检索结果-内蒙古大学图书馆

2017 17th IEEE International Conference on Communication Technology (ICCT 2017)

作者： Xue-Xiong Yan Qing-Xian Wang Heng-Tai Ma Institute of Software Chinese Academy of Sciences State Key Laboratory of Mathematical Engineering and Advanced Computing

ISBN: (纸本)9781509039456;9781509039449

this paper presents a novel path-sensitive static analysis method for detecting taint-style vulnerabilities in PHP code. The new method includes three key, the first of which is path searching during a basic block, the second is path searching between blocks, and the third is path searching crossing function call. A tool name POSE implements the new method and the testing results show the method is valid for taint-style vulnerabilities in PHP code.

关键词： path-sensitive PHP taint-style vulnerability POSE

来源：评论

学校读者我要写书评

暂无评论

Interfacial molecular anchor for ambient all-bladed perovskite solar modules

引用

Joule 2025年

作者： Zhu, Xuejie Yu, Dongqi Zhou, Xin Wang, Nan Liu, Hong Liang, Zihui Wu, Congcong Wang, Kai Jin, Dayong Liu, Shengzhong Yang, Dong State Key Laboratory of Photoelectric Conversion and Utilization of Solar Energy Dalian National Laboratory for Clean Energy Dalian Institute of Chemical Physics Dalian116023 China School of Physics and Electronic Technology Liaoning Normal University Dalian116029 China Interdisciplinary Research Center for Biology and Chemistry Liaoning Normal University Liaoning Dalian116029 China Key Laboratory for the Green Preparation and Application of Functional Materials Hubei Key Laboratory of Polymer Materials School of Materials Science and Engineering Hubei University Wuhan430062 China National Local Joint Laboratory for Advanced Textile Processing and Clean Production Wuhan Textile University Wuhan430073 China Huanjiang Laboratory Zhejiang University Zhuji311800 China School of Mathematical and Physical Sciences Faculty of Science University of Technology Sydney SydneyNSW Australia Eastern Institute for Advanced Study Eastern Institute of Technology Ningbo China Center of Materials Science and Optoelectronics Engineering University of Chinese Academy of Sciences Beijing100049 China

Ambient blade coating of perovskite solar modules shows great potential for large-scale manufacture and commercialization. However, blade coating nanometer-thick buffer layers typically results in a nonuniform surface due to particle instability and aggregation, often leading to insufficient integration and destabilization of the crystallographic lattice in the overlying perovskite layer. Herein, we introduce a layer of "molecular glue" that can effectively anchor the solute that suspends the monodisperse SnO2 nanoparticles into a uniform thin film and adhere it to the top perovskite during the mechanical blading process. Leveraging this holistic nanoparticle-anchoring strategy, we have achieved a seamlessly bonded cathode heterojunction, resulting in a record efficiency of 26.11% for small cells and the highest efficiency so far of 22.76% (certified at 21.60%) for mini-modules. Importantly, these ambiently all-blade-coated devices exhibit an extended lifetime of approximately 1,500 h, as verified by ISOS-O testing, indicating great promise for commercialization. © 2025

关键词： Perovskite

来源：评论

学校读者我要写书评

暂无评论

DDoS defense mechanism analysis based on signaling game model

DDoS defense mechanism analysis based on signaling game mode...

引用

2013 5th International Conference on Intelligent Human-Machine Systems and Cybernetics, IHMSC 2013

作者： Gao, Xiang Zhu, Yue-Fei State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou City China

ISBN: (纸本)9780769550114

DDoS attack and defense is regarded as a multistage signaling game with observable actions. Its extensive form is given out, and its perfect bayesian nash equilibrium is solved. The current problems encountered by DDoS attack defense are discussed. Theoretical analysis proves the feasibility and effectiveness of the service hopping strategy. This paper draws a conclusion that adding service hopping strategy is superior to a pure filtering strategy, also provides beneficial reference on DDoS attack prevention. © 2013 IEEE.

关键词： Denial-of-service attack

来源：评论

学校读者我要写书评

暂无评论

NAS Honeypot Technology Based on Attack Chain 10th

NAS Honeypot Technology Based on Attack Chain

引用

10th International Conference on Computer engineering and Networks, CENet 2020

作者： Liu, Bing Shu, Hui Kang, Fei State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou450001 China

ISBN: (纸本)9789811584619

With the wide application of network attached storage (NAS), the security problem is becoming more and more serious, together with the increasingly fierce attacks against NAS devices of different manufacturers. In order to better capture various types of attacks against NAS devices and detect security threats in time, this paper proposes a solution named NAS honeypot, mining the potential security threats through modeling and analyzing the NAS threats. Then a NAS honeypot based on device virtualization technology and depth monitoring and attack induction was designed on the basis of the construction NAS attack chain. Experimental results show that the NAS honeypot can effectively capture, record and analyze network attacks against multi-types NAS devices with a strong guiding effect in mastering popular attack method of NAS devices and alleviating the security threats of NAS. © 2021, The Editor(s) (if applicable) and The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd.

关键词： Security systems

来源：评论

学校读者我要写书评

暂无评论

A software upgrade security analysis method on network traffic classification using deep learning

A software upgrade security analysis method on network traff...

引用

2020 International Conference on Urban engineering and Management Science, ICUEMS 2020

作者： Zhang, Bing State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou450000 China

ISBN: (纸本)9781728188324

Nowadays, the vulnerability in the software upgrade process are extremely harmful to network security. However, the detection of upgrade vulnerability is facing serious difficulties and problems. Aiming at the current software upgrade vulnerability analysis problem, we propose a neural network model for traffic classification based on two levels of data packets and network flows. This method does not need to manually extract features and can learn the dependency relationship between data packets and networks well. It can make full use of comprehensive flow features for traffic classification. In order to evaluate the model, we built a dataset of software upgrade vulnerabilities and conducted relevant experiments on the CICIDS 2017 dataset. The experimental results show that compared with other RNN models, our model has the best performance, reaching a precision of 99.86% and an F1 score of 99.44%. At the same time, based on the pre-trained model, we use the software upgrade vulnerability dataset to fine-tuning the model, with the F1 score reaching 99.78%. © 2020 IEEE.

关键词： Neural network models

来源：评论

学校读者我要写书评

暂无评论

The Executors Scheduling Algorithm for the Web Server Based on the Attack Surface

The Executors Scheduling Algorithm for the Web Server Based ...

引用

2020 IEEE International Conference on Advances in Electrical engineering and Computer Applications, AEECA 2020

作者： Nie, Guanglai Zhang, Zheng Zhao, Yufeng Meac State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China

ISBN: (纸本)9781728165202

In the existing scheduling algorithms of mimicry structure, the random algorithm cannot solve the problem of large vulnerability window in the process of random scheduling. Based on known vulnerabilities, the algorithm with diversity and complexity as scheduling indicators can not only fail to meet the characteristic requirements of mimic's endogenous security for defense, but also cannot analyze the unknown vulnerabilities and measure the continuous differences in time of mimic Executive Entity. In this paper, from the Angle of attack surface is put forward based on mimicry attack the mimic Executive Entity scheduling algorithm, its resources to measure analysis method and mimic security has intrinsic consistency, avoids the random algorithm to vulnerability and modeling using known vulnerabilities targeted, on time at the same time can ensure the diversity of the Executive body, to mimic the attack surface web server scheduling system in continuous time is less, and able to form a continuous differences. Experiments show that the minimum symbiotic resource scheduling algorithm based on time continuity is more secure than the random scheduling algorithm. © 2020 IEEE.

关键词： Scheduling algorithms

来源：评论

学校读者我要写书评

暂无评论

A dynamic network change detection method using network embedding 4th

A dynamic network change detection method using network embe...

引用

4th International Conference on Cloud computing and Security, ICCCS 2018

作者： Sun, Tong Liu, Yan China State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China

ISBN: (纸本)9783030000059

Dynamic networks are ubiquitous. Detecting dynamic network changes is helpful to understand the network development trend and discover network anomalies in time. It is a research hotspot at present. The structure of the network in the real world is very complex, the current feature learning method is difficult to capture a variety of network connectivity patterns, and the definition of efficient network features requires a large number of neighborhood knowledge and computational costs. In order to overcome this limitation, this paper presents a method of dynamic network change detection using network embedding, which automates the whole process by using feature extraction as a embedding problem, and carries out dynamic network change detection by analyzing the distribution of nodes in space after network embedding processing. We use this method to simulate dynamic network and real dynamic network datasets to prove the validity of this method. © Springer Nature Switzerland AG 2018.

关键词： Network embeddings

来源：评论

学校读者我要写书评

暂无评论

Recurrent neural network based binary code vulnerability detection 2

Recurrent neural network based binary code vulnerability det...

引用

2nd International Conference on Algorithms, computing and Artificial Intelligence, ACAI 2019

作者： Zheng, Jianyun Pang, Jianmin Zhang, Xiaochuan Zhou, Xin Li, MingLiang Wang, Jun State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou450002 China

ISBN: (纸本)9781450372619

Vulnerability detection, especially vulnerability automatic detection, have long been an area of active research. Considering that RNN can model dependencies automatically, we propose a recurrent neural network (RNN) based method for binary code vulnerability detection. We collected correspond to 4 types of vulnerabilities, including CWE-134, CWE-191, CWE-401 and *** find which RNN is better in vulnerability detection, we evaluated 6 different RNNs, including SRNN, BSRNN, LSTM, BLSTM, GRU and BGRU. The results demonstrated that BSRNN is better than others in vulnerability detection. © 2019 ACM.

关键词： Network security

来源：评论

学校读者我要写书评

暂无评论

RLGBG: A Reachable Landmark Grouping Based IP Geolocation Method for Unreachable Target 29th

RLGBG: A Reachable Landmark Grouping Based IP Geolocation Me...

引用

29th International Conference on Computational and Experimental engineering and Sciences, ICCES 2023

作者： Zu, Shuodi Liu, Chong Zhang, Fan Ding, Shichang State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou450001 China

ISBN: (纸本)9783031429866

IP geolocation technology can estimate or determine the geographical location of terminal device through IP address, which is an important basis for location-based network services. The existing IP geolocation methods based on network measurement cannot accurately obtain the network environment when the target does not respond to the detection message, so it is difficult to achieve high-precision geolocation. To solve this problem, a reachable landmark grouping based IP geolocation method for unreachable target (RLGBG) is proposed in this manuscript. RLGBG first detects landmark data extensively, filters, evaluates and retains reliable and accessible landmarks. Secondly, RLGBG counts the topological relationship and geographical distribution among the reachable landmarks, groups the landmarks according to the common router, and divides the landmarks into different groups after checking by geographical location. Then, the continuous IP segments are divided into IP blocks according to landmark groups, and the location range of each IP block is calculated by the landmarks within each group. Finally, RLGBG counts the IP blocks containing the target, merges those IP blocks that are geographically coincident and topologically related, and estimates the target’s location by calculating the landmark center within the IP blocks. The geolocation experiments based on four cities in China show that RLGBG can effectively estimate the location of unreachable IP targets, and its accuracy and coverage are higher than the existing typical method and IP location databases. © 2024, The Author(s), under exclusive license to Springer Nature Switzerland AG.

关键词： Location

来源：评论

学校读者我要写书评

暂无评论

IPDF: Directed Fuzzer for Input Parsing Program

IPDF: Directed Fuzzer for Input Parsing Program

引用

2023 International Conference on Electronic Information engineering and Data Processing, EIEDP 2023

作者： He, Yubo Liu, Long State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou450000 China

ISBN: (纸本)9781510666160

Directed greybox fuzzing aims to test specific code and has made many advances in several areas. However, most vulnerabilities of input parsing programs are triggered in the particular state of the program, so existing directed greybox fuzzing works face path explosion problem when they fuzz the input parsing program and need more ability to explore the particular state of the program. To address the above problem, we propose a call-relationship-based fitness function. The main idea is to use the function call relationship to guide directed fuzzing before reaching the target. Call-relationship-based fitness function extracts the function calls and call relationship from the program, uses an intra-procedural reachability analysis to get all concerned edges, and constructs the fitness function based on the edges. Based on the above method, we implemented the directed greybox fuzzing IPDF and evaluated it with the mainstream directed greybox fuzzers Beacon and AFLGo on real-world programs. Evaluation of IPDF showed that IPDF found vulnerabilities faster than the state-of-the-art directed greybox fuzzers. The experimental results showed that the speed of MDGF is 3.01 times faster than that of AFLGo and 1.15 times faster than Beacon. © 2023 SPIE.

关键词： Prototyping engineering Equipment Visualization

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：