检索结果-南通市图书馆

A formal model of fair exchange protocols

在线全文

学校读者我要写书评

暂无评论

Science in China(Series F) 2005年第4期48卷 499-512页

作者： QING Sihan1,2.3.& LI Gaicheng1,2.3.1. engineering {3. {2. for {3. security technology, Institute of Software, Chinese Aca- demy of sciences, beijing 100080, China 2. beijing Zhongke Ansheng Corporation of {3. technology, beijing 100080, China 3. Graduate School of the Chinese {12. of sciences, beijing 10003., China 1. engineering research {2. for {3. security technology Institute of Software Chinese Academy of Sciences 100080 Beijing China 2. beijing Zhongke Ansheng Corporation of information {2. 100080 Beijing China 3. Graduate School of the Chinese academy of sciences 100039 Beijing China

Based on the study of existing fair exchange protocols, this paper sets up an accurate formal model by stepwise refinement. In the process of refinement an unreliable channel is employed to simulate an attack behavior. The model provides a novel formal definition of exchanged items, and presents the formal goals for fairness, accountability, etc., reflecting the inherent requirements for fair exchange protocols across-the-board. In order to check, prove, and design fair exchange protocols effectively and efficiently, the model puts forward a novel property of abuse-freeness which applies to all fair exchange protocols, gives a formal definition for trust strand of the third party, and presents general criteria of designing a secure and effective fair exchange protocol. Taking a typical fair exchange protocol as an example, this paper presents the analysis steps of fair exchange protocols appealing to our model. An unknown attack is uncovered. The analysis reveals the process of a complete attack, discovering deeper reasons for causing an attack. Finally, we modify the flawed protocol and the revised protocol ensures the desirable properties.

关键词： events local causal relation local temporal relation global relation exchanged item security goals.

Formal analysis and design of multi-party fair exchange protocols

在线全文

学校读者我要写书评

暂无评论

Science in China(Series F) 2006年第2期49卷 155-174页

作者： QING Sihan1,2.3.& LI Gaicheng1,3.1. engineering research {2. for {3. security technology, Institute of Software, Chinese academy of sciences, beijing 100080, China 2. beijing Zhongke Ansheng Corporation of {3. technology, beijing 100080, China 3. Graduate School of the Chinese academy of sciences, beijing 10003., China 1. engineering research {2. for {3. security technology Institute of Software Chinese Academy of Sciences Beijing 100080 China 2. beijing Zhongke Ansheng Corporation of information {2. Beijing 100080 China 3. Graduate School of the Chinese academy of sciences Beijing 100039 China

Based on the origin of message items and channel combination between transacting parties, and events and relations among events, this paper presents a concise, precise, and hierarchical model for general fair exchange protocols, formally specifies various security requirements which are able to reflect inherent requirements for fair exchange protocols more rigorously, and partition these security requirements with fine granularity. This work helps analyze, debug, and design multi-party fair exchange protocols more effectively and elaborately,

关键词： fair exchange logical protocol formal model security requirement.

Identifying heavy hitters in high-speed network monitoring

在线全文

学校读者我要写书评

暂无评论

Science China(information sciences) 2010年第3期53卷 659-676页

作者： ZHANG Yu1, FANG BinXing1,2.& ZHANG YongZheng2.1research {3. of Computer Network and {2. {3. technology, Harbin Institute of technology, Harbin 150001, China 2.0} {3. of {2. {3., Institute of Computing technology, Chinese {13. of {12., beijing 100190, China 1. research center of Computer Network and {2. {3. technology Harbin Institute of Technology Harbin 150001 China2. Research Center of Information Security Institute of Computing Technology Chinese Academy of Sciences Beijing 100190 China

Identifying heavy hitters in a network traffic stream is important for a variety of network applications ranging from traffic engineering to anomaly detection such as detection of denial-of-service attacks. Existing methods generally examine newly arriving items in the stream, perform a small number of operations using a small amount of memory, and still provide guarantees on the identifying accuracy. In high-speed network monitoring, the update speed per item is extremely critical. However, so far as we know, there are no identifying algorithms which can provide constant update time (O(1)) in a weighted data stream. In this paper, we present an algorithm named Weighted Lossy Counting (WLC) which is able to identify heavy hitters in a high-speed weighted data stream with constant update time. WLC employs a novel efficient partially ordered data structure which is able to provide a fast per-item update speed while keeping the memory cost relatively low. We compare WLC with state-of-the-art algorithms for finding heavy hitters in real traffic traces. The experimental results show that WLC performs well in accuracy (recall, precision and average relative error) as other algorithms; moreover it has a much higher update speed at the cost of relatively larger memory space used. A theoretical worst-case memory bound of WLC is also derived in this paper; however, experiments with long real traffic traces show that WLC requires much less space than the theoretical bound in practice.

关键词： network traffic monitoring heavy hitter weighted data streams

Polynomial analysis of canopy spectra and biochemical component content inversion

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Science China Earth sciences 2005年第10期48卷 1780-1791页

作者： YAN Chunyan1, LIU Qiang1, NIU Zheng1, WANG Jihua2. HUANG Wenjiang2.& LIU Liangyun 2.1. State Key Laboratory of Remote Sensing Science, Jointly Sponsored by the Institute of Remote Sensing Applications of Chinese {3. of sciences and {2. Normal University, {2. 100101, China 2. National engineering research center for information technology in Agriculture, {2. 100089, China State Key Laboratory of Remote Sensing Science Jointly Sponsored by the Institute of Remote Sensing Applications of Chinese academy of sciences and {2. Normal University {2. China National engineering research {2. for {3. technology in Agriculture beijing China

A polynomial expression model was developed in this paper to describe directional canopy spectra, and the decomposition of the polynomial expression was used as a tool for re-trieving biochemical component content from canopy multi-angle spectra. First, the basic formula of the polynomial expression was introduced and the physical meaning of its terms and coeffi-cients was discussed. Based on this analysis, a complete polynomial expression model and its decomposition method were given. By decomposing the canopy spectra simulated with SAILH model, it shows that the polynomial expression can not only fit well the canopy spectra, but also show the contribution of every order scattering to the whole reflectance. Taking the first scattering coefficients a10 and a01 for example, the test results show that the polynomial coefficients reflect very well the hot spot phenomenon and the effects of viewing angles, LAI and leaf inclination angle on canopy spectra. By coupling the polynomial expression with leaf model PROSPECT, a canopy biochemical component content inversion model was given. In the simulated test, the canopy multi-angle spectra were simulated by two different models, SAILH and 4-SCALE re-spectively, then the biochemical component content was retrieved by inverting the coupled polynomial expression + PROSPECT model. Results of the simulated test are promising, and when applying the algorithm to measured corn canopy multi-angle spectra, we also get relatively accurate chlorophyll content. It shows that the polynomial analysis provides a new method to get biochemical component content independent of any specific canopy model.

关键词： polynomial expression, canopy spectra, decomposition, biochemical component content, inversion.

Black-box testing based on colorful taint analysis

在线全文

学校读者我要写书评

暂无评论

Science China(information sciences) 2012年第1期55卷 171-183页

作者： CHEN Kai1,2.3.FENG DengGuo1,SU PuRui1&ZHANG YingJun1,2.3.1State Key Laboratory of information {3.,Institute of Software,Chinese {2. of Science,{3. 100190,China 2.tate Key Laboratory of information {3.,Graduate University of Chinese {2. of sciences,{3. 100049,China 3.ational engineering {13. center of information {3.,{3. 100190,China 1. State Key Laboratory of information security Institute of Software Chinese Academy of Science Beijing 100190 China2. State Key Laboratory of Information Security Graduate University of Chinese Academy of Sciences Beijing 100049 China3. National Engineering Research Center of Information Security Beijing 100190 China

Software vulnerability detection is one of the most important methods for guaranteeing software *** main classes of methods can detect vulnerabilities in binary files:white-box testing and black-box *** former needs to construct and solve path constraints to detect *** has two main drawbacks:path exploding and complexity of *** latter often aimlessly exhausts various inputs to test binary *** paper combines both testing methods to detect vulnerabilities in binary *** analyzing the input elements that aect check condition corresponding to a certain check point,we can generate one class of inputs that get to the check point to increase fuzzing *** analyzing the relationship between guard conditions and check condition,the redundant check points are *** taint analysis method(CTAM)is proposed to compute guard conditions,which is more ecient than traditional taint analysis method(TTAM).We implemented a prototype and made several experiments on *** results showed that our method could increase the eciency of black-box testing.

关键词： software testing vulnerability detection dynamic testing black-box testing colorful taint analysis

A property-based attestation protocol for TCM

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Science China(information sciences) 2010年第3期53卷 454-464页

作者： FENG DengGuo1,2.& QIN Yu1,2.1State Key Laboratory of information {3., Institute of Software, Chinese {2. of Science, {3. 100190, China 2.ational engineering research center of information {3., {3. 100190, China 1. State Key Laboratory of information security Institute of Software Chinese Academy of Science Beijing 100190 China2. National Engineering Research Center of Information Security Beijing 100190 China

This paper presents a property attestation protocol for the security chip TCM (trusted cryptographic module) via analyzing the problems of the current property attestation, which is built on the property attestation model with the online trust third party. In the protocol the prover utilizes the zero-knowledge proof by the attribute certificates, configuration commitment and TCM signature, and attests its configuration and status which are compliant with the declarative security property. The protocol is characterized by shorter signature length and lower computations. The security of the protocol is proved at the random oracle model. The protocol can help extend application and improve standard for security chip TCM, and it also has practical value and immediate significance.

关键词： trust computing trust cryptographic module (TCM) property attestation signature of knowl- edge configuration commitment

Multiparty simultaneous quantum identity authentication with secret sharing

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Science China(Physics,Mechanics & Astronomy) 2008年第3期51卷 321-327页

作者： YANG YuGuang1,2.WEN QiaoYan3.& ZHANG Xing4,5 1 College of Computer Science and technology,beijing University of technology,beijing 10002.,China 2.State Key Laboratory of information security (Graduate University of the Chinese academy of sciences),beijing 100049,China 3.School of Science,beijing University of Posts and Telecommunications,beijing 100876,China 4 Institute of Electronic technology,information engineering University,Zhengzhou 450004,China 5 Trusted Computing Laboratory,beijing University of technology,beijing 10002.,China College of Computer Science technology Beijing University of Technology Beijing 100022 China State Key Laboratory of information security [Graduate University of the Chinese academy of sciences] Beijing 100049 China School of Science Beijing University of Posts Telecommunications Beijing 100876 China Institute of Electronic technology Information Engineering University Zhengzhou 450004 China Trusted Computing Laboratory Beijing University of Technology Beijing 100022 China

Two multiparty simultaneous quantum identity authentication (MSQIA) protocols based on secret sharing are presented. All the users can be authenticated by a trusted third party (TTP) simultaneously. In the first protocol,the TTP shares a random key K with all the users using quantum secret sharing. The ith share acts as the authentication key of the ith user. When it is necessary to perform MSQIA,the TTP generates a random number R secretly and sends a sequence of single photons encoded with K and R to all the users. According to his share,each user performs the corresponding unitary operations on the single photon sequence sequentially. At last,the TTP can judge whether the impersonator exists. The sec-ond protocol is a modified version with a circular structure. The two protocols can be efficiently used for MSQIA in a network. They are feasible with current technol-ogy.

关键词： quantum identity authentication secret sharing quantum cryptography

Distribution,formation and evolution of sand ridges on the East China Sea shelf

在线全文

学校读者我要写书评

暂无评论

Science China(Technological sciences) 2010年第3期53卷 822-828页

作者： ZHAO RenBao 1,2.SUN HaiTao 3.WU YaSheng 3.&ZHAO ChuanFeng 1,2.1MOE Key Laboratory of Petroleum engineering,China University of Petroleum,{3. 102.49,China 2.Enhanced Oil Recovering {2. {3.,China University of Petroleum,{3. 102.49,China 3.aculty of Natural Resource&information technology,China University of Petroleum,{3. 102.49,China 1. MOE Key Laboratory of Petroleum engineering China University of Petroleum Beijing 102249 China2. Enhanced Oil Recovering Research Center China University of Petroleum Beijing 102249 China3. Faculty of Natural Resource & Information Technology China University of Petroleum Beijing 102249 China

Influence of CO2.corrosion on reservoir mineralogical composition,pore structure and their mechanical characteristics was studied using XRD,SEM,rock tri-axial machine and core flow experimental *** was found that the corrosion effect was mainly attributed to rock texture and structure,fluid composition and external dynamical conditions in the experimental *** cores with bedding structures,their bedding surfaces were the preferential corrosion regions,because micro-cracks would evolve at these surfaces in the pressure-releasing ***,for cores with massive structures controlled by stable water environment,the CO2.corrosion would result in pore enlargement and secondary pore *** gas velocity from outlet showed sharp increase in the injection process of CO2.H2. *** could be explained by two changes caused by *** was the opening and closure of *** other was particle *** the corrosion time increased,both tensile strength and compressive strength decreased,which confirmed decrease of cementation *** should also be noted that permeability increase and micro-cracks generation would pose damage to the capacity of CO2.geological storage.

关键词： carbon dioxide geological storage mineralization enhanced oil recovery corrosion

Secure network coding in the presence of eavesdroppers

在线全文

学校读者我要写书评

暂无评论

Science China(information sciences) 2010年第3期53卷 648-658页

作者： LUO MingXing1,2.3. YANG YiXian1,2.3. WANG LiCheng1,2.3.& NIU XinXin1,2.3.1information security {2., State Key Laboratory of Networking and Switching {3., beijing University of Posts and Telecommunications, beijing 100876, China 2.ey Laboratory of Network and information Attack and Defence {3. of MOE, beijing University of Posts and Telecommunications, beijing 100876, China 3.ational engineering Laboratory for Disaster Backup and Recovery, beijing University of Posts and Telecommunications, beijing 100876, China 1. information security {2. State Key Laboratory of Networking and Switching Technology Beijing University of Posts and Telecommunications Beijing 100876 China2. Key Laboratory of Network and Information Attack and Defence Technology of MOE Beijing University of Posts and Telecommunications Beijing 100876 China3. National Engineering Laboratory for Disaster Backup and Recovery Beijing University of Posts and Telecommunications Beijing 100876 China

Our concern, in the paper, is to construct information-theoretic secure network coding in the presence of eavesdroppers. Based on the generalized attack model and all-or-nothing transformation, the security of network coding in the generalized combination network can be characterized by the network capacity and the min-cut bound of wiretapping set from the source. Furthermore, it can be extended to any directed acyclic networks with single source. Compared with the traditional results, we construct information-theoretic secure network coding without additional encryptions and giving up any capacity.

关键词： all-or-nothing transformation secure network coding eavesdropping