网络威胁态势预测的抗体虚警概率阈值估计

对网络攻击信号检测中,需要对网络威胁态势预测的抗体虚警概率阈值估计,提高攻击信号检测性能。传统方法采用伪随机时频跳变的信息容量估计方法实现阈值估计和攻击信号检测,当攻击信号为非线性谐振信号时,检测性能不好。提出一种改进的网络威胁态势预测的抗体虚警概率阈值估计算法。构建多路复用器输入输出网络威胁态势预测算法,通过病毒信息特征预处理为免疫性分析提供信息特征数据基础。得到网络跳变向量和观测向量的标准正态阈值,将网络接收端和发送端数据的信息熵作为信道传递向量函数,在人工免疫进化过程中实现对免疫节点的抗体的虚警概率阈值估计,提高网络攻击信号的检测性能,降低网络威胁态势抗体虚警概率。仿真实验得出,该算法得到的估计结果精确,有效提高了攻击信号的检测性能,确保网络安全。     

基于随机共振概率密度特征阈值的入侵检测

网络入侵信号表现为一种多频非线性微弱信号,传统的随机共振检测方法受弱信号幅度和临界阈值约束,检测性能受限。提出一种采用随机共振概率密度特征确定信号检测临界阈值的方法,建立网络入侵信号自适应随机共振检测系统,把多频网络入侵信号采用EMD分解的方法分解为高频和低频信号两部分,使每个频段满足随机共振条件。采用相轨迹过零周期数相变判别算法提取随机共振概率密度特征,确定检测系统的临界阈值,实现对入侵信号的准确判别和检测。仿真实验表明,采用该算法进行网络入侵信号检测,能有效检测出多频非线性微弱入侵信号,检测概率具有明显提高,漏检和误报概率降低。     

Lorenz混沌异步跟踪深度伪装网络攻击信号最优检测

提出采用Lorenz混沌系统异步跟踪优化期望最大化高斯混合模型算法实现对低信噪比下深度伪装的网络攻击信号最优检测。通过提取待检测网络数据流参数向量和正常数据流参数向量的差值为特征,使用高斯混合模型并与期望最大化算法相结合,设计Lorenz混沌异步跟踪检测算法,对网络数据流进行建模和检测。仿真结果表明改进的检测算法能有效去除不是攻击信号的伪峰,相比Hough变化检测算法,能更加正确地检测非法攻击信号,信噪比为-15dB下,不同异步攻击中的检测概率就能达到100%,实现检测性能最优,尤其适用于信噪比极低的深度伪装网络攻击环境中对攻击信号的检测。研究成果为网络安全防御及应用具有巨大的理论参考价值。     

数据挖掘下差异设备的IPv6访问安全控制

对差异设备中的底层IPv6网络安全检测模块的研究中,传统网络安全检测方法在应用层对攻击进行识别和拦截,无法保证用户的数据安全,并且识别新攻击速度慢,拦截概率低。为此提出一种基于数据挖掘融合IPSec的安全检测模块,面向用户数据安全,采用K-means数据融合算法提取入侵数据特征,建立模型库,实施拦截。通过模拟多种攻击模式对提出的算法和传统算法进行性能比较,结果显示,所提算法能够在更短的时间内,提取攻击特征,建立模型库,并且在相同次数的攻击下,模块对攻击具有更高的检测概率,平均高于传统方法15%,显示了优越的检测性能。     

正态谐振网络病毒连续攻击下的重叠检测算法

新型的网络病毒的入侵和传播以正态谐振方式进行连续攻击,检测困难,需要对病毒攻击进行有效检测。传统的检测方法采用干扰攻击定位状态转移特征提取的层次性检测算法实现对病毒连续攻击的检测,算法没能自适应求解连续攻击下的特征选择参数,检测性能不好。提出一种基于窄带信号频谱偏移修正的正态谐振网络病毒连续攻击下的重叠检测算法。采用链重叠检测和向量化运算模拟正态谐振网络病毒的攻击特征和相关性质,实现对病毒的检测,通过Langevin方程描述,正态谐振网络的病毒连续攻击表现为一种双稳态非线性驱动多频共振模型,采用窄带信号频谱偏移修正方法,计算得到病毒节点连接概率以及个体的感染率,提高检测性能。仿真结果表明,该算法对病毒传播有较好的抑制性,提高了对网络病毒连续攻击下的检测性能和重叠检测能力。     

恶意干扰网络病毒的盲频谱检测算法

恶意干扰下的网络病毒信息具有较强的高斯随机性和带宽性,传统的时频分析方法及小波特征检测方法难以实现对该类病毒入侵的有效检测。提出一种基于盲频谱检测的恶意干扰下网络病毒检测算法。构建了恶意干扰下的网络病毒入侵的信号模型构建,采用高斯平滑滤波算法进行干扰抑制预处理,提取滤波后的恶意干扰下病毒数据的盲频谱特征,以此为数据基础实现对网络入侵的准确检测。仿真结果表明,采用该文算法进行网络病毒检测识别准确度较高,性能优越,保障了网络安全。     

改进的阵元域波束形成网络纠缠入侵检测算法

对传统的波束域波束形成进行改进,提出一种改进的阵元域波束形成算法检测网络纠缠入侵信号。把传统的波束域旋转矢量的变换到阵元域中改善阵元域自适应算法的性能,利用纠缠入侵信号的特征值大于噪声的特征值这一性能,采用空间协方差矩阵逆的高阶次幂来逼近信号子空间,将求得权矢量投影于改进的阵元域的特征信号子空间。将求得权矢量投影于改进的阵元域的特征信号子空间,实现对网络纠缠入侵信号的检测。仿真实验表明,提出的改进的阵元域波束形成信号检测算法具有较好的自适应检测性能,计算量和信号检测稳健性有明显改善,在网络入侵检测中具有较好的工程实用价值。     

基于粒子滤波的网络入侵相频特征提取算法

通过对网络入侵特征的优化提取,提高网络入侵的检测能力。传统方法采用粒子群进化方法提取网络入侵信号的能量信息特征,在对粒子的位置进行调整过程中对干扰信息的滤波性能不好,降低了检测性能。提出基于优化粒子滤波模糊网络入侵相频特征提取算法。仿真结果表明,采用该算法进行模糊网络入侵特征提取,通过粒子滤波,能有效抑制合法数据的干扰,提高网络入侵的检测性能。     

引入合同变换矩阵的网络攻击信号盲分离算法

对网络攻击信号进行盲分离,实现对攻击信号的准确有效检测。传统的网络攻击信号检测算法使用时频分析方法,提取非平稳群攻击信号的时频特征,实现信号检测,但算法把网络入侵检测正确率作为约束目标函数进行同步最优特征子集求解,复杂度较高,提出一种引入合同变换矩阵的网络攻击信号盲分离算法。采用时频分析Viterbi算法,得到信号谱的平均频率等于瞬时频率的时间平均,根据合同变换矩阵,对攻击信号进行离散数据解析化处理,构建网络攻击信号的解析模型,得到网络统计信号在多复变边界条件下的时频特征,实现盲分离算法改进。仿真实验表明,该算法能有效实现对网络攻击信号的盲分离,盲分离结果能准确反映网络攻击信号的内部特征,提高了对网络攻击信号的检测能力,对攻击信号的检测性能有所提高,保证了网络安全。     

Netfilter框架下多频入侵信号波束响应分布特征分析

在Netfilter框架下,由于网络的自组织性和开放性,导致网络受到入侵的概率增大,Netfilter框架下入侵信号具有多频特征,对Netfilter框架下多频入侵信号进行准确检测的基础是进行特征分析,传统方法采用时频特征分析方法进行入侵检测,无法有效定位多频入侵信号的宽带时频特征,提出一种基于波束响应分布特征分析Netfilter框架下多频入侵信号检测方法。进行Netfilter框架下的网络入侵模型进行数学分析和信号分析,提取Netfilter框架下多频入侵信号波束响应分布特征,对已解码的Net-filter下的多频入侵特征和WZ帧进行内插值分析,由此实现入侵检测,仿真结果表明,采用此方法进行多频入侵检测的准确度较高,性能优越,在网络安全防护等领域具有较好的应用价值。     

To serve and promote science development via innovation

CAS should stick to the principle of rendering service to, and giving impetus for, the development of China＇s science enterprise by making S＆T innovations, said CAS President LU Yongxiang. The CAS president made the remarks in a recent talk to communicate the gist of the winter session of the Party＇s Leading-member Group at CAS, which was held from 7 to 11 January in Beijing.     

Students' Reactions to the Introduction of Videoconferencing for Classroom Instruction

This study examined how students who had no prior experience with videoconferencing would react to the use of videoconferencing as an instructional medium. Students enrolled in seven different courses completed a questionnaire at the beginning of the semester and again at the end of the semester. Students at the origination and remote sites did not differ in their reactions toward videoconferencing but there was a significant difference for gender. Women reacted less favorably to videoconferencing. Compared to the beginning of the semester, students reported significantly less positive attitudes toward taking a course through videoconferencing at the end of the semester. There were no significant differences in students' attitudes toward videoconferencing across courses at the beginning of the semester but there were significant differences across the courses at the end of the semester. The results suggest the need for better preparation for both students and instructors.     

Tracing the origin and early radiation of birds——Paleornithologist ZHOU Zhonghe

With great care, Dr. ZHOU Zhonghe takes out a package wrapped by cotton tissue from a drawer and says: "This is the gem of our collections: the fossil of a bird that lived 125 million years ago!" Then, pointing at a tiny mound, he explains: "Look, this is the claw and that is the head. It was in the egg shell and ready to hatch ... The species fell into a family of waterside inhabitants."     

Cooler temperatures inductive to locust outbreaks

Ajoint study by Prof. ZHANG Zhibin from the CAS Institute of Zoology and his co-workers from Norway, US and Swiss have indicated that historical outbreaks of migratory locusts in China were associated with cold spells, suggesting that China＇s projected climate warming could decrease the pest＇s numbers. The study was published in Proceedings of theNational Academy of Sciences on 17 September, 2007.     

Exploring Multiplexity: Social Network Structures in a Computer-Supported Distance Learning Class

A computer-mediated group is a complex entity whose members exchange many types of information via multiple means of communication in pursuit of goals specific to their environment. Over time, they coordinate technical features of media with locally enacted use to achieve a viable working arrangement. To explore this complex interaction, a case study is presented of the social networks of interactions and media use among members of a class of computer-supported distance learners. Results show how group structures associated with project teams dominated who communicated with whom, about what, and via which media over the term, and how media came to occupy their own communication niches: Webboard for diffuse class-wide communication; Internet Relay Chat more to named others but still for general communication across the class; and e-mail primarily for intrateam communication. Face-to-face interaction, occurring only during a short on-campus session, appears to have had a catalytic effect on social and emotional exchanges. Results suggest the need to structure exchanges to balance class-wide sharing of ideas with subgroup interactions that facilitate project completion, and to provide media that support these two modes of interaction.     

The Role of Intermediating Institutions in the Diffusion of Electronic Data Interchange (EDI): How Industry Associations Intervened in Denmark, Finland, and Hong Kong

Electronic data interchange (EDI) provides means for interorganizational communication, creates network externalities, requires an advanced information technology (IT) infrastructure, and relies on standards. In the diffusion of such innovations, institutional involvement is imperative. Such institutions contain governmental agencies, national and global standardization organizations, local government, and nonprofit private organizations like industry associations. The last type of organizations we call intermediating institutions. They intermediate or coordinate ("inscribe") the activities of a group of would-be adopters. Unfortunately, little is known of how these organizations shape the EDI diffusion trajectory. In this article we examine one specific type of intermediating organizations?industry associations?and how they advanced the EDI diffusion process in the grocery sectors of Hong Kong, Denmark and Finland. We identify six institutional measures, placed into a matrix formed by the mode of involvement (influence vs. regulation) and the type of diffusion force (supply push vs. demand pull), that can be mobilized to further the EDI diffusion. Industry associations were found to be active users of all these measures to varying degrees. Their role was critical especially in knowledge building, knowledge deployment, and standard setting. Furthermore, institutional involvement varied due to policy and cultural contingencies and power dependencies.     

How Electronic Publishers are Protecting Against Piracy: Doubts About Technical Systems of Protection

The increasing prospects of digital piracy has prompted the perceived need by electronic publishers to adopt technical systems of protection, and governments to reform their copyright laws. This article is a preliminary study of the management of intellectual property by electronic publishers, defined as those involved in the production of online databases, and CD-ROMs. It focuses on three main issues: (1) how electronic publishers view the increasing threat of piracy; (2) the methods of protection employed to protect intellectual property in digital format; and (3) the importance of technological protection of intellectual property in electronic publications. The analysis is based on a sample of 23 UK electronic publishers. The interviews revealed an interesting assortment of protection methods and did not show that technological protection was a preferred way. Instead, the means of protection, in addition to copyright law, comprised niche markets, pricing, trust, bad publicity, and nontechnical and technical means.     

Rough Justice: A Statistical Assessment of ICANN's Uniform Dispute Resolution Policy

Long-standing conflict between domain name registrants and trademark holders prompted the Internet Corporation for Assigned Names and Numbers (ICANN) to create a global, mandatory arbitration procedure known as the Uniform Dispute Resolution Policy (UDRP). The UDRP has been used in 2166 cases involving 3938 domain names as of 1 November 2000. The policy gives the initiator of a complaint, generally a trademark holder, the right to choose which ICANN-accredited dispute resolution service provider (RSP) will handle the case. During the preparation of the UDRP,some feared that complainant selection would lead to "forum shopping" that might bias the results. This article performs a statistical assessment of the forum-shopping thesis and finds support for it. There are statistically significant differences in the various RSPs' propensity to take away names from defendants; there are also major differences in the number of cases brought to each RSP. RSPs who take away names have the larger share of cases. The study examines other variables that might explain differences in market share, such as price, the plaintiff's nationality, or the time taken to decide a case. It finds that nationality and time also are correlated with market share. The study concludes that shopping for a favorable outcome is an important factor in the UDRP.     

Prevalence of soft neurological signs in Chinese people

Prof. Raymond C.K. Chen, a neuropsychologist with the CAS Institute of Psychology, has made novel progress in his studies of schizophrenia. His work has been reported by a recent issue of Behavioural Neurology.     

Stern-Gerlach effect goes chiral

Prof. SUN Changpu from the CAS Institute of Theoretical Physics and coworkers from University of Basel in Switzerland have worked out a way --at least in theory --to split a beam of molecules according to their chirality. The technique involves passing the molecules through three different laser beams and is similar to the famous Stern-Gerlach effect, whereby a beam of atoms passing through a magnetic field is split in two according to the atoms＇ spin states （Phys. Rev. Lett. 99 130403）.