利用Windows Native API调用序列和基于决策树算法的主机异常检测*

主要研究Windows平台下的异常检测方法,提出一种利用Windows Native API调用序列和基于决策树算法的主机服务进程模式抽取算法,并通过在模式中引入通配符而大大缩减了模式集的规模。进一步引入了表征模式间关系的转移概率,建立了模式序列的全局马尔可夫链模型,并给出了相应的异常检测算法。实验结果表明：该算法可以抽取一个规模较小且泛化能力较强的模式集,相应的检测算法可以有效地检测异常。     

数据挖掘在销售管理系统中的设计和实现

面对企业销售部门日益增长的海量数据,给出了一个完整的销售管理数据挖掘系统,它包括数据的准备与取样、数据调整、挖掘算法的实现、结果的评价等步骤。结合某公司的实例,进行了详细的分析和说明。     

电网理论线损管理系统中关键问题的解决

基于秦皇岛电力公司Oracle网络数据库上利用PB编程工开发的地区电网理论线损管理系统中一些关键问题的解决技术。     

The complexity for partitioning graphs by monochromatic trees,cycles and paths

Let G be an edge-coloured graph. We show in this paper that it is NP-hard to find the minimum number of vertex disjoint monochromatic trees which cover the vertices of the graph G. We also show that there is no constant factor approximation algorithm for the problem unless P?=?NP. The same results hold for the problem of finding the minimum number of vertex disjoint monochromatic cycles (paths, respectively) which cover the vertices of the graph.     

QoS enhancements for global replication management in peer to peer networks

Replica Management is a key issue to reduce the bandwidth consumption, to improve data availability and to maintain data consistency in large distributed systems. Global Replica Management (GRM) means to maintain the data consistency across the entire network. It is preferable particularly for multi-group distributed systems. On the other hand, GRM is not favorable for many applications because a very large number of message passes is needed for replica management processes. In this paper, in order to reduce the number of message passes needed to achieve the efficient GRM strategy, an interconnection structure called the Distributed Spanning Tree (DST) has been employed. The application of DST converts the peer network into logical layered structures and thereby provides a hierarchical mechanism for replication management. It is proved that this hierarchical approach improves the data availability and consistency across the entire network. In addition to these, it is also proved that the proposed approach reduces the data latency and the required number of message passes for any specific application in the network.     

隐蔽流树方法的分析与改进

利用隐蔽流树方法搜索隐蔽通道时,获得的操作序列中只有极少部分真正构成隐蔽通道,增加了后续手工分析的工作量。为此,提出一种改进的隐蔽流树方法。根据信息流图进行建树,设计信息流规则,并给出隐蔽流树的自动分析算法。以一个文件系统为例进行分析,结果验证了改进方法的正确性。     

话题案例知识库动态模型及优化策略

传统的话题检测方法仅通过最初几篇话题相关报道的特征来表示话题,不能适应话题动态变化的特点。为此,提出一种话题案例知识库的动态模型。采用资源描述框架,实现话题案例知识表示,并在层次语义树基础上,利用案例融合策略实现话题案例知识库的动态更新,使用最大容忍优化策略解决话题质心漂移问题。实验结果表明,通过提高话题案例知识的全面性和内聚性,该模型能够改进话题检测和追踪的效果。     

分类树方法在集成电路设计功能验证中的应用

功能验证是制约集成电路设计发展的主要瓶颈,针对功能验证中存在的测试集设计难度大及覆盖模型精度低等问题,提出一种基于分类树方法的高效测试集生成方法及功能覆盖模型搭建方法,将验证方法应用于模加/模减单元的功能验证中。结果证明,运用分类树方法管理测试向量和搭建覆盖模型,可以显著提高验证完备性和可靠性。     

决策树分类算法在个性化图书推荐中的应用

采用数据挖掘中的决策树方法,对图书馆的图书借阅数据进行研究和分析,提出了基于读者阅读兴趣的个性化图书推荐模型。实验表明,该模型能够为新老读者有针对性地推荐新书,较好地实现了图书馆的个性化的创新服务。