An Active Deception Defense Model Based on Address Mutation and Fingerprint Camouflage

The static and predictable characteristics of cyber systems give attackers an asymmetric advantage in gathering useful information and launching attacks.To reverse this asymmetric advantage,a new defense idea,called Moving Target Defense(MTD),has been proposed to provide additional selectable measures to complement traditional defense.However,MTD is unable to defeat the sophisticated attacker with fingerprint tracking ability.To overcome this limitation,we go one step beyond and show that the combination of MTD and Deception-based Cyber Defense(DCD)can achieve higher performance than either of them.In particular,we first introduce and formalize a novel attacker model named Scan and Foothold Attack(SFA)based on cyber kill chain.Afterwards,we develop probabilistic models for SFA defenses to provide a deeper analysis of the theoretical effect under different defense strategies.These models quantify attack success probability and the probability that the attacker will be deceived under various conditions,such as the size of address space,and the number of hosts,attack analysis time.Finally,the experimental results show that the actual defense effect of each strategy almost perfectly follows its probabilistic model.Also,the defense strategy of combining address mutation and fingerprint camouflage can achieve a better defense effect than the single address mutation.

Distributed Application Addressing in 6G Network

To ensure the extreme performances of the new 6G services,applications will be deployed at deep edge,resulting in a serious challenge of distributed application addressing.This paper traces back the latest development of mobile network application addressing,analyzes two novel addressing methods in carrier network,and puts forward a 6G endogenous application addressing scheme by integrating some of their essence into the 6G network architecture,combining the new 6G capabilities of computing&network convergence,endogenous intelligence,and communication-sensing integration.This paper further illustrates how that the proposed method works in 6G networks and gives preliminary experimental verification.

Application Strategies of Automatic Addressable Single-Lamp Control Technology in Tunnel Lighting

The article mainly studies the application strategy of automatic addressable single-lamp control technology in tunnel lighting.It encompasses an introduction to this technology,an analysis of the tunnel lighting system using automatic addressable single-lamp control technology,and outlines the main development direction for this technology in modern tunnel lighting.The aim is to offer insights that can inform the rational deployment of this technology,thereby enhancing the lighting control effectiveness in modern tunnels and meeting their specific lighting requirements more effectively.

Shared Cache Based on Content Addressable Memory in a Multi-Core Architecture

Modern shared-memory multi-core processors typically have shared Level 2(L2)or Level 3(L3)caches.Cache bottlenecks and replacement strategies are the main problems of such architectures,where multiple cores try to access the shared cache simultaneously.The main problem in improving memory performance is the shared cache architecture and cache replacement.This paper documents the implementation of a Dual-Port Content Addressable Memory(DPCAM)and a modified Near-Far Access Replacement Algorithm(NFRA),which was previously proposed as a shared L2 cache layer in a multi-core processor.Standard Performance Evaluation Corporation(SPEC)Central Processing Unit(CPU)2006 benchmark workloads are used to evaluate the benefit of the shared L2 cache layer.Results show improved performance of the multicore processor’s DPCAM and NFRA algorithms,corresponding to a higher number of concurrent accesses to shared memory.The new architecture significantly increases system throughput and records performance improvements of up to 8.7%on various types of SPEC 2006 benchmarks.The miss rate is also improved by about 13%,with some exceptions in the sphinx3 and bzip2 benchmarks.These results could open a new window for solving the long-standing problems with shared cache in multi-core processors.

Address Delivered to the Christian Leaders in the West Of the United States

This is my second visit to Los Angeles as the Director of the State Administration for Religious Affairs to exchange views with all the American Christian friends present. I believe what you want to learn best is the real situation of Chinese Christianity at present. I can tell you with pleasure that Chinese Christians are running their church independently and has thus removed the "cap" of "foreigness". It has become a religion that eulogizes love and traditional culture. As a reli-

An Analysis of Chinese Address Terms From the Perspective of Speech Act Theory

Address terms are an important resource for conveying relationships.In daily interactions,the use of address terms is unavoidable.Therefore,the choose of address terms is particularly critical to make communicate smoothly with people.Previous scholars have studied address terms from a wide range of perspectives.But there is not much research on Chinese address terms based on speech act theory,which is put forward by John Langshaw Austin.By observing communicative conversations,several findings have been emerged from the analysis.They are professional title,affectionate address terms,and common address terms.These findings express the existential significance of address terms,which are the premise for people to maximize their illocutionary act when communicating.Correct understanding and grasp of the use of address terms is conductive to unfolding the communicative dialogue more smoothly.

Challenges and Countermeasures for Integrating the Protection of Environmental Rights into Actions for Addressing Climate Change

Climate change,which is the result of human activities,has wide-ranging impact.It poses a serious threat to human rights.Environmental rights are where the protection of the ecological environment and the development of human rights intersect.In view of the close relationship between the actions for addressing climate change and environmental rights,China should integrate the protection of environmental rights into the actions for addressing climate change,so as to achieve simultaneous development of both.In the process of coping with climate change,the right to climate stability that mainly pursues a“harmless”environment and the right to a more livable climate that pursues a“beautiful eco-environment”are specific manifestations of environmental rights and should be the priority of protection efforts.However,there are still some obstacles to achieving the coordinated development of the efforts to address climate change and the protection of environmental rights because traditional rights protection methods mainly give individuals subjective rights with the power to claim and are thus difficult to meet the needs of environmental rights protection in the context of climate change,and there are inherent value differences between responding to climate change and the realization of other human rights.Building a multi-level national obligation system to address climate change,giving full play to the role of courts in responding to climate change through moderate judicial activism,and coordinating the efforts to cope with climate change and the development of human rights under the guidance of a holistic system view are effective ways to overcome the aforementioned difficulties.

IPv6地址驱动的云网络内生安全机制研究

云网络可以根据不同业务场景对云平台虚拟网络资源快速部署与配置,是现代数据中心性能和安全的重要保障。但传统云网架构中IPv4支撑能力有限,无法实现网络端到端的透明传输,多租户特性使得云管理者对租户子网进行流量管理和约束异常困难,外挂式的安全方案缺乏对不同租户流量的追溯能力,无法在源头对攻击行为进行限制。IPv6具有地址空间大、编址能力强、安全性高的特点,基于此,文章提出一种IPv6地址驱动的云网络内生安全机制,包括地址生成层、地址验证层和地址利用层。地址生成层以对称加密算法为基础,将租户身份信息嵌入IPv6地址后64位,修改DHCPv6地址分配策略,并基于Openstack Neutron进行实现。地址验证层设计实现了云网络动态源地址验证方法,针对不同端口状态集合设计针对性转移方法和安全策略。地址利用层基于IPv6真实地址的特性,实现了基于IPv6地址的数据包溯源机制和访问控制策略。

基于过零点斜率加窗解调的ACARS信号接收方法

飞机通信寻址与报告系统(ACARS)允许飞机和地面站之间发送和接收报文,在保障飞行安全、实现空中交通管制等方面具有重要意义。通信链路的噪声和频偏是影响ACARS信号接收性能的关键因素。针对ACARS信号接收过程中的失真等问题,深入研究频偏、噪声等因素与ACARS报文接收性能之间的关系;在充分考虑噪声与多普勒频移等因素的基础上,提出基于过零点斜率加窗解调的ACARS信号接收方法,并从理论和仿真分析2方面探讨不同方法的抗频偏抗噪声能力;设计并搭建基于软件无线电平台的ACARS信号接收系统。通过对ACARS报文接收性能的仿真分析和真实报文接收性能的对比分析,表明所提方法在提升抗噪声和频偏能力、降低误码率等方面均具有优势。

论黄金分割思想在散文文体分析中的美学价值——以Gettysburg Address为例

与其他艺术形式一样,文学作品中也存在黄金分割。迄今为止,前人研究了黄金分割在诗歌、小说和戏剧三种文体结构中的体现,但未涉及散文。文章以林肯总统的Gettysburg Address为例,从段落、句子、词汇、音节、演讲时长五个层面来分析黄金分割在其中的体现,并就其在散文文体分析中的适用性展开讨论。研究发现:黄金分割是一种特殊的语言现象,适用于散文文体分析,具有独特的美学价值。

以人口高质量发展积极应对人口老龄化:内在逻辑与治理进路

人口老龄化是人口高质量发展的重要背景,人口高质量发展则为积极应对人口老龄化提供人口要素的支撑。结合人口高质量发展与积极应对人口老龄化国家战略的行动目标,在厘清二者辩证关系的基础上,需从激活老年群体价值潜力,完善终身教育体系,统筹“一老一小”服务,面向老龄社会需求优化人力资源分布等方面着手,找准共同进路,把握机遇挑战,在中国式现代化进程中不断夯实高质量的人口要素基础,积极应对人口老龄化。

论双碳背景下的清洁能源技术强制许可

中国加入《巴黎协定》后提出力争2030年实现碳达峰、2060年实现碳中和,在双碳背景下有学者提出比照药品强制许可对清洁能源技术实施强制许可,而现有理论存在论证逻辑谬误、维度欠缺等多种问题。基于环境权的法哲学外部证立、法规范的法教义学内部证立、清洁能源专利实施情况的实证分析以及清洁能源专利与药品专利的比较分析,得出结论:清洁能源强制许可具备法律上的正当性,但不具备实施上的必要性。尽管如此,仍应当完善强制许可制度,发挥其对技术转让谈判的辅助作用,促进清洁能源技术转让,为实现碳达峰、碳中和的远景目标保驾护航。

加快“以竹代塑”绿色产业发展的市场供需对接机制研究

我国为全球“以竹代塑”的倡导国,也是“以竹代塑”的引领国,正在加快“以竹代塑”发展,以应对气候变化和减少塑料污染,拓展绿色经济发展路径。我国“以竹代塑”产品供需关系正在建立,但供需对接机制仍不健全,存在“供有需小”“供无需有”等问题,主要原因在于供给侧难以满足需求侧要求以及供需两侧信息不畅通和市场交易不便捷。本文建议从供需两侧共同发力,做强做精供给侧、做大做深需求侧、加强供需对接政策支持,推动“以竹代塑”的快速发展,打造新型绿色产业。

基于同态加密的区块链混币方案

区块链混币技术是一种保护交易隐私、实现交易的不可链接性的重要方案。然而,其结合了Pedersen承诺的验证过程,需要数百字节的空间开销,极大地降低了可用性。利用国密SM2算法、同态加密和混淆地址,提出了一种新的区块链混币方案。该方案通过使用EC-ElGamal半同态加密技术加密交易金额,在链上交易过程中完全隐藏交易金额,将隐藏金额后的交易进行两次验证和一次重随机化后发送到一次性的混淆地址中,打破交易发起方和接收方的联系,实现了交易的不可链接性和不可追踪性。所提方案能够有效提高交易数据隐私保护的强度,增强对分析攻击、密钥重放攻击和女巫攻击的抵抗能力,同时单次交易的空间占用减少了82.25%,交易吞吐量显著提高。

校园网络IPv6地址规划探析

IPv6技术是互联网升级演进的必然趋势,是校园网络规划阶段需要重点考虑的环节。IPv6地址规划需要考虑路由性能、路由策略和安全等因素,合理的IP地址规划可以直观地识别节点属性,提高网络的可管理性。IPv6地址分配方法主要有单调分配、稀疏分配、最适合分配、随机分配和前缀委托等。以作者所在学校为例,介绍IPv6地址的规划,期待能为有类似需求的单位提供一点有益的探索和借鉴。

富文本协同编辑中基于树型结构地址空间转换的一致性维护

协同编辑通过多用户远程实时编辑,最大程度的支持团队之间的协作和交流.撤销操作作为协同编辑的一个重要特性,通过错误恢复简化协作编辑过程中产生的错误或者意外操作的处理过程.富文本编辑采用树型结构来进行文档管理,从而产生了较线性文档更为复杂的并发操作环境和冲突消解场景.为了解决富文本文档中的并发操作环境与撤销操作冲突问题,本文提出了一种新颖的基于树型结构的地址空间转换方法,采用基于位置的节点寻址方案和节点属性值计数器策略,能更方便地支持撤销操作与更改操作.此外,本文还给出了树型结构地址空间的结果一致性的正确性证明及详细的案例分析,并开发了Web平台下实时协同富文本编辑原型系统AST-RichText,进一步验证了该方法的可行性.

数字地名研究综述

数字地名是地名服务信息化,包括地名地址的采集提取、处理建库、成果转化、地址匹配、数据可视化、数据共享与应用等内容。作者认为数学模型和人工智能方法提取地形图、卫星影像上的地名是地名地址数据自动采集的主要方法。城市地标的识别提取、中文信息和空间定位位置的识别相对较易,语义层面的深层次地址实体识别还存在问题,地址解析方法有待完善,大数据和人工智能技术是其解决之道。非地标地物地址、空间分布不连续地址的提取方法有待研究。建立快速的地名地址数据交换标准是一个迫切问题。在地址匹配方面,分词统计、人工智能等是主要方法,但都有局限性,地址分级越多,匹配效果越好。外层空间的地名命名需要与我国航天事业的发展同步甚至更快一步。每种少数民族语言的译音规则都是需要的,G20及金砖国家、一带一路沿线国家的地名汉字译写导则有待加强。地名分类有交叉,地址尚无较为科学的分类方法。中国地名文化遗产和一带一路地名文化是地名文化研究的热点,现代地名文化内涵需要进一步重视,历史地名保护及地名的古为今用仍任重道远。完善的地名地址标识辅以商用导航软件,寻址问路难题得到了根本解决。

政策型立法:应对气候变化立法韩国经验的镜鉴与拓展

综观各国应对气候变化立法,大致可分为综合型、分散型、单行法立法模式。其中,政策型立法承继了综合型立法的“全面性”特征,兼具引导性和灵活性。韩国是政策型立法的典型,其以气候正义为导向、以协商治理为重点、以机构设置引导形成合力,呈现为“基本法+支撑性法+辅助性法”的体系化立法路径,可资镜鉴。立足于我国能源、资源禀赋和立法现状,宜从分散型立法转向政策型立法,制定专门的《应对气候变化法》作为基本法,以参与正义融贯“平行式”的气候治理路径,以矫正正义弥合社会转型的能力差异,建构超越行政主导的主体建设二元模式,形塑我国应对气候变化立法体系。

习近平关于气候变化全球治理的重要论述及其启示

习近平以马克思主义人与自然关系思想为理论根基,从“和合共生”的中华智慧中汲取营养,立足中国应对气候变化的探索实践,围绕气候变化全球治理这一时代课题作出一系列重要论述。习近平明确了气候变化全球治理要坚持人与自然是辩证统一关系的科学认识,要协调人与人、人与自然的关系;主张坚持公平正义的价值取向,构建公平合理、合作共赢的全球气候治理体系;强调气候变化全球治理的大国担当,以中国在气候变化全球治理中的担当来促进应对气候变化的国际合作;提出绿色低碳可持续的发展道路,指明气候变化全球治理的实践方向。习近平关于气候变化全球治理的重要论述彰显了哲学思维和哲学智慧,其重要启示在于:新时代我们应该坚持以人为本维护全球气候正义;坚持共商共建共享的理念,推进全球气候治理秩序迈向公正合理;深入认识人与自然的辩证统一关系,创建人与自然和谐共生新格局,构建“人与自然生命共同体”引领全球生态文明建设。

5G随行专网架构及关键技术研讨

5G随行专网是发挥联通5G网络规模优势,强化网络安全接入能力,服务于校园、政务、企业等领域的集约化、定制化产品。其高效的无感分流,替代了传统VPN的接入方式,为个人用户和企业用户提供了高速、低延迟和高可靠性的通信服务。本文将结合运营商当前随行专网的发展现状,从整体方案切入,对随行专网落地过程中的IP地址冲突问题、二次鉴权问题、静态地址分配问题、单独计费问题及容灾问题进行深入探讨论述,以期为后续随行专网的持续落地提供相应的指导。