基于认证协议的Web单点登录优化设计

针对Kerberos认证协议Web环境中进行单点登录存在的安全隐患,基于Schnorr协议的挑战/响应方式,结合Secure Cookies、HttpSession解决Web环境下HTTP协议的无状态性及服务器间的安全会话。实验结果表明,该方案性能稳健,响应速度快,防攻击力强,具有良好的实用价值和应用前景。     

基于CAS集群的单点失效问题解决方案

单点登录(SSO)可以消除多个应用服务系统之间的重复认证过程,但会加重认证负载,引起单点失效的风险,导致服务中断。针对上述问题,提出具有集群功能的单点登录系统,将用户登录请求分发到不同的单点登录服务器,解决单个单点登录服务器负担过重的问题,增强系统运行的稳定性。     

SAML在Web SSO中的应用研究

SAML是由OASIS提出的基于XML规范用于网络应用间用户身份及授权等安全信息描述和交换的一个规范。基于SAML规范,可以在已建立信任关系的不同服务实体间进行认证、授权等信息的传递。该文主要针对以Identity Pmvider（IdP）发起模式实现Web SSO中对SAML的应用进行一定的研究。     

一种企业应用中的单点登录系统的设计

针对企业多套应用系统用户认证相对独立、用户必须同时使用多个账户重复登录的问题,根据企业应用环境特点设计了一种单点登录（SSO）体系,该设计基于SAML技术构建统一认证平台,建立了用户帐号映射关系,对现有系统进行客户化改造,封装成认证中心（IDP）和服务提供者（SP）,通过集成的认证代理实现认证服务,实现了SSO和现有系统的良好结合。     

Case-based expert system using wavelet packet transform and kernel-based feature manipulation for engine ignition system diagnosis

Whenever there is any fault in an automotive engine ignition system or changes of an engine condition, an automotive mechanic can conventionally perform an analysis on the ignition pattern of the engine to examine symptoms, based on specific domain knowledge (domain features of an ignition pattern). In this paper, case-based reasoning (CBR) approach is presented to help solve human diagnosis problem using not only the domain features but also the extracted features of signals captured using a computer-linked automotive scope meter. CBR expert system has the advantage that it provides user with multiple possible diagnoses, instead of a single most probable diagnosis provided by traditional network-based classifiers such as multi-layer perceptions (MLP) and support vector machines (SVM). In addition, CBR overcomes the problem of incremental and decremental knowledge update as required by both MLP and SVM. Although CBR is effective, its application for high dimensional domains is inefficient because every instance in a case library must be compared during reasoning. To overcome this inefficiency, a combination of preprocessing methods, such as wavelet packet transforms (WPT), kernel principal component analysis (KPCA) and kernel K-means (KKM) is proposed. Considering the ignition signals captured by a scope meter are very similar, WPT is used for feature extraction so that the ignition signals can be compared with the extracted features. However, there exist many redundant points in the extracted features, which may degrade the diagnosis performance. Therefore, KPCA is employed to perform a dimension reduction. In addition, the number of cases in a case library can be controlled through clustering; KKM is adopted for this purpose. In this paper, several diagnosis methods are also used for comparison including MLP, SVM and CBR. Experimental results showed that CBR using WPT and KKM generated the highest accuracy and fitted better the requirements of the expert system.     

Working conditions in the engine department – A qualitative study among engine room personnel on board Swedish merchant ships

The specific problems associated with the work on board within the merchant fleet are well known and have over the years been a topic of discussion. The work conditions in the engine room (ER) are demanding due to, e.g. the thermal climate, noise and awkward working postures. The work in the engine control room (ECR) has over recent years undergone major changes, mainly due to the introduction of computers on board. In order to capture the impact these changes had implied, and also to investigate how the work situation has developed, a total of 20 engine officers and engine ratings were interviewed. The interviews were semi-structured and Grounded Theory was used for the data analysis. The aim of the present study was to describe how the engine crew perceive their work situation and working environment on board. Further, the aim was to identify areas for improvements which the engine crew consider especially important for a safe and effective work environment. The result of the study shows that the design of the ECR and ER is crucial for how different tasks are performed. Design which does not support operational procedures and how tasks are performed risk inducing inappropriate behaviour as the crew members’ are compelled to find alternative ways to perform their tasks in order to get the job done. These types of behaviour can induce an increased risk of exposure to hazardous substances and the engine crew members becoming injured.     

安全群组通信在远程教育系统中的应用

近年来,随着远程教育的发展,远程教育的通信安全成为远程教育网络安全体系的研究热点。而构建于群组通信系统之上的安全群组通信系统(SGCS),不仅可提供可靠的、顺序的消息传送和小组成员关系服务,还能为成员间消息的传输提供安全机制。针对远程教育通信的特点,将SGCS和流媒体传输技术融合后应用于远程教育通信中,构建了一个远程流媒体课堂系统。     

学校网络机房故障与维修分析

从目前来看,学校网络机房的管理中管理者更多关注的是技术上的维护和保障工作,缺乏维修理念、缺乏对故障信息、维修信息的系统分析、缺乏对维修的效一费分析以及有效度的分析,因此,网络机房的维修工作存在着盲目性,缺乏计划性和目标性。所以应加强网络机房的科学化管理,加强对机房故障信息的统计分析,预防并减少故障,改善网络机房设备的技术状态;加强可靠性为主的维修理念,提高机房维修的有效度,确保机器本身的正常运转,延长使用寿命,更保障教学的顺利进行：本文通过对网络机房故障信息和维修信息的记录分析,得出对机房故障、维修方面有实效性的管理措施和对策。     

农业专家系统在农业高校和京郊农村的发展

农业专家系统是一项在信息技术中结合农业特点发展起来的高新技术。它对于提高广大农业人员的科技文化素质,提升农业科技自主创新能力,实现农业生产的跨越发展具有特别重要的作用。高等农业院校和广大农村又是农业专家和农业知识高度密集的地方,更应该使农业专家系统拥有广阔的用武之地。     

脚本技术在游戏引擎中的应用

脚本技术在游戏引擎中的应用是近年来游戏开发一个新的趋势。本文探讨了脚本技术在游戏引擎中的作用,并以一种脚本语言Lua为例,详细分析了脚本与引擎通信的原理。