目前,国内外很多厂商推出了Linux系统中的终端检测响应(Endpoint Detection and Response,EDR)系统,为云平台、物联网、大数据计算等基础设施提供全面的安全检测和防护服务。但是,针对EDR文件防护功能的绕过攻击能够帮助恶意行为规避监...目前,国内外很多厂商推出了Linux系统中的终端检测响应(Endpoint Detection and Response,EDR)系统,为云平台、物联网、大数据计算等基础设施提供全面的安全检测和防护服务。但是,针对EDR文件防护功能的绕过攻击能够帮助恶意行为规避监控,造成严重的系统和数据安全风险。针对开源和商业闭源的Linux EDR系统,首先,阐述了文件防护功能的底层实现机制,对其核心技术原理进行了分析;其次,重点梳理了4种现有公开的文件防护绕过技术,提出了3种尚未公开的绕过技术,并且总结提炼为3种攻击类型;再次,基于上述绕过技术编写了验证工具,通过测试证明了这些技术方法对于部分Linux EDR系统的文件防护绕过能力;最后,给出了相应的安全防护建议。展开更多
Silicon carbide(SiC) power modules play an essential role in the electric vehicle drive system. To improve their performance, reduce their size, and increase production efficiency, this paper proposes a multiple stake...Silicon carbide(SiC) power modules play an essential role in the electric vehicle drive system. To improve their performance, reduce their size, and increase production efficiency, this paper proposes a multiple staked direct bonded copper(DBC) unit based power module packaging method to parallel more chips. This method utilizes mutual inductance cancellation effect to reduce parasitic inductance. Because the conduction area in the new package is doubled, the overall area of power module can be reduced. Entire power module is divided into smaller units to enhance manufacture yield, and improve design freedom. This paper provides a detailed design, analysis and fabrication procedure for the proposed package structure. Additionally, this paper offers several feasible solutions for the connection between power terminals and DBC untis. With the structure, 18dies were paralleled for each phase-leg in a econodual size power module. Both simulation and double pulse test results demonstrate that, compared to conventional layouts, the proposed package method has 74.8% smaller parasitic inductance and 34.9% lower footprint.展开更多
为满足智能船舶数据采集系统的多通信协议传输需求,确保数据传输的实时性、可靠性和稳定性,在采用嵌入式操作系统Linux的工控机上设计一种支持多通信模式的船舶数据采集系统。该系统包含数据传输、数据解析和数据存储等3个模块,其中:数...为满足智能船舶数据采集系统的多通信协议传输需求,确保数据传输的实时性、可靠性和稳定性,在采用嵌入式操作系统Linux的工控机上设计一种支持多通信模式的船舶数据采集系统。该系统包含数据传输、数据解析和数据存储等3个模块,其中:数据传输模块采用CAN(Controller Area Network)协议、TCP/IP(Transmission Control Protocol/Internet Protocol)协议和串口RS232协议实现;数据解析模块用于对数据进行格式转换,以TCP/IP协议的形式将其发送给上位机,并在上位机中利用MATLAB软件对其进行解析。以北斗导航接收机为数据源对该系统的有效性进行试验验证,结果表明,基于Linux的多通信模式数据采集系统能满足智能船舶多样化传感器接口,以及数据可靠、准确、实时传输和处理的需求。展开更多
基金supported in part by National Key R&D Program of China (2021YFB2500600)CAS Youth multi-discipline project (JCTD-2021-09)Strategic Piority Research Program of Chinese Academy of Sciences (XDA28040100)。
文摘Silicon carbide(SiC) power modules play an essential role in the electric vehicle drive system. To improve their performance, reduce their size, and increase production efficiency, this paper proposes a multiple staked direct bonded copper(DBC) unit based power module packaging method to parallel more chips. This method utilizes mutual inductance cancellation effect to reduce parasitic inductance. Because the conduction area in the new package is doubled, the overall area of power module can be reduced. Entire power module is divided into smaller units to enhance manufacture yield, and improve design freedom. This paper provides a detailed design, analysis and fabrication procedure for the proposed package structure. Additionally, this paper offers several feasible solutions for the connection between power terminals and DBC untis. With the structure, 18dies were paralleled for each phase-leg in a econodual size power module. Both simulation and double pulse test results demonstrate that, compared to conventional layouts, the proposed package method has 74.8% smaller parasitic inductance and 34.9% lower footprint.
文摘为满足智能船舶数据采集系统的多通信协议传输需求,确保数据传输的实时性、可靠性和稳定性,在采用嵌入式操作系统Linux的工控机上设计一种支持多通信模式的船舶数据采集系统。该系统包含数据传输、数据解析和数据存储等3个模块,其中:数据传输模块采用CAN(Controller Area Network)协议、TCP/IP(Transmission Control Protocol/Internet Protocol)协议和串口RS232协议实现;数据解析模块用于对数据进行格式转换,以TCP/IP协议的形式将其发送给上位机,并在上位机中利用MATLAB软件对其进行解析。以北斗导航接收机为数据源对该系统的有效性进行试验验证,结果表明,基于Linux的多通信模式数据采集系统能满足智能船舶多样化传感器接口,以及数据可靠、准确、实时传输和处理的需求。
