检索结果-南通市图书馆

Fault Analysis on AES:A Property-Based Verification Perspective

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Tsinghua Science and Technology 2024年第2期29卷 576-588页

作者： Xiaojie Dai Xingxin Wang Xue Qu Baolei Mao Wei Hu school of cybersecurity Northwestern Polytechnical UniversityXi’an 710072China school of Cyber Science and Engineering Zhengzhou UniversityZhengzhou 450001China

Fault analysis is a frequently used side-channel attack for ***,existing fault attack methods usually involve complex fault fusion analysis or computation-intensive statistical analysis of massive fault *** this work,we take a property-based formal verification approach to fault *** derive fine-grained formal models for automatic fault propagation and fusion,which establish a mathematical foundation for precise measurement and formal reasoning of fault *** extract the correlations in fault effects in order to create properties for fault *** further propose a method for key recovery,by formally checking when the extracted properties can be satisfied with partial keys as the search *** results using both unprotected and masked advanced encryption standard(AES)implementations show that our method has a key search complexity of 216,which only requires two correct and faulty ciphertext pairs to determine the secret key,and does not assume knowledge about fault location or pattern.

关键词： side-channel attack fault analysis fault propagation model property extraction fault verification

Ensemble successor representations for task generalization in offline-to-online reinforcement learning

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Science China(Information Sciences) 2024年第7期67卷 240-255页

作者： Changhong WANG Xudong YU Chenjia BAI Qiaosheng ZHANG Zhen WANG Space Control and Inertial Technology Research Center Harbin Institute of Technology Shanghai Artificial Intelligence Laboratory Shenzhen Research Institute of Northwestern Polytechnical University school of cybersecurity Northwestern Polytechnical University

In reinforcement learning(RL), training a policy from scratch with online experiences can be inefficient because of the difficulties in exploration. Recently, offline RL provides a promising solution by giving an initialized offline policy, which can be refined through online interactions. However, existing approaches primarily perform offline and online learning in the same task, without considering the task generalization problem in offline-to-online adaptation. In real-world applications, it is common that we only have an offline dataset from a specific task while aiming for fast online-adaptation for several tasks. To address this problem, our work builds upon the investigation of successor representations for task generalization in online RL and extends the framework to incorporate offline-to-online learning. We demonstrate that the conventional paradigm using successor features cannot effectively utilize offline data and improve the performance for the new task by online fine-tuning. To mitigate this, we introduce a novel methodology that leverages offline data to acquire an ensemble of successor representations and subsequently constructs ensemble Q functions. This approach enables robust representation learning from datasets with different coverage and facilitates fast adaption of Q functions towards new tasks during the online fine-tuning *** empirical evaluations provide compelling evidence showcasing the superior performance of our method in generalizing to diverse or even unseen tasks.

关键词： offline reinforcement learning online fine-tuning task generalization successor representations ensembles

A Framework for cybersecurity Alert Distribution and Response Network (ADRIAN)

同方期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Journal of Software Engineering and Applications 2024年第5期17卷 396-420页

作者： Akarshita Shankar Vijay Madisetti school of cybersecurity and Privacy Georgia Institute of Technology Atlanta USA

Security Information and Event Management (SIEM) platforms are critical for organizations to monitor and manage their security operations centers. However, organizations using SIEM platforms have several challenges such as inefficiency of alert management and integration with real-time communication tools. These challenges cause delays and cost penalties for organizations in their efforts to resolve the alerts and potential security breaches. This paper introduces a cybersecurity Alert Distribution and Response Network (Adrian) system. Adrian introduces a novel enhancement to SIEM platforms by integrating SIEM functionalities with real-time collaboration platforms. Adrian leverages the uniquity of mobile applications of collaboration platforms to provide real-time alerts, enabling a two-way communication channel that facilitates immediate response to security incidents and efficient SIEM platform management. To demonstrate Adrian’s capabilities, we have introduced a case-study that integrates Wazuh, a SIEM platform, to Slack, a collaboration platform. The case study demonstrates all the functionalities of Adrian including the real-time alert distribution, alert customization, alert categorization, and enablement of management activities, thereby increasing the responsiveness and efficiency of Adrian’s capabilities. The study concludes with a discussion on the potential expansion of Adrian’s capabilities including the incorporation of artificial intelligence (AI) for enhanced alert prioritization and response automation.

关键词： SIEM Platforms Alert Distribution Incident Response Automation SIEM Management Collaboration Platform

Sher: A Secure Broker for DevSecOps and CI/CD Workflows

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Software Engineering and Applications 2024年第5期17卷 321-339页

作者： Pranau Kumar Vijay K. Madisetti school of cybersecurity and Privacy Georgia Institute of Technology Atlanta USA

GitHub Actions, a popular CI/CD platform, introduces significant security challenges due to its integration with GitHub’s open ecosystem and its use of flexible workflow configurations. This paper presents Sher, a Python-based tool that enhances the security of GitHub Actions by automating the detection and remediation of security issues in workflows. Self-Hosted Ephemeral Runner, or Sher, acts as a broker between GitHub’s APIs and a customizable, isolated environment, analyzing workflows through a static rules engine and automatically fixing identified issues. By providing a secure, ephemeral runner environment and a dynamic analysis tool, Sher addresses common misconfigurations and vulnerabilities, contributing to the resilience and integrity of DevSecOps practices within software development pipelines.

关键词： CI/CD Pipelines GitHub GitOps DevSecOps Isolation Security SAST

Cloud Datacenter Selection Using Service Broker Policies:A Survey

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computer Modeling in Engineering & Sciences 2024年第4期139卷 1-41页

作者： Salam Al-E’mari Yousef Sanjalawe Ahmad Al-Daraiseh Mohammad Bany Taha Mohammad Aladaileh Department of Information Security Faculty of ITUniversity of PetraAmman11196Jordan Department of cybersecurity School of ITAmerican University of Madaba(AUM)Amman11821Jordan Department of Computer Science School of ITAmerican University of Madaba(AUM)Amman11821Jordan Department of Data Science and Artificial Intelligence School of ITAmerican University of Madaba(AUM)Amman11821Jordan

Amid the landscape of Cloud Computing(CC),the Cloud Datacenter(DC)stands as a conglomerate of physical servers,whose performance can be hindered by bottlenecks within the realm of proliferating CC services.A linchpin in CC’s performance,the Cloud Service Broker(CSB),orchestrates DC *** to adroitly route user requests with suitable DCs transforms the CSB into a bottleneck,endangering service *** tackle this,deploying an efficient CSB policy becomes imperative,optimizing DC selection to meet stringent Qualityof-Service(QoS)*** numerous CSB policies,their implementation grapples with challenges like costs and *** article undertakes a holistic review of diverse CSB policies,concurrently surveying the predicaments confronted by current *** foremost objective is to pinpoint research gaps and remedies to invigorate future policy ***,it extensively clarifies various DC selection methodologies employed in CC,enriching practitioners and researchers *** synthetic analysis,the article systematically assesses and compares myriad DC selection *** analytical insights equip decision-makers with a pragmatic framework to discern the apt technique for their *** summation,this discourse resoundingly underscores the paramount importance of adept CSB policies in DC selection,highlighting the imperative role of efficient CSB policies in optimizing CC *** emphasizing the significance of these policies and their modeling implications,the article contributes to both the general modeling discourse and its practical applications in the CC domain.

关键词： Cloud computing cloud service broker datacenter selection quality-of-service user request

Design & Test of an Advanced Web Security Analysis Tool (AWSAT)

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Software Engineering and Applications 2024年第5期17卷 448-461页

作者： Meenakshi S. P. Manikandaswamy Vijay Madisetti school of cybersecurity and Privacy Georgia Institute of Technology Atlanta USA

Considering the escalating frequency and sophistication of cyber threats targeting web applications, this paper proposes the development of an automated web security analysis tool to address the accessibility gap for non-security professionals. This paper presents the design and implementation of an automated web security analysis tool, AWSAT, aimed at enabling individuals with limited security expertise to effectively assess and mitigate vulnerabilities in web applications. Leveraging advanced scanning techniques, the tool identifies common threats such as Cross-Site Scripting (XSS), SQL Injection, and Cross-Site Request Forgery (CSRF), providing detailed reports with actionable insights. By integrating sample payloads and reference study links, the tool facilitates informed decision-making in enhancing the security posture of web applications. Through its user-friendly interface and robust functionality, the tool aims to democratize web security practices, empowering a wider audience to proactively safeguard against cyber threats.

关键词： Web Security Automated Analysis Vulnerability Assessment Web Scanning Cross-Site Scripting SQL Injection Cross-Site Request Forgery

Ad Blockers & Online Privacy: A Comparative Analysis of Privacy Enhancing Technologies (PET)

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Software Engineering and Applications 2024年第5期17卷 378-395页

作者： Siddharth M. Madikeri Vijay K. Madisetti school of cybersecurity and Privacy Georgia Institute of Technology Atlanta USA

Online tracking mechanisms employed by internet companies for user profiling and targeted advertising raise major privacy concerns. Despite efforts to defend against these mechanisms, they continue to evolve, rendering many existing defences ineffective. This study performs a large-scale measurement of online tracking mechanisms across a large pool of websites using the OpenWPM (Open Web Privacy Measurement) platform. It systematically evaluates the effectiveness of several ad blockers and underlying Privacy Enhancing Technologies (PET) that are primarily used to mitigate different tracking techniques. By quantifying the strengths and limitations of these tools against modern tracking methods, the findings highlight gaps in existing privacy protections. Actionable recommendations are provided to enhance user privacy defences, guide tool developers and inform policymakers on addressing invasive online tracking practices.

关键词： Privacy Enhancing Technology (PET) Personally Identifiable Information (PII) OpenWPM Web Privacy

A Comparative Analysis of cybersecurity Threat Taxonomies for Healthcare Organizations

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Software Engineering and Applications 2024年第5期17卷 359-377页

作者： Mahima Jaikanth Vijay K. Madisetti school of cybersecurity and Privacy Georgia Institute of Technology Atlanta GA USA

Information technology is critical in coordinating patient records, smart devices, operations, and critical infrastructure in healthcare organizations, and their constantly changing digital environment, including suppliers, doctors, insurance providers, and regulatory agencies. This dependence on interdependent systems makes this sector vulnerable to various information technology risks. Such threats include common cybersecurity risks such as data breaches and malware attacks, unique problems occurring in healthcare settings such as unauthorized access to patient records, disruptions in services provided at medical facilities, and potential harm caused to patients due to the compromise of medical devices. The threat taxonomies, such as the Open Threat Taxonomy, NIST, or ENISA, are foundational frameworks for grasping and categorizing IT threats. However, these taxonomies were not specifically designed to deal with the complexities of the healthcare industry. The problem arises from the gap between these taxonomies’ general nature and the industry-specific threats and vulnerabilities that affect healthcare organizations. As a result, many healthcare institutions fail to holistically address and eliminate the unique risks related to confidentiality, integrity, and availability of patients’ data as well as critical systems used in healthcare. This paper aims to narrow this gap by carefully assessing these taxonomies to determine the frame-work best suited for addressing the threat environment in the healthcare sector.

关键词： Threat Taxonomies Open Threat Taxonomy (OTT)

A Design of an SMTP Email Server

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Electronic Research and Application 2024年第4期8卷 41-47页

作者： Liheng Hu school of cybersecurity Beijing University of Posts and TelecommunicationsBeijing 100876China

This study developed a mail server program using Socket API and *** program uses the Hypertext Transfer Protocol(HTTP)to receive emails from browser clients and forward them to actual email service providers via the Simple Mail Transfer Protocol(SMTP).As a web server,it handles Transmission Control Protocol(TCP)connection requests from browsers,receives HTTP commands and email data,and temporarily stores the emails in a ***,as an SMTP client,the program establishes a TCP connection with the actual mail server,sends SMTP commands,and transmits the previously saved *** addition,we also analyzed security issues and the efficiency and availability of this server,providing insights into the design of SMTP mail servers.

关键词： Mail server Socket API HTTP protocol SMTP protocol Security analysis Efficiency analysis