN) aggregates the data generated from the body sensors deployed on the human body or inside it. Due to resource constraints of the deployed sensors, aggregated data is forwarded to a server at an edge node or a cloud for further processing and decision making. With the wide acceptance of IoT deployments, WBANs can also be integrated with IoT to provide a clear contextual environment for smart healthcare applications' users. software Defined Networks (SDN) is a new networking paradigm providing centralized control and programmability of the networks. These features of SDN open new vistas for WBAN and IoT applications. In this paper, a personal digital assistant (PDA) is configured as an SDN switch, and we emulate the SDN functionality with Mininet to verify that this approach can be used in WBANs with minimum deployment complexity and network overhead, while efficiently manage the connected devices and the connections between them.

关键词： Sensors Wireless communication Body area networks Handheld computers Protocols Wireless sensor networks Medical services

来源：评论

学校读者我要写书评

暂无评论

A framework for automated corpus compilation for KeyXtract: Twitter model 17

A framework for automated corpus compilation for KeyXtract: ...

引用

17th International Conference on Advances in ICT for Emerging Regions, ICTer 2017

作者： Weerasooriya, Tharindu Perera, Nandula Liyanage, S.R. Department of Statistics and Computer Science University of Kelaniya Kelaniya Sri Lanka Department of English Language Teaching University of Kelaniya Kelaniya Sri Lanka Department of Software Engineering University of Kelaniya Kelaniya Sri Lanka

ISBN: (纸本)9781538624432

The corpus is a limiting factor for a keyword extraction process with a word matching stage. This paper proposes a framework to automate the corpus generation stage required for the Twitter Model of KeyXtract, an algorithm used for essential keyword extraction from tweets. The initial algorithm was designed with two manually compiled corpora that limited the adaptability of the system. The automated framework proposed in the present research is an extension to the keyword extraction process of KeyXtract and would address this limitation of the system. The design was carried out using open-class words of the source text and by matching them against the bag of words compiled by analyzing the tweets. The automated corpus had a total of 138 words, out of which 74 words were also found in the handpicked corpus (which had a total of 206 words). However, when the corpus was used with the keyword extraction system, the average F1 scores of the system showed a decrease of 0.07, proving that the automated corpus cannot perform parallel to the human-made corpus in complexity. This was because the human-made corpus was compiled using syntactic, semantic and pragmatic features while the automated framework focused only on the syntactic features. However, there were individual tweets in which the F1 score showed an increase. Thus, this was a promising first step in the corpus automation process. The automatic corpus generation framework could be made more accurate by including the semantic analysis of the lexical items. Thus, the present framework is able to substantially address the limitation of the corpus compilation which was present in the Twitter Model of KeyXtract. © 2017 IEEE.

关键词： Syntactics

来源：评论

学校读者我要写书评

暂无评论

Decision support for search and rescue response planning 14

Decision support for search and rescue response planning

引用

14th International Conference on Information systems for Crisis Response and Management, ISCRAM 2017

作者： Morin, Michael Abi-Zeid, Irène Quimper, Claude-Guy Nilo, Oscar Department of Mechanical and Industrial Engineering University of Toronto ON Canada Department of Operations and Decision Systems Université Laval Québec Canada Department of Computer Science and Software Engineering Université Laval Québec Canada

Planning, controlling and coordinating search and rescue operations is complex and time is crucial for survivors who must be found quickly. The search planning phase is especially important when the location of the incident is unknown. We propose, implement, solve, and evaluate mathematical models for the multiple rectangular search area problem. The objective is to define optimal or near-optimal feasible search areas for the available search and rescue units that maximize the probability of success. We compare our new model to an existing model on problem instances of realistic size. Our results show that we are able to generate, in a reasonable time, near optimal operationally feasible plans for searches conducted in vast open spaces. In an operational context, this research can increase the chances of finding s urvivors. Ultimately, as our models get implemented in the Canadian Coast Guard search planning tool, this can translate into more lives being saved.

关键词： Integer programming

来源：评论

学校读者我要写书评

暂无评论

Empirical vulnerability analysis of automated smart contracts security testing on blockchains

arXiv

引用

arXiv 2018年

作者： Parizi, Reza M. Dehghantanha, Ali Choo, Kim-Kwang Raymond Singh, Amritraj Department of Software Engineering and Game Development Kennesaw State University GA United States School of Computer Science University of Guelph ON Canada Department of Information Systems and Cyber Security University of Texas San AntonioTX United States

The emerging blockchain technology supports decentralized computing paradigm shift and is a rapidly approaching phenomenon. While blockchain is thought primarily as the basis of Bitcoin, its application has grown far beyond cryptocurrencies due to the introduction of smart contracts. Smart contracts are self-enforcing pieces of software, which reside and run over a hosting blockchain. Using blockchain-based smart contracts for secure and transparent management to govern interactions (authentication, connection, and transaction) in Internet-enabled environments, mostly IoT, is a niche area of research and practice. However, writing trustworthy and safe smart contracts can be tremendously challenging because of the complicated semantics of underlying domain-specific languages and its testability. There have been high-profile incidents that indicate blockchain smart contracts could contain various code-security vulnerabilities, instigating financial harms. When it involves security of smart contracts, developers embracing the ability to write the contracts should be capable of testing their code, for diagnosing security vulnerabilities, before deploying them to the immutable environments on blockchains. However, there are only a handful of security testing tools for smart contracts. This implies that the existing research on automatic smart contracts security testing is not adequate and remains in a very stage of infancy. With a specific goal to more readily realize the application of blockchain smart contracts in security and privacy, we should first understand their vulnerabilities before widespread implementation. Accordingly, the goal of this paper is to carry out a far-reaching experimental assessment of current static smart contracts security testing tools, for the most widely used blockchain, the Ethereum and its domain-specific programming language, Solidity, to provide the first body of knowledge for creating more secure blockchain-based software. Copyright ©

关键词： Smart contract

来源：评论

学校读者我要写书评

暂无评论

A privacy-aware two-factor authentication protocol based on elliptic curve cryptography for wireless sensor networks

A privacy-aware two-factor authentication protocol based on ...

引用

作者： Jiang, Qi Kumar, Neeraj Ma, Jianfeng Shen, Jian He, Debiao Chilamkurti, Naveen School of Cyber Engineering Xidian University Xi'an China Co-innovation Center for Information Supply and Assurance Technology Anhui University Hefei China Department of Computer Science and Engineering Thapar University Patiala India School of Computer and Software Nanjing University of Information Science and Technology Nanjing China State Key Lab of Software Engineering Computer School Wuhan University Wuhan China Department of Computer Systems and Computer Science La Trobe University Melbourne Australia

As one of the enabling components of Internet of things (IoT), wireless sensor networks (WSNs) have found applications in a wide range of fields, in which outside users need to directly interact with sensors to obtain sensed data. However, WSNs are vulnerable to various attacks over wireless links, such as eavesdropping and tampering. How to ensure that sensitive or critical information is only available to legal users becomes a challenging issue. Two-factor authentication combining password and smart card perfectly matches this requirement because of its practicality. However, a dozen of two-factor authentication protocols have been suggested in recent years. Owing to the challenging mission of reconciling efficiency and security requirements, it is still challenging to propose a privacy-aware two-factor protocol that is capable of providing various security features while maintaining acceptable efficiency. In this paper, we put forward a privacy-aware two-factor authentication protocol based on elliptic curve cryptography for WSNs. Our new protocol accomplishes various security features necessary for real-life application environments while maintaining acceptable efficiency. We prove that the new protocol fulfills mutual authentication in the Burrows–Abadi–Needham logic. Additionally, by way of informal security analysis, we show that the new protocol can withstand a variety of attacks and provide desirable security features. Copyright © 2016 John Wiley & Sons, Ltd. Copyright © 2016 John Wiley & Sons, Ltd.

关键词： Wireless sensor networks

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：