基于哈希链的软件定义网络路径安全

针对软件定义网络中，控制器无法保证下发的网络策略能够在转发设备上得到正确执行的安全问题，提出一种新的转发路径监控安全方案。首先以控制器的全局视图能力为基础，设计了基于OpenFlow协议的路径凭据交互处理机制；然后采用哈希链和消息验证码作为生成和处理转发路径凭据信息的关键技术；最后在此基础上，对Ryu控制器和Open vSwitch开源交换机进行深度优化，添加相应处理流程，建立轻量级的路径安全机制。测试结果表明，该机制能够有效保证数据转发路径安全，吞吐量消耗比SDN数据层可信转发方案（SDNsec）降低20%以上，更适用于路径复杂的网络环境，但时延和CPU使用率的浮动超过15%，有待进一步优化。     

In situ characterization of LiY(WO4)2 nanotubes for electrochemical energy storage

Here, LiY(WO₄)₂ nanotubes are prepared via a feasible electrospinning technique. This new anode material shows excellent electrochemical properties. The capacity loss of LiY(WO₄)₂ nanotubes is as low as 6.9% after 156 cycles, while bulk LiY(WO₄)₂ presents the capacity loss higher than 55.0%. Even after 600 long-life cycles, the capacity loss of the nanotubes is only 9%. It can be seen that the hollow structure with a rough surface and a porous morphology contributes to the improvement of electrochemical performance. Furthermore, online X-ray diffraction (XRD) method is firstly applied to understand the lithium ions insertion/extraction mechanism of LiY(WO₄)₂ nanotubes. It can be concluded that it is an asymmetrical two-phase reaction. A phase transformation from LiY(WO₄)₂ to Li₃Y(WO₄)₂ can be obviously seen from the in situ XRD during discharge process. While Li₂Y(WO₄)₂ appears as an intermediate phase with a reverse charge reaction. In addition, in situ XRD also demonstrates that LiY(WO₄)₂ nanotubes have surprised electrochemical reversibility. All the above results indicate that LiY(WO₄)₂ nanotubes can be expected to be anode candidate for rechargeable lithium ion batteries (LIBs).     

Steels for Bridge Structures

Metallurgist - We consider domestic and foreign standards for rolled metals used in bridge building. Domestic standards contain elevated requirements to the reliability of rolled metals in terms of...     

Metal-polyphenol-network coated CaCO3 as pH-responsive nanocarriers to enable effective intratumoral penetration and reversal of multidrug resistance for augmented cancer treatments

Construction of multifunctional stimuli-responsive nanotherapeutics enabling improved intratumoral penetration of therapeutics and reversal of multiple-drug resistance (MDR) is potent to achieve effective cancer treatment. Herein, we report a general method to synthesize pH-dissociable calcium carbonate (CaCO₃) hollow nanoparticles with amorphous CaCO₃ as the template, gallic acid (GA) as the organic ligand, and ferrous ions as the metallic center via a one-pot coordination reaction. The obtained GA–Fe@CaCO₃ exhibits high loading efficiencies to both oxidized cisplatin prodrug and doxorubicin, yielding drug loaded GA–Fe@CaCO₃ nanotherapeutics featured in pH-responsive size shrinkage, drug release, and Fenton catalytic activity. Compared to nonresponsive GA–Fe@silica nanoparticles prepared with silica nanoparticles as the template, such GA–Fe@CaCO₃ confers significantly improved intratumoral penetration capacity. Moreover, both types of drug-loaded GA–Fe@CaCO₃ nanotherapeutics exhibit synergistic therapeutic efficacies to corresponding MDR cancer cells because of the GA–Fe mediated intracellular oxidative stress amplification that could reduce the efflux of engulfed drugs by impairing the mitochondrial-mediated production of adenosine triphosphate (ATP). As a result, it is found that the doxorubicin loaded GA–Fe@CaCO₃ exhibits superior therapeutic effect towards doxorubicin-resistant 4T1 breast tumors via combined chemodynamic and chemo-therapies. This work highlights the preparation of pH-dissociable CaCO₃-based nanotherapeutics to enable effective tumor penetration for enhanced treatment of drug-resistant tumors.

     

嵌入式实时操作系统内核混合代码的自动化验证框架

"如何构造高可信的软件系统"已成为学术界和工业界的研究热点.操作系统内核作为软件系统的基础组件，它的安全可靠是构造高可信软件系统的重要环节.为了确保操作系统内核的安全可靠，将形式化方法引入到操作系统内核验证中，提出了一个自动化验证操作系统内核的框架.该验证框架包括：（1）分别对C语言程序和混合语言程序（C语言和汇编语言）进行验证；（2）在混合语言程序验证中，为汇编程序建立抽象模型，并将C语言程序和抽象模型粘合形成基于C语言验证工具可接收的验证模型；（3）从规范中提取性质，基于该自动验证工具，对性质完成自动验证；（4）该框架不限于特定的硬件架构.成功地运用该验证框架对两种不同硬件平台的嵌入式实时操作系统内核μC/OS-II进行了验证.结果显示：利用该框架在对两个不同的硬件平台上内核验证时，框架的可重复利用率很高，高达到88%，虽然其抽象模型需要根据不同的硬件平台进行重构.在对基于这两种平台的操作系统内核验证中，分别发现了10~12处缺陷.其中，在ARM平台上两处与硬件相关的问题被发现.实验表明，该方法对不同硬件平台的同一个操作系统分析验证具有一定的通用性.