arXiv subjects
Publications and source records attributed to Feng Hao.
We show that a smooth complex projective threefold admits a holomorphic one-form without zeros if and only if the underlying real 6-manifold fibres smoothly over the circle, and we give a complete classification of all threefolds with that property. Our results prove a conjecture of Kotschick in dimension three.
Lithium ion batteries (LIBs) work under sophisticated external force field and its electrochemical properties could be modulated by strain. Owing to the electro-mechanical coupling, the change of micro-local-structures can greatly affect lithium (Li) diffusion rate in solid state electrolytes and electrode materials of LIBs. In this study, we find that strain gradient in bilayer graphene (BLG) significantly affects Li diffusion barrier, which is termed as the flexo-diffusion effect, through first-principles calculations. The Li diffusion barrier substantially decreases/increases under the positive/negative strain gradient, leading to the change of Li diffusion coefficient in several orders of magnitude at 300 K. Interestingly, the regulation effect of strain gradient is much more significant than that of uniform strain field, which can have a remarkable effect on the rate performance of batteries, with a considerable increase in the ionic conductivity and a slight change of the original material structure. Moreover, our ab initio molecular dynamics simulations (AIMD) show that the asymmetric distorted lattice structure provides a driving force for Li diffusion, resulting in oriented diffusion along the positive strain gradient direction. These findings could extend present LIBs technologies by introducing the novel strain gradient engineering.
Dendrite formation is a major obstacle, such as capacity loss and short circuit, to the next-generation high-energy-density lithium (Li) metal batteries. The development of successful Li dendrite mitigation strategies is impeded by an insufficient understanding of Li dendrite growth mechanisms. Li-plating-induced internal stress in Li metal and its effect on dendrite growth have been studied in previous models and experiments, while the underlying microcosmic mechanism is elusive. Here, we analyze the role of plating-induced stress in dendrite formation through first-principles calculations and ab initio molecular dynamics simulations. We show that the deposited Li forms a stable atomic nanofilm structure on copper (Cu) substrate. It is found that the adsorption energy of Li atoms increases from the Li-Cu interface to deposited Li surface, leading to more aggregated Li atoms at the interface. Compared to the pristine Li metal, the deposited Li in the early stage becomes compacted and suffers in-plane compressive stress. Interestingly, we find that there is a giant strain gradient distribution from the Li-Cu interface to deposited Li surface, which makes the deposited atoms adjacent to the Cu surface tend to press upwards with perturbation, causing the dendrite growth. This understanding provides an insight to the atomic-scale origin of Li dendrite growth and may be useful for suppressing the Li dendrite in the Li-metal-based rechargeable batteries.
In this paper, we address an unsolved problem in the real world: how to ensure the integrity of the web content in a browser in the presence of malicious browser extensions? The problem of exposing confidential user credentials to malicious extensions has been widely understood, which has prompted major banks to deploy two-factor authentication. However, the importance of the `integrity' of the web content has received little attention. We implement two attacks on real-world online banking websites and show that ignoring the `integrity' of the web content can fundamentally defeat two-factor solutions. To address this problem, we propose a cryptographic protocol called DOMtegrity to ensure the end-to-end integrity of the DOM structure of a web page from delivering at a web server to the rendering of the page in the user's browser. DOMtegrity is the first solution that protects DOM integrity without modifying the browser architecture or requiring extra hardware. It works by exploiting subtle yet important differences between browser extensions and in-line JavaScript code. We show how DOMtegrity prevents the earlier attacks and a whole range of man-in-the-browser (MITB) attacks. We conduct extensive experiments on more than 14,000 real-world extensions to evaluate the effectiveness of DOMtegrity.
In this paper, we propose a novel paper fingerprinting technique based on analyzing the translucent patterns revealed when a light source shines through the paper. These patterns represent the inherent texture of paper, formed by the random interleaving of wooden particles during the manufacturing process. We show these patterns can be easily captured by a commodity camera and condensed into to a compact 2048-bit fingerprint code. Prominent works in this area (Nature 2005, IEEE S&P 2009, CCS 2011) have all focused on fingerprinting paper based on the paper "surface". We are motivated by the observation that capturing the surface alone misses important distinctive features such as the non-even thickness, the random distribution of impurities, and different materials in the paper with varying opacities. Through experiments, we demonstrate that the embedded paper texture provides a more reliable source for fingerprinting than features on the surface. Based on the collected datasets, we achieve 0% false rejection and 0% false acceptance rates. We further report that our extracted fingerprints contain 807 degrees-of-freedom (DoF), which is much higher than the 249 DoF with iris codes (that have the same size of 2048 bits). The high amount of DoF for texture-based fingerprints makes our method extremely scalable for recognition among very large databases; it also allows secure usage of the extracted fingerprint in privacy-preserving authentication schemes based on error correction techniques.
Cryptocurrency mining in the browser has the potential to provide a new pay-as-you-go monetisation mechanism for consuming digital media over the Web. However, browser mining has recently received strong criticism due to illegitimate use of mining scripts in several popular websites (a practice called cryptojacking). Here we provide the first feasibility study of browser mining as a legitimate means of monetisation in terms of revenue, user consent and user experience within a specially built website. Our results compare browser mining to display advertisement and indicate browser mining provides a preferable user experience to advertising when the hash rate is user-adjustable. Furthermore, over 60% of participants would select browser mining over advertisement if they were invested in the ecosystem by obtaining half of the mined cryptocurrency. Our estimations show that browser mining currently generates revenue at a rate 46 times less than advertisement, however we would expect that gap to decrease as we observed a significant drop in mining difficulty after our tested cryptocurrency implemented ASIC-resistant mining measures. Overall, based on our results we find browser mining to be a legitimate alternative to display advertisement and conclude by discussing its current limitations and potential applications.
Recently, a chaotic image encryption algorithm based on information entropy (IEAIE) was proposed. This paper scrutinizes the security properties of the algorithm and evaluates the validity of the used quantifiable security metrics. When the round number is only one, the equivalent secret key of every basic operation of IEAIE can be recovered with a differential attack separately. Some common insecurity problems in the field of chaotic image encryption are found in IEAIE, e.g. the short orbits of the digital chaotic system and the invalid sensitivity mechanism built on information entropy of the plain image. Even worse, each security metric is questionable, which undermines the security credibility of IEAIE. Hence, IEAIE can only serve as a counterexample for illustrating common pitfalls in designing secure communication method for image data.
In this article, we will give the Deligne 1-motives up to isogeny corresponding to the $\mathbb{Q}$-limiting mixed Hodge structures of semi-stable degenerations of curves, by using logarithmic structures and Steenbrink's cohomological mixed Hodge complexes associated to semi-stable degenerations of curves.
This is a sequel to "Kodaira-Saito vanishing via Higgs bundles in positive characteristic" (arXiv:1611.09880). However, unlike the previous paper, all the arguments here are in characteristic zero. The main result is a Kodaira vanishing theorem for semistable parabolic Higgs bundles with trivial parabolic Chern classes. This implies a general semipositivity theorem. This also implies a Kodaira-Saito vanishing theorem for complex variations of Hodge structure.
This paper analyzes the security of an image encryption algorithm proposed by Ye and Huang [\textit{IEEE MultiMedia}, vol. 23, pp. 64-71, 2016]. The Ye-Huang algorithm uses electrocardiography (ECG) signals to generate the initial key for a chaotic system and applies an autoblocking method to divide a plain image into blocks of certain sizes suitable for subsequent encryption. The designers claimed that the proposed algorithm is "strong and flexible enough for practical applications". In this paper, we perform a thorough analysis of their algorithm from the view point of modern cryptography. We find it is vulnerable to the known plaintext attack: based on one pair of a known plain-image and its corresponding cipher-image, an adversary is able to derive a mask image, which can be used as an equivalent secret key to successfully decrypt other cipher-images encrypted under the same key with a non-negligible probability of 1/256. Using this as a typical counterexample, we summarize security defects in the design of the Ye-Huang algorithm. The lessons are generally applicable to many other image encryption schemes.
Simple Password Exponential Key Exchange (SPEKE) is a well-known Password Authenticated Key Exchange (PAKE) protocol that has been used in Blackberry phones for secure messaging and Entrust's TruePass end-to-end web products. It has also been included into international standards such as ISO/IEC 11770-4 and IEEE P1363.2. In this paper, we analyse the SPEKE protocol as specified in the ISO/IEC and IEEE standards. We identify that the protocol is vulnerable to two new attacks: an impersonation attack that allows an attacker to impersonate a user without knowing the password by launching two parallel sessions with the victim, and a key-malleability attack that allows a man-in-the-middle (MITM) to manipulate the session key without being detected by the end users. Both attacks have been acknowledged by the technical committee of ISO/IEC SC 27, and ISO/IEC 11770-4 revised as a result. We propose a patched SPEKE called P-SPEKE and present a formal analysis in the Applied Pi Calculus using ProVerif to show that the proposed patch prevents both attacks. The proposed patch has been included into the latest revision of ISO/IEC 11770-4 published in 2017.
Browser extensions have been established as a common feature present in modern browsers. However, some extension systems risk exposing APIs which are too permissive and cohesive with the browser's internal structure, thus leaving a hole for malicious developers to exploit security critical functionality within the browser itself. In this paper, we raise the awareness of the threats caused by browser extensions by presenting a botnet framework based on malicious extensions installed in the user's browser, and an exhaustive range of attacks that can be launched in this framework. We systematically categorize, describe and implement these attacks against Chrome, Firefox and Firefox-for-Android, and verify experiments on Windows, Linux and Android systems. To the best of our knowledge, this paper presents to date the most comprehensive analysis about the threats of botnet in modern browsers due to the over-privileged capabilities possessed by browser extensions. We also discuss countermeasures to the identified problems.
In this paper, we prove the following "Weak Bounded Negativity Conjecture", which says that given a complex smooth projective surface $X$, for any reduced curve $C$ in $X$ and integer $g$, assume that the geometric genus of each component of $C$ is bounded from above by $g$, then the self-intersection number $C^2$ is bounded from below.
In this paper, we present the actual risks of stealing user PINs by using mobile sensors versus the perceived risks by users. First, we propose PINlogger.js which is a JavaScript-based side channel attack revealing user PINs on an Android mobile phone. In this attack, once the user visits a website controlled by an attacker, the JavaScript code embedded in the web page starts listening to the motion and orientation sensor streams without needing any permission from the user. By analysing these streams, it infers the user's PIN using an artificial neural network. Based on a test set of fifty 4-digit PINs, PINlogger.js is able to correctly identify PINs in the first attempt with a success rate of 74% which increases to 86 and 94% in the second and third attempts, respectively. The high success rates of stealing user PINs on mobile devices via JavaScript indicate a serious threat to user security. With the technical understanding of the information leakage caused by mobile phone sensors, we then study users' perception of the risks associated with these sensors. We design user studies to measure the general familiarity with different sensors and their functionality, and to investigate how concerned users are about their PIN being discovered by an app that has access to all these sensors. Our studies show that there is significant disparity between the actual and perceived levels of threat with regard to the compromise of the user PIN. We confirm our results by interviewing our participants using two different approaches, within-subject and between-subject, and compare the results. We discuss how this observation, along with other factors, renders many academic and industry solutions ineffective in preventing such side channel attacks.
ReaxFF provides a method to model reactive chemical systems in large-scale molecular dynamics simulations. Here, we developed ReaxFF parameters for phosphorus and hydrogen to give a good description of the chemical and mechanical properties of pristine and defected black phosphorene. ReaxFF for P/H is transferable to a wide range of phosphorus and hydrogen containing systems including bulk black phosphorus, blue phosphorene, edge-hydrogenated phosphorene, phosphorus clusters and phosphorus hydride molecules. The potential parameters were obtained by conducting unbiased global optimization with respect to a set of reference data generated by extensive ab initio calculations. We extend ReaxFF by adding a 60° correction term which significantly improves the description of phosphorus clusters. Emphasis has been put on obtaining a good description of mechanical response of black phosphorene with different types of defects. Compared to nonreactive SW potential [1], ReaxFF for P/H systems provides a huge improvement in describing the mechanical properties the pristine and defected black phosphorene and the thermal stability of phosphorene nanotubes. A counterintuitive phenomenon is observed that single vacancies weaken the black phosphorene more than double vacancies with higher formation energy. Our results also show that mechanical response of black phosphorene is more sensitive to defects for the zigzag direction than for the armchair direction. Since ReaxFF allows straightforward extensions to the heterogeneous systems, such as oxides, nitrides, ReaxFF parameters for P/H systems build a solid foundation for the reactive force field description of heterogeneous P systems, including P-containing 2D van der Waals heterostructures, oxides, etc.
The effects of size, strain, and vacancies on thermal properties of armchair black phosphorus nanotubes are investigated based on qualitative analysis from molecular dynamics simulations. It is found that the thermal conductivity has a remarkable size effect because of the restricted paths for phonon transport, strongly depending on the diameter and length of nanotube. Owing to the intensified low-frequency phonons, axial tensile strain can facilitate thermal transport. On the contrary, compressive strain weakens thermal transport due to the enhanced phonon scattering around the buckling of nanotube. In addition, the thermal conductivity is dramatically reduced by single vacancies, especially upon high defect concentrations.
A novel bilayer is introduced, consisting of a stiff film adhered to a soft substrate with patterned holes beneath the film and substrate interface. To uncover the transition of surface patterns, two dimensional plane strain simulations are performed on the defected bilayer subjected to uniaxial compression. Although the substrate is considered as the linear elastic material, the presence of defects can directly trigger the formation of locally ridged and then folding configurations from flat surface with a relatively small compressive strain. It is followed by the coexisting phases of folds and wrinkles under further overall compression. This phase transition reverses the traditional transition of wrinkle to ridge or fold for defect free substrates. It is also found that the onset of initial bifurcation is highly dependent on the spatial configuration and geometries of holes, since the interaction of defects allows more strain relief mechanisms beyond wrinkling. Furthermore, a rich diversity of periodic surface topologies, including overall waves, localizations, saw like and coexisting features of folds and wrinkles can be obtained by varying the diameter, depth and spacing of holes as well as compressive strain, which provides a potential approach to engineer various surface patterns for applications.
Pimple is one of the most common skin diseases for humans. The mechanical modeling of pimple growth is very limited. A finite element model is developed to quantify the deformation field with the expansion of follicle, and then the mechanical stimulus is related to the sensation of pain during the development of pimple. Through these models, parametric studies show the dependence of mechanical stimulus and pain level on the pimple-surrounded structures, follicle depth and mechanical properties of the epidermis. The findings in this paper may provide useful insights on prevention or pain relief of pimples, as well as those related to cosmetics and other tissue growth.