arXiv subjects

Haining Wang

Publications and source records attributed to Haining Wang.

At least 55 records · Page 3Linked to original sources

arXiv2024

Obfuscating IoT Device Scanning Activity via Adversarial Example Generation

Nowadays, attackers target Internet of Things (IoT) devices for security exploitation, and search engines for devices and services compromise user privacy, including IP addresses, open ports, device types, vendors, and products.Typically, application banners are used to recognize IoT device profiles during network measurement and reconnaissance. In this paper, we propose a novel approach to obfuscating IoT device banners (BANADV) based on adversarial examples. The key idea is to explore the susceptibility of fingerprinting techniques to a slight perturbation of an IoT device banner. By modifying device banners, BANADV disrupts the collection of IoT device profiles. To validate the efficacy of BANADV, we conduct a set of experiments. Our evaluation results show that adversarial examples can spoof state-of-the-art fingerprinting techniques, including learning- and matching-based approaches. We further provide a detailed analysis of the weakness of learning-based/matching-based fingerprints to carefully crafted samples. Overall, the innovations of BANADV lie in three aspects: (1) it utilizes an IoT-related semantic space and a visual similarity space to locate available manipulating perturbations of IoT banners; (2) it achieves at least 80\% success rate for spoofing IoT scanning techniques; and (3) it is the first to utilize adversarial examples of IoT banners in network measurement and reconnaissance.

cs.CR↗

arXiv2024

5G-WAVE: A Core Network Framework with Decentralized Authorization for Network Slices

5G mobile networks leverage Network Function Virtualization (NFV) to offer services in the form of network slices. Each network slice is a logically isolated fragment constructed by service chaining a set of Virtual Network Functions (VNFs). The Network Repository Function (NRF) acts as a central OpenAuthorization (OAuth) 2.0 server to secure inter-VNF communications resulting in a single point of failure. Thus, we propose 5G-WAVE, a decentralized authorization framework for the 5G core by leveraging the WAVE framework and integrating it into the OpenAirInterface (OAI) 5G core. Our design relies on Side-Car Proxies (SCPs) deployed alongside individual VNFs, allowing point-to-point authorization. Each SCP acts as a WAVE engine to create entities and attestations and verify incoming service requests. We measure the authorization latency overhead for VNF registration, 5G Authentication and Key Agreement (AKA), and data session setup and observe that WAVE verification introduces 155ms overhead to HTTP transactions for decentralizing authorization. Additionally, we evaluate the scalability of 5G-WAVE by instantiating more network slices to observe 1.4x increase in latency with 10x growth in network size. We also discuss how 5G-WAVE can significantly reduce the 5G attack surface without using OAuth 2.0 while addressing several key issues of 5G standardization.

cs.NI↗

arXiv2024

A Large-scale Fine-grained Analysis of Packages in Open-Source Software Ecosystems

Package managers such as NPM, Maven, and PyPI play a pivotal role in open-source software (OSS) ecosystems, streamlining the distribution and management of various freely available packages. The fine-grained details within software packages can unveil potential risks within existing OSS ecosystems, offering valuable insights for detecting malicious packages. In this study, we undertake a large-scale empirical analysis focusing on fine-grained information (FGI): the metadata, static, and dynamic functions. Specifically, we investigate the FGI usage across a diverse set of 50,000+ legitimate and 1,000+ malicious packages. Based on this diverse data collection, we conducted a comparative analysis between legitimate and malicious packages. Our findings reveal that (1) malicious packages have less metadata content and utilize fewer static and dynamic functions than legitimate ones; (2) malicious packages demonstrate a higher tendency to invoke HTTP/URL functions as opposed to other application services, such as FTP or SMTP; (3) FGI serves as a distinguishable indicator between legitimate and malicious packages; and (4) one dimension in FGI has sufficient distinguishable capability to detect malicious packages, and combining all dimensions in FGI cannot significantly improve overall performance.

cs.SE↗

arXiv2024

A Content-Based Novelty Measure for Scholarly Publications: A Proof of Concept

Novelty, akin to gene mutation in evolution, opens possibilities for scholarly advancement. Although peer review remains the gold standard for evaluating novelty in scholarly communication and resource allocation, the vast volume of submissions necessitates an automated measure of scholarly novelty. Adopting a perspective that views novelty as the atypical combination of existing knowledge, we introduce an information-theoretic measure of novelty in scholarly publications. This measure quantifies the degree of 'surprise' perceived by a language model that represents the word distribution of scholarly discourse. The proposed measure is accompanied by face and construct validity evidence; the former demonstrates correspondence to scientific common sense, and the latter is endorsed through alignment with novelty evaluations from a select panel of domain experts. Additionally, characterized by its interpretability, fine granularity, and accessibility, this measure addresses gaps prevalent in existing methods. We believe this measure holds great potential to benefit editors, stakeholders, and policymakers, and it provides a reliable lens for examining the relationship between novelty and academic dynamics such as creativity, interdisciplinarity, and scientific advances.

cs.CL↗

arXiv2023

A First Look at 5G Core Deployments on Public Cloud: Performance Evaluation of Control and User Planes

The Fifth Generation (5G) mobile core network is designed as a set of Virtual Network Functions (VNFs) hosted on Commercial-Off-the-Shelf (COTS) hardware. This creates a growing demand for general-purpose compute resources as 5G deployments continue to expand. Given their elastic infrastructure, cloud services such as Amazon Web Services (AWS) are attractive platforms to address this need. Therefore, it is crucial to understand the control and user plane Quality of Service (QoS) performance associated with deploying the 5G core on top of a public cloud. To account for both software and communication costs, we build a 5G testbed using open-source components spanning multiple locations within AWS. We present an operational breakdown of the performance overhead for various 5G use cases using different core deployment strategies. Our results indicate that moving specific VNFs into edge regions reduces the latency overhead for key 5G operations. Furthermore, we instantiated multiple user plane connections between availability zones and edge regions with different traffic loads. We observed that the deterioration of connection quality varies depending on traffic loads and is use case specific. Ultimately, our findings provide new insights for Mobile Virtual Network Operators (MVNOs) for optimal placements of their 5G core functions.

cs.NI↗

arXiv2023

An Internet-wide Penetration Study on NAT Boxes via TCP/IP Side Channel

Network Address Translation (NAT) plays an essential role in shielding devices inside an internal local area network from direct malicious accesses from the public Internet. However, recent studies show the possibilities of penetrating NAT boxes in some specific circumstances. The penetrated NAT box can be exploited by attackers as a pivot to abuse the otherwise inaccessible internal network resources, leading to serious security consequences. In this paper, we aim to conduct an Internet-wide penetration testing on NAT boxes. The main difference between our study and the previous ones is that ours is based on the TCP/IP side channels. We explore the TCP/IP side channels in the research literature, and find that the shared-IPID side channel is the most suitable for NAT-penetration testing, as it satisfies the three requirements of our study: generality, ethics, and robustness. Based on this side channel, we develop an adaptive scanner that can accomplish the Internet-wide scanning in 5 days in a very non-aggressive manner. The evaluation shows that our scanner is effective in both the controlled network and the real network. Our measurement results reveal that more than 30,000 network middleboxes are potentially vulnerable to NAT penetration. They are distributed across 154 countries and 4,146 different organizations, showing that NAT-penetration poses a serious security threat.

cs.CR↗

arXiv2023

Flach system on Quaternionic Hilbert--Blumenthal surfaces and distinguished periods

We study arithmetic properties of certain quaternionic periods of Hilbert modular forms arising from base change of elliptic modular forms. These periods which we call the distinguished periods are closely related to the notion of distinguished representation that appear in work of Harder--Langlands--Rapoport, Lai, Flicker--Hakim on the Tate conjectures for the Hilbert--Blumenthal surfaces and their quaternionic analogues. In particular, we prove an integrality result on the ratio of the distinguished period and the quaternionic Peterson norm associated to the modular form. Our method is based on an Euler system argument initiated by Flach by producing elements in the motivic cohomologies of the quaternionic Hilbert--Blumenthal surfaces with control of their ramification behaviours. We show that these periods give natural bounds for certain subspaces of the Selmer groups of these quaternionic Hilbert--Blumenthal surfaces. The lengths of these subspaces can be determined by using the Taylor--Wiles method and can be related to the quaternionic Peterson norms of the modular forms.

math.NT↗

arXiv2023

Defending Against Authorship Identification Attacks

Authorship identification has proven unsettlingly effective in inferring the identity of the author of an unsigned document, even when sensitive personal information has been carefully omitted. In the digital era, individuals leave a lasting digital footprint through their written content, whether it is posted on social media, stored on their employer's computers, or located elsewhere. When individuals need to communicate publicly yet wish to remain anonymous, there is little available to protect them from unwanted authorship identification. This unprecedented threat to privacy is evident in scenarios such as whistle-blowing. Proposed defenses against authorship identification attacks primarily aim to obfuscate one's writing style, thereby making it unlinkable to their pre-existing writing, while concurrently preserving the original meaning and grammatical integrity. The presented work offers a comprehensive review of the advancements in this research area spanning over the past two decades and beyond. It emphasizes the methodological frameworks of modification and generation-based strategies devised to evade authorship identification attacks, highlighting joint efforts from the differential privacy community. Limitations of current research are discussed, with a spotlight on open challenges and potential research avenues.

cs.CL↗

arXiv2023

The Many Voices of Duying: Revisiting the Disputed Essays Between Lu Xun and Zhou Zuoren

Lu Xun and Zhou Zuoren stand as two of the most influential writers in modern Chinese literature. Beyond their familial ties as brothers, they were also intimate collaborators during the nascent stages of their writing careers. This research employs quantitative methods to revisit three disputed essays pseudonymously published by the brothers in 1912. Our stylometric analysis uses an interpretable authorship attribution model to investigate the essays' authorship and examine the brothers' respective writing styles. Our findings suggest that 'Looking at the Country of China' was authored by Lu Xun. Moreover, 'People of Yue, Forget Not Your Ancestors' Instructions' seems to be either predominantly authored or extensively revised by Lu Xun given its notable stylistic similarities to 'Looking at the Land of Yue,' a piece Zhou Zuoren recognized as his own, but edited by Lu Xun. The third essay, 'Where Has the Character of the Republic Gone?,' exhibits a 'diluted', mixed writing style, suggesting thorough collaboration. We offer visual representations of essay features to facilitate a nuanced and intuitive understanding. We have uncovered evidence suggesting Lu Xun's covert engagement with social issues during his purported 'silent era' and provided insights into the brothers' formative intellectual trajectories.

cs.CL↗

arXiv2023

Flach system of Jacquet-Langlands type and quaternionic period

In this article, we study the adjoint Selmer group of a modular form that admits a Jacquet-Langlands transfer to a modular form on a definite quaternion algebra. We show that this Selmer group has length given by the valuation of the Petersson norm of the quaternionic modular form. Our proof is based on an Euler system argument first used by Flach in his study for the adjoint Selmer group of an elliptic curve by producing elements in the motivic cohomology of the product of two Shimura curves. However our construction does not involve Siegel modular units which make it more adaptable to study adjoint motives coming from products of higher dimensional Shimura varieties.

math.NT↗

arXiv2022

Securing 5G OpenRAN with a Scalable Authorization Framework for xApps

The ongoing transformation of mobile networks from proprietary physical network boxes to virtualized functions and deployment models has led to more scalable and flexible network architectures capable of adapting to specific use cases. As an enabler of this movement, the OpenRAN initiative promotes standardization allowing for a vendor-neutral radio access network with open APIs. Moreover, the O-RAN Alliance has begun specification efforts conforming to OpenRAN's definitions. This includes the near-real-time RAN Intelligent Controller (RIC) overseeing a group of extensible applications (xApps). The use of these potentially untrusted third-party applications introduces a new attack surface to the mobile network plane with fundamental security and system design requirements that are yet to be addressed. To secure the 5G O-RAN xApp model, we introduce the xApp Repository Function (XRF) framework, which implements scalable authentication, authorization, and discovery for xApps. We first present the framework's system design and implementation details, followed by operational benchmarks in a production-grade containerized environment. The evaluation results, centered on active processing and operation times, show that our proposed framework can scale efficiently in a multi-threaded Kubernetes microservice environment and support a large number of clients with minimal overhead.

eess.SY↗

arXiv2022

Level lowering on Siegel modular threefold of paramodular level

In this article we prove several level lowering results for cuspidal automorphic representations occurring in the cohomology of the Siegel modular threefold with paramodular level structure by adapting a method of Ribet in his proof of the Serre's epsilon conjecture. The proof is purely geometric and relies on the description of the supersingular locus of certain quaternionic unitary Shimura variety and an arithmetic level raising result on this Shimura variety. The heart of the proof is a comparison of the dimension of the space of vanishing cycles on the paramodular Siegel modular threefold with that on the quaternionic unitary Shimura variety.

math.NT↗

arXiv2022

Mathematical Modeling Analysis and Optimization of Fungal Diversity Growth

This paper studied the relationship between the decomposition rate of fungi and temperature, humidity, fungus elongation, moisture tolerance and fungus density in a given volume in the presence of a variety of fungi, and established a series of models to describe the decomposition of fungi in different states. Since the volume of soil was given in this case, the latter two characteristics could be attributed to the influence of the number of fungal population on the decomposition rate. Based on the Logistic model, the relationship between the number of population and time was established, and finally the number of fungi in the steady state was obtained The interaction between different species of fungi was analyzed by Lotka-Volterra model, and the decomposition rate of various fungal combinations in different environments was obtained. After studying the one and two cases, we can extrapher from one to the other, and the community consisting of n fungal populations will be similar to the community consisting of n+1 fungal populations. After the study, we substituted the collected data into the model and found that the fungal community composed of two kinds of fungi had a lower decomposition rate of ground decomposition or wooden fiber than that of a single kind of fungus for the same kind of substance. We found that the fungus in warm and humid environment of decomposition rate is highest, the change of the atmospheric cause some fungal population growth rate decreases, there are also some will increase, which is associated with the nature of fungi.We analyzed the influence of environmental factors, namely temperature and humidity, on the model.

q-bio.PE↗

arXiv2022

Water Goes Where? A Water Resource Allocation Method Based on Multi-Objective Decision-Making

For a long time, water and hydroelectric power are relatively important resources. Their rational distribution is closely related to regional agriculture, industry, residents, etc. In this paper, we mainly study the problem of allocation scheme for Glen Canyon Dam and Hoover Dam in the Colorado River Basin. Taking into consideration of various factors, we build models to achieve optimal scheduling. Firstly, we propose the Water Strategy Decision Model, which can obtain different distribution methods for the different water levels. Also, we connect the two dams in series to consider the coupling effect between them and integrate this part into the main model. Secondly, we propose three criteria of allocation for water and power generation, namely, economic, social, and environmental benefits. Social benefits mainly include the minimum shortage of water and electricity for agriculture, industry, and residents. For this multi-objective plan, the model is solved using a multi-objective ant colony genetic algorithm under the constraint of constant total water volume, and finally, the current reservoir capacities of the two lakes are input to derive the annual water supply to the five states. Thirdly, based on the location and development characteristics of the five states, we obtain a water scheduling model based on the priority of geographic-industry characteristics. Fourthly, we can regard the model as a four-dimensional space of industrial, agricultural, residential and power generation water demand. The partial derivative calculation formula of multi-dimensional space can be used to obtain the results. Finally, we analyze the sensitivity of the model, and it shows that the model has strong adaptability and is easier to popularize. Moreover, we discuss the advantages and disadvantages of the models.

math.OC↗

arXiv2022

Deformation of rigid Galois representations and cohomology of certain quaternionic unitary Shimura variety

In this article, we use deformation theory of Galois representations valued in the symplectic group of degree four to prove a freeness result for the cohomology of certain quaternionic unitary Shimura variety over the universal deformation ring for certain type of residual representation satisfying a property called rigidity. This result plays an important role in the proof of the arithmetic level raising theorem for the symplectic similitude group of degree four over the field of rational numbers by the author.

math.NT↗

arXiv2022

Research on FAST Active Reflector Adjustment Algorithm Based on Computer Simulation

Based on the background of the 2021 Higher Education Club Cup National College Students Mathematical Contest in Modeling A, according to the relevant data of the China Sky Eye (FAST) radio telescope, the main cable nodes and actuators are adjusted and controlled by mathematical modeling and computer simulation methods to realize the active reflector. The adjustment of the shape enables it to better receive the signal of the external celestial body and improve the utilization rate of the reflector, so as to achieve a higher receiving ratio of the feed cabin. In this paper, a point set mapping algorithm based on the rotation matrix of the spatial coordinate axis is proposed, that is, the mapping matrix is obtained by mathematical derivation, and the linear interpolation algorithm based on the original spherical surface and the ideal paraboloid to solve the working paraboloid is obtained. When the interpolation ratio is adjusted to 89% to satisfy the optimal solution under realistic constraints. Then, a three-dimensional spatial signal reflection model based on spatial linear invariance is proposed. Each reflective panel is used as an evaluation index. For each reflective surface, the 0-1 variable of signal accessibility on the feeder is defined. The signal is mapped to the plane where the feeder is located, which reduces a lot of computational difficulty. Finally, it is found that the panel of the feed cabin that can receive the reflected signal accounts for 19.3%. Compared with the original spherical reflection model, the working paraboloid model established in this paper has a The signal ratio has increased by 224%.

math.OC↗

arXiv2022

OPTILOD: Optimal Beacon Placement for High-Accuracy Indoor Localization of Drones

For many applications, drones are required to operate entirely or partially autonomously. To fly completely or partially on their own, drones need access to location services to get navigation commands. While using the Global Positioning System (GPS) is an obvious choice, GPS is not always available, can be spoofed or jammed, and is highly error-prone for indoor and underground environments. The ranging method using beacons is one of the popular methods for localization, specially for indoor environments. In general, localization error in this class is due to two factors: the ranging error and the error induced by the relative geometry between the beacons and the target object to localize. This paper proposes OPTILOD (Optimal Beacon Placement for High-Accuracy Indoor Localization of Drones), an optimization algorithm for the optimal placement of beacons deployed in three-dimensional indoor environments. OPTILOD leverages advances in Evolutionary Algorithms to compute the minimum number of beacons and their optimal placement to minimize the localization error. These problems belong to the Mixed Integer Programming (MIP) class and are both considered NP-Hard. Despite that, OPTILOD can provide multiple optimal beacon configurations that minimize the localization error and the number of deployed beacons concurrently and time efficiently.

cs.RO↗

arXiv2022

iDROP: Robust Localization for Indoor Navigation of Drones with Optimized Beacon Placement

Drones in many applications need the ability to fly fully or partially autonomously to accomplish their mission. To allow these fully/partially autonomous flights, first, the drone needs to be able to locate itself constantly. Then the navigation command signal would be generated and passed on to the controller unit of the drone. In this paper, we propose a localization scheme for drones called iDROP (Robust Localization for Indoor Navigation of Drones with Optimized Beacon Placement) that is specifically devised for GPS-denied environments (e.g., indoor spaces). Instead of GPS signals, iDROP relies on speaker-generated ultrasonic acoustic signals to enable a drone to estimate its location. In general, localization error is due to two factors: the ranging error and the error induced by relative geometry between the transmitters and the receiver. iDROP mitigates these two types of errors and provides a high-precision three-dimensional localization scheme for drones. iDROP employs a waveform that is robust against multi-path fading. Moreover, by placing beacons in optimal locations, it reduces the localization error induced by the relative geometry between the transmitters and the receiver.

eess.SP↗