These are my blogs

and also my life

论文笔记| Proof-of-Stake Sidechains

2019-07-15 reading S&P2019 区块链

Brief

  • Authors: Peter Gazˇi,Aggelos Kiayias and Dionysis Zindros
  • conference: S&P2019

系统定义区块链中的 side 链的概率,1️以提高区块链的伸缩性和冗余。证明其非常适合使用POS作为共识机制。并将其 ...

Read More

论文笔记| Redactable Blockchain or Rewriting history in Bitcoin and friends

2019-07-12 reading S&P2017 区块链

brief

这篇文章主要引入了 Chameleon Hash 函数。这个函数引入了一对公私钥。使用公钥和消息来产生hash函数。如果不知道私钥,则很难碰撞,但是如果知道私钥,就很容易进行碰撞。

应用于区块链中,则开始产生这样一对秘钥,公钥共享,私钥按照秘密共享的机制使得监督组的部分节点拥有部分私钥。 ...

Read More

论文笔记| Redactable Blockchain in the Permissionless Setting

2019-07-10 reading S&P2019 区块链

Brief

  • Author:Dominic Deuber, Bernardo Magri and Sri Aravinda Krishnan Thyagarajan
  • IEEE S&P 2019

Introductoin

一种基于共识机制的协议,用于解决区块链中非法信息进行预警和和可审计的操 ...

Read More

论文笔记| Towards Practical Differentially Private Convex Optimization

2019-07-10 reading S&P2019 机器学习

Brief

  • Roger Iyengar Carnegie Mellon University
  • Om Thakkar Boston University
  • Joseph P. Near University of California, Berkeley
  • Abhradeep Thakurta ...
Read More

论文笔记| True2F: Backdoor-resistant authentication tokens

2019-07-09 reading S&P2019 system secruity

Brief

  • author: Emma Dauterman, Henry Corrigan-Gibbs, David Mazières, Dan Boneh, Dominic Rizzo
  • From: Stanford and Google

Introduction

双因子认证是目前对抗弱密码等恶 ...

Read More

论文笔记| Why Does Your Data Leak? Uncovering the Data Leakage in Cloud from Mobile Apps

2019-07-09 reading S&P2019 云安全

Brief

  • author: Chaoshun Zuo, Zhiqiang Lin, Yinqian Zhang
  • IEEE S&P 2019

Introduction

  1. 系统评估移动终端使用云存储时候的数据泄露
  2. 编写程序自动化完成评估
  3. 对各种软件进行评估,给出风险报告 ...
Read More

论文笔记| Resident Evil: Understanding Residential IP Proxy as a Dark Service

2019-07-08 reading S&P2019 网络安全

Brief

  • Meeting: S&P 2019
  • Authors: Xianghang Mi, Xuan Feng, Xiaojing Liao, Baojun Liu, XiaoFeng Wang, Feng Qian, Zhou Li, Sumayah Alrwais, Limin ...
Read More

技术摘要| Erpass

2019-06-26 coding

Erpass 一个安全的密码生成软件

原始网站: blog.ertuil.top

项目地址:https://github.com/ertuil/erpass

最近研究各个网站的口令管理。发现主要有两种类型的口令管理。一种是以 1password,lastpass 等为代表的的口令管理软件,其核心思路 ...

Read More

论文笔记| YODA: Enabling computationally intensive contracts on blockchains with Byzantine and Selfish nodes

2019-05-14 reading 区块链

YODA: Enabling computationally intensive contracts on blockchains with Byzantine and Selfish nodes

  • Sourav Das, Vinay Joseph Ribeiro and Abhijeet ...
Read More

论文笔记| Sajin Sasy, Sergey Gorbunov, Christopher W. Fletcher. ZeroTrace: Oblivious Memory Primitives from Intel SGX.

2019-05-14 reading

Sajin Sasy, Sergey Gorbunov, Christopher W. Fletcher. ZeroTrace: Oblivious Memory Primitives from Intel SGX. Network and Distributed Systems Security ...

Read More