Impact of Hinterland Manufacturing on the Development of Container Ports: Evidence from the Pearl River Delta, China

Container ports and hinterland manufacturing are two important forces of the local participation in economic globalization.This study,taking the Pearl River Delta(PRD),China with an export-oriented economy as an example,applies Huff and panel regres-sion models to evaluate the impact of hinterland manufacturing on the development of container ports during the period of 1993–2019.The results show that 1)the spatial patterns of hinterlands for hub ports help to determine the distribution range and scale of economic variables that affect port throughput;2)the hinterland’s gross manufacturing output has universally positive influence on port through-put,wherein export-oriented processing and the entire manufacturing industry have significantly positive impact on port throughput in 1993–2011 and 2001–2019,respectively;3)the two internal structural factors related to an export-oriented economy,labor-intensive sectors and foreign-funded terminals,have positively moderate the direct influence of hinterland manufacturing on port throughput.Our results highlight the importance of local context in understanding port-manufacturing relationship in developing economies.Based on our findings,policy implications are further proposed to enhance port network organization in PRD.

Anti-explosion performance and dynamic response of an innovative multi-layer composite explosion containment vessel

An innovative multi-layer composite explosion containment vessel(CECV)utilizing a sliding steel platealuminum honeycomb-fiber cloth sandwich is put forward to improve the anti-explosion capacity of a conventional single-layer explosion containment vessel(SECV).Firstly,a series of experiments and finite element(FE)simulations of internal explosions are implemented to understand the basic anti-explosion characteristics of a SECV and the rationality of the computational models and methods is verified by the comparison between the experimental results and simulation results.Based on this,the CECV is designed in detail and a variety of FE simulations are carried out to investigate effects of the sandwich structure,the explosive quantity and the laying mode of the fiber cloth on anti-explosion performance and dynamic response of the CECV under internal explosions.Simulation results indicate that the end cover is the critical position for both the SECV and CECV.The maximum pressure of the explosion shock wave and the maximum strain of the CECV can be extremely declined compared to those of the SECV.As a result,the explosive quantity the CECV can sustain is up to 20 times of that the SECV can sustain.Besides,as the explosive quantity increases,the internal pressure of the CECV keeps growing and the plastic deformation and failure of the sandwich structure become more and more severe,yielding plastic strain of the CECV in addition to elastic strain.The results also reveal that the laying angles of the fiber cloth's five layers have an impact on the anti-explosion performance of the CECV.For example,the CECV with fiber cloth layered in 0°/45°/90°/45°/0°mode has the optimal anti-capacity,compared to 0°/0°/0°/0°/0°and 0°/30°/60°/30°/0°modes.Overall,owing to remarkable anti-explosion capacity,this CECV can be regarded as a promising candidate for explosion resistance.

Phase structure evolution and coercivity mechanism of high-Co containing permanent magnets

The phase structure and magnetic properties of high-Co containing permanent magnets with high thermal stability have been systematically studied in this work.It is abnormal that the coercivity of annealed samples was slightly lower than that of sintered samples,while the coercivity was usually enhanced after annealing in conventional Nd–Fe–B samples.Further analysis showed that in addition to RE2(Fe,Co)14B main phase and RE-rich grain boundary phase,there were also new Co-rich magnetic phases located in the grain boundary.During annealing,the phase structures of high-Co containing magnets were readjusted,especially the increasing Co-rich magnetic phase and emerging RE-rich particles precipitated from the main phase.Eventually,the isolated RE-rich particles would act as the pinning center of the domain wall movement in demagnetization process.It was confirmed that the coercivity of annealed high-Co containing magnets was controlled by both nucleation and pinning.Pinning mechanism can partially compensate for the weakening of magnetic isolation due to increased Co-rich magnetic phase,which explained the moderate decrease in coercivity of annealed high-Co containing magnets.The discovery of new coercivity mechanism contributed to in-depth understanding of high-Co containing magnets.

Improved STNModels and Heuristic Rules for Cooperative Scheduling in Automated Container Terminals

Improving the cooperative scheduling efficiency of equipment is the key for automated container terminals to copewith the development trend of large-scale ships. In order to improve the solution efficiency of the existing spacetimenetwork (STN) model for the cooperative scheduling problem of yard cranes (YCs) and automated guidedvehicles (AGVs) and extend its application scenarios, two improved STN models are proposed. The flow balanceconstraints in the original model are decomposed, and the trajectory constraints of YCs and AGVs are added toacquire the model STN_A. The coupling constraint in STN_A is updated, and buffer constraints are added toSTN_A so that themodel STN_B is built.As the size of the problem increases, the solution speed of CPLEX becomesthe bottleneck. So a heuristic method containing three groups of heuristic rules is designed to obtain a near-optimalsolution quickly. Experimental results showthat the computation time of STN_A is shortened by 49.47% on averageand the gap is reduced by 1.69% on average compared with the original model. The gap between the solution ofthe heuristic rules and the solution of CPLEX is less than 3.50%, and the solution time of the heuristic rules is onaverage 99.85% less than the solution time of CPLEX. Compared with STN_A, the computation time for solvingSTN_B increases by 58.93% on average.

Promoting or Inhibiting?Influence of Railway Container Transportation on Regional Economic Development

In the context of building a country with a strong transportation network,railway container transportation(RCT)is an import-ant means of reducing costs,increasing efficiency,and adjusting transportation structures.Thus,its impact on regional economic devel-opment is important.Based on data from railway container-handling stations and spatial econometric models,this study discusses the differences in the development of RCT and their impact on regional economic development at different leves.This study has three main findings:first,there are significant regional differences in the development of the RCT.The intra-regional differences between the east-ern and central regions of China(which do not include Hong Kong,Macao and Taiwan)are gradually narrowing,while the regional dif-ferences in the western region are widening.Meanwhile,the intra-regional differences in important economic zones such as Pearl River Delta Economic Zone(PRDEZ),Chengdu-Chongqing Economic Zone(CYEZ),Bohai Rim Economic Zone(BHEZ),and Yangtze River Delta Economic Zone(YRDEZ)are narrowing daily.Second,the development differences of RCT in regional level and import-ant economic regions level show different trends.The unbalanced features of large regions are increasingly evident,whereas the differ-ences in economic regions are decreasing.However,the problem of overlapping RCT remains prominent.Third,the transformation of RCT development mode and fierce competition among transportation modes cause RCT to have a restraining effect on the regional eco-nomy at three levels.Rational allocation of resources and other means must be used to guide the transformation from inhibition to pro-motion,and by formulating targeted policies that will promote the development of RCT,which will improve the transportation structure and help construct a country with a strong transportation system.

Structural Characteristics and Evolution of a Weighted Sino-US Container Shipping Network

This study selected the Sino-US route data from the top 30 global container liner companies between December 1,2019,and December 29,2019,as the data source utilizing the complex network research methodology.It constructs a Sino-US container shipping network through voyage weighting and analyzes the essential structural characteristics to explore the network’s complex structural fea-tures.The network’s evolution is examined from three perspectives,namely,time,space,and event influence,aiming to comprehens-ively explore the network’s evolution mechanism.The results revealed that:1)the weighted Sino-US container shipping network exhib-its small-world and scale-free properties.Key hub ports in the United States include NEW YORK NY,SAVANNAH GA,LOS ANGELES CA,and OAKLAND CA,whereas SHANGHAI serving as the hub port in China.The geographical distribution of these hub ports is uneven.2)Concerning the evolution of the weighted Sino-US container shipping network,from a temporal perspective,the evolution of the regional structure of the entire Sino-US region and the Inland United States is in a stage of radiative expansion and de-velopment,with a need for further enhancement in competitiveness and development speed.The evolution of the regional structure of southern China and Europe is transitioning from the stage of radiative expansion and development to an advanced equilibrium stage.The shipping development in Northern China,the Western and Eastern United States,and Asia is undergoing significant changes but faces challenges of fierce competition and imbalances.From a spatial perspective,the rationality and effectiveness of the improved weighted Barrat-Barthelemy-Vespignani(BBV)model are confirmed through theoretical derivation.The applicability of the improved evolution model is verified by simulating the evolution of the weighted Sino-US container shipping network.From an event impact per-spective,the Corona Virus Disease 2019(COVID-19)pandemic has not fundamentally affected the spatial pattern of the weighted Sino-US container shipping network but has significantly impacted the network’s connectivity.The network lacks sufficient resilience and stability in emergency situations.3)Based on the analysis of the structural characteristics and evolution of the weighted Sino-US con-tainer shipping network,recommendations for network development are proposed from three aspects:emphasizing the development of hub ports,focusing on the balanced development of the network,and optimizing the layout of Chinese ports.

A Pre-Selection-Based Ant Colony System for Integrated Resources Scheduling Problem at Marine Container Terminal

Marine container terminal(MCT)plays a key role in the marine intelligent transportation system and international logistics system.However,the efficiency of resource scheduling significantly influences the operation performance of MCT.To solve the practical resource scheduling problem(RSP)in MCT efficiently,this paper has contributions to both the problem model and the algorithm design.Firstly,in the problem model,different from most of the existing studies that only consider scheduling part of the resources in MCT,we propose a unified mathematical model for formulating an integrated RSP.The new integrated RSP model allocates and schedules multiple MCT resources simultaneously by taking the total cost minimization as the objective.Secondly,in the algorithm design,a pre-selection-based ant colony system(PACS)approach is proposed based on graphic structure solution representation and a pre-selection strategy.On the one hand,as the RSP can be formulated as the shortest path problem on the directed complete graph,the graphic structure is proposed to represent the solution encoding to consider multiple constraints and multiple factors of the RSP,which effectively avoids the generation of infeasible solutions.On the other hand,the pre-selection strategy aims to reduce the computational burden of PACS and to fast obtain a higher-quality solution.To evaluate the performance of the proposed novel PACS in solving the new integrated RSP model,a set of test cases with different sizes is conducted.Experimental results and comparisons show the effectiveness and efficiency of the PACS algorithm,which can significantly outperform other state-of-the-art algorithms.

Security Risk Assessment in Container Terminals:Empirical Evidence from Greece

The most prominent risk assessment techniques are founded on the values of measuring and controlling the frequency and the consequences of risks in order to assure an“acceptable level”of“safeness”mainly in the lines of environmental,health and hygiene and port product issues.This paper examines security risk assessment approaches within the emerging role of ports.This paper contributes to the current literature by considering the ports of Greece as a case in point and by measuring the degree of its security risk orientation based on certain valid risk factors drawn from the current literature.Moreover,it presents a security risk assessment methodology into the domain of port container terminals.Their potential for ports were quantitatively and qualitatively assessed by discussing issues of security approaches within the maritime industry,in order to facilitate improvement strategies.A two-dimension empirical study was conducted,in a time range of ten years(2010-2020)in order to provide evidence regarding security risk assessment in the port container terminal of Thessaloniki,in Greece.The findings of this study have significant strategic policy implications and shed more light on the role of security risks in the overall risk orientation of container terminals in practice.Finally,further research directions in security risk in ports are proposed.

Reading man皮瓣修复术治疗皮肤缺损的疗效观察

目的:探讨Reading man皮瓣修复术在全身不同部位皮肤缺损及其预防瘢痕增生的临床疗效。方法:回顾性分析2021年1月—2023年10月该科应用Reading man皮瓣修复术治疗全身不同部位皮肤软组织缺损的20例患者临床资料。结果:所有患者皮瓣均成活。术后随访时间为3~24个月,所有皮瓣血运良好,色泽红润,质地柔软,外观适宜,局部皮肤张力较低,手术切口瘢痕增生不明显,切口周围软组织无明显形变,周围关节活动度正常。所有患者均恢复良好,疗效满意。结论:Reading man皮瓣特有的设计可以很好地解决全身多部位较大的皮肤软组织缺损,尤其在术中可以最大限度地减少正常皮肤的切除,术后外观、功能及皮肤瘢痕增生均有较满意的表现,且不存在自体皮移植带来的供皮区损伤。

牛冠状病毒TaqMan荧光定量PCR检测方法的建立及应用

为建立牛冠状病毒TaqMan荧光定量PCR检测方法,根据GenBank收录的牛冠状病毒AKS-01株N基因序列(KU886219)保守区设计特异性引物和探针,构建重组质粒并进行反应条件优化、特异性试验、重复性试验以及敏感性试验,建立一种检测BCoV的TaqMan荧光定量PCR方法。结果显示,建立的牛冠状病毒TaqMan荧光定量PCR检测方法特异性、敏感性和重复性均良好。该方法BCoV重组质粒标准品在5.75×10^(7)~5.75×10^(3)copies/μL时与Ct值呈现良好线性关系,该方法对牛轮状病毒、牛传染性鼻气管炎病毒、牛病毒性腹泻病毒、牛副流感病毒3型均无交叉反应,特异性良好;该方法对BCoV重组质粒标准品最低检测限为5.75×10^(1)copies/μL;批内和批间重复性试验结果稳定,变异系数均小于2%。利用所建立的TaqMan荧光定量PCR方法对收集的132份样品进行检测,与常规PCR相比,两者符合率为96.21%,可为BCoV的临床检测和流行病学调查提供技术支持。

大口黑鲈弹状病毒Taq Man荧光定量PCR检测方法的建立及初步应用

为建立快速、敏感的大口黑鲈弹状病毒(MSRV)流行株Taq Man荧光定量PCR (qPCR)方法,本研究采用NCBI分析MSRV流行株N基因的保守序列,设计特异性引物和Taq Man探针,以构建的并经PCR和测序鉴定正确的重组质粒标准品p MD18-MSRV-N为模板,通过优化各反应条件初步建立MSRV的Taq Man q PCR检测方法。结果显示,建立的Taq Man q PCR方法标准曲线的R2为0.9906,质粒标准品在6.79×10^(8)拷贝/μL~6.79×10^(2)拷贝/μL范围内与Ct值均存在较好的线性关系。采用该方法检测MSRV及相关病毒,评估该方法的特异性,结果显示,该方法可以特异性检测MSRV,而草鱼出血病病毒、神经坏死病毒、鲤春病毒血症病毒、大口黑鲈双RNA病毒、鳜蛙虹彩病毒、传染性脾肾坏死病毒、石斑鱼虹彩病毒、大口黑鲈蛙虹彩病毒等8种常见鱼类病毒检测结果均为阴性;采用建立的方法检测不同浓度的质粒标准品(6.79×10^(8)拷贝/μL~6.79×10^(1)拷贝/μL),评估该方法的敏感性,结果显示,该方法的检测限为6.79×10^(2)拷贝/μL,比文献中的常规PCR方法敏感1 000倍;以不同批次或同一批次提取的不同浓度的质粒标准品作为模板,分别利用该方法检测,评估该方法的重复性,结果显示,该方法批内和批间重复性试验的变异系数均小于2%。采用该方法和文献中的常规PCR同时检测71份临床发病的大口黑鲈、鳜鱼、鲮鱼组织样品,结果显示阳性率为16.9%(12/71),阴性率为83.1%(59/71),且阳性样品均是从发病大口黑鲈的组织样品中检测到,而发病的鳜鱼、鲮鱼组织样品中均未检测到该病毒;常规PCR方法的阳性率为9.9%(7/71),阴性率为90.1%(64/71),二者的总符合率为93.0%。本研究建立的MSRV Taq Man q PCR方法特异性强、敏感性高、重复性和准确性均较好,可用于大口黑鲈临床样品的检测,为MSRV的快速检测提供了可行的技术手段。

“Smart”micro/nano container-based self-healing coatings on magnesium alloys:A review

Coating technologies are a commonly used way to protect metals against corrosion.However,with more and more severe service environments of materials,many protective coating systems often are not environmentally friendly or toxic as in the case of chromates.Based on the world’s abundant ideal magnesium(Mg)and its alloy,the smart self-healing anticorrosive coating can autonomously restore the damaged part of the coating according to the environmental changes,strengthen the corrosion protection ability,and prolong its service life.This paper reviews the research progress of smart self-healing coatings on Mg alloys.These coatings mostly contain suitable corrosion inhibitors encapsulated into micro/nano containers.Moreover,the different self-healing mechanisms and functionalities of micro/nano containers are discussed.The micro/nano containers range from inorganic nanocontainers such as mesoporous nanoparticles(silica(SiO_(2)),titanium dioxide(TiO_(2)),etc.),over inorganic clays(halloysite,hydrotalcite-like,zeolite),to organic nanocontainers such as polymer microcapsules,nanofibers,chitosan(CS)and cyclodextrin(CD),as well as,carbon materials such as graphene and carbon nanotubes and hybrids such as metal organic frameworks.The functioning of micro/nano containers can be divided in two principal groups:autonomous(based on defect filling and corrosion inhibition)and non-autonomous(based on dynamic bonds and shape memory polymers).Moreover,multi functionalities and composite applications of various micro/nano containers are summarized.At present,significant progress has been made in the preparation methods and technologies of micro/nano containers.Achieving long-term self-healing properties of coatings sensing of coating failure and early warning after self-healing function failure can be expected as the main development direction of self-healing corrosion protection coatings in the future.

鸡毒支原体 Taq Man实时荧光定量PCR检测方法的建立

为快速检测鸡毒支原体,根据鸡毒支原体的保守基因设计特异性引物和Taq Man探针,建立鸡毒支原体Taq Man实时荧光定量PCR方法并分析鸡毒支原体培养过程中颜色单位改变法(color change unit,CCU)和荧光定量PCR检测的相关性。结果显示,标准曲线y=-3.646x+44.208,相关系数R^(2)=0.998,最低检测限度为1 copy/μL;与其他菌株等均无交叉反应;组内和组间变异系数均小于3%,表明该方法具有良好的稳定性和可重复性。用建立的实时荧光定量PCR检测方法对26份临床样品进行检测,该方法较普通PCR方法检出率更高。建立的荧光定量PCR与CCU显示鸡毒支原体在对数生长期时,两者具有一定的对应关系。表明建立了鸡毒支原体Taq Man探针实时荧光定量PCR检测方法,可实现对鸡毒支原体的快速检测,为鸡毒支原体感染的防控提供技术基础。

Container-Based Internet of Vehicles Edge Application Migration Mechanism

Internet of Vehicles(IoV)applications integrating with edge com-puting will significantly drive the growth of IoV.However,the contradiction between the high-speed mobility of vehicles,the delay sensitivity of corre-sponding IoV applications and the limited coverage and resource capacity of distributed edge servers will pose challenges to the service continuity and stability of IoV applications.IoV application migration is a promising solution that can be supported by application containerization,a technology for seamless cross-edge-server application migration without user perception.Therefore,this paper proposes the container-based IoV edge application migration mechanism,consisting of three parts.The first is the migration trigger determination algorithm for cross-border migration and service degra-dation migration,respectively,based on trajectory prediction and traffic awareness to improve the determination accuracy.The second is the migration target decision calculation model for minimizing the average migration time and maximizing the average service time to reduce migration times and improve the stability and adaptability of migration decisions.The third is the migration decision algorithm based on the improved artificial bee colony algorithm to avoid local optimal migration decisions.Simulation results show that the proposed migration mechanism can reduce migration times,reduce average migration time,improve average service time and enhance the stability and adaptability of IoV application services.

牛支原体和丝状支原体丝状亚种双重TaqMan荧光定量PCR检测方法的建立与应用

牛传染性胸膜肺炎和牛支原体病均为重要的牛传染病,两者均可致牛出现呼吸系统症状,临床上难以区分。为建立鉴别诊断牛传染性胸膜肺炎和牛支原体病的双重Taq Man荧光定量PCR检测方法,本研究根据这两种病的病原丝状支原体丝状亚种和牛支原体的基因组保守区域(丝状支原体丝状亚种nt826-nt1742,牛支原体nt189-nt618)分别设计引物与探针,通过优化反应体系与反应条件,建立同时检测这两种病原的Taq Man荧光定量PCR检测方法。特异性试验结果显示,该方法仅对丝状支原体丝状亚种模拟样品和牛支原体检测结果为阳性,而巴氏杆菌、牛传染性鼻气管炎病毒、无乳支原体、山羊支原体山羊肺炎亚种、丝状支原体山羊亚种、关节炎支原体Leachii株检测结果均为阴性,特异性较强。分别以1.0×10~7拷贝/μL~1.0×10~1拷贝/μL的p EASY-Mmm和p EASY-Mb质粒标准品为模板,进行敏感性试验,结果显示,该方法对丝状支原体丝状亚种和牛支原体重组质粒标准品的检测限均为1.0×10~1拷贝/μL,敏感性较高。对不同浓度质粒标准品混合物的重复性试验结果显示,组内与组间重复性试验变异系数均小于2.5%,重复性较好。利用该方法对112份临床样品(104份鼻拭子、8份肺组织样品)检测,结果显示,丝状支原体丝状亚种检测结果和已发表PCR方法检测结果一致,均为阴性,而本实验建立的方法检测出4份牛支原体阳性样品,且经测序证实检出样品为真实阳性样品,而已发表的多重PCR方法检测该病原结果均为阴性。本研究建立了能够同时检测丝状支原体丝状亚种和牛支原体的双重Taq Man荧光定量PCR方法,其特异性强、敏感性高、重复性好,可用于各种临床样品的检测,为这两种病原的快速检测和流行病学调查提供了技术手段。

羊贝氏柯克斯体TaqMan荧光定量PCR检测方法的建立及应用

为建立检测贝氏柯克斯体(Coxiella burnetii)实时荧光定量PCR方法,根据GenBank上收录的C.burnetii RSA439株com1基因序列(CP040059.1)保守区设计特异性引物和探针,并构建重组质粒及优化反应条件,以期建立一种检测贝氏柯克斯体的Taq Man荧光定量PCR方法。结果显示,该方法所建立标准曲线线性关系良好;敏感性试验结果显示,最低检出限为2.45×10^(2) copies/μL,与PCR最低检出限为2.45×10^(4) copies/μL相比较,灵敏度提高了100倍;对羊支原体、羊流产衣原体、羊布鲁氏菌等均无交叉反应,批内和批间重复性试验结果稳定,变异系数均小于3%,说明特异性、重复性好;利用该方法对收集的126份样品进行检测,结果显示样品阳性率为9.52%,常规PCR检测阳性率为7.14%,符合率为90.47%。该方法可为贝氏柯克斯体临床上快速检测及防控提供技术支持。

Vertical Pod Autoscaling in Kubernetes for Elastic Container Collaborative Framework

Kubernetes is an open-source container management tool which automates container deployment,container load balancing and container(de)scaling,including Horizontal Pod Autoscaler(HPA),Vertical Pod Autoscaler(VPA).HPA enables flawless operation,interactively scaling the number of resource units,or pods,without downtime.Default Resource Metrics,such as CPU and memory use of host machines and pods,are monitored by Kubernetes.Cloud Computing has emerged as a platform for individuals beside the corporate sector.It provides cost-effective infrastructure,platform and software services in a shared environment.On the other hand,the emergence of industry 4.0 brought new challenges for the adaptability and infusion of cloud computing.As the global work environment is adapting constituents of industry 4.0 in terms of robotics,artificial intelligence and IoT devices,it is becoming eminent that one emerging challenge is collaborative schematics.Provision of such autonomous mechanism that can develop,manage and operationalize digital resources like CoBots to perform tasks in a distributed and collaborative cloud environment for optimized utilization of resources,ensuring schedule completion.Collaborative schematics are also linked with Bigdata management produced by large scale industry 4.0 setups.Different use cases and simulation results showed a significant improvement in Pod CPU utilization,latency,and throughput over Kubernetes environment.

Nonlinear semi-analytical modeling of liquid sloshing in rectangular container with horizontal baffles

A nonlinear semi-analytical scheme is proposed for investigating the finiteamplitude nonlinear sloshing in a horizontally baffled rectangular liquid container under the seismic excitation.The sub-domain method is developed to analytically derive the modal behaviors of the baffled linear sloshing.The viscosity dissipation effects from the interior liquid and boundary layers are considered.With the introduction of the generalized time-dependent coordinates,the surface wave elevation and velocity potential are represented by a series of linear modal eigenfunctions.The infinite-dimensional modal system of the nonlinear sloshing is formulated based on the Bateman-Luke variational principle,which is further reduced to the finite-dimensional modal system by using the NarimanovMoiseev asymptotic ordering.The base force and overturning moment induced by the nonlinear sloshing are derived as the functions of the generalized time-dependent coordinates.The present results match well with the available analytical,numerical,and experimental results.The paper examines the surface wave elevation,base force,and overturning moment versus the baffle parameters and excitation amplitude in detail.

Container Instrumentation and Enforcement System for Runtime Security of Kubernetes Platform with eBPF

Containerization is a fundamental component of modern cloud-native infrastructure,and Kubernetes is a prominent platform of container orchestration systems.However,containerization raises significant security concerns due to the nature of sharing a kernel among multiple containers,which can lead to container breakout or privilege escalation.Kubernetes cannot avoid it as well.While various tools,such as container image scanning and configuration checking,can mitigate container workload vulnerabilities,these are not foolproof and cannot guarantee perfect isolation or prevent every active threat in runtime.As such,a policy enforcement solution is required to tackle the problem,and existing solutions based on LSM(Linux Security Module)frameworks may not be adequate for some situations.To address this,we propose an enforcement system based on BPF-LSM,which leverages eBPF(extended Berkeley Packet Filter)technology to provide fine-grained control and dynamic adoption of security policies.In this paper,we compare different LSM implementations to highlight the challenges of current enforcement solutions before detailing the design of our eBPF-based Kubernetes Runtime Instrumentation and Enforcement System(KRSIE).Finally,we evaluate the effectiveness of our system using a real-world scenario,as measuring the performance of a policy enforcement system is a complex task.Our results show that KRSIE can successfully control containers’behaviors using LSM hooks at container runtime,offering improved container security for cloud-native infrastructure.

Container Networking Performance Analysis for Large-Scale User Behavior Simulation

Accurately simulating large-scale user behavior is important to improve the similarity between the cyber range and the real network environment. The Linux Container provides a method to simulate the behavior of large-scale users under the constraints of limited physical resources. In a container-based virtualization environment, container networking is an important component. To evaluate the impact of different networking methods between the containers on the simulation performance, the typical container networking methods such as none, bridge, macvlan were analyzed, and the performance of different networking methods was evaluated according to the throughput and latency metrics. The experiments show that under the same physical resource constraints, the macvlan networking method has the best network performance, while the bridge method has the worst performance. This result provides a reference for selecting the appropriate networking method in the user behavior simulation process.