计算机网络安全与防护技术研究

本文主要对计算机网络安全产生的根源和存在的风险进行了初步分析,对目前常用的网络安全技术进行了较为深入的研究,并阐述了防火墙技术与入侵检测技术在计算机网路中联合部署的方法和步骤.     

基于蜜罐技术的主动防护网络入侵探究

随着信息技术的快速发展,网络安全问题日益突出,如何保护网络安全成为人们研究的重点.在实际工作过程中应用蜜罐技术来进行主动防护网络入侵是一种新方式.由蜜罐技术和分布式代理构成的防护体系,能够有效降低攻击检测误报率.网络安全形势日益复杂的背景下加强对蜜罐技术的研究具有重要意义.本文将重点探讨如何利用蜜罐技术来实现对网络入侵的主动防护.     

入侵检测技术在消防信息网安全中的应用

消防信息网作为公安网子网,与互联网物理分隔,网络安全相对薄弱,自身的安全防护能力并不高。非法入侵、病毒破坏屡有发生,给消防信息网带来不可预测的后果。     

Model falsification using set‐valued observers for a class of discrete‐time dynamic systems: a coprime factorization approach

This article introduces a new method for model falsification using set‐valued observers, which can be applied to a class of discrete linear time‐invariant dynamic systems with time‐varying model uncertainties. In comparison with previous results, the main advantages of this approach are as follows: The computation of the convex hull of the set‐valued estimates of the state can be avoided under certain circumstances; to guarantee convergence of the set‐valued estimates of the state, the required number of previous steps is at most as large as the number of states of the nominal plant; and it provides a straightforward nonconservative method to falsify uncertain models of dynamic systems, including open‐loop unstable plants. The results obtained are illustrated in simulation, emphasizing the advantages and shortcomings of the suggested method. Copyright © 2013 John Wiley & Sons, Ltd.     

Asynchronous fault detection filter design approach for discrete‐time switched linear systems

This paper is concerned with the problem of the fault detection filter design for discrete‐time switched linear systems with average dwell‐time. The designed fault detection filters are also switched systems, which are assumed to be asynchronously switched with the original switched systems. Improved results on the weighted l₂ performance and the H _? performance are first given, and the multiple Lyaounov‐like functions during matched period and unmatched period for the running time of one subsystem are used. By the aid of multiple Lyapunov‐like functions combined with Projection Lemma, the FD filters are designed such that the augmented systems under asynchronous switching are exponentially stable, and the residual signal generated by the filters achieves the weighted l₂‐gain for disturbances and guarantees the H _? performance for faults. Sufficient conditions are formulated by linear matrix inequalities, and the filter gains are characterized in terms of the solution of a convex optimization problem. Finally, examples are provided to demonstrate the effectiveness of the proposed design method. Copyright © 2012 John Wiley & Sons, Ltd.     

Invariant‐set‐based fault diagnosis in Lure systems

In this paper, we present an invariant‐set‐based method for actuator and sensor fault detection and isolation in Lure systems. The Lure plant is controlled by an observer‐based feedback tracking controller, designed for the nominal (fault‐free) system. Suitable residual signals are constructed from measurable system outputs and estimates associated with the nominal observer. Faults are diagnosed by online contrasting the residual signal trajectories against sets of values that the residuals are shown to attain under healthy or faulty operation. These values are obtained via set‐invariance analysis of the system closed‐loop trajectories. Copyright © 2013 John Wiley & Sons, Ltd.     

一种改进的VI CFAR检测器

为得到不同杂波背景下的良好检测性能,给出了一种改进的VI CFAR检测器.该检测器主要利用均值类可变性指示（MLVI）CFAR检测器和有序统计类可变性指示（OSVI）CFAR检测器的各自优点以及VI CFAR的以背景均匀程度自动选择不同检测器思想.理论分析和仿真结果表明：该检测器在均匀背景下性能基本与MLVI CFAR重合;多目标背景下具有较强的抗多目标能力;杂波边缘背景下有较好的虚警概率控制能力且运算量小,是一种稳健的检测器.     

社会网络的隐私保护研究综述*

某些网站将匿名处理后的社会网络数据公开发布,或者提供给科研机构、大学或者其他组织和个人使用,而这些数据往往侵犯了用户的隐私,但有关社会网络中个人信息安全和隐私保护的研究却处于起步阶段。综述了当前在线社会网络的研究成果,主要就社会网络及其隐私漏洞、信息泄露、再识别攻击、聚集攻击、推理攻击等进行了分析,并对今后的发展提出了预测,为社会网络的科研指出了可行的研究方向。     

一个新的基于口令的密钥协商协议

以不经意多项式计算作为核心组件,提出了一个基于口令的密钥协商协议PSKA-I,该协议能够抵抗字典攻击但只能工作于认证模型。为解决协议PSKA-I这一缺陷,根据BCK安全模型设计了消息传输认证器,将协议PSKA-I转换为非认证模型中的安全协议PSKA-Ⅱ。上述协议口令的安全性由不经意多项式计算予以保证。与GL协议相比,该协议的通信及计算复杂度明显降低。     

油气管道堵塞检测及定位技术研究

针对油气输送管道中的堵塞现象,提出利用管道堵塞前后两端压差的剧烈变化,以及利用管道两端压力的模拟值与实际测量值的差异来检测管道的堵塞,提出通过检测管道水力坡降曲线奇异点的方法确定油气管道的堵塞位置的原理和方法,通过采集管道两端运行参数,并建立管道运行的数学模型,对管道实施仿真,获得整条管线的水力坡降曲线,再应用小波变换对管道的水力坡降曲线进行奇异性检测,而管道水力坡降曲线的奇异点将对应管道的堵塞位置.该方法具有所需设备少,操作费用低,操作简单等优点,优于现有管道堵塞位置确定方法.