检索结果-南通市图书馆

A Practical Online Approach to Protecting Kernel Heap Buffers in Kernel Modules

在线全文

学校读者我要写书评

暂无评论

China Communications 2016年第11期13卷 143-152页

作者： donghai tian Xiaoqi Jia Junhua Chen Changzhen Hu Jingfeng Xue Beijing Key Laboratory of Software Security Engineering Technique School of SoftwareBeijing Institute of Technology Shanghai Key Laboratory of Integrated Administration Technologies for Information Security Shanghai Jiao Tong University State Key Laboratory of Information Security Institute of Information EngineeringChinese Academy of Sciences & University of Chinese Academy of Sciences Key Laboratory of IOT Application Technology of Universities in Yunnan Province Yunnan Minzu University

Heap overflow attack is one of the major memory corruption attacks that have become prevalent for decades. To defeat this attack,many protection methods are proposed in recent years. However,most of these existing methods focus on user-level heap overflow detection. Only a few methods are proposed for kernel heap protection. Moreover,all these kernel protection methods need modifying the existing OS kernel so that they may not be adopted in practice. To address this problem,we propose a lightweight virtualization-based solution that can protect the kernel heap buffers allocated for the target kernel modules. The key idea of our approach is to combine the static binary analysis and virtualization technology to trap a memory allocation operation of the target kernel module,and then add one secure canary word to the end of the allocated buffer. After that,a monitor process is launched to check the integrity of the canaries. The evaluations show that our system can detect kernel heap overflow attacks effectively with minimal performance cost.

关键词： kernel heap overflow virtualization technology kernel module

SHFuzz:A Hybrid Fuzzing Method Assisted by Static Analysis for Binary Programs

在线全文

学校读者我要写书评

暂无评论

China Communications 2021年第8期18卷 1-16页

作者： Wenjie Wang donghai tian Rui Ma Hang Wei Qianjin Ying Xiaoqi Jia Lei Zuo School of Computer Science and Technology Beijing Institute of TechnologyBeijing 100081China Key Laboratory of Network Assessment Technology Institute of Information EngineeringChinese Academy of SciencesBeijing 100049China School of Cyber Security University of Chinese Academy of SciencesBeijing 100049China NSFOCUS Inc. Beijing 100089China

Fuzzing is an effective technique to find security bugs in programs by quickly exploring the input space of *** further discover vulnerabilities hidden in deep execution paths,the hybrid fuzzing combines fuzzing and concolic execution for going through complex branch *** general,we observe that the execution path which comes across more and complex basic blocks may have a higher chance of containing a security *** on this observation,we propose a hybrid fuzzing method assisted by static analysis for binary *** basic idea of our method is to prioritize seed inputs according to the complexity of their associated execution *** this purpose,we utilize static analysis to evaluate the complexity of each basic block and employ the hardware trace mechanism to dynamically extract the execution path for calculating the seed inputs’*** key advantage of our method is that our system can test binary programs efficiently by using the hardware trace and hybrid *** evaluate the effectiveness of our method,we design and implement a prototype system,namely *** evaluation results show SHFuzz discovers more unique crashes on several real-world applications and the LAVA-M dataset when compared to the previous solutions.

关键词： hybrid fuzzing static analysis concolic execution binary programs

OPKH: A Lightweight Online Approach to Protecting Kernel Hooks in Kernel Modules

在线全文

学校读者我要写书评

暂无评论

China Communications 2013年第11期10卷 15-23页

作者：田东海李轩涯胡昌振闫怀志 Beijing Key Laboratory of Software Security Engineering Technique School of Software Beijing Institute of Technology State Key Laboratory of Information Security Institute of Information Engineering Chinese Academy of Sciences National Engineering Laboratory for Information Security Technologies Institute of Information Engineering Chinese Academy of Sciences

Kernel hooks are very important con- trol data in OS kernel. Once these data are com- promised by attackers, they can change the control flow of OS kemel＇s execution. Previ- ous solutions suffer from limitations in that： 1） some methods require modifying the source code of OS kernel and kernel modules, which is less practical for wide deployment; 2） other methods cannot well protect the kernel hooks and function return addresses inside kernel mo- dules whose memory locations cannot be pre- determined. To address these problems, we propose OPKH, an on-the-fly hook protection system based on the virtualization technology. Compared with previous solutions, OPKH off- ers the protected OS a fully transparent envi- ronment and an easy deployment. In general, the working procedure of OPKH can be di- vided into two steps. First, we utilise the me- mory virtualization for offiine profiling so that the dynamic hooks can be identified. Second, we exploit the online patching technique to in- strument the hooks for run-time protection. The experiments show that our system can pro- tect the dynamic hooks effectively with mini- mal performance overhead.

关键词： kernel hook virtualization tech-nology online patching

在线全文

学校读者我要写书评

暂无评论

高含水原油混合黏度特性及定量计算方法

石油工程建设 2022年第5期48卷 31-37页

作者：田东海中国石油华北油田公司巴彦勘探开发分公司内蒙古巴彦淖尔015000

为准确计算高含水原油乳状液的混合黏度,采用搅拌测黏装置对8种含水原油乳状液的混合黏度进行了测定,揭示了外部混合条件、原油物性等因素对混合黏度的影响,并参照量纲齐次定理,给出了混合黏度与温度、剪切速率、综合含水率及组合活性... 详细信息

为准确计算高含水原油乳状液的混合黏度,采用搅拌测黏装置对8种含水原油乳状液的混合黏度进行了测定,揭示了外部混合条件、原油物性等因素对混合黏度的影响,并参照量纲齐次定理,给出了混合黏度与温度、剪切速率、综合含水率及组合活性物质之间定量综合关系式。结果表明,混合黏度随剪切速率的增加表现出较强的剪切稀释性,但随含水率和温度的增加,其剪切稀释性不断减弱;原油物性主要以协同效应影响混合黏度,且活性物质的种类越多,协同效应的影响范围越大;拟合后计算模型的最大相对误差26.42%,平均相对误差4.96%,满足工程精度的要求。研究结果可为高含水原油集输压降的计算提供指导。

关键词：高含水原油混合黏度实验测定计算模型拟合

在线全文

学校读者我要写书评

暂无评论

福利国家与住房政策

国外城市规划 2000年第1期15卷 34-36页

作者：田东海清华同方股份公司

本文试图通过欧美福利国家系统和住房系统的内在联系，运用欧美学者在１９９０年代中期的最新研究成果，从定性和定量两方面来认识欧美国家的住房政策类型。

关键词：欧美国家住房政策福利类型

Present status analysis on the construction and application of CORS in China

在线全文

学校读者我要写书评

暂无评论

Present status analysis on the construction and application ...

双氰胺对马铃薯农田土壤铵态氮、硝态氮转化的影响

第三届中国卫星导航学术年会

作者： Hui Liu*, Sitong Guo, Jingnan Liu, Zongbiao tian, donghai ZhangGNSS Research Center, Wuhan University, Wuhan, Hubei Province, China,

Based on the construction data of continuously operating reference stations （CORS） in China, this paper reviews the development history of CORS briefly. Then the development characteristics and existing problems of ... 详细信息

关键词： CORS regional system construction status application prospect

来源： cnki会议评论

在线全文

cnki会议

学校读者我要写书评

暂无评论

中国农学通报 2010年第2期26卷 149-151页

作者：马建华樊明寿田东海内蒙古农业大学职业技术学院内蒙古包头014109 内蒙古农业大学农学院呼和浩特010018

研究双氰胺对马铃薯各个生长时期农田土壤铵态氮、硝态氮转化的影响,为块茎类蔬菜生产进行科学合理施肥提供依据。试验种肥采用4个不同处理:铵态氮肥+过磷酸钙+双氰胺、铵态氮肥+过磷酸钙、硝态氮肥+过磷酸钙、过磷酸钙。采用比色法测... 详细信息

研究双氰胺对马铃薯各个生长时期农田土壤铵态氮、硝态氮转化的影响,为块茎类蔬菜生产进行科学合理施肥提供依据。试验种肥采用4个不同处理:铵态氮肥+过磷酸钙+双氰胺、铵态氮肥+过磷酸钙、硝态氮肥+过磷酸钙、过磷酸钙。采用比色法测定不同生育期马铃薯根系土壤铵态氮、硝态氮含量。结果表明,加入双氰胺后,土壤中铵态氮含量显著提高(P<0.05),硝态氮含量显著降低(P<0.05)。说明双氰胺作为硝化抑制剂同样适用于马铃薯等块茎类蔬菜,可以提高氮肥利用率,达到增产节约的目的。

关键词：双氰胺氮转化

甘蔗渣作为粗饲料对奶牛生产性能、养分消化和采食行为的影响

在线全文

学校读者我要写书评

暂无评论

中国饲料 2020年第2期 75-79页

作者：韩志金陈玉洁田东海邓常胜内蒙古农业大学职业技术学院

文章旨在评价甘蔗渣作为粗饲料对泌乳奶牛采食量、消化率、采食行为、泌乳量、乳成分及微生物蛋白合成等方面的影响。试验选择10头初始体重为(450±25.6)kg,泌乳天数为(143.7±30.7)d的杂交奶牛为研究对象,试验采用5×5拉丁方设计,饲喂... 详细信息

文章旨在评价甘蔗渣作为粗饲料对泌乳奶牛采食量、消化率、采食行为、泌乳量、乳成分及微生物蛋白合成等方面的影响。试验选择10头初始体重为(450±25.6)kg,泌乳天数为(143.7±30.7)d的杂交奶牛为研究对象,试验采用5×5拉丁方设计,饲喂周期为5个21 d(1~14 d为适应期,15~21 d为数据采集期)。试验日粮分为对照日粮、45%、50%、55%和60%甘蔗渣日粮。结果:对照组与45%和50%甘蔗渣组干物质、有机物、总可消化养分摄入量、干物质和有机物消化率无显著差异(P>0.05),而55%和60%甘蔗渣组干物质和有机物消化率最低(P0.05)。日粮甘蔗渣添加水平对营养物质的摄入量和消化率呈显著线性降低(P<0.05)。60%甘蔗渣组较对照组显著降低了奶牛反刍时间,显著提高空闲时间(P<0.05)。奶牛的反刍时间、反刍和采食效率随日粮甘蔗渣添加水平的升高显著线性降低(P<0.05),而空闲时间随饲粮中甘蔗渣含量的增加线性增加(P<0.05)。结论:日粮添加甘蔗渣降低了奶牛日产奶量,但添加水平为45%~50%时可以使奶牛泌乳量达到12 kg/d。

关键词：甘蔗渣奶牛生产性能养分消化采食行为

在线全文

学校读者我要写书评

暂无评论

雅斯油田污水处理系统工艺改造

石油规划设计 2020年第2期31卷 22-24,48页

作者：田东海刘福云牟燕中国石油华北油田公司二连分公司中国石油天然气股份有限公司华北油田分公司第五采油厂

雅斯油田属于低孔、特低渗透油田,储层物性差,对回注水质要求高。随着油田开发的不断深入,产出污水水性变得越来越复杂,现有采出水处理能力不足,且污水处理工艺不能满足处理后水质要求。对此,雅斯油田开展了微生物污水处理工艺的探索、... 详细信息

雅斯油田属于低孔、特低渗透油田,储层物性差,对回注水质要求高。随着油田开发的不断深入,产出污水水性变得越来越复杂,现有采出水处理能力不足,且污水处理工艺不能满足处理后水质要求。对此,雅斯油田开展了微生物污水处理工艺的探索、试验与应用实践工作,实现了微生物污水处理工艺技术的成功应用,保证了处理后污水水质稳定达标,为该油田污水处理工艺技术提升走出了一条新路。

关键词：雅斯油田污水处理微生物反应工艺改造