基于频谱混迭预畸变效应的DoS攻击准确检测

传统的单谱脉冲响应信号畸变检测方法无法对DoS网络攻击信号实现有效检测,提出一种采用幅度和频率对应关系双线性变换的信号检测算法准确检测DoS网络攻击信号。利用格型陷波器线性预测特性,使DoS信号发出有效攻击前产生频谱混迭状态下的预畸变效应,及早发现攻击信号,达到有效准确检测的目的。仿真结果表明,采用该检测算法检测DoS网络攻击信号,检测性能很好,检测概率大幅提高,虚警概率为0,能有效应用到网络安全和信息对抗等领域。     

网络威胁态势预测的抗体虚警概率阈值估计

对网络攻击信号检测中,需要对网络威胁态势预测的抗体虚警概率阈值估计,提高攻击信号检测性能。传统方法采用伪随机时频跳变的信息容量估计方法实现阈值估计和攻击信号检测,当攻击信号为非线性谐振信号时,检测性能不好。提出一种改进的网络威胁态势预测的抗体虚警概率阈值估计算法。构建多路复用器输入输出网络威胁态势预测算法,通过病毒信息特征预处理为免疫性分析提供信息特征数据基础。得到网络跳变向量和观测向量的标准正态阈值,将网络接收端和发送端数据的信息熵作为信道传递向量函数,在人工免疫进化过程中实现对免疫节点的抗体的虚警概率阈值估计,提高网络攻击信号的检测性能,降低网络威胁态势抗体虚警概率。仿真实验得出,该算法得到的估计结果精确,有效提高了攻击信号的检测性能,确保网络安全。     

引入合同变换矩阵的网络攻击信号盲分离算法

对网络攻击信号进行盲分离,实现对攻击信号的准确有效检测。传统的网络攻击信号检测算法使用时频分析方法,提取非平稳群攻击信号的时频特征,实现信号检测,但算法把网络入侵检测正确率作为约束目标函数进行同步最优特征子集求解,复杂度较高,提出一种引入合同变换矩阵的网络攻击信号盲分离算法。采用时频分析Viterbi算法,得到信号谱的平均频率等于瞬时频率的时间平均,根据合同变换矩阵,对攻击信号进行离散数据解析化处理,构建网络攻击信号的解析模型,得到网络统计信号在多复变边界条件下的时频特征,实现盲分离算法改进。仿真实验表明,该算法能有效实现对网络攻击信号的盲分离,盲分离结果能准确反映网络攻击信号的内部特征,提高了对网络攻击信号的检测能力,对攻击信号的检测性能有所提高,保证了网络安全。     

衰落噪声干扰下网络攻击数据散布特征挖掘算法

提出一种基于随机近场混叠谱分析的网络攻击数据散布特征挖掘算法,实现对衰落噪声干扰下的网络攻击信号的准确检测。采用自适应陷波器对衰落干扰噪声进行滤波降噪预处理,提高了待检测信号的纯度,进行随机近场混叠谱分析,采用时频分析方法进行攻击信号的时延估计,提取随机近场混叠谱特征,实现网络攻击数据散布特征挖掘优化。仿真实验表明,采用该算法能有效提取在强衰落噪声干扰下的网络攻击数据时频散布特征点,特征聚焦性能明显,提高了对网络攻击数据的检测性能。     

网络波动攻击中的小扰动入侵源定位算法仿真

在网络持续波动攻击中出现一种小扰动信号,由于该类攻击信号的振幅不大,常规的检测算法难以有效定位检测,无法保证网络安全。提出一种基于小扰动多普勒扩散参量估计的网络波动入侵源定位检测算法。首先进行网络攻击模型构建,分析网络攻击信号的小扰动振幅特性,由于高阶累积量对噪声有盲分离作用,利用高阶累积量切片对小扰动入侵信号的能量聚集和噪声抑制特性,引入高阶累积量后置处理算子,进行小扰动入侵源定位聚焦,采用DOA参量估计算法进行网络攻击信号的多普勒扩散参量估计,实现对小扰动入侵源定位和检测。仿真结果表明,采用该算法能有效实现了对网络波动攻击的小扰动入侵信号的准确定位和检测,分离出振幅较小入侵信号,检测准确率较传统方法高。     

引入累积量后置处理的弱性网络攻击敏锐检测

利用高阶累积量切片对调频信号能量聚集和噪声抑制的特性,引入高阶累积量后置处理算子,提出一种新型的微弱性网络攻击信号高敏锐度检测算法。算法有效分离攻击信号的时频耦合,首先把信号采用离散分数阶傅立叶变换实现离散化处理,然后利用高阶累积量切片算子对攻击信号在分数阶傅立叶域上进行后置能量聚集,增大信号累积量,有效抑制了合法网络信号的背景干扰。仿真实验表明,新算法能在-15 dB低信噪比背景下,有效检测出隐蔽性很强的弱性网络攻击信号。能有效应用到计算机网络安全防御和对抗中。     

类似形状匹配的WVD网络隐性攻击信号检测

结合Hough变换的类似形状特征,提出一种考虑类似形状匹配的改进的WVD网络隐性攻击信号检测算法WVD-Hough检测算法,算法实质上基于类形状匹配的检测技术,把图像空间中的直线检测问题转换为参数点的检测问题,实现在参数空间中的检测任务。对两类典型的隐性网络攻击信号进行滤波提纯分析和检测实验,仿真实验表明,新的WVD-Hough网络攻击信号检测方法能有效提纯待检测信号,滤波效果良好,得到谱分析中间脊线清晰,信号成分时频聚集性很高,能有效去除合法信号的干扰,挖掘出隐性攻击信号。     

Lorenz混沌异步跟踪深度伪装网络攻击信号最优检测

提出采用Lorenz混沌系统异步跟踪优化期望最大化高斯混合模型算法实现对低信噪比下深度伪装的网络攻击信号最优检测。通过提取待检测网络数据流参数向量和正常数据流参数向量的差值为特征,使用高斯混合模型并与期望最大化算法相结合,设计Lorenz混沌异步跟踪检测算法,对网络数据流进行建模和检测。仿真结果表明改进的检测算法能有效去除不是攻击信号的伪峰,相比Hough变化检测算法,能更加正确地检测非法攻击信号,信噪比为-15dB下,不同异步攻击中的检测概率就能达到100%,实现检测性能最优,尤其适用于信噪比极低的深度伪装网络攻击环境中对攻击信号的检测。研究成果为网络安全防御及应用具有巨大的理论参考价值。     

基于EMA和Lorenz系统同步的网络攻击检测

对新型网络攻击信号进行准确有效检测的问题已有许多研究。网络攻击信号更新变化迅速,严重影响了网络环境的安全稳定,传统的网络攻击信号检测算法如ARMA模型算法检测性能不够理想。采用非线性信号处理的方法,基于期望最大化算法的高斯混合模型,结合Lorenz混沌系统进行同步控制,提出了一种改进的网络攻击检测算法。对网络数据流进行建模并检测,将差值这个特征作为混沌同步控制量,进行检测和判决。仿真结果表明改进的检测算法能有效检测网络攻击信号数据库中最新的5类攻击信号,与ARMA算法进行检测性能比较,检测概率同等条件下提升幅度明显,最高为15%以上,在网络攻击安全防御中展现优越的应用性能和前景。     

引入病毒传播方向聚类的攻击容忍扫频方法

攻击容忍系统通过对病毒入侵路径和频率进行扫频实现对病毒的挖掘,传统的扫频方法采用相位和频率特征匹配方法进行,对网络病毒非规则方向入侵不能起到较好的掩盖作用,扫频效果不好。提出一种采用病毒传播方向聚类分析的攻击容忍系统扫频方法,构建病毒传播路径分析模型,建立病毒传播的方向性空间搜索属性序列,分析病毒传播方向聚类演化模型,实现对病毒传播和入侵传播方向聚类过程的建模,求解病毒传播方向的聚类属性的信息熵,实现攻击容忍扫频改进算法。实验结果表明,算法能有效实现对病毒传播和扩散的时间和频率等信息进行扫频分析,病毒时频特征得到有效挖掘,通过扫频检测准确率较传统该方法提高13.6%。     

Low doses of a red wine ingredient figh diabetes in mice

Aresearch group led by Prof. ZHAI Qiwei from the Institute for Nutritional Sciences under the CAS Shanghai Institutes for Biological Sciences has discovered that even relatively low doses of resveratrol--a chemical found in the skins of red grapes and in red wine--can improve the sensitivity of mice to the hormone insulin, according to a report in the October,2007 issue of Cell Metabolism. As insulin resistance is often characterized as the most critical factor contributing to the development of Type 2 diabetes, the findings“provide a potential new therapeutic approach for preventing or treating” both conditions, the researchers said.     

Students' Reactions to the Introduction of Videoconferencing for Classroom Instruction

This study examined how students who had no prior experience with videoconferencing would react to the use of videoconferencing as an instructional medium. Students enrolled in seven different courses completed a questionnaire at the beginning of the semester and again at the end of the semester. Students at the origination and remote sites did not differ in their reactions toward videoconferencing but there was a significant difference for gender. Women reacted less favorably to videoconferencing. Compared to the beginning of the semester, students reported significantly less positive attitudes toward taking a course through videoconferencing at the end of the semester. There were no significant differences in students' attitudes toward videoconferencing across courses at the beginning of the semester but there were significant differences across the courses at the end of the semester. The results suggest the need for better preparation for both students and instructors.     

Cooler temperatures inductive to locust outbreaks

Ajoint study by Prof. ZHANG Zhibin from the CAS Institute of Zoology and his co-workers from Norway, US and Swiss have indicated that historical outbreaks of migratory locusts in China were associated with cold spells, suggesting that China＇s projected climate warming could decrease the pest＇s numbers. The study was published in Proceedings of theNational Academy of Sciences on 17 September, 2007.     

Exploring Multiplexity: Social Network Structures in a Computer-Supported Distance Learning Class

A computer-mediated group is a complex entity whose members exchange many types of information via multiple means of communication in pursuit of goals specific to their environment. Over time, they coordinate technical features of media with locally enacted use to achieve a viable working arrangement. To explore this complex interaction, a case study is presented of the social networks of interactions and media use among members of a class of computer-supported distance learners. Results show how group structures associated with project teams dominated who communicated with whom, about what, and via which media over the term, and how media came to occupy their own communication niches: Webboard for diffuse class-wide communication; Internet Relay Chat more to named others but still for general communication across the class; and e-mail primarily for intrateam communication. Face-to-face interaction, occurring only during a short on-campus session, appears to have had a catalytic effect on social and emotional exchanges. Results suggest the need to structure exchanges to balance class-wide sharing of ideas with subgroup interactions that facilitate project completion, and to provide media that support these two modes of interaction.     

Molecular motor assembly of a biomimetic system

Active biological molecules and functional structures can be fabricated into a bio-mimetic system by using molecular assembly method. Such materials can be used for the drug delivery, disease diagnosis and therapy, and new nanodevice construction.     

To serve and promote science development via innovation

CAS should stick to the principle of rendering service to, and giving impetus for, the development of China＇s science enterprise by making S＆T innovations, said CAS President LU Yongxiang. The CAS president made the remarks in a recent talk to communicate the gist of the winter session of the Party＇s Leading-member Group at CAS, which was held from 7 to 11 January in Beijing.     

Tracing the origin and early radiation of birds——Paleornithologist ZHOU Zhonghe

With great care, Dr. ZHOU Zhonghe takes out a package wrapped by cotton tissue from a drawer and says: "This is the gem of our collections: the fossil of a bird that lived 125 million years ago!" Then, pointing at a tiny mound, he explains: "Look, this is the claw and that is the head. It was in the egg shell and ready to hatch ... The species fell into a family of waterside inhabitants."     

The Role of Intermediating Institutions in the Diffusion of Electronic Data Interchange (EDI): How Industry Associations Intervened in Denmark, Finland, and Hong Kong

Electronic data interchange (EDI) provides means for interorganizational communication, creates network externalities, requires an advanced information technology (IT) infrastructure, and relies on standards. In the diffusion of such innovations, institutional involvement is imperative. Such institutions contain governmental agencies, national and global standardization organizations, local government, and nonprofit private organizations like industry associations. The last type of organizations we call intermediating institutions. They intermediate or coordinate ("inscribe") the activities of a group of would-be adopters. Unfortunately, little is known of how these organizations shape the EDI diffusion trajectory. In this article we examine one specific type of intermediating organizations?industry associations?and how they advanced the EDI diffusion process in the grocery sectors of Hong Kong, Denmark and Finland. We identify six institutional measures, placed into a matrix formed by the mode of involvement (influence vs. regulation) and the type of diffusion force (supply push vs. demand pull), that can be mobilized to further the EDI diffusion. Industry associations were found to be active users of all these measures to varying degrees. Their role was critical especially in knowledge building, knowledge deployment, and standard setting. Furthermore, institutional involvement varied due to policy and cultural contingencies and power dependencies.     

The Information Environment and Universal Service

This essay focuses on universal service and the Internet as means to support social and political participation. The emphasis on access to telecommunications systems in conventional approaches to universal service is contrasted with access to content. A model of the information environment is described that accounts for the roles of content and conduit, both of which are necessary conditions to achieve true access. A method is outlined for employing information indicators to observe or measure the information environment.     

How Electronic Publishers are Protecting Against Piracy: Doubts About Technical Systems of Protection

The increasing prospects of digital piracy has prompted the perceived need by electronic publishers to adopt technical systems of protection, and governments to reform their copyright laws. This article is a preliminary study of the management of intellectual property by electronic publishers, defined as those involved in the production of online databases, and CD-ROMs. It focuses on three main issues: (1) how electronic publishers view the increasing threat of piracy; (2) the methods of protection employed to protect intellectual property in digital format; and (3) the importance of technological protection of intellectual property in electronic publications. The analysis is based on a sample of 23 UK electronic publishers. The interviews revealed an interesting assortment of protection methods and did not show that technological protection was a preferred way. Instead, the means of protection, in addition to copyright law, comprised niche markets, pricing, trust, bad publicity, and nontechnical and technical means.