检索结果-南通市图书馆

Resource investment for DDoS attack resistant SDN: a practical assessment

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Science China(Information Sciences) 2023年第7期66卷 112-129页

作者： Bin YUAN Fan ZHANG Jun WAN Huan ZHAO Shui YU Deqing ZOU Qiangsheng HUA Hai JIN School of Cyber Science and Engineering Huazhong University of Science and Technology National Engineering Research Center for Big Data Technology and System Services Computing Technology and System Lab Hubei Engineering Research Center on Big Data Security Shenzhen Huazhong University of Science and Technology Research Institute School of Computer Science and Technology Huazhong University of Science and Technology Cluster and Grid Computing Lab School of Computer Science University of Technology Sydney

Software-defined networks(SDNs) present a novel network architecture that is widely used in various datacenters. However, SDNs also suffer from many types of security threats, among which a distributed denial of service(DDoS) attack, which aims to drain the resources of SDN switches and controllers,is one of the most common. Once the switch or controller is damaged, the network services can be affected.Many defense schemes against DDoS attacks have been proposed from the perspective of attack detection;however, such defense schemes are known to suffer from a time consuming and unpromising accuracy, which could result in an unavailable network service before specific countermeasures are taken. To address this issue through a systematic investigation, we propose an elaborate resource-management mechanism against DDoS attacks in an SDN. Specifically, by considering the SDN topology, we leverage the M/M/c queuing model to measure the resistance of an SDN to DDoS attacks. Network administrators can therefore invest a reasonable number of resources into SDN switches and SDN controllers to defend against DDoS attacks while guaranteeing the quality of service(QoS). Comprehensive analyses and empirical data-based experiments demonstrate the effectiveness of the proposed approach.

关键词： SDN security DDoS attacks resource management queueing theory QoS

Saudi cloud infrastructure: a security analysis

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Science China(Information Sciences) 2017年第12期60卷 152-164页

作者： Wahid RAJEH Hai JIN Deqing ZOU Services Computing Technology and System Lab Big Data Technology and System LabCluster and Grid Computing Lab School of Computer Science and TechnologyHuazhong University of Science and Technology School of Computers and Information Technology University of Tabuk

The growing demand and dependence upon cloud services have garnered an increasing level of threat to user data and security. Some of such critical web and cloud platforms have become constant targets for persistent malicious attacks that attempt to breach security protocol and access user data and information in an unauthorized manner. While some of such security compromises may result from insider data and access leaks, a substantial proportion continues to remain attributed to security flaws that may exist within the core web technologies with which such critical infrastructure and services are developed. This paper explores the direct impact and significance of security in the Software Development Life Cycle(SDLC) through a case study that covers some 70 public domain web and cloud platforms within Saudi Arabia. Additionally, the major sources of security vulnerabilities within the target platforms as well as the major factors that drive and influence them are presented and discussed through experimental evaluation. The paper reports some of the core sources of security flaws within such critical infrastructure by implementation with automated security auditing and manual static code analysis. The work also proposes some effective approaches, both automated and manual, through which security can be ensured through-out the SDLC and safeguard user data integrity within the cloud.

关键词： cloud security vulnerability detection web security Saudi infrastructure cloud service

Theory and methodology of research on cloud security

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Science China(Information Sciences) 2016年第5期59卷 15-17页

作者： Hai JIN Weiqi DAI Deqing ZOU Services Computing Technology and System Lab Big Data Technology and System Lab Cluster and Grid Computing Lab School of Computer Science and Technology Huazhong University of Science and Technology

Cloud computing is a model for enabling ubiquitous,convenient,on-demand access to a shared pool of configurable computing resources.According to Gartner’s survey,cloud computing has been at the head of a list of the top ten IT strategic technologies for some time.Cloud computing is currently undergoing vigorous development and promotion by many leading Chinese and foreign enterprises,and it has become the basis for a new

关键词： TPM Theory and methodology of research on cloud security

Ethereum smart contract security research:survey and future research opportunities

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Frontiers of Computer Science 2021年第2期15卷 143-160页

作者： Zeli WANG Hai JIN Weiqi DAI Kim-Kwang Raymond CHOO Deqing ZOU National Engineering Research Center for Big Data Technology and System Services Computing Technology and System LabClusters and Grid Computing LabHubei Engineering Research Center on Big Data SecurityWuhan430074China School of Computer Science and Technology Huazhong University of Science and TechnologyWuhan430074China School of Cyber Science and Engineering Huazhong University of Science and TechnologyWuhan430074China Shenzhen Huazhong University of Science and Technology Research Institute Shenzhen518057China Department of Information Systems and Cyber Security University of Texas at San AntonioSan AntonioTX78249-0631USA

Blockchain has recently emerged as a research trend,with potential applications in a broad range of industries and context.One particular successful Blockchain technology is smart contract,which is widely used in commercial settings(e.g.,high value financial transactions).This,however,has security implications due to the potential to financially benefit from a security incident(e.g.,identification and exploitation of a vulnerability in the smart contract or its implementation).Among,Ethereum is the most active and arresting.Hence,in this paper,we systematically review existing research efforts on Ethereum smart contract security,published between 2015 and 2019.Specifically,we focus on how smart contracts can be maliciously exploited and targeted,such as security issues of contract program model,vulnerabilities in the program and safety consideration introduced by program execution environment.We also identify potential research opportunities and future research agenda.

关键词： smart contract security blockchain vulnerability unreliable data

Fine-grained and heterogeneous proxy re-encryption for secure cloud storage

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Chinese Science Bulletin 2014年第32期59卷 4201-4209页

作者： Peng Xu Hongwu Chen Deqing ZOU Hai Jin Services Computing Technology and System Laboratory Cluster and Grid Computing Laboratory School of Computer Science and Technology Huazhong University of Science and Technology

Cloud is an emerging computing paradigm.It has drawn extensive attention from both academia and industry.But its security issues have been considered as a critical obstacle in its rapid development.When data owners store their data as plaintext in cloud,they lose the security of their cloud data due to the arbitrary accessibility,specially accessed by the un-trusted cloud.In order to protect the confidentiality of data owners’cloud data,a promising idea is to encrypt data by data owners before storing them in cloud.However,the straightforward employment of the traditional encryption algorithms can not solve the problem well,since it is hard for data owners to manage their private keys,if they want to securely share their cloud data with others in a fine-grained manner.In this paper,we propose a fine-grained and heterogeneous proxy re-encryption(FHPRE)system to protect the confidentiality of data owners’cloud data.By applying the FH-PRE system in cloud,data owners’cloud data can be securely stored in cloud and shared in a fine-grained manner.Moreover,the heterogeneity support makes our FH-PRE system more efficient than the previous work.Additionally,it provides the secure data sharing between two heterogeneous cloud systems,which are equipped with different cryptographic primitives.

关键词：安全问题数据存储加密算法细粒度异构代理计算模式数据共享

System Recovery-Aware Virus Propagation Model and Its Steady-State Analysis

在线全文

学校读者我要写书评

暂无评论

China Communications 2016年第5期13卷 151-161页

作者： Lin Sun Cai Fu Ming Fu Deliang Xu Lansheng Han Deqing ZOU School of Computer Huazhong University of Science and Technology

Network structures and human behaviors are considered as two important factors in virus defense currently. However, due to ignorance of network security, normal users usually take simple activities, such as reinstalling computer system, or using the computer recovery system to clear virus. How system recovery influences virus spreading is not taken into consideration currently. In this paper, a new virus propagation model considering the system recovery is proposed first, and then in its steady-state analysis, the virus propagation steady time and steady states are deduced. Experiment results show that models considering system recovery can effectively restrain virus propagation. Furthermore, algorithm with system recovery in BA scale-free network is proposed. Simulation result turns out that target immunization strategy with system recovery works better than traditional ones in BA network.

关键词：病毒传播模型电脑系统稳态分析感知网络结构稳定状态病毒防御人类行为

在线全文

学校读者我要写书评

暂无评论

进化内核模糊测试研究综述

网络与信息安全学报 2024年第1期10卷 1-21页

作者：侍言羌卫中邹德清金海大数据技术与系统国家地方联合工程研究中心服务计算技术与系统教育部重点实验室湖北武汉430074 分布式系统安全湖北省重点实验室湖北武汉430074 华中科技大学网络空间安全学院湖北武汉430074 华中科技大学计算机科学与技术学院湖北武汉430074

模糊测试是一种通过生成随机、异常或无效的测试样例来检测软件或系统中潜在漏洞和错误的技术方法。内核作为一种高度复杂的软件系统,由众多互相关联的模块、子系统和驱动程序所构成,相比用户态应用程序,将模糊测试应用于内核面临着代... 详细信息

模糊测试是一种通过生成随机、异常或无效的测试样例来检测软件或系统中潜在漏洞和错误的技术方法。内核作为一种高度复杂的软件系统,由众多互相关联的模块、子系统和驱动程序所构成,相比用户态应用程序,将模糊测试应用于内核面临着代码庞大、接口复杂、运行时不确定等具有挑战性的问题。传统的模糊测试方法生成的输入只能简单地满足接口规范和显式调用依赖,难以深入探索内核。进化内核模糊测试借助于启发式的进化策略,在反馈机制的引导下动态地调整测试样例的生成和选择,从而迭代式地生成质量更高的测试用例。对现有的进化内核模糊测试工作开展研究,阐述了进化内核模糊测试的概念并总结了进化内核模糊测试的通用框架,根据反馈机制类型对进化内核模糊测试工作进行分类和对比,从反馈机制在运行时信息的收集、分析和利用等方面剖析反馈机制引导进化的原理,对进化内核模糊测试的发展方向进行展望。

关键词：内核模糊测试进化反馈

A Protective Mechanism for the Access Control System in the Virtual Domain

在线全文

学校读者我要写书评

暂无评论

China Communications 2016年第11期13卷 129-142页

作者： Jinan Shen Deqing ZOU Hai Jin Kai Yang Bin Yuan Weiming Li Services Computing Technology and System Laboratory Cluster and Grid Computing LaboratorySchool of Computing Science and TechnologyHuazhong University of Science and Technology School of Information Engineering Hubei University for Nationalities

In traditional framework,mandatory access control(MAC) system and malicious software are run in kernel mode. Malicious software can stop MAC systems to be started and make it do invalid. This problem cannot be solved under the traditional framework if the operating system(OS) is comprised since malwares are running in ring 0 level. In this paper,we propose a novel way to use hypervisors to protect kernel integrity and the access control system in commodity operating systems. We separate the access control system into three parts: policy management(PM),security server(SS) and policy enforcement(PE). Policy management and the security server reside in the security domain to protect them against malware and the isolation feather of the hypervisor can protect them from attacks. We add an access vector cache(AVC) between SS and PE in the guest OS,in order to speed up communication between the guest OS and the security domain. The policy enforcement module is retained in the guest OS for performance. The security of AVC and PE can be ensured by using a memory protection mechanism. The goal of protecting the OS kernel is to ensure the security of the execution path. We implementthe system by a modified Xen hypervisor. The result shows that we can secure the security of the access control system in the guest OS with no overhead compared with modules in the latter. Our system offers a centralized security policy for virtual domains in virtual machine environments.Keywords: hypervisor; virtualization; memo-

关键词：访问控制系统内存保护机制拟域操作系统内核系统管理程序安全服务器强制访问控制恶意软件

在线全文

学校读者我要写书评

暂无评论

匍枝马尾藻中砷的脱除工艺研究

饲料工业 2024年第12期45卷 128-133页

作者：高秀菊朱军黄惠琴李德卿邹潇潇顾志峰吴晓鹏鲍时翔海南大学海洋生物与水产学院海南海口570208 中国热带农业科学院热带生物技术研究所海南热带农业资源研究院海南省热带农业资源保护与利用重点实验室海南海口571101 中国热带农业科学院分析测试中心海南海口571101

研究以匍枝马尾藻为原材料,借助电感耦合等离子体质谱技术(ICP-MS)分析了其中总砷含量,并评估了藻体粒径大小、脱除剂、料液比、脱除温度和时间等因素对总砷脱除效果的影响。在此基础上,通过正交优化试验,得到脱砷的最佳工艺参数为:藻... 详细信息

研究以匍枝马尾藻为原材料,借助电感耦合等离子体质谱技术(ICP-MS)分析了其中总砷含量,并评估了藻体粒径大小、脱除剂、料液比、脱除温度和时间等因素对总砷脱除效果的影响。在此基础上,通过正交优化试验,得到脱砷的最佳工艺参数为:藻粉粒径0.1 cm,脱除剂为水,料液比1∶40(g/mL),脱除时间3 h,脱除温度45℃,匍枝马尾藻中总砷的脱除率为85.42%。此工艺简单易操作,能够脱除马尾藻中大部分砷,为降低海藻中有害元素砷提供了有效途径。

关键词：匍枝马尾藻总砷正交试验最佳工艺脱除率