Docker Containers vs. Virtual Machines: A Comparative Study of Architecture, Performance, Configuration, and Security
该研究比较了Docker容器与虚拟机在架构、性能、配置和安全方面的差异,分析了两者在隔离性与效率上的权衡,并提出混合架构作为解决方案。
该研究比较了Docker容器与虚拟机在架构、性能、配置和安全方面的差异,分析了两者在隔离性与效率上的权衡,并提出混合架构作为解决方案。
为解决高压输电网络中故障检测与分类问题,提出了一种两阶段混合机器学习流水线,通过结合异常检测和监督分类提高准确性。
Static taint analysis often suffers from high false positives or false negatives due to coarse-grained sanitization modeling, blind spots in database propagation, and insufficient handling of object-level data flows. This work proposes an enhanced code property graph approach that jointly models sanitization logic, persistent propagation, and object field–level name semantics for the first time. It introduces vulnerability-type-aware sanitization analysis, a database-state-aware cross-script propagation mechanism, and object-aware reaching definitions, further integrating context-sensitive parameter binding, database schema constraints, and query safety verification. Evaluated on the SARD benchmark, the method maintains 80% accuracy while significantly reducing false positives. In experiments on 19 real-world PHP applications, it successfully reproduces most known CVEs and uncovers 29 previously undisclosed zero-day vulnerabilities—26 SQL injections and 3 stored XSS flaws.
This work addresses the representational gap between perception and behavior prediction in purely vision-based autonomous driving models, which arises from the absence of explicit role-level supervision for surrounding road users when trained solely with waypoint supervision. To bridge this gap, the authors propose a role-centric “sidecar” supervision mechanism that leverages simulator-generated labels—including road user positions, post-hoc relevance annotations, and short-term motion cues—to enhance the waypoint prediction capability of a model fusing multi-view RGB images, ego-vehicle states, and route commands during training. Notably, this approach requires no additional inputs at inference time and substantially narrows the performance gap between vision-only and privileged-information methods. Evaluated in open-loop trajectory prediction, the method achieves a final displacement error (FDE) of 1.223 ± 0.01 meters, a 32.6% improvement over the baseline, with particularly pronounced gains in multi-agent interactions and scenarios involving vulnerable road users.
Existing open-source tools struggle to automatically perform fine-grained classification of vehicles by crash injury risk from naturalistic road videos. This work proposes the first open-source vision system tailored for cycling safety: in the first stage, it employs RT-DETR for vehicle detection, followed by a second stage that uses a fine-tuned ViT-Base/16 model to classify vehicles into six body types with fine-grained granularity. To mitigate unreliable predictions, the system incorporates a softmax-confidence-based abstention mechanism. Evaluated on an in-house dataset, the system achieves 94% accuracy (F1: 0.91–0.97); notably, it maintains 89% accuracy on unseen external data, with most categories achieving F1 scores of at least 0.90, demonstrating strong cross-domain robustness and uncertainty-aware prediction capability.
该研究比较了Docker容器与虚拟机在架构、性能、配置和安全方面的差异,分析了两者在隔离性与效率上的权衡,并提出混合架构作为解决方案。
为解决高压输电网络中故障检测与分类问题,提出了一种两阶段混合机器学习流水线,通过结合异常检测和监督分类提高准确性。
Static taint analysis often suffers from high false positives or false negatives due to coarse-grained sanitization modeling, blind spots in database propagation, and insufficient handling of object-level data flows. This work proposes an enhanced code property graph approach that jointly models sanitization logic, persistent propagation, and object field–level name semantics for the first time. It introduces vulnerability-type-aware sanitization analysis, a database-state-aware cross-script propagation mechanism, and object-aware reaching definitions, further integrating context-sensitive parameter binding, database schema constraints, and query safety verification. Evaluated on the SARD benchmark, the method maintains 80% accuracy while significantly reducing false positives. In experiments on 19 real-world PHP applications, it successfully reproduces most known CVEs and uncovers 29 previously undisclosed zero-day vulnerabilities—26 SQL injections and 3 stored XSS flaws.
This work addresses the representational gap between perception and behavior prediction in purely vision-based autonomous driving models, which arises from the absence of explicit role-level supervision for surrounding road users when trained solely with waypoint supervision. To bridge this gap, the authors propose a role-centric “sidecar” supervision mechanism that leverages simulator-generated labels—including road user positions, post-hoc relevance annotations, and short-term motion cues—to enhance the waypoint prediction capability of a model fusing multi-view RGB images, ego-vehicle states, and route commands during training. Notably, this approach requires no additional inputs at inference time and substantially narrows the performance gap between vision-only and privileged-information methods. Evaluated in open-loop trajectory prediction, the method achieves a final displacement error (FDE) of 1.223 ± 0.01 meters, a 32.6% improvement over the baseline, with particularly pronounced gains in multi-agent interactions and scenarios involving vulnerable road users.
Existing open-source tools struggle to automatically perform fine-grained classification of vehicles by crash injury risk from naturalistic road videos. This work proposes the first open-source vision system tailored for cycling safety: in the first stage, it employs RT-DETR for vehicle detection, followed by a second stage that uses a fine-tuned ViT-Base/16 model to classify vehicles into six body types with fine-grained granularity. To mitigate unreliable predictions, the system incorporates a softmax-confidence-based abstention mechanism. Evaluated on an in-house dataset, the system achieves 94% accuracy (F1: 0.91–0.97); notably, it maintains 89% accuracy on unseen external data, with most categories achieving F1 scores of at least 0.90, demonstrating strong cross-domain robustness and uncertainty-aware prediction capability.