This article describes the application of GPS, image processing analysis and statistical tools for determination of forest structure and biodiversity. The idea is based on determination of forest area using GPS tools,...This article describes the application of GPS, image processing analysis and statistical tools for determination of forest structure and biodiversity. The idea is based on determination of forest area using GPS tools, then taking representative plots “samples” about 5% - 10% of the forest and counting the tree species in each plot (sample). This process enables the estimation of species population in each plot. The sum of all species population enables the calculation of relative density of each species. Multiplying species population with plot number of the forest enables the calculations of total species population in the forest. Calculating the relative density enables the determination of dominant, co-dominant, suppressed and flour structure of the forest. To determine the age of the forest, we apply our method on determining the diameter of trees and grouping them to four groups, this enables the estimation of dominant age within single species. From these data, we can estimate the age of the forest. This field protocol is easy and applicable and provides good results in estimating structure, age and biodiversity in the forest.展开更多
Protocol Reverse Engineering(PRE)is of great practical importance in Internet security-related fields such as intrusion detection,vulnerability mining,and protocol fuzzing.For unknown binary protocols having fixed-len...Protocol Reverse Engineering(PRE)is of great practical importance in Internet security-related fields such as intrusion detection,vulnerability mining,and protocol fuzzing.For unknown binary protocols having fixed-length fields,and the accurate identification of field boundaries has a great impact on the subsequent analysis and final performance.Hence,this paper proposes a new protocol segmentation method based on Information-theoretic statistical analysis for binary protocols by formulating the field segmentation of unsupervised binary protocols as a probabilistic inference problem and modeling its uncertainty.Specifically,we design four related constructions between entropy changes and protocol field segmentation,introduce random variables,and construct joint probability distributions with traffic sample observations.Probabilistic inference is then performed to identify the possible protocol segmentation points.Extensive trials on nine common public and industrial control protocols show that the proposed method yields higher-quality protocol segmentation results.展开更多
协议转换通常用于解决不同协议之间的数据交互问题,它的本质是寻找不同协议字段之间的映射关系。传统的协议转换方法存在以下缺点:转换大多是在特定协议的基础上设计的,因而这些转换是静态的,灵活性较差,不适用于多协议转换的场景;一旦...协议转换通常用于解决不同协议之间的数据交互问题,它的本质是寻找不同协议字段之间的映射关系。传统的协议转换方法存在以下缺点:转换大多是在特定协议的基础上设计的,因而这些转换是静态的,灵活性较差,不适用于多协议转换的场景;一旦协议发生改变,就需要再次分析协议的结构和字段语义以重新构建字段之间的映射关系,从而产生指数级的工作量,降低了协议转换的效率。因此,提出基于语义相似度的通用协议转换方法,旨在通过智能的方法发掘字段间的映射关系,进而提高协议转换的效率。首先,通过BERT(Bidirectional Encoder Representations from Transformers)模型分类协议字段,并排除“不应该”存在映射关系的字段;其次,通过计算字段之间的语义相似度,推理字段之间的映射关系,进而构建字段映射表;最后,提出基于语义相似度的通用协议转换框架,并定义相关协议以进行验证。仿真实验结果表明:所提方法的字段分类精准率达到了94.44%;映射关系识别精准率达到了90.70%,相较于基于知识抽取的方法提高了13.93%。以上结果验证了所提方法的有可行性,该方法可以快速识别不同协议字段之间的映射关系,适用于无人协同中多协议转换的场景。展开更多
模糊测试是目前比较流行的网络协议漏洞挖掘技术之一,但是存在现有网络协议模糊器对字段间的关联性探索不足的问题。为此,提出了一种基于字段信息和覆盖率反馈的模糊测试方法。该方法通过两个参数定量表示协议数据模型中不同字段的关系...模糊测试是目前比较流行的网络协议漏洞挖掘技术之一,但是存在现有网络协议模糊器对字段间的关联性探索不足的问题。为此,提出了一种基于字段信息和覆盖率反馈的模糊测试方法。该方法通过两个参数定量表示协议数据模型中不同字段的关系和每一个字段本身的影响力,并利用覆盖率信息持续学习更新,从而指导模糊测试向更高效的方向变异。基于该方法实现了基于字段信息和覆盖率反馈的模糊测试模糊器FMFuzzer(Field Message based Fuzzer),并与模糊器Boofuzz和PAVFuzz进行了对比实验。实验结果显示,在3种网络协议上,FMFuzzer的代码覆盖率模糊器Boofuzz和PAVFuzz分别平均提升了10.97%和6.63%,证明了本方法的有效性。展开更多
为解决工业现场通信网络普遍存在的协议碎片化、拓扑灵活性不足及实时性与带宽难以兼顾等问题,设计了一种基于可编程逻辑控制器(Programmable Logic Controller,PLC)与分布式控制系统(Distributed Control System,DCS)的工业现场通信网...为解决工业现场通信网络普遍存在的协议碎片化、拓扑灵活性不足及实时性与带宽难以兼顾等问题,设计了一种基于可编程逻辑控制器(Programmable Logic Controller,PLC)与分布式控制系统(Distributed Control System,DCS)的工业现场通信网络系统。该系统通过整合多协议网关与冗余控制架构,实现了异构协议的协同工作,并采用混合拓扑结构与优先级队列机制,有效提升了数据传输的可靠性与网络扩展能力。测试结果表明,该系统能够降低协议转换错误率和传输延迟,提高带宽利用率,为复杂工业环境下的设备互联与数据交互提供了技术支撑。展开更多
文摘This article describes the application of GPS, image processing analysis and statistical tools for determination of forest structure and biodiversity. The idea is based on determination of forest area using GPS tools, then taking representative plots “samples” about 5% - 10% of the forest and counting the tree species in each plot (sample). This process enables the estimation of species population in each plot. The sum of all species population enables the calculation of relative density of each species. Multiplying species population with plot number of the forest enables the calculations of total species population in the forest. Calculating the relative density enables the determination of dominant, co-dominant, suppressed and flour structure of the forest. To determine the age of the forest, we apply our method on determining the diameter of trees and grouping them to four groups, this enables the estimation of dominant age within single species. From these data, we can estimate the age of the forest. This field protocol is easy and applicable and provides good results in estimating structure, age and biodiversity in the forest.
文摘Protocol Reverse Engineering(PRE)is of great practical importance in Internet security-related fields such as intrusion detection,vulnerability mining,and protocol fuzzing.For unknown binary protocols having fixed-length fields,and the accurate identification of field boundaries has a great impact on the subsequent analysis and final performance.Hence,this paper proposes a new protocol segmentation method based on Information-theoretic statistical analysis for binary protocols by formulating the field segmentation of unsupervised binary protocols as a probabilistic inference problem and modeling its uncertainty.Specifically,we design four related constructions between entropy changes and protocol field segmentation,introduce random variables,and construct joint probability distributions with traffic sample observations.Probabilistic inference is then performed to identify the possible protocol segmentation points.Extensive trials on nine common public and industrial control protocols show that the proposed method yields higher-quality protocol segmentation results.
文摘协议转换通常用于解决不同协议之间的数据交互问题,它的本质是寻找不同协议字段之间的映射关系。传统的协议转换方法存在以下缺点:转换大多是在特定协议的基础上设计的,因而这些转换是静态的,灵活性较差,不适用于多协议转换的场景;一旦协议发生改变,就需要再次分析协议的结构和字段语义以重新构建字段之间的映射关系,从而产生指数级的工作量,降低了协议转换的效率。因此,提出基于语义相似度的通用协议转换方法,旨在通过智能的方法发掘字段间的映射关系,进而提高协议转换的效率。首先,通过BERT(Bidirectional Encoder Representations from Transformers)模型分类协议字段,并排除“不应该”存在映射关系的字段;其次,通过计算字段之间的语义相似度,推理字段之间的映射关系,进而构建字段映射表;最后,提出基于语义相似度的通用协议转换框架,并定义相关协议以进行验证。仿真实验结果表明:所提方法的字段分类精准率达到了94.44%;映射关系识别精准率达到了90.70%,相较于基于知识抽取的方法提高了13.93%。以上结果验证了所提方法的有可行性,该方法可以快速识别不同协议字段之间的映射关系,适用于无人协同中多协议转换的场景。
文摘模糊测试是目前比较流行的网络协议漏洞挖掘技术之一,但是存在现有网络协议模糊器对字段间的关联性探索不足的问题。为此,提出了一种基于字段信息和覆盖率反馈的模糊测试方法。该方法通过两个参数定量表示协议数据模型中不同字段的关系和每一个字段本身的影响力,并利用覆盖率信息持续学习更新,从而指导模糊测试向更高效的方向变异。基于该方法实现了基于字段信息和覆盖率反馈的模糊测试模糊器FMFuzzer(Field Message based Fuzzer),并与模糊器Boofuzz和PAVFuzz进行了对比实验。实验结果显示,在3种网络协议上,FMFuzzer的代码覆盖率模糊器Boofuzz和PAVFuzz分别平均提升了10.97%和6.63%,证明了本方法的有效性。
文摘为解决工业现场通信网络普遍存在的协议碎片化、拓扑灵活性不足及实时性与带宽难以兼顾等问题,设计了一种基于可编程逻辑控制器(Programmable Logic Controller,PLC)与分布式控制系统(Distributed Control System,DCS)的工业现场通信网络系统。该系统通过整合多协议网关与冗余控制架构,实现了异构协议的协同工作,并采用混合拓扑结构与优先级队列机制,有效提升了数据传输的可靠性与网络扩展能力。测试结果表明,该系统能够降低协议转换错误率和传输延迟,提高带宽利用率,为复杂工业环境下的设备互联与数据交互提供了技术支撑。
