基于Windows的软件安全典型漏洞利用策略探索与实践

随着全球信息化的迅猛发展,计算机软件已成为世界经济、科技、军事和社会发展的重要引擎。信息安全的核心在于其所依附的操作系统的安全机制以及软件本身存在的漏洞。软件漏洞本身无法构成攻击,软件漏洞利用使得把漏洞转化为攻击变为可能。文章立足于Windows操作系统,主要分析了一些常用软件的典型漏洞原理以及常见的利用方法,比较了不同利用方法在不同环境下的性能优劣,并简单分析了Windows的安全机制对软件的防护作用以及对软件漏洞利用的阻碍作用。文章着重对几种典型漏洞进行了软件漏洞利用的探索和实践,并使用当前流行的对安全机制的绕过方法分析了Windows几种安全机制的脆弱性。     

谈过陷落柱施工技术及措施

以国内某煤矿过陷落柱施工为例,根据地质资料,介绍了其施工方案及工艺流程,着重对巷道断面规格的支护形式及支护参数进行了分析,总结了施工质量控制要求,为其他矿山井下施工提供参考。     

Results of long-term operation of cascade tubular air heaters at the Berezovskaya GRÉS

Experience of operation of tubular air heaters (TAH) on twelve boilers of type PK-38 for 150-MW power units of the Berezovskaya GRÉS (state regional power plant) in Belarus is presented. Coal-fired, gas-fired, and oil-fired operation modes with updating tubular air heaters in a cascade layout are described. Advantages of the cascade layout and conditions for reliable, efficient, and long-term service of the TAH are shown.Translated from Élektricheskie Stantsii, No. 9, September 2004, pp. 20–23.     

乌东德水电站坝址区地下水渗流三维非稳定流数值模拟

 针对乌东德水电站坝址区水库蓄水后的绕坝渗漏问题及地下水渗流二维和准三维稳定流模型的不足,在充分分析坝址区工程地质和水文地质特征的基础上,概化出乌东德坝址区地下水系统的水文地质概念模型,建立坝址区地下水渗流三维非稳定流数值模型,并采用有限差分法和预处理共轭梯度法对模型进行了求解。在天然工况、有帷幕正常蓄水和无帷幕正常蓄水3种工况坝址区地下水三维渗流场模拟的基础上,根据水均衡原理,计算各种方案枯水期和丰水期坝址区的渗漏量,结果表明,正常蓄水工况下,右岸绕坝渗漏量约为左岸的5.7倍,防渗处理后总渗漏量可减少72.98%,丰水期左、右坝肩和坝基的绕坝渗漏量均较枯水期有所降低。该模型稳定性好,收敛速度快。     

All-Optical Wavelength-Bypassing Ring Communications Networks

We introduce an all-optical WDM packet communication network that performs wavelength bypassing at the routers. Packets that arrive at a wavelength (optical cross-connect) router at designated wavelengths are switched by the router without having their headers examined. Thus, the processing element of the router is bypassed by such packets. For packet traffic that uses wavelengths that do not bypass a switch, the headers of such packets are examined to determine if this switch is the destination for the flow. If latter is the case, the packet is removed. Otherwise, the packet is switched to a pre-determined output without incurring (network internal) queueing delays. We study a ring network with routers that employ such a WDM bypassing scheme. We present methods to construct wavelength graphs that define the bypassing pattern employed by the routers to guide the traffic flows distributed at each given wavelength. Performance is measured in terms of the network throughput and the average processing path length (i.e., the average number of switches not being bypassed). For a fixed total processing capacity, we show that a WDM bypassing ring network provides a higher throughput level than that exhibited by a non-bypassing ring network, using the same value of total link capacity. By using WDM bypassing, the average processing path length (and thus the packet latency) is reduced. We study a multitude of network loading configurations, corresponding to distinct traffic matrices and client-server scenarios. Higher throughput levels are obtained for network configurations driven by non-uniform traffic matrices. The demonstrated advantages of WDM bypassing methods shown here for WDM ring networks are also applicable to more general network topological layouts.     

三维侧钻绕障井的设计方法

随着加密井和侧钻井数量不断增加,侧钻绕障井越来越多,其设计和施工难度也越来越大。侧钻绕障井设计一般应包含:障碍物的形态描述;绕障井轨道的水平投影图设计;垂直剖面图设计;绕障井轨道计算。考虑井眼轨迹的空间形态和安全绕障距离沿井深变化等因素,将作为障碍物的已钻井抽象为空间曲圆台,给出了障碍物的描述模型。根据侧钻点、靶点和障碍域之间的相互关系,提出了在水平投影图上采用单圆弧绕障和双圆弧绕障的设计方法及优化设计准则。结合侧钻绕障井的特点,提出了垂直剖面图的通用井身剖面及其设计方法。通过分析水平投影图与垂直剖面图上轨道节点之间的耦合关系,得到了符合圆柱螺线模型的计算单元划分方法,从而可以合理地确定障碍域并进行轨道设计与计算。用实例验证了设计方法的科学性和适用性。     

Solids Circulation Flux and Gas Bypassing in a Pressurized Spout‐fluid Bed with a Draft Tube

An experimental study on solids circulation flux and gas bypassing of a spout‐fluid bed with a draft tube at elevated pressures up to 600 kPa was performed in a 200 mm diameter cylindrical steel column with a 608 conical distributor. Glass beads with mean diameter 2.067 mm were used as bed materials to investigate the effect of operating conditions and geometric configuration on the solids circulation flux and the gas distribution between the annulus and the draft tube. A novel technique has been developed to measure the solids fluxes under pressure, and gas (CO₂) traces have been employed to investigate gas bypassing characteristics. The solids circulation flux is greatly enhanced when operating pressure and auxiliary gas flowrate are increased, and it is also strongly influenced by geometric configuration. Two experimental relations are proposed for predicting solids circulation flux enhancement factors.     

Pressure drop and gas bypassing in recirculating fluidized beds

The effect of different operating and design parameters on the pressure drop profile for a recirculating fluidized bed has been studied. A mathematical model was developed for the pressure drop in the recirculating fluidized bed. The different parameters considered were flow rate, inventory of solids and spacing between the draft-tube bottom and the distribution plate. Geldart D and B particles were used for the study. The gas bypassing from the jet towards the downcomer was calculated on the basis of the mathematical model and the effect of various parameters on gas bypassing were analyzed.     

结合容错攻击和内存区域统计的ASLR绕过方法

ASLR是防御漏洞攻击的重要保护机制，而容错攻击是绕过ASLR的主要方法之一，即利用容错机制重复尝试搜索内存中的敏感信息。针对目前容错攻击的搜索算法耗时长导致实用性不强的问题，提出了一种结合容错攻击和内存区域统计的ASLR绕过方法。通过软件逆向深入分析容错攻击的原理，包括操作系统和浏览器等软件的容错机制内部实现和容错攻击实现方法；分析进程内存空间分布，统计不同区域的系统DLL分布的平均比例，选定最大概率内存区域搜索DLL并定位关键基址，从而绕过ASLR保护，实验结果证明该方法相对现有方法极大缩短了平均耗时和最大耗时，提高了容错攻击的实用性；探讨了容错攻击更多的应用前景。     

220 kV主变压器高压侧断路器失灵保护的若干问题分析

从变压器启动失灵保护的特点出发,主要对220 kV主变压器高压侧断路器启动失灵保护回路、失灵保护跳主变断路器回路、电流元件相关外敷CT位置选择及主变代路时存在的问题进行了详细分析。在此基础上给出了能够适应主变压器代路方式的一种解决方案。