Run-time malware detection based on positive selection

This paper presents a supervised methodology that detects malware based on positive selection. Malware detection is a challenging problem due to the rapid growth of the number of malware and increasing complexity. Run-time monitoring of program execution behavior is widely used to discriminate between benign and malicious executables due to its effectiveness and robustness. This paper proposes a novel classification algorithm based on the idea of positive selection, which is one of the important algorithms in Artificial Immune Systems (AIS), inspired by positive selection of T-cells. The proposed algorithm is applied to learn and classify program behavior based on I/O Request Packets (IRP). In our experiments, the proposed algorithm outperforms ANSC, Na? ve Bayes, Bayesian Networks, Support Vector Machine, and C4.5 Decision Tree. This algorithm can also be used in general purpose classification problems not just two-class but multi-class problems.     

C语言程序设计题自动评分算法的研究

目前主要的C语言上机考试系统程序设计题主要采用的是结果比对评分法,这种方法并不查看考生的程序内容,不能反映考生的真实水平并且有失公允。在比较结果的评分方法基础上,增加了修复编译评分与关键代码对比评分,使评分结果更加公正、准确,使评分结果更加接近于人工阅卷,具有很好的实用价值和应用前景。     

Stability and stabilization of Boolean networks

The stability of Boolean networks and the stabilization of Boolean control networks are investigated. Using semi‐tensor product of matrices and the matrix expression of logic, the dynamics of a Boolean (control) network can be converted to a discrete time linear (bilinear) dynamics, called the algebraic form of the Boolean (control) network. Then the stability can be revealed by analyzing the transition matrix of the corresponding discrete time system. Main results consist of two parts: (i) Using logic coordinate transformation, the known sufficient condition based on incidence matrix has been improved. It can also be used in stabilizer design. (ii) Based on algebraic form, necessary and sufficient conditions for stability and stabilization, respectively, are obtained. Copyright © 2010 John Wiley & Sons, Ltd.     

Density functional theory studies on the structures and electronic communication of meso-ferrocenylporphyrins: long range orbital coupling via porphyrin core

The molecular and electronic structures together with the electronic absorption spectra of a series of metal free meso-ferrocenylporphyrins, namely 5-ferrocenylporphyrin (1), 5,10-diferrocenylporphyrin (2), 5,15-diferrocenylporphyrin (3), 5,10,15-triferrocenylporphyrin (4), and 5,10,15,20-tetraferrocenylporphyrin (5) have been studied with the density functional theory (DFT) and time-dependent density functional theory (TD-DFT) methods. For the purpose of comparative studies, metal free porphyrin without any ferrocenyl group (0) and isolated ferrocene (6) were also calculated. The effects of the number and position of meso-attached ferrocenyl substituents on their molecular and electronic structures, atomic charges, molecular orbitals, and electronic absorption spectra of 1-5 were systematically investigated. The orbital coupling is investigated in detail, explaining well the long range coupling of ferrocenyl substituents connected via porphyrin core and the systematic change in the electronic absorption spectra of porphyrin compounds.     

Upstream wake-secondary flow interactions in the endwall region of high-loaded turbines

A detailed experimental and numerical investigation of the unsteady interaction of secondary flow vortices in turbine endwall region was performed with the effect of upstream periodic wakes. The flow field was investigated respectively in a linear turbine cascade and a turbine rotor. The study revealed the physical mechanisms of unsteady interaction between upstream wake and secondary vortices. The influence of the upstream wake on the performance of turbine endwall region was also discussed.The flow field at the exit of the turbine blade row showed a decrease in passage vortex strength and loss due to the upstream wake transport. Two interaction mechanisms are proposed whereby passage vortex loss decreases. They are the upstream wake-pressure side leg of the horseshoe vortex interaction and the upstream wake-passage vortex interaction. The transport of upstream wake can suppress the development of pressure side leg of the horseshoe vortex and passage vortex because of the “negative jet” influence of the wake.     

结合二部图投影与排序的协同过滤

协同过滤是推荐系统中应用最为广泛的方法.提出一类基于二部图一维投影与排序相结合的协同过滤算法,文中采用结构相似进行二部图投影并利用随机游走对节点排序.该方法不仅可以防止冷启动,具有较高准确度,且可扩展性良好.另外,该算法可以避免低覆盖率造成的推荐不准确.算法可以有两类不同的实现,分别是基于项协同过滤的项排序算法和基于用户协同过滤的用户排序算法,在标准数据集MovieLens上的测试表明了算法的有效性.     

基于Landsat-TM影像的鄱阳湖典型湿地动态变化研究

利用分层分类法,通过对鄱阳湖典型湿地(蚌湖与赣江中支口三角洲)长序列秋季Landsat-TM影像进行解译分析,探讨了1991年~2008年间鄱阳湖典型湿地动态变化特征。结果表明分层分类方法能够有效地应用于Landsat-TM遥感影像的解译;从1991年到2008年蚌湖和赣江中支口三角洲湿地的植被面积分别增加18.56km2和6.01km2,其中赣江主支三角洲洲滩植被分布呈向湖体扩展态势。植被分布受水情影响比较大,蚌湖湿地的苔草面积与同时期水面积呈负相关性,而赣江主支三角洲湿地植被类型结构变化受水位影响也比较明显,苔草面积变化与秋季湖口水位表现为负相关,芦苇分布面积变化则与湖口水位变化趋势较为一致。     

基于交补集和Pignistic变换的证据组合方法

针对D-S证据组合公式及其改进公式的局限性,提出一种基于交补集权重和Pignistic概率变换的改进组合方法。基于交补集理论推导出新的基本概率分配函数,对交补集权重因子进行量化,得到基于交补集权重的证据组合公式,利用Pignistic概率变换法对已获得的各命题的信度值进行重新分配,以降低组合顺序对合成结果的影响,同时可获得更可靠的决策依据。实例分析结果表明,与其他改进方法相比,该组合方法在解决冲突证据、一票否决、鲁棒性、公平性和决策有效性等方面均有明显的优势。     

一种指令特性可扩展的汇编器体系结构

对嵌入式处理器的汇编器进行讨论,提出一种指令特性可扩展的汇编器体系结构.在这种体系结构下能有效地加入新的指令或是改进已有指令的功能,并根据此体系结构为汇编器加入两条编译预处理命令.采用该体系结构的汇编器,能够有效降低汇编器的开发维护难度,同时能够增加汇编程序的编写效率.     

基于形式概念分析与分类树法的Web应用测试方法

Web应用软件开发周期短,时间和资源条件有限,要求有高效的测试。应用分类树法从Web应用导航模型自动生成测试用例,并应用形式概念分析对生成的测试用例集进行精简,在满足给定覆盖标准的前提下,得到较小的测试用例集,提高测试效率。