检索结果-内蒙古大学图书馆

2024 Workshop on Communication Networks and Power Systems, WCNPS 2024

作者： Mariano, Hyago Santana Cafe, Daniel Chaves Professional Graduate Program in Electrical Engineering-PPEE Department of Electrical Engineering Brazil

ISBN: (纸本)9798331507152

This article proposes the implementation of a captive portal system on a microcontroller to assess users' maturity regarding the safe use of public Wi-Fi networks. The use of public Wi-Fi networks has become increasingly common in places like cafes, airports, shopping centers, and hotels. However, many users are unaware of the risks associated with using these unsecured networks, such as personal information theft, privacy invasion, and cyberattacks. This study aims to utilize a microcontroller to generate a signal mimicking a known public network, where, upon user login, an educational authentication portal will be displayed. This portal will not only provide information about security risks but also evaluate the users' maturity level in adopting safe practices on public Wi-Fi networks, offering guidelines on how to protect their data and devices. © 2024 IEEE.

关键词： Wi-Fi

来源：评论

学校读者我要写书评

暂无评论

A security model for DNS tunnel detection on cloud platform 7

A security model for DNS tunnel detection on cloud platform

引用

7th Workshop on Communication Networks and Power Systems, WCNPS 2022

作者： De Souza Bezerra Borges, Lorena De Oliveira Albuquerque, Robson De Sousa Junior, Rafael Timoteo Professional Graduate Program in Electrical Engineering - PPEE University of Brasília-UnB Faculty of Tecnology Electrical Engineering Departament Brazil

ISBN: (数字)9781665474566

ISBN: (纸本)9781665474566

DNS tunneling uses DNS protocol features to establish command and control channels thus being possibly exploited as a malicious tool for data exfiltration. DNS tunneling security threats affect crossplatform systems within local and cloud computing resources. This article proposes an effective DNS tunnel detection methodology integrating cloud-based resources. The proposed detection methods compose an unsupervised machine-learning model execution for anomaly identification. The validation uses a collected DNS traffic dataset and shows the practical approach for C2, data exfiltration, and heartbeat tunnel test situations, as high levels of anomaly detection are obtained even for those lightweight data during the transfer process. This study has an operational approach and could be adapted to compose security control systems for organizations. © 2022 IEEE.

关键词： Cloud computing

来源：评论

学校读者我要写书评

暂无评论

Methodology to Improve the Quality of Cyber Threat Intelligence Production Through Open Source Platforms

Methodology to Improve the Quality of Cyber Threat Intell...

引用

International Conference on Computer Science, Electronics, and Industrial engineering, CSEI 2022

作者： Machado da Silva, Rogerio Costa Gondim, João José de Oliveira Albuquerque, Robson Professional Post-Graduate Program in Eletrical Engineering - PPEE Department of Eletrical Engineering University of Brasília Distrito Federal Brasília70910-900 Brazil

ISBN: (纸本)9783031305917

In cyberspace, boundaries are constantly being crossed in the name of progress and convenience, and invariably result in new vulnerabilities and potential attacks. Traditional security approaches are not able to contain the dynamic nature of new techniques and threats, which are increasingly resilient and complex. In this scenario, the sharing of threat intelligence is growing. However, the vast majority of data is shared in the form of unstructured textual reports, or extracted from blogs and social media. These data sources have been imposing great limitation on security analysts due to the high volume and low quality of Cyber Threat Intelligence (CTI). Among the various aspects that impose limitations on the use of CTI, we focus on data quality. Inaccurate, incomplete or outdated information makes actions reactive, in no way different from traditional approaches. However, quality threat intelligence has a positive impact on incident response time. In this work we propose an Indicator of Compromise enrichment process to improve the quality of CTI, based on the intelligence production cycle, we conduct research to define metrics capable of evaluating the CTI produced through open source licensed threat intelligence platforms. © 2023, The Author(s), under exclusive license to Springer Nature Switzerland AG.

关键词： Cybersecurity

来源：评论

学校读者我要写书评

暂无评论

Multi-agent Architecture for Passive Rootkit Detection with Data Enrichment

Multi-agent Architecture for Passive Rootkit Detection with...

引用

International Conference on Computer Science, Electronics, and Industrial engineering, CSEI 2022

作者： Trinks, Maickel Gondim, João Albuquerque, Robson Professional Post-Graduate Program in Electrical Engineering - PPEE - Department of Electrical Engineering University of Brasília DF Brasília Brazil Department of Computer Science Universidade de Brasília DF Brasília Brazil

ISBN: (纸本)9783031305917

The added value of the information transmitted in a cybernetic environment has resulted in a sophisticated malicious actions scenario aimed at data exfiltration. In situations with advanced actors, like APTs, such actions use obfuscation techniques of harmful activities as persistence assurance on strategic targets. The MADEX and NERD architectures proposed flow analysis solutions to detect rootkits that hide network traffic;however, it presents some operational cost, either in traffic volume or due to lack of aggregated information. In that regard, this work changes and improves user flow analysis techniques to eliminate impacts on network traffic, with data enrichment on local and remote bases, detection of domains consulted by rootkits and aggregation of information to generate threat intelligence, while maintaining high performance. The results show the possibility of aggregating information to data flows used by rootkits in order to have effective cyber defense actions against cybernetic threats without major impacts on the existing network infrastructure. © 2023, The Author(s), under exclusive license to Springer Nature Switzerland AG.

关键词： Multi agent systems

来源：评论

学校读者我要写书评

暂无评论

Measuring Public Wi-Fi Security Awareness via Captive Portal Connections Using a Microcontroller

Measuring Public Wi-Fi Security Awareness via Captive Portal...

引用

Workshop on Communication Networks and Power Systems (WCNPS)

作者： Hyago Santana Mariano Daniel Chaves Café Department of Electrical Engineering Professional Graduate Program in Electrical Engineering - PPEE University of Brasília (UnB)

ISBN: (数字)9798331507152

ISBN: (纸本)9798331507169

This article proposes the implementation of a captive portal system on a microcontroller to assess users’ maturity regarding the safe use of public Wi-Fi networks. The use of public Wi-Fi networks has become increasingly common in places like cafes, airports, shopping centers, and hotels. However, many users are unaware of the risks associated with using these unsecured networks, such as personal information theft, privacy invasion, and cyberattacks. This study aims to utilize a microcontroller to generate a signal mimicking a known public network, where, upon user login, an educational authentication portal will be displayed. This portal will not only provide information about security risks but also evaluate the users’ maturity level in adopting safe practices on public Wi-Fi networks, offering guidelines on how to protect their data and devices.

关键词： Privacy Power measurement Microcontrollers Conferences Power systems Security Computer crime Wireless fidelity Portals Guidelines

来源：评论

学校读者我要写书评

暂无评论

International perspectives on critical infrastructure: Evaluation criteria and definitions

引用

International Journal of Critical Infrastructure Protection 2025年 49卷

作者： da Silva, EdvanGomes Georg, MarcusAurélioCarvalho Júnior, LuizAntônioRibeiro Ferreira, LeonardoRodrigo de Melo, LaertePeotta Nunes, RafaelRabelo Professional Postgraduate Program in Electrical Engineering (PPEE) Department of Electrical Engineering College of Technology University of Brasilia Federal District Brasilia Brazil Computational Materials Laboratory LCCMat Institute of Physics University of Brasilia Federal District Brasilia Brazil UniAtenas University Center Paracatu Minas Gerais 8602-108 Brazil Secretariat of Digital Government of the Ministry of Management and Innovation in Public Services (MGI) Brazil

Contemporary society heavily relies on systems that process, store, and transmit sensitive and confidential information. However, defining what constitutes critical assets and how to categorize them presents challenges. In this context, applying criteria for classifying Critical Infrastructures (CIs) is essential to determine their criticality for information owners. This study aims to identify which criteria are used to classify an asset as part of CIs based on data from various nations. The methodology adopted involved analyzing public documents that evaluated the definitions and assessment criteria of CIs from 12 countries and organizations. The study's results provide a technical understanding of the criteria used to define Critical Infrastructures CIs among the analyzed countries, highlighting a predominance of criteria related to people, social aspects, economic factors, geographic considerations, and interdependencies. These findings indicate a consistent alignment among the studied nations regarding the criteria that define their respective CIs. These findings have practical implications for risk and asset managers, equipping them with the necessary knowledge to apply CI assessment methodologies effectively. © 2025 The Author(s)

关键词： Critical assets Infrastructure Protection Risk management

来源：评论

学校读者我要写书评

暂无评论

Quantum-resistant Cryptography in FPGA 7

Quantum-resistant Cryptography in FPGA

引用

7th Workshop on Communication Networks and Power Systems, WCNPS 2022

作者： Policarpo, Renata C. Nery, Alexandre S. Albuquerque, Robson De O. University of Brasília Professional Post-Graduate Program in Electrical Engineering Department of Electrical Engineering Brasilia70910-900 Brazil

ISBN: (数字)9781665474566

ISBN: (纸本)9781665474566

The use of cryptography techniques to guarantee confidentiality, authenticity and integrity of sensitive data has become mandatory. Besides, advancements in quantum computers are gradually posing a threat to public key encryption technology. Without proper security measures, fraudsters may easily gain access to one's personal and sensitive data. The result of the third round of NIST's Post-Quantum Cryptography (PQC) process for standardization of public-key cryptography systems brought CRYSTALS-Kyber as the first mechanism selected for key encapsulation. The aim of this study is to provide the specification of a reconfigurable CRYSTAL-Kyber accelerator using High-Level Synthesis (HLS) technology. Our architecture requires about 2200 LUTs, 3001 FFs and 28 DSP on a low-cost Zynq FPGA (XC7Z020-1 CLG400C). The total time spent by the accelerator in a key exchange simulation is approximately 0.84 ms, operating at 100 MHz, and the estimated power consumption in this process is 1.695W. © 2022 IEEE.

关键词： Field programmable gate arrays (FPGA)

来源：评论

学校读者我要写书评

暂无评论

Threshold-Based Electroencephalography Brain-Computer Interface for Robot Arm Control 8

Threshold-Based Electroencephalography Brain-Computer Interf...

引用

8th Asia-Pacific Conference on Intelligent Robot Systems, ACIRS 2023

作者： Rusydi, Muhammad Ilhamdi Amrina, Elita Winata, Yoan Ramadhani, Salisa Nofendra, Riko Graduate School Universitas Andalas Engineering Faculty Program of Engineer Professional Education Electrical Engineering Department Padang Indonesia Universitas Andalas Engineering Faculty Electrical Engineering Department Padang Indonesia

ISBN: (纸本)9798350302851

Brain-Computer Interface (BCI) is a technique that uses real-Time brain impulses to connect with and control external devices. BCI provides a new method for controlling external devices by translating brain signals into computer commands, facilitating the daily lives of people with disabilities and enhancing their ability to exhibit expected behavior. A Brain-Computer Interface (BCI) system based on Electroencephalography (EEG) was built to control the robotic arm. The EEG signals utilized included both eyes blinking, the right eye, the left eye, and the jaw contraction. EEG data were recorded from seven healthy subjects. The threshold approach is used to classify EEG signals, with the feature employed being the amplitude of the EEG signal. The highest threshold value for the blinking signal was 0.6 mV with an accuracy of 97.9%, while the best threshold value for jaw contraction was 0.4 mV with an accuracy of 93.34 percent. The healthy, inexperienced participants took part in system testing. The total results of testing each robot movement yielded an overall success rate of 84.52 percent. Therefore, it was determined that the system could facilitate the operation of the length robot even if the user lacked prior experience with EEG-based systems. © 2023 IEEE.

关键词： Brain computer interface

来源：评论

学校读者我要写书评

暂无评论

Towards System Security: What a Comparison of National Vulnerability Databases Reveals

Towards System Security: What a Comparison of National Vulne...

引用

Iberian Conference on Information Systems and Technologies (CISTI)

作者： Igor Forain Robson de Oliveira Albuquerque Rafael Timó teo de Sousa Jú nior Electrical Engineering Department Professional Post-Graduation Program in Electrical Engineering - PPEE Faculty of Technology University of Bras&#x00ED lia (UnB) Bras&#x00ED lia Brazil

System vulnerabilities are ubiquitous nowadays. In 2021, millions of cyberattacks exploited system flaws resulting in billions of losses. Despite massive vulnerability databases supported by the USA and China governments, there are still several unknown issues between them. This paper proposes a methodology to compare the National Vulnerability Database (NVD), the China National Vulnerability Database (CNVD), and the China National Vulnerability Database of Information Security (CNNVD). The results reveal that the CNNVD has 1,661 vulnerabilities entries more than the NVD and at least 40 more entries regarding Chinese vendors. Moreover, there is a temporal correlation of 0.917560 between the NVD and CNNVD. To the best of the authors’ knowledge, this work is the first to normalize and compare the NVD, CNVD, and CNNVD using their data feeds.

关键词： Measurement Correlation Databases XML Legislation Information security Software

来源：评论

学校读者我要写书评

暂无评论

OSINT Methods in the Intelligence Cycle

OSINT Methods in the Intelligence Cycle

引用

International Conference on Computer Science, Electronics, and Industrial engineering, CSEI 2022

作者： Tanabe, Roberto de-Oliveira-Albuquerque, Robson da-Silva-Filho, Demétrio Alves-da-Silva, Daniel Costa-Gondim, João-Jose Professional Post-Graduate Program in Electrical Engineering Department of Electrical Engineering University of Brasília Brasília70910-900 Brazil Institute of Physics University of Brasilia DF Brasilia70910-900 Brazil DF Brasília70910-900 Brazil

ISBN: (纸本)9783031305917

The process for producing intelligence is traditionally represented by a series of steps forming a cycle. Collection is one of these stages and is characterized by the application of a set of disciplines to obtain information that will be analyzed for the production of an intelligence product. These disciplines are characterized according to the type of source, its methods and techniques. Open-Source Intelligence (OSINT) is the collection discipline focused on publicly available information. Open-source collection methods are usually represented by working diagrams that draw a flow according to the type of information. This paper makes a comparative study of the intelligence cycles of some relevant actors in the international OSINT scene, locates open-source collection in the intelligence cycle, and presents a workflow that combines this cycle with the techniques that form a method for OSINT. © 2023, The Author(s), under exclusive license to Springer Nature Switzerland AG.

关键词： Intelligence Methodology OSINT

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：