Leadership Hijacking in Docker Swarm and Its Consequences

With the advent of microservice-based software architectures, an increasing number of modern cloud environments and enterprises use operating system level virtualization, which is often referred to as container infrastructures. Docker Swarm is one of the most popular container orchestration infrastructures, providing high availability and fault tolerance. Occasionally, discovered container escape vulnerabilities allow adversaries to execute code on the host operating system and operate within the cloud infrastructure. We show that Docker Swarm is currently not secured against misbehaving manager nodes. This allows a high impact, high probability privilege escalation attack, which we refer to as leadership hijacking, the possibility of which is neglected by the current cloud security literature. Cloud lateral movement and defense evasion payloads allow an adversary to leverage the Docker Swarm functionality to control each and every host in the underlying cluster. We demonstrate an end-to-end attack, in which an adversary with access to an application running on the cluster achieves full control of the cluster. To reduce the probability of a successful high impact attack, container orchestration infrastructures must reduce the trust level of participating nodes and, in particular, incorporate adversary immune leader election algorithms.     

移动云计算中基于LBS的个性化服务推荐模型

随着智能手机的普及和3G技术的发展,信息呈指数式增长,从海量的信息中提取出用户感兴趣的内容已成为电子商务发展的一个重要趋势,然而传统的推荐策略已不能满足用户的需求.为此,基于移动云计算和位置信息,提出了一个个性化服务推荐模型解决方案,该方案综合了社交网络和时效性,建立了用户兴趣模型库.基于这个解决方案,在Android平台上,实现了初步的个性化图片推荐模型,取得了不错的效果.个性化服务推荐系统具有良好的发展和应用前景,能有效的保留客户,提高电子商务系统的服务能力,带来巨大的效益,具有一定的理论和现实意义.     

AaaS:Agent云平台研究与实现

云计算是一种通过互联网将各种资源按照一定的方法整合在一起,以服务的形式向外提供的商业模式,有着良好的发展前景.Agent技术拥有其他技术无法比拟的智能性,并在各个领域都得到了广泛的应用.但Agent软件的系统开发、部署、运行以及维护仍采用传统的技术方案,无论在硬件还是软件设施上都存在着严重的浪费,因此将云计算与Agent技术结合起来,建立基于云计算的Agent平台(AaaS),来解决上述存在的问题,利用虚拟化技术解决硬件资源的浪费,设计开发Agent开发工具箱(ADT)以统一的标准来开发和部署Agent,提供云控制器来实时监测Agent的运行状态,进而动态的解决Agent运行时存在的问题.     

Intra-Nuclear Cascade (INC) code for simulation of meson photoproduction in nuclei

η meson photoproduction in the ¹⁴N nucleus was studied using simulations done with INC (Intra-Nuclear Cascade) code. The probability for mesons and nucleons to escape the nucleus on different steps of the reaction was evaluated. These results predict the possibility of studying elastic and inelastic η meson interactions with intra-nuclear nucleons using the recoil proton as a tag for the case of slow η meson and fast recoil proton.     

Masses and Widths of Light Scalar Mesons in Chiral Perturbation Theory

Based on the diquark model, we assume that the light scalar mesons are q^2q^-2 states rather than qq^-. The chiral effective Lagrangian for the light scalar meson is constructed, and the mass relations are obtained： the isotriplet （a0） and the isosinglet （f0） are the heaviest and are degenerate, the isodoublets （κ） are heavier and the other isosinglet （σ） is the lightest; and 2Mκ^2 = Mα0^2＋ Mσ^2. Using experimental value for a0 and σ mass, we obtain Mκ=794 MeV, which is consistent with the experimental value. Then taking Г（a0^0 →ηπ^0） = 90 MeV and Г（f0→π^0π^0） = 20 MeV, we get the width of σ is： Г（σ0→π^＋π^-）= 150 MeV.     

Sigma Meson Production in Nuclear Reactions

The sigma meson production in p ＋ ^12C and p A- ^40Ca reactions at the incident energy Ep = 1.5 GeV is investigated within the Quantum Molecular Dynamics model. The simulation results indicate a distinctive A dependence of the sigma production, that is, the increase of A is followed by an increase of the production cross sections. We find that the σ meson production in proton-induced reactions is strongly medium-dependent, and the produced σ mesons decaying in a denser medium experience a stronger mass shift towards lower masses. This mass shift is an experimentally accessible observable in the final state pion pairs, which do not suffer from reabsorption by the surrounding nucleons. It is pointed out that the ratio of measured sigma cross sections as a function of the sigma invariant-mass from various reactions is a good probe to explore the existence of the σ meson in a dense nuclear environment.     

Study of pure annihilation decays B_(d,s)→D~0~0

Within the heavy quark limit and the hierarchy approximation λQCD mD mB, we analyze the B → D00 and Bs → D00 decays, which occur purely via annihilation type diagrams. As a rough estimate, we calculate their branching ratios and CP asymmetries in the perturbative QCD (PQCD) approach. The branching ratio of B → D00 is about 3.8×10-5 that is just below the latest experimental upper limit. The branching ratio of Bs → D00 is about 6.8×10-4, which could be measured in LHC-b. From the calculation, it is found that this branching ratio is not sensitive to the weak phase angle γ. In these two decay modes, there exist CP asymmetries because of the interference between weak and strong interaction. However, these asymmetries are too small to be measured easily.     

关于软坡密子可能的胶子球本质(英文)

通过把坡密子与观察到的量子数为 IGJPC=0+2++的同位旋张量介子联系起来的思想, 研究了坡密子的胶子内涵。 有4个由胶子组成的这样的介子都满足坡密子自旋与质量的关系。 这些坡密子的候选者可能是混杂态。 它们其中之一 f2(2 220)介子可能包含着最大的胶子球成分。 阐明了实验上还不清楚的关于这个介子宽度的问题, 并给出了它的理论下限。 也说明为什么这个介子没有在p实验中发现的原因。 We study the gluonic content of the Pomeron through relating the Pomeron trajectory to the observed IGJPC=0+2++ isoscalar tensor mesons. Four of these mesons satisfy the spin mass relation of the Pomeron. These Pomeronian candidates may be hybrid states. One of them, the f2(2 220) meson, can have a predominant glueball component. We address the unsettled experimental situation about the width of this meson and give a theoretical lower bound for it. We also show why this meson has not been seen in p experiments.     

Possible observation of Kondo screening cloud in Yb14MnSb11 *

ABSTRACT

Single crystals of the underscreened Kondo ferromagnet Yb₁₄MnSb₁₁ were investigated using polarised neutron diffraction and magnetisation measurements. The magnitude and direction of the magnetisation at each of the 9 distinct crystallographic sites was measured using polarised neutron diffraction. A large moment of close to 4.2?μ_B was found at the unique Mn site. A compensating antiferromagnetic moment of ≈?0.5?μ_B was found to be distributed uniformly among the remaining Yb and Sb sites, which was not expected from a previous theoretical calculation. The compensating magnetisation, however, is consistent both in size and magnitude with the expected Kondo screening cloud.