Anomaly detection has been an active research topic in the field of network intrusion detection for many years. A novel method is presented for anomaly detection based on system calls into the kernels of Unix or Linux...Anomaly detection has been an active research topic in the field of network intrusion detection for many years. A novel method is presented for anomaly detection based on system calls into the kernels of Unix or Linux systems. The method uses the data mining technique to model the normal behavior of a privileged program and uses a variable-length pattern matching algorithm to perform the comparison of the current behavior and historic normal behavior, which is more suitable for this problem than the fixed-length pattern matching algorithm proposed by Forrest et al. At the detection stage, the particularity of the audit data is taken into account, and two alternative schemes could be used to distinguish between normalities and intrusions. The method gives attention to both computational efficiency and detection accuracy and is especially applicable for on-line detection. The performance of the method is evaluated using the typical testing data set, and the results show that it is significantly better than the anomaly detection method based on hidden Markov models proposed by Yan et al. and the method based on fixed-length patterns proposed by Forrest and Hofmeyr. The novel method has been applied to practical hosted-based intrusion detection systems and achieved high detection performance.展开更多
The Zaibian mafic-ultramafic rock is located in the transitional zone of the Yangtze craton and south China fold system,where is the southwest of Jiangnan orogenic belt(Zeng et al.,2003;Wang et al.,in press).
The Ni-Cu-platinum group element sulfide ore deposits of the Kharaelakh Intrusion,Noril′sk Region,Siberia,represent a large concentration of sulfides associated with a small differentiated intrusion formed at the edg...The Ni-Cu-platinum group element sulfide ore deposits of the Kharaelakh Intrusion,Noril′sk Region,Siberia,represent a large concentration of sulfides associated with a small differentiated intrusion formed at the edge of the Siberian Craton in the roots of the Siberian Trap flood basalt.The deposit is associated with an intrusion that occupies a flanking periclinal structure adjacent to the Noril′sk-Kharaelakh Fault.The intrusion is strongly differentiated and comprises taxitic gabbrodolerites,picritic gabbrodolerites,and gabbrodolerites within the main body which in turn forms a chonolith within a sheet-like intrusion that extends laterally to form extensive undifferentiated sills of gabbrodolerite.The intrusion substantially replaces the stratigraphy of the country rocks,and although it appears to have exploited the axis of structures developed in response to transtension,the intrusion has created space by both mechanical dilation of stratigraphy and magmatic replacement of pre-existing sedimentary rocks.The frontal lobes of the main intrusion have complex apophyses of gabrodolerite on a range of scales that demonstrate replacement of the sedimentary rocks and link to the development of an extensive metamorphic halo in the country rocks.This halo is much narrower over the main body of the intrusion,and these observations have implications for the thermal history of the intrusion.Mg-skarns and breccias are developed in the roof of the main body of the intrusion.Within the intrusion,the taxitic rocks contain vesicles and the blebby sulfides developed in the picritic and taxitic gabbrodolerites appear to have a linkage to volatile phases.Cuprous sulfide mineralization developed at the roof of the Kharaelakh Intrusion is associated with metamorphosed and skarn-bearing country rocks,and appears to have been generated by a combination of sulfide fractionation and associated metasomatism.The geological relationships appear consistent with a chonolith model for the development of the differentiated intrusion and mineralization,but the extent of metasmorphism of the country rocks appears to be related to the unusual thickness of gabbrodolerite apophyses at the flanks of the intrusion rather than metamorphism produced by the passage of mafic magma through the intrusion.Variations in disseminated sulfide compositions and metasomatic textures in the skarns are described,and a model is proposed which balances traditional views on the evolution of the magma conduits with the impact of magmatic fluids transported through the magma column(i.e.transmagmatic fluids).The importance of structures in controlling the nature of the conduit,and the resultant small intrusions with excess sulfide is a feature of many other Ni-Cu sulfide deposits including Voisey′s Bay,and it is suggested that the sulfides are more likely to have beentransported from depth into their final resting place rather than developed by in-situ equilibration of sulfide with fresh magma in the chonolith.展开更多
Network security problems bring many imperceptible threats to the integrity of data and the reliability of device services,so proposing a network intrusion detection model with high reliability is of great research si...Network security problems bring many imperceptible threats to the integrity of data and the reliability of device services,so proposing a network intrusion detection model with high reliability is of great research significance for network security.Due to the strong generalization of invalid features during training process,it is more difficult for single autoencoder intrusion detection model to obtain effective results.A network intrusion detection model based on the Ensemble of Denoising Adversarial Autoencoder(EDAAE)was proposed,which had higher accuracy and reliability compared to the traditional anomaly detection model.Using the adversarial learning idea of Adversarial Autoencoder(AAE),the discriminator module was added to the original model,and the encoder part was used as the generator.The distribution of the hidden space of the data generated by the encoder matched with the distribution of the original data.The generalization of the model to the invalid features was also reduced to improve the detection accuracy.At the same time,the denoising autoencoder and integrated operation was introduced to prevent overfitting in the adversarial learning process.Experiments on the CICIDS2018 traffic dataset showed that the proposed intrusion detection model achieves an Accuracy of 95.23%,which out performs traditional self-encoders and other existing intrusion detection models methods in terms of overall performance.展开更多
The Baishiquan and Pobei Early Permian mafic-ultramafic intrusions were emplaced into Proterozoic metamorphic rocks in the Central Tianshan and the Beishan Fold Belt,northern Xinjiang,NW China.The Baishiquan intrusion...The Baishiquan and Pobei Early Permian mafic-ultramafic intrusions were emplaced into Proterozoic metamorphic rocks in the Central Tianshan and the Beishan Fold Belt,northern Xinjiang,NW China.The Baishiquan intrusion comprises mainly gabbro,and mela-gabbro sills occur within and along the margins of the gabbro body.In the Pobei intrusion,two distinct gabbroic packages,a lower gabbro and the main gabbro,are intruded and overlain by small cumulate wehrlite bodies.展开更多
基金supported by the National Grand Fundamental Research "973" Program of China (2004CB318109)the National High-Technology Research and Development Plan of China (2006AA01Z452)the National Information Security "242"Program of China (2005C39).
文摘Anomaly detection has been an active research topic in the field of network intrusion detection for many years. A novel method is presented for anomaly detection based on system calls into the kernels of Unix or Linux systems. The method uses the data mining technique to model the normal behavior of a privileged program and uses a variable-length pattern matching algorithm to perform the comparison of the current behavior and historic normal behavior, which is more suitable for this problem than the fixed-length pattern matching algorithm proposed by Forrest et al. At the detection stage, the particularity of the audit data is taken into account, and two alternative schemes could be used to distinguish between normalities and intrusions. The method gives attention to both computational efficiency and detection accuracy and is especially applicable for on-line detection. The performance of the method is evaluated using the typical testing data set, and the results show that it is significantly better than the anomaly detection method based on hidden Markov models proposed by Yan et al. and the method based on fixed-length patterns proposed by Forrest and Hofmeyr. The novel method has been applied to practical hosted-based intrusion detection systems and achieved high detection performance.
基金National Basic Research Program of China(No.2007CB411402)Cooperation Program of Institute of Geochemistry and Guizhou Geology and Minerals Bureau 102 Geology Group
文摘The Zaibian mafic-ultramafic rock is located in the transitional zone of the Yangtze craton and south China fold system,where is the southwest of Jiangnan orogenic belt(Zeng et al.,2003;Wang et al.,in press).
基金Key Laboratory for the Study of Focused Magmatism and Giant Ore Deposits,MLR
文摘The Ni-Cu-platinum group element sulfide ore deposits of the Kharaelakh Intrusion,Noril′sk Region,Siberia,represent a large concentration of sulfides associated with a small differentiated intrusion formed at the edge of the Siberian Craton in the roots of the Siberian Trap flood basalt.The deposit is associated with an intrusion that occupies a flanking periclinal structure adjacent to the Noril′sk-Kharaelakh Fault.The intrusion is strongly differentiated and comprises taxitic gabbrodolerites,picritic gabbrodolerites,and gabbrodolerites within the main body which in turn forms a chonolith within a sheet-like intrusion that extends laterally to form extensive undifferentiated sills of gabbrodolerite.The intrusion substantially replaces the stratigraphy of the country rocks,and although it appears to have exploited the axis of structures developed in response to transtension,the intrusion has created space by both mechanical dilation of stratigraphy and magmatic replacement of pre-existing sedimentary rocks.The frontal lobes of the main intrusion have complex apophyses of gabrodolerite on a range of scales that demonstrate replacement of the sedimentary rocks and link to the development of an extensive metamorphic halo in the country rocks.This halo is much narrower over the main body of the intrusion,and these observations have implications for the thermal history of the intrusion.Mg-skarns and breccias are developed in the roof of the main body of the intrusion.Within the intrusion,the taxitic rocks contain vesicles and the blebby sulfides developed in the picritic and taxitic gabbrodolerites appear to have a linkage to volatile phases.Cuprous sulfide mineralization developed at the roof of the Kharaelakh Intrusion is associated with metamorphosed and skarn-bearing country rocks,and appears to have been generated by a combination of sulfide fractionation and associated metasomatism.The geological relationships appear consistent with a chonolith model for the development of the differentiated intrusion and mineralization,but the extent of metasmorphism of the country rocks appears to be related to the unusual thickness of gabbrodolerite apophyses at the flanks of the intrusion rather than metamorphism produced by the passage of mafic magma through the intrusion.Variations in disseminated sulfide compositions and metasomatic textures in the skarns are described,and a model is proposed which balances traditional views on the evolution of the magma conduits with the impact of magmatic fluids transported through the magma column(i.e.transmagmatic fluids).The importance of structures in controlling the nature of the conduit,and the resultant small intrusions with excess sulfide is a feature of many other Ni-Cu sulfide deposits including Voisey′s Bay,and it is suggested that the sulfides are more likely to have beentransported from depth into their final resting place rather than developed by in-situ equilibration of sulfide with fresh magma in the chonolith.
文摘Network security problems bring many imperceptible threats to the integrity of data and the reliability of device services,so proposing a network intrusion detection model with high reliability is of great research significance for network security.Due to the strong generalization of invalid features during training process,it is more difficult for single autoencoder intrusion detection model to obtain effective results.A network intrusion detection model based on the Ensemble of Denoising Adversarial Autoencoder(EDAAE)was proposed,which had higher accuracy and reliability compared to the traditional anomaly detection model.Using the adversarial learning idea of Adversarial Autoencoder(AAE),the discriminator module was added to the original model,and the encoder part was used as the generator.The distribution of the hidden space of the data generated by the encoder matched with the distribution of the original data.The generalization of the model to the invalid features was also reduced to improve the detection accuracy.At the same time,the denoising autoencoder and integrated operation was introduced to prevent overfitting in the adversarial learning process.Experiments on the CICIDS2018 traffic dataset showed that the proposed intrusion detection model achieves an Accuracy of 95.23%,which out performs traditional self-encoders and other existing intrusion detection models methods in terms of overall performance.
文摘The Baishiquan and Pobei Early Permian mafic-ultramafic intrusions were emplaced into Proterozoic metamorphic rocks in the Central Tianshan and the Beishan Fold Belt,northern Xinjiang,NW China.The Baishiquan intrusion comprises mainly gabbro,and mela-gabbro sills occur within and along the margins of the gabbro body.In the Pobei intrusion,two distinct gabbroic packages,a lower gabbro and the main gabbro,are intruded and overlain by small cumulate wehrlite bodies.
