检索结果-南通市图书馆

DAVS:Dockerfile Analysis for Container Image Vulnerability Scanning

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Computers, Materials & Continua 2022年第7期72卷 1699-1711页

作者： Thien-phuc doan Souhwan Jung School of Electronic Engineering Soongsil UniversitySeoul06978Korea

Container technology plays an essential role in many Information and Communications Technology(ICT)***,containers face a diversity of threats caused by vulnerable packages within container *** vulnerability scanning solutions for container images are *** solutions entirely depend on the information extracted from package *** a result,packages installed directly from the source code compilation,or packages downloaded from the repository,etc.,are *** introduce DAVS–A Dockerfile analysis-based vulnerability scanning framework for OCI-based container images to deal with the limitations of existing *** performs static analysis using file extraction based on Dockerfile information to obtain the list of Potentially Vulnerable Files(PVFs).The PVFs are then scanned to figure out the vulnerabilities in the target container *** experimental shows the outperform of DAVS on detecting Common Vulnerabilities and Exposures(CVE)of 10 known vulnerable images compared to Clair–the most popular container image scanning ***,DAVS found that 68%of real-world container images are vulnerable from different image registries.

关键词： Container security vulnerability scanning OCI image analysis

Sequencing of multi-robot behaviors using reinforcement learning

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Control Theory and Technology 2021年第4期19卷 529-537页

作者： Pietro Pierpaoli thinh T.doan Justin Romberg Magnus Egerstedt School of Electrical and Computer Engineering Georgia Institute of TechnologyAtlantaGA 30332USA Department of Electrical and Computer Engineering Virginia TechBlacksburgVA 24061USA Samueli School of Engineering University of CaliforniaIrvineCA 92697USA

Given a collection of parameterized multi-robot controllers associated with individual behaviors designed for particular tasks,this paper considers the problem of how to sequence and instantiate the behaviors for the purpose of completing a more complex,overarching *** addition,uncertainties about the environment or even the mission specifcations may require the robots to learn,in a cooperative manner,how best to sequence the *** this paper,we approach this problem by using reinforcement learning to approximate the solution to the computationally intractable sequencing problem,combined with an online gradient descent approach to selecting the individual behavior parameters,while the transitions among behaviors are triggered automatically when the behaviors have reached a desired performance level relative to a task performance *** illustrate the efectiveness of the proposed method,it is implemented on a team of diferential-drive robots for solving two diferent missions,namely,convoy protection and object manipulation.

关键词： Multi-robot systems Reinforcement learning Distributed control

Container Instrumentation and Enforcement System for Runtime Security of Kubernetes Platform with eBPF

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Intelligent Automation & Soft Computing 2023年第8期37卷 1773-1786页

作者： Songi Gwak Thien-phuc doan Souhwan Jung Soongsil University Seoul06978Korea

Containerization is a fundamental component of modern cloud-native infrastructure,and Kubernetes is a prominent platform of container orchestration ***,containerization raises significant security concerns due to the nature of sharing a kernel among multiple containers,which can lead to container breakout or privilege *** cannot avoid it as *** various tools,such as container image scanning and configuration checking,can mitigate container workload vulnerabilities,these are not foolproof and cannot guarantee perfect isolation or prevent every active threat in *** such,a policy enforcement solution is required to tackle the problem,and existing solutions based on LSM(Linux Security Module)frameworks may not be adequate for some *** address this,we propose an enforcement system based on BPF-LSM,which leverages eBPF(extended Berkeley Packet Filter)technology to provide fine-grained control and dynamic adoption of security *** this paper,we compare different LSM implementations to highlight the challenges of current enforcement solutions before detailing the design of our eBPF-based Kubernetes Runtime Instrumentation and Enforcement System(KRSIE).Finally,we evaluate the effectiveness of our system using a real-world scenario,as measuring the performance of a policy enforcement system is a complex *** results show that KRSIE can successfully control containers’behaviors using LSM hooks at container runtime,offering improved container security for cloud-native infrastructure.

关键词： Container kubernetes runtime security eBPF enforcement

The Trade-Off Between Performance and Security of Virtualized Trusted Execution Environment on Android

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computer Systems Science & Engineering 2023年第9期46卷 3059-3073页

作者： Thien-phuc doan Ngoc-Tu Chau Jungsoo Park Souhwan Jung Soongsil University Seoul06978Korea

Nowadays,with the significant growth of the mobile market,security issues on the Android Operation System have also become an urgent *** execution environment(TEE)technologies are considered an option for satisfying the inviolable property by taking advantage of hardware ***,for Android,TEE technologies still contain restrictions and *** first issue is that non-original equipment manufacturer developers have limited access to the functionality of hardware-based *** issue of hardware-based TEE is the cross-platform *** every mobile device supports different TEE vendors,it becomes an obstacle for developers to migrate their trusted applications to other Android devices.A software-based TEE solution is a potential approach that allows developers to customize,package and deliver the product *** by that idea,this paper introduces a VTEE model,a software-based TEE solution,on Android *** research contributes to the analysis of the feasibility of using a virtualized TEE on Android devices by considering two metrics:computing performance and *** experiment shows that the VTEE model can host other software-based TEE services and deliver various cryptography TEE functions on theAndroid *** security evaluation shows that adding the VTEE model to the existing Android does not addmore security issues to the traditional ***,this paper shows applicable solutions to adjust the balance between computing performance and security.

关键词： Mobile security trusted execution model virtualized trusted execution environment hypervisor

Behavior of noncircular tunnels excavated in stratified rock masses-Case of underground coal mines

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Rock Mechanics and Geotechnical Engineering 2019年第1期11卷 99-110页

作者： Ngoc Anh Do Daniel Dias Van Diep Dinh Tien Tung Tran Van Canh Dao Viet doan Dao phuc Nhan Nguyen Department of Underground and Mining Construction.Faculty of Civil Engineering Hanoi University of Mining and Ceology School of Automotive and Transportation Engineering Hefei University of Technology Laboratory 35R Crenoble Alpes University

The amount of tunnels excavated along stratified/sedimentary rock masses in Quangninh coal mine area,Vietnam, is gradually increasing. Rock mass in Quangninh is characterized by beddings between rock layers. The behavior of stratified rock masses surrounding the tunnels depends on both the intact rock and the beddings between rock layers. The main characteristics of stratified rock masses that need to be considered are their heterogeneity and anisotropy. Depending on the dip angle of rock layers, movements and failure zones developed surrounding the tunnels can be asymmetrical over the vertical axis of tunnel. This asymmetry causes adverse behaviors of the tunnel structures. The objective of this study is to highlight convergences and yielded zones developed in rock masses surrounding noncircular tunnels in Quangninh coal mine area using a finite element method. The presence of bedding joints is explicitly simulated. The numerical results indicated that with the increase in dip angle of bedding joints, the stress asymmetry over the tunnel vertical axis increases. It gradually leads to an asymmetry of the failure zone surrounding the tunnel. An increase of rock mass quality means a decrease of rock mass sensitivity to the discontinuities. In addition,a dip angle of the bedding joints of approximately 45° could be considered as the critical angle at which the rock mass mechanism changes between sliding and bending.

关键词： Tunnel Bedding Stratification Anisotropic Heterogeneity

Inferences on the Difference of Two Proportions: A Bayesian Approach

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Open Journal of Statistics 2017年第1期7卷 1-15页

作者： Thu Pham-Gia Nguyen Van Thin Phan phuc doan Department of Mathematics and Statistics Université de Moncton New Brunswick Canada Faculty of Mathematics and Computer Science Hochiminh University of Science Ho Chi Minh Vietnam

Let π=π1-π2 be the difference of two independent proportions related to two populations. We study the test H0:π≥0 against different alternatives, in the Bayesian context. The various Bayesian approaches use standard beta distributions, and are simple to derive and compute. But the more general test H0:π≥η, with η>0, requires more advanced mathematical tools to carry out the computations. These tools, which include the density of the difference of two general beta variables, are presented in the article, with numerical examples for illustrations to facilitate comprehension of results.

关键词： Proportion Convolution Normal Beta Bayesian Critical Value Appell’s Function

Combined transarterial chemoembolization and stereotactic body radiation therapy as a bridge therapy to liver transplant for hepatocellular carcinoma

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Hepatoma Research 2020年第8期6卷 36-45页

作者： Bui Quang Bieu Nguyen Dinh Chau Nguyen Xuan Kien Le Van Thanh Vu Van Quang Thai doan Ky Nguyen Tien thinh Mai Hong Bang Department of Radiation Oncology and Radiosurgery Military Central Hospital 108Hanoi 100000Vietnam Department of Hepatobiliary and Pancreatic Surgery Military Central Hospital 108Hanoi 100000Vietnam Department of Gastroenterology and Hepatobiliary Military Central Hospital 108Hanoi 100000Vietnam.

Liver transplant(LT)is the curative treatment for patients with hepatocellular carcinoma(HCC).Bridge therapies are local treatments given to patients on the LT waitlist,to prevent tumor progression and to reduce the dropout *** presentation:We reported a 40-year-old man diagnosed with Barcenola-Clinic Liver Cancer BCLC intermediate stage HCC and Child-Pugh A5 hepatitis B virus cirrhosis who underwent combined bridge therapies to ***,the patient received transarterial chemoembolization(TACE)for two times and showed a partial *** he underwent stereotactic body radiation therapy(SBRT)with a total dose of 45 Gy in 3 *** months later,the tumor size and serum protein induced by Vitamin K absence or antagonists-II,alpha fetoprotein levels decreased *** June 2019 a suitable donor was found and his LT was successfully ***:We propose that a combination of TACE and SBRT was feasible as bridge therapy for HCC patients on the LT waitlist.

关键词： Transarterial chemoembolization stereotactic body radiation therapy bridge therapy hepatocellular carcinoma liver transplant

Using Visual MODFLOW Model to Assess the Efficiency of Subsurface Barrier Wall for Groundwater Flow Regulation and Reduction of Saline Intrution

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Environmental Science and Engineering(A) 2021年第3期10卷 104-115页

作者： Nguyen Minh Khuyen doan Van Long Nguyen Tien Bach Tang Huu Dong Bui Cong Du Dang Dinh phuc Department of Water Resources Management Ministry of Natural Resources and EnvironmentHanoi 100000Vietnam Vietnam Association of Hyhrogeology Hanoi 100000Vietnam

Barrier walls effectively store water,regulate underground flows,improve exploitable reserves and prevent saltwater *** effectiveness of the underground barrier wall depends not only on the hydrogeological structure,the technical parameters of the wall but also on the layout scheme of the exploitation well *** results showed that in natural conditions,the ground water level upstream of the barrier wall rose in the presence of a barrier *** wells located downstream of high barrier walls,the water level *** amount of underground current flowing into the sea decreased,the annual average value of the whole region decreased was 316 m3/day and *** presence of a wall,both the water level and the amount of evaporation *** average increase in evaporation volume during the calculation period of ten thousand days with walls was 4.114 m3/*** in presence of a wall,the amount of water that can be exploited increases by the total amount of evaporation plus the decrease in discharge to the sea and is equal to 4,424 m3/*** the exploitation condition,if the water level in the presence of wall is kept as low as in the absence of wall,the exploitation flow will increase to about 4,400 m3/day and *** the calculated water level values when there is a wall and without a wall,we can see that if the exploitation flow in presence of a wall and in the absence of wall is the same,the water level drop at the calculated observation wells upstream of the wall will decrease from 0.21 m to 3.97 *** condition of effective exploitation of the wall depends on the mining *** exploitation scheme is reasonable,the exploitation flow of the wells does not exceed the allowable flow so as not to cause the drying of the aquifer at the location of the *** upstream area of the wall reflects quite clearly as the Total dissolved solids content in observation wells upstream of the wall at the end of the calculation time is significantly reduced c

关键词： Subsurface barrier wall store water regulate underground flows.