Recent Botnets such as Conficker, Kraken and Torpig have used DNS based "domain fluxing" for command-and-control, where each Bot queries for existence of a series of domain names and the owner has to register only one such domain name. In this report, we develop a methodology to detect such "domain fluxes" in DNS traffic by looking for patterns inherent to domain names that are generated algorithmically, in contrast to those generated by humans. In particular, we look at distribution of alphanumeric characters as well as bigrams in all domains that are mapped to the same set of IP-addresses. We present and compare the performance of several distance metrics, including KL-distance and Edit distance. We train by using a good data set of domains obtained via a crawl of domains mapped to all IPv4 address space and modeling bad data sets based on behaviors seen so far and expected. We also apply our methodology to packet traces collected at two Tier-1 ISPs and show we can automatically detect domain fluxing as used by Conficker botnet with minimal false positives. We are also able to detect new botnets and other malicious networks using our method.

No description available.

Hypereutectic Al-Si alloys are of increasing interest for applications that require a combination of light weight and high wear resistance, such as pistons, liner-less engine blocks and pumps. The wear resistance of this class of alloys is due to the presence of hard primary Si particles formed during casting. The objective of this work was to develop one or more methods of refining primary silicon in cast hypereutectic Al-Si alloys to compete with the conventional process of adding phosphorous and to achieve the simultaneous modification of silicon in the Al-Si eutectic. A robust sampling/casting technique was developed to minimise macro-segregation of primary silicon during solidification of hypereutectic Al-Si alloys by using water cooled steel mould with cooling rate in excess of 15 K/s. The morphology of silicon phases was found to change with increasing melt temperature and cooling rate. The high cooling rate and superheat temperature produces a good distribution of polyhedral primary silicon particles in a refined lamellar eutectic matrix in solidification of commercial purity Al-Si alloys. Removing Ca by fluxing with K2SiF6 prior to casting can improve the refinement and modification effect of Mg and Sb respectively. Effects of various inoculants were studied. Microstructural analysis showed that Mg and ZnS refined primary Si whereas MgO, CaO and Na2S coarsened the primary Si together with a modification effect on the eutectic Si. Adding Zn had no effect on morphology of Si phases. Refinement of both primary and eutectic silicon phases was observed for the Al-15Si alloy with Mg content ≤ 0.3 wt%. P-doped γ-Al2O3 was found to be a potent substrate to nucleate primary silicon whilst good modification of the eutectic matrix is retained during solidification of hypereutectic Al-Si alloys. On using P-doped γ-Al2O3 could be a perfect and clean source of P without additional impurities. A new solid-liquid duplex casting process was devised to achieve simultaneous refinement and modification of Si phases in hypereutectic Al-Si alloys with improvement in mechanical properties. The static mechanical properties of Al-Si produced by the solid-liquid duplex casting process are significantly better than conventionally cast untreated Al-Si and slightly better than conventionally cast Al-Si treated with P and/or Sr. A novel Al-ZnS master alloy was developed by in situ reaction of Zn and Na2S in the Al melt. The results from this study leave little doubt that this novel Al-ZnS master alloy is a promising refiner in solidification of hypereutectic Al-Si alloys. It refines primary silicon to the same extent as that achieved by adding P via Cu-P following the same refinement mechanism.

Computer networks are constantly being attacked by malicious entities for various reasons. Network based attacks include but are not limited to, Distributed Denial of Service (DDoS), DNS based attacks, Cross-site Scripting (XSS) etc. Such attacks have exploited either the network protocol or the end-host software vulnerabilities for perpetration. Current network traffic analysis techniques employed for detection and/or prevention of these anomalies suffer from significant delay or have only limited scalability because of their huge resource requirements. This dissertation proposes more scalable techniques for network anomaly detection. We propose using DNS analysis for detecting a wide variety of network anomalies. The use of DNS is motivated by the fact that DNS traffic comprises only 2-3% of total network traffic reducing the burden on anomaly detection resources. Our motivation additionally follows from the observation that almost any Internet activity (legitimate or otherwise) is marked by the use of DNS. We propose several techniques for DNS traffic analysis to distinguish anomalous DNS traffic patterns which in turn identify different categories of network attacks. First, we present MiND, a system to detect misdirected DNS packets arising due to poisoned name server records or due to local infections such as caused by worms like DNSChanger. MiND validates misdirected DNS packets using an externally collected database of authoritative name servers for second or third-level domains. We deploy this tool at the edge of a university campus network for evaluation. Secondly, we focus on domain-fluxing botnet detection by exploiting the high entropy inherent in the set of domains used for locating the Command and Control (C&C) server. We apply three metrics namely the Kullback-Leibler divergence, the Jaccard Index, and the Edit distance, to different groups of domain names present in Tier-1 ISP DNS traces obtained from South Asia and South America. Our evaluation successfully detects existing domain-fluxing botnets such as Conficker and also recognizes new botnets. We extend this approach by utilizing DNS failures to improve the latency of detection. Alternatively, we propose a system which uses temporal and entropy-based correlation between successful and failed DNS queries, for fluxing botnet detection. We also present an approach which computes the reputation of domains in a bipartite graph of hosts within a network, and the domains accessed by them. The inference technique utilizes belief propagation, an approximation algorithm for marginal probability estimation. The computation of reputation scores is seeded through a small fraction of domains found in black and white lists. An application of this technique, on an HTTP-proxy dataset from a large enterprise, shows a high detection rate with low false positive rates.

受到電信自由化的影響，我國行政院於民國76年起，也開始了電信自由化的腳步，民國88年底，開放固定通信業務，使我國所有的電信服務業都開放競爭。正因為電信市場的全面開放，使得電信市場的競爭愈益激烈，電信服務業者不得不快速調整其經營步伐及經營策略，以面對種種外在環境的挑戰。 　本研究的目的主要是探討科技環境變遷對電信產經營之影響，而研究對象則選定在台灣電信市場中極具代表性的中華電信公司。本文採用個案研究方法（Case Study），屬於探索性研究（Exploratory）。先針對電信產業做相關分析，探討科技環境變遷對電信產經營之影響，之後以此分析結果，再針對中華電信做相關探討，以獲得驗證。 / In order to compete with the worldwide open telecommunication industry market, the Executive Yuan had planned the step to open our telecommunication market from 1987. And then open out the fixed network service and all kind of telecommunication business for public to deal in the end of 1999. Because the entirely open for the market, the competition in telecommunication market become more and more vehemently than ever. In order to fit the market and against all kind of challenge, the telecommunication service providers have to change and adjust their management policy and strategy. The main purpose for this research is to investigate the influence of the technology environment fluxing to running the telecommunication industry business. And the target to study is locate on ChungHua Telecommunication Inc, which stand a important position in Taiwan telecommunication market. 　The Thesis uses the case study method to do this research, and it's an exploratory one. It first analyzing the telecommunication industry, and investigating the influence of the technology environment fluxing to running the telecommunication industry business. Then we do study and analyze into the ChungHwa Telecommunication Inc.according to this result we just got, and confirm it.

Thesis (M.Ing. (Chemical Engineering))--North-West University, Potchefstroom Campus, 2009.

Coal, as energy resource, possesses numerous characteristics and properties which all have an influence on its gasification behaviour. The two properties considered critically important when evaluating a coal source for gasification are its mineral content and slagging behaviour. Research has indicated that slag formation can be inhibited or even prevented by the addition of a fluxing agent. It is thus of great importance to understand the mineral interaction during gasification, in order to select a suitable fluxing agent for the prevention of slagging and clinker formation in the gasifier. The aim of this dissertation is to evaluate the slagging properties of a coal source with the addition of iron as a fluxing agent and to study the transformation of the mineral and added iron during gasification. A pre-determined amount of elemental iron (between 2 and 20 percentage by mass) was added to three different coal samples obtained from Sasol's operations in South Africa. The transformation of the iron in conjunction with the possible iron-containing minerals present in the coal was studied by means of Mossbauer spectroscopy. Typical characterisation analyses were also carried out on the original coal samples. The ash fusion temperature analyses (AFT) were used to study the slagging behaviour of the iron-spiked coal samples. Even though AFT analyses only provide an average flow property, it gives a good indication of the changes that the iron addition induces in coal properties. FactSage modelling was carried out in conjunction with the Mossbauer and AFT analyses. The AFT analysis on all of the samples indicated that the iron addition led to a 20% decrease in the AFT of all three the coal samples. The decrease observed, can be attributed to three main reasons: Formation of lower melting iron-containing phases, bridging of oxygen bonds by FeO and Fe203and the lowering of the viscosity by the iron-oxides, mainly hematite. Mossbauer spectra of the three original coal samples indicated that pyrite was the only iron-bearing mineral present / Thesis (M.Ing. (Chemical Engineering))--North-West University, Potchefstroom Campus, 2009.

Coal, as energy resource, possesses numerous characteristics and properties which all have an influence on its gasification behaviour. The two properties considered critically important when evaluating a coal source for gasification are its mineral content and slagging behaviour. Research has indicated that slag formation can be inhibited or even prevented by the addition of a fluxing agent. It is thus of great importance to understand the mineral interaction during gasification, in order to select a suitable fluxing agent for the prevention of slagging and clinker formation in the gasifier. The aim of this dissertation is to evaluate the slagging properties of a coal source with the addition of iron as a fluxing agent and to study the transformation of the mineral and added iron during gasification. A pre-determined amount of elemental iron (between 2 and 20 percentage by mass) was added to three different coal samples obtained from Sasol's operations in South Africa. The transformation of the iron in conjunction with the possible iron-containing minerals present in the coal was studied by means of Mossbauer spectroscopy. Typical characterisation analyses were also carried out on the original coal samples. The ash fusion temperature analyses (AFT) were used to study the slagging behaviour of the iron-spiked coal samples. Even though AFT analyses only provide an average flow property, it gives a good indication of the changes that the iron addition induces in coal properties. FactSage modelling was carried out in conjunction with the Mossbauer and AFT analyses. The AFT analysis on all of the samples indicated that the iron addition led to a 20% decrease in the AFT of all three the coal samples. The decrease observed, can be attributed to three main reasons: Formation of lower melting iron-containing phases, bridging of oxygen bonds by FeO and Fe203and the lowering of the viscosity by the iron-oxides, mainly hematite. Mossbauer spectra of the three original coal samples indicated that pyrite was the only iron-bearing mineral present / Thesis (M.Ing. (Chemical Engineering))--North-West University, Potchefstroom Campus, 2009.

The quality of aluminium cast billets is highly dependent on the cleanliness of the material. Hydro Extruded Solutions are casting billets in Sjunnen that are delivered for extrusion within the same company. In order to produce extruded profiles of high quality and also maintain the pressing tools, it is a good method to keep the billets as free from inclusions as possible. A fluxing agent in form of salt compounds is used to purify the material during melting, but also to protect it from further oxidation. Another task of fluxing agents is to minimize the aluminium amount in the dross phase. The purpose of this project was to investigate if the fluxing agent that is used by the cast house is having any impact on the quality of the billets. Therefore, for that purpose, samples with a variating amount of fluxing agent were processed by the cast house in order to be investigated. These samples were investigated with the Optical Microscopy-method in order to determine the area fraction of non-metallic inclusions inside them. The results did not reveal any significant difference in the quality of the different samples since most samples obtained a low OM-index after the investigation. That can be explained by the type of scrap that was used since new scrap is usually very clean and contains smaller amounts of inclusions. / Kvaliteten hos aluminiumgöt är starkt beroende av renheten i materialet. Hydro Extruded Solutions gjuter rundgöt i Sjunnen, som sedan levereras för strängpressning inom samma företag. För att producera strängpressade profiler av hög kvalitet och även upprätthålla pressverktygen, är en bra metod att hålla göten så fria från inneslutningar som möjligt. Ett flussmedel, i form av saltföreningar, används för att rena materialet under smältningen, men också för att skydda den från vidare oxidation. En annan uppgift som flussmedel har är att minimera mängden aluminium i slaggfasen. Syftet med detta projekt var att undersöka om flussmedelet som används av omsmältverket har någon inverkan på götkvaliteten. Därför, för detta ändamål har prover med en varierande mängd av flussmedel tillverkats i omsmältverket för att bli undersökta. Dessa prover undersöktes med den Optiskt Mikroskopiska-metoden för att bestämma areafraktionen av icke-metalliska inneslutningar inuti dem. Resultaten avslöjade inte någon signifikant skillnad i kvaliteten hos de olika proverna eftersom de flesta prover erhöll ett lågt OM-index efter undersökningen. Detta kan förklaras av vilken typ av skrot som användes, då process-skrot oftast är väldigt rent och består av mindre mängder innseslutningar.

Made available in DSpace on 2014-12-17T14:07:17Z (GMT). No. of bitstreams: 1 EduardoJVD_TESE.pdf: 12520494 bytes, checksum: 33cb961e885b2677da82d2f828a92417 (MD5) Previous issue date: 2013-05-23 / Coordena??o de Aperfei?oamento de Pessoal de N?vel Superior / To produce porcelain tiles fluxing agents are used in order to obtain a liquid phase during firing. This liquid phase fills the pores decreasing porosity, water absorption and contributes to material densification. In the porcelain tiles industry, feldspar is the main flux material used, with quantities ranging between 35 and 50%. Studies focus on the discovery of materials with flux characteristics that can reduce the consumption of feldspar by porcelain tiles industry. In this context, the coffee husk ashes, a residue obtained when coffee husks are burned to produce heat for the dryers during the processing of the green fruit, have as main chemical constituents potassium, calcium and magnesium, giving them characteristics of fluxing material. Brazil is the largest coffee producer in the world and is responsible for over 30% of the world s production. In this work a physical treatment of coffee husk ash was carried out in order to eliminate the organic matter and, after this, two by-products were obtained: residual wastes R1 and R2. Both residues were added separately as single fluxes and also in association with feldspar in mixtures with raw materials collected in a porcelain industry located in Dias d ?vila-Ba. The addition of these residues aimed to contribute to the reduction of the consumption of feldspar in the production of porcelain tiles. Specimens were produced with dimensions of 60 mm x 20 mm x 6 mm in an uniaxial die with compacting pressure of 45 MPa. The samples were heated to a temperature of 1200 ?C, for 8 minutes. Tests were performed to characterize the raw materials by XRF, XRD, particle size analysis, DTA and TGA and, additionally, the results of the physical properties of water absorption, apparent porosity, linear shrinkage, density, dilatometry, flexural strength and SEM of sintered body were analyzed. Additions of less than 8% of the residue R1 contributed to the decrease of porosity, but the mechanical strength of the samples was not satisfactory. Additions of 5% the R2 residue contributed significantly to decrease the water absorption and apparent porosity, and also to increase the mechanical strength. Samples with addition of feldspar associated with the R2 residue, in proportions of 6.7% of R2 and 6.7% of feldspar, led to results of water absorption of 0.12% and mechanical strength of 46 MPa, having parameters normalized to the manufacture of porcelain stoneware tiles / Na fabrica??o de porcelanatos s?o utilizados fundentes com a finalidade de obter fase l?quida durante a queima que, por sua vez, preenche os poros diminuindo a porosidade, a absor??o de ?gua, e contribui para a densifica??o do material. Na ind?stria de porcelanatos o feldspato ? o principal material fundente utilizado, com percentuais que variam entre 35 e 50% em massa. Pesquisas s?o direcionadas para a descoberta de materiais com caracter?sticas fundentes que possam diminuir o consumo de feldspato. Nesse contexto, a cinza da casca de caf?, res?duo obtido quando cascas de caf? s?o queimadas a fim de produzir calor para os secadores mec?nicos durante o beneficiamento do fruto, possuem como principais elementos o pot?ssio, c?lcio e magn?sio, conferindo-lhe caracter?sticas de material fundente. O Brasil ? o maior produtor de caf? do mundo, respons?vel por mais de 30% da produ??o mundial. Nesse trabalho, foi realizado um tratamento f?sico na cinza de caf? com a finalidade de eliminar parte do material carbonizado e, ap?s este, foram obtidos dois subprodutos: res?duo R1 e res?duo R2. Ambos os res?duos foram adicionados, separadamente, como ?nicos fundentes, e tamb?m associados ao feldspato, em massas com mat?rias primas coletadas em uma f?brica de porcelanatos localizada no munic?pio de Dias d ?vila-Ba. A adi??o desses res?duos teve o objetivo de verificar a possibilidade de reduzir o consumo de feldspato na produ??o de porcelanatos. Foram confeccionados corpos de prova com dimens?es de 60 mm x 20 mm x 6 mm em matriz uniaxial, com press?o de compacta??o de 45 MPa. Os corpos de prova foram sinterizados na temperatura de 1200 ?C com patamar de 8 minutos. Foram realizados ensaios para caracteriza??o das mat?riasprimas por FRX, DRX, AG, ATD e ATG, e analisados os resultados das propriedades f?sicas de absor??o de ?gua, porosidade aparente, retra??o linear, MEA, an?lise dilatom?trica, resist?ncia ? flex?o e MEV do corpo sinterizado. A adi??o de at? 8% do res?duo R1 contribuiu para a diminui??o da porosidade aparente, por?m a resist?ncia mec?nica das amostras n?o foi satisfat?ria. A adi??o de 5% de res?duo R2 contribuiu significativamente para diminuir absor??o de ?gua e porosidade aparente, e tamb?m, para o aumento da resist?ncia mec?nica ? flex?o. As amostras com adi??o do res?duo R2 associado ao feldspato, nas propor??es de 6,7% de R2 e 6,7% de feldspato, obtiveram resultados de absor??o de ?gua de 0,12% e resist?ncia mec?nica ? flex?o de 46 MPa, atendendo aos par?metros normalizados para fabrica??o de porcelanatos