基于日志解析的网络数据传输信息安全自动加密系统优化

由于网络运行状态判断不明确,导致网络数据传输信息存在一系列丢失问题,为此结合日志解析技术对网络数据传输信息进行安全自动加密系统的优化.通过加密系统的信息通信网络、接口芯片以及通用接口总线进行优化改装,利用硬件设备采集日志数据和实时网络传输数据,通过日志的解析确定目前网络的运行状态,在该状态下模拟信息数据的传输过程,实现...     

一种网络爬虫的带缓存非阻塞异步域名解析器模型及其性能分析

网络爬虫是搜索引擎的一个基本组件,网络爬虫抓取页面的效率直接影响搜索引擎提供的服务质量。除了可以通过改进网络爬虫的爬行策略来提高网络爬虫效率之外,也可以通过优化网络爬虫程序某方面的设计来消除特定的效率瓶颈。通过对网络爬虫结构和实际运行数据的分析,针对爬虫的DNS解析瓶颈,设计了一种带缓存异步域名解析器模型,并通过实验和一般DNS解析器模型进行了比较,实验结果证明这种模型对于减少程序等待解析域名的这一操作时间十分有效,显然也能够提高爬虫的整体效率。     

基于WinPcap的网络分析的研究与实现

主要讨论利用WinPcap开发包实现Windows下网络数据包的捕获技术,分析了IP、TCP等协议的解析过程,利用MS-Sql数据库来存储网络数据,建立了系统硬件运行环境。通过测试,实现了对局域网的监控功能。     

基于Agent人工智能的异构网络多重覆盖节点入侵检测系统设计

异构网络具有结构复杂、多重覆盖面积大等特征,使得网络入侵检测较为隐蔽,为网络安全运行造成威胁,为此,设计基于Agent人工智能的异构网络多重覆盖节点入侵检测系统。通过检测Agent和通信Agent装设主机Agent,以Cisco Stealthwatch流量传感器作为异构网络传感器检测攻击行为,采用STM32L151RDT6 64位微控制器传输批量数据,由MAX3232芯片实现系统电平转化,实现硬件系统设计。软件部分设计入侵检测标准,利用传感器设备捕获网络实时数据,通过Agent技术解析异构网络协议并提取数据运行特征,综合考虑协议解析结果及与检测标准匹配度,实现异构网络多重覆盖节点入侵检测。通过系统测试得出结论:设计的基于Agent人工智能的异构网络多重覆盖节点入侵检测系统入侵行为的漏检率和入侵类型误检率的平均值仅为6%和5%,能够有效提高检测精度,减小检测误差。     

层次化RFID编码解析服务系统的研究与实现

RFID编码解析服务系统的架构对RFID编码解析服务的性能有着非常重要的影响。本文在深入分析现有的RFID编码解析技术的基础上,通过系统架构、数据存储、缓存机制的设计,实现了一种层次化的RFID编码解析系统。测试结果表明,本系统显著提高了RFID编码解析服务性能,能够高效地提供编码解析服务。     

基于环境智能的老人健康照护系统设计

为了帮助缓解空巢老人的照护问题,结合传感器技术为空巢老人设计并实现了一种基于环境智能的老人健康照护系统.系统由多种类非侵入式传感器的数据采集模块和老人健康照护的万维网(WEB)模块两部分组成.数据采集模块使用MODBUS协议进行数据采集,由GSM网络进行数据发送,通过服务器进行数据存储和解析.WEB模块对老人的亲属、医护人员和系统管理员提供了不同的系统功能,以便于为老人提供更好的照护服务.测试结果表明:利用传感器数据能够有效进行老人的行为状态映射,系统运行稳定.     

基于WebService气象数据的开发和应用

Web service就是一个应用程序,是一个能够通过Web进行调用的API,能够用编程的方法通过Web来调用这个应用程序。在网络技术快速发展的今天,许多数据服务平台建立Web service实现数据共享,气象系统通过网络建立Web服务为公众提供丰富的预报和实况数据。本文通过C#编程调用气象系统提供的Web service数据接口,并给出调用方法和实例。     

基于门控循环神经网络的网络时延预测模型

在信息中心网络ICN与5G融合的新型网络架构下,现场增强名字解析系统通过确定性时延名字解析服务来应对工业物联网IIoT等新应用对确定时延的挑战,其节点结构划分和维护需要测量节点间的时延。精确的网络时延预测可以减少测量代价,比简单移动平均方案更好地应对网络时延的变化。本文设计并实现了一种基于门控循环神经网络的网络时延预测模型,并基于亚马逊公司异地机房之间的真实时延数据进行了验证。实验结果表明,所提模型的预测精度比传统模型平均提高了20%以上,能够在业务场景中得到应用。     

电力系统中网络质量问题分析方法及实现

电力电网质量情况是关系到电网正常运行的关键,如何及时监测电力网络是目前亟待解决的技术问题,针对该问题,提出了新型的质量监测方法,该文基于.NET的浏览器/服务器(B/S)架构设计出系统总体架构,该系统包括监测设备层、数据库层服务层、Web服务层、客户端应用层等,通过电力网络质量检测模块监测电力网络系统中影响电力网络质量的数据,诸如网络正常稳态数据、网络参数、告警事件数据等,并且应用OneNet平台实现电力网络数据的准确、实时采集和传输,并采用随机矩阵理论模型对监测的数据进行深度的分析,揭示影响电力系统数据的因素。通过试验分析,该技术方案能够及时发现电网中的问题,有利于电力电网的稳定运行。     

基于区块链的持久标识符系统

随着信息产业的发展, 数据生产者产生了大量价值数据. 为了进行数据共享, 赋予数据相应的标识符用于解析数据所在位置,同时为使数据可长期通过标识符访问, 还需保证标识符解析服务长期可用, 但现有标识符系统多数采用半去中心化结构, 由于过于依赖最终解析服务, 其中部分系统由于各种原因逐渐丧失解析能力. 本文基于区块链系统的分布式账本数据一致性, 提出了一种基于区块链的持久标识符系统, 在兼容现有标识符系统访问层的基础上, 提供存储层以保证标识符解析服务持久性及数据的长期正确保存. 基于Handle系统及 Hyperledger Fabric的测试结果表明, 该系统能够在提供可接受的请求响应速度与存储占用率的前提下, 为持久标识符服务提供更好的数据完整 性与解析服务长期可用性.     

MobiGATE: a mobile computing middleware for the active deployment of transport services

The use of gateway proxies is one important approach to facilitating adaptation across wireless and mobile environments. Importantly, augmented service entities deployed within the gateway proxy residing on the wired network can be composed and deployed to shield mobile clients from the effects of poor network characteristics. The usual approach to the static composition of service entities on the gateway proxy is to have these service entities interact with each other by explicitly invoking procedures on the named interface, but such a tight coupling of interfaces inhibits the flexible composition and adaptation of the service entities to the dynamic operating characteristics of wireless networks. In this paper, we present a mobile gateway for the active deployment of transport entities or, for short, MobiGATE (pronounced Mobi-Gate). MobiGATE is a mobile middleware framework that supports the robust and flexible composition of transport entities, known as streamlets. The flow of data traffic is subjected to processing by a chain of streamlets. Each streamlet encapsulates a service entity that adapts the flow of traffic across the wireless network. To facilitate the dynamic reconfiguration of the streamlets, we advocate applying the concept of coordination as the unifying approach to composing these transport service entities. Importantly, MobiGATE delineates a clear separation of interdependent parts from the service-specific computational codes of those service entities. It does this by using a separate coordination language, called MobiGATE coordination language (MCL), to describe the coordination among streamlet service entities. The complete design, implementation, and evaluation of the MobiGATE system are presented in this paper. Initial experimental results validate the flexibility of the coordination approach in promoting separation-of-concern in the reconfiguration of services, while achieving low computation and delay overheads.     

Trust Management in Distributed Systems

Distributed systems such as the Internet, peer-to-peer networks, and mobile ad hoc networks involve numerous entities, many of which haven't previously interacted. Trust management can help minimize risk and ensure the network activity of benign entities in distributed systems. This article presents different trust models. It also discusses trust management in P2P system     

绍兴轻纺集团移动信息系统的设计

移动信息系统是专门针对绍兴轻纺集团推出移动办公的信息系统。系统通过智能终端用无线通讯网络连接到业务系统,完成移动办公、移动管理等功能,根据不同的功能可以划分为电信接入层、信息交换层、业务服务层、增值服务层四个模块。     

Anonymous Geo-Forwarding in MANETs through Location Cloaking

In this paper, we address the problem of destination anonymity for applications in mobile ad hoc networks where geographic information is ready for use in both ad hoc routing and Internet services. Geographic forwarding becomes a lightweight routing protocol in favor of the scenarios. Traditionally the anonymity of an entity of interest can be achieved by hiding it among a group of other entities with similar characteristics, i.e., an anonymity set. In mobile ad hoc networks, generating and maintaining an anonymity set for any ad hoc node is challenging because of the node mobility, consequently the dynamic network topology. We propose protocols that use the destination position to generate a geographic area called {em anonymity zone (AZ)}. A packet for a destination is delivered to all the nodes in the AZ, which make up the anonymity set. The size of the anonymity set may decrease because nodes are mobile, yet the corresponding anonymity set management is simple. We design techniques to further improve node anonymity and reduce communication overhead. We use analysis and extensive simulation to study the node anonymity and routing performance, and to determine the parameters that most impact the anonymity level that can be achieved by our protocol.     

分簇Ad Hoc网络的密钥管理

Ad Hoc网络可以不依赖于现有网络基础设施,快速搭建起一个移动通信网络,然而其灵活特性又使其安全性面临着严峻的挑战。密钥管理是Ad Hoc网络安全的关键技术,本文首先回顾了Ad Hoc网络密钥管理方面的研究,然后基于分簇的网络结构给出了一种新的Ad Hoc网络密钥管理方案。方案使用了身份签密的密码算法,不需要公钥证书的存在,用户以其身份标识作为公钥,有效地降低了用户终端计算、存储能力的需求和系统密钥管理的通信开销。基于分簇的结构将网上节点分成一些相对独立的自治域,既提高了安全服务的可用性和可扩充性,也便于对某些紧急情况快速做出反应。     

Progressive decomposition: a method of coarse-to-fine image parsing using stacked networks

To parse images into fine-grained semantic parts, the complex elements will put it in trouble when using off-the-shelf semantic segmentation networks, because it is difficult for them to utilize the contextual information of fine-grained parts. In this paper we propose a progressive decomposition method to parse images in a coarse-to-fine manner with refined semantic classes. It consists of two aspects: stacked networks and progressive supervisions. The stacked network is achieved by stacking some segmentation layers in a segmentation network. The former segmentation module parses images at a coarser-grained level, and the result will be fed to the following one to provide effective contextual clues for the finer-grained parsing. The skip connections from shallow layers of the network to fine-grained parsing modules are also added to recover the details of small structures. For the training of the stacked networks which have coarse-to-fine outputs, a strategy of progressive supervision is proposed to merge classes in ground truth to get coarse-to-fine label maps, and then train the stacked network end-to-end with the hierarchical supervisions. The proposed framework can be injected into many advanced neural networks to improve the parsing results. Extensive evaluations on several public datasets including face parsing and human parsing well demonstrate the superiority of our method.

     

SDN和MEC架构下高铁网络多维资源适配架构研究

为了满足高铁网络中不同业务对带宽、延迟、可靠性等多元化的要求,采用集中式与分布式相结合的方法,提出一种基于SDN和MEC的高铁网络多维资源适配架构,采用了SDN逻辑集中控制和MEC的关键技术和方法,并在SDN控制器、MEC服务器和软件定义移动单元三个实体上设计了核心功能组件,实现链路状态信息实时收集、多维网络资源动态适配、服务及时响应等能力,通过一个实际的高铁网络应用案例测试验证了该架构在时延、丢包率等方面的性能提升,最后讨论了该架构未来的一些问题和研究方向。     

ANSWER: AutoNomouS netWorked sEnsoR system

Sensor networks are expected to evolve into long-lived, open, ubiquitous, multi-purpose networked systems. We propose a new concept called AutoNomouS netWorked sEnsoR system (ANSWER) whose mission is to provide in situ users with real-time, secure information that enhances their situational and location awareness. To the best of our knowledge, solutions that accomplish this goal do not yet exist. ANSWER finds immediate applications to both overt and covert operations ranging from tactical battlefield surveillance to crisis management and homeland security. The architectural model of ANSWER is composed of a large number of sensors and of a set of (mobile) aggregation-and-forwarding nodes that organize and manage the sensors in their vicinity. In this paper we present the main features that enable ANSWER to effectively and efficiently provide secure, QoS-aware information services to in situ mobile users; namely, secure dynamic task-based networking and in-network storage to support application-level tasks and queries (each specified with desired QoS and security attributes), while hiding network-level details; and a model-based methodology exploiting QoS and security trade-offs for smart AFN mobility subject to application and network requirements and constraints. This new concept is in sharp departure from the prevalent view in NSS design that networking is independent of the task(s) at hand and information processing and storage are, primarily, the responsibility of remote entities.     

移动Ad-hoc网络安全

移动Ad-hoc网络是一种不依赖任何固定的基础设施的新型的无线网络。在网络中，节点之间的通信完全依赖无线链路，网络拓扑随着节点的移动频繁变化。移动Ad-hoc网络不同于有线网络的特性对于保证其安全性提出了新的挑战。本文在探讨移动Ad-hoc网络的安全需求的基础上，着重分析了移动Ad-hoc网络易于遭受的攻击，并集中了讨论移动Ad-hoc网络的路由安全、密钥管理等关键问题。