检索结果-内蒙古大学图书馆

4th International Conference on Computer engineering and Application, ICCEA 2023

作者： He, Heng Xiong, Xiaobing Zhao, Yuntian State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China

ISBN: (纸本)9798350347548

The difference between real devices and virtual environments causes a low success rate of application-layer program emulation when the firmware is operating in full-system emulation during the dynamic analysis of the firmware of embedded devices. In this paper, we propose ALEmu, an emulation framework for application-layer programs, which can effectively improve the emulation success rate of application-layer programs in embedded device firmware through automatic preprocessing of target programs, building configuration libraries, and hooking external program calls. When we test ALEmu on a variety of real-world devices, including routers and IP cameras, we find that it performs more successfully and accurately than the current state-of-the-art full-system emulation frameworks like Firmadyne and FirmAE. © 2023 IEEE.

关键词： Firmware

来源：评论

学校读者我要写书评

暂无评论

Feature-based identification method of MCU firmware IO interface 6

Feature-based identification method of MCU firmware IO inter...

引用

6th IEEE Information Technology, Networking, Electronic and Automation Control Conference, ITNEC 2023

作者： Sun, Yuanbo Dong, Weiyu State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China

ISBN: (纸本)9781665460033

Device simulation is an important method of embedded device security analysis, due to the extensive and heterogeneous nature of the current peripherals, the existing simulation technology for peripheral simulation is mostly fuzzy, to find the input and output that meet the firmware requirements as the main goal. In order to construct a template based on IO interface identification to extend the peripheral simulation scheme, this paper identifies the IO interface without firmware source code based on the characteristics of the IO configuration process in MCU firmware. Through experimental comparison, this method has a certain effect in MCU firmware interface recognition. © 2023 IEEE.

关键词： Firmware

来源：评论

学校读者我要写书评

暂无评论

An Intrusion Detection Feature Selection Method Based on Improved Mutual Information 6

An Intrusion Detection Feature Selection Method Based on Imp...

引用

6th IEEE Information Technology, Networking, Electronic and Automation Control Conference, ITNEC 2023

作者： Qi, Zan Fei, Jinlong Wang, Jue Li, Xue State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China

ISBN: (纸本)9781665460033

Feature selection methods for classification are crucial for intrusion detection techniques using machine learning. High-dimensional features in intrusion detection data affect computational complexity, consume more used resources and more time for data analysis, and the irrelevant and redundant features among them often hinder the performance of classifiers and mislead the classification task. Therefore, it is challenging to select more relevant features from intrusion detection data containing many such features. In this paper, we propose an efficient feature selection algorithm that first considers the correlation between features and the redundancy of pairs of features with respect to class labels based on an improved Pearson correlation coefficient, and later improves the evaluation function based on conditional mutual information to obtain a final subset of features with the goal of improving the classification rate and accuracy. The proposed feature selection method based on improved conditional mutual information is compared with three existing feature selection methods on the frequently studied public benchmark intrusion detection dataset NSL-KDD. The experimental results show that the features selected by the proposed method in this paper lead to a significant reduction in execution time while resulting in higher classification accuracy. © 2023 IEEE.

关键词： Feature Selection

来源：评论

学校读者我要写书评

暂无评论

Research on Cross-site Scripting Attack Detection Technology Based on Few-shot Learning 6

Research on Cross-site Scripting Attack Detection Technology...

引用

6th IEEE Information Technology, Networking, Electronic and Automation Control Conference, ITNEC 2023

作者： Lu, Dongzhe Liu, Long State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou China

ISBN: (纸本)9781665460033

With the intensification of informatization and mobility, various web security threats are emerging. Cross-site scripting (XSS) attack is the most common type of web attack. Most traditional detection methods have been difficult to adapt to the existing confusion variants of XSS attacks. In this paper, we extract features based on big data collected from 2017 to 2022. In order to improve the XSS detection effect of detection tools, we build machine learning models based on more than 210,000 positive and negative samples, among which CNN has the best performance. Furthermore, we propose a new algorithm that improves the traditional virtual sample generation technology based on prior knowledge in order to improve the generalization of the models. Experimental results show that in most cases, the performance of the algorithm in this paper is better than other VSG methods, and the ability to detect and discover unknown attacks is improved to a certain extent. © 2023 IEEE.

关键词： Informatization

来源：评论

学校读者我要写书评

暂无评论

On the complete weight distributions of quantum error-correcting codes

引用

Chinese Physics B 2023年第5期32卷 272-287页

作者：杜超马智熊茂胜 State Key Laboratory of Mathematical Engineering and Advanced Computing Zhenghzhou 450001China Henan Key Laboratory of Network Cryptography Technology Zhenghzhou 450001China Department of Mathematics Hong Kong University of Science and TechnologyHong KongChina

In a recent paper, Hu et al. defined the complete weight distributions of quantum codes and proved the Mac Williams identities, and as applications they showed how such weight distributions may be used to obtain the singleton-type and hamming-type bounds for asymmetric quantum codes. In this paper we extend their study much further and obtain several new results concerning the complete weight distributions of quantum codes and applications. In particular, we provide a new proof of the Mac Williams identities of the complete weight distributions of quantum codes. We obtain new information about the weight distributions of quantum MDS codes and the double weight distribution of asymmetric quantum MDS codes. We get new identities involving the complete weight distributions of two different quantum codes. We estimate the complete weight distributions of quantum codes under special conditions and show that quantum BCH codes by the Hermitian construction from primitive, narrow-sense BCH codes satisfy these conditions and hence these estimate applies.

关键词： quantum codes complete weight distributions Mac Williams identities BCH codes

来源：评论

学校读者我要写书评

暂无评论

Research on Intrusion Tolerance System Based on Behavioral Baseline and Defense-in-Depth Architecture

Research on Intrusion Tolerance System Based on Behavioral B...

引用

2024 International Conference on Mechatronics and Intelligent Control, ICMIC 2024

作者： Meng, Qi Wang, Xuemeng Yang, Kai Meng, Long Wang, Jiancheng Fei, Jinlong State Key Laboratory of Mathematical Engineering and Advanced Computing PLA Strategic Support Force Information Engineering University Zhengzhou China

ISBN: (数字)9781510686847

ISBN: (纸本)9781510686830

Tolerance technology is the third-generation network security technology commonly used in the world. It is derived from the category of information survival and endogenous security technology. A scholar from Carnegie Mellon University gave this survival technology a definition: the so-called "invasion survival technology".It is the ability of the system to perform its own tasks within a limited time when external attacks, failures and accidents have occurred. It assumes that we cannot detect intrusions to the system completely and correctly. When external intrusions or failures occur suddenly, we can use tolerance technology to solve the problem of survival of the system to ensure the confidentiality, integrity, and integrity of the information system. reliability and non-repudiation. In the current Internet security incidents, countless experiences and lessons tell us that it is not enough to rely on blocking and defensing for network *** on the existing network defense-in-depth architecture and the common behavior and parameter baselines of current emergency response systems, this paper designs an intrusion-tolerant system based on the behavioral baseline and network-in-depth architecture, which realizes intrusion tolerance and malicious behavior blocking under high confrontation intensity. To adapt to the maximum recovery and necessary tolerance under the attack technology of international APT organizations, and to protect the integrity and availability of the system to the greatest extent. © 2025 SPIE.

关键词： Network intrusion

来源：评论

学校读者我要写书评

暂无评论

An anonymous authentication and secure data transmission scheme for the Internet of Things based on blockchain

引用

Frontiers of Computer Science 2024年第3期18卷 183-197页

作者： Xingxing CHEN Qingfeng CHENG Weidong YANG Xiangyang LUO State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou Institute of Information Science and TechnologyZhengzhou 450001China Henan Key Laboratory of Grain Photoelectric Detection and Control Henan University of TechnologyZhengzhou 450001China Henan Province Key Laboratory of Cyberspace Situation Awareness Zhengzhou Institute of Information Science and TechnologyZhengzhou 450001China

With the widespread use of network infrastructures such as 5G and low-power wide-area networks,a large number of the Internet of Things(IoT)device nodes are connected to the network,generating massive amounts of ***,it is a great challenge to achieve anonymous authentication of IoT nodes and secure data *** present,blockchain technology is widely used in authentication and s data storage due to its decentralization and ***,Fan et *** a secure and efficient blockchain-based IoT authentication and data sharing *** studied it as one of the state-of-the-art protocols and found that this scheme does not consider the resistance to ephemeral secret compromise attacks and the anonymity of IoT *** overcome these security flaws,this paper proposes an enhanced authentication and data transmission scheme,which is verified by formal security proofs and informal security ***,Scyther is applied to prove the security of the proposed ***,it is demonstrated that the proposed scheme achieves better performance in terms of communication and computational cost compared to other related schemes.

关键词： Internet of Things blockchain authentication data transmission

来源：评论

学校读者我要写书评

暂无评论

IPDF: Directed Fuzzer for Input Parsing Program

IPDF: Directed Fuzzer for Input Parsing Program

引用

2023 International Conference on Electronic Information engineering and Data Processing, EIEDP 2023

作者： He, Yubo Liu, Long State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou450000 China

ISBN: (纸本)9781510666160

Directed greybox fuzzing aims to test specific code and has made many advances in several areas. However, most vulnerabilities of input parsing programs are triggered in the particular state of the program, so existing directed greybox fuzzing works face path explosion problem when they fuzz the input parsing program and need more ability to explore the particular state of the program. To address the above problem, we propose a call-relationship-based fitness function. The main idea is to use the function call relationship to guide directed fuzzing before reaching the target. Call-relationship-based fitness function extracts the function calls and call relationship from the program, uses an intra-procedural reachability analysis to get all concerned edges, and constructs the fitness function based on the edges. Based on the above method, we implemented the directed greybox fuzzing IPDF and evaluated it with the mainstream directed greybox fuzzers Beacon and AFLGo on real-world programs. Evaluation of IPDF showed that IPDF found vulnerabilities faster than the state-of-the-art directed greybox fuzzers. The experimental results showed that the speed of MDGF is 3.01 times faster than that of AFLGo and 1.15 times faster than Beacon. © 2023 SPIE.

关键词： Prototyping engineering Equipment Visualization

来源：评论

学校读者我要写书评

暂无评论

A Survey of Security Analysis on Industrial Control Devices via Rehosting 3

A Survey of Security Analysis on Industrial Control Devices ...

引用

3rd IEEE International Conference on Information Technology, Big Data and Artificial Intelligence, ICIBA 2023

作者： Liu, Houzhi Ma, Rongkuan Wei, Qiang State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou450001 China

ISBN: (纸本)9781665490788

At present, the network security of embedded devices has received more and more attention. However, the existing dynamic analysis tools can't performance in embedded devices as common softwares. The main reason is that the internal state information of the embedded device can not be directly obtained, and the debugging interface usually shields the device after the manufacturer produces it. Thus, this paper introduces rehosting techniques for embedded systems and the differences between each way. Then we talk about the Deficiencies and future works in emulate execution. © 2023 IEEE.

关键词： Network security

来源：评论

学校读者我要写书评

暂无评论

A survey on federated learning:a perspective from multi-party computation

引用

Frontiers of Computer Science 2024年第1期18卷 93-103页

作者： Fengxia LIU Zhiming ZHENG Yexuan SHI Yongxin TONG Yi ZHANG Institute of Artificial Intelligence and Key Laboratory of Mathematics Informatics Behavioral Semantics Beihang UniversityBeijing 100191China State Key Laboratory of Software Development Environment and Advanced Innovation Center for Future Blockchain and Privacy Computing Beihang UniversityBeijing 100191China Pengcheng Laboratory Shenzhen 518055China Zhongguancun Laboratory Beijing 100190China Institute for Mathematical Sciences and Engineering Research Center of Financial Computing and Digital Engineering Renmin University of ChinaBeijing 100872China

Federated learning is a promising learning paradigm that allows collaborative training of models across multiple data owners without sharing their raw *** enhance privacy in federated learning,multi-party computation can be leveraged for secure communication and computation during model *** survey provides a comprehensive review on how to integrate mainstream multi-party computation techniques into diverse federated learning setups for guaranteed privacy,as well as the corresponding optimization techniques to improve model accuracy and training *** also pinpoint future directions to deploy federated learning to a wider range of applications.

关键词： sfederated learning multi-party ycomputation privacy-preserving data mining distributed learning

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：