QoS-oriented design of embedded systems with specification PEARL

Only recently have methodical tools adequate to design real-time systems been formally introduced in design methodologies. Naturally, they were present from the beginning, but due to the large diversity of embedded systems’ areas of deployment, specially dedicated formalisms have been developed and used. High-level language programming and integration of modeling formalisms into design methods eased the development of more complex real-time applications. With the emerging object-oriented programming languages and design methods, their integration into larger information systems has become more transparent. It was the UML methodology, however, which eventually merged also the design methods and concepts of real-time systems into a consistent whole. It took a large consortium and a long process to persuade industry of the benefits the new integral methodology can offer. On the other hand, there are some trade-offs, and there are some features not completely covered, yet. Here, a different, more straightforward approach to program and design (embedded) real-time systems is presented. Since it emerged from the real-time community, it includes most features relevant there. Independent of the UML profile for schedulability, performance and time specification, a profile was devised for use in PEARL-oriented UML design. The strengths of the mentioned language and design methods for QoS-oriented design of (embedded) real-time systems are emphasised throughout this article.     

填石路基施工的探讨

针对保证路基稳定对提高路面使用品质的重要性,介绍了填石路基施工的特点,阐述了填石路基施工工艺要求,指出了路基施工中的常见问题,并针对性地提出了相应的处理方法,以期提高路基的整体强度和变形稳定性。     

基于SSL的Agent安全通信

Agent平台之间通过公共通信设施进行通信。Agent和通信服务协议自身不提供加密和签名等功能,这给Agent的通信带来了威胁。SSL是一种在客户端和服务器端建立安全通道的协议,通过对SSL协议的分析,认为SSL的加密套件与身份认证安全机制可以为Agent平台之间的通信提供安全通道,提出了将SSL协议架设在Agent平台之下通信协议之上的安全通信方案,给出了基于SSL协议的Agent通信代码,保证了Agent平台间的通信安全。     

一类具有“开端”结构的安全协议分析方法研究

开端协议(Open-ended Protocol)的分析是安全协议领域中一个待解决的重要问题,而IKE则是一个有代表性的具有"开端"结构的安全协议.本文基于串空间的Athena方法,针对IKEv2协议中的"开端"结构涉及的DH(Diffie-Hellman)问题,增加了群、散列函数等原语,给出并证明了一个新的消减规则;针对"开端"结构,引入了集合的数学概念,建立了新的消息类型,重新定义了串空间中的消息项、替换、入侵者模型,以及Athena相应的内在项、目标和目标绑定,给出了一个新的替代关系.应用扩展后的方法,分析了协议,发现一个新的认证性缺陷,给出了解决该缺陷的方法.     

The effects of glossy screens on the acceptance of flat‐panel displays

Abstract— The TCO requirements provide well‐known and recognized quality labels for displays. For these requirements to remain useful, they must continuously be reviewed and updated when necessary. The study described here was performed in response to the market trend of designing flat‐panel displays and notebooks with glare panels. The purpose of this study was to investigate subjective responses to display screens of different gloss levels for office workers working on different tasks under normal office‐lighting conditions. The study consisted of three parts, one where the users should set an acceptable reflex level, one where the user should rate their disturbance on a category scale, and one where the visual acuity of the users were investigated whether they were affected by glare or not. The results show that increasing gloss and increasing luminance levels had negative effects on the acceptance and the disturbance of reflexes. There were statistically significant differences in the acceptance and the disturbance levels between screens with low gloss and screens with high gloss, which suggests that screens with the highest gloss levels should be avoided. The study did not show an effect on the performance based on acuity testing.     

基于PKI/PMI的应用安全平台模型的研究

为解决网络应用系统的安全问题,需要对应用系统进行一定的改造,文章所提出的应用安全平台是基于PKI和PMI的技术体系,它实现X．509标准证书的发放和管理以及相关的安全通信协议、S／MIME邮件加密协议、PKCS#7数字签名标准等。采用高度集中的用户身份管理和访问权限设定,以及多种审计技术,为复杂网络系统和不同应用提供可管理的复合安全技术,实现身份认证、访问控制和信息加密,保证应用系统的安全运行。     

移动代理防范恶意主机安全技术研究

移动代理系统是一种新的分布式计算形式,具有显著的优点,但其应用面临安全问题。移动代理的安全问题分主机安全与代理安全两类,综述了后一种安全问题。描述了移动代理在恶意主机上所面临的安全威胁及应采取的安全策略,重点介绍了各种典型的安全技术,并给出了相应的评价。     

RFID技术在国防工程安全管理系统中的应用

结合国防工程安全管理的现状和建设信息化部队的要求,考虑到现有的安全管理模式对人员和装备的精确化管理程度低和实时性差的特点,采用RFID技术、超声波技术和现场总线技术,设计了国防工程安全管理系统.在介绍了系统架构的基础上,详细阐述了系统的软硬件设计,并对管理系统的软件进行了模块和功能的分析.试验结果表明,该系统能实时显示国防工程中的人员和装备信息,在提高国防工程安全管理的精确化水平方面具有广阔的应用前景.     

多层卫星网络路由协议研究

多层卫星网络是卫星星座发展的一种理想组网模式,组网的关键技术在于路由协议的选取和设计。本文介绍了多层卫星网络的概况,按照不同的标准对现有多层卫星网络路由协议进行了分类,详细分析了现有的几类典型的路由协议,指出了存在的问题,并对以后的研究方向作了展望。     

基于补丁引发新漏洞的防攻击方法研究

文章针对漏洞补丁的修补方法进行了深入研究,分析了漏洞补丁后可能引入新的安全隐患,提出了基于漏洞补丁引发新漏洞的漏洞挖掘方法,并进行了方法论证.最后以使用此方法发现的Windows操作系统未知漏洞案例验证了该方法的有效性.