使用HTTP Tunneling技术实现穿透网络防火墙的通信

近年来,防火墙在网络中得到了广泛的应用。它能够比较有效地防范病毒与黑客的攻击,保护网络的安全。但是也带来了一些不利影响,使一些需要进行网络通信的应用软件系统不能正常工作。介绍一个解决方案,并且重点介绍通过HTTP Tunneling技术使用基于文本的HTTP协议传送二进制数据的方法。

利用进程监视来检测Http-Tunnel

Http-Tunnel是一种新兴的木马通讯技术。由于其隐蔽性很好,一般的入侵检测技术和防火墙难以对其进行有效的检测。文章介绍了如何利用进程监视来追踪非法进程的源头,以抵御Http-Tunnel。这种通过溯源来追踪网络流量中异常的新颖方法,取得了较好的实验效果。

一种基于HTTP协议的超声数据提交方案

文章提出了一种基于HTTP协议的超声数据提交方案,该方案使用通用互联网技术,构建在HTTP协议基础上,先后通过授权管理、超声数据格式化、加密格式化超声数据等过程,最终把加密数据利用POST请求提交到医联体内上级医疗机构或政府公共信息化平台远程服务器上,为上、下级医疗机构提供超声数据共享服务,为政府和学术界进行疾病预警、健康管理、疾病分析研究提供根据。

基于ICE与HTTP Tunnel技术的NAT/FW穿越方案

在现代网络中,越来越多的主机被部署在NAT和防火墙(FW)之后,这就要求VoIP、P2P等通信软件必须具备穿越NAT/FW的能力,才能实现端到端的数据传输。现有的STUN、TURN、ICE等方案虽然可以穿越大部分NAT/FW,但对有端口或协议限制的防火墙却无能为力。本文提出了将ICE和HTTP Tunnel技术相结合的穿越方案,设计并实现了可跨平台运行的HTTP Tunnel模块来配合ICE进行穿越。实验证明,在防火墙只开放80端口这种苛刻的条件下,该HTTP Tunnel模块也能够成功穿越大部分防火墙,实现数据流的稳定传输。

一种基于HTTP/3传输特性的加密视频识别方法

视频流量逐渐在网络中占据主导地位,且视频平台大多对其进行加密传输。虽然加密传输视频可以有效保护用户隐私,但是也增加了监管有害视频传播的难度.现有的加密视频识别方法基于TCP(Transmission Control Protocol)传输协议头部信息和HTTP/1.1(Hypertext Transfer Protocol Version1.1)的传输模式,提取应用层音视频数据单元传输长度序列来实现视频识别.但是随着基于UDP(User Datagram Protocol)的QUIC(Quick UDP Internet Connections)协议及基于QUIC实现的HTTP/3(Hypertext Transfer Protocol Version 3)协议应用于视频传输,已有方法不再适用.HTTP/3协议缺少类似TCP的头部信息,且使用了多路复用机制,并对几乎所有数据进行了加密,此外,视频平台开始使用多片段合并分发技术,这给从网络流量中精准识别加密视频带来了巨大挑战。本文基于HTTP/3协议中的控制信息特征,提出了从HTTP/3加密视频流中提取数据传输特征并进行修正的方法,最大程度复原出应用层音视频长度特征.面向多片段合并分发导致的海量匹配问题,本文基于明文指纹库设计了键值数据库来实现视频的快速识别.实验结果表明,本文提出的基于HTTP/3传输特性的加密视频识别方法能够在包含36万个真实视频指纹的YouTube大规模指纹库中达到接近99%的准确率,100%的精确率以及99.32%的F1得分,对传输过程中加人了填充顿的Facebook平台,在包含28万个真实视频指纹的大规模指纹库中达到95%的准确率、100%的精确率以及96.45%的F1得分,在具有同样特性的Instagram平台中,最高可达到97.57%的F1得分,且本方法在所有指纹库中的平均视频识别时间均低于0.4秒.本文的方法首次解决了使用HTTP/3传输的加密视频在大规模指纹库场景中的识别问题,具有很强的实用性和通用性.

基于HTTP协议多现场程序远程更新设计

为解决单向网络环境中程序不能远程更新问题,提出了一种基于HTTP协议多现场程序远程更新方案。在高低安全区分别搭建HTTP客户端、服务端,利用HTTP协议实现部署文件由高安全至低安全区单向传输;低安全区接收文件完成后,立即调用外部自动部署程序实现最新业务程序的部署更新。此外,传输过程中对程序文件进行加密传输保证安全性,并配置日志删除策略防止进程阻塞。实验结果表明,所述方案实现了对不同大小程序文件的成功部署,提高了程序多现场部署时运行维护效率。

基于RocketMQ跨电力安全区的HTTP异步传输

电力监控系统中禁止低安全区主动访问高安全区的规定给需要相应功能的系统带来挑战。文章提出了一种基于RocketMQ跨电力安全区的HTTP异步传输方案,低安全区对HTTP请求进行唯一编码、缓存至请求队列,高安全区主动消费请求队列重新组装请求,并将请求结果推送至结果队列,利用多线程技术保证数据传输的及时有效。真实场景下的验证结果表明,基于RocketMQ跨电力安全区的HTTP异步传输方案满足了低安全区主动访问高安全区的需求,增强了电力系统安全分区之间的信息共享能力。

Analysis of the interaction between bolt-reinforced rock and surface support in tunnels based on convergence-confinement method

To investigate the interaction of the bolt-reinforced rock and the surface support,an analytical model of the convergence-confinement type is proposed,considering the sequential installation of the fully grouted rockbolts and the surface support.The rock mass is assumed to be elastic-brittle-plastic material,obeying the linear Mohr-Coulomb criterion or the non-linear Hoek-Brown criterion.According to the strain states of the tunnel wall at bolt and surface support installation and the relative magnitude between the bolt length and the plastic depth during the whole process,six cases are categorized upon solving the problem.Each case is divided into three stages due to the different effects of the active rockbolts and the passive surface support.The fictitious pressure is introduced to quantify the threedimensional(3D)effect of the tunnel face,and thus,the actual physical location along the tunnel axis of the analytical section can be considered.By using the bolt-rock strain compatibility and the rocksurface support displacement compatibility conditions,the solutions of longitudinal tunnel displacement and the reaction pressure of surface support along the tunnel axis are obtained.The proposed analytical solutions are validated by a series of 3D numerical simulations.Extensive parametric studies are conducted to examine the effect of the typical parameters of rockbolts and surface support on the tunnel displacement and the reaction pressure of the surface support under different rock conditions.The results show that the rockbolts are more effective in controlling the tunnel displacement than the surface support,which should be installed as soon as possible with a suitable length.For tunnels excavated in weak rocks or with restricted displacement control requirements,the surface support should also be installed or closed timely with a certain stiffness.The proposed method provides a convenient alternative approach for the optimization of rockbolts and surface support at the preliminary stage of tunnel design.

Mechanism of high-preload support based on the NPR anchor cable in layered soft rock tunnels

The control of large deformation problems in layered soft rock tunnels needs to solve urgently.The roof problem is particularly severe among the deformation issues in tunnels.This study first analyzes the asymmetric deformation modes in layered soft rock tunnels with large deformations.Subsequently,we construct a mechanical model under ideal conditions for controlling the roof of layered soft rock tunnels through high preload with the support of NPR anchor cables.The prominent roles of long and short NPR anchor cables in the support system are also analyzed.The results indicate the significance of high preload in controlling the roof of layered soft rock tunnels.The short NPR anchor cables effectively improve the integrity of the stratified soft rock layers,while the long NPR anchor cables effectively mobilize the self-bearing capacity of deep-stable rock layers.Finally,the high-preload support method with NPR anchor cables is validated to have a good effect on controlling large deformations in layered soft rock tunnels through field monitoring data.

Probabilistic analysis of tunnel face seismic stability in layered rock masses using Polynomial Chaos Kriging metamodel

Face stability is an essential issue in tunnel design and construction.Layered rock masses are typical and ubiquitous;uncertainties in rock properties always exist.In view of this,a comprehensive method,which combines the Upper bound Limit analysis of Tunnel face stability,the Polynomial Chaos Kriging,the Monte-Carlo Simulation and Analysis of Covariance method(ULT-PCK-MA),is proposed to investigate the seismic stability of tunnel faces.A two-dimensional analytical model of ULT is developed to evaluate the virtual support force based on the upper bound limit analysis.An efficient probabilistic analysis method PCK-MA based on the adaptive Polynomial Chaos Kriging metamodel is then implemented to investigate the parameter uncertainty effects.Ten input parameters,including geological strength indices,uniaxial compressive strengths and constants for three rock formations,and the horizontal seismic coefficients,are treated as random variables.The effects of these parameter uncertainties on the failure probability and sensitivity indices are discussed.In addition,the effects of weak layer position,the middle layer thickness and quality,the tunnel diameter,the parameters correlation,and the seismic loadings are investigated,respectively.The results show that the layer distributions significantly influence the tunnel face probabilistic stability,particularly when the weak rock is present in the bottom layer.The efficiency of the proposed ULT-PCK-MA is validated,which is expected to facilitate the engineering design and construction.

A methodology for damage evaluation of underground tunnels subjected to static loading using numerical modeling

We have proposed a methodology to assess the robustness of underground tunnels against potential failure.This involves developing vulnerability functions for various qualities of rock mass and static loading intensities.To account for these variations,we utilized a Monte Carlo Simulation(MCS)technique coupled with the finite difference code FLAC^(3D),to conduct two thousand seven hundred numerical simulations of a horseshoe tunnel located within a rock mass with different geological strength index system(GSIs)and subjected to different states of static loading.To quantify the severity of damage within the rock mass,we selected one stress-based(brittle shear ratio(BSR))and one strain-based failure criterion(plastic damage index(PDI)).Based on these criteria,we then developed fragility curves.Additionally,we used mathematical approximation techniques to produce vulnerability functions that relate the probabilities of various damage states to loading intensities for different quality classes of blocky rock mass.The results indicated that the fragility curves we obtained could accurately depict the evolution of the inner and outer shell damage around the tunnel.Therefore,we have provided engineers with a tool that can predict levels of damages associated with different failure mechanisms based on variations in rock mass quality and in situ stress state.Our method is a numerically developed,multi-variate approach that can aid engineers in making informed decisions about the robustness of underground tunnels.

Comparative Analysis of ARIMA and LSTM Model-Based Anomaly Detection for Unannotated Structural Health Monitoring Data in an Immersed Tunnel

Structural Health Monitoring(SHM)systems have become a crucial tool for the operational management of long tunnels.For immersed tunnels exposed to both traffic loads and the effects of the marine environment,efficiently identifying abnormal conditions from the extensive unannotated SHM data presents a significant challenge.This study proposed amodel-based approach for anomaly detection and conducted validation and comparative analysis of two distinct temporal predictive models using SHM data from a real immersed tunnel.Firstly,a dynamic predictive model-based anomaly detectionmethod is proposed,which utilizes a rolling time window for modeling to achieve dynamic prediction.Leveraging the assumption of temporal data similarity,an interval prediction value deviation was employed to determine the abnormality of the data.Subsequently,dynamic predictive models were constructed based on the Autoregressive Integrated Moving Average(ARIMA)and Long Short-Term Memory(LSTM)models.The hyperparameters of these models were optimized and selected using monitoring data from the immersed tunnel,yielding viable static and dynamic predictive models.Finally,the models were applied within the same segment of SHM data,to validate the effectiveness of the anomaly detection approach based on dynamic predictive modeling.A detailed comparative analysis discusses the discrepancies in temporal anomaly detection between the ARIMA-and LSTM-based models.The results demonstrated that the dynamic predictive modelbased anomaly detection approach was effective for dealing with unannotated SHM data.In a comparison between ARIMA and LSTM,it was found that ARIMA demonstrated higher modeling efficiency,rendering it suitable for short-term predictions.In contrast,the LSTM model exhibited greater capacity to capture long-term performance trends and enhanced early warning capabilities,thereby resulting in superior overall performance.

Rock mass quality prediction on tunnel faces with incomplete multi-source dataset via tree-augmented naive Bayesian network

Rock mass quality serves as a vital index for predicting the stability and safety status of rock tunnel faces.In tunneling practice,the rock mass quality is often assessed via a combination of qualitative and quantitative parameters.However,due to the harsh on-site construction conditions,it is rather difficult to obtain some of the evaluation parameters which are essential for the rock mass quality prediction.In this study,a novel improved Swin Transformer is proposed to detect,segment,and quantify rock mass characteristic parameters such as water leakage,fractures,weak interlayers.The site experiment results demonstrate that the improved Swin Transformer achieves optimal segmentation results and achieving accuracies of 92%,81%,and 86%for water leakage,fractures,and weak interlayers,respectively.A multisource rock tunnel face characteristic(RTFC)dataset includes 11 parameters for predicting rock mass quality is established.Considering the limitations in predictive performance of incomplete evaluation parameters exist in this dataset,a novel tree-augmented naive Bayesian network(BN)is proposed to address the challenge of the incomplete dataset and achieved a prediction accuracy of 88%.In comparison with other commonly used Machine Learning models the proposed BN-based approach proved an improved performance on predicting the rock mass quality with the incomplete dataset.By utilizing the established BN,a further sensitivity analysis is conducted to quantitatively evaluate the importance of the various parameters,results indicate that the rock strength and fractures parameter exert the most significant influence on rock mass quality.

Prediction of subsurface settlement induced by shield tunnelling in sandy cobble stratum

This study focuses on the analytical prediction of subsurface settlement induced by shield tunnelling in sandy cobble stratum considering the volumetric deformation modes of the soil above the tunnel crown.A series of numerical analyses is performed to examine the effects of cover depth ratio(C/D),tunnel volume loss rate(h t)and volumetric block proportion(VBP)on the characteristics of subsurface settle-ment trough and soil volume loss.Considering the ground loss variation with depth,three modes are deduced from the volumetric deformation responses of the soil above the tunnel crown.Then,analytical solutions to predict subsurface settlement for each mode are presented using stochastic medium theory.The influences of C/D,h t and VBP on the key parameters(i.e.B and N)in the analytical expressions are discussed to determine the fitting formulae of B and N.Finally,the proposed analytical solutions are validated by the comparisons with the results of model test and numerical simulation.Results show that the fitting formulae provide a convenient and reliable way to evaluate the key parameters.Besides,the analytical solutions are reasonable and available in predicting the subsurface settlement induced by shield tunnelling in sandy cobble stratum.

Impact of surface-reflected seismic waves on the seismic isolation performance of circular tunnel isolation layers

Seismic isolation is an effective strategy to mitigate the risk of seismic damage in tunnels.However,the impact of surface-reflected seismic waves on the effectiveness of tunnel isolation layers remains under explored.In this study,we employ the wave function expansion method to provide analytical solutions for the dynamic responses of linings in an elastic half-space and an infinite elastic space.By comparing the results of the two models,we investigate the seismic isolation effect of tunnel isolation layers induced by reflected seismic waves.Our findings reveal significant differences in the dynamic responses of the lining in the elastic half-space and the infinitely elastic space.Specifically,the dynamic stress concentration factor(DSCF)of the lining in the elastic half-space exhibits periodic fluctuations,influenced by the incident wave frequency and tunnel depth,while the DSCF in the infinitely elastic space remain stable.Overall,the seismic isolation application of the tunnel isolation layer is found to be less affected by surface-reflected seismic waves.Our results provide valuable insights for the design and assessment of the seismic isolation effect of tunnel isolation layers.

Numerical analysis of moving train induced vibrations on tunnel,surrounding ground and structure

This study is focused on the effect of vibration induced by moving trains in tunnels on the surrounding ground and structures.A three-dimensional finite element model is established for a one-track railway tunnel and an adjacent twelve-storey building frame by using commercial software Midas GTS-NX(2019)and Midas Gen.This study considered the moving load effect of a complete train,which varies with space as well as with time.The effect of factors such as train speed,overburden pressure on the tunnel and variation in soil properties are studied in the time domain.As a result,the variations in horizontal and vertical acceleration for two different sites,i.e.,the free ground surface(without structure)and the area containing the structure,are compared.Also,the displacement pattern of the raft foundation is plotted for different train velocities.At lower speeds,the heaving phenomenon is negligible,but as the speed increases,both the heaving and differential settlement increase in the foundation.This study demonstrates that the effect of moving train vibrations should be considered in the design of new nearby structures and proper ground improvement should be considered for existing structures.

基于Nginx的HTTPS正向代理系统设计与实现

随着企业数字化和互联网发展,企业内部系统访问互联网服务的需求日益增长,相较于直接开放互联网访问权限,正向代理系统具有更好的安全性和管控能力。然而,随着在线服务逐渐HTTPS化,代理系统又缺少服务器证书,设计正向代理系统面临着更大的困难。为应对这一挑战,文章设计并实现了一种基于开源软件Nginx的HTTPS正向代理系统,在无需服务器证书的情况下实现了高效转发,并具备HTTPS域名端口复用、域名白名单、源IP地址访问控制等多种功能,为企业内部系统访问互联网HTTPS服务提供了安全、全面的解决方案。

3D DEM simulation of hard rock fracture in deep tunnel excavation induced by changes in principal stress magnitude and orientation

To achieve the loading of the stress path of hard rock,the spherical discrete element model(DEM)and the new flexible membrane technology were utilized to realize the transient loading of three principal stresses with arbitrary magnitudes and orientations.Furthermore,based on the deep tunnel of China Jinping Underground Laboratory II(CJPL-II),the deformation and fracture evolution characteristics of deep hard rock induced by excavation stress path were analyzed,and the mechanisms of transient loading-unloading and stress rotation-induced fractures were revealed from a mesoscopic perspective.The results indicated that the stressestrain curve exhibits different trends and degrees of sudden changes when subjected to transient changes in principal stress,accompanied by sudden changes in strain rate.Stress rotation induces spatially directional deformation,resulting in fractures of different degrees and orientations,and increasing the degree of deformation anisotropy.The correlation between the degree of induced fracture and the unloading magnitude of minimum principal stress,as well as its initial level is significant and positive.The process of mechanical response during transient unloading exhibits clear nonlinearity and directivity.After transient unloading,both the minimum principal stress and minimum principal strain rate decrease sharply and then tend to stabilize.This occurs from the edge to the interior and from the direction of the minimum principal stress to the direction of the maximum principal stress on theε1-ε3 plane.Transient unloading will induce a tensile stress wave.The ability to induce fractures due to changes in principal stress magnitude,orientation and rotation paths gradually increases.The analysis indicates a positive correlation between the abrupt change amplitude of strain rate and the maximum unloading magnitude,which is determined by the magnitude and rotation of principal stress.A high tensile strain rate is more likely to induce fractures under low minimum principal stress.

Application of excavation compensation method for enhancing stability and efficiency in shallow large-span rock tunnels

Engineering shallow,large-span rock tunnels challenges deformation control and escalates construction costs.This study investigates the excavation compensation method(ECM)and its associated technologies to address these issues.Utilizing five key technologies,the ECM effectively modulates radial stress post-excavation,redistributes stress in the surrounding rock,and eliminates tensile stress at the excavation face.Pre-tensioning measures further enhance the rock’s residual strength,establishing a new stability equilibrium.Field tests corroborate the method’s effectiveness,demonstrating a crown settlement reduction of 3–8 mm,a nearly 50%decrease compared to conventional construction approaches.Additionally,material consumption and construction duration were reduced by approximately 30%–35%and 1.75 months per 100 m,respectively.Thus,the ECM represents a significant innovation in enhancing the stability and construction efficiency of large-span rock tunnels,marking a novel contribution to the engineering field.

Stability analysis of tunnel face reinforced with face bolts

Face bolting has been widely utilized to enhance the stability of tunnel face,particularly in soft soil tunnels.However,the influence of bolt reinforcement and its layout on tunnel face stability has not been systematically studied.Based on the theory of linear elastic mechanics,this study delved into the specific mechanisms of bolt reinforcement on the tunnel face in both horizontal and vertical dimensions.It also identified the primary failure types of bolts.Additionally,a design approach for tunnel face bolts that incorporates spatial layout was established using the limit equilibrium method to enhance the conventional wedge-prism model.The proposed model was subsequently validated through various means,and the specific influence of relevant bolt design parameters on tunnel face stability was analyzed.Furthermore,design principles for tunnel face bolts under different geological conditions were presented.The findings indicate that bolt failure can be categorized into three stages:tensile failure,pullout failure,and comprehensive failure.Increasing cohesion,internal friction angle,bolt density,and overlap length can effectively enhance tunnel face stability.Due to significant variations in stratum conditions,tailored design approaches based on specific failure stages are necessary for bolt design.