安全协议的形式化方法概述

介绍了安全协议的形式化分析思路,阐述了安全协议形式化描述、需求、验证及设计四个方面的研究状况和它们的基本原理,并对常用的几种形式化验证技术的优缺点进行了分析,最后针对形式化技术在该领域的发展前景提出了自己的见解。     

面向敌方作战行动过程的本体构建

为使各级指挥员系统一致地理解敌方在某阶段作战的内涵及执行过程,对敌方作战行动过程的形式化描述方法进行深入研究.在理解态势分析过程和实质的基础上,提出基于知识发现的敌方作战行动过程构建框架,利用六元组结构给出其形式化定义.对作战行动过程中所涉及到的概念属性集及其层次关系进行详细描述,通过UML建模语言构建作战行动过程本体模型.结果表明:该研究可表达敌方在执行某一作战行动过程中的整体特征规律,并实现战场态势内容共享.     

单向网络安全设备的分析与证明

单向网络安全设备是不同密级间网络信息传输的主要安全设备。为保证单向网络安全设备内部的安全性和通信系统的安全性，分析了单向网络安全设备的安全需求，提出无干扰模型形式化建模，用数学归纳法证明单向网络安全设备安全需求与形式化策略规约的一致性；并针对单向网络安全设备存在的安全隐患进行分析与讨论，总结出更加完善安全策略，确保信息安全。这为单向网络安全设备的安全性设计提供了一定的借鉴意义。     

基于用户社群关系的Web服务发现研究

Web service discovery was the key problem in the study of the Web application.Multiple user community relations between each other on the result of Web service discovery was studied,the user community relations was decomposed into predilection relation,clustering and trust relation,while describing the methods of formalization.Based on the formalized community relations a differential service discovery strategy was put forward,a Web service discovery system framework was built,which can retrieve or recommend candidate Web services step by step to produce the final result according to the “from strong to weak” principle in terms of the correlation between Web service and the user interest background.The experimental results show that proposed method can effectively improve the efficiency and precision of Web service discovery.     

基于SAT的安全协议惰性形式化分析方法

提出了一种基于布尔可满足性问题的安全协议形式化分析方法SAT-LMC,通过引入惰性分析的思想优化初始状态与转换规则,提高了安全性的检测效率。另一方面,通过在消息类型上定义偏序关系,SAT-LMC能够检测出更丰富的类型缺陷攻击。基于此方法实现了一个安全协议分析工具,针对Otway-Rees协议检测出了一种类型缺陷攻击;针对OAuth2.0协议,检测结果显示对现实中存在的一些应用场景,存在一种利用授权码截取的中间人攻击。     

Generating three-tier applications from relational databases: a formal and practical approach

This article describes a method for building applications with a three-tier structure (presentation, business, persistence) from an existing relational database. The method works as a transformation function that takes the relational schema as its input, producing three sets of classes (which depend on the actual system being reengineered) to represent the final application, as well as some additional auxiliary classes (which are ‘constant’ and always generated, such as an ‘About’ dialog, for example). All the classes generated are adequately placed along the three-tiers.The method is based on (1) the formalization of all the sets involved in the process, and (2) the mathematical formulation of the required functions to get the final application. For this second step, we have taken into account several well-known, widely used design and transformation patterns that produce high quality designs and highly maintainable software.The method is implemented in a tool that we have successfully used in several projects of medium size. Obviously, it is quite difficult for the obtained software to fulfill all the requirements desired by the customer, but the uniformity and understandability of its design makes very easy its modification.     

Formalization of interrelations between operators and data within the framework of an extended algebra of algorithms

A system of algorithmic algebras is considered whose basic concepts are newly interpreted to formalize the interrelation between operators and data of such a system. A modified formal instrument is constructed that extends the possibilities of design and transformation of regular schemes of algorithms. Translated from Kibernetika i Sistemnyi Analiz, No. 6, pp. 170–182, November–December 2008.     

规范房地产市场研究

房地产是国民经济支柱产业，房地产市场是房地产经济活动和运行的载体。我国当代房地产市场形成的时间较晚，但是发展的速度很快，与国外相比，我国房地产市场还很不规范，这些问题不解决，必将影响我国房地产经济的健康发展，同时也会给国民经济的发展造成不利影响。     

基于XML的富媒体发布流程的优化及比较

介绍了富媒体内容对网络服务器所带来的负载压力．在对负载类型进行统计分析的基础上,详细阐述了优化后富媒体发布方式的页面解析规则、实现过程,以及安全性设置．并测试和比较了传统发布方式和优化后的发布方式对服务器造成的负载压力．     

Computation of words satisfying the “rhythmic oddity property” (after Simha Arom's works)

This paper addresses the problem of enumerating all words having a combinatoric property called “rhythmic oddity property”. This enumeration is motivated by the fact that this property is satisfied by many rhythmic patterns used in traditional Central African music.