基于Command and Control通信信道流量属性聚类的僵尸网络检测方法

僵尸网络(Botnet)是一种从传统恶意代码形态进化而来的新型攻击方式,为攻击者提供了隐匿、灵活且高效的一对多命令与控制信道(Command and Control channel,C&C)机制,可以控制大量僵尸主机实现信息窃取、分布式拒绝服务攻击和垃圾邮件发送等攻击目的。该文提出一种与僵尸网络结构和C&C协议无关,不需要分析数据包的特征负载的僵尸网络检测方法。该方法首先使用预过滤规则对捕获的流量进行过滤,去掉与僵尸网络无关的流量;其次对过滤后的流量属性进行统计;接着使用基于X-means聚类的两步聚类算法对C&C信道的流量属性进行分析与聚类,从而达到对僵尸网络检测的目的。实验证明,该方法高效准确地把僵尸网络流量与其他正常网络流量区分,达到从实际网络中检测僵尸网络的要求,并且具有较低的误判率。

A framework of force of information influence and application for C4KISR system

The subversive nature of information war lies not only in the information itself, but also in the circulation and application of information. It has always been a challenge to quantitatively analyze the function and effect of information flow through command, control, communications, computer, kill, intelligence,surveillance, reconnaissance (C4KISR) system. In this work, we propose a framework of force of information influence and the methods for calculating the force of information influence between C4KISR nodes of sensing, intelligence processing,decision making and fire attack. Specifically, the basic concept of force of information influence between nodes in C4KISR system is formally proposed and its mathematical definition is provided. Then, based on the information entropy theory, the model of force of information influence between C4KISR system nodes is constructed. Finally, the simulation experiments have been performed under an air defense and attack scenario. The experimental results show that, with the proposed force of information influence framework, we can effectively evaluate the contribution of information circulation through different C4KISR system nodes to the corresponding tasks. Our framework of force of information influence can also serve as an effective tool for the design and dynamic reconfiguration of C4KISR system architecture.

Influence of education training in patients with type 2 diabetes in the improvement of lifestyle and biochemical characteristics: a randomized controlled trial

Objective: The objective of this randomized controlled trial study was to evaluate the education training in relation to lifestyle improvement in patients with type 2 diabetes through its influence in the levels of glycated hemoglobin(HbA1 c), blood pressure, triglyceride, cholesterol levels, and body mass index(BMI).Methods: The study included patients with type 2 diabetes randomly selected from 20 residential areas in Tirana, Albania where family physicians provide services. The sample size in total was 200 patients in both groups(control and intervention). The education training(four sessions) was conducted by trained nursing staff for 6 months. Patients were screened for the biochemical profile before and after the intervention. To compare the groups with respect to the interest outcomes, the t-test was used. The value of P < 0.05 was considered significant.Results: There were 104 male patients and 96 female patients. The mean age was 54.9 ± 8.7. No significant differences were found between the study groups in relation to clinical and biochemical data before the education sessions. After the intervention, in the intervention group, the mean level of HbA1 c was significantly lower than the value in the control group(6.2% vs 6.8%, P = 0.001) as well as for the mean values of BMI. The mean reduction(more than 15%) in HbA1 c after the intervention was 43% in the intervention group and 2% in the control group(OR = 36.9, P < 0.05). Differences in BMI, HbA1 c, triglycerides, and cholesterol were more significantly visible in the intervention group. However, the difference in systolic and diastolic blood pressure values was almost the same(P > 0.05).Conclusions: The results of this study further support that the approach for education of patients with type 2 diabetes on changing lifestyle benefit the patient in controlling diabetes. It is believed that the establishment of diabetes education classes in health centers is an important investment in improving the management of type 2 diabetes.

Randomized controlled trial of consensus interferon with or without zinc for chronic hepatitis C patients with genotype 2

瞄准：为长期的丙肝的治疗在高病毒的负担的肝炎病毒遗传型 1b 被表明了的干扰素的功效上的锌补充的有益的效果。这研究与遗传型 2 集中于病人，它比遗传型 1b 对干扰素更敏感，并且使用了一致干扰素(CIFN ) 与或没有锌。方法：我们使随机化有到在 18 MIU 的 CIFN 的长期的丙肝的 83 个病人为 4 wk 的六 times/wk，在 18 MIU 由 CIFN 列在后面为另一 20 wk 的六 times/wk，在有 polaprezinc 的联合 300 mg (政体 A， n=41 ) 或同样单音的治疗(政体 B， n=42 ) 。在政体 A 的 31 个病人和在政体 B 的 33 个病人完成了临床的试用；因为副作用或转移，留下的病人撤退了到另一所医院。结果：支撑了生物化学的反应，作为正常定义 aminotransferase 在 6 瞬间的结束铺平处理以后的观察，是 68% 和 69% ，并且支撑了 virological 反应，在 6 瞬间的结束定义为无法发现的 HCV-RNA 处理以后的观察，分别地为政体 A 和 B 是 54% 和 67% 。结论：与锌相结合的 CIFN 治疗没提高出现由的 CIFN 的效果生物化学， virological 标准。与 polaprezinc 有关的副作用都没被注意。

Glycated hemoglobin and antidiabetic strategies as risk factors for hepatocellular carcinoma

AIM: To evaluate the relationship between glycemic control [assessed by glycated hemoglobin (HbA1c)], antidiabetic therapies and the risk of hepatocellular carcinoma (HCC).METHODS: We recruited 465 patients with HCC, 618 cases with liver cirrhosis and 490 controls with no liver disease. Among subjects with type 2 diabetes mellitus (DM2), the associations between the antidiabetic strategies and HbA1c level with HCC were determined through 2 series of multivariate logistic regression models using cirrhotic patients and controls as comparison groups. RESULTS: DM2 prevalence was 31.2% in patients with HCC, 23.2% in cirrhotic patients and 12.6% in controls (P < 0.0001). In 86% of study subjects, DM2 had been diagnosed for more than 1 year before the HCC diagnosis. HCC patients with DM2 had a 1.52.5fold increased risk of liver cancer. The HbA1c mean levels were signif icantly higher in DM2 patients with HCC than in cirrhoticand control DM2 patients. Antidiabetic treatment with metformin was more common among cirrhotic and control DM2 subjects than among cases with HCC. In both series of multivariate analyses, treatment with metformin signif icantly reduced the risk of HCC by more than 80% compared with sulphonylureas and insulin therapy. No signif icant differences were seen between sulphonylureas and insulin treatment. Elevated HbA1c levels were positively related to the risk for HCC in diabetic patients, with a 26%50% increase in risk for each 1% increase in HbA1c values.CONCLUSION: In patients with preexisting DM2, the risk of HCC is positively associated with poor chronic glycemic control and significantly decreased by metformin therapy.

Distributed tasks-platforms scheduling method to holonic-C2 organization

To solve the problem of distributed tasks-platforms scheduling in holonic command and control(C2) organization,the basic elements of the organization are analyzed firstly and the formal description of organizational elements and structure is provided. Based on the improvement of task execution quality,a single task resource scheduling model is established and the solving method based on the m-best algorithm is proposed. For the problem of tactical decision-holon cannot handle tasks with low priority effectively, a distributed resource scheduling collaboration mechanism based on platform pricing and a platform exchange mechanism based on resource capacities are designed. Finally,a series of experiments are designed to prove the effectiveness of these methods. The results show that the proposed distributed scheduling methods can realize the effective balance of platform resources.

An executable modeling and analyzing approach to C4ISR architecture

To analyze the behavioral model of the command,control,communication,computer,intelligence,surveillance,reconnaissance(C4ISR)architecture,we propose an executable modeling and analyzing approach to it.First,the meta concept model of the C4ISR architecture is introduced.According to the meta concept model,we construct the executable meta models of the C4ISR architecture by extending the meta models of fUML.Then,we define the concrete syntax and executable activity algebra(EAA)semantics for executable models.The semantics functions are introduced to translating the syntax description of executable models into the item of EAA.To support the execution of models,we propose the executable rules which are the structural operational semantics of EAA.Finally,an area air defense of the C4ISR system is used to illustrate the feasibility of the approach.

Add-on therapy of herbal formulation rich in standardized fenugreek seed extract in type 2 diabetes mellitus patients with insulin therapy: An efficacy and safety study

Objective: To assess the safety and efficacy of herbal formulation rich in standardized fenugreek seed extract(IND-2) add-on therapy in type 2 diabetes mellitus(T2DM) patients who were on insulin treatment in prospective, single arm, open-label, uncontrolled, multicentre trial.Methods: T2DM patients(n=30) with aged 18-80 years who were stabilized on insulin treatment with fasting blood sugar(FBS) level between 100-140 mg/dL received IND-2 capsules(700 mg, thrice a day) for 16 weeks.The primary endpoints were an assessment of FBS at week 2, 4, 6, 8, 12 and 16.Secondary end-points include post-prandial blood sugar level, glycosylated Hb(HbA1c), reduction in the dose of insulin and number of hypoglycemic attacks, and improvement in lipid profile at various weeks.Safety and adverse events(AEs) were also assessed during the study.Results: Study was completed in twenty T2DM patients, and there was no significant reduction in FBS and post-prandial blood sugar level after addon therapy of IND-2.However, add-on therapy of IND-2 significantly reduced(P<0.01) the HbA1c values, requirements of insulin and hypoglycemic events as compared with baseline.Total cholesterol, high-density lipoproteins-cholesterol, and low-density lipoproteincholesterol levels were significantly increased(P<0.01) after IND-2 add-on therapy.Body weight and safety outcomes did not differ significantly in IND-2 add-on therapy group at week 16.Additionally, add-on therapy of IND-2 did not produce any serious adverse events.Conclusions: The results of present investigation suggest that add-on therapy of IND-2 with insulin in T2DM patients improves glycaemic control through a decrease in levels of HbA1c and number of insulin doses needed per day without an increase in body weight and risk of hypoglycemia.Thus, IND-2 may provide a safe and well-tolerated add-on therapy option for the management of T2DM.

Effectiveness of health coaching on diabetic patients: A systematic review and meta-analysis

、Background:Using health coaching to improve the quality of life and health outcomes of the patients with diabetes mellitus,has emerged as a possible intervention.However,the few published randomized controlled trials using health coaching for patients with diabetes mellitus have reported mixed results.The present meta-analysis aimed to determine the effectiveness of health coaching on modifying health status and quality of life among diabetic patients and to clarify the characteristics of coaching delivery that make it most effective.Methods:This study searched for articles on randomized controlled trials of health coaching interventions targeting type 2 diabetic patients that were published in the English language from January 2005 through December 2018 in the Cochrane,Medline,PubMed,Trip,and Embase databases.Patients in the control group received usual diabetes mellitus care,and those in the experimental group received health coaching based on usual diabetes mellitus care.The primary outcomes included Hemoglobin A1c(HbA1c)and cardiovascular disease risk factors,including systolic blood pressure,diastolic blood pressure,triglyceride,high-density lipoprotein cholesterol(HDL-C),low-density lipoprotein cholesterol,total cholesterol,and body weight.The secondary outcomes included quality of life,self-efficacy,self-care skills,and psychological outcomes.Results:Health coaching intervention has a significant effect on HbA1c[mean difference(MD)=-0.35,confidence interval(CI)=-0.47,-0.22,I2=83%,P<0.001]and HDL-C(MD=-0.50,CI=-0.93,-0.07,I2=10%,P=0.02).The most effective strategy for health coaching delivery associated with improvement of HbA1c was decreasing the number of sessions and increasing the duration of each session.However,no significant difference was found for weight,SBP,diastolic blood pressure,triglyceride,low-density lipoprotein cholesterol,or total cholesterol.Mixed results were reported for the effect of health coaching on quality of life,self-efficacy,self-care skills,and depressive symptoms outcome.Conclusion:Health coaching intervention has a significant effect on HbA1c and HDL-C,and the most effective strategy is decreasing the number of sessions while increasing session duration.However,these results should be interpreted with caution as the evidence comes from studies at some risk of bias with considerable heterogeneity and imprecision.

航天测控网多模式效能评估系统设计与关键技术实现

全方位多维度的效能评估能够辅助发现航天测控网运行、测控设备指挥控制的薄弱环节,对提升站网资源使用效率、优化用户用网服务具有重要意义。针对航天测控网业务特点和灵活效能评估需求,设计并实现了一套多模式效能评估系统,支持周期自动、事件触发、手动启动等多种评估模式,并具备多维评估模型管理、多样数据接入、多评估环节定制可变等特点,可提供从指标体系构建、方案制定、任务配置及报表生成的全流程效能评估服务。该多模式效能评估系统将部署于航天测控网中心系统,与资源调度、资源管控等分系统配合,共同提升航天测控网应用效能。

基于知识推理的指挥控制软件故障诊断方法

针对当前指挥控制(指控)系统软件缺乏故障诊断方法的问题,将专家系统的构建方法应用于指控软件故障诊断,形成了一套基于知识推理的指控软件故障诊断框架。利用专家系统中完备的缺陷信息知识库,构建了正向推理和深度优先搜索的推理机,从而实现了对指控软件系统的典型故障诊断。最后,通过实例证明,该方法不仅能有效诊断故障原因,还可给出改进建议。

多维度健康心理控制源C版量表的汉化及信效度检验

目的汉化多维度健康心理控制源C版(form C of the Multidimensional Health Locus of Control,MHLC-C)量表,并检验中文版MHLC-C量表的信度和效度。方法获得量表开发者授权后,依照Brislin量表翻译原则对MHLC-C量表进行正译、回译,经过2轮专家函询及预调查后完成文化调试;采用便利抽样法,于2022年7月—10月对洛阳市某三级甲等医院内分泌科住院的2型糖尿病患者共321例进行调查,检验中文版MHLC-C量表的信效度,并从中便利抽取30例患者,于其初次接受调查2周后,再次对其进行调查,以评价重测信度。结果中文版MHLC-C量表共包含4个分量表、18个条目;条目水平的内容效度指数为0.780~1.000,量表水平的平均内容效度指数为0.960。探索性因子分析提取4个公因子,将其分别命名为内部控制、机遇控制、医生和其他人,4个公因子累计解释总方差的73.079%;验证性因子分析结果支持四因子模型假设,各项拟合指标可接受[χ2/df=1.560,渐进残差均方和平方根(RMSEA)=0.052,比较适配指数(CFI)=0.945,拟合优度指数(GFI)=0.901,调整后适配度指数(AGFI)=0.876,规范拟合指数(NFI)=0.862,递增拟合指数(IFI)=0.946,非规范拟合指数(TLI)=0.938]。量表总Cronbach’sα系数为0.825,重测信度系数为0.940。结论中文版MHLC-C量表具有良好的信效度,可作为评估2型糖尿病患者健康心理控制源的工具。

一种具有自校准、自控制功能的I^(2)C接口电路

文章提出一种在开漏模式下通过硬件自检测、自校准实现高性能I^(2)C(inter-integrated circuit)接口的设计,并给出一种I^(2)C接口自控制实现开漏功能的方法。在传统I^(2)C接口电路的基础上,增加了自检测拉低时钟总线并进行自校准的功能,使得在开漏模式下,硬件能够自动检测到时钟总线在上拉过程中的低电平并进行自校准高电平,在改善通信稳定性的基础上实现了性能提升。考虑到不同的应用场合,增加了开漏使能控制电路,为提高IP的可移植性,I^(2)C接口可自控制开漏功能,支持软件配置,灵活地应用于各种通用输入输出(general-purpose input/output,GPIO)模型中。成品开发板电路测试表明,在系统时钟为120 MHz时,该电路在开漏模式下高速通信中的位速率高达5.98 Mbit/s,在推挽模式下超快速通信中的位速率高达30.00 Mbit/s。

One-to-Any Command and Control Model:Precisely Coordinated Operation on Uncooperative Controlled Nodes

New precisely cooperative attacks, such as the coordinated cross plane session termination(CXPST) attack, need thousands upon thousands machines to attack diverse selected links simultaneously with the given rate. However, almost all command and control(C&C) mechanisms only provide publishing one command to the whole once, so-called one-to-all C&C model, and are not productive to support CXPST-alike attacks. In this paper, we present one-to-any C&C model on coordination among the uncooperative controlled nodes. As an instance of one-to-any C&C model, directional command publishing(DCP) mechanism leveraging on Kademlia is provided with a range-mapping key creating algorithm for commands to compute the publishing range and a statistically stochastic node querying scheme to obtain the commands immediately. With theoretical analysis and simulation, it is indicated that one-to-any C&C model fits for precisely coordinated operation on uncooperative controlled nodes with least complexity, better accuracy and efficiency. Furthermore, DCP mechanism can support one-to-all command publishing at the same time. As an example of future C&C model, studying on one-to-any C&C model may help to promote the development of more efficient countermeasures.

僵尸网络发展研究

僵尸网络(botnet)作为最有效的网络攻击平台,给当今互联网安全带来了巨大威胁.虽然近几年关于僵尸网络的攻防技术研究取得了显著进展,然而,伴随着互联网应用的多元化以及通信技术的不断革新,僵尸网络的形态和命令控制机制也在不断发生变化,这给防御人员带来了新的挑战.深入了解僵尸网络运行机理和发展趋势对有效应对僵尸网络引发的安全威胁具有重要意义.以僵尸网络攻击技术为核心,从形式化定义、传播方式、生命周期、恶意行为、命令控制信道方面对僵尸网络机理进行全面介绍,按时间顺序将僵尸网络的发展历程划分为PC攻击和广泛攻击2个阶段,对各阶段的技术特点、行为特性、代表案例以及演化规律进行详细阐述,总结当今僵尸网络防御方法和研究成果,对已有研究遗留的问题和未来可能研究热点进行讨论.

反导作战管理技术研究

反导作战管理技术是指对反导体系内的传感器和火力资源进行以任务规划为核心的指挥与控制技术,主要包括传感器资源作战管理和火力资源作战管理两大部分。首先对反导作战管理与指挥控制系统的发展情况进行了简要分析,然后针对反导作战管理技术的内涵、主要任务、层次结构进行了系统研究,最后初步探讨了反导作战管理的核心内容和涉及的关键技术。

指挥与控制系统复杂网络形式化建模与分析

根据信息化条件下指挥与控制系统(以下简称C2系统)的复杂性特征以及网络化趋势,以复杂网络的研究思路,基于图论和集合论,对C2系统中的实体以及其逻辑关系进行了形式化抽象和描述;建立了C2系统的复杂网络模型,并辅以实例对C2系统结构的复杂网络统计特征进行了简要分析。在一定程度上解决了目前在以复杂网络理论研究C2系统结构过程中的定量描述问题,为以后的研究提供了一定的理论启示和参考价值。

P2P僵尸网络研究

为了更好地探索研究新型P2P僵尸网络的跟踪、检测与反制方法,介绍了P2P僵尸网络的基本定义和演化历史,对P2P僵尸网络的分类和工作机制进行研究,分析P2P僵尸网络的拓扑结构及其逃避检测的方法,报告对P2P僵尸网络进行跟踪、检测与反制的研究现状,并对各种方法的性能进行了比较。最后对P2P僵尸网络的发展与进一步研究提出展望。

C^4ISR系统指挥控制关系适应性演化模型和方法研究

研究了C4ISR系统结构中指挥控制关系的适应性演化问题。构建了C4ISR系统结构中的指挥控制关系模型,在对指挥控制关系适应性演化过程分析和描述的基础上,设计了演化过程中的指挥控制关系的结构变化代价和性能代价,并以最小化总的演化代价为目标函数构建了指挥控制关系适应性演化问题的数学模型。提出了基于n-Best策略层级聚类方法和遗传算法(genetic algorithm,GA)的问题模型求解思路。n-Best策略层级聚类方法用来获取每个任务阶段可行的指挥控制关系集合,而GA用来搜索最优的演化路径。最后通过某一仿真算例验证了求解方法的可行性、稳定性。

青藏铁路救援指挥系统的研究

通过对青藏铁路特点及运营模式的分析,提出构建青藏铁路事故救援指挥系统的重要性。结合青藏铁路信息化总体规划,在充分利用青藏铁路各信息系统及通讯网络基础上,利用地理信息系统(GIS)技术和无线通讯技术,建设具有指挥、控制、通信及情报(C3I)功能的青藏铁路事故救援指挥系统。提出了系统应达到的目标功能,结合青藏铁路生产作业实际情况,给出了系统实现的信息流程、体系结构,并开发了原型系统。系统将青藏铁路多源信息整合并结合GIS技术以直观的电子地图、图像等方式展示出来,实现了救援预案管理和智能化查询、匹配;并通过应急无线通讯设备实现事故现场视频、图像实时播放及指挥调度与事故现场间的语音双向通讯;同时可建立事故数据库,为统计报告和事故分析服务。