通过交叉验证堆栈和VAD信息检测Windows代码注入

Windows 32/64位代码注入攻击是恶意软件常用的攻击技术,在内存取证领域,现存的代码注入攻击检测技术在验证完整性方面不能处理动态内容,并且在解析内存中数据结构方面无法兼容不同版本的Windows系统。因此提出了通过交叉验证进程堆栈和VAD信息定位注入代码方法,将基于遍历栈帧得到的函数返回地址、模块名等信息结合进程VAD结构来检测函数返回地址、匹配文件名以定位注入代码,并且研发了基于Volatility取证框架的Windows代码注入攻击检测插件codefind。测试结果表明,即使在VAD节点被恶意软件修改,方法仍能够有效定位Windows 32/64位注入代码攻击。

基于Windows Server Failover Cluster的Apache故障转移集群应用实践

在当前互联网时代,Web应用程序的高可用性和可靠性是确保业务持续运行的关键因素。针对Apache Web服务器,介绍了利用Windows Server 2019 Failover Cluster构建Apache故障转移集群的实践方案。通过配置两个节点的故障转移集群,当某个节点发生故障时,Apache服务将自动在另一个节点上重新启动,从而最大程度地减少系统中断的时间,提高Web应用的可用性。详细阐述了集群搭建的具体步骤、配置要点、集群验证方法以及运行时的监控与维护方法,为构建高可用Apache Web服务器提供一种实用的解决方案。

基于Windows/RTX的实时仿测软件设计

针对传统测试软件实时性有限、传统仿真接口软件通用性程度低的问题,为满足半实物仿真软件需兼顾单元测试和控制系统仿真验证的需求,设计了基于Windows/RTX的实时仿测软件。仿测软件采用模块化的设计原则,开发了GUI层人机交互界面和RTX层实时运行程序。为保证实时性,采用无锁循环缓冲区+双线程技术,解决了RTX环境下仿真步长为1 ms时串口数据收发的超时问题;提出一种超时检测算法监测仿真节点的实时状态。借助cJSON优化了测试用例配置文件,用户可以更灵活地编辑测试用例,利用RTW自动代码生成将弹体模型编译集成到RTX仿测软件工程。实验结果表明:该仿测软件有效兼顾了单测与仿真,提高了仿测软件的通用性和二次开发效率,降低了开发难度。

Bimetallic In_(2)O_(3)/Bi_(2)O_(3) Catalysts Enable Highly Selective CO_(2) Electroreduction to Formate within Ultra-Broad Potential Windows

CO_(2)electrochemical reduction reaction(CO_(2)RR)to formate is a hopeful pathway for reducing CO_(2)and producing high-value chemicals,which needs highly selective catalysts with ultra-broad potential windows to meet the industrial demands.Herein,the nanorod-like bimetallic ln_(2)O_(3)/Bi_(2)O_(3)catalysts were successfully synthesized by pyrolysis of bimetallic InBi-MOF precursors.The abundant oxygen vacancies generated from the lattice mismatch of Bi_(2)O_(3)and ln_(2)O_(3)reduced the activation energy of CO_(2)to*CO_(2)·^(-)and improved the selectivity of*CO_(2)·^(-)to formate simultaneously.Meanwhile,the carbon skeleton derived from the pyrolysis of organic framework of InBi-MOF provided a conductive network to accelerate the electrons transmission.The catalyst exhibited an ultra-broad applied potential window of 1200 mV(from-0.4 to-1.6 V vs RHE),relativistic high Faradaic efficiency of formate(99.92%)and satisfactory stability after 30 h.The in situ FT-IR experiment and DFT calculation verified that the abundant oxygen vacancies on the surface of catalysts can easily absorb CO_(2)molecules,and oxygen vacancy path is dominant pathway.This work provides a convenient method to construct high-performance bimetallic catalysts for the industrial application of CO_(2)RR.

AI-Driven Prioritization and Filtering of Windows Artifacts for Enhanced Digital Forensics

Digital forensics aims to uncover evidence of cybercrimes within compromised systems.These cybercrimes are often perpetrated through the deployment of malware,which inevitably leaves discernible traces within the compromised systems.Forensic analysts are tasked with extracting and subsequently analyzing data,termed as artifacts,from these systems to gather evidence.Therefore,forensic analysts must sift through extensive datasets to isolate pertinent evidence.However,manually identifying suspicious traces among numerous artifacts is time-consuming and labor-intensive.Previous studies addressed such inefficiencies by integrating artificial intelligence(AI)technologies into digital forensics.Despite the efforts in previous studies,artifacts were analyzed without considering the nature of the data within them and failed to prove their efficiency through specific evaluations.In this study,we propose a system to prioritize suspicious artifacts from compromised systems infected with malware to facilitate efficient digital forensics.Our system introduces a double-checking method that recognizes the nature of data within target artifacts and employs algorithms ideal for anomaly detection.The key ideas of this method are:(1)prioritize suspicious artifacts and filter remaining artifacts using autoencoder and(2)further prioritize suspicious artifacts and filter remaining artifacts using logarithmic entropy.Our evaluation demonstrates that our system can identify malicious artifacts with high accuracy and that its double-checking method is more efficient than alternative approaches.Our system can significantly reduce the time required for forensic analysis and serve as a reference for future studies.

Vehicle routing optimization algorithm based on time windows and dynamic demand

To provide the supplier with the minimizum vehicle travel distance in the distribution process of goods in three situations of new customer demand,customer cancellation service,and change of customer delivery address,based on the ideas of pre-optimization and real-time optimization,a two-stage planning model of dynamic demand based vehicle routing problem with time windows was established.At the pre-optimization stage,an improved genetic algorithm was used to obtain the pre-optimized distribution route,a large-scale neighborhood search method was integrated into the mutation operation to improve the local optimization performance of the genetic algorithm,and a variety of operators were introduced to expand the search space of neighborhood solutions;At the real-time optimization stage,a periodic optimization strategy was adopted to transform a complex dynamic problem into several static problems,and four neighborhood search operators were used to quickly adjust the route.Two different scale examples were designed for experiments.It is proved that the algorithm can plan the better route,and adjust the distribution route in time under the real-time constraints.Therefore,the proposed algorithm can provide theoretical guidance for suppliers to solve the dynamic demand based vehicle routing problem.

基于Windows和Linux操作系统基线核查及加固技术的研究和应用

文章对Windows和Linux操作系统基线核查加固技术进行研究。针对电力系统主机存在的安全缺陷,从主机信息、账户及口令、主机配置、服务及应用以及日志及审计等五个大类着手,给出自动化基线核查与加固工具的总体开发架构与模块设计,重点阐述2种操作系统基线安全与加固以及数据分析等核心功能的开发流程,经测试证明了该工具的可用性和健壮性。

Fine-Tuning Cyber Security Defenses: Evaluating Supervised Machine Learning Classifiers for Windows Malware Detection

Malware attacks on Windows machines pose significant cybersecurity threats,necessitating effective detection and prevention mechanisms.Supervised machine learning classifiers have emerged as promising tools for malware detection.However,there remains a need for comprehensive studies that compare the performance of different classifiers specifically for Windows malware detection.Addressing this gap can provide valuable insights for enhancing cybersecurity strategies.While numerous studies have explored malware detection using machine learning techniques,there is a lack of systematic comparison of supervised classifiers for Windows malware detection.Understanding the relative effectiveness of these classifiers can inform the selection of optimal detection methods and improve overall security measures.This study aims to bridge the research gap by conducting a comparative analysis of supervised machine learning classifiers for detecting malware on Windows systems.The objectives include Investigating the performance of various classifiers,such as Gaussian Naïve Bayes,K Nearest Neighbors(KNN),Stochastic Gradient Descent Classifier(SGDC),and Decision Tree,in detecting Windows malware.Evaluating the accuracy,efficiency,and suitability of each classifier for real-world malware detection scenarios.Identifying the strengths and limitations of different classifiers to provide insights for cybersecurity practitioners and researchers.Offering recommendations for selecting the most effective classifier for Windows malware detection based on empirical evidence.The study employs a structured methodology consisting of several phases:exploratory data analysis,data preprocessing,model training,and evaluation.Exploratory data analysis involves understanding the dataset’s characteristics and identifying preprocessing requirements.Data preprocessing includes cleaning,feature encoding,dimensionality reduction,and optimization to prepare the data for training.Model training utilizes various supervised classifiers,and their performance is evaluated using metrics such as accuracy,precision,recall,and F1 score.The study’s outcomes comprise a comparative analysis of supervised machine learning classifiers for Windows malware detection.Results reveal the effectiveness and efficiency of each classifier in detecting different types of malware.Additionally,insights into their strengths and limitations provide practical guidance for enhancing cybersecurity defenses.Overall,this research contributes to advancing malware detection techniques and bolstering the security posture of Windows systems against evolving cyber threats.

快速拓展Windows实时性!史上最小的PLC运动控制器发布

为了解决Windows系统下可视化界面友好、软件开发容易、兼容性好,但无法实现实时性控制;其它带有实时控制功能的系统存在软件平台搭建困难、开发难度高、兼容性差等问题。立迈胜研发了一种NIMC301-A微型运动控制器,可以做到开箱即用,极大地增加了用户的易用性。其自带CANopen主站,具备PLC控制功能,也可为WindoWs平台提供实时性拓展,而体积仅相当于“U盘”大小!

畅玩3A、能装Windows和Linux!国产处理器KX-7000测评来了

近日,有第三方媒体发布了关于兆芯KX-7000的评测视频,认为KX-7000不仅是目前桌面端最强的国产处理器之一,对于普通用户来说,也是最易上手的一款国产CPU。KX-7000是兆芯最新一代的国产X86处理器,部分海外网站媒体(如PC Watch)对其进行了性能测试并发布了结果。测试内容围绕KX-7000的架构、性能及主流应用方面进行了测试,在介绍了兆芯x86架构来源及特点的同时,展现了KX-7000在Spec2006、视频编解码、3A游戏、主流办公等应用下的数据与体验。具体如下。

多媒体课件在Windows系统中的个性化创意设计

文章从Windows桌面操作系统中图形界面应用出发,探讨通过个性化的设计方法创建自己的Windows Space,给用户创造出虚拟的桌面和软件界面应用,以多媒体课件的设计为实例,分析了多媒体课件界面设计的组成要素以及运用Flash和Dreamweaver进行个性化创意设计的基本步骤。

基于强化学习的自动化Windows域渗透方法

Windows域为用户之间的资源共享及信息交互提供统一的系统服务,在便利内网管理的同时带来了巨大的安全隐患。近年来,针对域控制器的各式攻击层出不穷,实现自动化渗透能够灵活检测Windows域中存在的漏洞威胁,保障办公网络安全稳定地持久运行,其核心是高效挖掘环境内可行的攻击路径。为此,将渗透测试过程进行强化学习建模,通过智能体与域环境的真实交互发现漏洞组合,进而验证有效的攻击序列;基于主机对渗透进程的贡献差异,减少强化学习模型中非必要的状态与动作,优化路径选择策略,提升实际攻击效率;使用状态动作删减、探索策略优化的Q学习算法筛选最优攻击路径,自动验证域环境中所有可能的安全隐患,为域管理员提供防护依据。实验针对典型内网业务场景展开测试,从生成的13种高效攻击路径中筛选最优路径,通过与相关研究成果对比,突出了所提方法在域控权限获取、主机权限获取、攻击步长、收敛性以及时间代价等方面的性能优化效果。

基于Windows服务器的网络安全问题研究

针对Windows服务器网络安全框架,分析了Windows服务器网络安全功能及应用,指出了Windows服务器网络安全的常见问题,包括操作系统漏洞、病毒攻击、恶意软件、黑客攻击、暴力破解及系统攻击等。提出了Windows服务器网络安全常用算法,包括Windows进程自动加载技术、端口隐藏、密码算法。分析了经典Windows服务器网络安全框架,需将网络监控系统放在同一个网络中,采用加密数据传输,以保证客户通信安全。

Development of RF windows for 650 MHz multibeam klystron

Radio frequency windows are developed and evaluated for a 650 MHz continuous-wave multibeam klystron.Thin-pillbox windows with alumina and beryllia disks are designed with an average RF power of CW 400 kW.Results of a cold test and tuning procedures are described.The final measured S11 curves under the required bandwidth are less than-32.0 and-26.9 dB for alumina and beryllia windows,respectively.The windows are tested up to CW 143 kW for traveling waves and CW 110 kW for standing waves using a solid-state amplifier as an RF power source.Multipactor simulations for windows and benchmark studies for the thermal analysis of ceramic disks are introduced.

Sol-gel-based porous Ti-doped tungsten oxide films for high-performance dual-band electrochromic smart windows

Dual-band electrochromic smart windows(DESWs)with independent control of the transmittance of near-infrared and visible light show great potential in the application of smart and energy-saving buildings.The current strategy for building DESWs is to screen materials for composite or prepare plasmonic nanocrystal films.These rigorous preparation processes seriously limit the further development of DESWs.Herein,we report a facile and effective sol-gel strategy using a foaming agent to achieve porous Ti-doped tungsten oxide film for the high performance of DESWs.The introduction of foaming agent polyvinylpyrrolidone during the film preparation can increase the specific surface area and free carrier concentration of the films and enhance their independent regulation ability of near-infrared electrochromism.As a result,the optimal film shows excellent dual-band electrochromic properties,including high optical modulation(84.9%at 633 nm and 90.3%at 1200 nm),high coloration efficiency(114.9 cm^(2) C^(-1) at 633 nm and 420.3 cm^(2) C^(-1) at 1200 nm),quick switching time,excellent bistability,and good cycle stability(the transmittance modulation losses at 633 and 1200 nm were 11%and 3.5%respectively after 1000 cycles).A demonstrated DESW fabricated by the sol-gel film showed effective management of heat and light of sunlight.This study represents a significant advance in the preparation of dual-band electrochromic films,which will shed new light on advancing electrochromic technology for future energy-saving smart buildings.

Effect of False Windows on Light Exposure and Sleep Quality in Hospitalized Patients

Purpose: We aimed to investigate the effects of installing false windows next to hospital beds without windows on the amount of light received by patients and their sleep quality. Methods: The study included patients admitted to the Department of Neurology at our hospital between September 2020 and August 2021. An Actigraph device was fitted to patients’ wrist and their beds to measure the amount of light received and sleep quality. Patients were divided into three groups: bed with a window, aisle bed with a false window, and aisle bed without a window. Mean sleep efficiency (%), mean steps (per day), and the amount of light (lux) received by the patients and beds were measured. Results: Valid data were obtained for 48 participants (median age, 66.5 years). There were 23 patients in beds with a window, 13 patients in aisle beds without a false window, and 12 in aisle beds with a false window. No statistically significant differences were found in terms of mean sleep efficiency, number of steps taken, and the amount of light received by the patients (P > 0.05);however, difference in the mean amount of light received by the beds at the location of the bed was statistically significant (P Conclusion: The amount of light that the patient receives is not necessarily affected by the location of the bed or the presence of a false window.

基于Windows服务器终端的远程信息获取研究

分析了基于Windows服务器终端的远程信息获取技术,包括Microsoft Windows Server远程桌面服务、远程管理服务及网络管理服务。研究表明,使用Windows Server远程终端可实现信息获取与交互,通过套接字技术及TCP/IP等多种协议可完成Windows服务器终端通信,结合完成端口可搭建较为完成的系统框架。目前,搭建的系统框架能够满足客户的日常需求、服务器终端信息获取,采用加密技术可完成对隐私信息的网络保护。

基于Windows平台的故障转移集群研究与应用

针对目前铁路客运营销辅助决策系统的资料库存在单点故障的问题,研究Microsoft SQL Server数据库。在Windows Server服务器上利用微软公司内置的故障转移集群功能来提高应用的稳定性和可用性;基于故障转移集群实现SQL Server的Always On功能;通过研究集群相关技术,完成基于Windows Server 2016的无域控故障转移集群部署实践。实践表明,利用Windows故障转移特性,可以实现SQL Server数据库的高可用性及应用或服务的高可用性。

基于Windows平台的轻量级快速启动程序设计与开发

数以亿计的Windows平台用户在间隔启用多个软件时常因“找图标”而被迫打断工作思路,进而影响工作效率并引发烦躁情绪。针对上述痛点,研究出一种基于Windows系统运行功能的轻量级直达式快速启动方法,通过修改环境变量、添加快捷方式、自定义启动名称,设计并开发了一款满足Windows用户日常办公需求的轻量级快速启动程序。与同类程序相比,该程序兼具软件启动便捷、个性化定制和无后台资源占用等优势,可显著提升办公效率以及改善Windows系统使用体验。

Prediction of the Wastewater’s pH Based on Deep Learning Incorporating Sliding Windows

To protect the environment,the discharged sewage’s quality must meet the state’s discharge standards.There are many water quality indicators,and the pH(Potential of Hydrogen)value is one of them.The natural water’s pH value is 6.0–8.5.The sewage treatment plant uses some data in the sewage treatment process to monitor and predict whether wastewater’s pH value will exceed the standard.This paper aims to study the deep learning prediction model of wastewater’s pH.Firstly,the research uses the random forest method to select the data features and then,based on the sliding window,convert the data set into a time series which is the input of the deep learning training model.Secondly,by analyzing and comparing relevant references,this paper believes that the CNN(Convolutional Neural Network)model is better at nonlinear data modeling and constructs a CNN model including the convolution and pooling layers.After alternating the combination of the convolutional layer and pooling layer,all features are integrated into a full-connected neural network.Thirdly,the number of input samples of the CNN model directly affects the prediction effect of the model.Therefore,this paper adopts the sliding window method to study the optimal size.Many experimental results show that the optimal prediction model can be obtained when alternating six convolutional layers and three pooling layers.The last full-connection layer contains two layers and 64 neurons per layer.The sliding window size selects as 12.Finally,the research has carried out data prediction based on the optimal CNN deep learning model.The predicted pH of the sewage is between 7.2 and 8.6 in this paper.The result is applied in the monitoring system platform of the“Intelligent operation and maintenance platform of the reclaimed water plant.”