ID 原文 译文
46536 针对这种攻击行为，当前主要的隐私保护方法是进行属性泛化。 In order to cope with this attack, the main scheme in privacy protection is to generalize the attribute and achieve attribute anonymity.
46537 然而，已有的属性泛化方法一般假设存在一个可信的第三方服务器对参与匿名用户的属性进行寻找与比较，而这个第三方服务器很可能因为攻击焦点或服务瓶颈问题变得不再可信。 However, algorithms of this type usually assumes a trusted third party (TTP) which provides the service of similarity attribute finding and comparing, and it is unpractical in the real environment, as the TTP may become the point of attack or the bottleneck of service and it cannot be considered as the trusted one all the time.
46538 针对攻击者可能使用的用户属性进行分析攻击以及第三方服务器潜在的不可信问题，提出一种基于属性基加密（CP-ABE, ciphertext policy attribute based encryption）的方法， Thus, to cope with the correlation inference attack as well as the semi-trusted third party, ciphertext policy attribute based encryption (CP-ABE) and users collaboration based attribute anonymous scheme was proposed.
46539 通过用户协作完成对用户属性的匿名操作， In this scheme, the user coupled achieve location and attribute anonymity.
46540 并且整个过程中第三方服务器以及协作用户无法获知该用户任何隐私信息。 Furthermore, this scheme could also provide security for attacks from the semi-trusted third party as well as semi-trusted collaborative users.
46541 最后，安全性分析和实验验证进一步证明了所提方法具有较高的隐私保护效力和算法执行效率。 At last, security analysis and the experiment results further verify the effectiveness of privacy protection and the efficiency of algorithm execution.
46542 针对虚拟机动态迁移面临的虚拟机信息泄露的安全问题，引入内存动态保护技术 SGX，基于 KVM 虚拟化环境，提出一种动态迁移安全增强方法。 The virtual machine may face the problem of information leakage in live migration. Therefore, a dynamicmemory protection technique SGX was introduced and a security enhancement live migration method based on KVM environment was proposed.
46543 在迁移两端构建以 SGX 技术为核心的硬件隔离的安全执行环境， Firstly, on both sides of migration, a hardware-isolated secure execution environment centered SGX was built.
46544 保障加密、完整性度量等安全操作和秘密数据的安全。 It guaranteed the security of operations like encryption and integrity measurement and also ensured the security of private data.
46545 通过迁移双方的安全执行环境之间的远程证明，建立一个用于传输迁移数据的加密信道， An encrypted channel to transfer migration data based on the remote attestation between the secure execution environments of both migration sides was constructed.