检索结果-内蒙古大学图书馆

2021 11th International Workshop on Computer Science and engineering, WCSE 2021

作者： Hao, Bo Kang, Fei Yang, Ju Xiong, Xiaobing State Key Laboratory of Mathematical Engineering and Advanced Computing Henan Zhengzhou450001 China

ISBN: (纸本)9789811817915

The security of the IoT has become a hot research area in cyberspace security, among which the malware is a major threat. Based on the ATT&CK model, this paper studies the composition and behavior of IoT malware, constructs a malicious behavior model of IoT malware, and analyzes the technical implementation of each tactic in the malicious behavior model of IoT malware from three aspects: operating system related, target environment related and specific tools related. Based on this, we finally propose the evolution direction of IoT malware, which will be conducive to a more comprehensive grasp of the characteristics of IoT malware, and be supportive for maintaining the security of IoT. © 2021 11th International Workshop on Computer Science and engineering, WCSE 2021. All Rights Reserved.

关键词： Malware

来源：评论

学校读者我要写书评

暂无评论

Fw-fuzz: A code coverage-guided fuzzing framework for network protocols on firmware

Fw-fuzz: A code coverage-guided fuzzing framework for networ...

引用

作者： Gao, Zicong Dong, Weiyu Chang, Rui Wang, Yisen Cyberspace Security Department State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China College of Computer Science and Technology Zhejiang University Hangzhou China

Fuzzing is an effective approach to detect software vulnerabilities utilizing changeable generated inputs. However, fuzzing the network protocol on the firmware of IoT devices is limited by inefficiency of test case generation, cross-architecture instrumentation, and fault detection. In this article, we propose the Fw-fuzz, a coverage-guided and crossplatform framework for fuzzing network services running in the context of firmware on embedded architectures, which can generate more valuable test cases by introspecting program runtime information and using a genetic algorithm model. Specifically, we propose novel dynamic instrumentation in Fw-fuzz to collect the running state of the firmware program. Then Fw-fuzz adopts a genetic algorithm model to guide the generation of inputs with high code coverage. We fully implement the prototype system of Fw-fuzz and conduct evaluations on network service programs of various architectures in MIPS, ARM, and PPC. By comparing with the protocol fuzzers Boofuzz and Peach in metrics of edge coverage, our prototype system achieves an average growth of 33.7% and 38.4%, respectively. We further verify six known vulnerabilities and discover 5 0-day vulnerabilities with the Fw-fuzz, which prove the validity and utility of our framework. The overhead of our system expressed as an additional 5% of memory growth. © 2020 John Wiley & Sons, Ltd.

关键词： Firmware

来源：评论

学校读者我要写书评

暂无评论

FirmVulSeeker—BERT and Siamese Network-Based Vulnerability Search for Embedded Device Firmware Images

引用

Journal on Internet of Things 2022年第1期4卷 1-20页

作者： Yingchao Yu Shuitao Gan Xiaojun Qin State Key Laboratory of Mathematical Engineering and Advanced Computing WuxiJiangsu214083China

In recent years,with the development of the natural language processing(NLP)technologies,security analyst began to use NLP directly on assembly codes which were disassembled from binary executables in order to examine binary similarity,achieved great ***,we found that the existing frameworks often ignored the complex internal structure of instructions and didn’t fully consider the long-term dependencies of *** this paper,we propose firmVulSeeker—a vulnerability search tool for embedded firmware images,based on BERT and Siamese *** first builds a BERT MLM task to observe and learn the semantics of different instructions in their context in a very large unlabeled binary ***,a finetune mode based on Siamese network is constructed to guide training and matching semantically similar functions using the knowledge learned from the first ***,it will use a function embedding generated from the fine-tuned model to search in the targeted corpus and find the most similar function which will be confirmed whether it’s a real vulnerability *** evaluate the accuracy,robustness,scalability and vulnerability search capability of *** show that it can greatly improve the accuracy of matching semantically similar functions,and can successfully find more real vulnerabilities in real-world firmware than other tools.

关键词： Embedded device firmware vulnerability search BERT siamese network

来源：评论

学校读者我要写书评

暂无评论

Survey on the Improvement and Application of HHL Algorithm

Survey on the Improvement and Application of HHL Algorithm

引用

2022 International Conference on Computer Modelling and Big Data Analytics, CMBDA 2022

作者： Liu, Xiaonan Xie, Haoshan Liu, Zhengyu Zhao, Chenyan State Key Laboratory of Mathematical Engineering and Advanced Computing Information Engineering University ZhengZhou450000 China School of Computer and Artificial Intelligence ZhengZhou University ZhengZhou450000 China

Quantum computing is a new computing mode that follows the laws of quantum mechanics to control quantum information units for computation. In terms of computational efficiency, due to the existence of quantum mechanical superposition, some known quantum algorithms can process problems faster than traditional general-purpose computers. HHL algorithm is an algorithm for solving linear system problems. Compared with classical algorithms in solving linear equations, it has an exponential acceleration effect in certain cases and as a sub-module, it is widely used in some machine learning algorithms to form quantum machines learning algorithms. However, there are some limiting factors in the use of this algorithm, which affect the overall effect of the algorithm. How to improve it to make the algorithm perform better has become an important issue in the field of quantum computing. This paper summarizes the optimization and improvement of HHL algorithm since it was proposed, and the application of HHL algorithm in machine learning, and discusses some possible future improvements of some subroutines in HHL algorithm. © Published under licence by IOP Publishing Ltd.

关键词： Linear systems

来源：评论

学校读者我要写书评

暂无评论

SecMVX:Analysis on the Vulnerability of Multi-Variant Execution

引用

China Communications 2021年第8期18卷 85-95页

作者： Bingzheng Li Zheng Zhang Xiaomei Wang Sheng Qu Jiangxing Wu State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou 450001China China National Digital Switching System Engineering and Technological R&D Center Zhengzhou 450002China

As an active defenses technique,multivariant execution(MVX)can detect attacks by monitoring the consistency of heterogeneous variants with parallel *** with patch-style passive defense,MVX can defend against known and even unknown vulnerability-based attacks without relying on attack feature ***,variants generated with software diversity technologies will introduce new vulnerabilities when they execute in ***,we analyze the security of MVX theory from the perspective of formal *** we summarize the general forms and techniques for attacks against MVX,and analyze the new vulnerabilities arising from the combination of variant generation *** propose SecMVX,a secure MVX architecture and variant generation *** evaluations based on CVEs and SPEC 2006 benchmark show that SecMVX introduces 11.29%of the average time overhead,and avoids vulnerabilities caused by the improper combination of variant generation technologies while keeping the defensive ability of MVX.

关键词： multi-variant execution software diversity cyberspace security

来源：评论

学校读者我要写书评

暂无评论

Heterostructured Mn_(3)O_(4)-MnS Multi-Shelled Hollow Spheres for Enhanced Polysulfide Regulation in Lithium-Sulfur Batteries

引用

Energy & Environmental Materials 2023年第6期6卷 436-444页

作者： Bin Qin Qun Wang Weiqi Yao Yifei Cai Yuhan Chen Pengcheng Wang Yongchun Zou Xiaohang Zheng Jian Cao Junlei Qi Wei Cai State Key Laboratory of Advanced Welding and Joining Harbin Institute of TechnologyHarbin 150001China College of Chemistry and Chemical Engineering Taiyuan University of TechnologyTaiyuan 030024China State Key Laboratory of Chemical Engineering East China University of Science and TechnologyShanghai 200237China Department of Mechanical Engineering City University of Hong KongHong KongChina Center of Analysis Measurement and Computing Harbin Institute of TechnologyHarbin 150001China School of Materials Science and Engineering Harbin Institute of Technology Harbin 150001China

Constructing heterojunctions and hollow multi-shelled structures can render materials with fascinating physicochemical properties,and have been regarded as two promising strategies to overcome the severe shuttling and sluggish kinetics of polysulfide in lithium-sulfur(Li-S)***,a single strategy can only take limited *** catalytic hosts with synergistic effects are urgently ***,Mn_(3)O_(4)-MnS heterogeneous multi-shelled hollow spheres are meticulously designed by controlled sulfuration of Mn2O3 hollow spheres,and then applied as advanced encapsulation hosts for Li-S *** from the separated spatial confinement by hollow multi-shelled structure,ample exposed active sites and built-in electric field by heterogeneous interface,and synergistic effects between Mn_(3)O_(4)(strong adsorption)and MnS(fast conversion)components,the assembled battery achieves prominent rate capability and decent cyclability(0.016%decay per cycle at 2 C,1000 cycles).More crucially,satisfactory areal capacity reaches up to 7.1 mAh cm^(-2)even with high sulfur loading(8.0 mg cm^(-2))and lean electrolyte(E/S=4.0 pL mg^(-1))*** work will provide inspiration for the rational design of hollow multi-shelled heterostructure for various electrocatalysis applications.

关键词： electrocatalyst heterojunction host hollow multi-shelled structure Li-S battery Mn_(3)O_(4)-MnS

来源：评论

学校读者我要写书评

暂无评论

One-step implementation of a nonadiabatic geometric fSim gate in superconducting circuits

引用

Physical Review A 2024年第2期110卷 022608-022608页

作者： M.-R. Yun Zheng Shan L.-L. Sun L.-L. Yan Y. Jia Shi-Lei Su Gang Chen School of Physics and Laboratory of Zhongyuan Light Key Laboratory of Materials Physics of Ministry of Education State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou 450001 Henan China College of Physics Institute of Quantum Materials and Physics Key Laboratory for Special Functional Materials of Ministry of Education and School of Materials and Engineering

Due to their significant application in reducing algorithm depth, fSim gates have attracted a lot of attention. However, during the implementation of quantum gates, fluctuations in control parameters and decoherence caused by the environment may lead to a decrease in the fidelity of the gate. Implementing an fSim gate that is robust to these factors in one step remains an unresolved issue. In this paper, we propose a one-step implementation of a nonadiabatic geometric fSim gate composed of a nonadiabatic holonomic controlled-phase (cp) gate and a nonadiabatic noncyclic geometric iswap gate with parallel paths in a tunable superconducting circuit. Compared to the composite nonadiabatic geometric fSim gate composed of a nonadiabatic holonomic cp gate and a nonadiabatic geometric iswap gate, our scheme takes only half the time and demonstrates robustness to parameter fluctuations, as well as to environmental impacts. Moreover, the scheme does not require complex controls, making it very easy to implement in experiments, and can be achieved in various circuit structures. Our scheme may provide a promising path toward quantum computation and simulation.

关键词： Geometric & topological phases Quantum computation Quantum gates

来源：评论

学校读者我要写书评

暂无评论

Adversarial Example Soups: Improving Transferability and Stealthiness for Free

arXiv

引用

arXiv 2024年

作者： Yang, Bo Zhang, Hengwei Wang, Jindong Yang, Yulong Lin, Chenhao Shen, Chao Zhao, Zhengyu State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China School of Cyber Science and Engineering Xi’an Jiaotong University Xi’an China

Transferable adversarial examples cause practical security risks since they can mislead a target model without knowing its internal knowledge. A conventional recipe for maximizing transferability is to keep only the optimal adversarial example from all those obtained in the optimization pipeline. In this paper, for the first time, we question this convention and demonstrate that those discarded, sub-optimal adversarial examples can be reused to boost transferability. Specifically, we propose "Adversarial Example Soups" (AES), with AES-tune for averaging discarded adversarial examples in hyperparameter tuning and AES-rand for stability testing. In addition, our AES is inspired by "model soups", which averages weights of multiple fine-tuned models for improved accuracy without increasing inference time. Extensive experiments validate the global effectiveness of our AES, boosting 10 state-of-the-art transfer attacks and their combinations by up to 13% against 10 diverse (defensive) target models. We also show the possibility of generalizing AES to other types, e.g., directly averaging multiple in-the-wild adversarial examples that yield comparable success. A promising byproduct of AES is the improved stealthiness of adversarial examples since the perturbation variances are naturally reduced. Copyright © 2024, The Authors. All rights reserved.

关键词：

来源：评论

学校读者我要写书评

暂无评论

The Causal Reasoning Ability of Open Large Language Model: A Comprehensive and Exemplary Functional Testing

The Causal Reasoning Ability of Open Large Language Model: A...

引用

IEEE International Conference on Software Quality, Reliability and Security (QRS)

作者： Shun-Hang Li Gang Zhou Zhi-Bo Li Ji-Cang Lu Ning-Bo Huang State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China Information Engineering University Zhengzhou China

As the intelligent software, the development and application of large language models are extremely hot topics recently, bringing tremendous changes to general AI and software industry. Nonetheless, large language models, especially open source ones, incontrollably suffer from some potential software quality issues such as instability, inaccuracy, and insecurity, making software testing necessary. In this paper, we propose the first solution for functional testing of open large language models to check full-scene availability and conclude empirical principles for better steering large language models, particularly considering their black box and intelligence properties. Specifically, we focus on the model’s causal reasoning ability, which is the core of artificial intelligence but almost ignored by most previous work. First, for comprehensive evaluation, we deconstruct the causal reasoning capability into five dimensions and summary the forms of causal reasoning task as causality identification and causality matching. Then, rich datasets are introduced and further modified to generate test cases along with different ability dimensions and task forms to improve the testing integrity. Moreover, we explore the ability boundary of open large language models in two usage modes: prompting and lightweight fine-tuning. Our work conducts comprehensive functional testing on the causal reasoning ability of open large language models, establishes benchmarks, and derives empirical insights for practical usage. The proposed testing solution can be transferred to other similar evaluation tasks as a general framework for large language models or their derivations.

关键词：

来源：评论

学校读者我要写书评

暂无评论

LENSER: A Channel state Information Based Indoor Localization Scheme for Malicious Devices

LENSER: A Channel State Information Based Indoor Localizatio...

引用

IEEE Internatonal Conference on Mobile Adhoc and Sensor Systems (MASS)

作者： Yongqiang Ma Xiangyang Luo Ruixiang Li Shaoyong Du Wenyan Liu Key Laboratory of Cyberspace Situation Awareness of Henan Province State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China

Rapid and accurate localization of illicit micro-recorders, cameras, and other wireless network devices is of great significance for ensuring public privacy and security. However, existing methods are susceptible to environmental noise, have low localization accuracy, high localization time overhead, and require extensive manual involvement. To address these issues, we propose LENSER, a channel state information based indoor localization scheme for illicit wireless network devices. First, we set detection points to capture signal amplitude distribution changes during the antenna array rotation process, thus determining whether there is a line-of-sight propagation relationship between the detection point and the malicious device. Next, we identify the room containing the malicious device based on the line-of-sight propagation relationship and calibrate the measured position and estimate the direction of the malicious device using existing methods within the room. Finally, we establish a linear space based on the direction of the malicious device and propose an iterative comparison method based on received signal strength indicator to localize malicious devices accessing public Wi-Fi networks within the room. We conducted 1200 experiments in four buildings with different layouts and building materials. The results show that LENSER’s average localization time is 12.5 minutes, and the average localization accuracy is 26.4 centimeters, an improvement of 11.1% to 86.1% in average localization accuracy and a reduction of 11.1% to 58.2% in average localization time compared to existing methods, such as Spotfi, Lumos, SCamF, SNOOPDOG, and Region Division.

关键词：

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：