Free-standing covalent organic framework(COFs)nanofilms exhibit a remarkable ability to rapidly intercalate/de-intercalate Li^(+) in lithium-ion batteries,while simultaneously exposing affluent active sites in superca...Free-standing covalent organic framework(COFs)nanofilms exhibit a remarkable ability to rapidly intercalate/de-intercalate Li^(+) in lithium-ion batteries,while simultaneously exposing affluent active sites in supercapacitors.The development of these nanofilms offers a promising solution to address the persistent challenge of imbalanced charge storage kinetics between battery-type anode and capacitor-type cathode in lithium-ion capacitors(LICs).Herein,for the first time,custom-made COFBTMB-TP and COFTAPB-BPY nanofilms are synthesized as the anode and cathode,respectively,for an all-COF nanofilm-structured LIC.The COFBTMB-TP nanofilm with strong electronegative–CF3 groups enables tuning the partial electron cloud density for Li^(+) migration to ensure the rapid anode kinetic process.The thickness-regulated cathodic COFTAPB-BPY nanofilm can fit the anodic COF nanofilm in the capacity.Due to the aligned 1D channel,2D aromatic skeleton and accessible active sites of COF nanofilms,the whole COFTAPB-BPY//COFBTMB-TP LIC demonstrates a high energy density of 318 mWh cm^(−3) at a high-power density of 6 W cm^(−3),excellent rate capability,good cycle stability with the capacity retention rate of 77%after 5000-cycle.The COFTAPB-BPY//COFBTMB-TP LIC represents a new benchmark for currently reported film-type LICs and even film-type supercapacitors.After being comprehensively explored via ex situ XPS,7Li solid-state NMR analyses,and DFT calculation,it is found that the COFBTMB-TP nanofilm facilitates the reversible conversion of semi-ionic to ionic C–F bonds during lithium storage.COFBTMB-TP exhibits a strong interaction with Li^(+) due to the C–F,C=O,and C–N bonds,facilitating Li^(+) desolation and absorption from the electrolyte.This work addresses the challenge of imbalanced charge storage kinetics and capacity between the anode and cathode and also pave the way for future miniaturized and wearable LIC devices.展开更多
Metal-organic frameworks(MOFs)have been developed as an ideal platform for exploration of the relationship between intrinsic structure and catalytic activity,but the limited catalytic activity and stability has hamper...Metal-organic frameworks(MOFs)have been developed as an ideal platform for exploration of the relationship between intrinsic structure and catalytic activity,but the limited catalytic activity and stability has hampered their practical use in water splitting.Herein,we develop a bond length adjustment strategy for optimizing naphthalene-based MOFs that synthesized by acid etching Co-naphthalenedicarboxylic acid-based MOFs(donated as AE-CoNDA)to serve as efficient catalyst for water splitting.AE-CoNDA exhibits a low overpotential of 260 mV to reach 10 mA cm^(−2)and a small Tafel slope of 62 mV dec^(−1)with excellent stability over 100 h.After integrated AE-CoNDA onto BiVO_(4),photocurrent density of 4.3 mA cm^(−2)is achieved at 1.23 V.Experimental investigations demonstrate that the stretched Co-O bond length was found to optimize the orbitals hybridization of Co 3d and O 2p,which accounts for the fast kinetics and high activity.Theoretical calculations reveal that the stretched Co-O bond length strengthens the adsorption of oxygen-contained intermediates at the Co active sites for highly efficient water splitting.展开更多
With the continuous advancement of communication technology,the escalating demand for electromagnetic shielding interference(EMI)materials with multifunctional and wideband EMI performance has become urgent.Controllin...With the continuous advancement of communication technology,the escalating demand for electromagnetic shielding interference(EMI)materials with multifunctional and wideband EMI performance has become urgent.Controlling the electrical and magnetic components and designing the EMI material structure have attracted extensive interest,but remain a huge challenge.Herein,we reported the alternating electromagnetic structure composite films composed of hollow metal-organic frameworks/layered MXene/nanocellulose(HMN)by alternating vacuum-assisted filtration process.The HMN composite films exhibit excellent EMI shielding effectiveness performance in the GHz frequency(66.8 dB at Kaband)and THz frequency(114.6 dB at 0.1-4.0 THz).Besides,the HMN composite films also exhibit a high reflection loss of 39.7 dB at 0.7 THz with an effective absorption bandwidth up to 2.1 THz.Moreover,HMN composite films show remarkable photothermal conversion performance,which can reach 104.6℃under 2.0 Sun and 235.4℃under 0.8 W cm^(−2),respectively.The unique micro-and macrostructural design structures will absorb more incident electromagnetic waves via interfacial polarization/multiple scattering and produce more heat energy via the local surface plasmon resonance effect.These features make the HMN composite film a promising candidate for advanced EMI devices for future 6G communication and the protection of electronic equipment in cold environments.展开更多
In this work,nickel foam supported CeO_(2)-modified CoBDC(BDC stands for terephthalic acid linker)metal-organic frameworks(NF/CoBDC@CeO_(2)) are prepared by hydrothermal and subsequent impregnation methods,which can b...In this work,nickel foam supported CeO_(2)-modified CoBDC(BDC stands for terephthalic acid linker)metal-organic frameworks(NF/CoBDC@CeO_(2)) are prepared by hydrothermal and subsequent impregnation methods,which can be further transformed to NF/CoOOH@CeO_(2) by reconstruction during the electrocatalytic test.The obtained NF/CoOOH@CeO_(2) exhibits excellent performance in electrocatalytic oxidation of 5-hydroxymethylfurfural(HMF) because the introduction of CeO_(2) can optimize the electronic structure of the heterointerface and accelerate the accumulation of ^(*)OH.It requires only a potential of 1.290 V_(RHE) to provide a current density of 50 mA cm^(-2) in 1.0 M KOH+50 mM HMF,which is 222 mV lower than that required in 1,0 M KOH(1.512 V_(RHE)).In addition,density-functional theory calculation results demonstrate that CeO_(2) biases the electrons to the CoOOH side at the heterointerface and promotes the adsorption of ^(*)OH and ^(*)HMF on the catalyst surface,which lower the reaction energy barrier and facilitate the electrocata lytic oxidation process.展开更多
The Qilian Orogenic belt is one of the typical orogenic belts globally and a natural laboratory for studying plate tectonics.Many researchers have studied the ophiolite and high pressure and ultra-high pressure metamo...The Qilian Orogenic belt is one of the typical orogenic belts globally and a natural laboratory for studying plate tectonics.Many researchers have studied the ophiolite and high pressure and ultra-high pressure metamorphic rocks in the Qilian orogen and obtained valuable achievements.However,a hot debate exists on the basement property,the distribution of ophiolite,and the boundaries of tectonic units.Large-scale high-precision aeromagnetic surveys have recently been conducted in the Qilian Orogenic belt and adjacent areas.In this study,we are trying to analysis the tectonic framework of the Qilian Orogen using 1:500,000 aeromagnetic data.The results provide geophysical perspectives for studying the structural framework and deformation of this area.According to the aeromagnetic∆T anomaly map,the central and Southern Qilian have the same magnetic anomaly feature that noticeably differs from the North Qilian Orogenic belt and the Qaidam Block.This result indicates that the central and Southern Qilian have a unified magnetic basement and differ from the North Qilian orogenic belt and Qaidam Block.The map shows the distribution of ophiolite in the North Qilian orogenic belt.Linear magnetic anomalies represent the ophiolites because the mafic–ultramafic rocks usually have high magnetic susceptibility.The ophiolite belts are continuously distributed in the western part of North Qilian orogenic belt and have a large scale.However,the scale of the ophiolite belt and the outcropping of mafic–ultramafic rocks reduces when they pass through Qilian County to the east.The results indicate differences in the evolution process between the eastern and western parts of North Qilian,with Qilian County as the transition zone.This study also systematically defines the geophysical boundaries of the Qaidam Block,Qilian Block,North Qilian Orogenic belt,and Alxa block.It is proposed that the sinistral displacement of the Altun Fault is adjusted and absorbed by the series of NE-trending faults in the Qilian orogen and merge into the Longshoushan–Gushi Fault.The extension of the North Qilian Orogenic belt is strengthened by the neotectonics movement along the shearing direction,which separated the North Qilian Orogenic belt into several segments and formed a series of northeast-trending faults.展开更多
In the era of the Internet,various network platforms have evolved into new hubs for information dissemination.Currently,China has established a platform-centered content regulation framework,wherein platforms proactiv...In the era of the Internet,various network platforms have evolved into new hubs for information dissemination.Currently,China has established a platform-centered content regulation framework,wherein platforms proactively enforce content regulations in accordance with legal censorship obligations.Additionally,platform policies and user agreements augment their authority in content regulation.The platforms can achieve cost-effective and highly efficient content regulation by leveraging their strategic advantages enabled by their own technical capabilities and extensive coverage.The platform self-regulation model,however,still faces challenges.First,accurately evaluating content remains a formidable task;second,ensuring effective platform publicity through self-regulation poses difficulties;third,users may potentially face disadvantages due to the platform’s right of self-regulation;and fourth,digital copyright owners face challenges when defending digital copyright disputes under the safe harbor rule.Therefore,it is imperative to establish,review,and revise the legal framework for content regulation of network platforms in order to enhance the efficiency of their governance systems.The formulation of the legal framework for content regulation of network platforms may encompass the following aspects:rationalizing obligations pertaining to platform content regulations,enhancing supervision over platform self-regulation,and establishing a dual-track responsibility system for digital copyright content regulation.This will ensure a harmonious balance among public interests,users’personal rights and interests,and commercial benefits through regulating the content on network platforms.展开更多
Graph Convolutional Neural Networks(GCNs)have been widely used in various fields due to their powerful capabilities in processing graph-structured data.However,GCNs encounter significant challenges when applied to sca...Graph Convolutional Neural Networks(GCNs)have been widely used in various fields due to their powerful capabilities in processing graph-structured data.However,GCNs encounter significant challenges when applied to scale-free graphs with power-law distributions,resulting in substantial distortions.Moreover,most of the existing GCN models are shallow structures,which restricts their ability to capture dependencies among distant nodes and more refined high-order node features in scale-free graphs with hierarchical structures.To more broadly and precisely apply GCNs to real-world graphs exhibiting scale-free or hierarchical structures and utilize multi-level aggregation of GCNs for capturing high-level information in local representations,we propose the Hyperbolic Deep Graph Convolutional Neural Network(HDGCNN),an end-to-end deep graph representation learning framework that can map scale-free graphs from Euclidean space to hyperbolic space.In HDGCNN,we define the fundamental operations of deep graph convolutional neural networks in hyperbolic space.Additionally,we introduce a hyperbolic feature transformation method based on identity mapping and a dense connection scheme based on a novel non-local message passing framework.In addition,we present a neighborhood aggregation method that combines initial structural featureswith hyperbolic attention coefficients.Through the above methods,HDGCNN effectively leverages both the structural features and node features of graph data,enabling enhanced exploration of non-local structural features and more refined node features in scale-free or hierarchical graphs.Experimental results demonstrate that HDGCNN achieves remarkable performance improvements over state-ofthe-art GCNs in node classification and link prediction tasks,even when utilizing low-dimensional embedding representations.Furthermore,when compared to shallow hyperbolic graph convolutional neural network models,HDGCNN exhibits notable advantages and performance enhancements.展开更多
近年来,使用恶意Excel 4.0宏(XLM)文档的攻击迎来了爆发,而XLM代码往往经过复杂的混淆,现有方法或检测系统难以分析海量样本的真实功能。因此,针对恶意样本中使用的各类混淆技术,基于抽象语法树和模拟执行,设计和实现了包含138个宏函数...近年来,使用恶意Excel 4.0宏(XLM)文档的攻击迎来了爆发,而XLM代码往往经过复杂的混淆,现有方法或检测系统难以分析海量样本的真实功能。因此,针对恶意样本中使用的各类混淆技术,基于抽象语法树和模拟执行,设计和实现了包含138个宏函数处理程序的自动化XLM反混淆与关键威胁指标(IOC,indicators of compromise)提取系统XLMRevealer;在此基础上,根据XLM代码特点提取Word和Token特征,通过特征融合能够捕获多层次细粒度特征,并在XLMRevealer中构造CNN-BiLSTM(convolution neural network-bidirectional long short term memory)模型,从不同维度挖掘家族样本的关联性和完成家族分类。最后,从5个来源构建包含2346个样本的数据集并用于反混淆实验和家族分类实验。实验结果表明,XLMRevealer的反混淆成功率达到71.3%,相比XLMMacroDeobfuscator和SYMBEXCEL工具分别提高了20.8%和15.8%;反混淆效率稳定,平均耗时仅为0.512 s。XLMRevealer对去混淆XLM代码的家族分类准确率高达94.88%,效果优于所有基线模型,有效体现Word和Token特征融合的优势。此外,为探索反混淆对家族分类的影响,并考虑不同家族使用的混淆技术可能有所不同,模型会识别到混淆技术的特征,分别对反混淆前和反混淆后再统一混淆的XLM代码进行实验,家族分类准确率为89.58%、53.61%,证明模型能够学习混淆技术特征,更验证了反混淆对家族分类极大的促进作用。展开更多
基金We are grateful to National Natural Science Foundation of China(Grant No.22375056,52272163)the Key R&D Program of Hebei(Grant No.216Z1201G)+1 种基金Natural Science Foundation of Hebei Province(Grant No.E2022208066,B2021208014)Key R&D Program of Hebei Technological Innovation Center of Chiral Medicine(Grant No.ZXJJ20220105).
文摘Free-standing covalent organic framework(COFs)nanofilms exhibit a remarkable ability to rapidly intercalate/de-intercalate Li^(+) in lithium-ion batteries,while simultaneously exposing affluent active sites in supercapacitors.The development of these nanofilms offers a promising solution to address the persistent challenge of imbalanced charge storage kinetics between battery-type anode and capacitor-type cathode in lithium-ion capacitors(LICs).Herein,for the first time,custom-made COFBTMB-TP and COFTAPB-BPY nanofilms are synthesized as the anode and cathode,respectively,for an all-COF nanofilm-structured LIC.The COFBTMB-TP nanofilm with strong electronegative–CF3 groups enables tuning the partial electron cloud density for Li^(+) migration to ensure the rapid anode kinetic process.The thickness-regulated cathodic COFTAPB-BPY nanofilm can fit the anodic COF nanofilm in the capacity.Due to the aligned 1D channel,2D aromatic skeleton and accessible active sites of COF nanofilms,the whole COFTAPB-BPY//COFBTMB-TP LIC demonstrates a high energy density of 318 mWh cm^(−3) at a high-power density of 6 W cm^(−3),excellent rate capability,good cycle stability with the capacity retention rate of 77%after 5000-cycle.The COFTAPB-BPY//COFBTMB-TP LIC represents a new benchmark for currently reported film-type LICs and even film-type supercapacitors.After being comprehensively explored via ex situ XPS,7Li solid-state NMR analyses,and DFT calculation,it is found that the COFBTMB-TP nanofilm facilitates the reversible conversion of semi-ionic to ionic C–F bonds during lithium storage.COFBTMB-TP exhibits a strong interaction with Li^(+) due to the C–F,C=O,and C–N bonds,facilitating Li^(+) desolation and absorption from the electrolyte.This work addresses the challenge of imbalanced charge storage kinetics and capacity between the anode and cathode and also pave the way for future miniaturized and wearable LIC devices.
基金supported by the National Key Research and Development Program of China (2022YFB4002100)the development project of Zhejiang Province's "Jianbing" and "Lingyan" (2023C01226)+4 种基金the National Natural Science Foundation of China (22278364, U22A20432, 22238008, 22211530045, and 22178308)the Fundamental Research Funds for the Central Universities (226-2022-00044 and 226-2022-00055)the Science Foundation of Donghai Laboratory (DH-2022ZY0009)the Startup Foundation for Hundred-Talent Program of Zhejiang UniversityScientific Research Fund of Zhejiang Provincial Education Department.
文摘Metal-organic frameworks(MOFs)have been developed as an ideal platform for exploration of the relationship between intrinsic structure and catalytic activity,but the limited catalytic activity and stability has hampered their practical use in water splitting.Herein,we develop a bond length adjustment strategy for optimizing naphthalene-based MOFs that synthesized by acid etching Co-naphthalenedicarboxylic acid-based MOFs(donated as AE-CoNDA)to serve as efficient catalyst for water splitting.AE-CoNDA exhibits a low overpotential of 260 mV to reach 10 mA cm^(−2)and a small Tafel slope of 62 mV dec^(−1)with excellent stability over 100 h.After integrated AE-CoNDA onto BiVO_(4),photocurrent density of 4.3 mA cm^(−2)is achieved at 1.23 V.Experimental investigations demonstrate that the stretched Co-O bond length was found to optimize the orbitals hybridization of Co 3d and O 2p,which accounts for the fast kinetics and high activity.Theoretical calculations reveal that the stretched Co-O bond length strengthens the adsorption of oxygen-contained intermediates at the Co active sites for highly efficient water splitting.
基金the Beijing Nova Program(20230484431)Opening Project of State Silica-Based Materials Laboratory of Anhui Province(2022KF12)is gratefully acknowledged.
文摘With the continuous advancement of communication technology,the escalating demand for electromagnetic shielding interference(EMI)materials with multifunctional and wideband EMI performance has become urgent.Controlling the electrical and magnetic components and designing the EMI material structure have attracted extensive interest,but remain a huge challenge.Herein,we reported the alternating electromagnetic structure composite films composed of hollow metal-organic frameworks/layered MXene/nanocellulose(HMN)by alternating vacuum-assisted filtration process.The HMN composite films exhibit excellent EMI shielding effectiveness performance in the GHz frequency(66.8 dB at Kaband)and THz frequency(114.6 dB at 0.1-4.0 THz).Besides,the HMN composite films also exhibit a high reflection loss of 39.7 dB at 0.7 THz with an effective absorption bandwidth up to 2.1 THz.Moreover,HMN composite films show remarkable photothermal conversion performance,which can reach 104.6℃under 2.0 Sun and 235.4℃under 0.8 W cm^(−2),respectively.The unique micro-and macrostructural design structures will absorb more incident electromagnetic waves via interfacial polarization/multiple scattering and produce more heat energy via the local surface plasmon resonance effect.These features make the HMN composite film a promising candidate for advanced EMI devices for future 6G communication and the protection of electronic equipment in cold environments.
基金National Key Research and Development Program of China (2021YFB3500700)National Natural Science Foundation of China (51802015)Fundamental Research Funds for the Central Universities (FRF-EYIT-23-07)。
文摘In this work,nickel foam supported CeO_(2)-modified CoBDC(BDC stands for terephthalic acid linker)metal-organic frameworks(NF/CoBDC@CeO_(2)) are prepared by hydrothermal and subsequent impregnation methods,which can be further transformed to NF/CoOOH@CeO_(2) by reconstruction during the electrocatalytic test.The obtained NF/CoOOH@CeO_(2) exhibits excellent performance in electrocatalytic oxidation of 5-hydroxymethylfurfural(HMF) because the introduction of CeO_(2) can optimize the electronic structure of the heterointerface and accelerate the accumulation of ^(*)OH.It requires only a potential of 1.290 V_(RHE) to provide a current density of 50 mA cm^(-2) in 1.0 M KOH+50 mM HMF,which is 222 mV lower than that required in 1,0 M KOH(1.512 V_(RHE)).In addition,density-functional theory calculation results demonstrate that CeO_(2) biases the electrons to the CoOOH side at the heterointerface and promotes the adsorption of ^(*)OH and ^(*)HMF on the catalyst surface,which lower the reaction energy barrier and facilitate the electrocata lytic oxidation process.
基金supported by the National Natural Science Foundation of China grant(U2244220)China Geological Survey Project grant(DD20190551,DD20230351)。
文摘The Qilian Orogenic belt is one of the typical orogenic belts globally and a natural laboratory for studying plate tectonics.Many researchers have studied the ophiolite and high pressure and ultra-high pressure metamorphic rocks in the Qilian orogen and obtained valuable achievements.However,a hot debate exists on the basement property,the distribution of ophiolite,and the boundaries of tectonic units.Large-scale high-precision aeromagnetic surveys have recently been conducted in the Qilian Orogenic belt and adjacent areas.In this study,we are trying to analysis the tectonic framework of the Qilian Orogen using 1:500,000 aeromagnetic data.The results provide geophysical perspectives for studying the structural framework and deformation of this area.According to the aeromagnetic∆T anomaly map,the central and Southern Qilian have the same magnetic anomaly feature that noticeably differs from the North Qilian Orogenic belt and the Qaidam Block.This result indicates that the central and Southern Qilian have a unified magnetic basement and differ from the North Qilian orogenic belt and Qaidam Block.The map shows the distribution of ophiolite in the North Qilian orogenic belt.Linear magnetic anomalies represent the ophiolites because the mafic–ultramafic rocks usually have high magnetic susceptibility.The ophiolite belts are continuously distributed in the western part of North Qilian orogenic belt and have a large scale.However,the scale of the ophiolite belt and the outcropping of mafic–ultramafic rocks reduces when they pass through Qilian County to the east.The results indicate differences in the evolution process between the eastern and western parts of North Qilian,with Qilian County as the transition zone.This study also systematically defines the geophysical boundaries of the Qaidam Block,Qilian Block,North Qilian Orogenic belt,and Alxa block.It is proposed that the sinistral displacement of the Altun Fault is adjusted and absorbed by the series of NE-trending faults in the Qilian orogen and merge into the Longshoushan–Gushi Fault.The extension of the North Qilian Orogenic belt is strengthened by the neotectonics movement along the shearing direction,which separated the North Qilian Orogenic belt into several segments and formed a series of northeast-trending faults.
基金This paper is a phased achievement of the key project of the Chongqing Municipal Education Commission entitled“Research on Establishment of Regional Legal Framework for Rural Revitalization”(Project No.23SKJD033)the university-level project of Southwest University of Political Science&Law entitled“A Comparative Study on Legislation for Agricultural and Rural Modernization”(Project No.DFLF2020Y12).
文摘In the era of the Internet,various network platforms have evolved into new hubs for information dissemination.Currently,China has established a platform-centered content regulation framework,wherein platforms proactively enforce content regulations in accordance with legal censorship obligations.Additionally,platform policies and user agreements augment their authority in content regulation.The platforms can achieve cost-effective and highly efficient content regulation by leveraging their strategic advantages enabled by their own technical capabilities and extensive coverage.The platform self-regulation model,however,still faces challenges.First,accurately evaluating content remains a formidable task;second,ensuring effective platform publicity through self-regulation poses difficulties;third,users may potentially face disadvantages due to the platform’s right of self-regulation;and fourth,digital copyright owners face challenges when defending digital copyright disputes under the safe harbor rule.Therefore,it is imperative to establish,review,and revise the legal framework for content regulation of network platforms in order to enhance the efficiency of their governance systems.The formulation of the legal framework for content regulation of network platforms may encompass the following aspects:rationalizing obligations pertaining to platform content regulations,enhancing supervision over platform self-regulation,and establishing a dual-track responsibility system for digital copyright content regulation.This will ensure a harmonious balance among public interests,users’personal rights and interests,and commercial benefits through regulating the content on network platforms.
基金supported by the National Natural Science Foundation of China-China State Railway Group Co.,Ltd.Railway Basic Research Joint Fund (Grant No.U2268217)the Scientific Funding for China Academy of Railway Sciences Corporation Limited (No.2021YJ183).
文摘Graph Convolutional Neural Networks(GCNs)have been widely used in various fields due to their powerful capabilities in processing graph-structured data.However,GCNs encounter significant challenges when applied to scale-free graphs with power-law distributions,resulting in substantial distortions.Moreover,most of the existing GCN models are shallow structures,which restricts their ability to capture dependencies among distant nodes and more refined high-order node features in scale-free graphs with hierarchical structures.To more broadly and precisely apply GCNs to real-world graphs exhibiting scale-free or hierarchical structures and utilize multi-level aggregation of GCNs for capturing high-level information in local representations,we propose the Hyperbolic Deep Graph Convolutional Neural Network(HDGCNN),an end-to-end deep graph representation learning framework that can map scale-free graphs from Euclidean space to hyperbolic space.In HDGCNN,we define the fundamental operations of deep graph convolutional neural networks in hyperbolic space.Additionally,we introduce a hyperbolic feature transformation method based on identity mapping and a dense connection scheme based on a novel non-local message passing framework.In addition,we present a neighborhood aggregation method that combines initial structural featureswith hyperbolic attention coefficients.Through the above methods,HDGCNN effectively leverages both the structural features and node features of graph data,enabling enhanced exploration of non-local structural features and more refined node features in scale-free or hierarchical graphs.Experimental results demonstrate that HDGCNN achieves remarkable performance improvements over state-ofthe-art GCNs in node classification and link prediction tasks,even when utilizing low-dimensional embedding representations.Furthermore,when compared to shallow hyperbolic graph convolutional neural network models,HDGCNN exhibits notable advantages and performance enhancements.
文摘近年来,使用恶意Excel 4.0宏(XLM)文档的攻击迎来了爆发,而XLM代码往往经过复杂的混淆,现有方法或检测系统难以分析海量样本的真实功能。因此,针对恶意样本中使用的各类混淆技术,基于抽象语法树和模拟执行,设计和实现了包含138个宏函数处理程序的自动化XLM反混淆与关键威胁指标(IOC,indicators of compromise)提取系统XLMRevealer;在此基础上,根据XLM代码特点提取Word和Token特征,通过特征融合能够捕获多层次细粒度特征,并在XLMRevealer中构造CNN-BiLSTM(convolution neural network-bidirectional long short term memory)模型,从不同维度挖掘家族样本的关联性和完成家族分类。最后,从5个来源构建包含2346个样本的数据集并用于反混淆实验和家族分类实验。实验结果表明,XLMRevealer的反混淆成功率达到71.3%,相比XLMMacroDeobfuscator和SYMBEXCEL工具分别提高了20.8%和15.8%;反混淆效率稳定,平均耗时仅为0.512 s。XLMRevealer对去混淆XLM代码的家族分类准确率高达94.88%,效果优于所有基线模型,有效体现Word和Token特征融合的优势。此外,为探索反混淆对家族分类的影响,并考虑不同家族使用的混淆技术可能有所不同,模型会识别到混淆技术的特征,分别对反混淆前和反混淆后再统一混淆的XLM代码进行实验,家族分类准确率为89.58%、53.61%,证明模型能够学习混淆技术特征,更验证了反混淆对家族分类极大的促进作用。