基于隐马尔可夫模型的IDS程序行为异常检测

提出一种新的基于隐马尔可夫模型的程序行为异常检测方法,此方法利用系统调用序列,并基于隐马尔可夫模型来描述程序行为,根据程序行为模式的出现频率对其进行分类,并将行为模式类型同隐马尔可夫模型的状态联系在一起。由于各状态对应的观测值集合互不相交,模型训练中采用了运算量较小的序列匹配方法,与传统的Baum Welch算法相比,训练时间有较大幅度的降低。考虑到模型中状态的特殊含义以及程序行为的特点,将加窗平滑后的状态序列出现概率作为判决依据。实验表明,此方法具有很高的检测准确性,其检测效率也优于同类方法。     

半隐式半Lagrangian时间积分及其可扩展并行算法设计

目前谱模式仍然是全球数值天气预报业务模式的主流。针对全球数值天气预报谱模式,研究两个时间层的半隐式半Lagrangian时间积分格式以及用于计算起始点的准三次空间插值方法,提出了按需通讯的可扩展并行算法设计,在由4个双CPUSMP结点组成的Linux机群环境下,该算法的8任务相对于4任务的加速比达到了1.65,取得了良好的并行效果。     

深弹武器系统效能分析

针对火箭深弹反潜武器系统的组成及其特点,运用可靠性理论和效能评估理论分析系统的作战效能.利用随机过程理论中的马尔可夫过程理论,采用美国工业武器系统效能咨询委员会(WSEIAC)提出的ADC效能模型,建立了系统的效能评估模型.借助Matlab工具对该效能模型进行了仿真研究,经对仿真结果分析后表明,该模型能较符合实际地反映系统各组成要素性能对系统总体效能的影响,较好地满足系统效能评价的需求,有助于系统装备的研制和战术使用决策.     

机动目标建模及机动检测算法

为解决机动目标跟踪问题,建立了非机动(匀速直线运动)和机动目标当前统计两种动态模型,并对机动目标当前统计模型的输入控制的估计进行了适当改进.同时对非机动模型的观测残差和机动模型的输入估计进行检验,以便准确检测目标机动.     

Robust shortest path planning and semicontractive dynamic programming

In this article, we consider shortest path problems in a directed graph where the transitions between nodes are subject to uncertainty. We use a minimax formulation, where the objective is to guarantee that a special destination state is reached with a minimum cost path under the worst possible instance of the uncertainty. Problems of this type arise, among others, in planning and pursuit‐evasion contexts, and in model predictive control. Our analysis makes use of the recently developed theory of abstract semicontractive dynamic programming models. We investigate questions of existence and uniqueness of solution of the optimality equation, existence of optimal paths, and the validity of various algorithms patterned after the classical methods of value and policy iteration, as well as a Dijkstra‐like algorithm for problems with nonnegative arc lengths.© 2016 Wiley Periodicals, Inc. Naval Research Logistics 66:15–37, 2019     

近地卫星Ka频段数传链路抗雨衰自适应模式设计

针对近地卫星数传时的信道时变性和严重的Ka频段雨衰现象,采用自适应编码调制(Adaptive Coding and Modulation, ACM)技术能够充分利用链路资源,相对于传统的固定编码调制方式,进一步提高链路的数据吞吐量。提出近地卫星Ka频段数传链路ACM模式设计方法,在降雨环境下建立Ka频段数传链路模型,根据链路预算的信道状况确定ACM选用模式;采用基于导频符号的最大似然信噪比估计算法结合移动平均的平滑方法实现信道估计,有效地减小了估计值的波动。仿真结果表明,无论晴天还是雨天,采用提出的卫星数传链路ACM模式设计方法,能够在保证系统可靠性的同时获取较高的数据吞吐量。     

Stage life testing

In progressive censoring, items are removed at certain times during the life test. Commonly, it is assumed that the removed items are used for further testing. In order to take into account information about these additional testing in inferential procedures, we propose a two‐step model of stage life testing with one fixed stage‐change time which incorporates information about both the removed items (further tested under different conditions) and those remaining in the current life test. We show that some marginal distributions in our model correspond either to progressive censoring with a fixed censoring time or to a simple‐step stress model. Furthermore, assuming a cumulative exposure model, we establish exact inferential results for the distribution parameters when the lifetimes are exponentially distributed. An extension to Weibull distributed lifetimes is also discussed.     

Pairwise model discrimination with applications in lifetime distributions and degradation processes

Reliability data obtained from life tests and degradation tests have been extensively used for purposes such as estimating product reliability and predicting warranty costs. When there is more than one candidate model, an important task is to discriminate between the models. In the literature, the model discrimination was often treated as a hypothesis test and a pairwise model discrimination procedure was carried out. Because the null distribution of the test statistic is unavailable in most cases, the large sample approximation and the bootstrap were frequently used to find the acceptance region of the test. Although these two methods are asymptotically accurate, their performance in terms of size and power is not satisfactory in small sample size. To enhance the small‐sample performance, we propose a new method to approximate the null distribution, which builds on the idea of generalized pivots. Conventionally, the generalized pivots were often used for interval estimation of a certain parameter or function of parameters in presence of nuisance parameters. In this study, we further extend the idea of generalized pivots to find the acceptance region of the model discrimination test. Through extensive simulations, we show that the proposed method performs better than the existing methods in discriminating between two lifetime distributions or two degradation models over a wide range of sample sizes. Two real examples are used to illustrate the proposed methods.     

高超声速滑翔导弹气动参数自适应跟踪建模

针对高超声速滑翔导弹跟踪中状态模型构建问题,研究基于制导变量变化规律的气动参数建模方法。对气动参数进行分析,指出传统建模方法的缺点。在假设制导变量服从一阶时滞过程的前提下,利用线性化的气动系数推导气动参数模型,通过分析不同飞行状态下的模型变式,证明模型对目标机动具有自适应性。对模型中未知参数的取值问题进行讨论,实现模型与飞行状态的自适应匹配。仿真结果表明：当目标发生机动时,所提模型性能明显优于传统模型。同时,在不同滤波器参数条件下的仿真结果进一步证实了模型的有效性。     

军事攻防中的多属性资源分配对策模型

针对资源受限情形下的两阶段攻防资源分配问题,提出一种基于多属性决策的资源分配对策模型。防守者首先将有限的防护资源分配到不同的目标上,继而进攻者选择一种威胁组合方式对目标实施打击。基于博弈论相关知识,模型的求解结果可以使防守者最小化自身损失,使进攻者最大化进攻收益。同时,针对模型的特点,给出了一些推论和证明。通过一个示例验证了模型的合理性以及相关推论的准确性,能够为攻、防双方规划决策提供辅助支持。