Data-mining based SQL injection attack detection using internal query trees

Detecting SQL injection attacks (SQLIAs) is becoming increasingly important in database-driven web sites. Until now, most of the studies on SQLIA detection have focused on the structured query language (SQL) structure at the application level. Unfortunately, this approach inevitably fails to detect those attacks that use already stored procedure and data within the database system. In this paper, we propose a framework to detect SQLIAs at database level by using SVM classification and various kernel functions. The key issue of SQLIA detection framework is how to represent the internal query tree collected from database log suitable for SVM classification algorithm in order to acquire good performance in detecting SQLIAs. To solve the issue, we first propose a novel method to convert the query tree into an n-dimensional feature vector by using a multi-dimensional sequence as an intermediate representation. The reason that it is difficult to directly convert the query tree into an n-dimensional feature vector is the complexity and variability of the query tree structure. Second, we propose a method to extract the syntactic features, as well as the semantic features when generating feature vector. Third, we propose a method to transform string feature values into numeric feature values, combining multiple statistical models. The combined model maps one string value to one numeric value by containing the multiple characteristic of each string value. In order to demonstrate the feasibility of our proposals in practical environments, we implement the SQLIA detection system based on PostgreSQL, a popular open source database system, and we perform experiments. The experimental results using the internal query trees of PostgreSQL validate that our proposal is effective in detecting SQLIAs, with at least 99.6% of the probability that the probability for malicious queries to be correctly predicted as SQLIA is greater than the probability for normal queries to be incorrectly predicted as SQLIA. Finally, we perform additional experiments to compare our proposal with syntax-focused feature extraction and single statistical model based on feature transformation. The experimental results show that our proposal significantly increases the probability of correctly detecting SQLIAs for various SQL statements, when compared to the previous methods.     

塑料模具材料数据库系统的开发与应用

采用结构化程序和规范化数据库技术开发了塑料模具材料数据库系统，介绍了数据库系统的总体结构、主要模块功能及选材方法。该系统对材料数据信息进行了科学的分类管理，提供了高效的查询方法，实现了对塑料模具材料数据库系统的有效维护。     

航空物探数据库系统定制界面技术研究

航空物探数据类型众多,在航空物探数据库中设计了70多张不同的数据库表用来存放这些数据。从软件的整体考虑,依据库表字段属性和定制类型(录入、导入、查询和浏览界面类型)给指定的每一张库表定制出对应的数据操作界面。     

Face detection by structural models

Despite the successes in the last two decades, the state-of-the-art face detectors still have problems in dealing with images in the wild due to large appearance variations. Instead of leaving appearance variations directly to statistical learning algorithms, we propose a hierarchical part based structural model to explicitly capture them. The model enables part subtype option to handle local appearance variations such as closed and open month, and part deformation to capture the global appearance variations such as pose and expression. In detection, candidate window is fitted to the structural model to infer the part location and part subtype, and detection score is then computed based on the fitted configuration. In this way, the influence of appearance variation is reduced. Besides the face model, we exploit the co-occurrence between face and body, which helps to handle large variations, such as heavy occlusions, to further boost the face detection performance. We present a phrase based representation for body detection, and propose a structural context model to jointly encode the outputs of face detector and body detector. Benefit from the rich structural face and body information, as well as the discriminative structural learning algorithm, our method achieves state-of-the-art performance on FDDB, AFW and a self-annotated dataset, under wide comparisons with commercial and academic methods.     

Exploring album structure for face recognition in online social networks

In this paper, we propose an album-oriented face-recognition model that exploits the album structure for face recognition in online social networks. Albums, usually associated with pictures of a small group of people at a certain event or occasion, provide vital information that can be used to effectively reduce the possible list of candidate labels. We show how this intuition can be formalized into a model that expresses a prior on how albums tend to have many pictures of a small number of people. We also show how it can be extended to include other information available in a social network. Using two real-world datasets independently drawn from Facebook, we show that this model is broadly applicable and can significantly improve recognition rates.     

Online learning and fusion of orientation appearance models for robust rigid object tracking

We introduce a robust framework for learning and fusing of orientation appearance models based on both texture and depth information for rigid object tracking. Our framework fuses data obtained from a standard visual camera and dense depth maps obtained by low-cost consumer depth cameras such as the Kinect. To combine these two completely different modalities, we propose to use features that do not depend on the data representation: angles. More specifically, our framework combines image gradient orientations as extracted from intensity images with the directions of surface normals computed from dense depth fields. We propose to capture the correlations between the obtained orientation appearance models using a fusion approach motivated by the original Active Appearance Models (AAMs). To incorporate these features in a learning framework, we use a robust kernel based on the Euler representation of angles which does not require off-line training, and can be efficiently implemented online. The robustness of learning from orientation appearance models is presented both theoretically and experimentally in this work. This kernel enables us to cope with gross measurement errors, missing data as well as other typical problems such as illumination changes and occlusions. By combining the proposed models with a particle filter, the proposed framework was used for performing 2D plus 3D rigid object tracking, achieving robust performance in very difficult tracking scenarios including extreme pose variations.     

Face recognition with Symmetric Local Graph Structure (SLGS)

Face recognition demonstrates the significant progress in the research field of biometric and computer vision. The fact is due to the current systems perform well under relatively control environments but tend to suffer when the present of variation in pose, illumination, and facial expression. In this work, a novel approach for face recognition called Symmetric Local Graph Structure (SLGS) is presented based on the Local Graph Structure (LGS). Each pixel is represented with a graph structure of its neighbours’ pixels. The histograms of the SLGS were used for recognition by using the nearest neighbour classifiers that include Euclidean distance, correlation coefficient and chi-square distance measures. AT&T and Yale face databases were used to be experimented with the proposed method. Extensive experiments on the face database clearly showed the superiority of the proposed approach over Local Binary Pattern (LBP) and LGS. The proposed SLGS is robust to variation in term of facial expressions, facial details, and illumination. Due to good performance of SLGS, it is expected that SLGS has a potential for application implementation in computer vision.     

邻二甲苯泵用机械密封的失效分析

针对国产化过程中，邻二甲苯泵用机械密封工作时产生的故障，进行了失效分析。为邻二甲苯泵用机械密封的改造提供了依据。     

纹理豪斯多夫距离在人脸识别算法中的应用

很多经典的人脸识别方法难以适应姿势变化及人脸错位的情形。为了解决这一问题,提出一种基于纹理豪斯多夫距离(THD)的人脸识别算法。将人脸图像的空间量及纹理特征相结合,使其在深入的头部转动和人脸错位中都有很高的容错度。在FERET及Yale两大人脸数据库的实验表明,与其他经典的方法相比较,所提出的方法取得了更好的识别效果。     

多流形判别分析在人脸识别中的研究

局部保持投影LPP(Locality Preserving Projection)是一种有效的非线性降维方法,能够使投影降维后的数据与原输入空间中的相似局部结构保持一致,但是该方法没有充分利用类间样本点的权重等重要信息。为了解决这个问题,提出基于Fisher准则的多流形判别分析FMMDA(Fisher Multi-Manifold Discriminant Analysis)方法。结合Fisher准则训练样本类内拉普拉斯图和样本均值类间拉普拉斯图,既保持了原样本的相似局部结构,又充分地利用了不同类别之间的权重。在ORL及Yale人脸库上验证了该方法的有效性。与其他几种最先进的方法相比,FMMDA方法取得了更好的识别效果。