Browsing by Author "Zhang, Zhi-Kai"
Now showing 1 - 4 of 4
- Results Per Page
- Sort Options
Item type:Item, Identifying and Authenticating IoT Objects in a Natural Context(2015-08-01) ;Zhang, Zhi-Kai ;Cho, Michael Cheng Yi ;Wu, Zong-Yu ;Shieh, Shiuhpyng-Winston資訊工程學系A proposed property-aware name service simultaneously supports what, where, and when properties of each IoT object through unique, text-based, and human-readable identity assignments.Item type:Item, IoT Security: Ongoing Challenges and Research Opportunities(2014-01-01) ;Zhang, Zhi-Kai ;Cho, Michael Cheng Yi ;Wang, Chia-Wei ;Hsu, Chia-WeiChen, Chong-KuanThe Internet of Things (IoT) opens opportunities for wearable devices, home appliances, and software to share and communicate information on the Internet. Given that the shared data contains a large amount of private information, preserving information security on the shared data is an important issue that cannot be neglected. In this paper, we begin with general information security background of IoT and continue on with information security related challenges that IoT will encountered. Finally, we will also point out research directions that could be the future work for the solutions to the security challenges that IoT encounters.Item type:Item, Penetration Testing in the IoT Age(2018-04-01) ;Chen, Chung-Kuan ;Zhang, Zhi-Kai ;Lee, Shan-Hsin ;Shieh, Shiuhpyng資訊工程學系Internet of Things (IoT) objects offer new services but also pose new security threats. Due to the heterogeneity, large number, and resource constraints of these objects, new penetration testing tools and techniques are needed to complement defensive mechanisms.Item type:Item, Web Application Security: Threats, Countermeasures, and Pitfalls(2017-06-01) ;Huang, Hsiu-Chuan ;Zhang, Zhi-Kai ;Cheng, Hao-Wen ;Shieh, Shiuhpyng Winston交大名義發表Penetration testing is a crucial defense against common web application security threats such as SQL injection and cross-site scripting attacks. A proposed web vulnerability scanner automatically generates test data with combinative evasion techniques, significantly expanding test coverage and revealing more vulnerabilities.