基于PROBE的DDOS攻击检测分析

分布式拒绝服务(DDOS)攻击是目前严重威胁网络安全和影响网站服务质量的一种攻击手段DDOS攻击就是利用多个分布式攻击源向攻击对象发送超出攻击目标处理能力的海量数据包,来消耗可用系统和带宽资源,从而导致网络服务瘫痪的一种攻击.目前有很多方法检测和防御DDOS攻击,传统的检测和防范措施是基于特征匹配的检测往往要求有一定的先验知识难以区分突发正常流量与DDOS攻击.本文通过介绍PROBE技术来检测应对DDOS攻击,并探究了PROBE在DDOS攻击检测中的应用策略.     

Face presentation attack detection based on chromatic co-occurrence of local binary pattern and ensemble learning

To counter face presentation attacks in face recognition (FR), color texture has been successfully used for face presentation attack detection (PAD) in recent years. However, the existing research does not fully consider the correlation between different color channels as well as the optimization of classification for face PAD. To resolve these limitations, a face PAD scheme based on chromatic co-occurrence of local binary pattern (CCoLBP) and ensemble learning (EL) is proposed in this paper. A color distortion-based face PAD model is first built, and then the chromatic discrepancies between bona fide faces and artefacts are analyzed. After that, CCoLBP is extracted as the feature to characterize these discrepancies. Meanwhile, an EL based classifier is put forward to reduce the effect of class imbalance and to improve the generalization ability. Experimental results and analysis indicate that the proposed scheme can achieve an overall good performance. Moreover, it can achieve significant improvement in the cross-database test, and its computational complexity can meet the requirement of real time applications.     

基于边缘检测的多聚焦彩色图像融合算法

针对左聚焦和右聚焦彩色图像的融合问题,设计了一种基于边缘检测的彩色图像融合算法。首先将彩色图像转换为NTSC图像,再利用Canny方法检测出亮度信息图像的最优边缘,然后对亮度信息图像的边缘部分采用平均法进行融合,其余部分采用相关系数的权值法进行融合,最后将融合之后的饱和度图像、亮度图像和色调图像转换为彩色图像。从融合效果来看,文中算法能够将两幅左右聚焦的彩色图像融合成一幅信息量饱满且清晰的单一聚焦彩色图像。实验结果和信息熵客观评价结论表明,该彩色融合算法能够将信息熵提高2.13%～2.51%。     

基于深度多级小波变换的图像盲去模糊算法

近年来卷积神经网络广泛应用于单幅图像去模糊问题,卷积神经网络的感受野大小、网络深度等会影响图像去模糊算法性能。为了增大感受野以提高图像去模糊算法的性能,该文提出一种基于深度多级小波变换的图像盲去模糊算法。将小波变换嵌入编-解码结构中,在增大感受野的同时加强图像特征的稀疏性。为在小波域重构高质量图像,该文利用多尺度扩张稠密块提取图像的多尺度信息,同时引入特征融合块以自适应地融合编-解码之间的特征。此外,由于小波域和空间域对图像信息的表示存在差异,为融合这些不同的特征表示,该文利用空间域重建模块在空间域进一步提高重构图像的质量。实验结果表明该文方法在结构相似度(SSIM)和峰值信噪比(PSNR)上具有更好的性能,而且在真实模糊图像上具有更好的视觉效果。

     

DDoS attack detection and defense based on hybrid deep learning model in SDN

Software defined network (SDN) is a new kind of network technology,and the security problems are the hot topics in SDN field,such as SDN control channel security,forged service deployment and external distributed denial of service (DDoS) attacks.Aiming at DDoS attack problem of security in SDN,a DDoS attack detection method called DCNN-DSAE based on deep learning hybrid model in SDN was proposed.In this method,when a deep learning model was constructed,the input feature included 21 different types of fields extracted from the data plane and 5 extra self-designed features of distinguishing flow types.The experimental results show that the method has high accuracy,it’s better than the traditional support vector machine (SVM) and deep neural network (DNN) and other machine learning methods.At the same time,the proposed method can also shorten the processing time of classification detection.The detection model is deployed in SDN controller,and the new security policy is sent to the OpenFlow switch to achieve the defense against specific DDoS attack.     

Image super-resolution reconstruction based on sparse representation and deep learning

Super-resolution reconstruction technology has important scientific significance and application value in the field of image processing by performing image restoration processing on one or more low-resolution images to improve image spatial resolution. Based on the SCSR algorithm and VDSR network, in order to further improve the image reconstruction quality, an image super-resolution reconstruction algorithm combined with multi-residual network and multi-feature SCSR(MRMFSCSR) is proposed. Firstly, at the sparse reconstruction stage, according to the characteristics of image blocks, our algorithm extracts the contour features of non-flat blocks by NSCT transform, extracts the texture features of flat blocks by Gabor transform, then obtains the reconstructed high-resolution (HR) images by using sparse models. Secondly, according to improve the VDSR deep network and introduce the feature fusion idea, the multi-residual network structure (MR) is designed. The reconstructed HR image obtained by the sparse reconstruction stage is used as the input of the MR network structure to optimize the high-frequency detail residual information. Finally, we can obtain a higher quality super-resolution image compared with the SCSR algorithm and the VDSR algorithm.     

采用信息融合的红外目标检测算法

针对空中红外目标检测过程中存在的检测精度不高、易受干扰等问题,本文提出了一种信息融合的目标检测算法。首先,针对单一滤波模式的不足,采用降采样方式将多种模式的滤波方法进行融合,有效提高了滤波后的图像信噪比,减少了预处理时间。然后,对质心检测选定的检测区域进行显著性检测和边缘检测,并将结果进行融合,增强了目标区域的信号强度,改善了算法的检测精度。文中从理论上介绍和分析了该算法对红外目标检测的有效性,并通过Matlab仿真实验与其他单一检测算法进行了对比。实验结果表明,信息融合的检测算法能够在多种复杂情况下有效检测出空中红外目标,证明融合检测算法的抗干扰性和适应性上更强、检测精度更高、算法的鲁棒性更好。     

DISTRIBUTED CFAR SIGNAL DETECTION BASED ON AREA FUSION

The multisensor detection area partitioning is considered. An approach is presented to the fusion in each detection area where the sensor uses different thresholds and then at system level. The expressions of the detection probability and false alarm probability are given. An application of the method is illustrated to distributed CFAR detection systems. The result shows that the system detection probability may be improved by setting different thresholds for a detector.     

DNS攻击检测与安全防护研究综述

随着传统互联网逐渐向“互联网+”演变,域名系统（domain namesystem,DNS）从基础的地址解析向全面感知、可靠传输等新模式不断扩展。新场景下的DNS由于功能的多样性和覆盖领域的广泛性,一旦受到攻击会造成严重的后果,因此DNS攻击检测与安全防护方面的研究持续进行并越来越受到重视。首先介绍了几种常见的DNS攻击,包括DNS欺骗攻击、DNS隐蔽信道攻击、DNS DDoS(distributed denial of service)攻击、DNS反射放大攻击、恶意DGA域名;然后,从机器学习的角度出发对这些攻击的检测技术进行了系统性的分析和总结;接着,从DNS去中心化、DNS加密认证、DNS解析限制3个方面详细介绍了DNS的安全防护技术;最后,对未来的研究方向进行了展望。     

The detection method of low-rate DoS attack based on multi-feature fusion

As a new type of Denial of Service (DoS) attacks, the Low-rate Denial of Service (LDoS) attacks make the traditional method of detecting Distributed Denial of Service Attack (DDoS) attacks useless due to the characteristics of a low average rate and concealment. With features extracted from the network traffic, a new detection approach based on multi-feature fusion is proposed to solve the problem in this paper. An attack feature set containing the Acknowledge character(ACK) sequence number, the packet size, and the queue length is used to classify normal and LDoS attack traffics. Each feature is digitalized and preprocessed to fit the input of the K-Nearest Neighbor (KNN) classifier separately, and to obtain the decision contour matrix. Then a posteriori probability in the matrix is fused, and the fusion decision index D is used as the basis of detecting the LDoS attacks. Experiments proved that the detection rate of the multi-feature fusion algorithm is higher than those of the single-based detection method and other algorithms.     

一种平衡准确性以及高效性的显著性目标检测深度卷积网络模型

当前的显著性目标检测算法在准确性和高效性两方面不能实现良好的平衡,针对这一问题,该文提出了一种新的平衡准确性以及高效性的显著性目标检测深度卷积网络模型。首先,通过将传统的卷积替换为可分解卷积,大幅减少计算量,提高检测效率。其次,为了更好地利用不同尺度的特征,采用了稀疏跨层连接结构及多尺度融合结构来提高模型检测精度。广泛的评价表明,与现有方法相比,所提的算法在效率和精度上都取得了领先的性能。

     

基于双重注意力和多尺度特征融合的场景文本检测算法

本文提出了一种场景文本检测方法,用于应对复杂自然场景中文本检测的挑战。该方法采用了双重注意力和多尺度特征融合的策略,通过双重注意力融合机制增强了文本特征通道之间的关联性,提升了整体检测性能。在考虑到深层特征图上下采样可能引发的语义信息损失的基础上,提出了空洞卷积多尺度特征融合金字塔(dilated convolution multi-scale feature fusion pyramid structure, MFPN),它采用双融合机制来增强语义特征,有助于加强语义特征,克服尺度变化的影响。针对不同密度信息融合引发的语义冲突和多尺度特征表达受限问题,创新性地引入了多尺度特征融合模块(multi-scale feature fusion module, MFFM)。此外,针对容易被冲突信息掩盖的小文本问题,引入了特征细化模块(feature refinement module, FRM)。实验表明,本文的方法对复杂场景中文本检测有效,其F值在CTW1500、ICDAR2015和Total-Text 3个数据集上分别达到了85.6%、87.1%和86.3%。     

基于图像融合的木板表面缺陷检测研究

针对木板表面节子缺陷被染料染色后难以识别的问题,本文利用图像融合技术提出一种新的木板表面缺陷检测方法。该方法采集被染色木板的近红外图像和可见光图像,使用加权平均法、主成分分析（PCA）算法、小波变换、Laplacian金字塔变换等不同的融合算法对采集的近红外图像和可见光图像进行融合,然后对不同算法融合后的图像仔细观察分析和比对并计算其信息熵。实验结果证实,融合后的图像能够明显地辨别出染色后的木板缺陷,并且基于Laplacian金字塔算法的融合效果最好。     

基于小波和色彩传递的夜视图像彩色融合技术

提出一种基于小波和色彩传递的夜视图像的彩色融合方法,使观察者更容易获取图像的场景信息。结合红外图像和微光图像各自的特点,利用NRL法把红外图像和微光图像映射到彩色空间形成假彩色图像(源图像),然后通过小波变换对源图像和参考图像进行多分辨率分解,计算不同分辨率下的均值和标准方差,将各分量根据参考图像和源图像的标准方差比进行缩放,把参考图像的色彩分布传递给源图像。实验结果表明,通过与传统方法的比较,本文算法不仅获得真实场景色彩,还可以提高图像的细节信息,改善场景感知。     

基于光强—光谱—偏振信息融合的水下目标检测

由于图像建模及参数估计的困难和复杂性,水下目标检测算法的性能受到了严重影响。受水下生物视觉信息处理机制的启发,针对特殊的水下光学环境提出一种新的基于光强—光谱—偏振的仿生信息融合目标检测方法,能够根据所获得的水下光学先验知识进行适应性特征融合。算法摆脱繁琐的图像预处理过程,以较低的运算复杂度为代价实现可靠的目标检测结果。     

基于图像融合的运动前景检测方法

提出了一种有效的运动前景检测方法。该方法根据图像融合思想,将背景帧与监控视频的当前帧在R,G和B颜色通道分别进行融合,形成包含背景帧和当前帧视觉信息的单一融合图像。之后根据背景区域与前景运动目标在饱和度上存在较大差异的现象,使用大津算法分割融合图像的饱和度分量图,形成运动前景二值图。经形态学处理后,形成了目标区域较完整、背景干净的运动前景检测图。实验结果显示,该算法具有较好的前景检测性能,解决了背景减法过分依赖背景帧的缺陷。     

基于小波变换的双色红外图像融合检测方法

针对复杂背景中/长波红外图像的特点,提出了一种基于小波变换的中/长波红外图像融合检测方法。首先,对原始中/长波红外图像分别进行小波变换,提取出两幅图像的低频和高频信息;然后,分别对图像的低频和高频信息采用不同的融合准则进行融合,并用小波逆变换重建成融合图像,自适应选取阈值,获得最终的目标检测结果。在实验中,采用相同的方法分别用融合图像、单波段红外图像进行目标检测,实验结果证明,用文中提出的融合检测算法优于仅用长波或中波红外图像的目标检测。     

基于特征流融合的带噪语音检测算法

针对语音通话中语音段的起始检测性能不佳,检测语音连续性结构受到破坏的问题,提出了一种基于特征流融合的带噪语音检测算法。首先,根据语音特性分别提取时域特征流、谱图特征流和统计特征流;其次,利用不同的语音特征流分别对带噪音频中的语音段进行概率估测;最后,将各个特征流估测得到的语音估测概率进行加权融合,并利用隐马尔可夫模型对语音估测概率进行短时状态处理。通过对复合语音数据库在多类型噪声与不同信噪比条件下的性能测试表明,所提算法相对于基于贝叶斯与DNN分类器的基线模型相比,语音检测正确率分别提高了21.26%与11.01%,显著提高了目标语音的质量。     

对基于算术编码的一个数据加密算法的已知明文攻击

指出文献[l]设计的数据加密算法在已知明文攻击下是不安全的，基于该加密算法的密文的高位比特对密钥的低位比特的不敏感性，可以利用分割攻击方法求出其全部密钥比特。     

基于颜色传递和目标增强的夜视图像彩色融合

颜色传递是获得夜视图像自然彩色的一种方法,以红外和微光图像为研究对象,提出了一种基于颜色传递和目标增强的夜视图像彩色融合方法。首先结合红外和微光图像各自的特点,采用TNO法生成伪彩色融合图像(目标图像),很好地保留了图像的细节信息,然后选取一幅相近的参考图像,把目标图像和参考图像转换到YCbCr颜色空间进行各个通道一阶(均值)和二阶(标准差)统计量匹配的颜色传递,同时在Cr通道引入一个对比度增强因子来增强图像中的兴趣目标。实验结果表明,文中方法不仅使得夜视图像获得了如白天参考图像般自然、真实的色彩,而且提高了图像的细节,目标也更加突出,更有利于观察者对场景的理解。