搜索结果：Payloads

Web application firewall (WAF) examines malicious traffic to and from a web application via a set of security rules. It plays a significant role in securing Web applications against web attacks. However, as web attacks grow in sophistication, it is becoming increasingly difficult for WAFs to block the mutated malicious payloads designed to bypass their defenses. In response to this critical security issue, we have developed a novel learning-based framework called WAFBOOSTER, designed to unveil potential bypasses in WAF detections and suggest rules to fortify their security. Using a combination of shadow models and payload generation techniques, we can identify malicious payloads and remove or modify them as needed. WAFBOOSTER generates signatures for these malicious payloads using advanced clustering and regular expression matching techniques to repair any security gaps we uncover. In our comprehensive evaluation of eight real-world WAFs, WAFBOOSTER improved the true rejection rate of mutated malicious payloads from 21% to 96%, with no false rejections. WAFBOOSTER achieves a false acceptance rate 3X lower than state-of-the-art methods for generating malicious payloads. With WAFBOOS

Cross-site scripting (XSS) remains a persistent web security vulnerability, especially because obfuscation can change the surface form of a malicious payload while preserving its behavior. These transformations make it difficult for traditional and machine learning-based detection systems to reliably identify attacks. Existing approaches for generating obfuscated payloads often emphasize syntactic diversity, but they do not always ensure that the generated samples remain behaviorally valid. This paper presents a structured pipeline for generating and evaluating obfuscated XSS payloads using large language models (LLMs). The pipeline combines deterministic transformation techniques with LLM-based generation and uses a browser- based runtime evaluation procedure to compare payload behavior in a controlled execution environment. This allows generated samples to be assessed through observable runtime behavior rather than syntactic similarity alone. In the evaluation, an untuned baseline language model achieves a runtime behavior match rate of 0.15, while fine-tuning on behavior-preserving source-target obfuscation pairs improves the match rate to 0.22. Although this represents a measur

Data-driven control methods such as data-enabled predictive control (DeePC) have shown strong potential in efficient control of soft robots without explicit parametric models. However, in object manipulation tasks, unknown external payloads and disturbances can significantly alter the system dynamics and behavior, leading to offset error and degraded control performance. In this paper, we present a novel velocity-form DeePC framework that achieves robust and optimal control of soft robots under unknown payloads. The proposed framework leverages input-output data in an incremental representation to mitigate performance degradation induced by unknown payloads, eliminating the need for weighted datasets or disturbance estimators. We validate the method experimentally on a planar soft robot and demonstrate its superior performance compared to standard DeePC in scenarios involving unknown payloads.

The recent emergence of the integrated sensing and communication (ISAC) framework has sparked significant interest in quantifying the sensing capabilities inherent in communication signals. However, existing literature has mainly focused on scenarios involving either purely random or purely deterministic waveforms. This overlooks a critical reality: operational communication standards invariably utilize a hybrid structure comprising both deterministic pilots for channel estimation and random payloads for data transmission. To bridge this gap, this paper investigates the sensing mutual information (SMI) and precoding design specifically for ISAC systems employing communication signals with both pilots and data payloads. First, by utilizing random matrix theory (RMT), we derive a tractable closed-form expression for the SMI that accurately accounts for the statistical properties of the hybrid signal. Building upon this theoretical foundation, we formulate a precoding optimization problem to maximize SMI with constraints on the transmit power and communication rate, which is solved via an efficient alternating direction method of multipliers framework. Simulation results validate the

Integrated sensing and communication (ISAC) plays a crucial role in 6G, to enable innovative applications such as drone surveillance, urban air mobility, and low-altitude logistics. However, the hybrid ISAC signal, which comprises deterministic pilot and random data payload components, poses challenges for target detection due to two reasons: 1) these two components cause coupled shifts in both the mean and variance of the received signal, and 2) the random data payloads are typically unknown to the sensing receiver in the bistatic setting. Unfortunately, these challenges could not be tackled by existing target detection algorithms. In this paper, a generalized likelihood ratio test (GLRT)-based detector is derived, by leveraging the known deterministic pilots and the statistical characteristics of the unknown random data payloads. Due to the analytical intractability of exact performance characterization, we perform an asymptotic analysis for the false alarm probability and detection probability of the proposed detector. The results highlight a critical trade-off: both deterministic and random components improve detection reliability, but the latter also brings statistical uncerta

The use of future communication systems for sensing offers the potential for a number of new applications. In this paper, we show that leveraging user data payloads in multi-node Orthogonal Frequency Division Multiple Access (OFDMA) networks for estimating target delay and Doppler-shift parameters can yield a significant advantage in SNR and addressable bandwidth. However, gaps in the frequency-time resources, reference signal boosting and amplitude modulation schemes introduce challenges for estimation at the sensing receiver. In this work, we propose a joint delay and Doppler-shift model-based estimator designed to address these challenges. Furthermore, we demonstrate that incorporating knowledge of the device model into the estimation procedure helps mitigate the effects of the non-ideal radar ambiguity function caused by amplitude-modulated user payloads and sparse reference signals. Simulation results demonstrate that the estimator achieves the theoretical lower bound on estimation variance.

Stratospheric balloons offer cost-effective access to space and grant the opportunity for fast scientific innovation cycles and higher-risk explorations. In addition to science pathfinders, they serve as platforms for technology advancement, and offer a unique opportunity to train future instrument scientists and PIs. However, the increase in complexity of some projects (sub-arcsecond pointing, numerous degrees of freedom, advanced cooling systems, real-time communication and data transfer, low readiness level technologies, etc.) elevates the scale of challenges. This paper discusses the challenges brought by the increase of instrument complexity in the constrained area of ballooning projects. We use the example of the multi-object slit UV spectrograph FIREBall-2 but also discuss other ambitious payloads to expose some lessons learned. We will then propose strategies for future balloon projects and potential interesting adaptations for funding agencies to accommodate these emerging complexities. The objective being to foster the added value of more ambitious balloon-borne projects, and to initiate discussion about how to generate more robust strategies for handling high-complexity

Aerial transportation using quadrotors with cable-suspended payloads holds great potential for applications in disaster response, logistics, and infrastructure maintenance. However, their hybrid and underactuated dynamics pose significant control and perception challenges. Traditional approaches often assume a taut cable condition, limiting their effectiveness in real-world applications where slack-to-taut transitions occur due to disturbances. We introduce ES-HPC-MPC, a model predictive control framework that enforces exponential stability and perception-constrained control under hybrid dynamics. Our method leverages Exponentially Stabilizing Control Lyapunov Functions (ES-CLFs) to enforce stability during the tasks and Control Barrier Functions (CBFs) to maintain the payload within the onboard camera's field of view (FoV). We validate our method through both simulation and real-world experiments, demonstrating stable trajectory tracking and reliable payload perception. We validate that our method maintains stability and satisfies perception constraints while tracking dynamically infeasible trajectories and when the system is subjected to hybrid mode transitions caused by unexpect

This paper addresses the problem of tracking the position of a cable-suspended payload carried by an unmanned aerial vehicle, with a focus on real-world deployment and minimal hardware requirements. In contrast to many existing approaches that rely on motion-capture systems, additional onboard cameras, or instrumented payloads, we propose a framework that uses only standard onboard sensors--specifically, real-time kinematic global navigation satellite system measurements and data from the onboard inertial measurement unit--to estimate and control the payload's position. The system models the full coupled dynamics of the aerial vehicle and payload, and integrates a linear Kalman filter for state estimation, a model predictive contouring control planner, and an incremental model predictive controller. The control architecture is designed to remain effective despite sensing limitations and estimation uncertainty. Extensive simulations demonstrate that the proposed system achieves performance comparable to control based on ground-truth measurements, with only minor degradation (< 6%). The system also shows strong robustness to variations in payload parameters. Field experiments furt

Collaborative transportation of cable-suspended payloads by teams of UAVs has the potential to enhance payload capacity, adapt to different payload shapes, and provide built-in compliance, making it attractive for applications ranging from disaster relief to precision logistics. However, multi-UAV coordination under disturbances, nonlinear payload dynamics, and slack-taut cable modes remains a challenging control problem. To our knowledge, no prior work has addressed these cable mode transitions in the multi-UAV context, instead relying on simplifying rigid-link assumptions. We propose CrazyMARL, a decentralized RL framework for multi-UAV cable-suspended payload transport. Simulation results demonstrate that the learned policies can outperform classical decentralized controllers in terms of disturbance rejection and tracking precision, achieving an 80% recovery rate from harsh conditions compared to 44% for the baseline method. We also achieve successful zero-shot sim-to-real transfer and demonstrate that our policies are highly robust under harsh conditions, including wind, random external disturbances, and transitions between slack and taut cable dynamics. This work paves the way

Consumer-grade drones have become effective multimedia collection tools, spring-boarded by rapid development in embedded CPUs, GPUs, and cameras. They are best known for their ability to cheaply collect high-quality aerial video, 3D terrain scans, infrared imagery, etc., with respect to manned aircraft. However, users can also create and attach custom sensors, actuators, or computers, so the drone can collect different data, generate composite data, or interact intelligently with its environment, e.g., autonomously changing behavior to land in a safe way, or choosing further data collection sites. Unfortunately, developing custom payloads is prohibitively difficult for many researchers outside of engineering. We provide guidelines for how to create a sophisticated computational payload that integrates a Raspberry Pi 5 into a DJI Matrice 350. The payload fits into the Matrice's case like a typical DJI payload (but is much cheaper), is easy to build and expand (3D-printed), uses the drone's power and telemetry, can control the drone and its other payloads, can access the drone's sensors and camera feeds, and can process video and stream it to the operator via the controller in real t

A novel, non-pyrotechnic payload deployment mechanism tailored for sounding rockets is introduced in this research paper. The mechanism addresses the challenge of efficiently and compactly deploying payloads radially during a single launch, featuring a cylindrical carrier structure actuated by a rack-pinion mechanism. Powered by a servo motor, the carrier structure translates to enable radial ejection of payloads. The paper presents the mechanism's design and conducts a comprehensive performance analysis, including structural stability, system dynamics and power requirements. A simulation model is developed to assess payload deployment behavior under various conditions, demonstrating the mechanism's viability and efficiency for deploying multiple payloads within a single sounding rocket launch. The mechanism's adaptability to accommodate diverse payload types, sizes and weights enhances its versatility, while its radial deployment capability allows payloads to be released at different altitudes, offering greater flexibility for scientific experiments. The paper concludes that this innovative payload radial deployment mechanism represents a significant advancement in sounding rocket

This paper presents a consensus-based payload algorithm (CBPA) to deal with the condition of robots' capability decrease for multi-robot task allocation. During the execution of complex tasks, robots' capabilities could decrease with the consumption of payloads, which causes a problem that the robot coalition would not meet the tasks' requirements in real time. The proposed CBPA is an enhanced version of the consensus-based bundle algorithm (CBBA) and comprises two primary core phases: the payload bundle construction and consensus phases. In the payload bundle construction phase, CBPA introduces a payload assignment matrix to track the payloads carried by the robots and the demands of multi-robot tasks in real time. Then, robots share their respective payload assignment matrix in the consensus phase. These two phases are iterated to dynamically adjust the number of robots performing multi-robot tasks and the number of tasks each robot performs and obtain conflict-free results to ensure that the robot coalition meets the demand and completes all tasks as quickly as possible. Physical experiment shows that CBPA is appropriate in complex and dynamic scenarios where robots need to coll

This paper addresses the limitations of current satellite payload architectures, which are predominantly hardware-driven and lack the flexibility to adapt to increasing data demands and uneven traffic. To overcome these challenges, we present a novel architecture for future regenerative and programmable satellite payloads and utilize interconnected modem banks to promote higher scalability and flexibility. We formulate an optimization problem to efficiently manage traffic among these modem banks and balance the load. Additionally, we provide comparative numerical simulation results, considering end-to-end delay and packet loss analysis. The results illustrate that our proposed architecture maintains lower delays and packet loss even with higher traffic demands and smaller buffer sizes.

The low-energy $γ$-ray (0.1-30 MeV) sky has been relatively unexplored since the decommissioning of the COMPTEL instrument on the Compton Gamma-Ray Observatory (CGRO) satellite in 2000. However, the study of this part of the energy spectrum (the ``MeV gap") is crucial for addressing numerous unresolved questions in high-energy and multi-messenger astrophysics. Although several large MeV $γ$-ray missions like AMEGO and e-ASTROGAM are being proposed, they are predominantly in the developmental phase, with launches not anticipated until the next decade at the earliest. In recent times, there has been a surge in proposed CubeSat missions as cost-effective and rapidly implementable ``pathfinder" alternatives. A MeV CubeSat dedicated to $γ$-ray astronomy has the potential to serve as a demonstrator for future, larger-scale MeV payloads. This paper presents a $γ$-ray payload design featuring a CdZnTe crystal calorimeter module developed by IDEAS. We report the detailed results of simulations to assess the performance of this proposed payload and compare it with those of previous $γ$-ray instruments.

Due to advances in observation and imaging technologies, modern astronomical satellites generate large volumes of data. This necessitates efficient onboard data processing and high-speed data downlink. Reflecting this trend is the VERTECS 6U Astronomical Nanosatellite. Designed for the observation of Extragalactic Background Light (EBL), this mission is expected to generate a substantial amount of image data, particularly within the confines of CubeSat capabilities. This paper introduces the VERTECS Camera Control Board (CCB), an open-source payload interface board leveraging Commercial Off-The-Shelf (COTS) components, with a Raspberry Pi Compute Module 4 at its core. The VERTECS CCB hardware and software have been designed from the ground up to serve as the sole interface between the VERTECS bus system and astronomical imaging payload, while providing compute capability not usually seen in nanosatellites of this class. Responsible for mission data processing, it will facilitate high-speed data transfer from the imaging payload via gigabit Ethernet, while also providing a high-bitrate serial connection to the payload X-band transmitter for mission data downlink. Additional interfac

HERMES (High Energy Rapid Modular Ensemble of Satellites) Pathfinder mission aims to observe and localize Gamma Ray Bursts (GRBs) and other transients using a constellation of nanosatellites in low-Earth orbit (LEO). Scheduled for launch in early 2025, the 3U CubeSats will host miniaturized instruments featuring a hybrid Silicon Drift Detector (SDD) and GAGG:Ce scintillator photodetector system, sensitive to X-rays and gamma-rays across a wide energy range. Each HERMES payload contains 120 SDD cells, each with a sensitive area of 45 mm^2, organized into 12 matrices, reading out 60 12.1x6.94x15.0 mm^3 GAGG:Ce scintillators. Photons interacting with an SDD are identified as X-ray events (2-60 keV), while photons in the 20-2000 keV range absorbed by the crystals produce scintillation light, which is read by two SDDs, allowing event discrimination. The detector system, including front-end and back-end electronics, a power supply unit, a chip-scale atomic clock, and a payload data handling unit, fits within a 10x10x10 cm^3 volume, weighs 1.5 kg, and has a maximum power consumption of about 2 W. This paper outlines the development of the HERMES constellation, the design and selection of