浅析基于电子商务网络安全PKI技术的角色访问控制模型

文本提出了一种区别于传统自主访问控制策略和强制访问控制策略的RBAC网络安全策略,并提出了RBAC的面向对象模型,实现用户身份认证与访问权限的逻辑分离,且易于控制,既能有效的改进系统安全性能,又极大地减少了权限管理的负担。     

Static extracting method of software intended behavior based on API functions invoking

The method of extracting and describing the intended behavior of software precisely has become one of the key points in the fields of software behavior＇s dynamic and trusted authentication. In this paper, the author proposes a specified measure of extracting SIBDS （software intended behaviors describing sets） statically from the binary executable using the software＇s API functions invoking, and also introduces the definition of the structure used to store the SIBDS in detail. Experimental results demonstrate that the extracting method and the storage structure definition offers three strong properties： （i） it can describe the software＇s intended behavior accurately; （ii） it demands a small storage expense; （iii） it provides strong capability to defend against mimicry attack.     

Pierre Duhem’s virtue epistemology

Duhem’s concept of ‘good sense’ is central to his philosophy of science, given that it is what allows scientists to decide between competing theories. Scientists must use good sense and have intellectual and moral virtues in order to be neutral arbiters of scientific theories, especially when choosing between empirically adequate theories. I discuss the parallels in Duhem’s views to those of virtue epistemologists, who understand justified belief as that arrived at by a cognitive agent with intellectual and moral virtues, showing how consideration of Duhem as a virtue epistemologist offers insights into his views, as well as providing possible answers to some puzzles about virtue epistemology. The extent to which Duhem holds that the intellectual and moral virtues of the scientist determine scientific knowledge has not been generally noticed.