Searcharxiv⌕ Search

arXiv subjects

Wenqiang Li

Publications and source records attributed to Wenqiang Li.

27 records · Page 2Linked to original sources

Understanding thermal induced escape mechanism of optically levitated sphere in vacuum

The escape phenomenon, mainly caused by thermal effects, is known as an obstacle to the further practical application of optical levitation system in vacuum. Irregular photophoresis induced by thermal effects can act as an amplifier of Brownian motion. Studies on this topic provide interpretation for particle escaping phenomenon during the pressure decreasing process, as well as valuable insights into the micro- and nanoscale thermal effects in optical trap in vacuum. In this paper, we derive and test a dynamic model for the motion of an optically levitated particle in a non-equilibrium state and demonstrate the escaping mechanism of heated particles. The result of theoretical investigations is consistent with experimental escape at 0.1mbar. This work reveals and provides a theoretical basis for the stable operation of laser levitated oscillator in high vacuum and pave the way for the practicability of ultra-sensitive sensing devices.

physics.optics↗

Backward stochastic differential equations with conditional reflection and related recursive optimal control problems

We introduce a new type of reflected backward stochastic differential equations (BSDEs) for which the reflection constraint is imposed on its main solution component, denoted as $Y$ by convention, but in terms of its conditional expectation $\mathbb{E}[Y_t|\mathcal{G}_{t}]$ on a general sub-filtration $\{\mathcal{G}_{t}\}.$ We thus term such equation as conditionally reflected BSDE (for short, conditional RBSDE). Conditional RBSDE subsumes classical RBSDE with a pointwise reflection barrier, and the recent developed BSDE with a mean reflection constraint, as its two special and extreme cases: they exactly correspond to $\{\mathcal{G}_{t}\}$ being the full filtration to represent complete information, and the degenerated filtration to deterministic scenario, respectively. For conditional RBSDE, we obtain its existence and uniqueness under mild conditions by combining the Snell envelope method with Skorokhod lemma. We also discuss its connection, in the case of linear driver, to a class of optimal stopping problems in presence of partial information. As a by-product, a new version of comparison theorem is obtained. With the help of this connection, we study weak formulations of a class of optimal control problems with reflected recursive functionals by characterizing the related optimal solution and value. Moreover, in the special case of recursive functionals being RBSDE with pointwise reflections, we study the strong formulations of related stochastic backward recursive control and zero-sum games, both in non-Markovian framework, that are of their own interests and have not been fully explored by existing literatures yet.

math.PR↗

$μ$AFL: Non-intrusive Feedback-driven Fuzzing for Microcontroller Firmware

Fuzzing is one of the most effective approaches to finding software flaws. However, applying it to microcontroller firmware incurs many challenges. For example, rehosting-based solutions cannot accurately model peripheral behaviors and thus cannot be used to fuzz the corresponding driver code. In this work, we present $μ$AFL, a hardware-in-the-loop approach to fuzzing microcontroller firmware. It leverages debugging tools in existing embedded system development to construct an AFL-compatible fuzzing framework. Specifically, we use the debug dongle to bridge the fuzzing environment on the PC and the target firmware on the microcontroller device. To collect code coverage information without costly code instrumentation, $μ$AFL relies on the ARM ETM hardware debugging feature, which transparently collects the instruction trace and streams the results to the PC. However, the raw ETM data is obscure and needs enormous computing resources to recover the actual instruction flow. We therefore propose an alternative representation of code coverage, which retains the same path sensitivity as the original AFL algorithm, but can directly work on the raw ETM data without matching them with disassembled instructions. To further reduce the workload, we use the DWT hardware feature to selectively collect runtime information of interest. We evaluated $μ$AFL on two real evaluation boards from two major vendors: NXP and STMicroelectronics. With our prototype, we discovered ten zero-day bugs in the driver code shipped with the SDK of STMicroelectronics and three zero-day bugs in the SDK of NXP. Eight CVEs have been allocated for them. Considering the wide adoption of vendor SDKs in real products, our results are alarming.

cs.CR↗

From Library Portability to Para-rehosting: Natively Executing Microcontroller Software on Commodity Hardware

Finding bugs in microcontroller (MCU) firmware is challenging, even for device manufacturers who own the source code. The MCU runs different instruction sets than x86 and exposes a very different development environment. This invalidates many existing sophisticated software testing tools on x86. To maintain a unified developing and testing environment, a straightforward way is to re-compile the source code into the native executable for a commodity machine (called rehosting). However, ad-hoc re-hosting is a daunting and tedious task and subject to many issues (library-dependence, kernel-dependence and hardware-dependence). In this work, we systematically explore the portability problem of MCU software and propose pararehosting to ease the porting process. Specifically, we abstract and implement a portable MCU (PMCU) using the POSIX interface. It models common functions of the MCU cores. For peripheral specific logic, we propose HAL-based peripheral function replacement, in which high-level hardware functions are replaced with an equivalent backend driver on the host. These backend drivers are invoked by well-designed para-APIs and can be reused across many MCU OSs. We categorize common HAL functions into four types and implement templates for quick backend development. Using the proposed approach, we have successfully rehosted nine MCU OSs including the widely deployed Amazon FreeRTOS, ARM Mbed OS, Zephyr and LiteOS. To demonstrate the superiority of our approach in terms of security testing, we used off-the-shelf dynamic analysis tools (AFL and ASAN) against the rehosted programs and discovered 28 previously-unknown bugs, among which 5 were confirmed by CVE and the other 19 were confirmed by vendors at the time of writing.

cs.PL↗

A game theoretical approach to homothetic robust forward investment performance processes in stochastic factor models

This paper studies an optimal forward investment problem in an incomplete market with model uncertainty, in which the underlying stocks depend on the correlated stochastic factors. The uncertainty stems from the probability measure chosen by an investor to evaluate the performance. We obtain directly the representation of the homothetic robust forward performance processes in factor-form by combining the zero-sum stochastic differential game and ergodic BSDE approach. We also establish the connections with the risk-sensitive zero-sum stochastic differential games over an infinite horizon with ergodic payoff criteria, as well as with the classical robust expected utilities for long time horizons. Finally, we give an example to illustrate that our approach can be applied to address a type of robust forward investment performance processes with negative realization processes.

q-fin.PM↗

Atrous Residual Interconnected Encoder to Attention Decoder Framework for Vertebrae Segmentation via 3D Volumetric CT Images

Automatic medical image segmentation based on Computed Tomography (CT) has been widely applied for computer-aided surgery as a prerequisite. With the development of deep learning technologies, deep convolutional neural networks (DCNNs) have shown robust performance in automated semantic segmentation of medical images. However, semantic segmentation algorithms based on DCNNs still meet the challenges of feature loss between encoder and decoder, multi-scale object, restricted field of view of filters, and lack of medical image data. This paper proposes a novel algorithm for automated vertebrae segmentation via 3D volumetric spine CT images. The proposed model is based on the structure of encoder to decoder, using layer normalization to optimize mini-batch training performance. To address the concern of the information loss between encoder and decoder, we designed an Atrous Residual Path to pass more features from encoder to decoder instead of an easy shortcut connection. The proposed model also applied the attention module in the decoder part to extract features from variant scales. The proposed model is evaluated on a publicly available dataset by a variety of metrics. The experimental results show that our model achieves competitive performance compared with other state-of-the-art medical semantic segmentation methods.

eess.IV↗

Force and acceleration sensing with optically levitated nanogram masses at microkelvin temperatures

This paper demonstrates cooling of the center-of-mass motion of 10 $μ$m-diameter optically levitated silica spheres to an effective temperature of $50\pm22 μ$K, achieved by minimizing the technical pointing noise of the trapping laser. This low noise leads to an acceleration and force sensitivity of $95\pm41$ n$g/\sqrt{\mathrm{Hz}}$ ($g = 9.8$ m/s$^2$) and $0.95\pm0.11$ aN$/\sqrt{\mathrm{Hz}}$, respectively, at frequencies near 50 Hz. This force sensitivity is comparable to that demonstrated for optically levitated nanospheres that are $10^4$ times less massive, corresponding to an acceleration sensitivity that is several orders of magnitude better. It is further shown that under these conditions the spheres remain stably trapped at pressures of $\sim 10^{-7}$ mbar with no active cooling for periods longer than a day. Feedback cooling is still necessary in the moderate-pressure regime, motivating a comprehensive study of the loss mechanisms of the microspheres and providing better understanding of the requirements for feedback-free optical trapping in vacuum. This work can enable high-sensitivity searches for accelerations and forces acting on micron-sized masses, including those that could be produced by new physics beyond the Standard Model.

physics.optics↗

Fully coupled mean-field FBSDEs with jumps and related optimal control problems

This paper study a type of fully coupled mean-field forward-backward stochastic differential equations with jumps under the monotonicity condition, including the existence and the uniqueness of the solution of our equation as well as the continuity property of the solutions with respect to the parameters. Then we establish the stochastic maximum principle for the corresponding optimal control problems and give the applications to mean-variance portfolio problems and linear-quadratic problems, respectively.

math.OC↗

Zero-sum and nonzero-sum differential games without Isaacs condition

In this paper we study the zero-sum and nonzero-sum differential games with not assuming Isaacs condition. Along with the partition $π$ of the time interval $[0,T]$, we choose the suitable random non-anticipative strategy with delay to study our differential games with asymmetric information. Using Fenchel transformation, we prove that the limits of the upper value function $W^π$ and lower value function $V^π$ coincide when the mesh of partition $π$ tends to 0. Moreover, we give a characterization for the Nash equilibrium payoff (NEP, for short) of our nonzero-sum differential games without Isaacs condition, then we prove the existence of the NEP of our games. Finally, by considering all the strategies along with all partitions, we give a new characterization for the value of our zero-sum differential game with asymmetric information under some equivalent Isaacs condition.

math.OC↗