arXiv subjects

Zhou Li

Publications and source records attributed to Zhou Li.

At least 73 records · Page 4Linked to original sources

arXiv2018

Understanding Android Obfuscation Techniques: A Large-Scale Investigation in the Wild

In this paper, we seek to better understand Android obfuscation and depict a holistic view of the usage of obfuscation through a large-scale investigation in the wild. In particular, we focus on four popular obfuscation approaches: identifier renaming, string encryption, Java reflection, and packing. To obtain the meaningful statistical results, we designed efficient and lightweight detection models for each obfuscation technique and applied them to our massive APK datasets (collected from Google Play, multiple third-party markets, and malware databases). We have learned several interesting facts from the result. For example, malware authors use string encryption more frequently, and more apps on third-party markets than Google Play are packed. We are also interested in the explanation of each finding. Therefore we carry out in-depth code analysis on some Android apps after sampling. We believe our study will help developers select the most suitable obfuscation approach, and in the meantime help researchers improve code analysis systems in the right direction.

cs.CR↗

arXiv2016

Vulnerable GPU Memory Management: Towards Recovering Raw Data from GPU

In this paper, we present that security threats coming with existing GPU memory management strategy are overlooked, which opens a back door for adversaries to freely break the memory isolation: they enable adversaries without any privilege in a computer to recover the raw memory data left by previous processes directly. More importantly, such attacks can work on not only normal multi-user operating systems, but also cloud computing platforms. To demonstrate the seriousness of such attacks, we recovered original data directly from GPU memory residues left by exited commodity applications, including Google Chrome, Adobe Reader, GIMP, Matlab. The results show that, because of the vulnerable memory management strategy, commodity applications in our experiments are all affected.

cs.CR↗

arXiv2015

Measurement of the fluorescence quantum yield of bis-MSB

The fluorescence quantum yield of bis-MSB, a widely used liquid scintillator wavelength shifter, was measured to study the photon absorption and re-emission processes in liquid scintillator. The re-emission process affects the photoelectron yield and distribution, especially in a large liquid scintillator detector, thus must be understood to optimize the liquid scintillator for good energy resolution and to precisely simulate the detector with Monte Carlo. In this study, solutions of different bis-MSB concentration were prepared for absorption and fluorescence emission measurements to cover a broad range of wavelengths. Harmane was used as a standard reference to obtain the absolution fluorescence quantum yield. For the first time we measured the fluorescence quantum yield of bis-MSB up to 430 nm as inputs required by Monte Carlo simulation, which is 0.926$\pm$0.053 at $λ_{\rm ex}$ = 350 nm.

physics.ins-det↗

arXiv2015

Optical spectral weight: comparison of weak and strong spin-orbit coupling

The Fermi velocity ($v_{F}$) associated with the spin-orbit coupling is two orders of magnitude smaller for spintronic semiconductors than it is for topological insulators. Both families can be treated with the same Hamiltonian which contains a relativistic (Dirac) linear in momentum term proportional to $v_{F}$ and a non-relativistic quadratic contribution with Schrödinger mass (m). We find that the AC dynamic longitudinal and transverse (Hall) magneto-conductivities are strongly dependent on the size of $v_{F}$. When the Dirac fermi velocity is small, the absorption background provided by the interband optical transitions is finite only over a very limited range of photon energies as compared with topological insulators. Its onset depends on the value of the chemical potential ($μ$) and on the magnetic field (B), as does its upper cut off. Within this limited range its magnitude is however constant and has the same magnitude of $e^{2}π/(8h)$ as is found in topological insulators and also in graphene noting a difference in degeneracy factor. The total optical spectral weight under the universal interband background is $e^{2}π/(8h)4mv_{F}^{2}$. In contrast to the known result for graphene no strict conservation law applies to the spectral weight transfers between inter and intra band transition brought about by variations in the magnitude of the chemical potential when a non-relativistic contribution is present in the Hamiltonian whatever size it may have.

cond-mat.mes-hall↗

arXiv2015

Electron-phonon correlations on spin texture of gapped helical Dirac Fermions

The metallic surface states of a topological insulator support helical Dirac fermions protected by topology with their spin locked perpendicular to their momentum. They can acquire mass through magnetic doping or through hybridization of states on opposite faces of a thin sample. In this case there can be a component of electron spin oriented perpendicular to the surface plane. The electron-phonon interaction renormalizes the dynamics of the charge carriers through their spectral density. It also modifies the gap channel and a second spectral function enters which, not only determines the out of plane spin component, but also comes into in-plane properties. While the out of plane spin component is decreased below the Fermi momentum ($k_F$), the in plane component increases. There are also correlation tails extending well beyond $k_F$. The angular resolved photo-emission line shapes aquire Holstein side bands. The effective gap in the density of states is reduced and the optical conductivity aquires distinct measurable phonon structure even for modest value of the electron-phonon coupling.

cond-mat.mes-hall↗

arXiv2014

Detection of Early-Stage Enterprise Infection by Mining Large-Scale Log Data

Recent years have seen the rise of more sophisticated attacks including advanced persistent threats (APTs) which pose severe risks to organizations and governments by targeting confidential proprietary information. Additionally, new malware strains are appearing at a higher rate than ever before. Since many of these malware are designed to evade existing security products, traditional defenses deployed by most enterprises today, e.g., anti-virus, firewalls, intrusion detection systems, often fail at detecting infections at an early stage. We address the problem of detecting early-stage infection in an enterprise setting by proposing a new framework based on belief propagation inspired from graph theory. Belief propagation can be used either with "seeds" of compromised hosts or malicious domains (provided by the enterprise security operation center -- SOC) or without any seeds. In the latter case we develop a detector of C&C communication particularly tailored to enterprises which can detect a stealthy compromise of only a single host communicating with the C&C server. We demonstrate that our techniques perform well on detecting enterprise infections. We achieve high accuracy with low false detection and false negative rates on two months of anonymized DNS logs released by Los Alamos National Lab (LANL), which include APT infection attacks simulated by LANL domain experts. We also apply our algorithms to 38TB of real-world web proxy logs collected at the border of a large enterprise. Through careful manual investigation in collaboration with the enterprise SOC, we show that our techniques identified hundreds of malicious domains overlooked by state-of-the-art security products.

cs.CR↗

arXiv2014

An Empirical Study on Android for Saving Non-shared Data on Public Storage

With millions of apps that can be downloaded from official or third-party market, Android has become one of the most popular mobile platforms today. These apps help people in all kinds of ways and thus have access to lots of user's data that in general fall into three categories: sensitive data, data to be shared with other apps, and non-sensitive data not to be shared with others. For the first and second type of data, Android has provided very good storage models: an app's private sensitive data are saved to its private folder that can only be access by the app itself, and the data to be shared are saved to public storage (either the external SD card or the emulated SD card area on internal FLASH memory). But for the last type, i.e., an app's non-sensitive and non-shared data, there is a big problem in Android's current storage model which essentially encourages an app to save its non-sensitive data to shared public storage that can be accessed by other apps. At first glance, it seems no problem to do so, as those data are non-sensitive after all, but it implicitly assumes that app developers could correctly identify all sensitive data and prevent all possible information leakage from private-but-non-sensitive data. In this paper, we will demonstrate that this is an invalid assumption with a thorough survey on information leaks of those apps that had followed Android's recommended storage model for non-sensitive data. Our studies showed that highly sensitive information from billions of users can be easily hacked by exploiting the mentioned problematic storage model. Although our empirical studies are based on a limited set of apps, the identified problems are never isolated or accidental bugs of those apps being investigated. On the contrary, the problem is rooted from the vulnerable storage model recommended by Android. To mitigate the threat, we also propose a defense framework.

cs.CR↗

arXiv2014

Hexagonal warping on spin texture, Hall conductivity and circular dichroism of Topological Insulator

The topological protected electronic states on the surface of a topological insulator can progressively change their Fermi cross-section from circular to a snowflake shape as the chemical potential is increased above the Dirac point because of an hexagonal warping term in the Hamiltonian. Another effect of warping is to change the spin texture which exists when a finite gap is included by magnetic doping, although the in-plane spin component remains locked perpendicular to momentum. It also changes the orbital magnetic moment, the matrix element for optical absorption and the circular dichroism. We find that the Fermi surface average of z-component of spin is closely related to the value of the Berry phase. This holds even when the Hamiltonian includes a subdominant non-relativistic quadratic in momentum term (which provides particle-hole asymmetry) in addition to the dominant relativistic Dirac term. There is also a qualitative correlation between $\left\langle S_z \right\rangle$ and the dichroism. For the case when the chemical potential falls inside the gap between valence and conduction band, the Hall conductivity remains quantized and unaffected in value by the hexagonal warping term.

cond-mat.mes-hall↗

arXiv2014

Temperature dependence of the light yield of the LAB-based and mesitylene-based liquid scintillators

We studied the temperature dependence of the light yield of the linear alkyl benzene (LAB)-based and mesitylene-based liquid scintillators. The light yield increases by 23% for both liquid scintillators when the temperature is lowered from $26\;^{\circ}$C to $-40\;^{\circ }$C, correcting for the temperature response of the photomultiplier tube. The measurements help to understand the energy response of the liquid scintillator detectors. Especially, the next generation reactor neutrino experiments for neutrino mass hierarchy, such as the Jiangmen Underground Neutrino Observatory (JUNO), require very high energy resolution. As no apparent degradation on the liquid scintillator transparency was observed, lowering the operation temperature of the detector to $\sim4\;^\circ$C will increase the photoelectron yield of the detector by 13%, combining the light yield increase of the liquid scintillator and the quantum efficiency increase of the photomultiplier tubes.

physics.ins-det↗

arXiv2014

Particle-hole asymmetry on Hall conductivity of a topological insulator

The helical Dirac states on the surface of a topological insulator are protected by topology and display significant particle-hole asymmetry. This asymmetry arises from a subdominant Schrödinger type contribution to the Hamiltonian which provides a small perturbation to a dominant Dirac contribution. This changes the Landau levels energies in an external magnetic field ($B$) and provides modifications to the usual relativistic optical matrix elements. Nevertheless we find that the relativistic quantization of the Hall plateaux remains even when the ratio of the Schrödinger ($E_0$) to Dirac ($E_1$) magnetic energy scale increases either through an increase in $B$, a decrease in the Schrödinger mass or of the Dirac fermi velocity. First corrections to the optical matrix elements(OME) in the relativistic case drop out at least to order $(E_0/E_1)^3$. In the opposite limit $E_1$ small, the quantization remains classical but there is a split into two series. The first corrections to the OME in this case, cancel out at least to order $(E_1/E_0)^4$.

cond-mat.mes-hall↗

arXiv2013

Conductivity of Dirac fermions with phonon induced topological crossover

We study the Hall conductivity in single layer gapped Dirac fermion materials including coupling to a phonon field, which not only modifies the quasi-particle dynamics through the usual self-energy term but also renormalizes directly the gap. Consequently the Berry curvature is modified. As the temperature is increased the sign of the renormalized gap can change and the material can cross over from a band insulator to a topological insulator at higher temperature (T). The effective Chern numbers defined for valley and spin Hall conductivity show a rich phase diagram with increasing temperature. While the spin and valley DC Hall conductivity is no longer quantized at elevated temperature a change in sign with increasing T is a clear indication of a topological crossover. The chirality of the circularly polarized light which is dominantly absorbed by a particular valley can change with temperature as a result of a topological crossover.

cond-mat.str-el↗

arXiv2013

Vanishing of interband light absorption in a persistent spin helix state

Spin-orbit coupling plays an important role in various properties of very different materials. Moreover efforts are underway to control the degree and quality of spin-orbit coupling in materials with a concomitant control of transport properties. We calculate the frequency dependent optical conductivity in systems with both Rashba and Dresselhaus spin-orbit coupling. We find that when the linear Dresselhaus spin-orbit coupling is tuned to be equal to the Rashba spin-orbit coupling, the interband optical conductivity disappears. This is taken to be the signature of the recovery of SU(2) symmetry. The presence of the cubic Dresselhaus spin-orbit coupling modifies the dispersion relation of the charge carriers and the velocity operator. Thus the conductivity is modified, but the interband contribution remains suppressed at most but not all photon energies for a cubic coupling of reasonable magnitude. Hence, such a measurement can serve as a diagnostic probe of engineered spin-orbit coupling.

cond-mat.mes-hall↗

arXiv2013

Phonon structure in dispersion curves and density of states of massive Dirac Fermions

Dirac fermions exist in many solid state systems including graphene, silicene and other two dimensional membranes such as are found in group VI dichalcogenides, as well as on the surface of some insulators where such states are protected by topology. Coupling of those fermions to phonons introduces new structures in their dispersion curves and, in the case of massive Dirac fermions, can shift and modify the gap. We show how these changes present in angular-resolved photoemission spectroscopy of the dressed charge carrier dispersion curves and scanning tunneling microscopy measurements of their density of states. In particular we focus on the region around the band gap. In this region the charge carrier spectral density no longer consists of a dominant quasiparticle peak and a smaller incoherent phonon related background. The quasiparticle picture has broken down and this leads to important modification in both dispersion curves and density of states.

cond-mat.mes-hall↗

arXiv2013

Magneto-optical conductivity in a topological insulator

Adding a small subdominant quadratic in momentum term to a dominant linear Dirac dispersion curve affects conduction and valence band differently and leads to an hourglass-like structure for energy as a function of momentum. This applies to the protected surface states in topological insulators. The energies of the conduction and valence band Landau levels are also different and this leads to the splitting of optical absorption lines produced by the magnetic field, which acquire a two peak structure. It also changes the peaks in the imaginary part of the Hall conductivity into two distinct contributions of opposite signs. The real part of the circularly polarized optical conductivity however retains its single peak structure but the peaks in right and left handedness case are shifted in energy with respect to each other in contrast to the pure Dirac case. The magnitude of the semiclassical cyclotron frequency is significantly modified by the presence of a mass term as is its variation with value of the chemical potential $μ$. Its optical spectral weight is found to decrease with increasing $μ$ rather than increase as it does in the pure Dirac limit.

cond-mat.mes-hall↗

arXiv2012

The polaron-like nature of an electron coupled to phonons

When an electron interacts with phonons, the electron can exhibit either free electron-like or polaron-like properties. The latter tends to occur for very strong coupling, and results in a phonon cloud accompanying the electron as it moves, thus raising its mass considerably. We summarize this behaviour for the Holstein model in one, two and three dimensions, and note that the crossover occurs for fairly low coupling strengths compared to those attributed to real materials exhibiting conventional superconductivity.

cond-mat.supr-con↗

arXiv2012

Impact of Dresselhaus vs. Rashba spin-orbit coupling on the Holstein polaron

We utilize an exact variational numerical procedure to calculate the ground state properties of a polaron in the presence of Rashba and linear Dresselhaus spin-orbit coupling. We find that when the linear Dresselhaus spin-orbit coupling approaches the Rashba spin-orbit coupling, the Van-Hove singularity in the density of states will be shifted away from the bottom of the band and finally disappear when the two spin-orbit couplings are tuned to be equal. The effective mass will be suppressed; the trend will become more significant for low phonon frequency. The presence of two dominant spin-orbit couplings will make it possible to tune the effective mass with more varied observables.

cond-mat.str-el↗

arXiv2011

Impact of spin-orbit coupling on the Holstein polaron

We utilize an exact variational numerical procedure to calculate the ground state properties of a polaron in the presence of a Rashba-like spin orbit interaction. Our results corroborate with previous work performed with the Momentum Average approximation and with weak coupling perturbation theory. We find that spin orbit coupling increases the effective mass in the regime with weak electron phonon coupling, and decreases the effective mass in the intermediate and strong electron phonon coupling regime. Analytical strong coupling perturbation theory results confirm our numerical results in the small polaron regime. A large amount of spin orbit coupling can lead to a significant lowering of the polaron effective mass.

cond-mat.str-el↗

arXiv2010

Perturbation theory of the mass enhancement for a polaron coupled to acoustic phonons

We use both a perturbative Green's function analysis and standard perturbative quantum mechanics to calculate the decrease in energy and the effective mass for an electron interacting with acoustic phonons. The interaction is between the difference in lattice displacements for neighbouring ions, and the hopping amplitude for an electron between those two sites. The calculations are performed in one, two, and three dimensions, and comparisons are made with results from other electron-phonon models. We also compute the spectral function and quasiparticle residue, as a function of characteristic phonon frequency. There are strong indications that this model is always polaronic on one dimension, where an unusual relation between the effective mass and the quasiparticle residue is also found.

cond-mat.str-el↗