15 resultados para intrusion detection
em Chinese Academy of Sciences Institutional Repositories Grid Portal
Resumo:
将密码协议与密码算法视为一个系统,建立了密码协议系统的一种安全模型.基于假设/保证的组合推理技术提出了新的假设/保证推理规则和假设/保证推理算法,证明了该规则的完备性,实现了密码协议系统的模型检查,并重点解决了系统分解问题、假设函数的设定问题、进程+逻辑的系统特性描述问题等难题.以kerberos密码协议系统为例,利用该安全模型和假设/保证推理技术对密码协议系统进行了安全验证.
Resumo:
异常检测技术假设所有的入侵行为都会偏离正常行为模式.尝试寻找一种新的异常入侵检测模型改善准确性和效率.模型利用应用程序的系统调用序列,通过基因规划建立了正常行为模式.模型的一个例程管理一个进程.当它发现进程的实际系统调用序列模式偏离正常的行为模式时,会将进程设标记为入侵,并采取应急措施.还给出了基因规划的适应度计算方法以及两个生成下一代的基本算子.通过与现有一些模型的比较,该模型具有更好的准确性和更高的效率.
Resumo:
移动自组网络是一种不需要基础设施的网络.在这种网络中,移动节点是自组织的,并且需要互相提供网络路由服务.自组网络非常容易受到攻击,特别是内部攻击.提出了一个基于模糊行为分析的入侵检测方案,以检测网络内部的路由攻击.利用邻接节点监测,通过分析节点路由行为与路由规范的偏差,发现恶意行为.在数据分析的过程中引入了模糊路由行为分析的方法,大大降低了误报率.仿真实验表明,该方案能有效地检测出路由入侵行为,而将误报率控制在一个较低的水平.
Resumo:
随着网络技术的飞速发展,网络入侵检测系统需要处理大量的数据,处理能力的缺乏会引起入侵事件的漏报或误报,提高入侵检测系统的处理能力是目前急需解决的关键问题.AODIDS是一个由移动代理作为优化组件、多个分析结点及探测结点组成的可自动进行优化的分布式网络入侵检测系统.AODIDS的优化组件执行系统的性能评估,制定相应的优化策略,在规定的系统检测正确率的前提下平衡分配网络流量,从而尽可能地发挥整个系统的处理能力.
Resumo:
利用系统漏洞实施攻击是目前计算机安全面临的主要威胁.本文提出了一种基于进程行为的异常检测模型.该模型引入了基于向量空间的相似度计算算法和反向进程频率等概念,区分了不同系统调用对定义正常行为的不同作用,提高了正常行为定义的准确性;该模型的检测算法针对入侵造成异常的局部性特点,采用了局部分析算法,降低了误报率.
Resumo:
针对传统分布式入侵检测系统组件之间依赖程度大、系统不够健壮且入侵检测系统自身结构固定不能适应入侵的变化的问题,提出了一种基于Agent的自适应的分布式入侵检测系统(简称AAA-DIDS)·AAADIDS采用Agent概念重新构造系统的组件,改进了分布式入侵检测系统由于高层节点单一无冗余而产生的可靠性差的缺陷,从构造上克服了分布式入侵检测系统的脆弱性·同时,AAADIDS系统采用智能技术构建了自适应的入侵检测系统模型,增加了系统应对入侵行为变化的智能性·AAA-DIDS系统相对于传统的分布式入侵检测系统有效地提高了系统自身的可靠性和针对外界变化的适应能力·
Resumo:
Reliable turbulent channel flow databases at several Reynolds numbers have been established by large eddy simulation (LES), with two of them validated by comparing with typical direct numerical simulation (DNS) results. Furthermore, the statistics, such as velocity profile, turbulent intensities and shear stress, were obtained as well as the temporal and spatial structure of turbulent bursts. Based on the LES databases available, the conditional sampling methods are used to detect the structures of burst events. A method to deterimine the grouping parameter from the probability distribution function (pdf) curve of the time separation between ejection events is proposed to avoid the errors in detected results. And thus, the dependence of average burst period on thresholds is considerably weakened. Meanwhile, the average burst-to-bed area ratios are detected. It is found that the Reynolds number exhibits little effect on the burst period and burst-to-bed area ratio.
Detection and Characterization of Long-Pulse Low-Velocity Impact Damage in Plastic Bonded Explosives
Resumo:
Damage not only degrades the mechanical properties of explosives, but also influences the shock sensitivity, combustion and even detonation behavior of explosives. The study of impact damage is crucial in the vulnerability evaluation of explosives. A long-pulse low-velocity gas gun with a gas buffer was developed and used to induce impact damage in a hot pressed plastic bonded explosive. Various methods were used to detect and characterize the impact damage of the explosive. The microstructure was examined by use of polarized light microscopy. Fractal analysis of the micrographs was conducted by use of box counting method. The correlation between the fractal dimensions and microstructures was analyzed. Ultrasonic testing was conducted using a pulse through-transmission method to obtain the ultrasonic velocity and ultrasonic attenuation. Spectra analyses were carried out for recorded ultrasonic signals using fast Fourier transform. The correlations between the impact damage and ultrasonic parameters including ultrasonic velocities and attenuation coefficients were also analyzed. To quantitatively assess the impact induced explosive crystal fractures, particle size distribution analyses of explosive crystals were conducted by using a thorough etching technique, in which the explosives samples were soaked in a solution for enough time that the binder was totally removed. Impact induces a large extent of explosive crystal fractures and a large number of microcracks. The ultrasonic velocity decreases and attenuation coefficients increase with the presence of impact damage. Both ultrasonic parameters and fractal dimension can be used to quantitatively assess the impact damage of plastic bonded explosives.
Resumo:
Wavelet Variable Interval Time Average (WVITA) is introduced as a method incorporating burst event detection in wall turbulence. Wavelet transform is performed to unfold the longitudinal fluctuating velocity time series measured in the near wall region of a turbulent boundary layer using hot-film anemometer. This unfolding is both in time and in space simultaneously. The splitted kinetic of the longitudinal fluctuating velocity time series among different scales is obtained by integrating the square of wavelet coefficient modulus over temporal space. The time scale that related to burst events in wall turbulence passing through the fixed probe is ascertained by maximum criterion of the kinetic energy evolution across scales. Wavelet transformed localized variance of the fluctuating velocity time series at the maximum kinetic scale is put forward instead of localized short time average variance in Variable Interval Time Average (VITA) scheme. The burst event detection result shows that WVITA scheme can avoid erroneous judgement and solve the grouping problem more effectively which is caused by VITA scheme itself and can not be avoided by adjusting the threshold level or changing the short time average interval.
Resumo:
It is well known that noise and detection error can affect the performances of an adaptive optics (AO) system. Effects of noise and detection error on the phase compensation effectiveness in a dynamic AO system are investigated by means of a pure numerical simulation in this paper. A theoretical model for numerically simulating effects of noise and detection error in a static AO system and a corresponding computer program were presented in a previous article. A numerical simulation of effects of noise and detection error is combined with our previous numeral simulation of a dynamic AO system in this paper and a corresponding computer program has been compiled. Effects of detection error, readout noise and photon noise are included and investigated by a numerical simulation for finding the preferred working conditions and the best performances in a practical dynamic AO system. An approximate model is presented as well. Under many practical conditions such approximate model is a good alternative to the more accurate one. A simple algorithm which can be used for reducing the effect of noise is presented as well. When signal to noise ratio is very low, such method can be used to improve the performances of a dynamic AO system.
Simultaneous Laser-Induced Fluorescence And Contactless-Conductivity Detection For Microfluidic Chip
Resumo:
A combined detection system involving simultaneous LIF and contactless-conductometric measurements at the same place of the microfluidic chip was described. The LIF measurement was designed according to the confocal principle and a moveable contactless-conductivity detector was used in (CD)-D-4. Both measurements were mutually independent and advantageous in analyses of mixtures. Various experimental parameters affecting the response were examined and optimized. The performances were demonstrated by simultaneous detection of Rhodamine B. And the results showed that the combined detection system could be used sensitively and reliably. (C) 2008 Yong Yu. Published by Elsevier B.V. on behalf of Chinese Chemical Society. All rights reserved.