检索结果-内蒙古大学图书馆

IEEE Information Technology, Networking, Electronic and Automation Control Conference

作者： Yuanbo Sun Weiyu Dong State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China

Device simulation is an important method of embedded device security analysis, due to the extensive and heterogeneous nature of the current peripherals, the existing simulation technology for peripheral simulation is mostly fuzzy, to find the input and output that meet the firmware requirements as the main goal. In order to construct a template based on IO interface identification to extend the peripheral simulation scheme, this paper identifies the IO interface without firmware source code based on the characteristics of the IO configuration process in MCU firmware. Through experimental comparison, this method has a certain effect in MCU firmware interface recognition.

关键词： Analytical models Automation Source coding Registers Character recognition Object recognition Security

来源：评论

学校读者我要写书评

暂无评论

ALEmu: A Framework for Application-layer Programs Emulation of Embedded Devices

ALEmu: A Framework for Application-layer Programs Emulation ...

引用

International Conference on Computer engineering and Applications (ICCEA)

作者： Heng He Xiaobing Xiong Yuntian Zhao State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China

The difference between real devices and virtual environments causes a low success rate of application-layer program emulation when the firmware is operating in full-system emulation during the dynamic analysis of the firmware of embedded devices. In this paper, we propose ALEmu, an emulation framework for application-layer programs, which can effectively improve the emulation success rate of application-layer programs in embedded device firmware through automatic preprocessing of target programs, building configuration libraries, and hooking external program calls. When we test ALEmu on a variety of real-world devices, including routers and IP cameras, we find that it performs more successfully and accurately than the current state-of-the-art full-system emulation frameworks like Firmadyne and FirmAE.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Vulnerability model and attack path prediction of the UEFI firmware platform based on risk propagation 11

Vulnerability model and attack path prediction of the UEFI f...

引用

2021 11th International Workshop on Computer Science and engineering, WCSE 2021

作者： Jiao, Weihua Li, Qingbao Chen, Zhifeng Cao, Fei State Key Laboratory of Mathematical Engineering and Advanced Computing China

ISBN: (纸本)9789811817915

Targeted at the situation of rampant attack on UEFI Platform Firmware, this paper systematically analyzes the Security mechanisms of UEFI platform firmware. Then the vulnerability factors of UEFI firmware are described by modeling language, and a vulnerability model of UEFI firmware platform based on risk propagation (VMURP) is proposed. This paper introduces an improved PageRank algorithm to this model to reduce the influence of subjective factors which influences the accuracy of model. Based on VMURP model, an innovative method is proposed which using security configuration vector and attack vector to evaluate attack paths. Then, we use this method and VMURP to predict the most possible attack path of specific UEFI firmware platform. Finally, verify the rationality of the model and the validity of the prediction by experimental analysis. This study is helpful to quickly evaluate the vulnerability of UEFI firmware platform and predict possible attacks, gives platform managers more targeted guidance and suggestions to strengthen the security mechanisms. © 2021 11th International Workshop on Computer Science and engineering, WCSE 2021. All Rights Reserved.

关键词： Forecasting

来源：评论

学校读者我要写书评

暂无评论

A Survey on Knowledge Graph Representation Learning with Text Information 3

A Survey on Knowledge Graph Representation Learning with Tex...

引用

3rd World Symposium on Software engineering, WSSE 2021

作者： Wang, Ling Lu, Jicang Zhou, Gang State Key Laboratory of Mathematical Engineering and Advanced Computing China

ISBN: (纸本)9781450384094

Knowledge graph representation learning provides a lot of help for subsequent tasks such as knowledge graph completion, information retrieval, and intelligent question answering. By representing the knowledge graph as low-dimensional dense vectors, these tasks can improve efficiency significantly. However, limited by the sparseness and huge scale of the actual structure, representation learning only from a structural perspective can no longer meet the research needs. To improve the performance, researchers introduced auxiliary information into representation learning. This paper focuses on models using text as auxiliary information, dividing all text-combined models into two categories: Closed-world assumption models and Open-world assumption models. The former is limited by the model's demand for the structural representation of the graph itself, and can only predict the entities and relationships that already exist in the knowledge graph. The latter can handle entities that have not previously been seen during model training, and connect brand-new entities to the knowledge graph, which is more in line with the dynamic trend of the knowledge graph in real world. Open-world assumption models can be further subdivided into multiple types according different joint functions, such as alignment function, fusion function, score function and transformation function. This paper summarizes existing methods in detail and looks forward to future possible research directions. © 2021 ACM.

关键词： Knowledge graph

来源：评论

学校读者我要写书评

暂无评论

A Patch Analysis Method Based on Multi-firmware Comparison 2021

A Patch Analysis Method Based on Multi-firmware Comparison

引用

2021 International Symposium on Electrical, Electronics and Information engineering, ISEEIE 2021

作者： Xiao, Ruiqing Zhu, Yuefei Hu, Anxiang Zhu, Xiaoya Liu, Shengli State Key Laboratory of Mathematical Engineering and Advanced Computing China

ISBN: (纸本)9781450389839

A major user need is the completion of security audits by locating vulnerability functions using vulnerability information published by firmware manufacturers. However, it is difficult to manually analyze the relatively large number of patch functions involved in firmware updates. A patch analysis method based on multi-firmware comparison is presented in this study. This method narrows the search for suspected patch functions for vulnerability based on the similarities and differences between different firmware series involved in the vulnerability. Suspected patch functions in multiple firmware programs are first located and filtered based on intervals. Finally, a prototype system is implemented. The filtering results for the prototype system are used to manually locate two one-day vulnerabilities. The experimental results demonstrate that the two methods proposed in this study, namely, patch function location in multiple firmware programs and interval-based patch function filtering, effectively narrow the search for suspected patch functions and reduce the difficulty of manual analysis. © 2021 ACM.

关键词： Firmware

来源：评论

学校读者我要写书评

暂无评论

Cross-Network User Matching Based on Association Strength 11th

Cross-Network User Matching Based on Association Strength

引用

11th International Conference on Computer engineering and Networks, CENet2021

作者： Jiang, Qiuyan Gong, Daofu Liu, Fenlin State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou450001 China Qingdao Agricultural University Qingdao266001 China

ISBN: (纸本)9789811665530

Cross-network user matching is the one of the fundamental problems in social network fusion and analysis. This paper proposes an unsupervised algorithm based on association strength to address this problem. Specifically, the algorithm firstly computes the association strength between nodes based on user behavior characteristics in the social network graph. Then, the node sequence is obtained by the biased walk method based on the association strength, and word2vec method is utilized to learn the node feature vector. Finally, cross-network user matching is achieved based on the distance of feature vectors. The highlight of this paper is that the bias walking based on the association strength can select nodes as the context to form a specific sequence, and then do benefits on feature vectors learning. The experimental results show that the proposed algorithm can effectively match user without any prior knowledge. Furthermore, the matching precision is improved compared to the baseline method. © 2022, The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd.

关键词： Behavioral research

来源：评论

学校读者我要写书评

暂无评论

Programmable logic controller memory management vulnerability analysis 3

Programmable logic controller memory management vulnerabilit...

引用

2022 3rd International Conference on Signal Processing and Computer Science, SPCS 2022

作者： Geng, Yangyang Ma, Rongkuan Wei, Qiang Wang, Wenhai State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China State Key Laboratory of Industrial Control Technology Zhejiang University Hangzhou310000 China

Programmable logic controller (PLC) is omnipresent in industrial control system (ICS), which plays an imperative part in critical infrastructures. However, once a PLC is compromised by an attacker, it will create destructive effects on critical infrastructures. The memory systems in PLCs are considered significant targets for attackers to disrupt real-world physical processes. In this paper, we proposed five types of attacks on the PLC memory management mechanism. Furthermore, we evaluated the feasibility of our memory attack generation approach on six PLCs from three leading controller vendors. A total of 22 memory attack payloads are implemented with several vulnerabilities on the target PLCs. © Published under licence by IOP Publishing Ltd.

关键词： Programmable logic controllers

来源：评论

学校读者我要写书评

暂无评论

Secure analysis on entire software-defined network using coloring distribution model

Secure analysis on entire software-defined network using col...

引用

作者： Xin-Hui, Zhao Ze-Hui, Wu Xiao-Bin, Song Qing-Xian, Wang State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China Physical Education College of Zhengzhou University Zhengzhou China

Software Definition Network (SDN) has three features as separation of control and forwarding, unified management of configuration, and dynamic programming, which have greatly improved flexibility of network deployment and dynamics of network management, as well as efficiency of network transmission. However, its security problem is quite outstanding. This paper proposes a new security defense method based on coloring distribution model, which aims at the shortcomings of the current research that does not change the weak security, certainty, statics, and isomorphism of SDN. Motivated by the idea of moving target defense, our method abstracts network topology of SDN using coloring theory and realizes diversified deployment of controllers and switches, thus improving the security of network itself without changing the structure of SDN. Simulation results show that our method can prevent denial of service (DOS) attacks against controllers and switches and at the same time effectively block the worm, which is one of the most threat of smart city, propagation via switches. © 2019 John Wiley & Sons, Ltd.

关键词： Software defined networking

来源：评论

学校读者我要写书评

暂无评论

The Research and Application of Zero Trust:A Review

SSRN

引用

SSRN 2024年

作者： Meng, Qi Fei, Jinlong Lu, Bin Wang, Xuemeng Wu, Wei Zhang, Zihao Huang, Jing State Key Laboratory of Mathematical Engineering And Advanced Computing PLA Information Engineering University Zhengzhou450000 China

With the emergence of new technologies such as cloud computing, mobile internet, the Internet of Things, and 5G, the internet ecosystem has undergone significant changes. The connections between people and devices have become closer, but they also face more complex and advanced threats. Traditional security concepts and technologies gradually cannot meet the security requirements of the current environment. Zero Trust provides a new paradigm that can effectively solve the current security dilemma in the internet ecosystem. This article starts with the research background of Zero Trust, introduces the emergence and development of Zero Trust, its basic definition, and studies the abstract architecture and deployment models of Zero Trust. It focuses on three key technologies of Zero Trust: identity and access management, micro-segmentation, and software-defined perimeters. The article also summarizes the implementation and practical solutions of Zero Trust by current enterprises, with a detailed explanation of the Google BeyondCorp Zero Trust implementation solution. The latter part of the article emphasizes the research and application of Zero Trust in different academic and application fields, reviewing and summarizing the literature on Zero Trust in academia and applications. Finally, the article summarizes the research and application of Zero Trust and provides an outlook on the future development of Zero Trust. © 2024, The Authors. All rights reserved.

关键词： Ecosystems

来源：评论

学校读者我要写书评

暂无评论

Circuit Simulation and Optimization of Quantum Search Algorithm 6

Circuit Simulation and Optimization of Quantum Search Algori...

引用

6th International Conference on Electronic Information Technology and Computer engineering, EITCE 2022

作者： Liu, Xiaonan Zhao, Chenyan Xie, Haoshan Liu, Zhengyu State Key Laboratory of Mathematical Engineering and Advanced Computing Information Engineering University China School of Computer and Artificial Intelligence ZhengZhou University China

ISBN: (纸本)9781450397148

At present, the scale of quantum computers in the real sense is still small, and quantum simulation has become one of the important ways of quantum theory research, grover quantum search algorithm is suitable for the search problem of disordered database. Firstly, according to the implementation principle of Grover algorithm and Boolean logic relationship, the design idea of multi-objective Oracle is analyzed, based on IBMQ quantum cloud platform, the quantum circuit of Grover algorithm with multi-objective items is simulated. Based on the characteristics of Grover algorithm and the simulation process of quantum gate, the action of multiple identical quantum gates is combined to reduce the update times of probability amplitude and improve the simulation efficiency. The libquantum quantum simulator is used for experiments and the target item is successfully searched, which proves the feasibility of the optimization method and provides reference for the simulation and optimization of other quantum algorithms. © 2022 Association for computing Machinery.

关键词： Timing circuits

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：