浅析未来互联网NDN和其对TD-LTE的影响

20世纪最伟大发明之一的互联网,因其TCP/IP技术引起的传输瓶颈,随着应用需求的变化而日益突出。未来互联网NDN体系以内容为中心,以内容命名定位内容,有效地解决了TCP/IP技术上的困境。本文在简单阐述未来互联网发展中的某些想法后,分析了NDN的总体架构、工作原理和对TD-LTE系统产生的影响。     

无线电管理“四个体系”的基础架构研究

在学习刘利华副部长关于加快建立健全无线电管理"四个体系"指示的基础上,提出"四个体系"建设从"以功能模块为中心"向"以数据为中心"转变的体系架构设想,并分析了"以数据为中心"体系架构的优势及实现的路径。     

基于顶层设计思路的企业安全架构总体设计

简述了安全架构的定义、内容、定位、作用。按照顶层设计的思路,介绍了如何建立以安全方针、策略为核心的安全架构模型。同时根据安全架构规划内容框架,提出了"三个体系、二个平台、二个中心"的322安全架构总体框架,形成了从防御到监控、分析、处置自适应的安全防护架构,可科学指导企业网络与信息系统安全建设。     

基于SOA软件架构的应用与研究

SOA(Service Oriented Architecture,面向服务的软件体系架构)抛弃了传统的面向对象,以技术为中心的架构体系,转向面向服务的架构体系。SOA表示的是为某项特定的业务架构一套软件体系。文章围绕着SOA的架构,分析了目前SOA架构体系的状况,并阐述了一种基于SOA的企业级应用的软件架构体系。     

以内容为中心的下一代宽带网络演进

未来宽带互联网将是以内容为中心的网络,内容流量的飞速增长以及用户QoS需求的不断提高,使得互联网内容传输技术乃至架构面临全新的挑战。在分析当前互联网内容传输优化技术发展最新动态以及以内容为中心的新型互联网架构研究进展的基础上,介绍了一种"演进式革命"的设计思想及一种基于虚拟化重叠网的下一代网络架构。     

以内容为中心的新一代互联网体系架构研究

本文介绍了目前国际上关于下一代互联网的最新研究方向和热点——以内容为中心,并以其中的代表内容中心网络(CCN)为例,阐述了新一代互联网体系的基本架构和框架模型,同时对其他类似架构方案做了简单的介绍,希望能够引起国内相关主管部门和研究机构的重视,开展我国在相关领域的自主研究,尽快参与国际合作和竞争。     

命名数据网络中的DoS/DDoS攻击研究综述

随着网络的发展,现行的网络结构出现了难以解决的问题。以内容为中心的网络重新设计了网络架构解决了这些问题,命名数据网络(Named Data Network,NDN)是现今典型的以内容为中心的网络,但它的发展也出现了新的安全问题。文中主要分析了传统的DoS/DDoS攻击对NDN网络的影响,对NDN网络中产生的新型DoS/DDoS攻击进行了剖析,并简述了其相应的解决方案。     

气象部门管理信息化系统设计初探

以国家和部门信息化战略为指导,文中针对当前气象管理信息系统现状和存在问题进行分析,充分利用现代信息技术,形成了包括内容架构、层级架构和支撑架构完整的气象管理信息系统的总体框架。稳步推进气象部门电子政务内网信息系统建设、建设"互联网+"政务服务体系、构建融入业务体系的"一中心、一平台、多应用"气象管理信息系统,实现充分的数据共享,流程的高度集约,为智慧政务提供坚实的保障,推进管理的深度融合。     

全台网络化制播体系媒体数据存储架构和数据流向规划及其实现方案

本文以电视台节目制播体系架构规划为背景，结合北京台新电视中心技术系统设计和建设实践，介绍了全新网络化制播体系中媒体数据存储架构和数据流向的规划及其实现方案，重点对电视台制播网络系统大规模音频媒体数据交换的实现方式和技术手段进行了较深入的分析和探讨。     

SOA全台网络化节目制播体系环境下跨系统工作流程设计和服务关系(上)

本文以电视台节目制播体系架构设计为背景,结合北京台新电视中心技术系统设计和建设实践,介绍了采用SOA模式的全台网络化制播体系架构以及此架构下跨系统工作流程的设计思路,着重从数据交换、服务关系和数据流程等多个角度对流程本质进行了分析,并通过实例对流程设计进行了详细说明.     

An authenticated re‐encryption scheme for secure file transfer in named data networks

With the fast progress of the Internet and communication technologies, the digital communication is increasingly based on the architecture of TCP/IP. Nevertheless, in TCP/IP's architecture, there are limitations such as data uncertainty and flow overloading. In response to this, a novel architecture has been proposed, which is known as the named data network (NDN). Named data network is an alternative network architecture based on the data each user accesses. Users gain accesses to the data by using an adjacent router (node) that verifies the correctness of the data. In NDN, the router has the capability to store and search for the data. Hence, this architecture largely improves the disadvantages in TCP/IP's architecture. Named data network is a new proposal and relatively under‐researched now. Thus far, an adequate secure file transfer protocol is still unavailable for NDN. In some cases, files are broken or the source fails to authenticate, which results in the need to discover the owner of the file. Furthermore, we believe that NDN should involve an authentication mechanism in the secure file transfer protocol. In view of the above, this paper presents an authenticated re‐encryption scheme for NDN, which offers sender authentication, data confidentiality, and support for potential receivers. Finally, we also propose a security model for sender authentication and prove that the proposed scheme is secure.     

A popularity based content eviction scheme via betweenness-centrality caching approach for content-centric networking (CCN)

Wireless Networks - In distinction to today’s IP-based, host-bound, Internet architecture, content-centric networking (CCN) emphasizes content by making it instantly addressable and routable....     

NDN中路由机制研究综述

命名数据网络（NDN）是未来互联网研究中一个具有代表性的结构。着重介绍NDN中一些路由策略,其中涉及NDN的基本结构及转发机制、现有路由策略的发展及优缺点,最后提出了路由机制方面进一步的研究方向。     

Hybrid 802.11p-cellular architecture for NDN-based VANET

Vehicular network communications (VANET) face multiple challenges due to their intermittent connections and the rapid changes in their topologies. In recent years, several research efforts have explored the use of content-centric approaches to alleviate some of these challenges. One of these promising network designs is Named Data Networking (NDN), which has become a valid solution to support VANET applications. However, in the NDN architecture, the main forwarding mechanism for the interest packets is flooding. This forwarding mechanism will result in excessive collisions, which will lead to the broadcast storm problem. In this paper, we propose VC-NDN: a hybrid and hierarchical Named Data Networking architecture for VANETs. VC-NDN improves content retrieval efficiency through an adapted NDN-based communication model. VC-NDN includes a new interest forwarding scheme to reduce packet collision in the network and an efficient mechanism to support push-based traffic. Furthermore, to reduce communication costs, VC-NDN uses two communication technologies in parallel, namely, IEEE 802.11p and cellular communications, while keeping the usage of the cellular network at a minimum level. Finally, to reduce the impact on vehicle mobility, VC-NDN follows a hierarchical clustering architecture. Specifically, a density-based clustering algorithm is designed to create and maintain stable clusters with multihop communication capability. Our performance study shows that VC-NDN outperforms the basic VNDN solutions in terms of data retrieval delay and packet delivery ratio while minimizing the usage of the cellular network.     

Modeling denial‐of‐service against pending interest table in named data networking

Named data networking (NDN) has attracted much attention on the design for next generation Internet architecture. Although it embeds some security primitives in its original architecture, it may suffer from denial‐of‐service (DoS) attacks. In this paper, we model one representative type of NDN‐specific DoS attacks named DoS against pending interest table (PIT), or DoS‐PIT, which floods malicious Interests that request nonexistent content to bypass cached content at routers and to exhaust the memory resource for PIT, bringing in severe service degradation. In our proposed analytical model, the closed‐form expressions for the DoS probability for users suffering DoS‐PIT are derived, while considering several important factors of NDN networks such as PIT size, time‐to‐live of each PIT entry, popularity of content, and cache size. Moreover, extensive simulation experiments demonstrate the accuracy of the proposed model on evaluating the damage effect of DoS‐PIT. In addition, the proposed model can be chosen to guide designing effective countermeasures for DoS‐PIT (or attacks with similar way to harm NDN) by properly setting the values of some parameters (e.g., cache size) of each NDN router. Copyright © 2013 John Wiley & Sons, Ltd.     

命名数据网络下基于K-medoids的簇内Hash路由机制

命名数据网络（Named Data Networking,NDN）是以内容为中心的新型网络架构,其随处缓存策略存在缓存冗余过多、邻居缓存利用率低等问题,导致缓存空间的浪费及缓存效率的低下.本文提出的融合沿路径非协作和路径外协作的缓存路由机制（K-Medoids Hash Routing,KMHR）,使用K-medoids算法选取层次簇内的中心点,并针对不同流行度的内容分别采用Hash路由及最短路径路由,保证簇内高流行度内容的精确定位和唯一性,降低缓存冗余,提高缓存效率.通过真实网络拓扑仿真得出,KMHR机制具有最低的请求时间、最优的路由增益和较少的缓存内容数量.     

Cooperative detection and protection for Interest flooding attacks in named data networking

Named data networking (NDN) is a new emerging architecture for future network, which may be a substitute of the current TCP/IP‐based network, for the content‐oriented data request mode becoming the future trend of development. The security of NDN has attracted much attention, as an implementation of next‐generation Internet architecture. Although NDN is immune to most current attack, it cannot resist the distributed denial of service like attack – Interest flooding attack (IFA) – effectively. IFA takes advantages of the forwarding mechanism of NDN, flooding a large number of malicious Interest packets at quite a high rate, and exploits the network resources, which may cause the paralysis of the network. Taking into account the severity of the destruction, we propose an algorithm to counter such new type of attack. We analyze three properties of IFA, and use them to judge and filter Interest packets. Vector space model and Markov model are used in our method to realize a cooperative detection. Meanwhile, we present the retransmission forwarding mechanism to ensure legitimate user request. The ndnSIM module of ns3 is used for the corresponding simulation, and results of the simulation will be given to show the effectiveness of our algorithm. Copyright © 2014 John Wiley & Sons, Ltd.     

A New HBS Model in Millimeter-Wave Beamspace MIMO-NOMA Systems Using Alternative Grey Wolf with Beetle Swarm Optimization

In recent years, content delivery accounts for a large proportion of the Internet traffic, but end-to-end communications used in the Internet mismatch content-centric delivery and lead to considerable delivery costs and latency. Taking the advantages of content-centric networking into account, we are motivated to employ the name-based mechanism to achieve content communications in the Internet and propose a content-centric framework in the Internet environment (CCFI). CCFI proposes a mapping mechanism between a unicast address and a name so that it can employ the name-based mechanism to achieve the following two objectives: (1) forward a content request to the nearest server in a unicast way; (2) support content sharing among multiple sources. Finally, CCFI is analyzed and evaluated, and the data show that it effectively reduce the content communication costs and latency.

     

Content-Centric Networking for Mobile Networks

Wireless Personal Communications - Compared with the address-centric network such as the Internet, the content-centric networking (CCN) has a potential advantage in terms of content-centric...