Provenance-Based Endpoint Detection and Response (P-EDR) systems are deemed crucial for future Advanced Persistent Threats (APT) defenses. Despite the fact that numerous new techniques to improve P-EDR systems have been proposed in academia, it is still unclear whether the industry will adopt P-EDR systems and what improvements the industry desires for P-EDR systems. To this end, we conduct the first set of systematic studies on the effectiveness and the limitations of P-EDR systems. Our study consists of four components: a one-to-one interview, an online questionnaire study, a survey of the relevant literature, and a systematic measurement study. Our research indicates that all industry experts consider P-EDR systems to be more effective than conventional Endpoint Detection and Response (EDR) systems. However, industry experts are concerned about the operating cost of P-EDR systems. In addition, our research reveals three significant gaps between academia and industry (1) overlooking client-side overhead; (2) imbalancedalarm triage cost and interpretation cost; and (3) excessive server side memory consumption. This paper's findings provide objective data on the effectiveness of P-EDR systems and how much improvements are needed to adopt P-EDR systems in industry.

Assessment of groundwater vulnerability to contamination is the basement approaches for preserving the quality of groundwater. Based on DRASTIC model containing seven hydrogeological parameters and GIS techniques, groundwater vulnerability assessment was carried out in the plain area of Tianjin City, China. The results indicate that the studied area can be divided into five zones: low, slightly lower, middle, slightly higher, and high groundwater vulnerability zones, with coverage area of 1.8%, 24.8%, 53%, 19.6% and 0.8%, respectively. Low vulnerability zone locates in downtown, where the ground is covered by impervious surface. High and slightly higher vulnerability zones mainly locate in the groundwater recharge areas and the suburban areas surrounding downtown. Medium vulnerability zone covers most parts of the plain areas in the south of Baodi fraction. The result is consistent with the actual situation.

The Wuqing urban section of the North Canal Basin, Tianjin, is a significant gathering place for multisource pollution, showing the characteristics of a stagnant water body supplied by unconventional water sources. With the development of the economy and society, the water quality of the Wuqing urban section of the North Canal Basin, Tianjin, has been seriously polluted due to the discharge of sewage outlets and the influx of nonpoint source pollution from farmland. In this study, based on the results of special water experiments, a two-dimensional hydrodynamic water quality model was constructed. The concentrations of ammonia nitrogen (NH₃-N), total phosphorus (TP), and chemical oxygen demand (COD) in the study area were simulated, and the model parameters were calibrated and verified with the measured values. Based on the model verification, the water quality improvement scheme of the ecological floating bed with different plant ratios was set up to simulate the water quality. The research results showed that the average concentrations of NH₃-N, TP, and COD decreased by 10.4%, 15.7%, and of d 26.3%, respectively, after the ecological floating bed was arranged. During model parameter calibration and validation, the RMSE ranges of NH₃-N, TP, and COD were 0.09~0.22 mg/L, 0.00~0.02 mg/L, and 0.37~2.42 mg/L, respectively. Other statistical indicators are also within a reasonable range, and the model accuracy and reliability are high. The simulation results of different scenarios showed that the optimal ratio of ecological floating bed plants was 700 m² of Scirpus validus Vahl and 700 m² of Canna in zone 1 of the floating bed combination, 430 m² of Scirpus validus Vahl, and 170 m² of Iris in zone 2 of the floating bed combination, and 200 m² of Iris and 200 m² of Lythrum salicaria in zone 3 of the floating bed combination. This study can provide a theoretical basis for the sustainable development of water purification in the North Canal. It can also provide a model approach for the implementation of river water purification schemes, exemplified by the North Canal.

Control flow recovery is critical to promise the software quality, especially for large-scale software in production environment. However, the efficiency of most current control flow recovery techniques is compromised due to their runtime overheads along with deployment and development costs. To tackle this problem, we propose a novel solution, Adonis , which harnesses Operating System (OS) -level traces, such as dynamic library calls and system call traces, to efficiently and safely recover control flows in practice. Adonis operates in two steps: It first identifies the call-sites of trace entries, and then it executes a pairwise symbolic execution to recover valid execution paths. This technique has several advantages. First, Adonis does not require the insertion of any probes into existing applications, thereby minimizing runtime cost . Second, given that OS-level traces are hardware-independent, Adonis can be implemented across various hardware configurations without the need for hardware-specific engineering efforts, thus reducing deployment cost . Third, as Adonis is fully automated and does not depend on manually created logs, it circumvents additional development cost . We conducted an evaluation of Adonis on representative desktop applications and real-world IoT applications. Adonis can faithfully recover the control flow with 86.8% recall and 81.7% precision. Compared to the state-of-the-art log-based approach, Adonis can not only cover all the execution paths recovered but also recover 74.9% of statements that cannot be covered. In addition, the runtime cost of Adonis is 18.3× lower than the instrument-based approach; the analysis time and storage cost (indicative of the deployment cost) of Adonis is 50× smaller and 443× smaller than the hardware-based approach, respectively. To facilitate future replication and extension of this work, we have made the code and data publicly available.

To optimize water–nitrogen management for mulched drip-irrigated peanuts in Xinjiang, a three-season field experiment was conducted to assess the impacts of drip irrigation rates and water–nitrogen coupling on peanut growth, yield, quality, and water–nitrogen use efficiency. Two irrigation accounts (30 and 37.5 mm, denoted as W1 and W2), three nitrogen application levels (half nitrogen application and conventional nitrogen application, denoted as N1 and N2), and a control treatment (CK) without nitrogen application, and two drip discharge rates (3.0 and 6.0 L h⁻¹, denoted as Q1 and Q2) were utilized for a total of five treatments per year, and the experiment was repeated three times. The results demonstrated that the irrigation and fertilization parameters of the W2N1Q2 treatment could significantly improve peanut growth, yield, quality, and water–nitrogen use efficiency, achieving optimal values for all measured indicators. Compared with the control (W2N0Q1), the main stem height increased by 9.59% and 13.13%, the aboveground biomass increased by 6.32% and 34.67%, the yield increased by 26.69% and 20.97% (p < 0.01), the water use efficiency increased by 27.08% and 16.33%, the nitrogen partial factor productivity values were 47.39 and 77.00 kg kg⁻¹, the protein content increased by 3.99% and 4.63%, and the oil content increased by 1.68% and 8.53%, respectively. A PCA was performed using five key performance indicators (yield, protein content, oil content, water use efficiency, and nitrogen partial factor productivity) to evaluate different treatment combinations. The W2N1Q2 treatment obtained the highest composite score, indicating its overall superior performance among all treatments. Therefore, under the conditions of this experiment, the irrigation and nitrogen application parameters for achieving both a high yield and quality of peanuts under mulched drip irrigation in Xinjiang were determined to be W2N1Q2 treatment (irrigation account of 37.5 mm, nitrogen application of 118 kg ha⁻¹, and drip discharge of 6.0 L h⁻¹). This optimized combination brings three key advantages to water-scarce regions: (1) maximizing yield water use efficiency through precise irrigation scheduling; (2) balanced nutrient management to prevent nitrogen wastage; and (3) providing a key technological reference for agricultural production in Xinjiang and other similar ecological zones.

Error logs like Java exceptions play a crucial role in diagnosing and resolving errors within the industry. Nonetheless, the extensive logging of Java exceptions may result in exception fatigue in large-scale Java systems at an industrial level, where the frequency of Java exceptions being generated surpasses developers’ ability to manage them effectively. Regrettably, there is a lack of research on the seriousness, prevalence, and solutions to this problem. To close this gap, we first make a comprehensive investigation into the exception fatigue problem within a prominent Internet corporation in China, namely Alibaba, confirming its importance in the industry. Consequently, we introduce a novel solution called ABEL , designed to automatically pinpoint the most relevant exceptions associated with software failures. The key challenge lies in the randomness of exceptions, which prevents existing sequence-based techniques from being effective. To address this challenge, ABEL establishes correlations between Java exceptions and the Key Performance Indicator (KPI) of applications, enabling the identification of exceptions leading to irregularities in KPI. Our evaluation of ABEL across four Java applications and five business KPIs within Alibaba illustrates its capability to pinpoint the primary cause of exception logs with an AC@5 (top-5 accuracy) exceeding 90%, effectively mitigating the exception fatigue problem within Alibaba. Furthermore, it can identify the root-cause exceptions in a real software failure within just 4 minutes, outperforming the manual investigation process by over an hour.