Dynamic cone penetrometer is mainly used as an in situ device and laboratory application, in a mould, has rarely been reported due to the confining effect. In this study, a dynamic lightweight cone penetrometer that c...Dynamic cone penetrometer is mainly used as an in situ device and laboratory application, in a mould, has rarely been reported due to the confining effect. In this study, a dynamic lightweight cone penetrometer that can be used in a CBR （California bearing ratio） mould in the laboratory as well as in the field, with similar results, was developed. The results show that the influence of the mould confinement can be eliminated when the hammer mass is 2.25 kg. A strong correlation was found between CBR values and the new dynamic lightweight penetrometer index, for six fine-grained soil samples, with different moisture contents, used in this study.展开更多
In a recent paper [2002 Phys. Rev. Lett. 88 174102], Bandt and Pompe propose permutation entropy （PE） as a natural complexity measure for arbitrary time series which may be stationary or nonstationary,deterministic ...In a recent paper [2002 Phys. Rev. Lett. 88 174102], Bandt and Pompe propose permutation entropy （PE） as a natural complexity measure for arbitrary time series which may be stationary or nonstationary,deterministic or stochastic.Their method is based on a comparison of neighbouring values.This paper further develops PE,and proposes the concept of fine-grained PE （FGPE） defined by the order pattern and magnitude of the difference between neighbouring values. This measure excludes the case where vectors with a distinct appearance are mistakenly mapped onto the same permutation type,and consequently FGPE becomes more sensitive to the dynamical change of time series than does PE,according to our simulation and experimental results.展开更多
Software vulnerabilities are the root cause of various information security incidents while dynamic taint analysis is an emerging program analysis technique. In this paper, to maximize the use of the technique to dete...Software vulnerabilities are the root cause of various information security incidents while dynamic taint analysis is an emerging program analysis technique. In this paper, to maximize the use of the technique to detect software vulnerabilities, we present SwordDTA, a tool that can perform dynamic taint analysis for binaries. This tool is flexible and extensible that it can work with commodity software and hardware. It can be used to detect software vulnerabilities with vulnerability modeling and taint check. We evaluate it with a number of commonly used real-world applications. The experimental results show that SwordDTA is capable of detecting at least four kinds of softavare vulnerabilities including buffer overflow, integer overflow, division by zero and use-after-free, and is applicable for a wide range of software.展开更多
Proprietary(or semi-proprietary)protocols are widely adopted in industrial control systems(ICSs).Inferring protocol format by reverse engineering is important for many network security applications,e.g.,program tests ...Proprietary(or semi-proprietary)protocols are widely adopted in industrial control systems(ICSs).Inferring protocol format by reverse engineering is important for many network security applications,e.g.,program tests and intrusion detection.Conventional protocol reverse engineering methods have been proposed which are considered time-consuming,tedious,and error-prone.Recently,automatical protocol reverse engineering methods have been proposed which are,however,neither effective in handling binary-based ICS protocols based on network traffic analysis nor accurate in extracting protocol fields from protocol implementations.In this paper,we present a framework called the industrial control system protocol reverse engineering framework(ICSPRF)that aims to extract ICS protocol fields with high accuracy.ICSPRF is based on the key insight that an individual field in a message is typically handled in the same execution context,e.g.,basic block(BBL)group.As a result,by monitoring program execution,we can collect the tainted data information processed in every BBL group in the execution trace and cluster it to derive the protocol format.We evaluate our approach with six open-source ICS protocol implementations.The results show that ICSPRF can identify individual protocol fields with high accuracy(on average a 94.3%match ratio).ICSPRF also has a low coarse-grained and overly fine-grained match ratio.For the same metric,ICSPRF is more accurate than AutoFormat(88.5%for all evaluated protocols and 80.0%for binary-based protocols).展开更多
文摘Dynamic cone penetrometer is mainly used as an in situ device and laboratory application, in a mould, has rarely been reported due to the confining effect. In this study, a dynamic lightweight cone penetrometer that can be used in a CBR （California bearing ratio） mould in the laboratory as well as in the field, with similar results, was developed. The results show that the influence of the mould confinement can be eliminated when the hammer mass is 2.25 kg. A strong correlation was found between CBR values and the new dynamic lightweight penetrometer index, for six fine-grained soil samples, with different moisture contents, used in this study.
基金Project supported by the National High Technology Research and Development Program of China (Grant No 2007AA04Z238)the Qingdao Foundation for Development of Science and Technology,China (Grant No 06-2-2-10-JCH)
文摘In a recent paper [2002 Phys. Rev. Lett. 88 174102], Bandt and Pompe propose permutation entropy （PE） as a natural complexity measure for arbitrary time series which may be stationary or nonstationary,deterministic or stochastic.Their method is based on a comparison of neighbouring values.This paper further develops PE,and proposes the concept of fine-grained PE （FGPE） defined by the order pattern and magnitude of the difference between neighbouring values. This measure excludes the case where vectors with a distinct appearance are mistakenly mapped onto the same permutation type,and consequently FGPE becomes more sensitive to the dynamical change of time series than does PE,according to our simulation and experimental results.
基金Supported by the National High Technology Research and Development Program of China(863 Program)(2012AA012902)the“HGJ”National Major Technological Projects(2013ZX01045-004)
文摘Software vulnerabilities are the root cause of various information security incidents while dynamic taint analysis is an emerging program analysis technique. In this paper, to maximize the use of the technique to detect software vulnerabilities, we present SwordDTA, a tool that can perform dynamic taint analysis for binaries. This tool is flexible and extensible that it can work with commodity software and hardware. It can be used to detect software vulnerabilities with vulnerability modeling and taint check. We evaluate it with a number of commonly used real-world applications. The experimental results show that SwordDTA is capable of detecting at least four kinds of softavare vulnerabilities including buffer overflow, integer overflow, division by zero and use-after-free, and is applicable for a wide range of software.
基金supported by the National Natural Science Foundation of China(No.61833015)。
文摘Proprietary(or semi-proprietary)protocols are widely adopted in industrial control systems(ICSs).Inferring protocol format by reverse engineering is important for many network security applications,e.g.,program tests and intrusion detection.Conventional protocol reverse engineering methods have been proposed which are considered time-consuming,tedious,and error-prone.Recently,automatical protocol reverse engineering methods have been proposed which are,however,neither effective in handling binary-based ICS protocols based on network traffic analysis nor accurate in extracting protocol fields from protocol implementations.In this paper,we present a framework called the industrial control system protocol reverse engineering framework(ICSPRF)that aims to extract ICS protocol fields with high accuracy.ICSPRF is based on the key insight that an individual field in a message is typically handled in the same execution context,e.g.,basic block(BBL)group.As a result,by monitoring program execution,we can collect the tainted data information processed in every BBL group in the execution trace and cluster it to derive the protocol format.We evaluate our approach with six open-source ICS protocol implementations.The results show that ICSPRF can identify individual protocol fields with high accuracy(on average a 94.3%match ratio).ICSPRF also has a low coarse-grained and overly fine-grained match ratio.For the same metric,ICSPRF is more accurate than AutoFormat(88.5%for all evaluated protocols and 80.0%for binary-based protocols).
