Efficient Feature Extraction Using Apache Spark for Network Behavior Anomaly Detection

Extracting and analyzing network traffic feature is fundamental in the design and implementation of network behavior anomaly detection methods. The traditional network traffic feature method focuses on the statistical features of traffic volume. However, this approach is not sufficient to reflect the communication pattern features. A different approach is required to detect anomalous behaviors that do not exhibit traffic volume changes,such as low-intensity anomalous behaviors caused by Denial of Service/Distributed Denial of Service(Do S/DDo S)attacks, Internet worms and scanning, and Bot Nets. We propose an efficient traffic feature extraction architecture based on our proposed approach, which combines the benefit of traffic volume features and network communication pattern features. This method can detect low-intensity anomalous network behaviors and conventional traffic volume anomalies. We implemented our approach on Spark Streaming and validated our feature set using labelled real-world dataset collected from the Sichuan University campus network. Our results demonstrate that the traffic feature extraction approach is efficient in detecting both traffic variations and communication structure changes.Based on our evaluation of the MIT-DRAPA dataset, the same detection approach utilizes traffic volume features with detection precision of 82.3% and communication pattern features with detection precision of 89.9%. Our proposed feature set improves precision by 94%.     

基于信任的服务实体跨域认证方案

根据目前基于身份的跨域认证过程中域代理(domain agent,DA)数量有限的特点,针对该跨域认证过程中计算复杂的问题,采用信任和基于身份密码体制相结合的方式,提出了基于信任的用户跨域访问信息服务实体(information services entity,ISE)资源的算法。该算法首先完成用户在DA的身份认证,然后采用提出的信任度判断方法进行信任度的判断达到双向认证的目的,最终实现用户跨域访问ISE。仿真结果表明,信任度的判断方法有效地实现抵抗“恶意”DA的攻击,同时该基于信任的ISE跨域认证方案与基于身份的跨域认证方案相比,计算量减少,通信开销降低。     

New Moment Estimators of the Effective Spread Based on Daily High and Low Prices

This paper proposes five new simple moment estimators of the effective spread based on the covariance estimator of Roll(1984) and the High-Low estimator recently developed by Corwin and Schultz(2012). And then the authors theoretically investigate the statistical properties of six simple High-Low spread estimators including Corwin and Schultz's estimator. The biases and mean squared errors(MSE) of these six estimators have been derived and compared with each other asymptotically,which, together with the subsequent simulation study, reveal explicitly the superior performance of newly developed High-Low estimators over Corwin and Schultz's estimator in both ideal and nonideal conditions. Moreover, this paper also develops GMM estimators constructed by three or more moment conditions and compares with the six simple High-Low estimators. Finally, several example applications on the U.S. and Chinese financial markets are conducted to demonstrate the superior performance of the new High-Low estimators. The results provide alternative choices for identifying the liquidity proxies that well capture different structure of markets.     

人WDR79基因启动子表达载体的构建及鉴定

人WDR79是一种重要的支架蛋白,在端粒酶组装、卡哈尔体(Cahar body)形成和DNA损伤修复等过程中发挥着重要作用。采用PCR扩增技术获得人WDR79基因启动子上游DNA序列,构建人WDR79基因启动子荧光素酶报告基因载体pGL3-WDR79-promoter;通过双酶切、琼脂糖凝胶电泳、DNA测序和荧光素酶活性测定等实验手段,验证质粒pGL3-WDR79-promoter构建的正确性及其表达活性。本研究结果为进一步探讨人WDR79基因表达的调控机制奠定实验基础。     

四川公路堆积层边坡特征与加固方案统计关系初探

根据四川区域环境特征,在对收集到的68处省内公路堆积层边坡处治实例汇总的基础上,将影响公路堆积层边坡稳定的特征因素归结为堆积层厚度、边坡高度、坡率、岩性及其组合、地下水条件、平均年降水量及地震作用七项指标,进而分别以各项特征因素为参变量,研究其与挡墙、抗滑桩和锚杆三类典型加固方案之间的统计关系,所得结论可为山区公路堆积层边坡病害治理提供类比设计的技术资料及相关参考.     

基于动态阈值的混凝土裂缝高抗噪提取及识别方法

针对表面布有蜂窝麻面等复杂噪声的混凝土裂缝,提出了一种基于动态阈值的混凝土裂缝高抗噪提取方法.首先,通过灰度变换、高斯滤波、信息增强等技术弱化、去除噪声,增强图像中裂缝的亮度,提高裂缝与背景的对比度;然后,采用OTSU阈值分割算法去除伪裂缝,基于裂缝与干扰噪声面积的差异,引入动态阈值,实现各类型裂缝的提取;最后,基于边缘检测和裂缝骨架细化处理,计算裂缝的长度、宽度和面积3项特征参数.基于室内实验和室外实际桥梁拍摄的4组裂缝图像结果表明,4组裂缝的平均宽度分别为2.01、1.07、1.34、0.97 mm,说明该方法适用于不同背景下各类型裂缝的提取,具有较强的鲁棒性.     

Multifunctional artificial nacre via biomimetic matrix-directed mineralization

Natural nacre, one of the most studied biological structural materials with delicate hierarchical structures and extraordinary performance, has inspired the design and fabrication of artificial structural ceramics with high fracture toughness. However, to meet the diverse requirements of different applications, future structural materials must be multifunctional with superior mechanical properties, such as strength, hardness, and toughness. Herein, based on the matrix-directed mineralization method for producing biomimetic structural materials, we introduce nanoparticles with different inherent functions into the platelets of artificial nacre via the co-mineralization of aragonite and the nanoparticles. Besides their enhanced mechanical properties, the obtained artificial nacre materials also exhibit different functions depending on the type of the nanoparticles. To extend the versatility of this strategy, the effects of nanoparticles of different sizes and zeta potentials on mineralization are also analyzed. This universal strategy can be applied to the fabrication of other types of functionalized biomimetic structural ceramics that have potential applications in various fields, such as biomedical science.     

水平循环荷载引起的砂土沉陷-致密作用对刚性桩承载力的影响分析

为研究砂土中刚性桩基础在循环荷载作用下的承载力演化规律,提出了一种循环后单桩承载力的评估方法.首先,基于沉陷坑与致密区域土体的质量守恒原理,量化了由沉陷引起的土体参数变化;然后,根据API规范中的砂土水平土抗力-位移模型计算循环前后的单桩承载力;最后,提出了循环后单桩承载力的评估模型,并对沉陷坑尺寸、土体初始相对密实度和致密区域模式等因素进行对比分析.结果 表明:单桩承载力随沉陷坑的发展不断增大;对于松砂、中密砂和密砂,循环后的单桩承载力可分别提高约3.0、1.5、1.2倍,提高幅值随相对密实度的增大而降低;2种土体变形模式中,单锥模式相比于双锥模式更符合真实的致密区域形态.     

基于稳定函数的支撑结构系统临界力计算方法

基于稳定函数，给出了求解支撑结构系统临界力的计算方法，推导了不同荷载作用位置的3种双层支撑结构系统临界力的计算公式.结果表明:基于稳定函数的理论推导公式求出的解析解与二阶弹性分析数值解计算结果相近，误差均在3%以内;双层1~3跨带摇摆柱支撑结构系统总承载力理论值与试验值的结果验证了本文求解支撑结构系统临界力计算方法的准确性.基于稳定函数的支撑结构系统临界力计算方法具有普遍的适用性、较高的计算精度，为工程应用提供理论基础.     

Evolutionary game analysis of low-carbon behavior credit supervision of logistics enterprises

Based on the low-carbon obligation fulfillment of Chinese logistics enterprises, this study constructs a tripartite evolutionary game model to analyze the evolutionary process of the interaction between the local government, logistics enterprises and the public in the process of low-carbon behavior credit supervision. Then using Netlogo software, a parameter simulation experiment is conducted to determine the optimal policy for improving the effect of supervision. The results are as follows: ① The combined influence of the local government and the public can effectively change the strategic choice of enterprises and promote the low-carbon behavior of enterprises. ② In terms of improving the effect of supervision, reducing the cost of government supervision would have a highly significant effect, and reducing the cost of the public would be counterproductive. ③ Increasing the government subsidies to enterprises and the government’s fines to enterprises both have a significant effect, and the effect of improving the former is better. However, increasing the severity of higher-level governments punishing local governments will reduce the stability of the system. ④ Supervision can be more effective by increasing the public’s impact on enterprises’ earnings rather than by increasing government subsidies to the public.