Security intrusion process: an empirical model

This paper describes a security model developed from empirical data collected from a realistic intrusion experiment in which a number of undergraduate students were invited to attack a distributed computer system. Relevant data, with respect to their intrusion activities, were recorded continuously. We have worked out a hypothesis on typical attacker behavior based on experiences from this and other similar experiments. The hypothesis suggests that the attacking process can be split into three phases: the learning phase, the standard attack phase and the innovative attack phase. The probability for successful attacks during the learning phase is expected to be small and, if a breach occurs, it is rather a result of pure luck than deliberate action. During the standard attack phase, this probability is considerably higher, whereas it decreases again in the innovative attack phase. The collected data indicates that the breaches during the standard attack phase are statistically equivalent. Furthermore, the times between breaches seem to be exponentially distributed, which means that traditional methods for reliability modelling of component failures may be applicable     

计算机集成制造系统中的可靠性

 <正> 1.引言 计算机集成制造(CIM)技术十分适合于小批量生产,有助于提高产品质量和生产效率,计算机集成制造系统(CIMS)就是采用CIM技术的生产系统,它是在柔性制造技术、计算机技术、信息技术和系统科学的基础上将工厂生产经营活动所需的各种自动化系统有机地集成起来;它能根据竞争市场的需求运用于多种中小批量产品生产,获得高效率、高柔性的智能生产系统。     

卫星测控应用中心远程容灾系统方案设计

随着航天技术的发展,各种卫星如综合侦察卫星、气象与海洋监视卫星、数据与中继卫星等,其数据的信息速率存储、处理的数据量越来越大,对卫星测控应用中心大容量、高速率数据的安全性、可靠性要求也越来越高。在自然灾害,如地震、洪水;人为破坏,如恐怖活动、战争等条件下,确保卫星测控应用中心的安全与快速恢复能力,将非常重要。本文从原理上设计了一套远程数据容灾系统方案,以保证卫星测控应用中心在自然灾害或人为破坏后能够快速恢复其基本功能。分析表明,该方案具有很好的可靠性、安全性。     

Real time recovery of fault tolerant processing elements

A critical problem in the design of ultra-reliable fault tolerant systems is that of how to bring a redundant member back on-line, after a transient fault, without degrading critical real-time functions. Recovery from transients is imperative to maintain necessary system reliability in the face of transient errors which have been estimated to occur at a rate of 5 to 100 times that of permanent failures. Excessive delays associated with recovery become a problem when as much as 1 Mbytes of RAM in the faulty processor must be made congruent with the processing majority while maintaining full functionality of critical, real-time control algorithms. This paper describes a hardware assisted recovery technique which uses memory “tags” to determine which memory segments need to be restored such that recovery can be performed incrementally without affecting real-time operational tasks. Also presented is performance data associated with this technique's application to a Draper Laboratory quad-redundant processor responsible for vehicle control of a manned undersea vehicle     

基于机器学习的飞机动力装置运行可靠性

为了研究分析飞机的动力装置在执行飞行任务过程中的运行可靠性,针对运行可靠性影响因素的多维、耦合的特点,采用机器学习方法对动力装置运行可靠性的时变规律及其相关影响因素进行分析。提出了考虑动力装置的工作状态、飞机的运行外界条件、飞机的飞行状态3类因素分析动力装置实时运行状态下的时变可靠性方法;并基于飞机实际运行的快速存取记录器（QAR）数据,梳理了动力装置运行可靠性分析相关的3类因素、16个主要特征。结合飞机运行的时空关系,采用数据包络分析（DEA）方法对飞机动力装置的工作状态特性与性能裕度进行非参数分析,基于提取的QAR数据特征,采用随机森林、多变量神经网络回归算法,建立2种基于机器学习的动力装置运行可靠性分析模型。以B737-800机型为例,对一次北京至珠海的飞行任务的动力装置相关运行数据进行分析,对2种机器学习分析模型进行训练与测试研究。分析结果表明：对动力装置工作状态特性贡献度最大的特征依次为计算空速、飞行时间与飞行高度;对动力装置性能裕度贡献度最大的特征依次为动力装置工作状态特性、雷达气象与飞行时间。所采用的2种机器学习方法能较好反映动力装置运行过程的时变可靠性规律,可为动力装置的运行与特情处理提供参考。     

某型飞机横向操纵系统的飞行安全评估及改进措施

在对某型飞机横向操纵系统分析基础上，列举出危害飞行安全的典型故障；针对该典型故障，进行了飞行安全评估；计算发现，飞行安全风险概率达不到安全标准。因此，提出了改进措施，建立了增设故障检测装置后的飞行安全评估模型．最后讨论了故障检测装置的可靠性对系统的影响。     

Issues in microwave power systems engineering

The key issues in microwave power system engineering are beam safety, frequency allocation, and affordability. These major issues are presented, discussed, and suggestions for resolving them are offered. The issue of beam safety can be captured in the phrase “Fear of Frying.” Can a properly engineered beamed power safety system allay the public perception of microwave radiation dangers? Openness, visibility, and education may be keys to resolving this issue satisfactorily. “Not in my Spectrum” is a phrase that is frequently encountered in connection with the issue of where can the microwave power beam frequency be located. International cooperation may provide a part of the solution to this issue. “Wow, that much!” is a phrase encountered when dealing with the issue of economic affordability of large beamed power systems. A phased engineering approach for multiple uses even during construction is presented to aid in garnering revenue during the system build phase. Also, dual mode DC-RF converters are encouraged for bi-directional power flow utility and economies of scale in production     

FADS/INS组合法迎角、侧滑角测量方法研究

嵌入式大气数据传感(FADS)系统比传统迎角、侧滑角传感器在测量精度、可靠性、隐身性能上都具有较大的优势,因此该系统可被应用于各型飞行器上。但由于该系统在获得大气参数方面存在延时,所以,它在飞行器机动飞行状态下,迎角和侧滑角的测量精度会下降。针对这一问题,本文提出了以FADS测量结果为基础,采用惯性导航系统(INS)测量的迎角、侧滑角变化量进行修正的FADS/INS组合法迎角、侧滑角测量方法。理论分析和仿真结果表明,该组合系统在飞行器处于平稳和机动飞行时,对迎角、侧滑角的测量均能获得较高精度。     

What is systems engineering?

There are probably more definitions of “Systems Engineering” than there are AESS members. In its simplest form systems engineering is the design of the whole as opposed to the design of the parts. The vast number, complexity and diversity of elements can overwhelm and degrade system performance and reliability. Embedded processing and software can be both a boon and a bane. A systems engineer analyzes and optimizes an ensemble of elements that relate to the flow of energy, mass and communications into a design that performs the desired function. “Systems engineering” is used herein to cover a very broad spectrum of processes and controls to engineer a product at the many levels required to satisfy all aspects of the original requirement. Our definition is not intended to either include or exclude systems engineering and integration as used in the computer field. In any case, systems engineering is the application of solid engineering principles to design and develop a large enterprise within cost and schedule to satisfy the needs of the ultimate user. It involves conceptualization, design, development, test, implementation, approval/certification and operation (including human factors) of a system. In essence, systems engineering is a problem-solving discipline for the modern world     

一种航空发动机运行可靠性评估方法

航空发动机运行过程中,可靠性评估是航空发动机可靠性评估领域的关键问题之一,而合理的评估方法能够提高可靠性分析的效率和精度,因此本文提出一种支持评估飞机任务过程中航空发动机运行可靠性的方法。结合飞行任务特点和航空发动机工作特性,以快速存取记录器信息为分析数据,考虑当前运行环境、飞机瞬时状态、发动机当前工作状态 3 类因素对运行可靠性进行分析;将随机森林算法与分层抽样法结合对数据进行拟合、预测并计算特征重要度;以 B737-800 机型一次北京—乌鲁木齐的飞行任务为例,对方法的有效性和可行性进行验证。结果表明：本文提出的可靠性评估方法解决了航空发动机运行过程中数据量大、维度高导致的数据处理困难问题。     

飞机故障的运行后果及成本分析方法

系统故障的运行后果分析技术是飞机运行可靠性分析的重要分支,可为维修任务的成本效益分析提供有力支撑。为了研究飞机系统故障对运行后果及成本的影响,从系统故障运行后果的相关性分析入手,首先,梳理飞机系统故障类型和放行情况对运行后果的影响;然后,结合航线维修现行做法及事件树思想提出一种支持评估飞机系统故障的运行后果及其相关成本的方法,建立基于飞机系统故障的运行后果与成本评估模型;最后,以某型号飞机燃油系统为例,验证所提方法的可行性和适用性。结果表明：本文所提方法合理有效,可为评估故障运行后果提供支持,为飞机的设计、运行和维护提供一定的参考。     

舰艇编队功能反潜体系的构建与评估

舰艇编队功能反潜体系是按照作战要素功能划分的反潜体系。根据性质的不同,功能反潜体系可分为探潜、指挥控制和攻潜三个子系统。构建功能反潜体系,应将功能相近的要素进行链接,形成统一的功能网络;将各种网络进行链接,形成一体化的作战体系。功能反潜体系工作过程,实际上是信息质量、决策质量和行动质量转换的过程,据此可建立相应模型,对其进行能力评估。     

航天飞控软件操作概图开发

航天飞控软件是具有高可靠性要求的软件系统,对其进行可靠性测试是航天飞控任务的基本要求。操作概图是进行软件可靠性测试的基础。由于开发大型软件系统的操作概图比较复杂,使其成为了制约开展软件可靠性测试的主要困难之一。本文以地面航天飞控软件为例,介绍了实时飞控软件操作概图的开发步骤和方法。首先是确定软件系统的操作模式,并确定每个操作模式所运行的相关软件;然后给出了识别每个软件的操作发起者和操作方法;最后对不同类型的操作给出了确定其发生概率的方法。     

Security technology

Security requirements and capabilities have changed dramatically over the past fifty years. Personal identification and detection of illegal substances including explosives have come to the forefront. With the proliferation of computers the security of information has also become a major concern. Substantial advances have been made over the last three decades in entry control, counter-terrorism, cryptology and airport protection. The utilization of technology has become an irreversible trend. Electronic devices and systems are capable of automatically and tirelessly monitoring and reporting breaches of security. For example, airport security began with physical protection of the facility with fences and area surveillance. The most recent concern is detecting explosives in both checked and early-on baggage, Other techniques relate to monitoring passengers for weapons as they transit the terminal building, especially crowds gathered at the metal detectors and X-ray machines. The application of electronics has produced reliability improvements and cost savings in systems that protect against unauthorized entry and numerous other threats. PCs have become the heart of security command and control systems. Most PC platforms rely on the proven software stability of Windows NT and present data in human-friendly, graphic format. It is expected that in the near future security monitoring will be consolidated in a central location, possibly to be integrated with other command and control functions     

Rate-aided multisignal time delay detection and tracking

Time delay detection and tracking problems have been investigated in previous papers. The approach used is applicable to many problems. In those papers, a first-order Markov process was assumed for the signal parameter (time delay) dynamic model and a constant signal parameter value was assumed within a “block”, or processing unit of time. A performance degradation is incurred when the signal parameter value is “nearly constant-rate”. Also, “crossing” signal parameter values from different signals cannot be tracked. The detector-trackers will “switch” signals. To combat these difficulties, the signal parameter dynamic model is assumed to be a second-order Markov process, and signal parameter rate of change information is computed within a block. A rate-aided multisignal detection and tracking system is developed with these assumptions     

Measuring the resilience of an airport network

Resilience is the ability of a system to withstand and stay operational in the face of an unexpected disturbance or unpredicted changes. Recent studies on air transport system resilience focus on topology characteristics after the disturbance and measure the robustness of the network with respect to connectivity. The dynamic processes occurring at the node and link levels are often ignored. Here we analyze airport network resilience by considering both structural and dynamical aspects. We develop a simulation model to study the operational performance of the air transport system when airports operate at degraded capacity rather than completely shutting down. Our analyses show that the system deteriorates soon after disruptive events occur but returns to an acceptable level after a period of time. Static resilience of the airport network is captured by a phase transition in which a small change to airport capacity will result in a sharp change in system punctuality. After the phase transition point, decreasing airport capacity has little impact on system performance. Critical airports which have significant influence on the performance of whole system are identified, and we find that some of these cannot be detected based on the analysis of network structural indicators alone. Our work shows that air transport system’s resilience can be well understood by combining network science and operational dynamics.     

考虑维修力量影响及载荷动态分配的k/n系统模糊可靠性分析

工程实际中,维修活动开展前往往存在一定时长的准备期,且由于环境时变性、系统长期运行后的劣化累积等因素导致部件状态性能水平存在不确定性,使得系统可靠性建模较为困难。对此,运用模糊数表征系统部件的失效转移率、修复转移率及修理工维修准备率的同时,以Power Law规则刻画部件间的故障相关关系,认为部件承担载荷超过某阈值时才会引发故障相关现象,并考虑了修理工数量与故障件数量之间关系对系统可靠性的影响,研究了载荷动态分配条件下带维修准备期的多修理工n中取k模糊多状态系统模型,建立了状态转移微分方程组,提出用逆向逐层分析的思路建立系统稳态概率系数的递推关系,应用α水平截集及Zadeh扩张原理确定了模糊状态概率的截集区间,得到了系统模糊稳态指标,最后通过算例给出了修理工数量及部件参数模糊程度对系统稳态指标的影响,验证了模型的适用性。     

The case for like-sensor predetection fusion

There has been a great deal of theoretical study into decentralized detection networks composed of similar (often identical), independent sensors, and this has produced a number of satisfying theoretical results. At this point it is perhaps worth asking whether or not there is a great deal of point to such study-certainly two sensors can provide twice the illumination of one, but what does this really translate to in terms of performance? We take as our metric the ground area covered with a specified Neyman-Pearson detection performance. To be fair, the comparison will be of a multisensor network to a single-sensor system where both have the same aggregate transmitter power. The situations examined are by no means exhaustive but are, we believe, representative. Is there a case? The answer, as might be expected, is “sometimes.” When the statistical situation is well behaved there is very little benefit to a fused system; however, when the environment is hostile the gains can be significant. We see, depending on the situation, gains from colocation, gains from separation, optimal gains from operation at a “fusion range,” and sometimes no gains at all     

Digital Text Watermarking: Secure Content Delivery and Data Hiding in Digital Documents

Secure communication of data over public channels is one of the most important challenges. Both the activities to secure contents and to break security are very hot. In order to reduce the chances of attack, security needs to be made invisible. The needs to preserve originality, ownership information, and integrity of text documents in a way that cannot be identified by everyone is being felt badly. Watermarking of the documents is a step toward achieving these objectives. However, to watermark a plain text document (ASCII) in a way that the original text will not change (and it would be very difficult to break it), is a great challenge. We have developed a novel encoding scheme which can be used to insert information in plain text without changing the text. A system has been developed based upon this encoding scheme. This paper describes the system and demonstrates its workings     

针对TCP/IP漏洞的航天测控通信网安全防护

航天测控通信网自建成以来,整体运行较为稳定,但在网络安全方面也暴露出了一些问题,为研究和解决目前航天测控通信网中存在的网络安全问题, 在分析TCP/IP (Transmission ControlProtocol/Internet Protocol,传输控制协议/互联网协议)分层协议基本原理的基础上,研究了IP网数据链路层、网络层和传输层的协议漏洞及常见攻击方法,详细介绍了当前航天测控通信网的网络安全部署情况,根据网络现状分别对航天测控通信网上数据链路层、网络层和传输层存在的安全问题进行了纵向分析,针对分析出的各类安全问题,进一步给出了有效的防御措施和防护方法。最后,探讨提出了一套航天测控通信网配置维护管理系统的设计方案,通过建立设备配置信息库、检查信息记录库及网络故障库等,实现了对航天测控通信网安全稳定运行的有效管理。