检索结果-南通市图书馆

Identifying malicious traffic under concept drift based on intraclass consistency enhanced variational autoencoder

Science China(Information Sciences) 2024年第8期67卷 238-252页

作者： Xiang LUO Chang LIU Gaopeng GOU Gang XIONG Zhen LI binxing fang Institute of Information Engineering Chinese Academy of Sciences School of Cyber Security University of Chinese Academy of Sciences School of Computer Science and Technology Harbin Institute of Technology (Shenzhen)

Accurate identification of malicious traffic is crucial for implementing effective defense countermeasures and has led to extensive research efforts. However, the continuously evolving techniques employed by adversaries have introduced the issues of concept drift, which significantly affects the performance of existing methods. To tackle this challenge, some researchers have focused on improving the separability of malicious traffic representation and designing drift detectors to reduce the number of false ***, these methods often overlook the importance of enhancing the generalization and intraclass consistency in the representation. Additionally, the detectors are not sufficiently sensitive to the variations among different malicious traffic classes, which results in poor performance and limited robustness. In this paper, we propose intraclass consistency enhanced variational autoencoder with Class-Perception detector(ICE-CP) to identify malicious traffic under concept drift. It comprises two key modules during training:intraclass consistency enhanced(ICE) representation learning and Class-Perception(CP) detector construction. In the first module, we employ a variational autoencoder(VAE) in conjunction with Kullback-Leibler(KL)-divergence and cross-entropy loss to model the distribution of each input malicious traffic flow. This approach simultaneously enhances the generalization, interclass consistency, and intraclass differences in the learned representation. Consequently, we obtain a compact representation and a trained classifier for nondrifting malicious traffic. In the second module, we design the CP detector, which generates a centroid and threshold for each malicious traffic class separately based on the learned representation, depicting the boundaries between drifting and non-drifting malicious traffic. During testing, we utilize the trained classifier to predict malicious traffic classes for the testing samples. Then, we use the CP det

关键词： concept drift malicious traffic identification variational autoencoder intrusion detection cyberspace security

来源：

同方期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

RPKI去中心化安全增强技术综述

引用

通信学报 2024年第7期45卷 196-205页

作者：秦超逸张宇方滨兴哈尔滨工业大学网络空间安全学院黑龙江哈尔滨150001 鹏城实验室广东深圳518055 广州大学网络空间先进技术研究院广东广州510006

资源公钥基础设施(RPKI)搭建了中心层级化的IP地址资源认证基础设施。在增强互联网域际路由系统安全的同时,RPKI也将中心性引入路由系统。根据证书认证中心职能,提出RPKI体系中的认证中心、操作中心和发布中心,并从3个中心对RPKI去中心... 详细信息

资源公钥基础设施(RPKI)搭建了中心层级化的IP地址资源认证基础设施。在增强互联网域际路由系统安全的同时,RPKI也将中心性引入路由系统。根据证书认证中心职能,提出RPKI体系中的认证中心、操作中心和发布中心,并从3个中心对RPKI去中心化安全增强技术综述。首先,从认证、操作和发布角度细化RPKI中心化风险。其次,从3个风险角度分类RPKI去中心化安全增强技术的技术思路和解决措施。再次,从安全性、可扩展性和增量部署分析比较相关技术。最后,总结存在的问题并展望未来的研究方向。

关键词：边界网关协议资源公钥基础设施域间路由安全区块链去中心化

来源：

维普期刊数据库

同方期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

面向社交网络的异常传播研究综述

引用

通信学报 2024年第5期45卷 191-213页

作者：卢昆张嘉宇张宏莉方滨兴哈尔滨工业大学网络空间安全学院黑龙江哈尔滨150001 广州大学网络空间先进技术研究院广东广州510006

异常传播是当今在线社交网络中频繁出现的一种非传统的信息传播模式。为了完整地认知社交网络中异常传播的整体过程,将异常传播生命周期系统归纳为潜伏期、扩散期、高潮期和衰退期4个阶段。针对异常传播在不同阶段所存在的科学问题,从... 详细信息

异常传播是当今在线社交网络中频繁出现的一种非传统的信息传播模式。为了完整地认知社交网络中异常传播的整体过程,将异常传播生命周期系统归纳为潜伏期、扩散期、高潮期和衰退期4个阶段。针对异常传播在不同阶段所存在的科学问题,从微观和宏观视角分别定义和划分了异常信息、异常用户以及异常传播、传播抑制4个当前热门的研究领域,详细综述了当前4个研究领域下的主要研究任务以及相关研究进展,并分析了现有方法存在的问题,对社交网络异常传播领域的未来研究方向进行了展望,为后续研究提供便利。

关键词：异常传播在线社交网络异常信息传播抑制

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

基于联盟式区块链的域名系统根区管理体系

引用

信息安全研究 2024年第7期10卷 602-615页

作者：张宇冯禹铭张伟哲方滨兴哈尔滨工业大学网络空间安全学院哈尔滨150001 广州大学网络空间先进技术研究院广州510006 鹏城实验室新型网络研究部广东深圳518055 哈尔滨工业大学(深圳)计算机科学与技术学院广东深圳518055

当前互联网域名系统的中心化根体系伴随着长期的担忧:一方面担忧国家代码顶级域可能由于根权威职能被破坏而失控;另一方面担忧去中心化的根替代方案会导致域名空间分裂.上述担忧的根源在于当前和替代的根区管理在自治化和透明化上不足,... 详细信息

当前互联网域名系统的中心化根体系伴随着长期的担忧:一方面担忧国家代码顶级域可能由于根权威职能被破坏而失控;另一方面担忧去中心化的根替代方案会导致域名空间分裂.上述担忧的根源在于当前和替代的根区管理在自治化和透明化上不足,导致对当前的根权威或替代方案的不信任.为解决上述问题,提出一种新的域名系统根区管理体系——根共识链,通过增强互信缓解各方担忧.根共识链中多个自治的注册局共同参与根区管理,每个注册局下辖国家代码顶级域和根服务器运营者,共同构建一个基于联盟式区块链的根区管理体系.根共识链在维护统一域名空间和唯一全球根权威的同时,通过根共识链管理者们建立根共同体提高自治性,通过区块链记录和执行各方协议以及根区操作提高透明性.基于现网科研测试床的实验结果表明,根共识链能够有效应对上述担忧,具有良好的可行性与实用性.

关键词：域名系统根服务器根区管理联盟式区块链注册局

来源：

维普期刊数据库

同方期刊数据库博看期刊评论

在线全文

学校读者我要写书评

暂无评论

VMScan: an out-of-VM malware scanner

引用

The Journal of China Universities of Posts and Telecommunications 2020年第4期27卷 59-68页

作者： Lin Jie Liu Chuanyi fang binxing School of Computer Science and Technology Harbin Institute of TechnologyShenzhenShenzhen 518055China Key Laboratory of Trustworthy Distributed Computing and Service Beijing University of Posts and TelecommunicationsBeijing 100876China Department of Information and Electronic Engineering Chinese Academy of EngineeringBeijing 100088China

The harm caused by malware in cloud computing environment is more and more serious. Traditional anti-virus software is in danger of being attacked when it is deployed in virtual machine on a large scale, and it tends not to be accepted by tenants in terms of performance. In this paper, a method of scanning malicious programs outside the virtual machine is proposed, and the prototype is implemented. This method transforms the memory of the virtual machine to the host machine so that the latter can access it. The user space and kernel space of virtual machine memory are analyzed via semantics, and suspicious processes are scanned by signature database. Experimental results show that malicious programs can be effectively scanned outside the virtual machine, and the performance impact on the virtual machine is low, meeting the needs of tenants.

关键词： security virtualization cloud malware virus detection signature scanning

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Structure-independent disaster recovery:Concept,architecture and implementations

引用

Science in China(Series F) 2009年第5期52卷 813-823页

作者： ZHENG WeiMin fang binxing Department of Computer Science and Technology Tsinghua University Beijing 100084 China Beijing University of Posts and Telecommunications Beijing 100876 China

Disaster recovery （DR） techniques ensure the data safety and service continuity under different natural and human-made disasters by constructing a high reliable storage system. Traditional disaster recovery methods are structure-dependent. It is hard to share the DR resources between different DR systems, which made it expensive. We present a structure-independent disaster recovery theory and its implementation methods in this paper. By backup the whole system but not just the data, the goal of device and application-independent disaster recovery has been achieved. We further present a parallel recovery model and an on demand data retrieval method based on the theory. Some implementation details of prototype recovery system are also discussed. With the methods independent from specific devices or applications, the cost of disaster recovery infrastructure can be essentially reduced by resource sharing. Experiments show that the recovery time has also been greatly shortened with little service degradation.

关键词： disaster recovery parallel virtualization

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Lightweight Mutual Authentication Scheme for Protecting Identity in Insecure Environment

引用

China Communications 2018年第6期15卷 158-168页

作者： Xu Wu Jin Xu binxing fang School of Cyberspace Security Beijing University of Posts and Telecommunications Key Laboratory of Trustworthy Distributed Computing and Service (BUPT) Ministry of Education

Many improved authentication solutions were put forward, on purpose of authenticating more quickly and ***, neither the overuse of hash function,or additional symmetric encryption, can truly increase the overall security. Instead,extra computation cost degraded the *** were still vulnerable to a variety of threats, such as smart card loss attack and impersonation attack, due to hidden loopholes and flaws. Even worse, user's identity can be parsed in insecure environment, even became traceable. Aiming to protect identity, a lightweight mutual authentication scheme is proposed. Redundant operations are removed,which make the verification process more explicit. It gains better performance with average cost compared to other similar *** shows the proposed scheme can resist common attacks and achieve user *** security is further verified by using the widely accepted Automated Validation of Internet Security Protocols and Applications(AVISPA) tool.

关键词： identify authentication light-weight authentication session key agreement user anonymity

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Threat-Based Declassification and Endorsement for Mobile Computing

引用

Chinese Journal of Electronics 2019年第5期28卷 1041-1052页

作者： YIN Lihua GUO Yunchuan ZHANG Huibing HUANG Wenting fang binxing Cyberspace Institute of Advanced Technology Guangzhou University The State Key Laboratory of Information Security Institute of Information Engineering CAS Guangxi Key Lab of Trusted Software Guilin University of Electronic Technology The National Computer Network Emergency Response Technical Team/Coordination Center of China

Declassification and endorsement can efficiently improve the usability of mobile ***, both declassify and endorse operations in practice are often ad-hoc and nondeterministic, thus, being insecure. From a new perspective of threat assessments,we propose the Threat-based typed security π-calculus(πTBTS) to model declassification and endorsement in mobile computing. Intuitively, when relaxing confidentiality policies and/or integrity policies, we respectively assess threats brought by performing these two relaxes. If these threats are acceptable, the declassification and/or endorsement operations are permitted; Otherwise, they are denied. The proposed assessments have explicit security conditions, results and less open parameters,so our approach solves the problem of the ad-hoc and nondeterministic semantics and builds a bridge between threat assessments and declassification/endorsement.

关键词： Declassification Endorsement Threat assessment Mobile computing π-Calculus

来源：

同方期刊数据库评论

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Theories of Social Media： Philosophical Foundations

引用

Engineering 2018年第1期4卷 94-102页

作者： Jiayin Qi Emmanuel Monod binxing fang Shichang Deng School of Management Shanghai University of International Business and Economics Shanghai 201620 China Institute of Artificial Intelligence and Change Management Shanghai University of International Business and Economics Shanghai 200336 China Institute of Cyberspace Advanced Technology Guangzhou University Guangzhou 510006 China China Electronics Corporation Beijing 100082 China Key Laboratory of Trustworthy Distributed Computing and Service of Ministry of Education Belting University of Posts and Telecommunications Beijing 100876 China

Although many different views of social media coexist in the field of information systems （IS）, such the- ories are usually not introduced in a consistent framework based on philosophical foundations, This paper introduces the dimensions of lifeworld and consideration of others, The concept of lifeworld includes Descartes＇ rationality and Heidegger＇s historicity, and consideration of others is based on instru- mentalism and Heidegger＇s ＂being-with,＂ These philosophical foundations elaborate a framework where different archetypal theories applied to social media may he compared： Goffman＇s presentation of sell Bourdieu＇s social capital, Sartre＇s existential project, and Heidegger＇s ＂shared-world,＂ While Goffman has become a frequent reference in social media, the three other references are innovative in IS research, The concepts of these four theories of social media are compared with empirical findings in IS literature, While some of these concepts match the empirical findings, some other concepts have not yet been inves- tigated in the use of social media, suggesting future research directions,

关键词： Social media Lifeworld Consideration of others Rationality Historicity lnstrumentalism Being-with Presentation of self

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Understanding information interactions in diffusion： an evolutionary game-theoretic perspective

引用

Frontiers of Computer Science 2016年第3期10卷 518-531页

作者： Yuan SU Xi ZHANG Lixin LIU Shouyou SONG binxing fang Key Laboratory of Trustworthy Distributed Computing and Service Ministry of EducationSchool of Computer Science Beijing University of Posts and Telecommunications Beijing 100876 China

Social networks are fundamental media for dif- fusion of information and contagions appear at some node of the network and get propagated over the edges. Prior re- searches mainly focus on each contagion spreading indepen- dently, regardless of multiple contagions＇ interactions as they propagate at the same time. In the real world, simultaneous news and events usually have to compete for user＇s attention to get propagated. In some other cases, they can cooperate with each other and achieve more influences. In this paper, an evolutionary game theoretic framework is proposed to model the interactions among multiple con- tagions. The basic idea is that different contagions in social networks are similar to the multiple organisms in a popula- tion, and the diffusion process is as organisms interact and then evolve from one state to another. This framework statis- tically learns the payoffs as contagions interacting with each other and builds the payoff matrix. Since learning payoffs for all pairs of contagions IS almost impossible （quadratic in the number of contagions）, a contagion clustering method is proposed in order to decrease the number of parameters to fit, which makes our approach efficient and scalable. To ver- ify the proposed framework, we conduct experiments by us- ing real-world information spreading dataset of Digg. Exper- imental results show that the proposed game theoretic frame- work helps to comprehend the information diffusion process better and can predict users＇ forwarding behaviors with more accuracy than the previous studies. The analyses of evolution dynamics of contagions and evolutionarily stable strategy re- veal whether a contagion can be promoted or suppressed by others in the diffusion process.

关键词： social networks information diffusion gametheory evolutionary game evolution dynamics

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

欢迎您,

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案：

请选择收藏分类：

通借通还

欢迎您,

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：