Collaborative Network Security in Multi-Tenant Data Center for Cloud Computing简

A data center is an infrastructure that supports Internet service. Cloud comput the face of the Internet service infrastructure, enabling even small organizations to quickly ng is rapidly changing build Web and mobile applications for millions of users by taking advantage of the scale and flexibility of shared physical infrastructures provided by cloud computing. In this scenario, multiple tenants save their data and applications in shared data centers, blurring the network boundaries between each tenant in the cloud. In addition, different tenants have different security requirements, while different security policies are necessary for different tenants. Network virtualization is used to meet a diverse set of tenant-specific requirements with the underlying physical network enabling multi-tenant datacenters to automatically address a large and diverse set of tenants requirements. In this paper, we propose the system implementation of vCNSMS, a collaborative network security prototype system used n a multi-tenant data center. We demonstrate vCNSMS with a centralized collaborative scheme and deep packet nspection with an open source UTM system. A security level based protection policy is proposed for simplifying the security rule management for vCNSMS. Different security levels have different packet inspection schemes and are enforced with different security plugins. A smart packet verdict scheme is also integrated into vCNSMS for ntelligence flow processing to protect from possible network attacks inside a data center network     

展望新世纪的制造技术

探讨了新世纪先进制造技术的发展趋势，指出：精密化、微型化、柔性化、智能化、集成化、网络化、全球化将是未来制造技术的必然发展方向。     

多翼自治水下机器人动力学建模与姿态控制

为了提高多翼自治水下机器人姿态自主控制的稳定性和控制性能,设计了基于多翼水下机器人全参数控制模型的姿态控制系统.首先对多翼自治水下机器人进行运动学和动力学分析,建立多翼自治水下机器人的全参数运动控制模型;在此基础上建立多翼自治水下机器人整体控制系统,设计基于线性二次型最优控制的多翼自治水下机器人姿态控制器;最后进行多翼自治水下机器人姿态控制仿真实验.结果表明:在给定的外界干扰下,多翼自治水下机器人能够快速稳定跟踪目标姿态,所建立的控制器以及控制模型能够满足多翼水下机器人姿态的自主控制需要,达到设计目标.     

Primary Sn-rich titianite in the Qitianling granite, Hunan Province, southern China: An important type of tin-bearing mineral and its implications for tin exploration

The Qitianling calc-alkaline granite in Hunan Province (South China) has attracted much attention since the discovery of the Furong super-large tin deposit. The present study provides new mineralogical data to address their implications for exploration of tin deposits. In the Taoxiwo granite in the southeastern part of the Qitianling granite body, Sn-rich titanite was identified as an important type of Sn-bearing mineral. The titanite commonly occurs with biotite as euhedral crystals, exhibiting typical envelope-like shape and sector-zoning texture. These indicate that the titanite most likely crystallized in the magmatic stage. Electron-microprobe analyses show that the titanite is enriched in tin up to 1.12 wt% SnO₂, with an average of 0.43 wt%. With the crystallization of the granite, primary minerals undertook hydrothermal alteration by magma-derived fluids. Subsequently, in the hydrothermal stage, the primary Sn-bearing titanite was altered (at least partially), but still preserved its typical envelope-shaped outline. Micro-scale cassiterite is a representative product of such alteration; other secondary minerals include fluorite, ilmenite, Sn-bearing rutile and quartz. Therefore, the titanite, commonly present in the calcalkaline granites, can be treated as an important Sn-carrying mineral in the Qitianling granite, reflecting the primary magmatic environment with tin enrichment. The hydrothermal alteration of the primary titanite and subsequent crystallization of cassiterite recorded a process of leaching and accumulation of tin in magmatic-hydrothermal evolution of the Sn-bearing granite. Thus, this titanite has important implications for tin exploration. Supported by National Natural Science Foundation of China (Grant Nos. 40730423 and 40221301) and Project of China Geological Survey (Grant No. 1212010632100)     

2017年至2019年海北州植被覆盖度时空动态变化分析研究

本文旨在对2017年至2019年海北州的植被覆盖度变化进行分析,获得其相关的时空变化规律。基于2017年至2019年生长季多时相的GF-1 WFV遥感影像,提取植被覆盖度。为了分析不同覆盖度等级的植被的时空变化,本文将植被覆盖度分为全植被、高植被、中植被、低植被和无植被五个不同等级,并在每个等级内结合DEM数据进一步划分为高山、中山、低山进行分析。研究结果表明：(1)对于植被空间分布特点而言,相对于全植被、高植被、中植被和低植被,无植被的面积占比比较少;(2)在空间分布上,针对不同的海拔高度而言,中山区的植被覆盖度较高,低山区次之,高山区的植被覆盖度最少;(3)从年际变化的角度来看,试验区在2017至2018年和2018至2019年期间,均会出现全植被和高植被相互转化的趋势;(4)从同一年度的生长季的分析发现,试验区内的植被覆盖度在6月至8月呈现上升趋势,在8月至9月呈现下降趋势,相对于其他等级,全植被的变化更加符合该趋势。通过本研究,可为掌握海北州植被覆盖度的时空动态变化规律提供支持。     

Cd胁迫下接种丛枝菌根真菌对秋茄幼苗生长与抗氧化酶系统的影响

近年来,由于工农业发展导致的河口重金属污染等的影响,红树林退化与消失的趋势相当严重,红树林的保育恢复已成为我国环境保护工作的重点.立足于丛枝菌根真菌(arbuscular mycorrhizal fungi,AMF)与红树植物的共生关系,以红树植物秋茄(Kandelia obovata(S.,L.)Yong)为试材,在施加重金属Cd(0,5,10,20,40mg/kg)的条件下,通过接种与不接种混合AMF,对比研究从红树林生境中筛选扩繁的优势AMF菌种对秋茄幼苗生长与抗氧化酶系统的影响.研究表明:接种AMF使得秋茄幼苗的生物量增加,但株高未出现明显变化.Cd胁迫引起了秋茄叶片和根系丙二醛(MDA)含量的持续上升,且超氧化物歧化酶(SOD)、过氧化物酶(POD)、过氧化氢酶(CAT)活性表现为低含量下刺激,高含量下抑制的效应.接种AMF使得MDA含量显著减少,SOD、POD、CAT活性显著增加,从而能够更好地清除活性氧,减轻Cd胁迫下秋茄的膜脂过氧化程度,保护植物.研究揭示AMF在红树林湿地生态系统中潜在的抗重金属污染生理生态功能,为红树林污染的生物修复提供了一条新思路.     

Development of a middle and low latitude theoretical ionospheric model and an observation system data assimilation experiment

On the basis of previous work, we develop a middle and low latitude theoretical ionospheric model in this paper, named Theoretical Ionospheric Model of the Earth in the Institute of Geology and Geophysics, Chinese Academy of Sciences （TIME-IGGCAS）. TIME-IGGCAS solves the equations of mass continuity, motion and energy of electron and ions self-consistently and uses an eccentric dipole field approximation to the Earth＇s magnetic field. We combine the Eulerian and Lagrangian approaches in the model and take account of the plasma ExB drift velocity. Calculation results reveal that the model is steady and credible and can reproduce most large-scale features of ionosphere. By using TIME-IGGCAS, we carried out an observation system data assimilation experiment. Assimilation results show that the ExB drift velocity can be accurately estimated by ingesting the observed foF2 and hmF2 into the model applying nonlinear least-square fit method. We suggest that this work is of great significance in the development of ionospheric data assimilation model to give better nowcast and forecast of ionosphere.     

超立方体的3－独立集及其在神经联想存储器中的应用

用Ｉ３（ｎ）表示ｎ－立方体Ｑｎ的３－独立数。提出了构造Ｑｎ的３－独立集的一个算法，证明了２ｎ－［ｌｏｇ２ｎ］－１≤Ｉ３（ｎ）≤［２ｎ／（ｎ＋１）］．这些结果被应用于神经联想存储器的设计．     

蔺草的生物学特性

原套由２层细胞组成．包围着内部细胞群—原体．叶原基发生的最初标志是苗端侧面下表皮层细胞的平周分裂。苗中有１个轴及６个节，每节上有１张具鞘的叶．苗中有两个芽，“主芽”由第２叶的叶腋产生，另１个是侧芽由第３叶叶腋产生．合轴分枝．第１—２节是匍匐状，第３—６节直立．茎杆仲长是因居间分生组织活动及细胞增宽与延长的结果．茎杆的不同部位结构有差异．维管束数目自基部向顶部逐渐减少，而髓部空腔宽度则是下部狭，上部宽．割梢及设网支撑可获丰产．     

一种利用域名系统支持主机移动的路由协议

当网络主机改变网络接入点时。传统的TEP／IP协议无法正常运作。这是由于IP地址的双重作用(既是主机的名也指明主机当前的网络位置)引起的，支持主机移动的网络协议SHMUD(Supporting Host Mobility Using DNS)用域名作为主机名。保留主机IP地址指示其当前网络位置的作用，解决了这一问题，SHMUD以域名服务系统作为它的位置目录，在每个移动主机可能访问的网络中安装移动代理，当移动主机从一个网络移动到另一个网络。并通过DHCP服务器获得了当地网络的一个IP地址后。向它的归属代理(Home Agent)发送登记请求，归属代理根据该移动主机的请求通知DNS服务器。DNS服务器就更新该移动主机的域名—地址映射。这样网络中其它主机利用域名与该移动主机通信时就可以直接将IP报发往该移动主机的当前IP地址了，在移动主机改变网络接入点的过程中，可能与其它主机正在进行通信。为保证通信不被中断(称为平滑越区)。SHMUD提出了一种新的机制以实现主机的平滑越区。此外，SHMUD还提供必要的安全措施使各个移动代理和DNS服务器不受网络攻击。最后，给出了SHMUD的原型系统和性能分析，与其它支持主机移动的路由方案如Mobile-IP相比，SHMUD实现了路径优化、资源的分布式管理、平滑越区以及身份验证等。此外，它只需要在移动主机可能访问的网络中安装移动代理，并在移动主机上安装必要的软件即可运行，不必进行大规模的软件升级，因此较适于在因特网中推广。