|
|
|
题名
|
作者
|
年代
|
出处
|
被引量
|
| 1 | 基于GSPN的拟态DNS构造策略研究显示文摘网络空间拟态防御系统(Cyberspace Mimic Defense System, CMDS)采用动态异构冗余架构以及多模表决机制将不确定威胁转化为概率可控的事件,从而实现了自主可控、安全可信。为进一步研究拟态构造策略在不同干扰场景下的稳态可用性和感知安全性,本文采用广义随机Petri网(Generalized Stochastic Petri Net, GSPN)建模,分析了不同干扰场景下采用不同拟态构造策略对系统性能和构造成本的影响,实验结果表明拟态防御系统可以根据反馈控制信息对不同干扰场景进行策略替换,从而实现系统的稳定可用性和感知安全性。同时通过反馈控制能有效控制不同服务器解析时延差值,对实际拟态DNS系统部署有重要指导意义。 | 任权 邬江兴 贺磊 | 2019 | 信息安全学报2019，4，2： | 14 |
| 2 | 基于非相似余度架构的网络空间安全系统异构性量化方法显示文摘基于非相似余度架构(DRS)的网络空间安全技术是一种主动防御技术,其利用非相似性、冗余性等特性阻断或者扰乱网络攻击,以提高系统的可靠性和安全性。该文在研究异构性是如何提高系统的安全性的基础上,指出对异构性进行量化评估的重要性,将DRS的异构性定义为其执行体集的复杂性与差异性,并依此提出一种量化异构性的方法。实验结果表明,该方法可以将10个执行体集分为9类,而香浓-维纳指数、辛普森指数和Pielou指数只能分为4类。在理论上为DRS异构性量化评估提供了一种新方法,并为工程实现DRS系统提供了指导。 | 张杰鑫 庞建民 张铮 邰铭 刘浩 | 2019 | 电子与信息学报2019，41，7： | 12 |
| 3 | Performance Modeling Based on GSPN for Cyberspace Mimic DNS显示文摘Cyberspace mimic domain name system(CMDNS)adopts dynamic heterogeneous redundant architecture with strategic decision mechanism to control the effectiveness of uncertain disturbance.There is lack of methods to evaluate the availability and awareness security of CMDNS.To further describe and analyze the characteristics of CMDNS accurately,the Generalized stochastic Petri net(GSPN)is used to model the attack disturbance and defense of mimic Domain name system(DNS),and the availability and awareness security of Dissimilar redundancy system(DRS)and mimic DNS under different disturbance intensities are compared.We compared the different effect of local service query and real network query on the average response delay.The results show that the introduction of mimic architecture will inevitably pay the corresponding delay cost which increase 9.3% compared with traditional local DNS,but it has little effect on the service which only increases by 1.9% compared with the DNS transmission delay at the network communication level. | REN Quan WU Jiangxing HE Lei | 2020 | Chinese Journal of Electronics2020，29，4： | 3 |
| 4 | Reliability evaluation of avionics system with imperfect fault coverage and propagated failure mechanisms显示文摘Fault tolerance designs are essential techniques for systems that require high levels of reliability,such as aircraft or spacecraft control system.Imperfect Fault Coverage(IFC)may lead to the failure of a system or subsystem even with adequate redundancy.Previous studies of IFC mostly concentrated on evaluating Coverage Factor(CF),whereas the system failure behaviors with IFC have rarely been involved.Failures that occur in low-layer may be covered by highlayer.However,if the coverage is imperfect,uncovered failure will have functional and physical impact on the system behavior.In this thesis,the failure behavior and reliability of IFC of multi-layer systems are studied and a Binary Decision Diagram(BDD)-based modeling and simulation method are proposed to evaluate system reliability.As a case,the failure behavior of an aero engine electronic controller with IFC is studied.The results show that the IFC may impact system behavior without taking the IFC into account,the system maintenance intervals may reduce,and thus the maintenance costs will increase. | Ying CHEN Song YANG Rui KANG | 2020 | Chinese Journal of Aeronautics2020，33，12： | 2 |
| 5 | Evaluation of thermal effects on temperature-sensitive operating force of flow servo valve for fuel metering unit显示文摘The temperature-induced variation in operating force of flow control valves may result in performance degradation or even jam faults of fuel metering unit(FMU), which significantly affects the safety of aircrafts. In this work, an analytical modeling approach of temperature-sensitive operating-force of servo valve is proposed to investigate the temperature characteristics in varying temperature conditions. Considering the temperature effects, a new extended model of flow force is built and an analytical model of valve friction is also derived theoretically based on the dynamic clearance induced by thermal effects. The extremum condition of friction is obtained to analyze the characteristic-temperature points where jam faults occur easily. The numerical results show that flow force increases firstly and then decreases as temperature increases under a constant valve opening. The maximum friction of flow servo valve can be uniquely determined when the structural parameters and ambient temperature are given. The worst situation just happens at the characteristic-temperature points, which are linearly related to the axial temperature gradients of valve spool. Such evaluations may give an explanation for the temperature-induced jam faults of vulnerable valves and provide a reference for designers to determine a suitable workingtemperature range of valves in practice. | Yang ZHANG Shaoping WANG Jian SHI Xi WANG | 2020 | Chinese Journal of Aeronautics2020，33，6： | 2 |
| 6 | 软件异构冗余执行系统的安全能力分析显示文摘软件冗余执行(SRE)基于故障随机发生的性质,实现对软硬件故障的容错处理,是常见的容错设计方法。软件异构冗余执行(SHRE)则在SRE的基础上利用软件多样化特征,通过冗余执行相同功能的异构软件副本,表决执行结果来抵御软件漏洞和同质化威胁。基于此,提出了SHRE系统的分类方法,引入了SHRE系统的安全能力概念,考虑N模冗余、I/O操作模式以及受攻击软件副本的恢复能力,分析了不同结构SHRE系统的安全性。分析结果显示,SHRE系统在三模冗余且受攻击软件副本具备恢复能力的情况下安全能力表现最好,缩短受攻击软件副本的恢复时间能够提高系统安全性。 | 马博林 张铮 任权 张高斐 邬江兴 | 2021 | 通信学报2021，42，9： | 2 |
| 7 | Research on the logic monitoring method for the cloud computing based safety computer显示文摘With the development of railway construction in China,the computing demand of the train control system is increasing day by day.The application of cloud computing technology on the rail transit signal system has become a research hotspot in recent years.How to improve the safety and availability of the safety computer platform in the cloud computing environment is the key problem when applying cloud computing to the train operation control system.Since the cloud platform is in an open network environment,fac-ing many security vulnerabilities and malicious network attacks,it is necessary to monitor the operation of computer programmes through edge safety nodes.Firstly,this paper encrypts the logical monitoring method,and then proposes a secure computer de fence model based on the dynamic heterogeneous redundancy structure.Then the continuous time Markov chain(CTMC)is used to quantitatively solve the stable probability of the system,and the influence of different logical monitoring methods on the anti-attack performance of the system is analysed.Finally,the experiment proves that the dynamic heterogeneous redundancy structure composed of encryption logic monitoring can guarantee the safe and stable operation of the safety computer more effectively. | Yaran Yang Lianchuan Ma Tao Tang Huan Ding Zhen Liu | 2023 | Transportation Safety and Environment2023，5，2： | 1 |
| 8 | An energy-based coupling degradation propagation model and its application to aviation actuation system显示文摘The degradation of components in complex mechatronic systems involves multiple physical processes which will cause coupling interactions among nodes in the system.The interaction of nodes may be carried out not only by physical connections but also by the environment which cannot be described by single network using the traditional methods.In order to give out a unified model to quantitatively describe the coupling degradation spreading by both physical connections and environment,a novel Energy-Flow-Field Network(EFFN)and a coupling degradation model based on EFFN are proposed in this paper.The EFFN is driven by energy flow and the state transition of spatially related nodes is triggered by the dissipation energy.An application is conducted on aviation actuation system in which the degradation spreading by fluid-thermal-solid interaction is considered.The degradation path and the most probable fault reason can be obtained by combining the state transition and energy output of nodes,which is consistent with the given scenario. | Tongyang LI Shaoping WANG Jian SHI Enrico ZIO Xiaoyu CUI | 2020 | Chinese Journal of Aeronautics2020，33，4： | 1 |
| 9 | 基于Petri网的终端区ADS-B监视系统及其可靠性研究显示文摘为辅助塔台管制人员决策,提升航空器运行安全性,提出一种以广播式自动相关监视(ADS-B)数据为数据源的终端区监视系统。首先,基于系统需求分析系统架构特征,利用面向对象Petri网(OOPN)灵活、易于模块化设计等优点,将复杂系统模块化,分别建立子系统模型,依据子系统间的交互关系建立整体系统简化模型,并分析模型的可靠性;然后,设计ADS-B数据流实时传输引擎,利用无线传输的方式提升数据使用效率,然后,设计ADS-B数据流实时传输引擎,利用无线传输的方式提升数据使用效率,有效传输虚拟系统与外部实体之间的数据;最后,基于虚幻引擎(UE4)平台,构建虚拟现实仿真系统,实时监视机场及周围一定范围内的航空器。实时监视机场及周围一定范围内的航空器。结果表明:该系统建模方法能提高系统的模块性和可靠性,增强系统逻辑结构的易分析性,构建的系统可以安全、可靠地实现终端区监视功能。 | 沈笑云 张硕 张思远 焦卫东 | 2023 | 中国安全科学学报2023，33，10： | 0 |
| 10 | Research on anti-attack performance of a private cloud safety computer based on the Markov-Percopy dynamic heterogeneous redundancy structure显示文摘With the increasing computing demand of train operation control systems,the application of cloud computing technology on safety computer platforms of train control system has become a research hotspot in recent years.How to improve the safety and availability of private cloud safety computers is the key problem when applying cloud computing to train operation control systems.Because the cloud computing platform is in an open network environment,it can face many security loopholes and malicious network at-tacks.Therefore,it is necessary to change the existing safety computer platform structure to improve the attack resistance of the private cloud safety computer platform,thereby enhancing its safety and reliability.Firstly,a private cloud safety computer platform architecture based on dynamic heterogeneous redundant(DHR)structure is proposed,and a dynamic migration mechanism for heterogeneous executives is designed.Then,a generalized stochastic Petri net(GSPN)model of a private cloud safety computer platform based on DHR is established,and its steady-state probability is solved by using its isomorphism with the continuous-time Markov model(CTMC)to analyse the impact of different system structures and executive migration mechanisms on the system's anti-attack performance.Finally,through experimental verifcation,the system structure proposed in this paper can improve the anti-attack capability of the private cloud safety computer platform,thereby improving its safety and reliability. | Jiakun Wen Zhen Liu Huan Ding | 2023 | Transportation Safety and Environment2023，5，4： | 0 |
您所在的机构暂未开通此部分的功能，请联系管理员