GEWU
EN

搜索科普文

输入关键词搜索已发表科普文。

    Disciplines / Research questions

    网络空间安全

    10 个研究主题 · 22 个问题

    补丁发布后漏洞利用加速的时间窗口1 个问题

    1. Dependence-aware modeling of the patching-versus-exploitation race for software vulnerabilities

    差分隐私预算跨多次查询的实际泄漏累积4 个问题

    1. Monitoring-based adaptive differential-privacy defense against query-flooding model extraction at DNN scale and under colluding accounts

    2. Attack-Parameter-to-Budget Calibration for Differentially Private Query Systems: Beyond Count Aggregates Under Repeated, Adaptive, and Auxiliary-Information Attacks

    3. ODP filters with sublinear privacy degradation and efficient approximation of the optimal output-DP composition bound

    4. Closing the privacy-accounting gap for linear queries in interactive differential-privacy query systems (detection, composition semantics, partial-knowledge robustness, and formal defenses against sample-amplification attacks)

    钓鱼检测模型跨语言和跨域迁移失败3 个问题

    1. Generalizable phishing detection across diverse data sources and temporal shifts

    2. Deployment-robust phishing email detection: cross-corpus generalization, prevalence-robust calibration, and elimination of corpus-artifact learning

    3. Script generalization of language-independent phishing webpage detection: performance on non-Latin-script webpages and the mixed-alphabet failure mode

    对抗样本检测器在自适应攻击下的性能坍塌4 个问题

    1. Norm-agnostic robustness and architectural requirements of adversarially retrained adversarial detectors (RADAR)

    2. Robustness of process-based (fingerprint-memory) detection of audio adversarial examples against single-step generation, fingerprint fraud, and attacks on the defense itself

    3. Non-evadable detection of adversarial examples from internal network statistics: existence, construction, and theoretical limits

    4. Completing the Adaptive Evaluation of Adversarial-Example Defenses: the Open Exercises of Tramèr, Carlini, Brendel and Mądry (2020)

    供应链攻击中依赖图风险传播的长尾效应1 个问题

    1. Deep Transitive Dependencies and Code Reachability in the Opportunities and Risks of Technical Leverage in the NPM Ecosystem

    静态分析高误报率的路径敏感性根源2 个问题

    1. Precision, soundness, and scalability gaps in staged path-sensitive static memory-leak detection: the open questions left by SMOKE

    2. Exact observable summaries (strongest necessary / weakest sufficient conditions) in path-sensitive static analysis: lifting the finitary-domain qualification for heap and other non-finite abstraction domains

    联邦学习隐私保护与模型效用的非线性边界2 个问题

    1. Extending the one-local-epoch optimality of locally differentially private federated learning beyond homogeneous, i.i.d., full-participation DP-SGD

    2. Characterizing the near-optimal utility guarantee for privacy-preserving federated learning via parameter distortion beyond the bounded-constant, small-gap, Gaussian-Bernoulli regimes

    漏洞严重度评分与真实利用概率之间的脱钩1 个问题

    1. Longitudinal, ground-truth, and outcome-based validation of impact-weighted vulnerability prioritization (composite KRI vs. EPSS and CVSS)

    软件多样化防御的安全收益与维护成本权衡1 个问题

    1. Calibrating and validating the design-diversity metric framework for redundant fault-tolerant and secure systems

    形式验证规范不完整导致的已验证但不安全问题3 个问题

    1. Generalizing the ZBSAT security assurance framework beyond the Chinese Wall Model: verification and strict-schema-coverage testing of a Z-specified RBAC policy

    2. Trustworthy specification autoformalization: faithfulness evaluation beyond finite test suites and extension to repository-level software

    3. Closing the verified-but-insecure gap in the WPA3 Dragonfly/SAE handshake: extending formally verified leakage-freedom beyond primitive-level secret independence

    返回开放问题