基于自相似流量检测的DDoS攻击及防御研究

DDoS攻击是目前互联网中应用最广泛,也是危害性最大的一种攻击方式,以破坏网络服务的可用性为目标。文章首先介绍了DDoS的攻击原理,并重点对DDoS的攻击方式和基于自相似网络流量的DDoS攻击检测方式进行研究,最后针对目前DDoS攻击的防御方式进行了全面解析。     

环Zn上广义圆锥曲线多重数字签名方案的分析与改进

文章分析了环上广义圆锥曲线多重数字签名LWL方案的安全性,证明了该方案中攻击者可绕过离散对数问题,伪造针对任意消息的签名。针对上述问题,文章提出了一种改进方案,能有效对抗内部成员攻击、流氓密钥攻击和任意消息的签名伪造攻击,安全性更强。最后分析了改进方案的计算效率和通信量,在同等安全强度下,改进方案比RSA型方案通信量少、计算效率更高。     

基于 ISAPI 过滤器的 Web 防护系统

随着 Internet 的发展,恶意用户利用 Web 应用程序存在的漏洞,对 Web 站点实施攻击,从而完成获取信息资料、植入病毒木马、伪装钓鱼网站、恶意插入广告等恶意操作,危害用户的利益,降低网站的可信度。随着 Web 攻击的日益增长,网站的安全风险达到了前所未有的高度。针对 Web 站点安全问题,在 HTTP 协议模型的基础上,结合 URL 解析技术及 Web 服务器核心扩展技术,文章设计并实现了一个基于 ISAPI 过滤器的 Web 防火墙系统。该系统可抵御常见网络攻击行为,为基于 HTTP 协议的 IIS 网站提供安全保障。系统主要包括3个组成部分：配置模块、过滤模块及日志模块。文章对系统过滤模块的设计与实现进行了详尽的阐述,系统的主要功能包括：过滤 HTTP 请求类型、限制头部长度、禁止 SQL 注入、禁止 Cookie 注入、禁止跨站攻击、防止敏感目录扫描、过滤请求文件类型以及 IP 黑名单。系统通过上述功能可以有效检测 Web 攻击行为并能做出正确处理,为 Web 网站安全提供有效保障。文章最后对系统进行功能测试,测试表明,系统可以对常见的 Web 攻击行为进行过滤处理并做出预期响应。系统符合设计目标,具有较高的实用价值。     

介质访问控制层拒绝服务攻击的入侵检测系统

针对无线局域网安全防护手段的不足,结合无线局域网介质访问控制层拒绝服务攻击的特点,设计了基于支持向量机算法的入侵检测系统。该系统利用支持向量机分类准确性高的特点,构建支持向量机最优分类超平面和分类判决函数,对网络流量进行分类识别,完成对异常流量的检测。在OPNET平台下进行无线局域网环境入侵检测仿真,仿真结果表明,该系统能有效地检测出针对无线局域网介质访问控制层的拒绝服务攻击。     

304 Stainless steel oxidation in sulfate and sulfate+ bicarbonate solutions

The electrochemical characterization of 304 stainless steel in 0.1–0.5m Na2SO4 and Na2SO4 + NaHCO3 aqueous solutions at pH8 was done in combination with SEM surface analysis. Passivation of the surface film without any pitting events is observed for the current–potential and current–time experiments, and no anodic current spikes, which are associated with depassivation events, are distinguishable above the background current level. However, SEM pictures of an electrode surface polarized at potentials above 0.4V show microscopic pit nucleation. Even when the metal may be regarded as passive from a current–time or current–potential characteristics, passivity is not stable and localized film breakdown can still occur. The events are ascribed to pit nucleation at the active inclusion sites. The pits do not grow even into the metastable state but die through repassivation by metal salt precipitation immediately after birth. The effect is ascribed to the solubility of metal salts with the electrolyte produced by dissolution in the nucleation sites. The results show that pit nucleation and pit growth are two distinct processes. The importance of solution composition and the protective effect of bicarbonate ions is also discussed.     

Differentiating seawater and groundwater sulfate attack in Portland cement mortars

The study reported in this article deals with understanding the physical, chemical and microstructural differences in sulfate attack from seawater and groundwater. Portland cement mortars were completely immersed in solutions of seawater and groundwater. Physical properties such as length, mass, and compressive strength were monitored periodically. Thermal analysis was used to study the relative amounts of phases such as ettringite, gypsum, and calcium hydroxide, and microstructural studies were conducted by scanning electron microscopy. Portland cement mortars performed better in seawater solution compared to groundwater solution. The difference in performance could be attributed to the reduction in the quantity of the expansive attack products (gypsum and ettringite). The high Cl concentration of seawater could have played an important role by binding the C₃A to form chloroaluminate compounds, such as Friedel's salt (detected in the microstructural studies), and also by lowering the expansive potential of ettringite. Furthermore, the thicker layer of brucite forming on the specimens in seawater could have afforded better protection against ingress of the solution than in groundwater.     

Distributed Privacy-Preserving Fusion Estimation Using Homomorphic Encryption

The privacy-preserving problem for distributed fusion estimation scheme is concerned in this paper. When legitimate user wants to obtain consistent information from multiple sensors, it always employs a fusion center (FC) to gather local data and compute distributed fusion estimates (DFEs). Due to the existence of potential eavesdropper, the data exchanged among sensors, FC and user imperatively require privacy preservation. Hence, we propose a distributed confidentiality fusion structure against eavesdropper by using Paillier homomorphic encryption approach. In this case, FC cannot acquire real values of local state estimates, while it only helps calculate encrypted DFEs. Then, the legitimate user can successfully obtain the true values of DFEs according to the encrypted information and secret keys, which is based on the homomorphism of encryption. Finally, an illustrative example is provided to verify the effectiveness of the proposed methods.     

IEC 61850协议DoS攻击的ECC-AES防御算法

IEC 61850是基于网络通信平台的变电通信系统国际标准,由于IEC 61850缺乏加密和认证安全机制,导致其易受到网络攻击。为了验证IEC 61850协议通信存在的问题,在变电站通信仿真系统下,分析了IEC 61850通信协议,模拟了IEC 61850 的拒绝服务(DoS)攻击,提出了ECCi-AES防御算法。该算法通过抓取IEC 61850报文,获取、应用协议数据单元(APDU)并加密。实验结果表明,通过改进的高级加密标准(AES)和椭圆曲线密码编码(ECC)加密算法,可以有效地加密通信数据,增强防御DoS攻击的能力。     

高浓度硫酸盐环境下桥梁桩基混凝土防腐技术

结合西南某公路桥梁工程桩基混凝土的抗硫酸盐腐蚀需求,研究10%(质量分数)高浓度硫酸盐溶液作用下防腐技术对混凝土抗压强度、抗压强度耐蚀系数及硫酸根离子传输的影响。通过气泡结构和微观形貌分析了防腐技术的作用机理。结果表明,高浓度硫酸盐侵蚀环境下,“膨胀剂+矿物掺和料”类防腐剂防腐效果表现为早期优异后期破坏严重,“盐结晶抑制”类防腐剂长期抗腐蚀效果更优。矿物掺和料、“膨胀剂+矿物掺和料”类防腐剂主要通过提升密实度和优化孔径分布来延缓硫酸根的侵入,而“盐结晶抑制”类防腐剂既可一定程度优化混凝土孔隙结构,又可抑制结晶性膨胀产物的生成。     

硫铝酸盐水泥抗酸侵蚀性能与机理研究

本文研究了硫铝酸盐水泥(CSA)在盐酸和硫酸环境下的力学性能演化规律,并探究了其抗酸侵蚀机理。分别测试了水和酸溶液养护的CSA胶砂试件的抗折强度,计算了CSA的抗酸侵蚀系数。采用XRD、TGA、CT和SEM分析了酸侵蚀导致的产物种类和数量变化,表征了微观结构演化过程。结果表明:与普通硅酸盐水泥(OPC)相比,CSA在盐酸和硫酸中抗折强度损失率更低,具有更好的抗盐酸和硫酸侵蚀能力;CSA主要水化产物(钙矾石)比OPC主要水化产物(氢氧化钙和硅酸钙凝胶)更难与酸反应,因此抗酸侵蚀能力更强。盐酸与硫酸对CSA的侵蚀机制略有不同,盐酸对CSA的侵蚀过程实质上为氢离子对CSA水化产物钙矾石的酸解,硫酸对CSA的侵蚀则是氢离子和硫酸根离子的共同作用。