Quality-of-Service Based Protection in MPLS Control WDM Mesh Networks

Intelligent methods for automatic protection and restoration are critical in optical transport mesh networks. This paper discusses the problem of quality-of-service (QoS)-based protection in terms of the protection-switching time and availability for end-to-end lightpaths in a WDM mesh network. We analyze the backup lightpath-sharing problem in such networks and study the correlation of the working lightpaths and the impact of the correlation on the sharing of the backup lightpaths. We present a multi-protocol-label-switching (MPLS) control-based fully distributed algorithm to solve the protection problem. The proposed algorithm includes intelligent and automatic procedures to set up, take down, activate, restore, and manage backup lightpaths. It greatly reduces the required resources for protection by allowing the sharing of network resources by multiple backup lightpaths. At the same time, it guarantees, if possible, to satisfy the availability requirement even with resource sharing by taking the correlation of working lightpaths into consideration. A simple analysis of the proposed algorithm in terms of computation time and message complexity indicates that the implementation of the algorithm is practical. The illustrative studies that compare the performance of 1:1, unlimited sharing, and QoS-based backup sharing algorithms indicate that QoS-based sharing achieves comparable performance as unlimited sharing, which is much better than the 1:1 backup scheme in terms of connection blocking probability, average number of connections in the network for a given offered load, and network resource utilization.     

安全事件模糊等量约束的因果关联算法研究

通过对异构网络的安全事件特点的深入分析,指出在大量不完整、模糊的安全事件中准确地定位潜在的安全威胁,对态势和威胁及其重要程度进行全面及时的评估,是当前安全管理的一个技术难题.提出一种基于时间关联窗口的安全事件模糊关联算法,在一定程度上解决安全事件的漏报与领域知识的不完备性问题,对当前的安全态势、安全威胁及其重要程度进行全面及时评估提供有力的支持.     

A generalized protection framework using a new link-State availability model for reliable optical networks

This paper investigates a generalized protection framework for availability-guaranteed connection provisioning in an optical wavelength-division-multiplexed (WDM) network. Reliability is a crucial concern in high-speed optical networks. A service level agreement (SLA), which mandates high service availability even in the face of network failures must be met in provisioning a reliable connection. In this study, a new link-state-modeling mechanism is developed to form a dynamic link-state parameter called link and resource availability (LRA), which represents physical-layer availability and resource status for an optical link. Such up-to-date link-state information can be used by a standard link-state routing protocol to efficiently provision reliable connections. Based on the link-state availability model, LRA, a connection-provisioning algorithm is then proposed which can guarantee customers' availability requirements. A new generalized protection model is developed through dynamic LRA-based provisioning. Numerical results demonstrate the performance of the proposed provisioning approach to be promising.     

基于动态口令的应用层DDoS攻击防御方案

研究和设计了使用动态口令技术来保护服务器抵御DDoS攻击的OTP-DEF方案.首先,方案可根据服务器工作负载的不同,分别处于正常、疑似受攻击或确认受攻击3种工作模式之下,而基于动态口令的认证方案只在疑似受攻击工作模式下起作用.其次,由于动态口令会自动变化,故方案可抵御复制、重放和暴力破解攻击.第三,通过记录那些不解决难题并不断发送请求的IP地址来识别客户端是否为攻击者,一旦所有攻击者被识别出来后,OTP-DEF屏蔽其IP地址并停止发布难题,以便正常用户能方便地使用服务.最后,只需在服务器端实施和部署,客户端无需做任何更改.