WindowsEmbedded8正式发布

微软公司在其网站上正式发布了Windows Emtyad（ted8操作系统系列产品。将Windows8的技术扩展到周边设备，WindowsEmbedded8将帮助企业利用物联网平台，

Windowse服务原来可以这样控制

Windows的许多功能，特别是那些在后台运行的功能，是通过服务的形式提供给我们的。对服务的管理，我们虽然可以通过“服务管理器”来完成，不过这个服务管理器，用起来不很方便，连安装，卸载服务这些基本操作都不支持。不过不要着急，因为Windows中内置有更加强大的服务管理工具SV，可以帮助你……

妙不可言——挂接ExitWindowsEx

随着安全意识的不断提高，许多软件都增强了自我保护功能．比如结束其进程时将会调用ExitWindowsEx函数关机或者重启。这种技术在收费管理系统、病毒木马、加壳软件、反破解领域里很常见，因而采用API Hook技术挂接ExitWindowsEx函数使其失效，对与我们查杀病毒以及软件破解是很有用的，而且还能运用它免费上网呢!不可思议吧？

缝缝补补又一年——Windowse XP SP2 beta 1新特性一览

2003年12月18日，微软终于释放出人们盼望已久的Windowse XP SP2的第一个测试版。可惜同时放出的只有英文和德文版。在简体中文版的WinXP上无法升级，不过没关系，无论什么语言版本，新特性都是一样的，就让我们看看SP2 beta 1（以下简称SP2 b1）到底带来些什么吧！

通过交叉验证堆栈和VAD信息检测Windows代码注入

Windows 32/64位代码注入攻击是恶意软件常用的攻击技术,在内存取证领域,现存的代码注入攻击检测技术在验证完整性方面不能处理动态内容,并且在解析内存中数据结构方面无法兼容不同版本的Windows系统。因此提出了通过交叉验证进程堆栈和VAD信息定位注入代码方法,将基于遍历栈帧得到的函数返回地址、模块名等信息结合进程VAD结构来检测函数返回地址、匹配文件名以定位注入代码,并且研发了基于Volatility取证框架的Windows代码注入攻击检测插件codefind。测试结果表明,即使在VAD节点被恶意软件修改,方法仍能够有效定位Windows 32/64位注入代码攻击。

加强软件供应链安全实践,提升关键信息基础设施韧性——“微软蓝屏”事件的软件供应链安全启示

关键信息基础设施是经济社会运行的神经中枢,保障关键信息基础设施的安全对于维护国家安全和社会公共利益具有重大意义。2024年7月19日,美国网络安全公司“众击”(Crowd Strike)的软件更新错误引发大规模的微软Windows系统蓝屏,直接导致全球范围的航空、金融、医疗等重要行业领域关键信息基础设施中断运行。本文立足供应链安全视角,对“微软蓝屏”事件的成因及影响开展分析,剖析事件相关方在软件供应链上下游的不足。

警惕0day漏洞攻击的高发时刻

7月CrowdStrike安全软件推送了一个错误的更新,导致全球大约850万台Windows系统发生了蓝屏死机,全球许多行业的设备均受到了影响。这是迄今为止由安全软件自身造成的最大规模安全事件。不过,由于国内对CrowdStrike软件的使用不多,本次事件对国内各行业的影响较小。

Asymmetric Electrolytes Design for Aqueous Multivalent Metal Ion Batteries

With the rapid development of portable electronics and electric road vehicles,high-energy-density batteries have been becoming front-burner issues.Traditionally,homogeneous electrolyte cannot simultaneously meet diametrically opposed demands of high-potential cathode and low-potential anode,which are essential for high-voltage batteries.Meanwhile,homogeneous electrolyte is difficult to achieve bi-or multi-functions to meet different requirements of electrodes.In comparison,the asymmetric electrolyte with bi-or multi-layer disparate components can satisfy distinct requirements by playing different roles of each electrolyte layer and meanwhile compensates weakness of individual electrolyte.Consequently,the asymmetric electrolyte can not only suppress by-product sedimentation and continuous electrolyte decomposition at the anode while preserving active substances at the cathode for high-voltage batteries with long cyclic lifespan.In this review,we comprehensively divide asymmetric electrolytes into three categories:decoupled liquid-state electrolytes,bi-phase solid/liquid electrolytes and decoupled asymmetric solid-state electrolytes.The design principles,reaction mechanism and mutual compatibility are also studied,respectively.Finally,we provide a comprehensive vision for the simplification of structure to reduce costs and increase device energy density,and the optimization of solvation structure at anolyte/catholyte interface to realize fast ion transport kinetics.

基于Windows Server Failover Cluster的Apache故障转移集群应用实践

在当前互联网时代,Web应用程序的高可用性和可靠性是确保业务持续运行的关键因素。针对Apache Web服务器,介绍了利用Windows Server 2019 Failover Cluster构建Apache故障转移集群的实践方案。通过配置两个节点的故障转移集群,当某个节点发生故障时,Apache服务将自动在另一个节点上重新启动,从而最大程度地减少系统中断的时间,提高Web应用的可用性。详细阐述了集群搭建的具体步骤、配置要点、集群验证方法以及运行时的监控与维护方法,为构建高可用Apache Web服务器提供一种实用的解决方案。

Active and passive modulation of solar light transmittance in a uniquely multifunctional dual-band single molecule for smart window applications

Functional materials may change color by heat and electricity separately or simultaneously in smart windows.These materials have not only demonstrated remarkable potential in the modulation of solar radiation but are also leading to the development of indoor environments that are more comfortable and conducive to improving individuals'quality of life.Unfortunately,dual-responsive materials have not received ample research attention due to economic and technological challenges.As a consequence,the broader utilization of smart windows faces hindrances.To address this new generational multistimulus responsive chromic materials,our group has adopted a developmental strategy to create a poly(NIPAM)n-HV as a switchable material by anchoring active viologen(HV)onto a phase-changing poly(NIPAM)n-based smart material for better utility and activity.These constructed smart windows facilitate individualistic reversible switching,from a highly transparent state to an opaque state(thermochromic)and a red state(electrochromic),as well as facilitate a simultaneous dual-stimuli response reversible switching from a clear transparent state to a fully opaque(thermochromic)and orange(electrochromic)states.Absolute privacy can be attained in smart windows designed for exclusive settings by achieving zero transmittance.Each unique chromic mode operates independently and modulates visible and near-infrared(NIR)light in a distinct manner.Hence,these smart windows with thermal and electric dual-stimuli responsiveness demonstrate remarkable heat regulation capabilities,rendering them highly attractive for applications in building facades,energy harvesting,privacy protection,and color display.

Strong Interaction Between Redox Mediators and Defect-Rich Carbons Enabling Simultaneously Boosted Voltage Windows and Capacitance for Aqueous Supercapacitors

Energy density,the Achilles’heel of aqueous supercapacitors,is simultaneously determined by the voltage window and specific capacitance of the carbon materials,but the strategy of synchronously boosting them has rarely been reported.Herein,we demonstrate that the rational utilization of the interaction between redox mediators(RMs)and carbon electrode materials,especially those with rich intrinsic defects,contributes to extended potential windows and more stored charges concurrently.Using 4-hydroxy-2,2,6,6-tetramethylpiperidinyloxyl(4OH-TEMPO)and intrinsic defect-rich carbons as the RMs and electrode materials,respectively,the potential window and capacitance are increased by 67%and sixfold in a neutral electrolyte.Moreover,this strategy could also be applied to alkaline and acid electrolytes.The first-principle calculation and experimental results demonstrate that the strong interaction between 4OH-TEMPO and defectrich carbons plays a key role as preferential adsorbed RMs may largely prohibit the contact of free water molecules with the electrode materials to terminate the water splitting at elevated potentials.For the RMs offering weaker interaction with the electrode materials,the water splitting still proceeds with a thus sole increase of the stored charges.The results discovered in this work could provide an alternative solution to address the low energy density of aqueous supercapacitors.

投稿须知

一、特别约定(一)所有投稿文章都应是未经发表的原创作品,请作者根据提示自行将投稿上传到本刊投稿平台:https://openedu.sou.edu.cn。文章查重率不超过10%。杜绝一切抄袭等学术不端行为。为了避免在投稿过程中可能出现浏览器兼容问题导致的无法上传稿件故障,建议使用Windows7和WindowsXP等系统和低版本浏览器。(二)编辑部有权对稿件进行编辑和修改。如有异议,请在来稿的明显位置加以说明,否则视为默许。(三)投稿者可通过投稿平台查看稿件审稿进度。

投稿须知

一、特别约定(一)所有投稿文章都应是未经发表的原创作品,请作者根据提示自行将投稿上传到本刊投稿平台:https://openedu.sou.edu.cn。文章查重率不超过10%。杜绝一切抄袭等学术不端行为。为了避免在投稿过程中可能出现浏览器兼容问题导致的无法上传稿件故障,建议使用Windows7和WindowsXP等系统和低版本浏览器。(二)编辑部有权对稿件进行编辑和修改。如有异议,请在来稿的明显位置加以说明,否则视为默许。(三)投稿者可通过投稿平台查看稿件审稿进度。投稿三个月后,如仍未收到编辑部的任何通知,投稿者可改投其他期刊。投稿期间请勿一稿多投。

基于Windows/RTX的实时仿测软件设计

针对传统测试软件实时性有限、传统仿真接口软件通用性程度低的问题,为满足半实物仿真软件需兼顾单元测试和控制系统仿真验证的需求,设计了基于Windows/RTX的实时仿测软件。仿测软件采用模块化的设计原则,开发了GUI层人机交互界面和RTX层实时运行程序。为保证实时性,采用无锁循环缓冲区+双线程技术,解决了RTX环境下仿真步长为1 ms时串口数据收发的超时问题;提出一种超时检测算法监测仿真节点的实时状态。借助cJSON优化了测试用例配置文件,用户可以更灵活地编辑测试用例,利用RTW自动代码生成将弹体模型编译集成到RTX仿测软件工程。实验结果表明:该仿测软件有效兼顾了单测与仿真,提高了仿测软件的通用性和二次开发效率,降低了开发难度。

Vehicle routing optimization algorithm based on time windows and dynamic demand

To provide the supplier with the minimizum vehicle travel distance in the distribution process of goods in three situations of new customer demand,customer cancellation service,and change of customer delivery address,based on the ideas of pre-optimization and real-time optimization,a two-stage planning model of dynamic demand based vehicle routing problem with time windows was established.At the pre-optimization stage,an improved genetic algorithm was used to obtain the pre-optimized distribution route,a large-scale neighborhood search method was integrated into the mutation operation to improve the local optimization performance of the genetic algorithm,and a variety of operators were introduced to expand the search space of neighborhood solutions;At the real-time optimization stage,a periodic optimization strategy was adopted to transform a complex dynamic problem into several static problems,and four neighborhood search operators were used to quickly adjust the route.Two different scale examples were designed for experiments.It is proved that the algorithm can plan the better route,and adjust the distribution route in time under the real-time constraints.Therefore,the proposed algorithm can provide theoretical guidance for suppliers to solve the dynamic demand based vehicle routing problem.

华中科技大学博士研究生论文被TOSEM期刊录用

近日,华中科技大学2019级博士生赵浩钧(导师邹德清教授)的论文“MalSensor:Fast and Robust Windows Malware Classification”被ACM Transactions on Software Engineering and Methodology(TOSEM)期刊录用。Windows恶意软件分类一直是研究热点之一。在后疫情时代,恶意软件数量呈快速上升趋势。目前,基于学习的方法被越来越多地用于恶意软件分类。然而,目前基于学习的方法在大规模工业应用中,尤其是在部分计算资源受限的工业场景(如网关设备)中很难同时兼顾检测的精度和效率。鉴于已有基于图结构方法展现出的优越性,论文基于函数调用图(Function Call Graph,FCG)提出一种快速、高精度的PE(Portable Executable)恶意软件分类方法。论文通过分析发现编译策略和调用约定造成的函数修饰名差异可能会给函数调用图的生成带来负面影响。

Fine-Tuning Cyber Security Defenses: Evaluating Supervised Machine Learning Classifiers for Windows Malware Detection

Malware attacks on Windows machines pose significant cybersecurity threats,necessitating effective detection and prevention mechanisms.Supervised machine learning classifiers have emerged as promising tools for malware detection.However,there remains a need for comprehensive studies that compare the performance of different classifiers specifically for Windows malware detection.Addressing this gap can provide valuable insights for enhancing cybersecurity strategies.While numerous studies have explored malware detection using machine learning techniques,there is a lack of systematic comparison of supervised classifiers for Windows malware detection.Understanding the relative effectiveness of these classifiers can inform the selection of optimal detection methods and improve overall security measures.This study aims to bridge the research gap by conducting a comparative analysis of supervised machine learning classifiers for detecting malware on Windows systems.The objectives include Investigating the performance of various classifiers,such as Gaussian Naïve Bayes,K Nearest Neighbors(KNN),Stochastic Gradient Descent Classifier(SGDC),and Decision Tree,in detecting Windows malware.Evaluating the accuracy,efficiency,and suitability of each classifier for real-world malware detection scenarios.Identifying the strengths and limitations of different classifiers to provide insights for cybersecurity practitioners and researchers.Offering recommendations for selecting the most effective classifier for Windows malware detection based on empirical evidence.The study employs a structured methodology consisting of several phases:exploratory data analysis,data preprocessing,model training,and evaluation.Exploratory data analysis involves understanding the dataset’s characteristics and identifying preprocessing requirements.Data preprocessing includes cleaning,feature encoding,dimensionality reduction,and optimization to prepare the data for training.Model training utilizes various supervised classifiers,and their performance is evaluated using metrics such as accuracy,precision,recall,and F1 score.The study’s outcomes comprise a comparative analysis of supervised machine learning classifiers for Windows malware detection.Results reveal the effectiveness and efficiency of each classifier in detecting different types of malware.Additionally,insights into their strengths and limitations provide practical guidance for enhancing cybersecurity defenses.Overall,this research contributes to advancing malware detection techniques and bolstering the security posture of Windows systems against evolving cyber threats.

打造自主强大、稳定可靠的主机安全防护能力——“微软蓝屏”事件的警示与启示

2024年7月19日,美国网络安全公司“众击”(Crowd Strike)更新了终端安全软件的内容配置,导致全球近千万台Windows系统出现蓝屏死机现象,20多个国家的交通、金融、医疗、零售等行业受到严重影响。尽管我国也有大量Windows用户,但在此事件中几乎未受影响,这突显了我国网络安全产品自立自强发挥的重要作用。该事件对我国数字化转型和网络安全能力建设具有正反两面的借鉴意义,值得我们深入思考。

My Favorite Festival

My favorite festival is the Spring Festival.The Spring Festival falls on the first day of the lunar New Year.There are all kinds of activities during the Spring Festival.To begin with,we clean our houses,paint doors and windows red,put up red couplets,decorate the doors and windows with paper cuts,buy clothes and have a haircut on New Year’s Eve.

电脑美术课的“思”“学”“做”

电脑美术在部编人教版美术教材一至六年级上下册均出现,可见电脑美术在美术教学中不可或缺,是美术教师必须实施的课程。但是很多美术教师对此选择忽略,有的是因为校内无相关设备,有的是因为教师没有这方面的技能。针对以上现象,本文简要阐述笔者对电脑美术课的“思”“学”“做”。