Leveraging virtual machine introspection with memory forensics to detect and characterize unknown malware using machine learning techniques at hypervisor

The Virtual Machine Introspection (VMI) has emerged as a fine-grained, out-of-VM security solution that detects malware by introspecting and reconstructing the volatile memory state of the live guest Operating System (OS). Specifically, it functions by the Virtual Machine Monitor (VMM), or hypervisor. The reconstructed semantic details obtained by the VMI are available in a combination of benign and malicious states at the hypervisor. In order to distinguish between these two states, the existing out-of-VM security solutions require extensive manual analysis. In this paper, we propose an advanced VMM-based, guest-assisted Automated Internal-and-External (A-IntExt) introspection system by leveraging VMI, Memory Forensics Analysis (MFA), and machine learning techniques at the hypervisor. Further, we use the VMI-based technique to introspect digital artifacts of the live guest OS to obtain a semantic view of the processes details. We implemented an Intelligent Cross View Analyzer (ICVA) and implanted it into our proposed A-IntExt system, which examines the data supplied by the VMI to detect hidden, dead, and dubious processes, while also predicting early symptoms of malware execution on the introspected guest OS in a timely manner. Machine learning techniques are used to analyze the executables that are mined and extracted using MFA-based techniques and ascertain the malicious executables. The practicality of the A-IntExt system is evaluated by executing large real-world malware and benign executables onto the live guest OSs. The evaluation results achieved 99.55% accuracy and 0.004 False Positive Rate (FPR) on the 10-fold cross-validation to detect unknown malware on the generated dataset. Additionally, the proposed system was validated against other benchmarked malware datasets and the A-IntExt system outperforms the detection of real-world malware at the VMM with performance exceeding 6.3%.     

疫情危机下社会大众意见治理反思

新型冠状病毒肺炎疫情发生以来,社会舆论纷繁复杂,在一定程度上影响了疫情防控工作的进行。同时,社会大众意见趋于分裂,将对我国治理体系和治理能力构成较大挑战。疫情危机下,社会意见治理应从三个方面入手,即保障公民言论自由,规范言论行为,壮大高扬主流思想舆论。在保障言论自由、区别对待不同意见、社会合力治理原则指导下,形成规范社会言论行为以进行“治”、壮大抗疫主流思想舆论以进行“理”的社会意见治理思路,以期较为客观全面地缓解社会疫情意见压力,在社会舆论场域弘扬主旋律,为打赢疫情防控阻击战提供良好的舆论环境,减少舆情次生危害。     

论正确认识心理学研究的内省法及其意义

西方心理学一般认为内省是个体对自己心理状态的观察和描述,这实际上只停留在实证主义和物理主义心理学的范畴内。应该把内省看作是人对自己心理行为的自我观察、自我体验及自我完善的一种心理存在和活动的方式。以这种视野看待内省,可以实现心理学内省法与实验法的统合,为心理学的本土化提供契机,带来心理学发展的突破。     

刑事诉讼中的不告不理原则论

不告不理原则作为现代刑事诉讼的基本原则之一 ,在我国并未引起应有的重视 ,有关的著述对之的分析分散、零碎 ,远未深入 ;本文从不告不理原则的历史发展入手 ,对该原则的现代蕴涵、要求、意义 ,该原则与司法审判定位之关系作了深入的探讨和分析 ,并在此基础上对我国刑事诉讼法规定和司法实践状况进行了反思。