检索结果-南通市图书馆

Computers, Materials & Continua 2020年第9期64卷 1555-1577页

作者： juan R.Bermejo Higuera Javier Bermejo Higuera juan A.Sicilia Montalvo Javier Cubo Villalba juan JoséNombela Pérez Escuela Superior de Ingeniería y Tecnología Universidad Internacional de La RiojaLa Rioja26006Spain

To detect security vulnerabilities in a web application,the security analyst must choose the best performance Security Analysis Static Tool(SAST)in terms of discovering the greatest number of security vulnerabilities as possible.To compare static analysis tools for web applications,an adapted benchmark to the vulnerability categories included in the known standard Open Web Application Security Project(OWASP)Top Ten project is required.The information of the security effectiveness of a commercial static analysis tool is not usually a publicly accessible research and the state of the art on static security tool analyzers shows that the different design and implementation of those tools has different effectiveness rates in terms of security performance.Given the significant cost of commercial tools,this paper studies the performance of seven static tools using a new methodology proposal and a new benchmark designed for vulnerability categories included in the known standard OWASP Top Ten project.Thus,the practitioners will have more precise information to select the best tool using a benchmark adapted to the last versions of OWASP Top Ten project.The results of this work have been obtaining using widely acceptable metrics to classify them according to three different degree of web application criticality.

关键词： Web application benchmark security vulnerability Security Analysis Static Tools assessment methodology false positive false negative precision f-measure

Systematic Approach for Web Protection Runtime Tools’Effectiveness Analysis

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computer Modeling in Engineering & Sciences 2022年第12期133卷 579-599页

作者： Tomás Sureda Riera juan Ramón Bermejo Higuera Javier Bermejo Higuera juan Antonio sicilia montalvo José Javier Martínez Herráiz Computer Science Department University of AlcaláMadrid28801Spain Escuela Superior de Ingeniería y Tecnología Universidad Internacional de La RiojaLogrono26006Spain

Web applications represent one of the principal vehicles by which attackers gain access to an organization’s network or resources.Thus,different approaches to protect web applications have been proposed to date.Of them,the two major approaches are Web Application Firewalls(WAF)and Runtime Application Self Protection(RASP).It is,thus,essential to understand the differences and relative effectiveness of both these approaches for effective decisionmaking regarding the security of web applications.Here we present a comparative study between WAF and RASP simulated settings,with the aim to compare their effectiveness and efficiency against different categories of attacks.For this,we used computation of different metrics and sorted their results using F-Score index.We found that RASP tools scored better than WAF tools.In this study,we also developed a new experimental methodology for the objective evaluation ofweb protection tools since,to the best of our knowledge,nomethod specifically evaluates web protection tools.

关键词： Web Application Firewall(WAF) Runtime Application Self Protection(RASP) F-Score web attacks experimental methodology

Combinatorial Method with Static Analysis for Source Code Security in Web Applications

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computer Modeling in Engineering & Sciences 2021年第11期129卷 541-565页

作者： juan Ramon Bermejo Higuera Javier Bermejo Higuera juan Antonio sicilia montalvo Tomas Sureda Riera Christopher I.Argyros A.Alberto Magrenan Escuela Superior de Ingenierıa y Tecnologıa Universidad Internacional de La RiojaLogronoLa Rioja26006Spain Computer Science Department University of AlcalaMadrid28801Spain Department of Computing and Technology Cameron UniversityLawton73505OklahomaUSA Universidad de la Rioja LogronoLa Rioja26006Spain

Security weaknesses in web applications deployed in cloud architectures can seriously affect its data confidentiality and integrity.The construction of the procedure utilized in the static analysis tools of source code security differs and therefore each tool finds a different number of each weakness type for which it is designed.To utilize the possible synergies different static analysis tools may process,this work uses a new method to combine several source codes aiming to investigate how to increase the performance of security weakness detection while reducing the number of false positives.Specifically,five static analysis tools will be combined with the designed method to study their behavior using an updated benchmark for OWASP Top Ten Security Weaknesses(OWASP TTSW).The method selects specific metrics to rank the tools for different criticality levels of web applications considering different weights in the ratios.The findings show that simply including more tools in a combination is not synonymous with better results;it depends on the specific tools included in the combination due to their different designs and techniques.

关键词： Weakness benchmark security testing analysis comparative methodology tools combination web application

MMALE—A Methodology for Malware Analysis in Linux Environments

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computers, Materials & Continua 2021年第5期67卷 1447-1469页

作者： JoséJavier de Vicente Mohino Javier Bermejo Higuera juan Ramón Bermejo Higuera juan Antonio sicilia montalvo Manuel Sánchez Rubio JoséJavier Martínez Herraiz Escuela Superior de Ingeniería y Tecnología Universidad Internacional de La RiojaLogroño26006La RiojaSpain Departamento de Ciencias de la Computación de la Escuela Politécnica Superior Universidad de Alcaláde HenaresAlcaláde HenaresMadridSpain

In a computer environment,an operating system is prone to malware,and even the Linux operating system is not an exception.In recent years,malware has evolved,and attackers have become more qualified compared to a few years ago.Furthermore,Linux-based systems have become more attractive to cybercriminals because of the increasing use of the Linux operating system in web servers and Internet of Things(IoT)devices.Windows is the most employed OS,so most of the research efforts have been focused on its malware protection rather than on other operating systems.As a result,hundreds of research articles,documents,and methodologies dedicated to malware analysis have been reported.However,there has not been much literature concerning Linux security and protection from malware.To address all these new challenges,it is necessary to develop a methodology that can standardize the required steps to perform the malware analysis in depth.A systematic analysis process makes the difference between good and ordinary malware analyses.Additionally,a deep malware comprehension can yield a faster and much more efficient malware eradication.In order to address all mentioned challenges,this article proposed a methodology for malware analysis in the Linux operating system,which is a traditionally overlooked field compared to the other operating systems.The proposed methodology is tested by a specific Linux malware,and the obtained test results have high effectiveness in malware detection.

关键词： Malware analysis methodology analysis Linux malware IoT malware

Software Project Effort Estimation Based on Multiple Parametric Models Generated Through Data Clustering

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Computer Science & Technology 2007年第3期22卷 371-378页

作者： juan J.Cuadrado Gallego Daniel Rodríguez Miguel Angel sicilia Miguel Garre Rubio Angel García Crespo Department of Computer Science The University of Alcalá AlcaláSpain Department of Computer Science Carlos Ⅲ University.Madrid Spain

Parametric software effort estimation models usually consists of only a single mathematical relationship. With the advent of software repositories containing data from heterogeneous projects, these types of models suffer from poor adjustment and predictive accuracy. One possible way to alleviate this problem is the use of a set of mathematical equations obtained through dividing of the historical project datasets according to different parameters into subdatasets called partitions. In turn, partitions are divided into clusters that serve as a tool for more accurate models. In this paper, we describe the process, tool and results of such approach through a case study using a publicly available repository, ISBSG. Results suggest the adequacy of the technique as an extension of existing single-expression models without making the estimation process much more complex that uses a single estimation model. A tool to support the process is also presented. Keywords software engineering, software measurement, effort estimation, clustering

关键词： software engineering software measurement effort estimation clustering

Use of agents stimulating erythropoiesis in digestive diseases

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

World Journal of Gastroenterology 2009年第37期15卷 4675-4685页

作者： Rosario Moreno López Beatriz sicilia Aladrén Fernando Gomollón García Department of Nephrology San Juan de Dios Hospital Paseo Colón 14 50006 Zaragoza Spain Department of Medicine Universidad de Zaragoza 50009 Zaragoza Spain Department of Medicine (Gastroenterology) Alcaiz Hospital 44600 Alcaiz (Teruel) Spain Department of Gastroenterology Clinical University Hospital "Lozano Blesa" Department of Medicine University of Zaragoza IACS CIBEREHD 50009 Zaragoza Spain

Anemia is the most common complication of inflammatory bowel disease (IBD). Control and inadequate treatment leads to a worse quality of life and increased morbidity and hospitalization. Blood loss, and to a lesser extent, malabsorption of iron are the main causes of iron def iciency in IBD. There is also a variable component of anemia related to chronic inflammation. The anemia of chronic renal failure has been treated for many years with recombinant human erythropoietin (rHuEPO), which significantly improves quality of life and survival. Subsequently, rHuEPO has been used progressively in other conditions that occur with anemia of chronic processes such as cancer, rheumatoid arthritis or IBD, and anemia associated with the treatment of hepatitis C virus. Erythropoietic agents complete the range of available therapeutic options for treatment of anemia associated with IBD, which begins by treating the basis of the inflammatory disease, along with intravenous iron therapy as f irst choice. In cases of resistance to treatment with iron, combined therapy with erythropoietic agents aims to achieve near-normal levels of hemoglobin/hematocrit (11-12 g/dL). New formulations of intravenous iron (iron carboxymaltose) and the new generation of erythropoietic agents (darbepoetin and continuous erythropoietin receptor activator) will allow better dosing with the same eff icacy and safety.

关键词：人红细胞生成素消化系统疾病慢性肾功能衰竭传染性法氏囊病红细胞生成素受体综合治疗类风湿关节炎丙型肝炎病毒

Current role in facial allograft transplantation:what have we learned?

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Plastic and Aesthetic Research 2016年第1期3卷 211-218页

作者： Pedro Infante-Cossio Fernando Barrera-Pulido Tomas Gomez-Cia Domingo sicilia-Castro Alberto Garcia-Perla-Garcia Purificacion Gacto-Sanchez Jose Maria Hernandez-Guisado Araceli Lagares-Borrego Rocio Narros-Gimenez juan-David Gonzalez-Padilla Department of Oral and Maxillofacial Surgery Virgen del Rocio University Hospital41013 SevilleSpain Department of Plastic and Reconstructive Surgery Virgen del Rocio University Hospital41013 SevilleSpain

Face transplant(FT)has evolved enormously in the last 10 years since the successful completion of the first facial transplant.This procedure has become a new reconstructive option for complex facial deformities to restore the anatomy of patients with severely disfigured faces.The authors review the literature and discuss the main surgical,immunological,and ethical aspects as well as the results described in patients undergoing FT.To date there have been more than thirty FT worldwide.The main indication was post-traumatic deformity.In all cases a standard immunosuppression was performed with three drugs,although acute rejection episodes were observed,that could be controlled with conventional immunosuppressive regimen.Overall,functional and aesthetic results have been excellent at short-term and high satisfaction rate exceeded initial expectations,although long-term data are still scarce.Major complications were opportunistic infections.Five deaths that occurred have reopened the ethical debate about the potential complications and concerns of providing informed consent to recipients.Continuous progresses in microsurgical techniques and preoperative planning have promoted the evolution from partial to full FT.All these are on the basis of accurate and careful selection of well-motivated candidates.The next challenge will be getting new immunosuppressive treatment strategies.Although clinical experience has demonstrated the FT viability,it is still considered an experimental procedure in which we have much to learn to define its true role in the current reconstructive surgery and resolve major technical,medical and ethical problems involved.

关键词： Face transplantation composite tissue transplantation facial allograft transplantation facial reconstruction outcomes and complications of face transplantation