检索结果-内蒙古大学图书馆

2nd International Conference on Computer Science and Educational Informatization, CSEI 2020

作者： Ping, Zhang Fudong, Liu Zheng, Shan State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China

ISBN: (纸本)9781728170077

Response to the outbreak of COVID-19, classes in this semester are mainly replaced by online teaching to ensure continual learning. Teachers are actively exploring effective online teaching methods to provide a good learning experience for students at home. This paper presents an online teaching model based on the idea of Problem-Based Learning (PBL) and take 'Data Structure' as an example to discuss the design of teaching process and problems. © 2020 IEEE.

关键词： COVID-19

来源：评论

学校读者我要写书评

暂无评论

UEFI Security Threats Introduced by S3 and Mitigation Measure 7

UEFI Security Threats Introduced by S3 and Mitigation Measur...

引用

7th International Conference on Signal and Image Processing, ICSIP 2022

作者： Jiao, Weihua Li, Qingbao Chen, Zhifeng Cao, Fei State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China

ISBN: (数字)9781665495639

ISBN: (纸本)9781665495639

UEFI is widely used as the new generation BIOS, except for some new features, it also brings some security issues. The threat brought by S3 sleep jeopardizes the security of computer platforms seriously. An attacker can disable the write protection of UEFI by tampering with the S3 boot script or execute arbitrary code by exploiting dispatch opcodes with the entry point out of SMRAM. Therefore, it is vital to solve the security issue related to S3 and propose effective mitigation measures. Based on the S3 related modules and the risk propagation between modules, we propose the MBPE algorithm to identify the key vulnerability of the platform through formal analysis. Aiming at this critical vulnerability, based on the LockBox protection mechanism, we propose a mitigation measure. It includes changing the storage time of the boot script, the changed storage address of the boot script and a specific UEFI variable. After taking this mitigation measure, the attacker cannot obtain the boot script and its location simultaneously. Such, it can protect the boot script from being tampered with and further attackers. Finally, based on the real attack cases, we evaluate the mitigation measure by the abstraction of attack path and mathematical methods. Based on the evaluation finding, the mitigation measures can prevent S3related attacks and effectively improve platform security. © 2022 IEEE.

关键词： Risk assessment

来源：评论

学校读者我要写书评

暂无评论

Leveraging markov chain and optimal mutation strategy for smart fuzzing

Leveraging markov chain and optimal mutation strategy for sm...

引用

2014 International Conference on Information and Network Security, ICINS 2014

作者： Ouyang, Yongji Wu, Zehui Mu, Qing Wang, Qingxian State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China

ISBN: (纸本)9781849199094

Fuzz testing is an important way of vulnerability discovery, however, the existing fuzzers based on symbolic execution and others have inherent shortcomings like needing more computing resource, in-depth analysis and so on. To solve above problems, this paper presents a smart fuzzing method based on Markov chain. Firstly, this method optimizes the testing input sample to get the minimal sample set. Secondly, this method records program execution information by using instrument, and makes a Markov model about state. Finally, this method uses Markov chain to detect the change of execution path, and leads tester to choose better samples to mutate. Meanwhile, we analyse mutation strategies in depth for better triggering exception. Experimental data shows that the presented method can help fuzzer to generate effective test samples. We discovers 51 vulnerabilities in software like WPS, along with the code coverage increases of nearly 49% comparing with zzuf and the average exception discovery rate increase nearly 9 times comparing with MiniFuzz.

关键词： Markov processes

来源：评论

学校读者我要写书评

暂无评论

Research on Cross-site Scripting Attack Detection Technology Based on Few-shot Learning 6

Research on Cross-site Scripting Attack Detection Technology...

引用

6th IEEE Information Technology, Networking, Electronic and Automation Control Conference, ITNEC 2023

作者： Lu, Dongzhe Liu, Long State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China

ISBN: (纸本)9781665460033

With the intensification of informatization and mobility, various web security threats are emerging. Cross-site scripting (XSS) attack is the most common type of web attack. Most traditional detection methods have been difficult to adapt to the existing confusion variants of XSS attacks. In this paper, we extract features based on big data collected from 2017 to 2022. In order to improve the XSS detection effect of detection tools, we build machine learning models based on more than 210,000 positive and negative samples, among which CNN has the best performance. Furthermore, we propose a new algorithm that improves the traditional virtual sample generation technology based on prior knowledge in order to improve the generalization of the models. Experimental results show that in most cases, the performance of the algorithm in this paper is better than other VSG methods, and the ability to detect and discover unknown attacks is improved to a certain extent. © 2023 IEEE.

关键词： Informatization

来源：评论

学校读者我要写书评

暂无评论

Research on security assessment based on big data and multi-entity profile 5

Research on security assessment based on big data and multi-...

引用

5th IEEE advanced Information Technology, Electronic and Automation Control Conference, IAEAC 2021

作者： Liu, Wenfu Pang, Jianmin Yang, Shudan Li, Nan Du, Qiming Sun, Daozhu Liu, Fudong State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China

Security assessment is one of the important problems, especially in the fields of military training, transportation and network management. The security "related parties"(entities in this paper) have internal relations in the three fields. It is of great significance of constructing the attributes of these entities or even designing a unified security assessment method. Security assessment in these areas has been studied and explored for a long time. However, the research is relatively scattered and unilateral. It is no unified and reusable method from data collection to security assessment. Based on the advantages of big data technology in the storage and analysis of massive data, the paper proposed a security risk element acquisition method from data collection and preprocessing, storage and mining to attribute extraction and aggregation. In addition, drawing on the idea of user portraits in other fields, constructed personnel entities, equipment entities and "other"entity labels related to security risks. Finally, a security risk assessment process based on these entities is designed. © 2021 IEEE.

关键词： Big data

来源：评论

学校读者我要写书评

暂无评论

Feature-based identification method of MCU firmware IO interface 6

Feature-based identification method of MCU firmware IO inter...

引用

6th IEEE Information Technology, Networking, Electronic and Automation Control Conference, ITNEC 2023

作者： Sun, Yuanbo Dong, Weiyu State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China

ISBN: (纸本)9781665460033

Device simulation is an important method of embedded device security analysis, due to the extensive and heterogeneous nature of the current peripherals, the existing simulation technology for peripheral simulation is mostly fuzzy, to find the input and output that meet the firmware requirements as the main goal. In order to construct a template based on IO interface identification to extend the peripheral simulation scheme, this paper identifies the IO interface without firmware source code based on the characteristics of the IO configuration process in MCU firmware. Through experimental comparison, this method has a certain effect in MCU firmware interface recognition. © 2023 IEEE.

关键词： Firmware

来源：评论

学校读者我要写书评

暂无评论

Fast Warming Over the Mongolian Plateau a Catalyst for Extreme Rainfall Over North China

引用

Geophysical Research Letters 2025年第8期52卷

作者： Gu, Jun Zhao, Chun Xu, Mingyue Ma, Yuanyuan Hu, Zhiyuan Jin, Chen Guo, Jianping Geng, Tao Cai, Wenju Deep Space Exploration Laboratory/School of Earth and Space Sciences/CMA-USTC Laboratory of Fengyun Remote Sensing/State Key Laboratory of Fire Science/Institute of Advanced Interdisciplinary Research on High-Performance Computing Systems and Software University of Science and Technology of China Hefei China Laoshan Laboratory Qingdao China CAS Center for Excellence in Comparative Planetology University of Science and Technology of China Hefei China Key Laboratory of Land Surface Process and Climate Change in Cold and Arid Regions Northwest Institute of Eco-Environment and Resources Chinese Academy of Sciences Lanzhou China Key Laboratory for Climate Change and Natural Disaster Studies of Guangdong Province School of Atmospheric Sciences Sun Yat-sen University Zhuhai China Southern Marine Science and Engineering Guangdong Laboratory Zhuhai China State Key Laboratory of Severe Weather Chinese Academy of Meteorological Sciences Beijing China and Physical Oceanography Laboratory Ocean University of China Qingdao China

Extreme rainfall events are becoming increasingly severe under a warming climate. North China has experienced several catastrophic rainfall events, of which the rainstorm in 2023 was particularly severe inducing unprecedented damage. Since 1980, the neighboring Mongolian Plateau (MP) has been warming at a rate three times the global average, faster than the surrounding regions. Whether a link exists between extreme rainfall in North China and the fast MP warming is unknown. Here, using global variable-resolution atmospheric model with convection-permitting capability over North China, we find the rapid warming trends, particularly over the MP, are highly conducive to extreme rainfall over North China. In the 2023 case, the fast MP warming induced an anomalous terrestrial high, which in the Western North Pacific Subtropical High created a strong high-pressure system over North China. This system obstructed northeastward movement of Typhoon Doksuri, concentrating moisture supply which prolonged and intensified the extreme. © 2025. The Author(s).

关键词： Global warming

来源：评论

学校读者我要写书评

暂无评论

Creation of Magnetic Skyrmions in Two-Dimensional Van Der Waals Ferromagnets by Lattice Distortion

SSRN

引用

SSRN 2025年

作者： Zhang, Tingjia Yang, Chendi Lv, Xiaowei Zhao, Tuoyu Shi, Wu Li, Wei Liang, Jia Che, Renchao School of Materials and Chemistry University of Shanghai for Science and Technology Shanghai200093 China Laboratory of Advanced Materials Shanghai Key Lab of Molecular Catalysis and Innovative Materials Academy for Engineering and Technology Advanced Coatings Research Center of Ministry of Education of China Fudan University Shanghai200438 China State Key Laboratory of Surface Physics Institute for Nanoelectronic Devices and Quantum Computing Fudan University Shanghai200433 China Zhangjiang Fudan International Innovation Center Fudan University Shanghai201210 China Department of Physics Fudan University Shanghai200433 China Department of Materials Science State Key Laboratory of Photovoltaic Science and Technology Fudan University Shanghai200433 China

Two-dimensional (2D) van der Waals (vdW) ferromagnets provide an excellent platform for exploring exotic physical phenomena such as magnetic skyrmions and quantum topological phases. However, the centrosymmetric crystal structure inherent in these 2D vdW ferromagnets theoretically precludes the formation of magnetic skyrmions and topological phases. In this study, we investigate the origin of the absence of magnetic skyrmions in 2D vdW ferromagnets and propose an effective strategy to induce lattice distortion through doping, thereby enabling the formation of magnetic skyrmions. Specifically, we demonstrate that Co doping in Fe3GeTe2 leads to significant lattice distortion, transforming the original centrosymmetric crystal structure into a non-centrosymmetric one. This structural modification enables the emergence of a considerable Dzyaloshinskii-Moriya interaction (DMI), giving rise to Néel-type skyrmions. Additionally, the scalar spin chirality of these magnetic skyrmions acts as a virtual magnetic field, thereby inducing the topological Hall effect (THE) in Co-doped Fe3GeTe2. Our findings present a reliable method to manipulate spin textures and induce the THE in 2D vdW ferromagnets with non-zero DMI through lattice distortion, offering a promising route for the development of vdW ferromagnet-based spintronic devices. © 2025, The Authors. All rights reserved.

关键词： Van der Waals forces

来源：评论

学校读者我要写书评

暂无评论

On the Cycle Structure of Some Nonlinear Feedback Shift Registers

引用

Chinese Journal of Electronics 2014年第4期23卷 801-804页

作者： WANG Zhongxiao XU Hong QI Wenfeng State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou Information Science and Technology Institute Department of Computer Science and Engineering Shanghai Jiao Tong University

In this paper, we partly determine the cycle structure of two types of Nonlinear feedback shift registers(NFSRs). Based on these results, the cycle structure of a class of NFSRs with symmetric feedback functions can be completely characterized. Furthermore, an alternative proof of Kjeldsen’s results is presented. Compared with the original proof based on abstract algebra theory, ours is straightforward and easy to understand.

关键词： Cryptography Stream ciphers Nonlinear feedback shift registers Symmetric functions

来源：评论

学校读者我要写书评

暂无评论

Path Sensitive Static Analysis of Taint-Style Vulnerabilities in PHP Code 17

Path Sensitive Static Analysis of Taint-Style Vulnerabilitie...

引用

2017 17th IEEE International Conference on Communication Technology (ICCT 2017)

作者： Xue-Xiong Yan Qing-Xian Wang Heng-Tai Ma Institute of Software Chinese Academy of Sciences State Key Laboratory of Mathematical Engineering and Advanced Computing

ISBN: (纸本)9781509039456;9781509039449

this paper presents a novel path-sensitive static analysis method for detecting taint-style vulnerabilities in PHP code. The new method includes three key, the first of which is path searching during a basic block, the second is path searching between blocks, and the third is path searching crossing function call. A tool name POSE implements the new method and the testing results show the method is valid for taint-style vulnerabilities in PHP code.

关键词： path-sensitive PHP taint-style vulnerability POSE

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：