Search

Storage–yield–reliability (S–Y–R) relationship is useful in many areas of hydrology and water resources. With the availability of such a relationship, reservoir planning analysis can be implemented much more rapidly and at a much shorter time needed for sequential analysis applying time series data. Existing relationships have been developed mostly for over-year capacity without considering both reliability and vulnerability performance indices. Hence, in this study, streamflow data from Johor river was used to develop a predictive relationship for total (i.e. within-year plus over-year) storage capacity involving both reliability and vulnerability performance indices as for use during reservoir planning. The reservoir was analyzed using 1000 sequences of synthetic data having the same length as historical data involving both time-based reliability and vulnerability performance indices by modified SPA. The model was then calibrated based on the mean of 1000 simulation results. Subsequently, the performance of the model was observed by comparing the model’s results with simulation outcomes for study systems. It was found that the performance of the model was very good in reproducing, the total storage capacity.

This paper presents an approach to the risk of information security. By taking into consideration how critical it is for a system, each category of information should be associated with a correspondent level of security risk and each level of security risk must be defined by appropriate measures to control the risks for information security. Equally important is how many levels of security risk are defined for information, or how they are classified. It is critical, however, that the model adopted reflects all the objectives that the system requires.

In this paper, we study compressed sensing algorithm and image authentication algorithm, present a grayscale image vulnerability authentication system based on compressed sensing. The system extracts the original grayscale image edge information by prewitt algorithm and observes the edge information by compressed sensing algorithm of OMP to generate the observation matrix . Then, the system scrambles the observation matrix by arnold transform algorithm and embeds it into the original grayscale image by singular value decomposition algorithm. We make experiment in order to test the system. The result is shown that the algorithm has good imperceptibility and can resist copying attack.

Semantic Gap problem is the essence of the SQL Injection Attacks vulnerability in Web applications. Web application loses the semantic information while the SQL statement is constructed dynamically. This paper analyzes the cause of the SQLIA vulnerability. And then it analyzes several suggested techniques, such as the filtering techniques and the static analysis, and points out their drawbacks in the SOLIA prevention, which leads to the conclusion that the key problem for the eradication of SQLIA is to solve the semantic gap problem causing by the unstructured SQL statement in the process of constructing a Web system dynamically.

One of the main reasons caused the blackout accident is the existence of the power grid vulnerable unit. Therefore, how to find out the existing vulnerable unit accurately becomes a hot topic in the power grid at present. In this article, the problem aiming at the insufficient of grid vulnerability metrics is studied. Firstly, the new comprehensive vulnerability indicator was constructed to remedy the disadvantages of the current indicators of grid vulnerability. Secondly, the calculation process was listed. Finally, the advantages and disadvantages of the new indicator and the traditional indicator were analyzed in detail in the IEEE typical example. The result of the example shows that the new indicator built in this article is valid.

For the data security threats caused by out sourcing model and shared vulnerability, and base on user data in static characteristics of cloud storage services and the dynamic nature of cloud computing, it requires to propose corresponding data security protection mechanisms, in addition, in order to make the mechanism work normally, we propose a program which can be trusted and can be garnered and user can test, offer the recoverability of data and the integrity verification of data and the accountability leak of data.

Information security is a matter of concern in any sector and industry, and the vulnerability is the important factor which caused this issue. Therefore it is necessary to analyze and predict the occurrence of vulnerability. This paper used the datas of CNNVD vulnerability database and Apriori algorithm to analyze and predict the occurrence of software vulnerability. In the data preprocessing stage by changing the level of vulnerability rule we can dig out more concept association. In the evaluation stage of association rules by designing filters we can find the rules in line with the degree of user interest. Finally, this papper could demonstrate the effectiveness of of this method by experiments.

The idea of mathematical modeling is used to establish the quantitative model of information system vulnerability assessment, and the model is solved by using the partial differential method. The algorithm is realized by using VB programming, and it obtains the quantitative solution of information system vulnerability. Quantitative assessment of information system security and risk is the difficulty of system vulnerability assessment, and it establishes the risk model of system by means of mathematics modeling idea. The risk model is divided into the actual risk and the potential risk. The paper uses VB programming software, and establishes a quantitative model of information system evaluation by combining with partial differential method, and the algorithm is carried out the experimental verification by using the method of numerical simulation. Through the calculation, the mathematical modeling ideas can effectively obtain the vulnerability quantitative standard and the risk level of information system, which provides the technical reference for the research of information system security evaluation method.

The software vulnerability is the main app roach for propagating virus, Trojan and bad information. It seriously blocks the effective circulation of IT products and breaks the normal operation of critical infrastructures. The software vulnerability has become one of the main factors threatening the critical infrastructure safety. So it is of great importance on understanding the software vulnerability and perfecting relevant legislative system to research the concepts, characteristics and foreign related laws of critical infrastructure software vulnerability.

According to the existing training framework of Information Security, Jianqiao Colledge conducted a needs analysis and instructional design of information security. In addition, it offers the realization of the vulnerability network and independent learning strategies based on the idea of edutainment.

Road network vulnerability is the loss estimate of multiple-link failure in road network cause by unplanned incidents. To evaluate road network vulnerability, the research adopted the improved Beckmann and FIM composite pattern. Then it carries out a solution based on Genetic Algorithm to quantify the road network vulnerability by defining the condition of combination road sections (open or closed) in road network which can find the critical links and nodes in the road network at the same time. The research turns out to be helpful both on road network planning and planning process of resource allocation for mitigation and recovery under disruption (take the snow disaster in southern China for instance).

The knowledge of the materials’ mechanical properties is a preliminary and important step in the seismic vulnerability assessment of existing buildings. In RC structures, the compressive strength of concrete can have a crucial role on the seismic performance and is usually difficult to estimate. Major seismic codes prescribe that concrete strength has to be determined essentially from in-situ and laboratory tests. In some cases such estimation can be complemented by default values in accordance to standards at the time of construction, therefore analysing the actual concrete properties typically found in RC existing buildings realized in different periods can make available useful data. To this end, in this paper attention has been addressed to public buildings, namely schools and hospitals. A large database made up of about 1500 test results on concrete cores extracted from about 300 RC public buildings located in Basilicata region (Italy), has been prepared and analysed. The relationships between the actual strength values (mean and dispersion) and the construction period of buildings have been studied. Theoretical distributions to approximate the discrete distributions of strength values in different construction periods have been determined, thus providing relevant data for the structural assessment of individual buildings and, especially, for large scale vulnerability evaluations.

Bridge piers are highly vulnerable to accidental collision with heavy truck vehicles. Current design and assessment codes account the effect of vehicle collision by means of an equivalent static load. This methodology although is simple but have raised many concerns on their suitability to reflect the exact collision condition, which is highly dynamic. Therefore many existing bridge piers are in great danger of malicious impact. Recently, a research collaboration is initiated between JKR and UTP to investigate the impact vulnerability of RC bridge piers when subjected to HGV truck collisions. The work involves using nonlinear finite element (FE) simulation to conduct complex vehicle-pier impact scenarios. This paper is intended to present the general outlook plan of this project with emphasis focused on the consideration of FE models used for HGV trucks and concrete bridge piers.

Owing to more and more people concern about environment issues and reduction of fossil fuels, a growing number of distributed generations (DGs) are being interconnected to the power system. The active distribution network (ADN) provides an effective way to achieve the large scale connection and efficient utilization of them. This paper analyzes the vulnerability performance of active distribution network quantitatively and discusses the impact of DGs on the distribution network transmission efficiency under different grid structure through the application of complex network theory in power system. The example results show that meshed network structure can effectively promoting the consumption of DG and verify the feasibility of applying complex network theory to the distribution network for vulnerability analysis.

Traditional Fuzzing is simple and easy to deploy but inefficient due to different inputs usually execute the redundant path. In this paper, we put forward a binary-oriented Fuzzing technique based on input format analysis and dynamic taint analysis, which can detect vulnerability more efficient than traditional Fuzzing method. We implemented a prototype system called Smart and Directed Fuzz (SDFuzz), which first searches the locations where interested functions are called, then uses dynamic taint analysis technique to classify input data into safety-related data and safety-unrelated data, finally mutates safety-related data to direct the test procedure. The evaluation shows that our method can be used to detect vulnerabilities in binary software efficiently.

Despite many automatic vulnerability detection approaches have been well documented, existing solutions for discovering software vulnerabilities in binary software are still difficult and time consuming. In this paper we present an approach based on random programming that works to quickly discover vulnerability in programmable binary software. By extracting the code snippets for special features and fixed API usages, we can get a set of original functional templates, and then we randomize the mutable factors in those templates. After that we reasonably make combination of those templates to produce final test templates. Finally, by concretizing the random factors we execute those test templates and monitor the software be tested to discover vulnerabilities. By template programming we can produce more reasonable test case, which makes our approach more effective than other solutions.

Active defense technology may predict future attack situation and detect unknown attacks, but it has many questions to will be researched: vulnerability, lower mal-ware detection rate, security situation awareness technology has faced problem of inter-organization cooperation, real-time response, correlation analysis, high-load low fault tolerance. Artificial immune technology combines with active defense technology to solve integrated artificial immune security situation awareness system with artificial immune technology and active defense technology by Black Hole theory and for diversification ad development characteristics of the artificial immune and active defense, gives a method about simulating Black Hole accretion theory to achieve absorption and utilization a variety of security and virus technology; a no escaped mechanism simulate the Black Hole; a method about access control method based on Hawking radiation theory. Based on the above work, applies virtual and sandbox technology to achieve network system itself virus immunity, and then that we implement re-engineering and reverse engineering for virus technology in order to study virus and dig more holes, create unified integrated defense tactics, so this defense system will improve ability of situation comprehension, situation prediction and intelligence decision.

As further development on the applications of CN (complex network) theory, evaluation of transmission line vulnerability requires the consideration of physical attributes of power system, instead of simply considering its topology features, which helps to deduce more precise predictions for the stability of power system. This paper introduces a novel and efficient evaluation method based on CN theory to evaluate influence of line faults to the static stability of power system, comprehensively considering the factors of system load level, power capacity utilization rate of transmission lines and worldlet features. The method is illustrated in the IEEE118 bus system.

Web application has been widely used. So it is urgent to test the security of Web application efficiently to resist various attacks. In this paper, key technologies (detecting framework with plugin, discovering unknown vulnerability and building detection tools integrated by user-defined) are absolutely researched. No matter Web application is running or not, the platform can be dramatically able to discover the vulnerability efficiently to insure their security.

Security management of information system is one of the important contents of system engineering management, especially the security risk assessment, which places the core center of system engineering. Through risk assessment of an information system can help analyze system safety and find out the potential risk. Build risk model of information safety can provide necessary guidance for security strategy design and the implementation. This article researches the assessment model and method of information security risk.

As the rapid growth of national economy and further development of city construction, the exploitation of high-rise buildings and underground buildings is augmenting gradually, and leading to more and more deep foundation excavation that embrace difficult design, complicated construction technology, vulnerability to circumstance and other complex characteristics. A lot of accidents happen to deep foundation excavation in China every year, which severely affected our daily life and brought great losses to the corporations. Therefore, it is necessary to carry out effective risk management on the deep foundation excavation based on on-site surveys. This paper ascertains the main risks by the way of RBS, and with the help of adjudication by the experts and AHP methods, calculates the weights and makes sequence, then determines different corresponding risks followed by strategies put forward, so as to lay foundation for risk management in the construction corporation to effectively reduce the risk possibility and losses.

Assessing the vulnerability of critical infrastructure objects is of major concern when dealing with the process of dependability and risk management. Special attention is paid to the objects of higher interest, such as nuclear power plants. In spite of the protection of these objects, there is still a certain level of a potential threat. The aim of the paper is to describe a possible way of attacking on the object in order to get into a particular part of it. Several characteristics of an adversary ́s attempt were obtained. For this reason as well as for modelling adversary ́s behaviour diffusion processes have been used.

Cascading failure of network features in power system is analyzed in this paper using complex network theory and method, and Central China power grid are analyzed in detail on the three kinds of attack forms (maximum load, the most generous attack and random attack) of regional vulnerability. It provides technical means for the prevention of cascading failure .

This paper analyzes the network features of power grid with buses’ cascading failures based on the theories and methods of complex networks. And it concludes detailed vulnerability analysis of buses in Huazhong power grid under three forms of attack (maximum load attack, maximum degree attack and random attack) .It provides technical means for the prevention of cascading failure .

As the power grid blackout accidents occur frequently, the vulnerability analysis becomes an important topic in power system analysis. A new electrical dissection method for the power grid vulnerability assessment is presented in this paper. The method can effectively reflect the power transmission between generator and load on the terminal of each line, and quantify the using relationship with the branch transmission power limit. An IEEE 39-bus text system was used to testify this method and the results indicated the methods efficiency and rationality. This paper is supported by NSFC 51307019.

Based on the vulnerability analysis of Main Battle Tank, divides the damage state, defines the damage grade and criterion, constructs the vulnerability database based on finite elements method, proposes a method containing DS method and function damage tree method to evaluate the vulnerability of tank, carries out the vulnerability simulation at the component level, this will enhance its practicability.

An operation betweenness based method to assess overloaded lines is proposed. Based on electrical network theory, firstly the branch current sharing factors are deduced; then the operation betweenness of transmission line is defined; finally, on this basis the overload vulnerability of transmission line is assessed. In the proposed method, the impacts of both topological structure and operation modes of power network on vulnerability are considered for the assessment. The physical meaning of the proposed method is determinate and conforms to actual condition of power system, and this method avoids the defect in the complicated network model that the power flows only flow along the shortest path. The correctness of the proposed assessment method is verified by simulation results of IEEE 39-bus system.

The purpose of information system vulnerability analysis is to find loophole and to prevent endangering the information system security. Based on principles of information security risk assessment and Common Vulnerability Scoring System (CVSS), this paper presents a system model for information system vulnerability management. The function models are analyzed respectively; the technology features are also summarized in this paper.

At present, Cross Site Scripting (XSS) vulnerability exists in most web sites. The main reason is the lack of effective validation and filtering mechanisms for user input data from web request. This paper explores vulnerability detection method which based on taint dependence analysis and implements a prototype system for Java Web program. We treat all user input as tainted data, and track the flow of Web applications, then we judge whether it will trigger an attack or not. The taint dependent analysis algorithm mentioned in this paper is used to construct the taint dependency graph. Next the value representation method of the string tainted object based on finite state automata is discussed. Finally, we propose the vulnerability detection method for the program. The experiment result shows that the prototype system can detect reflection cross-site scripting vulnerability well in those programs which dont have effective treatment for the user input data.

With the rapid development of computer and network technology, the security of computer network becomes the most important issue. For the computer network, it not only takes convenience to us, but also takes troubles, such as network security, virus, cockhorse etc.. In this article, we analyse the cause of the security,and then introduce a number of measures of vulnerability detection and protection on computer network security.

We set the karst fissure water where a oil refinery is located as a study object. Quantitative method of vulnerability analysis is raised for petroleum hydrocarbon contamination groundwater system in multiple factor combination conditions.We established the ANN model structure depending on the selected evaluation factors and obtained the weight of each factor coefficient, then superposed the weights of each factor thematic layer by applying ANN and GIS,and put forward model system of vulnerability analysis which petroleum hydrocarbon contaminate groundwater aquifer. Spatial distribution of antifouling performance is finally achieved of which groundwater aquifer is polluted by petroleum hydrocarbon.

In recent years, with the happening of large-scale power cut accidents, the electric network has been concerned widely increasingly. Pattern recognition which could be used in online analysis, can get rid of the mode limit of the operation characteristic of description system, and its counting volume is less influenced by system scale, also its general assessment is in a fast speed. In this text, it elaborates the conception of the power grid vulnerability and some kinds of available ways of assessing vulnerability, and it also tells us the target of electric network’s integrative vulnerability based on integrative vulnerability mode for electric power grid, and used in pattern recognition, which its the sensibility and necessity of pattern recognition has been verified by the IEEE-39 system.

Several blackouts happened in a worldwide area, it exposures the vulnerability of continual increment of power system scale. The weak link has a strengthening effect on the spread of the accelerated failure, and leads to the occurrence of cascading failures, it's a serious threat to the security and stability of the grid. Based on the existing researches, the article proposes a new structure vulnerability evaluation model based on improved electrical betweenness, and verifies the rationality and effectiveness of this model by the analysis of the IEEE-39 node system.

Convenience stores in Taiwan have integrated e-commerce systems into their logistics systems to develop a new retail delivery model. Store-to-store delivery service is the one of the retail delivery systems served by FamilyMart.com and 7-11.com. The delivery system is complicated and risky. This paper are explores the structure of logistic for store-to-store delivery service for electronic commerce and develops a hierarchical framework and evaluation model to evaluate the logistics vulnerability of two store-to-store delivery service providers in Taiwan. With the results of the most vulnerable parts in store-to-store delivery system, managers could add resources and formulate strategies to strengthen them and reduce the frequency of the events that have higher failure probabilities.

The common information model CIM in IEC61970 standard is an abstract description of existing physical objects and their relationship in power system, which has been widely used in the construction of computer application systems of power system. In order to track the real-time operation state of power system when analyzing the area of vulnerability (AOV) to voltage sags, this paper proposes a novel method to obtain the data required by AOV analysis through parsing source data defined with CIM, and source data are from the SCADA system, equipment management system and management information system of safe production. The design scheme of AOV analysis using CIM is introduced, and method of parsing CIM is also provided. Finally, the method is applied to a regional power system of China, and graphic results of AOV are shown under balanced and unbalanced faults.

The smart grid is a developing network of transmission lines, equipment, controls and new technologies working together to respond immediately to 21st Century demand for electricity, but the smart grid may also create much new vulnerability if not deployed with the appropriate security controls. In this paper, to evaluate the secure GOOSE message performance, we implemented the IEC 62351-6 MAC mechanism, applied it on F-IED using the IEC 61850 GOOSE stack and the HSM, built the security test environment, and obtained test results.

In the internet age, the high efficiency and high profit activities must incorporate with the internet. Web Application (Web App) is an important IT product in the internet age. However, the network intrusions and security vulnerabilities have continued to threaten the operation of Web App. Penetration Testing (PT) is a critical step to identify security vulnerabilities. However, PT can not provide specific and effective follow-up work. For this, combining corrective maintenance with Web App repair operation will be discussed in this paper. And based on corrective maintenance, proposes a Web App Secure Repair Procedures (WASRP). Applying WASRP, the misjudgment ratio of security vulnerabilities and defects can be reduced. And assist to repair the security vulnerabilities and defects, effectively and concretely enhance the Web App security.

Considering the efficiency problem of software vulnerability discovering in Linux system, a new software vulnerability discovering in Linux system program with data mining algorithm is proposed in this paper. An improved REL algorithm based on one-dimensional linked list is proposed, and mining on Linux sequence data of system call with REL algorithm, then we do analysis and detection of software vulnerabilities. A model of software vulnerability discovering analysis system with LRE algorithm was designed. Finally, experimental results show the validity of mining on Linux sequence data of system call with REL algorithm in terms of reducing the false alarm rate, and improving the efficiency of software security vulnerability discovering.

To evaluate the damage level of steel structure under different earthquakes, a kind of vulnerability analysis method based on seismic damage assessment was developed using the improved two-parameter damage model which was proposed by considering the effect of hysteretic deformation amplitude to accumulative damage energy dissipation. This method is firstly to establish large samples of earthquake-structure, conduct a series of dynamic analysis to obtain the probability function of structural response and bearing capacity corresponding to different damage states, and then to draw the vulnerability curves and evaluate the damage state of the structure under different earthquake intensity. As a numerical example, a 9-story steel benchmark structure model under strong earthquakes was analyzed, and the theoretical vulnerability curves with lognormal distribution were obtained and the exceeding probability of structure at different damage level had been assessed.

Highway bridges played an important role in lifeline systems. Their seismic damage status made a direct influence on the implement plan of the earthquake relief work and the life and property security of the people. Therefore, accurate assessment and prediction for the seismic damage of highway bridges were of vital significance, based on which reasonable earthquake fortification could be implemented. This paper summarized and classified the existing seismic damage assessment methods for highway bridges, including certain index evaluation methods based on statistical results, vulnerability index evaluation methods based on probability theory and vulnerability index evaluation methods based on aggregation model. Then the capacity-spectrum method which could be used for calculating the fragility curve and the seismic assessment model of highway bridges used in HAZUS were specially explained. At last, the proposal for the development of seismic assessment systems related with highway bridges in China was put forward. Considering HAZUS’s good performance in seismic assessment, a similar assessment system should be built in China as soon as possible. The first step should be classifying highway bridges in China based on their current situation and obtaining their seismic assessment model parameters roughly, which tend to be safe. The second step should be carrying out sufficient experiments and numerical analysis and revising the model parameters obtained in the first step.

The structural vulnerability analysis decides the probability of the structural failure under the earthquake loads. According to the seismic failure and the failure mechanism of the structure, this paper defines the structural resistance with the limit states of the structural function and builds the probability relation between the structural failure and the structural resistance with which the failure probability of a structure under the load of some intensity earthquake can be decided and the curves of structure vulnerability can be drawn. With this method the structural tolerance of earthquake loads can be evaluated and the safe reliability of the structure can be predicted.