该资源是来自武汉大学0817团队，DataCon 2024软件供应链安全赛道亚军（一等奖）的开源分享，该团队构建了一个针对npm软件包的恶意包检测方法及系统——MalNPMDetector。极其适合开发者、研究者、学生学习和应用。

DataCon24供应链安全赛道亚军源码分享：MalNPMDetector NPM恶意软件包检测

DataCon是国内首个以大数据安全分析为核心的大型竞赛，大赛将竞赛、教学与科研三者紧密结合，致力于提升高校学生以及网络安全从业人员在真实网络中的数据分析水平，全面培养实战型网络安全人才。

数据科学竞赛（DataCon）驱动的网络安全实践课程教学模式探索

该资源是来自武汉大学0817IOTG团队，DataCon2024漏洞分析赛道冠军的开源和解题分享，其开源提供了漏洞情报提取与漏洞挖掘两大核心模块的解决框架，并打包成一个可执行 Docker 镜像压缩包，方便安全研究者和开发者快速部署体验自动化漏洞分析。极其适合开发者、研究者、学生学习和应用。快来 Github 点个 Star ，Fork 并 Watch， 试试吧！希望对大家有所帮助。其开源地址如下

DataCon24漏洞赛道冠军分享：vuln_wp——大模型赋能的漏洞自动化分析全解析

1月4日，备受瞩目的InForSec 2025网络空间安全学术年会暨DataCon2024竞赛颁奖仪式在中国科学院计算技术研究所一层报告厅盛大开幕。

InForSec2025网络空间安全学术年会暨DataCon2024颁奖仪式在京召开

在数据驱动的时代，大数据与人工智能不仅全面覆盖了人们生活的衣食住行等领域，更在重塑世界。然而，数据安全与隐私保护的挑战也日益严峻。

五大赛道全新升级！DataCon2024火热进行中

《黑神话：悟空》作为一款被全球玩家企盼已久的3A游戏，在正式上线前后，就接连遭到各类黑客、网络不法分子的“眷顾”，安全事件更是屡次发生。

《黑神话：悟空》爆火！背后隐藏了这些网络安全“暗战”

软件安全

2024年上半年，天问Python供应链威胁监测模块共捕捉到1000个恶意包。在此期间，两次集中的恶意包攻击事件导致PyPI官方紧急暂停了软件包上传服务。随着攻击者能力的不断提升，对于软件攻击链的安全防护提出了更加严峻的考验。

天问：PyPI 2024年上半年恶意包回顾

蝉鸣半夏，心向网安。中国科学技术大学高新校区，红墙方砖间，一个个怀揣热忱的身影，向阳而行。7月14日至23日，由网安国际学术论坛InForSec主办，中国科学技术大学网络空间安全学院承办，安徽省网络安全协会、国家网络安全教育技术产业融合发展试验区（合肥）、教育部网络空间安全实验实训课程虚拟教研室、复旦大学系统软件与安全实验室、浙江大学智能系统安全实验室、山东大学网络空间安全学院、奇安信集团、蚂蚁集

蝉鸣半夏，心向网安！2024InForSec夏令营圆满落幕

InForSec将于2024年7月14-23日在中国科学技术大学举办“InForSec 2024年大学生夏令营”。本次活动设有导师面对面专题活动和培训课程两大部分，旨在帮助学生提升网络空间安全实战能力和水平，促进网络安全相关方向老师、学生之间的了解和沟通，帮助学生了解网络安全相关的研究内容。

InForSec2024夏令营报名中，大咖开讲，快来围观课程表！

高手云集，实战实训！InForSec2024年网络空间安全大学生夏令营火热报名啦

33rd USENIX Security Symposium

winter submission

USENIX Security 

The USENIX Association is a 501(c)(3) nonprofit organization, dedicated to supporting the advanced computing systems communities and furthering the reach of innovative research. We are known for organizing conferences and publishing research, but our greatest strength lies in building communities in computing systems. We represent the interests of our communities in a variety of ways, including our professional affiliation with the Computing Research Association.

Since 1975, USENIX has brought together the community of engineers, researchers, and practitioners working on the cutting edge of the computing world. USENIX conferences have become the essential meeting grounds for the presentation and discussion of the most advanced information on the development of all aspects of computing systems.

46th IEEE Symposium on Security and Privacy

First deadline

Second deadline

Since 1980, the IEEE Symposium on Security and Privacy has been the premier forum for presenting developments in computer security and electronic privacy, and for bringing together researchers and practitioners in the field.

ACM CCS 2024

Paper submission deadline

Submission Deadline for Proposals

Suggested Submission Deadline for Workshops

ACM CCS

The ACM Conference on Computer and Communications Security (CCS) is the flagship annual conference of the Special Interest Group on Security, Audit and Control (SIGSAC) of the Association for Computing Machinery (ACM). The conference brings together information security researchers, practitioners, developers, and users from all over the world to explore cutting-edge ideas and results. 

NDSS Symposium 2024

Summer Review Cycle

Fall Review Cycle

NDSS

The Network and Distributed System Security (NDSS) Symposium fosters information exchange among researchers and practitioners of network and distributed system security.

Originally the Workshop on Network and Distributed System Security, the NDSS Symposium was first held in 1993 in San Diego, California. It was organized as a workshop of the Privacy and Security Research Group of the Internet Research Task Force (IRTF) and was hosted by the Internet Society and Lawrence Livermore National Laboratory.

The Internet Society has proudly hosted the NDSS Symposium ever since to foster the next generation of Internet security experts and to support open, accessible, and collaborative security to research to help strengthen the Internet.

The symposium is now a five-day hybrid event including three days of the main NDSS Symposium and two days of co-located workshops and symposia. Each event brings together hundreds of security educators, researchers and practitioners from all over the world. The event is designed to encourage and enable the Internet community to apply, deploy, and advance the state of practical security technologies.

ACM ASIACCS 2024

1st Round

2nd Round

ACM ASIACCS

Building on the success of ACM Conference on Computer and Communications Security (CCS), the ACM Special Interest Group on Security, Audit, and Control (SIGSAC) formally established the annual ACM Asia Conference on Computer and Communications Security (ASIACCS). The inaugural ASIACCS was held in Taipei (2006). Since then ASIACCS has been held in Singapore (2007), Tokyo (2008), Sydney (2009), Beijing (2010), Hong Kong (2011), Seoul (2012), Hangzhou (2013), Kyoto (2014), Singapore (2015), Xi’an (2016), Abu Dhabi (2017), Songdo (2018), Auckland (2019), Taipei (2020, virtual), Hong Kong (2021, virtual) and Nagasaki (2022, hybrid).

DSN 2024

Poster First Submission Deadline

年度 IEEE/IFIP 可靠系统和网络国际会议 - (DSN)

PAM2024

Paper submission

The Passive and Active Measurement (PAM) conference brings together researchers and operators to discuss novel and emerging work in the area of network measurement and analysis.

SIGCOMM 2024

Abstract registration deadline

SIGCOMM

ACM SIGCOMM 是 ACM 数据通信特别兴趣小组 (SIGCOMM) 的旗舰年度会议

ACM IMC 2024

Paper registration

ACM IMC

The Internet Measurement Conference (IMC) is a three-day event focusing on Internet measurement and analysis

ACSAC 2022

https://www.acsac.org/2022/submissions/papers/

ACSAC

ASE 2023

The IEEE/ACM Automated Software Engineering (ASE) Conference series is the premier research forum for automated software engineering. Each year, it brings together researchers and practitioners from academia and industry to discuss foundations, techniques, and tools for automating the analysis, design, implementation, testing, and maintenance of large software systems.

战略支援部队信息工程大学毕业论文

毕业论文

信息工程大学

2019 5th IEEE International Conference on Computer and Communications (ICCC)

会议

ICCC

ICCC会议发起于2015年，由四川省电子学会主办，西南交通大学, 电子科技大学，四川大学，成都理工大学，成都信息工程大学等协办。

Applied Science

Applied Sciences（期刊）

Applied Sciences is an international, peer-reviewed, open access journal on all aspects of applied natural sciences published semimonthly online by MDPI.

Journal

Security and Communication Networks（期刊）

ecurity and Communication Networks is an international journal publishing original research and review papers on all security areas including network security, cryptography, cyber security, etc. The emphasis is on security protocols, approaches and techniques applied to all types of information and communication networks, including wired, wireless and optical transmission platforms.

The journal provides a prestigious forum for the R&D community in academia and industry working at the inter-disciplinary nexus of next generation communications technologies for security implementations in all network layers.

Answering the highly practical and commercial importance of network security R&D, submissions of applications-oriented papers describing case studies and simulations are encouraged as well as research analysis-type papers.

Abstract—Large Language Models (LLMs) have been suggested for use in automated vulnerability repair, but benchmarks showing they can consistently identify security-related
bugs are lacking.

LLM技术浪潮下，“漏挖人”能否保住饭碗？

包管理平台是开发者获取、分享和管理代码依赖的平台，使得程序员不用重复造轮子，让开发更高效。随着开源生态的日益繁荣，包管理平台受到越来越多开发者的青睐，平台域名排名也随之攀升。然而，这种高流量和高关注度也吸引了不法推广者的目光，成为被滥用的目标。

【论文分享】基于包管理平台的黑帽搜索引擎优化

本文提出了一种通用的基于嵌套属性图的数据绑定漏洞挖掘方法，自研的DIVER工具在Spring框架、Grails框架中发现了多个数据绑定漏洞，包含著名的Spring4Shell、Grails Pre-Auth RCE等高危漏洞。

优秀论文推荐：一种通用的基于嵌套属性图的数据绑定漏洞挖掘方法

该工作提出了一种全新的软硬件协同的安全架构，来从根源上防护 DMA 攻击，可扩展到异构架构，保护GPU/XPU等异构算力安全。

DMAAUTH：针对DMA攻击的防护架构

本文介绍的这项研究，围绕Web 3.0中的首次“恶意收购”真实事件展开了探讨，也许能为读者带来一些思考。

为他人做嫁衣裳：Web 3.0中的投票治理及其安全

该工作已经被软件工程领域国际顶级会议FSE 2024接收。该研究是第一个关于故障词元的全面研究，并且研究中针对故障词元的检测方法为减少大模型中与分词（tokenizer）相关的错误提供了有意义的见解。

调皮的词元：大模型中‘故障词元’的检测和分类

K-LEAK工具是一种基于图的数据流分析框架，针对Linux内核中的内存漏洞（UAF/OOB），辅助生成infoleak的利用，绕过内核KASLR防护。本文将infoleak利用生成问题看作是数据流搜索问题，通过对内存错误引入的非预期数据流，以及现有内存错误如何转化为新的内存错误进行建模，K-LEAK能够系统性的搜索出多步infoleak数据流路径。

K-LEAK：Linux内核infoleak利用自动生成

今天分享的论文主题为DoH性能测量，由来自伊利诺伊大学厄巴纳-香槟分校和斯坦福大学的研究人员共同完成。该论文使用代理网络对DoH和Do53的性能进行了测量，比较了四家公共DoH提供商在各方面的表现。此外，作者还分析了DoH和Do53解析时间之间的地理差异及可能原因，总结了对DoH生态系统的潜在改进方案。该论文发表于国际网络测量领域顶级会议ACM IMC 2021。

【论文分享】对全球范围DNS-over-HTTPS的性能测量

五月的最后一期论文推荐，我们为大家介绍复旦大学和约翰霍普金斯大学的研究人员合作发表、关于人脸识别安全威胁的IEEE S&P 2023论文 Understanding the (In)Security of Cross-side Face Verification Systems in Mobile Apps

G.O.S.S.I.P 阅读推荐 2023-05-31 真假人脸

今天要给大家推荐的论文是来自清华大学软件学院Wingtecher Lab投稿的最新研究Bleem: Packet Sequence Oriented Fuzzing for Protocol Implementations，目前该工作已发表于USENIX Security 2023。

G.O.S.S.I.P 阅读推荐 2023-05-30 Bleem

谷雅聪

应凌云

蒲英元

胡霄

柴华君

王睿敏

Xing Gao

段海新

软件供应链安全

Investigating Package Related Security Threats in Software Registries

Yugeng Liu

Zheng Li

Michael Backes

Yun Shen

Yang Zhang

Dataset distillation has emerged as a prominent technique to improve data efficiency when training machine learning models. It encapsulates the knowledge from a large dataset into a smaller synthetic dataset. A model trained on this smaller distilled dataset can attain comparable performance to a model trained on the original training dataset. However, the existing dataset distillation techniques mainly aim at achieving the best trade-off between resource usage efficiency and model utility. The security risks stemming from them have not been explored. This study performs the first backdoor attack against the models trained on the data distilled by dataset distillation models in the image domain. Concretely, we inject triggers into the synthetic data during the distillation procedure rather than during the model training stage, where all previous attacks are performed. We propose two types of backdoor attacks, namely NAIVEATTACK and DOORPING. NAIVEATTACK simply adds triggers to the raw data at the initial distillation phase, while DOORPING iteratively updates the triggers during the entire distillation procedure. We conduct extensive evaluations on multiple datasets, architectures, and dataset distillation techniques. Empirical evaluation shows that NAIVEATTACK achieves decent attack success rate (ASR) scores in some cases, while DOORPING reaches higher ASR scores (close to 1.0) in all cases. Furthermore, we conduct a comprehensive ablation study to analyze the factors that may affect the attack performance. Finally, we evaluate multiple defense mechanisms against our backdoor attacks and show that our attacks can practically circumvent these defense mechanisms.

Backdoor Attacks Against Dataset Distillation

In this paper, we report MaginotDNS, a powerful cache poisoning attack against DNS servers that simultaneously act as forwarder and recursive resolver (termed as CDNS). The attack is made possible through exploiting vulnerabilities in the bailiwick checking algorithms, one of the cornerstones of DNS security since the 1990s, and affects multiple versions of popular DNS software, including BIND and Microsoft DNS. Through field tests, we find that the attack is potent, allowing attackers to take over entire DNS zones, even including Top-Level Domains (e.g., .com and .net). Through a large-scale measurement study, we also confirm the extensive usage of CDNSes in real-world networks (up to 41.8% of our probed open DNS servers) and find that at least 35.5% of all CDNSes are vulnerable to MaginotDNS. After interviews with ISPs, we show a wide range of CDNS use cases and real-world attacks. We have reported all the discovered vulnerabilities to DNS software vendors and received acknowledgments from all of them. 3 CVE-ids have been assigned, and 2 vendors have fixed their software. Our study brings attention to the implementation inconsistency of security checking logic in different DNS software and server modes (i.e., recursive resolvers and forwarders), and we call for standardization and agreements among software vendors.

天问：PyPI 2024年上半年恶意包回顾

蝉鸣半夏，心向网安！2024InForSec夏令营圆满落幕

一种通用的基于嵌套属性图的数据绑定漏洞挖掘方法

资讯 | 刘保君：互联网域名系统安全国际学术研究前沿及趋势分析

五大赛道全新升级！DataCon2024火热进行中

Selected articles

DataCon24供应链安全赛道亚军源码分享：MalNPMDetector NPM恶意软件包检测

数据科学竞赛（DataCon）驱动的网络安全实践课程教学模式探索

DataCon24漏洞赛道冠军分享：vuln_wp——大模型赋能的漏洞自动化分析全解析

LLM技术浪潮下，“漏挖人”能否保住饭碗？

USENIX Security

S&P

ACM CCS

NDSS

ACM ASIACCS

DSN

PAM

SIGCOMM

ACM IMC

ACSAC

ASE

信息工程大学

ICCC

Applied Sciences（期刊）

Security and Communication Networks（期刊）

LLM技术浪潮下，“漏挖人”能否保住饭碗？

【论文分享】基于包管理平台的黑帽搜索引擎优化

优秀论文推荐：一种通用的基于嵌套属性图的数据绑定漏洞挖掘方法

DMAAUTH：针对DMA攻击的防护架构

为他人做嫁衣裳：Web 3.0中的投票治理及其安全

调皮的词元：大模型中‘故障词元’的检测和分类

K-LEAK：Linux内核infoleak利用自动生成

【论文分享】对全球范围DNS-over-HTTPS的性能测量

G.O.S.S.I.P 阅读推荐 2023-05-31 真假人脸

G.O.S.S.I.P 阅读推荐 2023-05-30 Bleem

Academic and community activities

Su	Mo	Tu	We	Th	Fr	Sa
29	30	31	1	2	3	4
5	6	7	8	9	10	11
12	13	14	15	16	17	18
19	20	21	22	23	24	25
26	27	28	29	30	1	2
3	4	5	6	7	8	9

Su	Mo	Tu	We	Th	Fr	Sa
29	30	31	1	2	3	4
5	6	7	8	9	10	11
12	13	14	15	16	17	18
19	20	21	22	23	24	25
26	27	28	29	30	1	2
3	4	5	6	7	8	9

Su	Mo	Tu	We	Th	Fr	Sa
29	30	31	1	2	3	4
5	6	7	8	9	10	11
12	13	14	15	16	17	18
19	20	21	22	23	24	25
26	27	28	29	30	1	2
3	4	5	6	7	8	9