In recent years,cyber threats have escalated across diverse sectors,with cybercrime syndicates increasingly exploiting system vulnerabilities.Traditional passive defense mechanisms have proven insufficient,particularl...In recent years,cyber threats have escalated across diverse sectors,with cybercrime syndicates increasingly exploiting system vulnerabilities.Traditional passive defense mechanisms have proven insufficient,particularly as Linux platforms—historically overlooked in favor of Windows—have emerged as frequent targets.According to Trend Micro,there has been a substantial increase in Linux-targeted malware,with ransomware attacks on Linux surpassing those on macOS.This alarming trend underscores the need for detection strategies specifically designed for Linux environments.To address this challenge,this study proposes a comprehensive malware detection framework tailored for Linux systems,integrating dynamic behavioral analysis with the semantic reasoning capabilities of large language models(LLMs).Malware samples are executed within sandbox environments to extract behavioral features such as system calls and command-line executions.These features are then systematically mapped to the MITRE ATT&CK framework,incorporating its defined data sources,data components,and Tactics,Techniques,and Procedures(TTPs).Two mapping constructs—Conceptual Definition Mapping and TTP Technical Keyword Mapping—are developed from official MITRE documentation.These resources are utilized to fine-tune an LLM,enabling it to semantically interpret complex behavioral patterns and infer associated attack techniques,including those employed by previously unknown malware variants.The resulting detection pipeline effectively bridges raw behavioral data with structured threat intelligence.Experimental evaluations confirm the efficacy of the proposed system,with the fine-tuned Gemma 2B model demonstrating significantly enhanced accuracy in associating behavioral features with ATT&CK-defined techniques.This study contributes a fully integrated Linux-specific detection framework,a novel approach for transforming unstructured behavioral data into actionable intelligence,improved interpretability of malicious behavior,and a scalable training process for future applications of LLMs in cybersecurity.展开更多
Amid the global wave of digital economy,China's medical artificial intelligence applications are rapidly advancing through technological innovation and policy support,while facing multifaceted evaluation and regul...Amid the global wave of digital economy,China's medical artificial intelligence applications are rapidly advancing through technological innovation and policy support,while facing multifaceted evaluation and regulatory challenges.The dynamic algorithm evolution undermines the consistency of assessment criteria,multimodal systems lack unified evaluation metrics,and conflicts persist between data sharing and privacy protection.To address these issues,the China National Health Development Research Center has established a value assessment framework for artificial intelligence medical technologies,formulated the country's first technical guideline for clinical evaluation,and validated their practicality through scenario-based pilot studies.Furthermore,this paper proposes introducing a"regulatory sandbox"model to test technical compliance in controlled environments,thereby balancing innovation incentives with risk governance.展开更多
The main challenge in AI governance today is striking a balance between controlling AI dangers and fostering AI innovation.Regulators in a number of nations have progressively extended the regulatory sandbox,which was...The main challenge in AI governance today is striking a balance between controlling AI dangers and fostering AI innovation.Regulators in a number of nations have progressively extended the regulatory sandbox,which was first implemented in the banking sector,to AI governance in an effort to reduce the conflict between regulation and innovation.The AI regulatory sandbox is a new and feasible route for AI governance in China that not only helps to manage the risks of technology application but also prevents inhibiting AI innovation.It keeps inventors'trial-and-error tolerance space inside the regulatory purview while offering a controlled setting for the development and testing of novel AI that hasn't yet been put on the market.By providing full-cycle governance of AI with the principles of agility and inclusive prudence,the regulatory sandbox offers an alternative to the conventional top-down hard regulation,expost regulation,and tight regulation.However,the current system also has inherent limitations and practical obstacles that need to be overcome by a more rational and effective approach.To achieve its positive impact on AI governance,the AI regulatory sandbox system should build and improve the access and exit mechanism,the coordination mechanism between the sandbox and personal information protection,and the mechanisms of exemption,disclosure,and communication.展开更多
As prior researchers have suggested,a firm’s success in an international market depends on how well its strategy fits the nonmarket environment,such as formal institutions.This paper examines the determinants of form...As prior researchers have suggested,a firm’s success in an international market depends on how well its strategy fits the nonmarket environment,such as formal institutions.This paper examines the determinants of formal institutions around new areas of economic activities.Specifically,we propose a framework for understanding how the quality of formal institutions in promoting entrepreneurship drives the focus of such institutions concerning initial coin offering(ICO),which is emerging as a popular fundraising method.The paper uses inductive analysis to examine how nonmarket factors—such as a jurisdiction’s tax haven nature,regulators’perceptions of ICOs as threats to national or political interests,and trade and industry associations—might moderate the relationship between the quality of institutions and the focus of such institutions regarding ICOs.One of this study’s key findings is that an economy’s quality of entrepreneurship-related institutions,perceived threats to national/political interests,and tax haven nature lead to different policy orientations.Consequently,regulators assign different importance when promoting crypto-entrepreneurship and dealing with associated risks.Regulators focusing mainly on promoting crypto-ventures have taken measures to enrich the blockchain ecosystem and provided tax and non-tax incentives to attract such ventures.Regulators focusing mainly on dealing with crypto-venture risks rely on a regulatory sandbox and close regulatory monitoring of such ventures.展开更多
Fault formation and evolution in the presence of multiple pre-existing weaknesses has not been investigated extensively in rift basins. The fault systems of Weixinan Sag, Beibuwan Basin of China, which is fully covere...Fault formation and evolution in the presence of multiple pre-existing weaknesses has not been investigated extensively in rift basins. The fault systems of Weixinan Sag, Beibuwan Basin of China, which is fully covered with high-precision 3-D seismic data and is rich in oil-gas resources, have been successfully reproduced by sandbox modeling in this study with inclusion of multiple pre-existing weaknesses in the experimental model. The basic characteristics of fault formation and evolution revealed by sandbox modeling are as follows. 1） Weakness-reactivation faults and weakness-related faults are formed much earlier than the distant-weakness faults （faults far away from and with little or no relationship to the weakness）. 2） Weakness-reactivation faults and weakness-related faults develop mainly along or parallel to a pre-existing weakness, while distant-weakness faults develop nearly perpendicular to the extension direction. A complicated fault system can be formed in a fixed direction of extension with the existence of multiple pre-existing weaknesses, and the complicated fault system in the Weixinan Sag formed gradually in a nearly N-S direction with multiple pre-existing weaknesses. 3） The increase in the length and number of faults is closely tied to the nature of pre-existing weaknesses. The sandbox model may provide a new clue to detailed fault system research for oil and gas exploration in rift basins.展开更多
Three series of sandbox modeling experiments were performed to study the fault-increment pattern in extensional basins. Experimental results showed that the tectonic action mode of boundaries and the shape of major bo...Three series of sandbox modeling experiments were performed to study the fault-increment pattern in extensional basins. Experimental results showed that the tectonic action mode of boundaries and the shape of major boundary faults control the formation and evolution of faults in extensional basins. In the process of extensional deformation, the increase in the number and length of faults was episodic, and every ＇episode＇ experienced three periods, strain-accumulation period, quick fault-increment period and strain-adjustment period. The more complex the shape of the boundary fault, the higher the strain increment each ＇episode＇ experienced. Different extensional modes resulted in different fault-increment patterns. The horizontal detachment extensional mode has the ＇linear＇ style of fault-increment pattern, while the extensional mode controlled by a listric fault has the ＇stepwise＇ style of fault-increment pattern, and the extensional mode controlled by a ramp-flat boundary fault has the ＇stepwise-linear＇ style of fault-increment pattern. These fault-increment patterns given above could provide a theoretical method of fault interpretation and fracture prediction in extensional basins.展开更多
In order to provide a good practice platform for the program design contestants and algorithm enthusiasts,this paper designs and implements a programming online evaluation system based on cloud platform,which is a web...In order to provide a good practice platform for the program design contestants and algorithm enthusiasts,this paper designs and implements a programming online evaluation system based on cloud platform,which is a web system that can return the test results of the program source codes submitted by users in real time.It realizes the automatic evaluation of the program design training questions.The system is implemented by the way of front-end and back-end separation and modular programming.The front-end of the web is implemented by Vue framework,the back-end is implemented by Django framework.The judgment core is written in C language for the sake of improving the efficiency of the system.Sandbox technology is used to ensure the security of the judgment system.Experimental results show that the system can meet the need of daily teaching and competition.展开更多
Air sparging is a remedial method for groundwater. The remedial region is similar to the air flow region in the saturated zone. If soil particles are transported during air sparging, the porosity distributions in the ...Air sparging is a remedial method for groundwater. The remedial region is similar to the air flow region in the saturated zone. If soil particles are transported during air sparging, the porosity distributions in the saturated zone change, which may alter the flow path of the air. To understand better the particle movement, this study performed a sandbox test to estimate the soil porosity change during air sparging. A clear fracture was formed and the phenomenon of particle movement was observed when the air injection was started. The moved sand filled the porous around the fracture and the reparked sand filled the fracture, reducing the porosity around the fracture. The results obtained from the photographs of the sandbox, the current measurements and the direct sand sample measurements were close to each other and are credible. Therefore, air injection during air sparging causes sand particle movement of sand, altering the characteristic of the sand matrix and the air distribution.展开更多
A sandbox experiment model was designed to simulate how differences in rock strength and gravity between two blocks can influence the formation characteristics of thrusts. In the experiment the compression was from on...A sandbox experiment model was designed to simulate how differences in rock strength and gravity between two blocks can influence the formation characteristics of thrusts. In the experiment the compression was from one direction with basement shortening and the initial surfaces of the model were oblique. The results show that if the initial surface was horizontal or the slope angle was smaller than 7°, the compression induced two groups of thrusts with opposite dip orientations. If the slope angle of the initial surface was greater than 7°, the compression induced only one group of thrusts with a dip orientation contrary to the original compression direction. This result is similar to the actual section of a collision zone between two continental blocks. By applying stress analysis, rock strength is shown to be an important factor in deformation. As other boundary conditions are changeless, it is the change of gravitational potential energy that leads to different deformation styles.展开更多
Ransomware is a type of malicious software that blocks access to a computer by encrypting user’s files until a ransom is paid to the attacker.There have been several reported high-profile ransomware attacks including...Ransomware is a type of malicious software that blocks access to a computer by encrypting user’s files until a ransom is paid to the attacker.There have been several reported high-profile ransomware attacks including WannaCry,Petya,and Bad Rabbit resulting in losses of over a billion dollars to various individuals and businesses in the world.The analysis of ransomware is often carried out via sandbox environments;however,the initial setup and configuration of such environments is a challenging task.Also,it is difficult for an ordinary computer user to correctly interpret the complex results presented in the reports generated by such environments and analysis tools.In this research work,we aim to develop a user-friendly model to understand the taxonomy and analysis of ransomware attacks.Also,we aim to present the results of analysis in the form of summarized reports that can easily be understood by an ordinary computer user.Our model is built on top of the well-known Cuckoo sandbox environment for identification of the ransomware as well as generation of the summarized reports.In addition,for evaluating the usability and accessibility of our proposed model,we conduct a comprehensive user survey consisting of participants from various fields,e.g.,professional developers from software houses,people from academia(professors,students).Our evaluation results demonstrate a positive feedback of approximately 92%on the usability of our proposed model.展开更多
The advent of technology brought forth a myriad of developments that have streamlined the manner through which people operate. With the growing need to be at the forefront of communication and information, people have...The advent of technology brought forth a myriad of developments that have streamlined the manner through which people operate. With the growing need to be at the forefront of communication and information, people have resorted to the use of mobile phones with a great percentile preferring android oriented systems. Similarly, the systems are susceptible to the various threats posed by technology with due summations showing that security flaws and unauthorized access to sensitive data pose a huge threat to the overarching efficacy of the android systems. The research presented lays a primal focus on how users can improve intrinsic android features through the use of Google services, rooting, custom kernels and ROM techniques. The research also focused on how Android security features can be improved when using or installing applications. Results indicate that the rooting process is the most conclusive and safest scheme. Summations drawn are indicative of the fact that system security is a moot research topic that requires further research into how it can be improved.展开更多
Countries have invested considerable sums of human capital and material resources in the practical application of self-driving cars demonstrating the impressive market opportunity.In light of this trend,Taiwan does no...Countries have invested considerable sums of human capital and material resources in the practical application of self-driving cars demonstrating the impressive market opportunity.In light of this trend,Taiwan does not want to fall behind either.As on-road testing and technological development for self-driving cars continue to develop in different countries,the controversial issues of safety,ethics,liability,and the invasion of privacy continue to emerge.In order to resolve these issues,the government of Taiwan seeks to provide a good environment for AI(artificial intelligence)innovation and applications.This article summarizes and highlights relevant content and key points of Unmanned Vehicles Technology Innovative Experimentation Act,which was legislated in Taiwan in 2018.In addition,it points out the fundamental ethics regulation of AI,which has influenced Taiwan legal policy.展开更多
基金supported by the National Science and Technology Council under grant number 113-2221-E-027-126-MY3.
文摘In recent years,cyber threats have escalated across diverse sectors,with cybercrime syndicates increasingly exploiting system vulnerabilities.Traditional passive defense mechanisms have proven insufficient,particularly as Linux platforms—historically overlooked in favor of Windows—have emerged as frequent targets.According to Trend Micro,there has been a substantial increase in Linux-targeted malware,with ransomware attacks on Linux surpassing those on macOS.This alarming trend underscores the need for detection strategies specifically designed for Linux environments.To address this challenge,this study proposes a comprehensive malware detection framework tailored for Linux systems,integrating dynamic behavioral analysis with the semantic reasoning capabilities of large language models(LLMs).Malware samples are executed within sandbox environments to extract behavioral features such as system calls and command-line executions.These features are then systematically mapped to the MITRE ATT&CK framework,incorporating its defined data sources,data components,and Tactics,Techniques,and Procedures(TTPs).Two mapping constructs—Conceptual Definition Mapping and TTP Technical Keyword Mapping—are developed from official MITRE documentation.These resources are utilized to fine-tune an LLM,enabling it to semantically interpret complex behavioral patterns and infer associated attack techniques,including those employed by previously unknown malware variants.The resulting detection pipeline effectively bridges raw behavioral data with structured threat intelligence.Experimental evaluations confirm the efficacy of the proposed system,with the fine-tuned Gemma 2B model demonstrating significantly enhanced accuracy in associating behavioral features with ATT&CK-defined techniques.This study contributes a fully integrated Linux-specific detection framework,a novel approach for transforming unstructured behavioral data into actionable intelligence,improved interpretability of malicious behavior,and a scalable training process for future applications of LLMs in cybersecurity.
文摘Amid the global wave of digital economy,China's medical artificial intelligence applications are rapidly advancing through technological innovation and policy support,while facing multifaceted evaluation and regulatory challenges.The dynamic algorithm evolution undermines the consistency of assessment criteria,multimodal systems lack unified evaluation metrics,and conflicts persist between data sharing and privacy protection.To address these issues,the China National Health Development Research Center has established a value assessment framework for artificial intelligence medical technologies,formulated the country's first technical guideline for clinical evaluation,and validated their practicality through scenario-based pilot studies.Furthermore,this paper proposes introducing a"regulatory sandbox"model to test technical compliance in controlled environments,thereby balancing innovation incentives with risk governance.
文摘The main challenge in AI governance today is striking a balance between controlling AI dangers and fostering AI innovation.Regulators in a number of nations have progressively extended the regulatory sandbox,which was first implemented in the banking sector,to AI governance in an effort to reduce the conflict between regulation and innovation.The AI regulatory sandbox is a new and feasible route for AI governance in China that not only helps to manage the risks of technology application but also prevents inhibiting AI innovation.It keeps inventors'trial-and-error tolerance space inside the regulatory purview while offering a controlled setting for the development and testing of novel AI that hasn't yet been put on the market.By providing full-cycle governance of AI with the principles of agility and inclusive prudence,the regulatory sandbox offers an alternative to the conventional top-down hard regulation,expost regulation,and tight regulation.However,the current system also has inherent limitations and practical obstacles that need to be overcome by a more rational and effective approach.To achieve its positive impact on AI governance,the AI regulatory sandbox system should build and improve the access and exit mechanism,the coordination mechanism between the sandbox and personal information protection,and the mechanisms of exemption,disclosure,and communication.
文摘As prior researchers have suggested,a firm’s success in an international market depends on how well its strategy fits the nonmarket environment,such as formal institutions.This paper examines the determinants of formal institutions around new areas of economic activities.Specifically,we propose a framework for understanding how the quality of formal institutions in promoting entrepreneurship drives the focus of such institutions concerning initial coin offering(ICO),which is emerging as a popular fundraising method.The paper uses inductive analysis to examine how nonmarket factors—such as a jurisdiction’s tax haven nature,regulators’perceptions of ICOs as threats to national or political interests,and trade and industry associations—might moderate the relationship between the quality of institutions and the focus of such institutions regarding ICOs.One of this study’s key findings is that an economy’s quality of entrepreneurship-related institutions,perceived threats to national/political interests,and tax haven nature lead to different policy orientations.Consequently,regulators assign different importance when promoting crypto-entrepreneurship and dealing with associated risks.Regulators focusing mainly on promoting crypto-ventures have taken measures to enrich the blockchain ecosystem and provided tax and non-tax incentives to attract such ventures.Regulators focusing mainly on dealing with crypto-venture risks rely on a regulatory sandbox and close regulatory monitoring of such ventures.
基金supported by China National Major Project of Oil and Gas (2011ZX05023-004-012, 2011ZX05006-006-02-01)China Natural Science Foundation (Grant No. 40772086)
文摘Fault formation and evolution in the presence of multiple pre-existing weaknesses has not been investigated extensively in rift basins. The fault systems of Weixinan Sag, Beibuwan Basin of China, which is fully covered with high-precision 3-D seismic data and is rich in oil-gas resources, have been successfully reproduced by sandbox modeling in this study with inclusion of multiple pre-existing weaknesses in the experimental model. The basic characteristics of fault formation and evolution revealed by sandbox modeling are as follows. 1） Weakness-reactivation faults and weakness-related faults are formed much earlier than the distant-weakness faults （faults far away from and with little or no relationship to the weakness）. 2） Weakness-reactivation faults and weakness-related faults develop mainly along or parallel to a pre-existing weakness, while distant-weakness faults develop nearly perpendicular to the extension direction. A complicated fault system can be formed in a fixed direction of extension with the existence of multiple pre-existing weaknesses, and the complicated fault system in the Weixinan Sag formed gradually in a nearly N-S direction with multiple pre-existing weaknesses. 3） The increase in the length and number of faults is closely tied to the nature of pre-existing weaknesses. The sandbox model may provide a new clue to detailed fault system research for oil and gas exploration in rift basins.
文摘Three series of sandbox modeling experiments were performed to study the fault-increment pattern in extensional basins. Experimental results showed that the tectonic action mode of boundaries and the shape of major boundary faults control the formation and evolution of faults in extensional basins. In the process of extensional deformation, the increase in the number and length of faults was episodic, and every ＇episode＇ experienced three periods, strain-accumulation period, quick fault-increment period and strain-adjustment period. The more complex the shape of the boundary fault, the higher the strain increment each ＇episode＇ experienced. Different extensional modes resulted in different fault-increment patterns. The horizontal detachment extensional mode has the ＇linear＇ style of fault-increment pattern, while the extensional mode controlled by a listric fault has the ＇stepwise＇ style of fault-increment pattern, and the extensional mode controlled by a ramp-flat boundary fault has the ＇stepwise-linear＇ style of fault-increment pattern. These fault-increment patterns given above could provide a theoretical method of fault interpretation and fracture prediction in extensional basins.
基金This work is supported in part by National Natural Science Foundation of China(61373132,61872408)the Key Laboratory of informationization technology for basic education in Hunan province(2015TP1017)+1 种基金Hunan provincial higher education reform research project(2012[528])Project of research study and innovative experiment for college students in Hunan Province(2017[873]).
文摘In order to provide a good practice platform for the program design contestants and algorithm enthusiasts,this paper designs and implements a programming online evaluation system based on cloud platform,which is a web system that can return the test results of the program source codes submitted by users in real time.It realizes the automatic evaluation of the program design training questions.The system is implemented by the way of front-end and back-end separation and modular programming.The front-end of the web is implemented by Vue framework,the back-end is implemented by Django framework.The judgment core is written in C language for the sake of improving the efficiency of the system.Sandbox technology is used to ensure the security of the judgment system.Experimental results show that the system can meet the need of daily teaching and competition.
文摘Air sparging is a remedial method for groundwater. The remedial region is similar to the air flow region in the saturated zone. If soil particles are transported during air sparging, the porosity distributions in the saturated zone change, which may alter the flow path of the air. To understand better the particle movement, this study performed a sandbox test to estimate the soil porosity change during air sparging. A clear fracture was formed and the phenomenon of particle movement was observed when the air injection was started. The moved sand filled the porous around the fracture and the reparked sand filled the fracture, reducing the porosity around the fracture. The results obtained from the photographs of the sandbox, the current measurements and the direct sand sample measurements were close to each other and are credible. Therefore, air injection during air sparging causes sand particle movement of sand, altering the characteristic of the sand matrix and the air distribution.
基金This paper is supported by the project IGCP411(3-3-02-24) .
文摘A sandbox experiment model was designed to simulate how differences in rock strength and gravity between two blocks can influence the formation characteristics of thrusts. In the experiment the compression was from one direction with basement shortening and the initial surfaces of the model were oblique. The results show that if the initial surface was horizontal or the slope angle was smaller than 7°, the compression induced two groups of thrusts with opposite dip orientations. If the slope angle of the initial surface was greater than 7°, the compression induced only one group of thrusts with a dip orientation contrary to the original compression direction. This result is similar to the actual section of a collision zone between two continental blocks. By applying stress analysis, rock strength is shown to be an important factor in deformation. As other boundary conditions are changeless, it is the change of gravitational potential energy that leads to different deformation styles.
基金support of Security Testing-Innovative Secured Systems Lab(ISSL)established at University of Engineering&Technology,Peshawar,Pakistan under the Higher Education Commission initiative of National Center for Cyber Security(Grant No.2(1078)/HEC/M&E/2018/707).
文摘Ransomware is a type of malicious software that blocks access to a computer by encrypting user’s files until a ransom is paid to the attacker.There have been several reported high-profile ransomware attacks including WannaCry,Petya,and Bad Rabbit resulting in losses of over a billion dollars to various individuals and businesses in the world.The analysis of ransomware is often carried out via sandbox environments;however,the initial setup and configuration of such environments is a challenging task.Also,it is difficult for an ordinary computer user to correctly interpret the complex results presented in the reports generated by such environments and analysis tools.In this research work,we aim to develop a user-friendly model to understand the taxonomy and analysis of ransomware attacks.Also,we aim to present the results of analysis in the form of summarized reports that can easily be understood by an ordinary computer user.Our model is built on top of the well-known Cuckoo sandbox environment for identification of the ransomware as well as generation of the summarized reports.In addition,for evaluating the usability and accessibility of our proposed model,we conduct a comprehensive user survey consisting of participants from various fields,e.g.,professional developers from software houses,people from academia(professors,students).Our evaluation results demonstrate a positive feedback of approximately 92%on the usability of our proposed model.
文摘The advent of technology brought forth a myriad of developments that have streamlined the manner through which people operate. With the growing need to be at the forefront of communication and information, people have resorted to the use of mobile phones with a great percentile preferring android oriented systems. Similarly, the systems are susceptible to the various threats posed by technology with due summations showing that security flaws and unauthorized access to sensitive data pose a huge threat to the overarching efficacy of the android systems. The research presented lays a primal focus on how users can improve intrinsic android features through the use of Google services, rooting, custom kernels and ROM techniques. The research also focused on how Android security features can be improved when using or installing applications. Results indicate that the rooting process is the most conclusive and safest scheme. Summations drawn are indicative of the fact that system security is a moot research topic that requires further research into how it can be improved.
文摘Countries have invested considerable sums of human capital and material resources in the practical application of self-driving cars demonstrating the impressive market opportunity.In light of this trend,Taiwan does not want to fall behind either.As on-road testing and technological development for self-driving cars continue to develop in different countries,the controversial issues of safety,ethics,liability,and the invasion of privacy continue to emerge.In order to resolve these issues,the government of Taiwan seeks to provide a good environment for AI(artificial intelligence)innovation and applications.This article summarizes and highlights relevant content and key points of Unmanned Vehicles Technology Innovative Experimentation Act,which was legislated in Taiwan in 2018.In addition,it points out the fundamental ethics regulation of AI,which has influenced Taiwan legal policy.
