Efficient Feature Extraction Using Apache Spark for Network Behavior Anomaly Detection

Extracting and analyzing network traffic feature is fundamental in the design and implementation of network behavior anomaly detection methods. The traditional network traffic feature method focuses on the statistical features of traffic volume. However, this approach is not sufficient to reflect the communication pattern features. A different approach is required to detect anomalous behaviors that do not exhibit traffic volume changes,such as low-intensity anomalous behaviors caused by Denial of Service/Distributed Denial of Service(Do S/DDo S)attacks, Internet worms and scanning, and Bot Nets. We propose an efficient traffic feature extraction architecture based on our proposed approach, which combines the benefit of traffic volume features and network communication pattern features. This method can detect low-intensity anomalous network behaviors and conventional traffic volume anomalies. We implemented our approach on Spark Streaming and validated our feature set using labelled real-world dataset collected from the Sichuan University campus network. Our results demonstrate that the traffic feature extraction approach is efficient in detecting both traffic variations and communication structure changes.Based on our evaluation of the MIT-DRAPA dataset, the same detection approach utilizes traffic volume features with detection precision of 82.3% and communication pattern features with detection precision of 89.9%. Our proposed feature set improves precision by 94%.     

基于AHP的产城融合评价研究

通过阐述我国产城融合发展中存在的问题,筛选出影响产城融合的指标因素,构建了包括经济发展、城市化水平和配套设施3个指标在内的评价体系.利用AHP方法进行定性和定量分析,确定了指标的权重,同时建立了产城融合评价模型,可以明确城市发展阶段,为促进城市产城融合建设提供了一些思路.     

Backstepping approach to the adaptive regulator design for a one-dimensional wave equation with general input harmonic disturbance

This paper considers the parameter estimation and stabilization of an unstable one-dimensional wave equation with matched general harmonic disturbance at the controlled end. The backstepping method for infinite-dimensional system is adopted in the design of the adaptive regulator. It is shown that the resulting closed-loop system is asymptotically stable. Meanwhile, the estimated parameter is shown to be convergent to the unknown parameter as time goes to infinity.     

Glutenin macropolymer particles size distribution of six wheat varieties in eastern China

Size distribution of glutenin macropolymer(GMP) particles significantly affects the quality of final products in wheat. Six wheat varieties in eastern China were used for investigating the GMP content, particle size distribution and their relation. The results showed that the particle diameter of GMP changed from 0.38 μm to 269 μm. A typical bimodal curve of volume distribution of particles with peak values ranged from 4.44 μm to 5.36 μm and from 45.76 μm to 116.30 μm, respectively. Number distribution of particles showed the typical population with peak values in the range of 0.57-1.00 μm. Proportions of granules 12 μm, 12-80 μm and 80 μm were in the range of 17.1%-47.8%, 32.1%-50.3% and 10.2%-38.1% of total volume, respectively. The content of GMP was negatively correlated with the volume of GMP particles 12 μm, but positively correlated with the volume of particles 80 μm. The results suggested that the greater percentage of larger GMP particles is, the more GMP content there is in wheat grain.     

GPSNISNAV integrated relative navigation and attitude determination system for ultra-close spacecraft formation flying

For the improvement of accuracy and better fault-tolerant performance, a global position system (GPS)/vision navigation (VISNAV) integrated relative navigation and attitude determination approach is presented for ultra-close spacecraft formation flying. Onboard GPS and VISNAV system are adopted and a federal Kalman filter architecture is used for the total navigation system design. Simulation results indicate that the integrated system can provide a total improvement of relative navigation and attitude estimation performance in accuracy and fault-tolerance.     

腹腔镜胃癌根治术与传统胃癌根治术的临床效果比较

目的:比较腹腔镜胃癌根治术与传统胃癌根治术的临床效果。方法:回顾分析2010年10月至2013年10月大理大学附属医院行腹腔镜胃癌根治术及胃癌根治术共103例胃癌患者的临床资料,分析比较两组患者的临床效果。结果:应用腹腔镜组平均出血量为(153.05±11.71)m L,明显少于开腹手术的(278.45±12.65)m L(P<0.05)。腹腔镜组的平均术后恢复肛门排气时间(3.10±0.62)d,低于开腹手术组的(5.58±1.12)d(P<0.05)。腹腔镜组平均术后住院时间为(14.25±2.78)d,明显低于开腹手术的(22.07±3.59)d(P<0.05)。生存率:行腹腔镜手术者1年总生存率94.1%,开腹手术总生存率92.1%(P>0.05)。结论:腹腔镜胃癌根治术具有术中出血少、术后住院天数少、并发症少等优点,治疗效果与开腹手术相当。     

利用生物信息学数据及工具合成表达链霉亲和素基因

目的:人工合成表达链霉亲和素基因,制备链霉亲和素磁珠复合物用于核酸分离.方法:利用NCBI、BCM等提供的生物信息及软件工具,将链霉亲和素蛋白的基因进行密码子优化,并分割成互为重叠的小片段寡聚核苷酸链,采用化学和酶促合成相结合的方法合成编码链霉亲和素蛋白基因.将纯化的链霉亲和素通过偶联剂与带羧基的磁粒共价结合,用于快速...     

Study on the fusion emotion classification of multiple characteristics based on attention mechanism

The current research on emotional classification uses many methods that combine the attention mechanism with neural networks.However,the effect is unsatisfactory when dealing with complex text.An emotional classification model is proposed,which combines multi-head attention(MHA)with improved structured-self attention(SSA).The model makes several different linear transformations of input by introducing MHA mechanism and can extract more comprehensive high-level phrase representation features from the word embedded vector.Meanwhile,it can realize the parallelization calculation and ensure the training speed of the model.The improved SSA structure uses matrices to represent different parts of a sentence to extract local key information,to ensure that the degree of dependence between words is not affected by time and sentence length,and generate the overall semantics of the sentence.Experiment results show that the current model effectively obtains global structural information and improves classification accuracy.     

4种淡水藻对硝基苯的抗性机制

选择了4种淡水藻——纤细裸藻、莱因衣藻、舟形藻和聚球藻,通过分析硝基苯对其生长和叶绿素含量的影响,以及藻细胞对硝基苯的降解、积累和抗氧化酶系统的响应,以期了解藻类对硝基苯的抗性机制．结果表明：4种藻的生长和叶绿素a含量对硝基苯的抗性,按抗性大小排列：纤细裸藻〉莱因衣藻〉舟形藻〉聚球藻,4种藻对硝基苯无显著的降解和积累能力,藻细胞对硝基苯的抗性主要依赖抗氧化酶系的防御作用,其中藻细胞的SOD起主要作用,POD起次要作用．     

基于集群的轻量可扩展TCP容错方法

针对现有TCP容错方案在高可用性方面的不足,提出了一个新的容错方案——轻量拷贝的传输控制协议ER-TCP.该方案采用日志管理配合主动复制的方法,可降低通信转发结点的负载;采用高效的同步算法可以减轻多个备份服务器的同步对通信造成的性能损失．与其他TCP容错方案进行性能测试的结果比较表明,ER-TCP对通信造成的性能损失小,在多个备份服务器的情况下ER-TCP仍可保持较高的通信效率．