检索结果-内蒙古大学图书馆

作者： Gong, Lei Zhao, Yong Liao, Jianhua Institute of Electronic Technology Information Engineering University Zhengzhou China Key Lab of Information Network Security Ministry of Public Security Shanghai China Institute of Computer Science Beijing University of Technology Beijing China School of Electronics Engineering and Computer Science Peking University Beijing China

ISBN: (纸本)9783642236013

With the rapid development of information technology, the secrutiy problems of information systems are being paid more and more attention, so the Chinese government is carrying out information security classified protection policy in the whole country. Considering computer application systems are the key componets for information system, this paper analyzes the typical security problems in computer application systems and points out that the cause for the problems is lack of safe and valid isolation protection mechanism. In order to resolve the issues, some widely used isolation models are studied in this paper, and a New Application security Isolation model called NASI is proposed, which is based on trusted computing technology and the least privilege principle. After that, this paper introduces the design ideas of NASI, gives out formal description and safety analysis for the model, and finally describes the implementation of the prototype system based on NASI. © 2011 ICST Institute for computer Science, Social Informatics and Telecommunications Engineering.

关键词： Information systems

来源：评论

学校读者我要写书评

暂无评论

A Provably Secure Identity-based Authentication Multiple key Agreement Protocol

引用

China Communications 2011年第2期8卷 26-33页

作者：谭作文 School of Information Technology Jiangxi University of Finance and Economics Key Lab of Network Security and Cryptology School of Mathematics and Computer ScienceFujian Normal University

An authentication multiple key agreement protocol allows the users to compute more than one session keys in an authentication way. In the paper,an identity-based authentication multiple key agreement protocol is proposed. Its authentication part is proven secure against existential forgery on adaptively chosen message and ID attacks under the random oracle model upon the CDH assumptions. The session keys are proven secure in a formal CK security model under the random oracle model upon the CBDH assumptions. Compared with the previous multiple key agreement protocols,it requires less communication cost.

关键词： authentication identity-based key agreement

来源：评论

学校读者我要写书评

暂无评论

A privilege separation method for security commercial transactions

A privilege separation method for security commercial transa...

引用

作者： Chen, Yasha Hu, Jun Gai, Xinmao Sun, Yu Department of Electrical and Information Engineering Naval University of Engineering Wuhan Hubei 430033 China Key Lab of Information Network Security Ministry of Public Security Shanghai 201204 China School of Computer Beijing University of Technology Beijing 100124 China School of Computer National University of Defense Technology Changsha Hunan 410073 China

ISBN: (纸本)9783642236013

Privilege user is needed to manage the commercial transactions, but a super-administrator may have monopolize power and cause serious security problem. Relied on trusted computing technology, a privilege separation method is proposed to satisfy the security management requirement for information systems. It authorizes the system privilege to three different managers, and none of it can be interfered by others. Process algebra Communication Sequential Processes is used to model the three powers mechanism, and safety effect is analyzed and compared. © 2011 ICST Institute for computer Science, Social Informatics and Telecommunications Engineering.

关键词： Separation

来源：评论

学校读者我要写书评

暂无评论

Efficient and secure group key management based on EBS and attribute encryption

Efficient and secure group key management based on EBS and a...

引用

IEEE International Conference on computer Science and Automation Engineering (CSAE)

作者： Chen, Yanli Yang, Geng College of Computer Nanjing University of Posts and Telecommunications Nanjing China Key Lab of Network Security and Cryptology Fujian Normal University FuZhou China Department of Technology Nanjing University of Posts and Telecommunications Nanjing China

ISBN: (纸本)9781424487257

Exclusion Basis Systems (EBS) is a combinatorial optimization methodology for key management of group communication. The EBS approach proves to be very scalable for large networks and enables great flexibility in network management. But it is highly vulnerable to collusion attacks. In this paper, a novel secure group management scheme based on EBS and attribute encryption is proposed. Our proposed scheme provides group forward/backward secrecy, and it is resilience to colluding attacks. Moreover, compared to some previous approaches, performance evaluation shows that our scheme is more efficient in communication (O(m) for single leave), storage (O(k) for each group member), and computation (O(k) for each group member), where k and m are the number of the attributes that each member holds or not. As k and m could be relatively small even in large-scale systems, so as to our new scheme works well in large-scale applications. © 2011 IEEE.

关键词： Cryptography

来源：评论

学校读者我要写书评

暂无评论

Study on Model-Based security Assessment of Information Systems

Study on Model-Based Security Assessment of Information Syst...

引用

The 2011 International Conference on Computing,Information and Control(ICCIC 2011)

作者： Xiangdong Li Xinchao Han Qiusheng Zheng Zhengzhou Key Lab of Computer Network Security Assessment School of Computer Science Zhengzhou University of Technology

security problems of an information system are mainly due to its internal vulnerabilities, by exploiting which external threats do harm to the system. security Assessment of Vulnerabilities(SAV) is, with appropriate methods, to assess an information system by investigating vulnerabilities in its architecture, hardware, software, networks, and protocols. These methods can be divided into two categories: rule-based and model-based, and the later draws more research focuses at present. In this paper we make an extensive survey on existing model-based approaches to security assessment of vulnerabilities in information systems, analysing their working mechanics, advantages and disadvantages. Finally, conclusions are made on open problems in model-based security assessment, and on the possible future directions of the research.

关键词： security assessment vulnerability attack tree attack graph

来源：评论

学校读者我要写书评

暂无评论

The availability of fast-flux service networks

The availability of fast-flux service networks

引用

International Conference on Selected Topics in Mobile and Wireless networking (iCOST)

作者： Yunfeng Xu Yansheng Lu Zhengbiao Guo Hubei Province Public Security Bureau To Defend The Corps Cyber Security Key Lab of Information NetWork Security Ministry of Public Security China School of Computer Science and Technology Hua Zhong University of Science and Technology Wuhan China

ISBN: (纸本)9781457720031

Fast-flux service network (FFSN) is consisted of a large scale of computers which have two main functions. Firstly, by providing a pool of huge number of IP addresses, the controller of FFSN can choose the IPs to provide services for their own domain name. Secondly, these computers can be served as agents to hide mother-ship. The character of FFSN is that the DNS records of domain name changes constantly at a high frequency. In this paper, we analyze the issue on the reliability of FFSN. The issue is resulted from the uncontrollable nodes of FFSN. We establish a model to describe the reliability by the theory of Poisson Process, and analyze the relationship between the reliability of FFSN and its size.

关键词： Availability Servers security IP networks computers Internet

来源：评论

学校读者我要写书评

暂无评论

Chinese sentence correlation analyzing based on semantic dependency method

Chinese sentence correlation analyzing based on semantic dep...

引用

International Conference on Electronics, Communications and Control (ICECC)

作者： Haiping Zhu Yang Yang Yan Chen Qian Ma Department of Computer Science and Technology Shaanxi Province Key Laboratory of Satellite and Terrestrial Network Technology Research and Development Ministry of Education Key Laboratory for Intelligent Networks and Network Security Xian Jiaotong University Xian China Department of Computer Science and Technology Xian Jiaotong University Xian China

Based on the adoption of dependency grammar to analyze the structure of Chinese sentences, this paper suggests to analyze Chinese sentence with semantic dependency method. The correlation between words and phrases can be gotten by way of analysis and calculation of the similarity between the words and phrases from How net, and then the formula to analyze the similarity between sentences can be designed. Fully considering the relationship between structure and semantics of Chinese sentences, this methodology can be adopted to analyze the correlation between topics and to categorize them. It has certain prospect in the field of Chinese language research, personalized online education and recommendation of resources for the users.

关键词： Semantics Educational institutions Correlation Computational modeling computer science Grammar Intelligent networks

来源：评论

学校读者我要写书评

暂无评论

Chosen ciphertext secure broadcast encryption in the standard model

Chosen ciphertext secure broadcast encryption in the standar...

引用

International Conference on Electric Information and Control Engineering

作者： Sun, Jin Hu, Yu-Pu Department of Application Mathematics Xi'An University of Technology Xi'an China Key Lab of Computer Network and Information Security Xidian University Xi'an China

ISBN: (纸本)9781424480395

In Eurocrypt'2005, Waters' identity-based encryption scheme suffers a drawback that the scheme only guarantees chosen plaintext security but chosen ciphertext security, and to give concurrent consideration both the efficiency and intract-ability problem in the broadcast encryption, a new identity-based broadcast encryption of chosen ciphertext secure is proposed. The new scheme was regarded as the extended version of Waters' scheme and is based on the standard model. By adding an additional information in ciphertext, the adaptive selective-ID security and the chosen ciphertext security are gained simultaneously in the scheme. The scheme's security is reduced to the decisional bilinear Diffie-Hellman intractability assumption, so the security level is improved and it is suitable for high security environment. © 2011 IEEE.

关键词： security of data

来源：评论

学校读者我要写书评

暂无评论

Multi-user private keyword search for cloud computing

Multi-user private keyword search for cloud computing

引用

2011 3rd IEEE International Conference on Cloud Computing technology and Science, CloudCom 2011

作者： Yang, Yanjiang Lu, Haibing Weng, Jian Institute for Infocomm Research Singapore Singapore Dept. of Operations Management and Information Systems Leavey School of Business Santa Clara University United States Department of Computer Science Emergency Technology Research Center of Risk Evaluation and Prewarning on Public Network Security Jinan University Guangzhou China State Key Laboratory of Information Security Institute of Software Chinese Academy of Sciences China State Key Lab. of Networking and Switching Technology Beijing University of Posts and Telecommunications China

ISBN: (纸本)9780769546223

Enterprises outsourcing their databases to the cloud and authorizing multiple users for access represents a typical use scenario of cloud storage services. In such a case of database outsourcing, data encryption is a good approach enabling the data owner to retain its control over the outsourced data. Searchable encryption is a cryptographic primitive allowing for private keyword based search over the encrypted database. The above setting of enterprise outsourcing database to the cloud requires multi-user searchable encryption, whereas virtually all of the existing schemes consider the single-user setting. To bridge this gap, we are motivated to propose a practical multi-user searchable encryption scheme, which has a number of advantages over the known approaches. The associated model and security requirements are also formulated. We further discuss to extend our scheme in several ways so as to achieve different search capabilities. © 2011 IEEE.

关键词： Outsourcing

来源：评论

学校读者我要写书评

暂无评论

Comments on a threshold authenticated encryption scheme

引用

International Journal of computers and Applications 2011年第2期33卷 132-136页

作者： Tan, Zuowen Department of Computer Science and Technology School of Information Technology Jiangxi University of Finance and Economics Nanchang 330032 Jiangxi Province China Key Lab. of Network Security and Cryptology School of Mathematics and Computer Science Fujian Normal University Fuzhou 350007 China

An authenticated encryption scheme (AE scheme) allows the signer to generate a valid authenticated ciphertext on a message such that the designated recipient can recover the message. AE schemes can achieve confidentiality and authenticity when message is transmitted over an insecure channel. The previous AE scheme only can allow one signer to generate the authenticated ciphertext. Recently, Chung et al. proposed a (t, n) threshold authenticated encryption scheme (TAE scheme) in which any t or more signers cooperate to produce a signature for a message and no one except the designated verifier can obtain the message from the ciphertext and verify the authenticity and integrity of the message. The scheme is based on elliptic curve cryptosystem. Moreover, the scheme applies a division-of-labour signature technique to reduce the load of every signer. In other words, every signer only needs to sign a message block assigned to it. Therefore, the (t, n) TAE scheme is more efficient than other AE schemes. However, some flaws of the scheme are found in this paper. Several security defects of the scheme are elaborated: (i) It suffers from conspiracy attack. (ii) It does not hold robustness. (iii) It is insecure against insider attacks. In addition, there exist some design defects in the TAE scheme. Some measures to remove these weaknesses are given in this paper.

关键词： Authentication

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：