Jianwei Ying | Searcharxiv

arXiv2024

Terahertz-driven Two-Dimensional Mapping for Electron Temporal Profile Measurement

The precision measurement of real-time electron temporal profiles is crucial for advancing electron and X-ray devices used in ultrafast imaging and spectroscopy. While high temporal resolution and large temporal window can be achieved separately using different technologies, real-time measurement enabling simultaneous high resolution and large window remains challenging. Here, we present the first THz-driven sampling electron oscilloscope capable of measuring electron pulses with high temporal resolution and a scalable, large temporal window simultaneously. The transient THz electric field induces temporal electron streaking in the vertical axis, while extended interaction along the horizontal axis leads to a propagation-induced time delay, enabling electron beam sampling with sub-cycle THz wave. This allows real-time femtosecond electron measurement with a tens-of-picosecond window, surpassing previous THz-based techniques by an order of magnitude. The measurement capability is further enhanced through projection imaging, deflection cavity tilting, and shorted antenna utilization, resulting in signal spatial magnification, extended temporal window, and increased field strength. The technique holds promise for a wide range of applications and opens new opportunities in ultrafast science and accelerator technologies.

physics.optics↗

arXiv2024

Marlin: Knowledge-Driven Analysis of Provenance Graphs for Efficient and Robust Detection of Cyber Attacks

Recent research in both academia and industry has validated the effectiveness of provenance graph-based detection for advanced cyber attack detection and investigation. However, analyzing large-scale provenance graphs often results in substantial overhead. To improve performance, existing detection systems implement various optimization strategies. Yet, as several recent studies suggest, these strategies could lose necessary context information and be vulnerable to evasions. Designing a detection system that is efficient and robust against adversarial attacks is an open problem. We introduce Marlin, which approaches cyber attack detection through real-time provenance graph alignment.By leveraging query graphs embedded with attack knowledge, Marlin can efficiently identify entities and events within provenance graphs, embedding targeted analysis and significantly narrowing the search space. Moreover, we incorporate our graph alignment algorithm into a tag propagation-based schema to eliminate the need for storing and reprocessing raw logs. This design significantly reduces in-memory storage requirements and minimizes data processing overhead. As a result, it enables real-time graph alignment while preserving essential context information, thereby enhancing the robustness of cyber attack detection. Moreover, Marlin allows analysts to customize attack query graphs flexibly to detect extended attacks and provide interpretable detection results. We conduct experimental evaluations on two large-scale public datasets containing 257.42 GB of logs and 12 query graphs of varying sizes, covering multiple attack techniques and scenarios. The results show that Marlin can process 137K events per second while accurately identifying 120 subgraphs with 31 confirmed attacks, along with only 1 false positive, demonstrating its efficiency and accuracy in handling massive data.

cs.CR↗