IT-Information Technology最新文献_第5页

Approximate Computing 近似计算

IF 0.9

IT-Information Technology Pub Date : 2022-05-05 DOI: 10.1007/978-3-030-98347-5

Christian Plessl, M. Platzner, P. Schreier

引用次数: 5

Design and error analysis of accuracy-configurable sequential multipliers via segmented carry chains 分段进位链可配置精度序列乘法器的设计与误差分析

IF 0.9

IT-Information Technology Pub Date : 2022-04-06 DOI: 10.1515/itit-2021-0040

Jorge Echavarria, S. Wildermann, Oliver Keszocze, Faramarz Khosravi, A. Becher, Jürgen Teich

引用次数: 0

A survey of approximate arithmetic circuits and blocks 概论近似算术电路和模块

IF 0.9

IT-Information Technology Pub Date : 2022-04-05 DOI: 10.1515/itit-2021-0055

Ke Chen, Peipei Yin, Weiqiang Liu, Fabrizio Lombardi

引用次数: 1

Towards practical privacy-preserving protocols 走向实用的隐私保护协议

IF 0.9

IT-Information Technology Pub Date : 2022-04-01 DOI: 10.1515/itit-2022-0005

Daniel Demmler

引用次数: 1

Guest editorial: Information security methodology and replication studies 客座社论：信息安全方法论和复制研究

IF 0.9

IT-Information Technology Pub Date : 2022-04-01 DOI: 10.1515/itit-2022-0016

S. Wendzel, L. Caviglione, A. Mileva, Jean-François Lalande, W. Mazurczyk

引用次数: 0

Exploring syntactical features for anomaly detection in application logs 探索应用程序日志中异常检测的语法特性

IF 0.9

IT-Information Technology Pub Date : 2022-03-23 DOI: 10.1515/itit-2021-0064

R. Copstein, Egil Karlsen, Jeff Schwartzentruber, N. Zincir-Heywood, M. Heywood

引用次数: 2

Privacy-preserving Web single sign-on: Formal security analysis and design 保护隐私的Web单点登录:正式的安全性分析与设计

IF 0.9

IT-Information Technology Pub Date : 2022-02-19 DOI: 10.1515/itit-2022-0003

G. Schmitz

{"title":"Privacy-preserving Web single sign-on: Formal security analysis and design","authors":"G. Schmitz","doi":"10.1515/itit-2022-0003","DOIUrl":"https://doi.org/10.1515/itit-2022-0003","url":null,"abstract":"Abstract Single sign-on (SSO) systems, such as OpenID and OAuth, allow Web sites to delegate user authentication to third parties, such as Facebook or Google. These systems provide a convenient mechanism for users to log in and ease the burden of user authentication for Web sites. Conversely, by integrating such SSO systems, they become a crucial part of the security of the modern Web. So far, it has been hard to prove if Web standards and protocols actually meet their security goals. SSO systems, in particular, need to satisfy strong security and privacy properties. In this thesis, we develop a new systematic approach to rigorously and formally analyze and verify such strong properties with the Web Infrastructure Model (WIM), the most comprehensive model of the Web infrastructure to date. Our analyses reveal severe vulnerabilities in SSO systems that lead to critical attacks against their security and privacy. We propose fixes and formally verify that our proposals are sufficient to establish security. Our analyses, however, also show that even Mozilla’s proposal for a privacy-preserving SSO system does not meet its unique privacy goal. To fill this gap, we use our novel approach to develop a new SSO system, SPRESSO, and formally prove that our system indeed enjoys strong security and privacy properties.","PeriodicalId":43953,"journal":{"name":"IT-Information Technology","volume":null,"pages":null},"PeriodicalIF":0.9,"publicationDate":"2022-02-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"41626010","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

Enabling data-centric AI through data quality management and data literacy 通过数据质量管理和数据素养实现以数据为中心的人工智能

IF 0.9

IT-Information Technology Pub Date : 2022-02-18 DOI: 10.1515/itit-2021-0048

Ziawasch Abedjan

{"title":"Enabling data-centric AI through data quality management and data literacy","authors":"Ziawasch Abedjan","doi":"10.1515/itit-2021-0048","DOIUrl":"https://doi.org/10.1515/itit-2021-0048","url":null,"abstract":"Abstract Data is being produced at an intractable pace. At the same time, there is an insatiable interest in using such data for use cases that span all imaginable domains, including health, climate, business, and gaming. Beyond the novel socio-technical challenges that surround data-driven innovations, there are still open data processing challenges that impede the usability of data-driven techniques. It is commonly acknowledged that overcoming heterogeneity of data with regard to syntax and semantics to combine various sources for a common goal is a major bottleneck. Furthermore, the quality of such data is always under question as the data science pipelines today are highly ad-hoc and without the necessary care for provenance. Finally, quality criteria that go beyond the syntactical and semantic correctness of individual values but also incorporate population-level constraints, such as equal parity and opportunity with regard to protected groups, play a more and more important role in this process. Traditional research on data integration was focused on post-merger integration of companies, where customer or product databases had to be integrated. While this is often hard enough, today the challenges aggravate because of the fact that more stakeholders are using data analytics tools to derive domain-specific insights. I call this phenomenon the democratization of data science, a process, which is both challenging and necessary. Novel systems need to be user-friendly in a way that not only trained database admins can handle them but also less computer science savvy stakeholders. Thus, our research focuses on scalable example-driven techniques for data preparation and curation. Furthermore, we believe that it is important to educate the breadth of society on implications of a data-driven world and actively promote the concept of data literacy as a fundamental competence.","PeriodicalId":43953,"journal":{"name":"IT-Information Technology","volume":null,"pages":null},"PeriodicalIF":0.9,"publicationDate":"2022-02-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"42557398","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

Extracting network based attack narratives through use of the cyber kill chain: A replication study 通过使用网络杀伤链提取基于网络的攻击叙事：一项复制研究

IF 0.9

IT-Information Technology Pub Date : 2022-02-18 DOI: 10.1515/itit-2021-0059

Aaron Weathersby, M. Washington

{"title":"Extracting network based attack narratives through use of the cyber kill chain: A replication study","authors":"Aaron Weathersby, M. Washington","doi":"10.1515/itit-2021-0059","DOIUrl":"https://doi.org/10.1515/itit-2021-0059","url":null,"abstract":"Abstract The defense of a computer network requires defenders to both understand when an attack is taking place and understand the larger strategic goals of their attackers. In this paper we explore this topic through the replication of a prior study “Extracting Attack Narratives from Traffic Datasets” by Mireles et al. [Athanasiades, N., et al., Intrusion detection testing and benchmarking methodologies, in First IEEE International Workshop on Information Assurance. 2003, IEEE: Darmstadt, Germany]. In their original research Mireles et al. proposed a framework linking a particular cyber-attack model (the Mandiant Life Cycle Model) and identification of individual attack signatures into a process as to provide a higher-level insight of an attacker in what they termed as attack narratives. In our study we both replicate the original authors work while also moving the research forward by integrating many of the suggestions Mireles et al. provided that would have improved their study. Through our analysis, we confirm the concept that attack narratives can provide additional insight beyond the review of individual cyber-attacks. We also built upon one of their suggested areas by exploring their framework through the lens of Lockheed Martin Cyber Kill Chain. While we found the concept to be novel and potentially useful, we found challenges replicating the clarity Mireles et al. described. In our research we identify the need for additional research into describing additional components of an attack narrative including the nonlinear nature of cyber-attacks and issues of identity and attribution.","PeriodicalId":43953,"journal":{"name":"IT-Information Technology","volume":null,"pages":null},"PeriodicalIF":0.9,"publicationDate":"2022-02-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"46091062","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Unlocking approximation for in-memory computing with Cartesian genetic programming and computer algebra for arithmetic circuits 用笛卡尔遗传规划和计算电路的计算机代数解锁内存计算中的近似

IF 0.9

IT-Information Technology Pub Date : 2022-02-16 DOI: 10.1515/itit-2021-0042

Saman Froehlich, R. Drechsler

引用次数: 8