With emerging of cloud and edge computing, it is popular to store Electronic Medical Records (EMRs) on a remote cloud. Furthermore, to share the EMRs stored in the cloud, attribute-based encryption (ABE) can provide a fine-grained access control strategy. However, in ABE, the finer the access control is, the bigger the number of required attributes is. Accordingly, it requires the higher computation costs. In this paper, to reduce the burden of patients, we first present a verifiable outsourced ABE scheme with the help of edge servers and fog nodes, in which edge servers are fully responsible for the encryption of ABE while fog nodes assist data users to perform the corresponding decryption. Furthermore, to protect the privacy of data owner, we introduced the proxy re-encryption algorithms, which still can achieve dual access control for EMRs. What's more, to detect the honesty of edge servers and the cloud, we adopt an aggregated digital signature to guarantee the correctness of the EMRs initially encrypted by data owner. The experimental results and security proofs show that our scheme has higher computational efficiency and achieves more fine-grained access control.
中国科学技术大学郭光灿院士团队在量子密钥分发研究中取得重要进展.该团队韩正甫、王双、银振强、陈巍与合作者提出了一种无需主动调制的新型量子密钥分发实现方案并完成了实验验证,为实现高现实安全的量子密钥分发系统提供了新思路.该成果于2023年9月13日发表在国际学术期刊《Physical Review Letters》.
近日,山东大学计算机科学与技术学院智能计算研究所在分布式智能、智能安全及隐私保护等领域多项研究成果分别发表于期刊IEEE/ACM TON、IEEE TKDE以及ACM TOSN,第一作者以及通讯作者单位均为山东大学.
物联网设备数量迅速增多使得针对物联网的攻击越来越多,网络安全人员急需使用主动防御技术将被动转化为主动.SSH(Secure Shell)蜜罐技术的引入让防御方能够捕获攻击者的交互信息,对物联网安全具有十分重要的意义.然而,传统蜜罐由于特征或行为模式固定,很容易被攻击者识别和利用.文章从博弈论的角度出发,建立蜜罐与攻击者的交互模型,并使用SAC(Soft Actor-Critic)算法进行求解,通过计算得到防御方的最佳响应策略.仿真结果表明,将强化学习与博弈论相结合的自适应蜜罐能够在多种场景下快速找出最优交互策略,并且加入策略网络的强化学习方法与攻击者的交互收益要优于仅基于价值网络的传统强化学习方法.
10月13日,由中国计算机学会主办,中国计算机学会计算机安全专业委员会和奇安信科技集团股份有限公司共同承办的"第38次全国计算机安全学术交流会暨专委会换届大会"在湖南长沙成功举办.
