Abstract: Embodiments of the present disclosure provide a method for control-flow integrity protection, including: changing preset bits of all legal target addresses of a current indirect branch instruction in a control flow of a program to be protected to be same; and rewriting preset bits of a current target address of the current indirect branch instruction to be same as the preset bits of the legal target addresses, so that the program to be protected terminates when the current target address is tampered with. By changing the preset bits of all the legal target addresses of the current indirect branch instruction to be same and rewriting the preset bits of the current target address to be consistent with the preset bits of the legal target addresses, traditional label comparison is replaced by the preset bit overlap operation, reducing performance overhead and improving attack defense efficiency.

Abstract: The present invention provides an antibody or a functional fragment thereof that specifically binds to IL-17A with high affinity. Also provided are a nucleic acid molecule encoding the antibody or the functional fragment thereof disclosed herein, an expression vector and a host cell for expressing the antibody or the functional fragment thereof disclosed herein, and a method for preparing the antibody or the functional fragment thereof disclosed herein. The present invention also provides a pharmaceutical composition comprising the antibody or the functional fragment thereof disclosed herein, and use of the antibody or the functional fragment thereof disclosed herein for treating an immune dysfunction disease.

Abstract: Provided are a container platform-oriented trusted software authorization and verification system and a method, the system including a public key infrastructure builder, a container image identity builder, a signature list builder, a container image verifier, a signature list and user certificates loader, and a container program verifier. The method is capable of conveniently authorizing container images and software running in the container, and verifying the container images and programs in the container at the right time, so as to ensure that container images running on the container platform are trusted, and the software running in the container is also trusted, thereby improving the security of the container platform.

Abstract: An antibody or a functional fragment thereof that specifically bind to PD-L1 with high affinity, a nucleic acid molecule that encodes said antibody or the functional fragment thereof, an expression vector and a host cell for use in expressing said antibody or the functional fragment thereof, and a method for producing said antibody or the functional fragment thereof. An immunoconjugate and a pharmaceutical composition containing said antibody or the functional fragment thereof, and a method for using said antibody or the functional fragment thereof to enhance the function of a T cell so as to up-regulate a cell-mediated immune response, for use in treating diseases caused by T cell dysfunction.

Abstract: Embodiments of the present disclosure provide a method for control-flow integrity protection, including: changing preset bits of all legal target addresses of a current indirect branch instruction in a control flow of a program to be protected to be same; and rewriting preset bits of a current target address of the current indirect branch instruction to be same as the preset bits of the legal target addresses, so that the program to be protected terminates when the current target address is tampered with. By changing the preset bits of all the legal target addresses of the current indirect branch instruction to be same and rewriting the preset bits of the current target address to be consistent with the preset bits of the legal target addresses, traditional label comparison is replaced by the preset bit overlap operation, reducing performance overhead and improving attack defense efficiency.

Abstract: By splitting CGN functions based on a control plane and a forwarding plane, a CGN control plane function is put into a BRAS CP device, and a CGN forwarding plane function is retained on a CGN card on the BRAS DP device, and CGN configuration information is distributed by the BRAS CP device to the BRAS DP device.

Abstract: By splitting CGN functions based on a control plane and a forwarding plane, a CGN control plane function is put into a BRAS CP device, and a CGN forwarding plane function is retained on a CGN card on the BRAS DP device, and CGN configuration information is distributed by the BRAS CP device to the BRAS DP device.

Abstract: The present invention provides an antibody or a functional fragment thereof that specifically binds to Proprotein convertase subtilisin/kexin type 9 (PCSK9) with high affinity, also provides a nucleic acid molecule encoding the antibody of the invention or the functional fragment thereof, for expressing an expression vector and a host cell of the antibody or the functional fragment thereof, and also provides a method for producing the antibody or the functional fragment thereof. The present invention provides that the antibody or the functional fragment thereof is used for treating diseases such as dyslipidemia.

Abstract: By splitting CGN functions based on a control plane and a forwarding plane, a CGN control plane function is put into a BRAS CP device, and a CGN forwarding plane function is retained on a CGN card on the BRAS DP device, and CGN configuration information is distributed by the BRAS CP device to the BRAS DP device.

Abstract: In an example, a network device may receive a L3VPN packet of which an egress label edge router (LER) is the network device, and acquire an adjacency index of an adjacency entry in an adjacency table according to the destination IP address of the inner IP datagram from the L3VPN packet. The network device may acquire a PW extended index of a PW extended entry in a PW extended table and a private network layer-2 header for the inner IP datagram from an adjacency entry having the adjacency index. By using the private network layer-2 header and a public network label, a private network label and a public network layer-2 header in a PW extended entry having the PW extended index, the network device may encapsulate the inner IP datagram into a L2VPN packet and forward the L2VPN packet through a physical egress interface in the PW extended entry.

Abstract: An antibody or a functional fragment thereof that specifically bind to PD-L1 with high affinity, a nucleic acid molecule that encodes said antibody or the functional fragment thereof, an expression vector and a host cell for use in expressing said antibody or the functional fragment thereof, and a method for producing said antibody or the functional fragment thereof. An immunoconjugate and a pharmaceutical composition containing said antibody or the functional fragment thereof, and a method for using said antibody or the functional fragment thereof to enhance the function of a T cell so as to up-regulate a cell-mediated immune response, for use in treating diseases caused by T cell dysfunction.

Abstract: The present invention provides an antibody or a functional fragment thereof that specifically binds to PCSK9 with high affinity, also provides a nucleic acid molecule encoding the antibody of the invention or the functional fragment thereof, for expressing an expression vector and a host cell of the antibody or the functional fragment thereof, and also provides a method for producing the antibody or the functional fragment thereof. The present invention provides that the antibody or the functional fragment thereof is used for treating diseases such as dyslipidemia.

Abstract: In an example, a network device may receive a L3VPN packet of which an egress label edge router (LER) is the network device, and acquire an adjacency index of an adjacency entry in an adjacency table according to the destination IP address of the inner IP datagram from the L3VPN packet. The network device may acquire a PW extended index of a PW extended entry in a PW extended table and a private network layer-2 header for the inner IP datagram from an adjacency entry having the adjacency index. By using the private network layer-2 header and a public network label, a private network label and a public network layer-2 header in a PW extended entry having the PW extended index, the network device may encapsulate the inner IP datagram into a L2VPN packet and forward the L2VPN packet through a physical egress interface in the PW extended entry.

Abstract: When needing to forward a packet from a switch line card to a programmable line card, the switch line card may encapsulate a pseudo-Layer 2 header for the packet based on uplink forwarding process of the switch line card. The pseudo-Layer 2 header may carry an adjacency table index and an egress interface table index which is used by the programmable line card. Correspondingly, the programmable line card may obtain the adjacency table index and the egress interface table index from the pseudo-Layer 2 header of the packet, and then may re-encapsulate a real Layer 2 header for the packet based on downlink forwarding process of the programmable line card, and transmit the packet through a corresponding egress interface.

Abstract: When needing to forward a packet from a switch line card to a programmable line card, the switch line card may encapsulate a pseudo-Layer 2 header for the packet based on uplink forwarding process of the switch line card. The pseudo-Layer 2 header may carry an adjacency table index and an egress interface table index which is used by the programmable line card. Correspondingly, the programmable line card may obtain the adjacency table index and the egress interface table index from the pseudo-Layer 2 header of the packet, and then may re-encapsulate a real Layer 2 header for the packet based on downlink forwarding process of the programmable line card, and transmit the packet through a corresponding egress interface.

Abstract: A method accelerates access of a multi-core system to its critical resources, which includes preparing to delete a critical node in a critical resource, separating the critical node from the critical resource, and deleting the critical node if the conditions for deleting the critical node are satisfied. An apparatus includes a confirmation module for the node to be deleted and a deletion module to accelerate access of a multi-core system to its critical resources.

Abstract: A method accelerates access of a multi-core system to its critical resources, which includes preparing to delete a critical node in a critical resource, separating the critical node from the critical resource, and deleting the critical node if the conditions for deleting the critical node are satisfied. An apparatus includes a confirmation module for the node to be deleted and a deletion module to accelerate access of a multi-core system to its critical resources.