检索结果-南通市图书馆

MRm-DLDet:a memory-resident malware detection framework based on memory forensics and deep neural network

Cybersecurity 2024年第1期7卷 88-109页

作者： Jiaxi Liu Yun Feng Xinyu Liu Jianjun Zhao Qixu Liu Institute of Information engineering Chinese Academy of SciencesBeijing 100085China School of Cyber security University of Chinese Academy of SciencesBeijing 100049China

Cyber attackers have constantly updated their attack techniques to evade antivirus software detection in recent years.One popular evasion method is to execute malicious code and perform malicious actions only in memory.Mali-cious programs that use this attack method are called memory-resident malware,with excellent evasion capability,and have posed huge threats to cyber security.Traditional static and dynamic methods are not effective in detect-ing memory-resident malware.In addition,existing memory forensics detection solutions perform unsatisfactorily in detection rate and depend on massive expert knowledge in memory analysis.This paper proposes MRm-DLDet,a state-of-the-art memory-resident malware detection framework,to overcome these drawbacks.MRm-DLDet first builds a virtual machine environment and captures memory dumps,then creatively processes the memory dumps into RGB images using a pre-processing technique that combines deduplication and ultra-high resolution image cropping,followed by our neural network MRmNet in MRm-DLDet to fully extract high-dimensional features from memory dump files and detect *** receives the labeled sub-images of the cropped high-resolution RGB images as input of ResNet-18,which extracts the features of the sub-images.Then trains a network of gated recurrent units with an attention mechanism.Finally,it determines whether a program is memory-resident malware based on the detection results of each sub-image through a specially designed voting layer.We created a high-quality dataset consisting of 2,060 benign and memory-resident programs.In other words,the dataset contains 1,287,500 labeled sub-images cut from the MRm-DLDet transformed ultra-high resolution RGB images.We implement MRm-DLDet for Windows 10,and it performs better than the latest methods,with a detection accuracy of up to 98.34%.Moreover,we measured the effects of mimicry and adversarial attacks on MRm-DLDet,and the experimental results demonstrated the robustness of MRm-DLDet.

关键词： Memory-resident malware Memory forensics Malware detection Deep learning Ultra-high resolution image

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Suboptimal Feature Selection Techniques for Effective Malicious Traffic Detection on Lightweight Devices

引用

Computer Modeling in engineering & Sciences 2024年第8期140卷 1669-1687页

作者： So-Eun Jeon Ye-Sol Oh Yeon-Ji Lee Il-Gu Lee Department of Future Convergence Technology engineering Sungshin Women’s UniversitySeoul02844Korea Department of Convergence security engineering SungshinWomen’s UniversitySeoul02844Korea

With the advancement of wireless network technology,vast amounts of traffic have been generated,and malicious traffic attacks that threaten the network environment are becoming increasingly sophisticated.While signature-based detection methods,static analysis,and dynamic analysis techniques have been previously explored for malicious traffic detection,they have limitations in identifying diversified malware traffic patterns.Recent research has been focused on the application of machine learning to detect these patterns.However,applying machine learning to lightweight devices like IoT devices is challenging because of the high computational demands and complexity involved in the learning process.In this study,we examined methods for effectively utilizing machine learning-based malicious traffic detection approaches for lightweight devices.We introduced the suboptimal feature selection model(SFSM),a feature selection technique designed to reduce complexity while maintaining the effectiveness of malicious traffic detection.Detection performance was evaluated on various malicious traffic,benign,exploits,and generic,using the UNSW-NB15 dataset and SFSM sub-optimized hyperparameters for feature selection and narrowed the search scope to encompass all features.SFSM improved learning performance while minimizing complexity by considering feature selection and exhaustive search as two steps,a problem not considered in conventional models.Our experimental results showed that the detection accuracy was improved by approximately 20%compared to the random model,and the reduction in accuracy compared to the greedy model,which performs an exhaustive search on all features,was kept within 6%.Additionally,latency and complexity were reduced by approximately 96%and 99.78%,respectively,compared to the greedy model.This study demonstrates that malicious traffic can be effectively detected even in lightweight device environments.SFSM verified the possibility of detecting various attack traffic on lightweight devices.

关键词： Feature selection lightweight device machine learning Internet of Things malicious traffic

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Constructing the Impossible Differential of Type-II GFN with Boolean Function and Its Application to WARP

引用

Chinese Journal of Electronics 2024年第1期33卷 80-89页

作者： Jiali SHI Guoqiang LIU Chao LI College of Liberal Arts and Sciences National University of Defense Technology Hunan engineering Research Center of Commercial Cryptography Theory and Technology Innovation State Key laboratory of Information security Institute of Information Engineering

Type-Ⅱ generalized Feist el network(GFN) has attracted a lot of attention for its simplicity and high parallelism.Impossible differential attack is one of the powerful cryptanalytic approaches for word-oriented block ciphers such as Feistel-like ciphers.We deduce the impossible differential of Type-Ⅱ GFN by analyzing the Boolean function in the middle round.The main idea is to investigate the expression with the variable representing the plaintext(ciphertext) difference words for the internal state words.By adopting the miss-in-the-middle approach,we can construct the impossible differential of Type-Ⅱ GFN.As an illustration,we apply this approach to WARP,a lightweight 128-bit block cipher with a 128-bit key which was presented by Banik et al.at SAC 2020.The structure of WARP is a 32-branch Type-Ⅱ GFN.Therefore,we find two 21-round truncated impossible differentials and implement a 32-round key recovery attack on WARP.For the 32-round key recovery attack on WARP,some observations are used to mount an effective attack.Taking the advantage of the early abort technique,the data,time,and memory complexities are 2125.69chosen plaintexts,2126.6832-round encryptions,and 2100-bit,repectively.To the best of our knowledge,this is the best attack on WARP in the single-key scenario.

关键词： WARP Feistel cipher Impossible differential attack

来源：

同方期刊数据库评论

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Method and Practice of Trusted Embedded Computing and Data Transmission Protection Architecture Based on Android

引用

Chinese Journal of Electronics 2024年第3期33卷 623-634页

作者： Yichuan WANG Wen GAO Xinhong HEI Yanning DU School of Computer Science and engineering Xi'an University of Technology Shaanxi Key laboratory for Network Computing and security Technology

In recent years,the rapid development of Internet technology has constantly enriched people's daily life and gradually changed from the traditional computer terminal to the mobile terminal.But with it comes the security problems brought by the mobile terminal.Especially for Android system,due to its open source nature,malicious applications continue to emerge,which greatly threatens the data security of users.Therefore,this paper proposes a method of trusted embedded static measurement and data transmission protection architecture based on Android to reduce the risk of data leakage in the process of terminal storage and transmission.We conducted detailed data and feasibility analysis of the proposed method from the aspects of time consumption,storage overhead and security.The experimental results show that this method can detect Android system layer attacks such as self-booting of the malicious module and improve the security of data encryption and transmission process effectively.Compared with the native system,the additional performance overhead is small.

关键词： Embedded computing Protocols Data security Computer architecture Encryption Internet Data communication

来源：

同方期刊数据库评论

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Biohythane production from two-stage anaerobic digestion of food waste:A review

引用

Journal of Environmental Sciences 2024年第5期139卷 334-349页

作者： Xiaona An Ying Xu Xiaohu Dai State Key laboratory of Pollution Control and Resource Reuse School of Environmental Science and EngineeringTongji UniversityShanghai 200092China Shanghai Institute of Pollution Control and Ecological security Shanghai 200092China

The biotransformation of food waste(FW)to bioenergy has attracted considerable research attention as a means to address the energy crisis and waste disposal problems.To this end,a promising technique is two-stage anaerobic digestion(TSAD),in which the FW is transformed to biohythane,a gaseous mixture of biomethane and biohydrogen.This review summarises the main characteristics of FW and describes the basic principle of TSAD.Moreover,the factors influencing the TSAD performance are identified,and an overview of the research status;economic aspects;and strategies such as pre-treatment,co-digestion,and regulation of microbial consortia to increase the biohythane yield from TSAD is provided.Additionally,the challenges and future considerations associated with the treatment of FW by TSAD are highlighted.This paper can provide valuable reference for the improvement and widespread implementation of TSAD-based FW treatment.

关键词： Two-stage anaerobic digestion(TSAD) Food waste(FW) Methane production Hydrogen production

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Numerical Study on the Aerodynamic and Fluid−Structure Interaction of An NREL-5MW Wind Turbine

引用

China Ocean engineering 2024年第3期38卷 363-378页

作者： ZHAO Mi YU Wan-li WANG Pi-guang QU Yang DU Xiu-li Key laboratory of Urban security and Disaster engineering of Ministry of Education Beijing University of TechnologyBeijing 100124China State Key laboratory of Bridge engineering Safety and Resilience Beijing University of TechnologyBeijing 100124China

A 5-MW wind turbine has been modeled and analyzed for fluid-structure interaction and aerodynamic performance.In this study,a full-scale model of a 5-MW wind turbine is first developed based on a computational fluid dynamics(CFD)approach,in which the unsteady,noncompressible Reynolds Averaged Navier‒Stokes(RANS)method is used.The main focus of the study is to analyze the tower shadow effect on the aerodynamic performance of the wind turbine under different inlet flow conditions.Subsequently,the finite element model is established by considering fluid/structure interactions to study the structural stress,displacement,strain distributions and flow field information of the structure under the uniform wind speed.Finally,the fluid-structure interaction model is established by considering turbulent wind and the tower shadow effect.The variation rules of the dynamic response of the one-way and twoway fluid−structure interaction(FSI)models under different wind speeds are analyzed,and the numerical calculation results are compared with those of the centralized mass model.The results show that the tower shadow effect and structural deformation are the main factors affecting the aerodynamic load fluctuation of the wind turbine,which in turn affects the aerodynamic performance and structural stability of the blades.The structural dynamic response of the coupled model shows significant similarity,while the structural displacement response of the former exhibits less fluctuation compared with the conventional centralized mass model.The one-way fluid-structure interaction(FSI)model shows a higher frequency of stress-strain and displacement oscillations on the blade compared with the twoway FSI model.

关键词： computational fluid dynamics methods(CFD) tower shadow effect aerodynamic performance fluidstructure interaction space flow field

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Neurotoxicity of tetramethylammonium ion on larval and juvenile zebrafish:Effects on neurobehaviors and multiple biomarkers

引用

Journal of Environmental Sciences 2024年第9期143卷 138-147页

作者： Ruixin Zhang Rui Wang Jiajun Chang GDaniel Sheng Daqiang Yin Key laboratory of Yangtze River Water Environment Ministry of EducationCollege of Environmental Science and EngineeringTongji UniversityShanghai 200092China Shanghai Institute of Pollution Control and Ecological security Shanghai 200092China

Tetramethylammonium hydroxide(TMAH)is an important compound that utilized and released by the rapidly expanding semiconductor industry,which could hardly be removed by the conventional wastewater treatment techniques.As a cholinergic agonist,the tetramethylammonium ion(TMA^(+))has been reported to induce toxicity to muscular and respiratory systems of mammals and human,however the toxicity on aquatic biota remains poorly known.We investigated the neurotoxic effects of TMA^(+)exposure on zebrafish,based on neurobehavior tests and a series of biomarkers.Significant inhibitions on the swimming distance of zebrafish larvae were observed when the exposure level exceeded 50 mg/L,and significant alterations on swimming path angles(straight and deflective movements)occurred even at 10 mg/L.The tested neurobehavioral endpoints of zebrafish larvae were significantly positively correlated with reactive oxygen species(ROS)and malondialdehyde(MDA),significantly negatively related with the activities of antioxidant enzymes,but not significantly correlated with the level of acetylcholinesterase(AChE).Such relationship indicates that the observed neurotoxic effects on swimming behavior of zebrafish larvae is mainly driven by oxidative stress,rather than the alterations of neurotransmitter.At the highest exposure concentration(200 mg/L),TMA^(+)evoked more severe toxicity on zebrafish juveniles,showing significantly stronger elevation on the MDA activity,and greater inhibitions on the activities of antioxidant enzymes and ACh E,suggesting juveniles were more susceptible to TMA^(+)exposure than larval zebrafish.

关键词： Tetramethylammonium Zebrafish Oxidative stress Acetylcholinesterase Neurobehavior

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Identity-based searchable attribute signcryption in lattice for a blockchain-based medical system

引用

Frontiers of Information Technology & Electronic engineering 2024年第3期25卷 461-471页

作者： Huifang YU Xiaoping BAI School of Cyberspace security Xi'an University of Posts&TelecommunicationsXi'an 710121China School of Information engineering Qinghai Communications Technical CollegeXining 810003China

Electronic healthcare systems can offer convenience but face the risk of data forgery and information leakage.To solve these issues,we propose an identity-based searchable attribute signcryption in lattice for a blockchain-based medical system(BCMS-LIDSASC).BCMS-LIDSASC achieves decentralization and anti-quantum security in the blockchain environment,and provides fine-grained access control and searchability.Furthermore,smart contracts are used to replace traditional trusted third parties,and the interplanetary file system(IPFS)is used for ciphertext storage to alleviate storage pressure on the blockchain.Compared to other schemes,BCMS-LIDSASC requires smaller key size and less storage,and has lower computation cost.It contributes to secure and efficient management of medical data and can protect patient privacy and ensure the integrity of electronic healthcare systems.

关键词： Blockchain Identity-based searchable attribute signcryption Distributed storage NTRU lattice

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

New Algebraic Attacks on Grendel with the Strategy of Bypassing SPN Steps

引用

Chinese Journal of Electronics 2024年第3期33卷 635-644页

作者： Wenxiao QIAO Siwei SUN Lei HU State Key laboratory of Information security Institute of Information Engineering Chinese Academy of Sciences School of Cyber security University of Chinese Academy of Sciences School of Cryptology University of Chinese Academy of Sciences State Key laboratory of Cryptology

The rapid development of modern cryptographic applications such as zero-knowledge,secure multiparty computation,fully homomorphic encryption has motivated the design of new so-called arithmetization-oriented symmetric primitives.As designing ciphers in this domain is relatively new and not well-understood,the security of these new ciphers remains to be completely assessed.In this paper,we revisit the security analysis of arithmetizat ionoriented cipher Grendel.Grendel uses the Legendre symbol as a component,which is tailored specifically for the use in zero-knowledge and efficiently-varifiable proof systems.At FSE 2022,the first preimage attack on some original full GrendelHash instances was proposed.As a countermeasure,the designer adds this attack into the security analysis and updates the formula to derive the secure number of rounds.In our work,we present new algebraic attacks on GrendelHash.For the preimage attack,we can reduce the complexity or attack one more round than previous attacks for some instances.In addition,we present the first collision attack on some round-reduced instances by solving the constrained input/constrained output problem for the underlying permutations.

关键词： Ciphers Symbols Multi-party computation Complexity theory Homomorphic encryption

来源：

同方期刊数据库评论

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Analytical Solution and Simplified Formula for Added Mass of Horizontal and Vertical Motions of Truncated Cylinders Under Earthquake Action

引用

China Ocean engineering 2024年第1期38卷 54-67页

作者： WANG Pi-guang LYU Si-yu QU Yang ZHAO Mi DU Xiu-li State Key laboratory of Bridge engineering Safety and Resilience Beijing University of TechnologyBeijing 100124China Key laboratory of Urban security and Disaster engineering of Ministry of Education Beijing University of Tech-nologyBeijing 100124China

This paper investigates the hydrodynamic characteristics of floating truncated cylinders undergoing horizontal and vertical motions due to earthquake excitations in the finite water depth.The governing equation of the hydrodynamic pressure acting on the cylinder is derived based on the radiation theory with the inviscid and incompressible assumptions.The governing equation is solved by using the method of separating variables and analytical solutions are obtained by assigning reasonable boundary conditions.The analytical result is validated by a numerical model using the exact artificial boundary simulation of the infinite water.The main variation and distribution characteristics of the hydrodynamic pressure acting on the side and bottom of the cylinder are analyzed for different combinations of wide-height and immersion ratios.The added mass coefficient of the cylinder is calculated by integrating the hydrodynamic pressure and simplified formulas are proposed for engineering applications.The calculation results show that the simplified formulas are in good agreement with the analytical solutions.

关键词： earthquake hydrodynamic pressure truncated cylinder added mass simplified formula

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

欢迎您,

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案：

请选择收藏分类：

通借通还

欢迎您,

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：