arXiv ScienceSearch

arXiv subjects

Qianhong Wu

Publications and source records attributed to Qianhong Wu.

14 recordsLinked to original sources

A unified power-grid representation for reuse across network structures and computational tasks

Data-driven power-system models are typically developed for specific grids and computational tasks, but their performance can deteriorate markedly or even fail when network structures or analytical objectives change. This paper develops a unified grid representation that separates physical-grid description from downstream computation. A self-supervised encoder represents each grid as a variable number of fixed-dimensional node, branch and global vectors under a common latent description. Although pretrained only on systems with at most 270 buses, the frozen encoder transfers without adaptation to a 70,000-bus network, more than 250 times larger in bus count, while preserving 0.7919 bus-correspondence accuracy. The same representation supports four independently trained downstream tasks: power-flow calculation, reactive-power adjustment, operating-condition generation and transient-stability assessment. On the previously unseen 70,000-bus grid, power-flow calculation achieves mean errors of 0.108$^{\circ}$ in phase angle and 3.8$\times$10\textsuperscript{-6} p.u. in voltage magnitude. Reactive-power adjustment achieved a 75\% PSASP-verified correction rate on the previously unseen 70,000-bus grid, while operating-condition generation delivered at least one PSASP-verified feasible state for 82.2\% of requests on previously unseen 400--1,000-bus grid families. For transient-stability assessment, the frozen encoder achieves accuracy within 0.8 percentage points of full encoder adaptation under matched training conditions. These results demonstrate that a unified power-grid representation can be learned once and reused unchanged across structurally different power systems and heterogeneous computational tasks.

eess.SY

The Proxy Knows Too Much: Sealing LLM API Routers with Attested TEEs

Agents increasingly access large language models (LLMs) through API routers. A router terminates the client's transport-layer security session and opens a separate upstream session, so it holds the full interaction in plaintext. This makes the router an application-layer man-in-the-middle: it can rewrite agent tool calls, swap dependencies for typosquatted packages, trigger attacks only under audit-evading conditions, and passively exfiltrate secrets. Existing client-side defenses are evadable. We propose AEGIS, a provider-transparent attested API router whose data path is a client-verified faithful passthrough. AEGISconfines plaintext handling to a small hardware-enclave component while leaving authentication, scheduling, accounting, and management on the untrusted host. The client verifies the enclave before releasing plaintext. The host can neither read nor alter the interaction, and plaintext leaves only toward destinations fixed by the measured image. We show that all four malicious-router attack classes succeed against a plaintext-access baseline and are blocked by AEGIS, including adaptive tests against the same boundary. The trusted path is $851$ lines, carries three provider-native APIs without conversion, and completes every request under real-provider workload and concurrency. In a seeded audit pilot, two commodity coding agents find eight and ten of ten planted invariant violations. The local relay overhead is about six milliseconds per request.

cs.CR

MHOT: Height-Optimized Authenticated Data Structure for Blockchain State Commitment

State root computation dominates (78%) blockchain block processing time. Ethereum's canonical authenticated data structure, i.e., Merkle Patricia Trie (MPT), suffers from severe tree-height growth and is vulnerable to \textit{Nurgle attacks} (SP'24), where adversaries inflate path depth via hash collisions and degrade system performance at negligible cost. Existing defenses increase node fanout (span) to bound tree height, but higher span inflates proof size exponentially. Prior work mitigates this trade-off using vector commitments, at the cost of trusted setup or expensive verification. We present \textsc{Mhot}, a height-optimal authenticated data structure for blockchain state commitment that preserves standard hash-based verification without trusted setup. Unlike MPT's fixed-prefix indexing, which couples span and fanout exponentially, \textsc{Mhot} indexes by discriminative bits that actually distinguish keys, achieving adaptive span with linear fanout coupling and provably minimal height. To prevent high fanout from inflating proofs, we introduce hierarchical proofs, a two-layer Merkle construction that reduces per-node proof overhead from O(k) to O(log k). On Ethereum mainnet workloads, \textsc{Mhot} achieves up to 9X higher write throughput, 4X lower write amplification, and 2X smaller proofs than MPT. Under Nurgle attacks, even when the adversary consumes an entire block's gas budget, \textsc{Mhot} maintains a 0% attack success rate (v.s., 99.97% for MPT). Our results, somewhat surprisingly, show that height optimality (not new crypto primitives!) is the key abstraction for scalable and attack-resilient blockchain state commitment.

cs.CR

Decentralized Finance (DeFi): A Survey

Decentralized Finance (DeFi) is a new paradigm in the creation, distribution, and utilization of financial services via the integration of blockchain technology. Our research conducts a comprehensive introduction and meticulous classification of various DeFi applications. Beyond that, we thoroughly analyze these risks from both technical and economic perspectives, spanning multiple layers. We point out research gaps and revenues, covering technical advancements, innovative economics, and sociology and ecology optimization.

cs.CR

BDTS: Blockchain-based Data Trading System

Trading data through blockchain platforms is hard to achieve \textit{fair exchange}. Reasons come from two folds: Firstly, guaranteeing fairness between sellers and consumers is a challenging task as the deception of any participating parties is risk-free. This leads to the second issue where judging the behavior of data executors (such as cloud service providers) among distrustful parties is impractical in the context of traditional trading protocols. To fill the gaps, in this paper, we present a \underline{b}lockchain-based \underline{d}ata \underline{t}rading \underline{s}ystem, named BDTS. BDTS implements a fair-exchange protocol in which benign behaviors can get rewarded while dishonest behaviors will be punished. Our scheme requires the seller to provide consumers with the correct encryption keys for proper execution and encourage a rational data executor to behave faithfully for maximum benefits from rewards. We analyze the strategies of consumers, sellers, and dealers in the trading game and point out that everyone should be honest about their interests so that the game will reach Nash equilibrium. Evaluations prove efficiency and practicability.

cs.CR

FPHammer: A Device Identification Framework based on DRAM Fingerprinting

The device fingerprinting technique extracts fingerprints based on the hardware characteristics of the device to identify the device. The primary goal of device fingerprinting is to accurately and uniquely identify a device, which requires the generated device fingerprints to have good stability to achieve long-term tracking of the target device. However, the fingerprints generated by some existing fingerprinting technologies are not stable enough or change frequently, making it impossible to track the target device for a long time. In this paper, we present FPHammer, a novel DRAM-based fingerprinting technique. The device fingerprint generated by our technique has high stability and can be used to track the device for a long time. We leverage the Rowhammer technique to repeatedly and quickly access a row in DRAM to get bit flips in its adjacent row. We then construct a physical fingerprint of the device based on the locations of the collected bit flips. The evaluation results of the uniqueness and reliability of the physical fingerprint show that it can be used to distinguish devices with the same hardware and software configuration. The experimental results on device identification demonstrate that the physical fingerprints engendered by our innovative technique are inherently linked to the entirety of the device rather than just the DRAM module. Even if the device modifies software-level parameters such as MAC address and IP address or even reinstalls the operating system, we can accurately identify the target device. This demonstrates that FPHammer can generate stable fingerprints that are not affected by software layer parameters.

cs.CR

Wafer-scale, full-coverage, acoustic self-limiting assembly of particles on flexible substrates

Self-limiting assembly of particles represents the state-of-the-art controllability in nanomanufacturing processes where the assembly stops at a designated stage1,2, providing a desirable platform for applications requiring delicate thickness control3-5. Most successes in self-limiting assembly are limited to self-assembled monolayers (SAM) of small molecules on inorganic, chemically homogeneous rigid substrates (e.g., Au and SiO2) through surface-interaction mechanisms6,7. Similar mechanisms, however, cannot achieve uniform assembly of particles on flexible polymer substrates8,9. The complex configurations and conformations of polymer chains create a surface with non-uniform distributions of chemical groups and phases. In addition, most assembly mechanisms require good solvent wettability, where many desirable but hard-to-wet particles and polymer substrates are excluded. Here, we demonstrate an acoustic self-limiting assembly of particles (ASAP) method to achieve wafer-scale, full-coverage, close-packed monolayers of hydrophobic particles on hydrophobic polymer substrates in aqueous solutions. We envision many applications in functional coatings and showcase its feasibility in structural coloration.

physics.atm-clus

How to deform an egg yolk? On the Study of Soft Matter Deformation in a Liquid Environment

In this paper, we report a novel experimental and theoretical study to examine the response of a soft capsule bathed in a liquid environment to sudden external impacts. Taking an egg yolk as an example, we found that the soft matter is not sensitive to translational impacts, but is very sensitive to rotational, especially decelerating-rotational impacts, during which the centrifugal force and the shape of the membrane together play a critical role causing the deformation of the soft object. This finding, as the first study of its kind, reveals the fundamental physics behind the motion and deformation of a membrane-bound soft object, e.g., egg yolk, cells, soft brain matter, etc., in response to external impacts.

cond-mat.soft

Fluid Guided CVD Growth for Large-scale Monolayer Two-dimensional Materials

Atmospheric pressure chemical vapor deposition (APCVD) has been used extensively for synthesizing two-dimensional (2D) materials, due to its low cost and promise for high-quality monolayer crystal synthesis. However, the understanding of the reaction mechanism and the key parameters affecting the APCVD processes is still in its embryonic stage. Hence, the scalability of the APCVD method in achieving large scale continuous film remains very poor. Here, we use MoSe2 as a model system and present a fluid guided growth strategy for understanding and controlling the growth of 2D materials. Through the integration of experiment and computational fluid dynamics (CFD) analysis in the full-reactor scale, we identified three key parameters: precursor mixing, fluid velocity and shear stress, which play a critical role in the APCVD process. By modifying the geometry of the growth setup, to enhance precursor mixing and decrease nearby velocity shear rate and adjusting flow direction, we have successfully obtained inch-scale monolayer MoSe2. This unprecedented success of achieving scalable 2D materials through fluidic design lays the foundation for designing new CVD systems to achieve the scalable synthesis of nanomaterials.

physics.app-ph

T-DB: Toward Fully Functional Transparent Encrypted Databases in DBaaS Framework

Individuals and organizations tend to migrate their data to clouds, especially in a DataBase as a Service (DBaaS) pattern. The major obstacle is the conflict between secrecy and utilization of the relational database to be outsourced. We address this obstacle with a Transparent DataBase (T-DB) system strictly following the unmodified DBaaS framework. A database owner outsources an encrypted database to a cloud platform, needing only to store the secret keys for encryption and an empty table header for the database; the database users can make almost all types of queries on the encrypted database as usual; and the cloud can process ciphertext queries as if the database were not encrypted. Experimentations in realistic cloud environments demonstrate that T-DB has perfect query answer precision and outstanding performance.

cs.DB

Flexible Attribute-Based Encryption Applicable to Secure E-Healthcare Records

In e-healthcare record systems (EHRS), attribute-based encryption (ABE) appears as a natural way to achieve fine-grained access control on health records. Some proposals exploit key-policy ABE (KP-ABE) to protect privacy in such a way that all users are associated with specific access policies and only the ciphertexts matching the users' access policies can be decrypted. An issue with KP-ABE is that it requires an a priori formulation of access policies during key generation, which is not always practicable in EHRS because the policies to access health records are sometimes determined after key generation. In this paper, we revisit KPABE and propose a dynamic ABE paradigm, referred to as access policy redefinable ABE (APR-ABE). To address the above issue, APR-ABE allows users to redefine their access policies and delegate keys for the redefined ones; hence a priori precise policies are no longer mandatory. We construct an APR-ABE scheme with short ciphertexts and prove its full security in the standard model under several static assumptions.

cs.CR

On the Security of Privacy-Preserving Vehicular Communication Authentication with Hierarchical Aggregation and Fast Response

In [3], the authors proposed a highly efficient secure and privacy-preserving scheme for secure vehicular communications. The proposed scheme consists of four protocols: system setup, protocol for STP and STK distribution, protocol for common string synchronization, and protocol for vehicular communications. Here we define the security models for the protocol for STP and STK distribution, and the protocol for vehicular communications,respectively. We then prove that these two protocols are secure in our models.

cs.CR

On the Security of MTA-OTIBASs (Multiple-TA One-Time Identity-Based Aggregate Signatures)

In [3] the authors proposed a new aggregate signature scheme referred to as multiple-TA (trusted authority) one-time identity-based aggregate signature (MTA-OTIBAS). Further, they gave a concrete MTA-OTIBAS scheme. We recall here the definition of MTA-OTIBAS and the concrete proposed scheme. Then we prove that our MTA-OTIBAS concrete scheme is existentially unforgeable against adaptively chosen-message attacks in the random oracle model under the co-CDH problem assumption.

cs.CR

Flexible and Robust Privacy-Preserving Implicit Authentication

Implicit authentication consists of a server authenticating a user based on the user's usage profile, instead of/in addition to relying on something the user explicitly knows (passwords, private keys, etc.). While implicit authentication makes identity theft by third parties more difficult, it requires the server to learn and store the user's usage profile. Recently, the first privacy-preserving implicit authentication system was presented, in which the server does not learn the user's profile. It uses an ad hoc two-party computation protocol to compare the user's fresh sampled features against an encrypted stored user's profile. The protocol requires storing the usage profile and comparing against it using two different cryptosystems, one of them order-preserving; furthermore, features must be numerical. We present here a simpler protocol based on set intersection that has the advantages of: i) requiring only one cryptosystem; ii) not leaking the relative order of fresh feature samples; iii) being able to deal with any type of features (numerical or non-numerical). Keywords: Privacy-preserving implicit authentication, privacy-preserving set intersection, implicit authentication, active authentication, transparent authentication, risk mitigation, data brokers.

cs.CR