为解决日趋严重的工业控制系统(industrial control system,ICS)信息安全问题,提出一种针对工业控制网络的非参数累积和(cumulative sum,CUSUM)入侵检测方法.利用ICS输入决定输出的特性,建立ICS的数学模型预测系统的输出,一旦控制系统...为解决日趋严重的工业控制系统(industrial control system,ICS)信息安全问题,提出一种针对工业控制网络的非参数累积和(cumulative sum,CUSUM)入侵检测方法.利用ICS输入决定输出的特性,建立ICS的数学模型预测系统的输出,一旦控制系统的传感器遭受攻击,实际输出信号将发生改变.在每个时刻,计算工业控制模型的预测输出与传感器测量信号的差值,形成基于时间的统计序列,采用非参数CUSUM算法,实现在线检测入侵并报警.仿真检测实验证明,该方法具有良好的实时性和低误报率.选择适当的非参数CUSUM算法参数τ和β,该入侵检测方法不但能在攻击对控制系统造成实质伤害前检测出攻击,还对监测ICS中的误操作有一定帮助.展开更多
The vibration characteristics and dynamic responses of rock and soil under seismic load can be estimated with dynamic finite element method （DFEM）. Combining with the DFEM, the vector sum analysis method （VSAM） is...The vibration characteristics and dynamic responses of rock and soil under seismic load can be estimated with dynamic finite element method （DFEM）. Combining with the DFEM, the vector sum analysis method （VSAM） is employed in seismic stability analysis of a slope in this paper. Different from other conventional methods, the VSAM is proposed based on the vector characteristic of force and current stress state of the slope. The dynamic stress state of the slope at any moment under seismic load can he obtained by the DFEM, thus the factor of safety of the slope at any moment during earthquake can be easily obtained with the VSAM in consideration of the DFEM. Then, the global stability of the slope can be estimated on the basis of time-history curve of factor of safety and reliability theory. The VSAM is applied to a homogeneous slope under seismic load. The factor of safety of the slope is 1.30 under gravity only and the dynamic factor of safety under seismic load is 1.21. The calculating results show that the dynamic characteristics and stability state of the slope with input ground motion can be actually analyzed. It is believed that the VSAM is a feasible and practical approach to estimate the dynamic stability of slopes under seismic load.展开更多
AIM： To use the cumulative sum analysis score（CUSUM） to construct objectively the learning curve of phacoemulsification competency.METHODS： Three second-year residents and an experienced consultant were monitored ...AIM： To use the cumulative sum analysis score（CUSUM） to construct objectively the learning curve of phacoemulsification competency.METHODS： Three second-year residents and an experienced consultant were monitored for a series of 70 phacoemulsification cases each and had their series analysed by CUSUM regarding posterior capsule rupture（PCR） and best-corrected visual acuity. The acceptable rate for PCR was 〈5%（lower limit h） and the unacceptable rate was 〉10%（upper limit h）. The acceptable rate for bestcorrected visual acuity worse than 20/40 was 〈10%（lower limit h） and the unacceptable rate was 〉20%（upper limit h）. The area between lower limit h and upper limit h is called the decision interval. RESULTS： There was no statistically significant difference in the mean age, sex or cataract grades between groups. The first trainee achieved PCR CUSUM competency at his 22 nd case. His best-corrected visual acuity CUSUM was in the decision interval from his third case and stayed there until the end, never reaching competency. The second trainee achieved PCR CUSUM competency at his 39^ th case. He could reach best-corrected visual acuity CUSUM competency at his 22 ^nd case. The third trainee achieved PCR CUSUM competency at his 41 st case. He reached bestcorrected visual acuity CUSUM competency at his 14 ^th case.CONCLUSION： The learning curve of competency in phacoemulsification is constructed by CUSUM and in average took 38 cases for each trainee to achieve it.展开更多
Combating DDoS attacks at their sources is still in its infancy. In tttis paper, a noaparametric adaptive CUSUM （cumulative sum） method is presented, which is proven efficient in detecting SYN flooding attacks close...Combating DDoS attacks at their sources is still in its infancy. In tttis paper, a noaparametric adaptive CUSUM （cumulative sum） method is presented, which is proven efficient in detecting SYN flooding attacks close to their sources. Different from other CUSUM methods, this new method has two distinct features： （1） its detection threshold can adapt itself to various traffic conditions and （2） it can timely detect the end of an attack within a required delay. Trace-driven simulations are conducted to validate the efficacy of this method in detecting SYN flooding attacks, and the results show that the nonparametric adaptive CUSUM method excels in detecting low-rate attacks.展开更多
The theoretical positioning accuracy of multilateration(MLAT) with the time difference of arrival(TDOA) algorithm is very high. However, there are some problems in practical applications. Here we analyze the location ...The theoretical positioning accuracy of multilateration(MLAT) with the time difference of arrival(TDOA) algorithm is very high. However, there are some problems in practical applications. Here we analyze the location performance of the time sum of arrival(TSOA) algorithm from the root mean square error(RMSE) and geometric dilution of precision(GDOP) in additive white Gaussian noise(AWGN) environment. The TSOA localization model is constructed. Using it, the distribution of location ambiguity region is presented with 4-base stations. And then, the location performance analysis is started from the 4-base stations with calculating the RMSE and GDOP variation. Subsequently, when the location parameters are changed in number of base stations, base station layout and so on, the performance changing patterns of the TSOA location algorithm are shown. So, the TSOA location characteristics and performance are revealed. From the RMSE and GDOP state changing trend, the anti-noise performance and robustness of the TSOA localization algorithm are proved. The TSOA anti-noise performance will be used for reducing the blind-zone and the false location rate of MLAT systems.展开更多
文摘为解决日趋严重的工业控制系统(industrial control system,ICS)信息安全问题,提出一种针对工业控制网络的非参数累积和(cumulative sum,CUSUM)入侵检测方法.利用ICS输入决定输出的特性,建立ICS的数学模型预测系统的输出,一旦控制系统的传感器遭受攻击,实际输出信号将发生改变.在每个时刻,计算工业控制模型的预测输出与传感器测量信号的差值,形成基于时间的统计序列,采用非参数CUSUM算法,实现在线检测入侵并报警.仿真检测实验证明,该方法具有良好的实时性和低误报率.选择适当的非参数CUSUM算法参数τ和β,该入侵检测方法不但能在攻击对控制系统造成实质伤害前检测出攻击,还对监测ICS中的误操作有一定帮助.
基金Supported by the Program of Yunnan Provincial Institute of Communications Planning,Design and Research (2011(D)11-b)
文摘The vibration characteristics and dynamic responses of rock and soil under seismic load can be estimated with dynamic finite element method （DFEM）. Combining with the DFEM, the vector sum analysis method （VSAM） is employed in seismic stability analysis of a slope in this paper. Different from other conventional methods, the VSAM is proposed based on the vector characteristic of force and current stress state of the slope. The dynamic stress state of the slope at any moment under seismic load can he obtained by the DFEM, thus the factor of safety of the slope at any moment during earthquake can be easily obtained with the VSAM in consideration of the DFEM. Then, the global stability of the slope can be estimated on the basis of time-history curve of factor of safety and reliability theory. The VSAM is applied to a homogeneous slope under seismic load. The factor of safety of the slope is 1.30 under gravity only and the dynamic factor of safety under seismic load is 1.21. The calculating results show that the dynamic characteristics and stability state of the slope with input ground motion can be actually analyzed. It is believed that the VSAM is a feasible and practical approach to estimate the dynamic stability of slopes under seismic load.
文摘AIM： To use the cumulative sum analysis score（CUSUM） to construct objectively the learning curve of phacoemulsification competency.METHODS： Three second-year residents and an experienced consultant were monitored for a series of 70 phacoemulsification cases each and had their series analysed by CUSUM regarding posterior capsule rupture（PCR） and best-corrected visual acuity. The acceptable rate for PCR was 〈5%（lower limit h） and the unacceptable rate was 〉10%（upper limit h）. The acceptable rate for bestcorrected visual acuity worse than 20/40 was 〈10%（lower limit h） and the unacceptable rate was 〉20%（upper limit h）. The area between lower limit h and upper limit h is called the decision interval. RESULTS： There was no statistically significant difference in the mean age, sex or cataract grades between groups. The first trainee achieved PCR CUSUM competency at his 22 nd case. His best-corrected visual acuity CUSUM was in the decision interval from his third case and stayed there until the end, never reaching competency. The second trainee achieved PCR CUSUM competency at his 39^ th case. He could reach best-corrected visual acuity CUSUM competency at his 22 ^nd case. The third trainee achieved PCR CUSUM competency at his 41 st case. He reached bestcorrected visual acuity CUSUM competency at his 14 ^th case.CONCLUSION： The learning curve of competency in phacoemulsification is constructed by CUSUM and in average took 38 cases for each trainee to achieve it.
基金Supported by the Special Fund of Central College Basic Scientific Research Bursary (DUT1ORC(3)225)Key Discipline Construction Fund of Liaoning Province
文摘Combating DDoS attacks at their sources is still in its infancy. In tttis paper, a noaparametric adaptive CUSUM （cumulative sum） method is presented, which is proven efficient in detecting SYN flooding attacks close to their sources. Different from other CUSUM methods, this new method has two distinct features： （1） its detection threshold can adapt itself to various traffic conditions and （2） it can timely detect the end of an attack within a required delay. Trace-driven simulations are conducted to validate the efficacy of this method in detecting SYN flooding attacks, and the results show that the nonparametric adaptive CUSUM method excels in detecting low-rate attacks.
基金supported by the Joint Civil Aviation Fund of National Natural Science Foundation of China(Nos.U1533108 and U1233112)
文摘The theoretical positioning accuracy of multilateration(MLAT) with the time difference of arrival(TDOA) algorithm is very high. However, there are some problems in practical applications. Here we analyze the location performance of the time sum of arrival(TSOA) algorithm from the root mean square error(RMSE) and geometric dilution of precision(GDOP) in additive white Gaussian noise(AWGN) environment. The TSOA localization model is constructed. Using it, the distribution of location ambiguity region is presented with 4-base stations. And then, the location performance analysis is started from the 4-base stations with calculating the RMSE and GDOP variation. Subsequently, when the location parameters are changed in number of base stations, base station layout and so on, the performance changing patterns of the TSOA location algorithm are shown. So, the TSOA location characteristics and performance are revealed. From the RMSE and GDOP state changing trend, the anti-noise performance and robustness of the TSOA localization algorithm are proved. The TSOA anti-noise performance will be used for reducing the blind-zone and the false location rate of MLAT systems.
