检索结果-南通市图书馆

Hybrid Security Assessment Methodology for Web Applications

Computer Modeling in Engineering & Sciences 2021年第1期126卷 89-124页

作者： Roddy A.Correa juan Ramon Bermejo Higuera Javier Bermejo Higuera juan Antonio SiciliaMontalvo Manuel Sanchez Rubio A.Alberto Magrenan Universidad Tecnica Particular de Loja San Cayetano AltoLojaEcuador Escuela Superior de Ingenieria y Tecnologia Universidad Internacional de La RiojaLogrono26006Spain Universidad de la Rioja Logrono26006Spain

This study presents a methodology to evaluate and prevent security vulnerabilities issues for web applications.The analysis process is based on the use of techniques and tools that allow to perform security assessments of white box and black box,to carry out the security validation of a web application in an agile and precise way.The objective of the methodology is to take advantage of the synergies of semi-automatic static and dynamic security analysis tools and manual checks.Each one of the phases contemplated in the methodology is supported by security analysis tools of different degrees of coverage,so that the results generated in one phase are used as feed for the following phases in order to get an optimized global security analysis result.The methodology can be used as part of other more general methodologies that do not cover how to use static and dynamic analysis tools in the implementation and testing phases of a Secure Software Development Life Cycle(SSDLC).A practical application of the methodology to analyze the security of a real web application demonstrates its effectiveness by obtaining a better optimized vulnerability detection result against the true and false positive metrics.Dynamic analysis with manual checking is used to audit the results,24.6 per cent of security vulnerabilities reported by the static analysis has been checked and it allows to study which vulnerabilities can be directly exploited externally.This phase is very important because it permits that each reported vulnerability can be checked by a dynamic second tool to confirm whether a vulnerability is true or false positive and it allows to study which vulnerabilities can be directly exploited externally.Dynamic analysis finds six(6)additional critical vulnerabilities.Access control analysis finds other five(5)important vulnerabilities such as Insufficient Protected Passwords or Weak Password Policy and Excessive Authentication Attacks,two vulnerabilities that permit brute force attacks.

关键词： Web applications security vulnerability weakness security analysis white box black box interactive application security testing static application security testing dynamic application security testing

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Building an interoperable space for smart agriculture

引用

Digital Communications and Networks 2023年第1期9卷 183-193页

作者： Ioanna Roussaki Kevin Doolin antonio Skarmeta George Routis juan antonio Lopez-Morales Ethel Claffey Manuel Mora juan antonio Martinez Institute of Communications and Computer Systems AthensGreece Walton Institute WaterfordIreland Department of Information and Communications Engineering University of MurciaMurciaSpain School of Business Waterford Institute of TechnologyWaterfordIreland R&D Department Odin SolutionsMurciaSpain

The digital transformation in agriculture introduces new challenges in terms of data,knowledge and technology adoption due to critical interoperability issues,and also challenges regarding the identification of the most suitable data sources to be exploited and the information models that must be used.DEMETER(Building an Interoperable,Data-Driven,Innovative and Sustainable European Agri-Food Sector)addresses these challenges by providing an overarching solution that integrates various heterogeneous hardware and software resources(e.g.,devices,networks,platforms)and enables the seamless sharing of data and knowledge throughout the agri-food chain.This paper introduces the main concepts of DEMETER and its reference architecture to address the data sharing and interoperability needs of farmers,which is validated via two rounds of 20 large-scale pilots along the DEMETER lifecycle.This paper elaborates on the two pilots carried out in region of Murcia in Spain,which target the arable crops sector and demonstrate the benefits of the deployed DEMETER reference architecture.

关键词： Smart agriculture Internet of things(IoT) DEMETER Reference architecture Interoperability Agricultural information model(AIM) Pilot validation

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

The first scientific plan of the MosqueCathedral of Cordoba:Graphic and dimensional analysis of an oil painting from 1741

引用

Frontiers of Architectural Research 2023年第4期12卷 587-600页

作者： juan Cantizani-Oliva juan-Francisco Reinoso-Gordo antonio Gamiz-Gordo Electrical and Automatic Engineering Department University of CordobaCordoba 14071Spain Architectural and Engineering Graphic Expression Department University of GranadaGranada 18071Spain Architectural Graphic Expression Department University of SevilleSeville 41012Spain

This research analyzes the earliest located floor plan of the Mosque-Cathedral of Cordoba,an anonymous oil painting in 1741,which has not been studied so far.The objective is to know the dimensional accuracy of the most relevant architectural forms drawn,considering the elements referenced in their legend and the graphic symbols used,to assess their documentary interest.It has also been compared with two important plans of the MosqueCathedral drawn in 1767 and 1868.The first task was a photogrammetric survey of the oil painting has been carried out.Subsequently,some data has been measured in the monument using a 3D scanner.The orthophoto of the oil painting has been overlapped to the digital model to verify its metric accuracy in a selection of points.For the first time,the legend and labels included in the oil painting have been transcribed.This precise graphic document contains reliable abundant data for future research about the transformations and restorations of a monument that is part of the UNESCO World Heritage List.The oil painting dating from 1741 can be considered as the first scientific plan of the Mosque-Cathedral of Cordoba,and as an outstanding architectural survey of eighteenth-century Europe.

关键词： Mosque-Cathedral Co´rdoba Historical plans Photogrammetry 3D laser scanner

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Solitary Bodies and Emotions:Contemporary Plastic Art in the Context of Individualization Society

引用

Fudan Journal of the Humanities and Social Sciences 2022年第3期15卷 367-388页

作者： juan antonio Roche Cárcel Department of Sociology I University of AlicanteAlicanteSpain

This article follows the trail of Weber’s comprehensive sociology and uses the hermeneutical method as well as the iconological applied to 11 contemporary works of plastic art which can be described as significant and representative of contemporary art.It pursues two specific objectives:(a)analyzing the construction of loneliness both in contemporary plastic art and within the society of individuality and separateness,through human bodies and emotions;and(b)attesting how this theme has evolved in artistic practices from simple to reflexive modernity.Artists have indeed placed solitary men and women in the geographical and symbolic center of their compositions,additionally providing a contrast with a spatial and temporal environment which marginalizes them.We conclude that,for contemporary art,subjects are neither fully fledged individuals nor citizens in their own right and that they do not voluntarily live in an individualized society,but rather in one defined by separateness.

关键词： Sociology of art Sociology of bodies and emotions Individualization society Liquid society Separateness society Loneliness

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

地震光和地震地面加速度之间的时间差相关性

引用

Applied Geophysics 2021年第1期18卷 9-16,128页

作者： juan antonio Lira Maurizio Mulas Facultad de Ciencias Físicas Universidad Nacional Mayor de San MarcosLima 1Peru Sección Física Departamento Académico de CienciasPontificia Universidad Católica del PerúLima 32Peru Escuela Superior Politécnica del Litoral ESPOLFacultad de Ingeniería en Ciencias de la TierraCampus Gustavo Galindo Km 30.5 Vía PerimetralP.O.Box 09-01-5863

虽然自古以来就知道地震光,但直到60年代,才拍摄下第一张地震光照片。在2007年在秘鲁发生地震期间,录下了第一部地震光录像。同样,在2016年瓜多尔地震和2017年墨西哥地震期间,记录了两部地震光电影。这些电影记录,无论是客观还是信息内... 详细信息

虽然自古以来就知道地震光,但直到60年代,才拍摄下第一张地震光照片。在2007年在秘鲁发生地震期间,录下了第一部地震光录像。同样,在2016年瓜多尔地震和2017年墨西哥地震期间,记录了两部地震光电影。这些电影记录,无论是客观还是信息内容,都有助于研究地震光。已经提出了几种解释地震光的因果机制:压电性、氡放射、流体扩散、摩擦汽化、正极洞穴和偶极电流等等。在这项工作中,我们发现了地震光和地震地面加速度之间的时间差相关性,并使用地震数据和地震光的胶片记录来解释其起源。在讨论部分,建议岩石破裂在某种程度上表现为通过感应产生静电的地震光。我们建立了一个新的感应模型,可以用于解释EQL的形成,即使地壳具有大电阻率层。该模型还解释了地震光的形成,而不需要地球表面或大气中的特殊条件。更好地理解地震光的生成过程可以提高我们对地震活动的理解,并有助于预测地震。

关键词：时差相关性地震光地震地面加速度岩石破裂

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Systematic Approach for Web Protection Runtime Tools’Effectiveness Analysis

引用

Computer Modeling in Engineering & Sciences 2022年第12期133卷 579-599页

作者： Tomás Sureda Riera juan Ramón Bermejo Higuera Javier Bermejo Higuera juan antonio Sicilia Montalvo José Javier Martínez Herráiz Computer Science Department University of AlcaláMadrid28801Spain Escuela Superior de Ingeniería y Tecnología Universidad Internacional de La RiojaLogrono26006Spain

Web applications represent one of the principal vehicles by which attackers gain access to an organization’s network or resources.Thus,different approaches to protect web applications have been proposed to date.Of them,the two major approaches are Web Application Firewalls(WAF)and Runtime Application Self Protection(RASP).It is,thus,essential to understand the differences and relative effectiveness of both these approaches for effective decisionmaking regarding the security of web applications.Here we present a comparative study between WAF and RASP simulated settings,with the aim to compare their effectiveness and efficiency against different categories of attacks.For this,we used computation of different metrics and sorted their results using F-Score index.We found that RASP tools scored better than WAF tools.In this study,we also developed a new experimental methodology for the objective evaluation ofweb protection tools since,to the best of our knowledge,nomethod specifically evaluates web protection tools.

关键词： Web Application Firewall(WAF) Runtime Application Self Protection(RASP) F-Score web attacks experimental methodology

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Avian malaria,haematocrit,and body condition in invasive wetland passerines settled in southwestern Spain

引用

Avian Research 2023年第1期14卷 99-107页

作者： Jaime Muriel Luz Garcia-Longoria Sergio Magallanes juan antonio Ortiz Alfonso Marzal Instituto de Investigación en Recursos Cinegéticos(IREC) CSIC-UCLM-JCCMRonda de Toledo 1213005Ciudad RealSpain Universidad de Extremadura Facultad de BiologíaDepartamento de AnatomíaBiología Celular y Zoología Avenida de Elvas s/n06006BadajozSpain Estación Biológica de Donana(EBD-CSIC) Departamento de Ecología de los HumedalesAvda.Américo Vespucio 2641092SevillaSpain Hirundo Bird Ringing Group BadajozSpain Grupo de Investigaciones en Fauna Silvestre Universidad Nacional de San MartínJr.Maynas177722021TarapotoPeru

Avian malaria and related haemosporidian parasites can negatively impact fitness in many songbirds.Research on the malaria infection and its physiological costs on their avian hosts is heavily skewed toward native passerines,with exotic species underrepresented.However,introduced species may carry on and spread new pathogens to native species,and play a role on parasite transmission cycle in invaded bird communities as pathogen reservoir.Here,we molecularly assess the prevalence and diversity of haemosporidian parasites in three introduced wetland passerines(the Red Avadavat Amandava amandava,the Yellow-crowned Bishop Euplectes afer,and the Common Waxbill Estrilda astrild)captured during the same season in southwestern Spain.We also explored the relation between parasite infection,body condition,haematocrit,and uropygial gland volume.We detected an overall parasite prevalence of 3.55%,where Common Waxbills showed higher prevalence(6.94%)than Red Avadavats(1.51%).None Yellow-crowned Bishops were infected with haemosporidians.Almost 60%of infections were caused by Leucocytozoon,and about 40%by Plasmodium.We identified four unique lineages of Plasmodium and three of Leucocytozoon.Moreover,91%of the identified host-parasite interactions represented new host records for these haemosporidian parasites.Parasite infection was not related to body condition,haematocrit,and uropygial gland volume of the wetland passerines.Haematocrit values varied seasonally among bird species.Additionally,haematocrit was positively related to body condition in the Yellow-crowned Bishops,but not in the other species.Red Avadavats had higher haematocrit levels than Yellow-crowned Bishops,whereas Common Waxbills showed the lower haematocrit values.The uropygial gland volume was positively correlated with body condition in all bird species.Common Waxbills showed higher uropygial gland volumes related to their body size than birds from other two species.These outcomes highlight the importance of exotic invasive species in the transmission dynam

关键词： Avian malaria Exotic species Introduced birds Leucocytozoon Plasmodium Uropygial gland

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

‘All Solid Things Vanish Into Thin Air.’The Space in Modern andLate Modern Plastic Art

引用

Fudan Journal of the Humanities and Social Sciences 2022年第1期15卷 117-142页

作者： juan antonio.Roche Carcel Angel Enrique Carretero Pasin Departamento de Sociologia I Universidad deAlicanteCarreterade San Vicentes/n03690 San Vicente del Raspeig-AlicanteSpain Departamento de Sociologia University of Santiago de Compostela(Spain) Santiago de CompostelaSpain

The article follows Max Weber's Comprehensive Sociology and uses the hermeneutic and iconological analysis sociological methods applied to plastic works(painting and sculpture),significant and representative of modern and late modern art.Starting from these theoretical and methodological bases,it pursues three specific objectives:to analyze the construction of space in plastic art,to verify how this theme has evolved in artistic practices from the first modernity to the second and to verify the way in which the complementary visual language the conceptual of contemporary sociological theory.In this regard,the analysis and interpretation of the eleven selected works reveals three important consequences of the modern influence on space,gradually emptied of meaning and replaced by non-places:its conversion into merchandise,its loss of solidity and stability and the confusion that occurs in it between reality and its representation.Consequently,the implicit content converges with the essential postulates of the sociologists who have approached the subject of space,although it goes further because the foray into the iconographic hermeneutics of these works puts an image to the conceptual theoretical discourses of the sociologists,inaway that visual language complements and enriches,with more emotional and sensitive nuances Therefore our discipline begins to overcome a traditional deficit,in that it moves from the essential rationality that structures its origin and turns towards a greater coupling of the emotional and sensitive social plane.

关键词： Sociology of culture Evanescent space Plastic art Iconological analysis Social hermeneutic

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

拉丁美洲大冒险

引用

空中英语教室（高级版．彭蒙惠英语） 2023年第6期 28-30,47,48页

作者： juan antonio(Oso)Oseguera 不详

这六种极限旅游将会让你肾上腺素飙升在旅行中获得肾上腺素粼升体验的渴望在不断增长,尤其是那些报名参加冒险旅游的年轻人。以下这六个位于墨西哥、哥伦比亚和秘鲁的极限旅游项目,绝对能够让你心跳加速。乘动力滑翔伞飞越利马秘鲁首都... 详细信息

这六种极限旅游将会让你肾上腺素飙升在旅行中获得肾上腺素粼升体验的渴望在不断增长,尤其是那些报名参加冒险旅游的年轻人。以下这六个位于墨西哥、哥伦比亚和秘鲁的极限旅游项目,绝对能够让你心跳加速。乘动力滑翔伞飞越利马秘鲁首都的景色可以在日落时于高处欣赏。这个冒险游历首先会在圣米格尔区的科斯塔维德与教练会面,起飞前他会提供一系列的建议与指导。

关键词：肾上腺素科斯塔拉丁美洲哥伦比亚旅游秘鲁墨西哥

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Combinatorial Method with Static Analysis for Source Code Security in Web Applications

引用

Computer Modeling in Engineering & Sciences 2021年第11期129卷 541-565页

作者： juan Ramon Bermejo Higuera Javier Bermejo Higuera juan antonio Sicilia Montalvo Tomas Sureda Riera Christopher I.Argyros A.Alberto Magrenan Escuela Superior de Ingenierıa y Tecnologıa Universidad Internacional de La RiojaLogronoLa Rioja26006Spain Computer Science Department University of AlcalaMadrid28801Spain Department of Computing and Technology Cameron UniversityLawton73505OklahomaUSA Universidad de la Rioja LogronoLa Rioja26006Spain

Security weaknesses in web applications deployed in cloud architectures can seriously affect its data confidentiality and integrity.The construction of the procedure utilized in the static analysis tools of source code security differs and therefore each tool finds a different number of each weakness type for which it is designed.To utilize the possible synergies different static analysis tools may process,this work uses a new method to combine several source codes aiming to investigate how to increase the performance of security weakness detection while reducing the number of false positives.Specifically,five static analysis tools will be combined with the designed method to study their behavior using an updated benchmark for OWASP Top Ten Security Weaknesses(OWASP TTSW).The method selects specific metrics to rank the tools for different criticality levels of web applications considering different weights in the ratios.The findings show that simply including more tools in a combination is not synonymous with better results;it depends on the specific tools included in the combination due to their different designs and techniques.

关键词： Weakness benchmark security testing analysis comparative methodology tools combination web application

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

欢迎您,

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案：

请选择收藏分类：

通借通还

欢迎您,

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：