检索结果-南通市图书馆

Systematic Security Guideline Framework through Intelligently Automated Vulnerability Analysis

computers, Materials & Continua 2024年第3期78卷 3867-3889页

作者： Dahyeon Kim Namgi Kim Junho Ahn computer Information Technology Korea National University of TransportationChungju27469Korea department of AI computer science and engineering Kyonggi UniversitySuwon16227Korea

This research aims to propose a practical framework designed for the automatic analysis of a product’s comprehensive functionality and security vulnerabilities,generating applicable guidelines based on real-world *** existing analysis of software security vulnerabilities often focuses on specific features or *** partial and arbitrary analysis of the security vulnerabilities makes it challenging to comprehend the overall security vulnerabilities of the *** key novelty lies in overcoming the constraints of partial *** proposed framework utilizes data from various sources to create a comprehensive functionality profile,facilitating the derivation of real-world security *** guidelines are dynamically generated by associating functional security vulnerabilities with the latest Common Vulnerabilities and Exposure(CVE)and Common Vulnerability Scoring System(CVSS)scores,resulting in automated guidelines tailored to each *** guidelines are not only practical but also applicable in real-world software,allowing for prioritized security *** proposed framework is applied to virtual private network(VPN)software,wherein a validated Level 2 data flow diagram is generated using the Spoofing,Tampering,Repudiation,Information Disclosure,Denial of Service,and Elevation of privilege(STRIDE)technique with references to various papers and examples from related *** analysis resulted in the identification of a total of 121 *** successful implementation and validation demonstrate the framework’s efficacy in generating customized guidelines for entire systems,subsystems,and selected modules.

关键词： Framework automation vulnerability analysis security guidelines

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

A disk I/O optimized system for concurrent graph processing jobs

引用

Frontiers of computer science 2024年第3期18卷 13-29页

作者： Xianghao XU Fang WANG Hong JIANG Yongli CHENG Dan FENG Peng FANG School of computer science and engineering Nanjing University of Science and TechnologyNanjing 210094China wuhan National Laboratory for Optoelectronics Huazhong University of Science and TechnologyWuhan 430074China department of computer science&engineering University of Texas at ArlingtonArlingtonTX 76019USA College of computer and Data science Fuzhou UniversityFuzhou 350108China Zhejiang Lab Hangzhou 311121China

In order to analyze and process the large graphs with high cost efficiency,researchers have developed a number of out-of-core graph processing systems in recent years based on just one commodity *** the other hand,with the rapidly growing need of analyzing graphs in the real-world,graph processing systems have to efficiently handle massive concurrent graph processing(CGP)***,due to the inherent design for single graph processing job,existing out-of-core graph processing systems usually incur unnecessary data accesses and severe competition of I/O bandwidth when handling the CGP *** this paper,we propose GraphCP,a disk I/O optimized out-of-core graph processing system that efficiently supports the processing of CGP *** proposes a benefit-aware sharing execution model to share the I/O access and processing of graph data among the CGP jobs and adaptively schedule the graph data loading based on the states of vertices,which efficiently overcomes above challenges faced by existing out-of-core graph processing ***,GraphCP adopts a dependency-based future-vertex updating model so as to reduce disk I/Os in the future *** addition,GraphCP organizes the graph data with a Source-Sorted Sub-Block graph representation for better processing capacity and I/O access *** evaluation results show that GraphCP is 20.5×and 8.9×faster than two out-of-core graph processing systems GridGraph and GraphZ,and 3.5×and 1.7×faster than two state-of-art concurrent graph processing systems Seraph and GraphSO.

关键词： graph processing disk I/O concurrent jobs

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Coordinated Frequency Control for Isolated Power Systems with High Penetration of DFIG-Based Wind Power

引用

CSEE Journal of Power and Energy Systems 2024年第4期10卷 1399-1414页

作者： Xin Ding Wei Lin Jian Xu Yuanzhang Sun Liangzhong Yao Beilin Mao School of Electrical engineering.and Automation Wuhan UniversityWuhan 430072China department of Electrical engineering.and computer science Case Western Reserve UniversityClevelandOH 44106 USA

This paper proposes a coordinated frequency control scheme for emergency frequency regulation of isolated power systems with a high penetration of wind *** proposed frequency control strategy is based on the novel nonlinear regulator theory,which takes advantage of nonlinearity of doubly fed induction generators(DFIGs)and generators to regulate the frequency of the power *** deviations and power imbalances are used to design nonlinear feedback controllers that achieve the reserve power distribution between generators and DFIGs,in various wind speed *** effectiveness and dynamic performance of the proposed nonlinear coordinated frequency control method are validated through simulations in an actual isolated power grid.

关键词： Frequency control isolated power systems nonlinear feedback nonlinear regulator theory wind power

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

What can we learn from quality assurance badges in open-source software?

引用

science China(Information sciences) 2024年第4期67卷 146-163页

作者： Feng LI Yiling LOU Xin TAN Zhenpeng CHEN Jinhao DONG Yang LI Xuanzhi WANG Dan HAO Lu ZHANG MoE Key Lab of HCST School of Computer SciencePeking University department of computer science Purdue University School of computer science & engineering Beihang University(BUAA) department of computer science University College London(UCL)

In the development of open-source software(OSS), many developers use badges to give an overview of the software and share some key features/metrics conveniently. Among various badges, quality assurance(QA) badges make up a large proportion and are the most prevalent because QA is of vital importance in software development, and ineffective QA may lead to anomalies or defects. In this paper, we focus on QA badges in open-source projects, which present quality assurance information directly and instantly,and aim to produce some interesting findings and provide practical implications. We collect and analyze 100000 projects written in popular programming languages from GitHub and conduct a comprehensive empirical study both inside and outside QA badges. Inside QA badges, we build a category classification for all QA badges based on the properties they focus on, which shows the types of QA badges developers use. Then,we analyze the frequency of the properties that QA badges focus on, and property combinations, too, which present their use status. We find that QA badges focus on various properties while developers give different preferences to different properties. The use status also differs between different programming languages. For example, projects written in C focus on Security to a great extent. Our findings also provide implications for developers and badge providers. Outside QA badges, we conduct a correlation analysis between QA badges and some software metrics that have potential relationships with code quality, contribution quality, and popularity. We find that QA badges have statistically significant correlations with various software metrics.

关键词： quality assurance badge open-source software code quality empirical study

来源：

同方期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

CToMP: a cycle-task-oriented memory protection scheme for unmanned systems

引用

science China(Information sciences) 2024年第6期67卷 399-417页

作者： Chengyan MA Ning XI Di LU Yebo FENG Jianfeng MA School of Cyber engineering Xidian University School of computer science and Technology Xidian University department of computer and Information science University of Oregon

Memory corruption attacks(MCAs) refer to malicious behaviors of system intruders that modify the contents of a memory location to disrupt the normal operation of computing systems, causing leakage of sensitive data or perturbations to ongoing processes. Unlike general-purpose systems, unmanned systems cannot deploy complete security protection schemes, due to their limitations in size, cost and *** in unmanned systems are particularly difficult to defend against. Furthermore, MCAs have diverse and unpredictable attack interfaces in unmanned systems, severely impacting digital and physical sectors. In this paper, we first generalize, model and taxonomize MCAs found in unmanned systems currently, laying the foundation for designing a portable and general defense approach. According to different attack mechanisms,we found that MCAs are mainly categorized into two types — return2libc and return2shellcode. To tackle return2libc attacks, we model the erratic operation of unmanned systems with cycles and then propose a cycle-task-oriented memory protection(CToMP) approach to protect control flows from tampering. To defend against return2shellcode attacks, we introduce a secure process stack with a randomized memory address by leveraging the memory pool to prevent Shellcode from being executed. Moreover, we discuss the mechanism by which CTo MP resists the return-oriented programming(ROP) attack, a novel variant of return2libc attacks. Finally, we implement CTo MP on CUAV V5+ with Ardupilot and Crazyflie. The evaluation and security analysis results demonstrate that the proposed approach CTo MP is resilient to various MCAs in unmanned systems with low footprints and system overhead.

关键词： unmanned system memory corruption attack memory protection system security randomized memory address

来源：

同方期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Refinement modeling and verification of secure operating systems for communication in digital twins

引用

Digital Communications and Networks 2024年第2期10卷 304-314页

作者： Zhenjiang Qian Gaofei Sun Xiaoshuang Xing Gaurav Dhiman School of computer science and engineering Changshu Institute of TechnologySuzhou215500China university Centre for Research and Development Department of Computer Science and EngineeringChandigarh UniversityMohali140413India department of computer science and engineering Graphic Era Deemed to be UniversityDehradun248002India

In traditional digital twin communication system testing,we can apply test cases as completely as possible in order to ensure the correctness of the system implementation,and even then,there is no guarantee that the digital twin communication system implementation is completely *** verification is currently recognized as a method to ensure the correctness of software system for communication in digital twins because it uses rigorous mathematical methods to verify the correctness of systems for communication in digital twins and can effectively help system designers determine whether the system is designed and implemented *** this paper,we use the interactive theorem proving tool Isabelle/HOL to construct the formal model of the X86 architecture,and to model the related assembly *** verification result shows that the system states obtained after the operations of relevant assembly instructions is consistent with the expected states,indicating that the system meets the design expectations.

关键词： Theorem proving Isabelle/HOL Formal verification System modeling Correctness verification

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Controllable multi-domain semantic artwork synthesis

引用

Computational Visual Media 2024年第2期10卷 355-373页

作者： Yuantian Huang Satoshi Iizuka Edgar Simo-Serra Kazuhiro Fukui department of computer science University of TsukubaTsukuba 305-8577Japan department of computer science and engineering Waseda UniversityTokyo 169-8050Japan

We present a novel framework for the multidomain synthesis of artworks from semantic *** of the main limitations of this challenging task is the lack of publicly available segmentation datasets for art *** address this problem,we propose a dataset called ArtSem that contains 40,000 images of artwork from four different domains,with their corresponding semantic label *** first extracted semantic maps from landscape photography and used a conditional generative adversarial network(GAN)-based approach for generating high-quality artwork from semantic maps without requiring paired training ***,we propose an artwork-synthesis model using domain-dependent variational encoders for high-quality multi-domain ***,the model was improved and complemented with a simple but effective normalization method based on jointly normalizing semantics and style,which we call spatially style-adaptive normalization(SSTAN).Compared to the previous methods,which only take semantic layout as the input,our model jointly learns style and semantic information representation,improving the generation quality of artistic *** results indicate that our model learned to separate the domains in the latent ***,we can perform fine-grained control of the synthesized artwork by identifying hyperplanes that separate the different ***,by combining the proposed dataset and approach,we generated user-controllable artworks of higher quality than that of existing approaches,as corroborated by quantitative metrics and a user study.

关键词： semantic artwork synthesis generative adversarial network(GAN) datasets non-photorealistic rendering

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

The joint knowledge reasoning model based on knowledge representation learning for aviation assembly domain

引用

science China(Technological sciences) 2024年第1期67卷 143-156页

作者： LIU PeiFeng QIAN Lu LU Hu XUE Lei ZHAO XingWei TAO Bo State Key Laboratory of Digital Manufacturing Equipment and Technology Department of MechanicalHuazhong University of Science and TechnologyWuhan 430074China School of transportation and Logistics engineering Wuhan University of Technology(WHUT)Wuhan 430063China Shanghai Aircraft Manufacturing Co. Ltd.Shanghai 201324China

Knowledge graph technology is widely applied in the domain of general knowledge reasoning with an excellent *** fine-grained professional fields,professional knowledge graphs can provide more accurate information in practical industrial *** on an aviation assembly domain-specific knowledge graph,the article constructs a joint knowledge reasoning model,which combines a named entity recognition model and a subgraph embedding learning *** performing knowledge reasoning tasks,the two models vectorize entities,relationships and entity attributes in the same space,so as to share parameters and optimize learning *** knowledge reasoning model,which provides intelligent question answering services,is able to reduce the assembly error rate and improve the assembly *** system can accurately solve general knowledge reasoning problems in the assembly process in actual industrial scenarios of general assembly and component assembly under interference-free ***,this paper compares the proposed knowledge reasoning model based on knowledge representation learning and the question-answering system based on large-scale pre-trained *** the application scenario of system functional testing in general assembly,the joint model attains an accuracy rate of 95%,outperforming GPT with 78%accuracy and enhanced representation through knowledge integration with 71%accuracy.

关键词： intelligent manufacturing knowledge graph aviation assembly knowledge representation knowledge-based question an-swering

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

On optimal streaming kernelization algorithms

引用

science China(Information sciences) 2024年第8期67卷 337-338页

作者： Hao FENG Wei YANG Jianer CHEN School of computer science Guangzhou University department of computer science and engineering Texas A&M University

The streaming model has been a popular model in big data computation. Streaming kernelization algorithms can be regarded as data compression processes on streaming data. In this study, we give a general method for developing computational lower bounds for streaming kernelization algorithms that is applicable to a large class of computational problems. As an example, we use the method to prove computational lower bounds for the well-known problem d-Hi TTin GSET.

关键词：

来源：

同方期刊数据库评论

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Leveraging User-Generated Comments and Fused BiLSTM Models to Detect and Predict Issues with Mobile Apps

引用

computers, Materials & Continua 2024年第4期79卷 735-759页

作者： Wael M.S.Yafooz Abdullah Alsaeedi department of computer science College of Computer Science and EngineeringTaibah UniversityMedina42353Saudi Arabia

In the last decade, technical advancements and faster Internet speeds have also led to an increasing number ofmobile devices and users. Thus, all contributors to society, whether young or old members, can use these mobileapps. The use of these apps eases our daily lives, and all customers who need any type of service can accessit easily, comfortably, and efficiently through mobile apps. Particularly, Saudi Arabia greatly depends on digitalservices to assist people and visitors. Such mobile devices are used in organizing daily work schedules and services,particularly during two large occasions, Umrah and Hajj. However, pilgrims encounter mobile app issues such asslowness, conflict, unreliability, or user-unfriendliness. Pilgrims comment on these issues on mobile app platformsthrough reviews of their experiences with these digital services. Scholars have made several attempts to solve suchmobile issues by reporting bugs or non-functional requirements by utilizing user ***, solving suchissues is a great challenge, and the issues still exist. Therefore, this study aims to propose a hybrid deep learningmodel to classify and predict mobile app software issues encountered by millions of pilgrims during the Hajj andUmrah periods from the user perspective. Firstly, a dataset was constructed using user-generated comments fromrelevant mobile apps using natural language processing methods, including information extraction, the annotationprocess, and pre-processing steps, considering a multi-class classification problem. Then, several experimentswere conducted using common machine learning classifiers, Artificial Neural Networks (ANN), Long Short-TermMemory (LSTM), and Convolutional Neural Network Long Short-Term Memory (CNN-LSTM) architectures, toexamine the performance of the proposed model. Results show 96% in F1-score and accuracy, and the proposedmodel outperformed the mentioned models.

关键词： Mobile apps issues play store user comments deep learning LSTM bidirectional LSTM

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

欢迎您,

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案：

请选择收藏分类：

通借通还

欢迎您,

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：