DLL Files Research Articles

A Machine Learning-Based PE Header Analysis for Malware Detection

The malware is file or piece of code which is delivered over network that infects or conducts any behavior as attacker desired. So, it is one of the most serious threats to modern world specially who are in touch of computerand information technology. The older signature-based detection is not convenient all the time. This was not the perfect approach as it was detection which uses unique signature or digital footprint from software running on secured system. This method is used in antivirus programs. These programs scan any software program and try to identify the signatures. These signatures are then compared to signature of known malwares. But signatures may not be known to us every time. This method has some lots of limitations. It is unable to the new patterns or indicators of new threats that are not already known. As a result, security professionals often this method in conjunction with tools that provide context into their network behavior. The PE is actually file layout that is present in .exe, .dll file formats and other machine level code and their PE headers contains information that can help us distinguish between malicious malware files and legitimate files. This method is helpful to find hidden patterns and to establish new techniques to recognize the files. The virus share suffixedfiles are also the files which performs malicious activities and malware in nature. Even this type of files can be trained and recognized with the help of PE headers-based method to recognize the nature of file. Its possible to identify the malware by looking at some key features from headers such as checksum, section name, initialized data Size, DLL characteristics and major image version.Looking at the PE header is much faster than scanning the whole information in the PE. Thus, the prediction of files are possible even with faster rate. In this paper, we will understand the different attributes available in PE headers to carefully analyses the trends and to distinguish the given executable files as malicious or legitimate on basis of PE headers using advance machine learning algorithms.

Research on Constitutive Model and Algorithm of High-Temperature-Load Coupling Damage Based on the Zienkiewicz–Pande Yield Criterion

The mechanical properties of rock can be weakened under the influence of high temperatures. To describe the mechanical behavior of rock under the action of high temperature more accurately, based on the Zienkiewicz–Pande yield criterion, the damage variable Dc which accounts for the coupling between high temperature and load is introduced. According to plastic potential theory and plastic flow law, the iterative incremental method for a high-temperature and load-coupled damage constitutive model in Flac3D is deduced in detail and compiled into the corresponding dynamic link library file (.dll file). By modifying the shape function to degenerate into the Mohr–Coulomb constitutive model, an elastic–plastic analysis of an ideal circular tunnel is performed, and a comparison is made between calculation results obtained from the built-in Mohr–Coulomb constitutive model in Flac3D, proving the correctness of the secondary development program. Finally, numerical simulations are conducted to study the effects of high-temperature damage using rock uniaxial compression tests, and the model’s validity is established by comparing it with previous experimental results.

Understanding the failure mechanism of a large underground cavern in steeply dipping layered rock mass using an enhanced ubiquitous-joint model

To understand the mechanical behavior and failure mechanism of the surrounding layered rock masses during the excavation of underground caverns for a hydropower station, an enhanced equivalent continuum model based on the ubiquitous-joint concept is developed and compiled as a plugin DLL file in FLAC3D. This model is then applied to analyze two engineering geological issues arisen during the excavations of a large underground powerhouse. Both cases are the typical responses controlled primarily by the internal structure of layered rock mass. The first case is mainly concerned with the continuous increase in the displacement of the upstream sidewall after removal of an auxiliary tunnel crown. Numerical simulation reveals the mixed shear-tensile fractures developed along bedding planes. The preserved crown thickness can affect the maximum displacement of sidewall. Failure region will progressively deepen into the interior if no effective reinforcements are adopted. The second case exhibits as the gradual cracking or slabbing of the shotcrete at downstream roof. Stress concentration is the main cause of shotcrete cracking as shown by numerical simulation. The degree of stress concentration can be influenced largely by the angle between rock strata and cavern axis. This degree also varies with the initial stress level and with excavation process, which is confirmed by field monitoring data. The validity and capability of the newly developed model are thus verified by the actual engineering issues.

Improving Antivirus Signature For Detection Ransomware Attacks With Machine Learning

Cybercrime activities are difficult separate from the development of malware. In Internet Security Threat Report, crime by exploiting malware becomes the ultimate crime. One of the highest spreading malwares is ransomware. Ransomware infections has increased year by year since 2013 and there are 1,271 detections for one day in 2017. Meanwhile, in 2018 there was a shift in attacks where 81 percent of attacks targeted enterprise so that ransomware infections increased by 12 percent. For solve this problem, this research proposed antivirus signature based on DLL Files and API Calls of ransomware files. Detection files based on antivirus signature has high theoretical value and practical significance. The experiment showed detection ransomware files based on DLL Files and functional API Calls with machine learning have a good result than detection files based on MD5 and hexdump. For testing and detection ransomware files, this research is using machine learning algorithms such as KNN, SVM, Decision Trees, and Random Forest. Experiment result showed the successful detection ransomware files, improved detection object and method research for antivirus signature.

Real-time simulator and offline/online closed-loop test bed for power system modeling and development

The high complexity of modern power systems forces engineers to design, implement, and test different equipment, precisely. The real-time simulator is one of the best tools for a researcher to test and verify complex power systems in the laboratories. Based on this issue, they can study power system control methods as well as the effects of various models in the partially simulated system. This paper presents a low-cost and versatile power system simulator that is applicable for a wide range of real-time hardware in the loop (RT-HIL) simulations of power systems. To implement the proposed closed-loop simulator, all the essential parts of a power plant, including generator, turbine-governor, excitation system (automatic voltage regulator (AVR), and power system stabilizer (PSS)), grid interconnection and loads are implemented in MATLAB/Simulink environment. To achieve fast and reliable measurement functions, dedicated programs are developed in the LabVIEW real-time and related FPGA programming environments. The data transfer between the MATLAB/Simulink model and LABVIEW and its real-time hardware (PXIe-8133) is accomplished by building a *.dll file as an inbuilt function. A HIL simulation of the excitation system is implemented using a real excitation cabinet to test system capability and also investigate system reaction against disturbances. The performance of the proposed simulator is investigated under various scenarios such as excitation voltage set-point change, the step response of automatic voltage regulator, network three-phase fault, torque step, and step load changes. The close correspondence between HIL and MATLAB/Simulink simulations reveals the validity of the implemented model for the excitation system as well as the effectiveness, flexibility, versatility, applicability, and usefulness of the offline/online closed-loop simulator for power system modeling and development.

CPS Function for System Failure

A group of interacting or interrelated entities that forms a unified whole is known as a System. A system is portrayed by its spatial and temporal boundaries surrounded and influenced by its environment and it is also described by structure, purposes and expressed in its functioning. There are multiple types of problems, they are BSOD(Blue Screen Of Death) ,Missing of DLL Files, Computer Restarting Multiple Times , Overheating, Slow internet, Strange Noise, Slow computer, Failure of Peripheral devices, Downloading takes forever, Computer Freezes, App command not working, Jumbled computer screen. This problem may cause severe impact on the system, to avoid those impact it is mandatory to prevent the system from those problems before that occurs. There comes the major role of Cyber Physical System (CPS), which notifies the system about the problem before it occurs. CPS may be defined as combination of physics and cyber components, potentially networked and tightly interconnected with each other. Here, the term physics refers to the plant/process/system and the term cyber refers to the components/software/code. In the interconnection of the physics and cyber, two interfaces are used, one interface is used when the physic is connected to cyber and the other is used in vice versa. The first interface contains network and a convertor, which converts analog signals to digital, and the second interface consist of network and a convertor which converts digital signals to analog. The various application of CPS includes tracking and analysing CO2 emission, detect traffic accidents, insurance telematics and provide situational awareness services to first responders, measure traffic, monitor cardiac patients, etc. Our main aim is to deal with the usage of the CPS in various system failures. This paper gives a detailed description about the function of CPS in various system failures.

Power System Real-Time Emulation: A Practical Virtual Instrumentation to Complete Electric Power System Modeling

Hardware-in-the-loop (HIL) simulation is a technique that is being used increasingly in the development and test of complex systems. Real-world testing of an intricate system in a field-like power plant can be challenging, time-consuming, expensive, and hazardous. HIL emulators allow engineers to test devices thoroughly and efficiently in a virtual environment with high reliability and minimum risk of defect. In this paper, the complete electric power system (including generator, turbine-governor, excitation system, transmission lines, transformer, external grid and related loads) is implemented in a MATLAB/Simulink environment. Different virtual instrument pages are modeled in the graphical programming language of LabVIEW which enable fast and reliable measurement functions such as data acquisition, archiving, real-time graphical display and processing. The interaction between MATLAB and LabVIEW is accomplished by generating a Pharlap ETS Targets *.dll file which enables the two software to exchange real-time data. Also, a real 1518-kW excitation system is considered as a test case for the introduced HIL system. This equipment is connected to LabVIEW software through a National Instrument PXI technology. Different scenarios (electrical frequency/active power change, voltage step response, etc.) are simulated in the designed power system emulator (PSE). The validity of the implemented model for the excitation system is verified by finding good matching between MATLAB and HIL simulation results.

DIAGNOSIS OF DIABETIC RETINOPATHY THROUGH SCREENING OF RETINAL IMAGES

Diabetic Retinopathy (DR) is progressive dysfunction of the retinal blood vessels caused by chronic hyperglycemia which can be a complication of diabetes type 1 or diabetes type 2. Initially, DR is asymptomatic, if not treated though it can cause low vision and blindness. Diabetic retinopathy is responsible for 1.8 million of the 37 million cases of blindness throughout the world. So the early detection of Diabetic retinopathy through proper screening is essential.
 The paper presents a Diabetic Retinopathy Screening System which can be used as a primary diagnosis tool by ophthalmologists in the screening process to detect symptoms of Diabetic Retinopathy. The system uses the anatomical structures such as blood vessels, exudates and microaneurysms in retinal images. The retinal images are segmented and classified as normal or DR affected images by extracting features from segmented images and the Gray Level Co-occurrence Matrix (GLCM). The classifier used is Support Vector Machine (SVM) which gives a better accuracy.
 The system is implemented and tested in MATLAB and LabView for the standard database and need to be optimized for real time screening of images. LabView creates distributable .EXE files and .DLL files which can be downloaded into the FPGA/DSP processor. Hardware implementation on LabView FPGA presents a small learning curve which drastically reduces development time and eliminates the need for custom hardware design.

Study on FBG Wavelength Demodulation System with the Continuous Dynamic Scanning of Tunable DFB Laser

A FBG wavelength demodulation system based on the continuous dynamic scanning of tunable distributed feedback (DFB) laser is put forward and implemented. First, this paper introduces the basic principle of FBG wavelength demodulation system; second, the demodulation algorithm as the key of whole system is realized and compiled into DLL files by using the C programming language, then the Labview program calls for DLL files through a dynamic link library to establish a data processing program, including a interactive data processing interface. Not only it improves the accuracy of FBG wavelength demodulation system, also it helps the subsequent development on the system even though the hardware equipments keep invariant. The results show that the demodulation system has a fine resolution and stability, which can meet the practical requirements and be suited to produce in business and put into use in the engineering.

Digital Three-Dimensional Labeling System of Product Design Information Based on MBD

MBD (Model Based Definition) technology is the development trend of digital design and manufacture. Design information includes geometric elements, annotations and process attributes. In the paper, the focus is concentrated on digital three-dimensional (3D) labeling of annotations. The 3D labeling system of product design information is seamlessly integrated with NX platform to define digital information of a 3D product model. The Key technologies of the 3D labeling system realization on NX platform mainly includes transformation of space coordinates, reference plane construction based on solid modeling and 3D dimensioning. NX internal program mode is adopted where the developed program is compiled and linked to generate the dll file whose codes are small and whose connection speed is fast. Integrated digital definition of a 3D model shortens product development cycle and improves product design and manufacturing efficiency.

3-TIER 구조 소프트웨어의 다국어 지원 방식의 설계와 구현

해외 시장을 겨냥한 소프트웨어의 상품화를 위해서는 여러 나라의 언어를 지원하는 다국어 지원 기능이 필요하다. 3-tier 구조는 2-tier 구조의 문제점을 해결하기 위해 애플리케이션을 분리하여 응용 계층을 두고 프리젠테이션 로직과 데이터베이스를 미들웨어로 연결하는 형태이다. 3-tier 구조의 장점은 애플리케이션의 부하 분산으로 성능이 향상되며 확장이 쉽고, 유지보수와 재사용이 용이하다는 점이다. 본 논문에서는 3-tier 구조의 기업용 소프트웨어를 대상으로 소프트웨어 개발과 유지보수, 지원 언어의 추가가 용이한 공통 리소스 활용 방식을 제안하고 빌링 솔루션의 다국어 버전 개발에 적용하여 유용성을 확인한다. 제안하는 방식은 기능 모듈마다 언어별 리소스 파일을 별도로 유지하는 닷넷의 기존 방식을 개선하여 언어별로 하나만 유지하고 다국어 지원 클래스 라이브러리 형태로 제공하여 메모리와 디스크의 공간 낭비를 줄인다. 또한 다국어 지원 클래스 라이브러리를 응용 계층에 배치하여 소프트웨어 개발과 유지보수, 지원 언어 추가가 용이하다. 한편 리소스 파일에 대한 부적절한 변경을 막기 위해 다국어 지원 클래스 라이브러리는 dll 파일로 제공한다. Multilingual support of software is necessary for entering global market. 3-tier architecture is a solution for problems of 2-tier architecture. It divides an application into a client-tier and an application-tier, and presentation logic and database are connected by middleware. The advantage of 3-tier architecture is the enhanced performance through load balancing, scalability, easier maintenance and reusability. This paper proposes a multilingual support method that utilizes common resource files for 3-tier enterprise softwares, applies the proposed method to development of multilingual version of billing solution, and verify the usefulness of it. It is easy for development and maintenance of software, the addition of language supported. Proposed method holds a resource file for each language and provides a multilingual support class library. Therefore this method reduces a waste of memory and disk space. Deployment of a class library into an application tier makes development and maintenance of software, the addition of new language supported easy. To avoid inappropriate modification of a resource file, a multilingual support class library is provided in a dll file.

The Development of Graphic Design Method Based on Pro/Toolkit Spur Gears

Pro/Toolkit is the powerful secondary development provide of Pro/E ,It encapsulates many aimed at Pro/E bottom resources library function and call header files.Using VC++6.0 for integrated development environment and under Windows for development.This paper mainly introduces a graphic design method based on Pro/Toolkit spur gears.Firstly by using Pro/E to establish the spur gears 3d model and realize the 3d model parametric design. Then using VC++6.0 to type VC DLL program, design MFC dialog and for source program's compiles and links, to create dynamic link files(DLL or EXE files), through the registration documents and running applications.Finally realizes input gear parameters to get the corresponding gear effect in the dialog.Completed in VC++6.0 integrated development environment using Pro/Toolkit for forging spur gears graphic design. Got use Pro/Toolkit for straight tooth cylindrical gear and internal gear's secondary development interface.To avoid a lot of labor, meet different repeat and improv product design efficiency.

Use of CAPE-OPEN standards in the interoperability between modelling tools (MoT) and process simulators (Simulis ® Thermodynamics and ProSimPlus)

Computer-aided design, analysis and/or operation of chemical products and processes that manufacture them require a number of computational tools. As these tools may come from different sources and disciplines, an important issue is how they can be used simultaneously and efficiently for the design, analysis and/or simulation of a specific process-product? One alternative is to employ CAPE-OPEN standard interfaces for integration of the set of diverse computational tools that may be needed to solve the problem. The objective of this paper is to highlight, through examples, the integration of different computational tools according to problem specific work-flows/data-flows. The reliability of the integration of different tools is illustrated through two case studies. In case study 1, the tools Simulis ® Thermodynamics (PME) and ICAS-MoT (PMC) are combined for the calculation of thermodynamic properties through the use of a standard middleware (DLL file). In case study 2, the interoperability between ProSimPlus simulator (PME) and ICAS-MoT (PMC) is highlighted for simulation of a new unit operation and combined with other unit operations that can be found in the host simulator. A ProSimPlus-ICAS-MoT–COFE interoperability is also carried out successfully to proof the interoperability of the different computational entities. Furthermore, the introduction of the multiscale modelling concept and its application through the CAPE-OPEN standards is highlighted.

船体中央断面最適設計の実用化と高速最適化システムの開発に関する研究

A high-speed optimization system, which can be connected to user-friendly evaluating design candidates system, is developed here in order for handling a large number of de`sign variables with aim of supporting ship design. There are many design variables and complicated constraint conditions in ship structure design. Moreover, their relations are so complicated and some of them rely on the designer's tacit knowledge. In order to solve such problems, design process of ship structural design is analyzed by the use of DSM and PPM, and optimization system which can generate actual solutions of designer is developed. In the system, Microsoft Excel is used for handling complicated constraints. However, connecting an Excel file to an optimization engine as an external module makes computational time tremendously large in optimization process. In order to overcome this drawback, a program source file is created from an Excel file automatically and connected with a main part of optimization system. DLL file system, which makes dynamic linkage possible, resulting that any designer can solve optimization problems easily, is also used here. Mid-ship section is designed by not only the proposed optimization system but also a commercial optimization system. The proposed optimization system can give the same design with only 3% of computational time used for commercial optimization system.

Gene Expression Dynamics Inspector (GEDI): for integrative analysis of expression profiles.

Genome-wide expression profiles contain global patterns that evade visual detection in current gene clustering analysis. Here, a Gene Expression Dynamics Inspector (GEDI) is described that uses self-organizing maps to translate high-dimensional expression profiles of time courses or sample classes into animated, coherent and robust mosaics images. GEDI facilitates identification of interesting patterns of molecular activity simultaneously across gene, time and sample space without prior assumption of any structure in the data, and then permits the user to retrieve genes of interest. Important changes in genome-wide activities may be quickly identified based on 'Gestalt' recognition and hence, GEDI may be especially useful for non-specialist end users, such as physicians. GEDI v1.0 is written in Matlab, and binary Matlab.dll files which require Matlab to run can be downloaded for free by academic institutions at http://www.chip.org/~ge/gedihome.html http://www.chip.org/~ge/gedihome.html