检索结果-南通市图书馆

Design and Implementation of an SDN-Enabled DNS Security Framework

在线全文

学校读者我要写书评

暂无评论

China Communications 2019年第2期16卷 233-245页

作者： Zhenpeng Wang Hongchao Hu guozhen cheng National Digital Switching System Engineering and Technological Research Center

The Domain Name System(DNS) is suffering from the vulnerabilities exploited to launch the cache poisoning attack. Inspired by biodiversity, we design and implement a non-intrusive and tolerant secure architecture Multi-DNS(MDNS) to deal with it. MDNS consists of Scheduling Proxy and DNS server pool with heterogeneous DNSs in it. And the Scheduling Proxy dynamically schedules m DNSs to provide service in parallel and adopts the vote results from majority of DNSs to decide valid replies. And benefit from the centralized control of software defined networking(SDN), we implement a proof of concept for it. Evaluation results prove the validity and availability of MDNS and its intrusion/fault tolerance, while the average delay can be controlled in 0.3s.

关键词： DNS cache poisoning attack software defined networking moving target defense dynamic heterogeneous redundant

Uncovering network traffic anomalies based on their sparse distributions

在线全文

学校读者我要写书评

暂无评论

Science China(Information Sciences) 2014年第9期57卷 256-266页

作者： cheng guozhen CHEN HongChang cheng DongNian ZHANG Zhen LAN JuLong National Digital Switching System Engineering and Technological Research Center

Characterizing network traffic with higher-dimensional features results in increased complexity of most detectors and classifiers for identifying traffic *** key observations from existing studies confirm that network anomalies are typically distributed in a sparse way,with each anomaly essentially characterized by its lower-dimensional *** on this important finding,we exploit sparsity in designing a novel detection method for anomalies that ignores redundancies that are dynamically filtered from the feature sets and accurately classifies *** of our method with three well known techniques shows a10%improvement in accuracy with an O(n)complexity of the classifier.

关键词： anomaly detection feature filtering multi-resolution analysis sparse distribution

Defending Against Link Failure in Virtual Network Embedding Using a Hybrid Scheme

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

China Communications 2019年第1期16卷 129-138页

作者： Jianjian Ai Hongchang Chen Zehua Guo guozhen cheng National Digital Switching System Engineering & Technological R&D Center University of Minnesota Twin Cities

Nowadays network virtualization is utterly *** a result,how to protect the virtual networks from attacking on the link is increasingly *** schemes are mainly backup-based,which suffer from data loss and are helpless to such attacks like data *** offer high security level,in this paper,we first propose a multipath and decision-making(MD) scheme which applies multipath simultaneously delivery and decision-making for protecting the virtual *** different security requirement for virtual link,we devise a hybrid scheme to protect the virtual *** the critical links,MD scheme is *** the other links,we adopt the Shared Backup *** simulation results indicate the proposed scheme can significantly increase the security level of the critical link high in the loss of less acceptance ratio.

关键词： network virtualization virtual link security multipath and decision-making hybrid scheme

Orchestrating Network Functions in Software-Defined Networks

在线全文

学校读者我要写书评

暂无评论

China Communications 2017年第2期14卷 104-117页

作者： Hongchao Hu Lin Pang Zhenpeng Wang guozhen cheng National Digital Switching System Engineering & Technological R&D Center Zhengzhou 450002 China

*** networking(SDN) enables *** companies to participate in the network function innovations. A number of instances for one network function will inevitably *** in the network. Although some orchestration architecture has been proposed to chain network functions, rare works are focused on how to optimize this process. In this paper, we propose an optimized model for network function orchestration, function combination model(FCM). Our main contributions are as following. First, network functions are featured with a new abstraction, and are open to external providers. And FCM identifies network functions using unique type, and organizes their instances distributed over the network with the appropriate way. Second, with the specialized demands, we can combine function instances under the global network views, and formulate it into the problem of Boolean linear program(BLP). A simulated annealing algorithm is designed to approach optimal solution for this BLP. Finally, the numerical experiment demonstrates that our model can create outstanding composite schemas efficiently.

关键词： software-defined network network function function orchestrating

Toward a Scalable SDN Control Mechanism via Switch Migration

在线全文

学校读者我要写书评

暂无评论

China Communications 2017年第1期14卷 111-123页

作者： guozhen cheng Hongchang Chen Hongchao Hu Zhiming Wang National Digital Switching System Engineering & Technological R&D Center Zhengzhou 450002 China

Dynamic Controller Provisioning Problem(DCPP) is a key problem for scalable SDN. Previously, the solution to this problem focused on adapting the number of controllers and their locations with changing network conditions, but ignored balancing control loads via switch migration. In this paper, we study a scalable control mechanism to decide which switch and where it should be migrated for more balanced control plane, and we define it as Switch Migration Problem(SMP). The main contributions of this paper are as follows. First, we define a SDN model to describe the relation between controllers and switches from the view of loads. Based on this model, we form SMP as a Network Utility Maximization(NUM) problem with the objective of serving more requests under available control resources. Second, we design a synthesizing distributed algorithm for SMP--- Distributed Hopping Algorithm(DHA), by approximating our optimal objective via Log-Sum-Exp function. In DHA, individual controller performs algorithmic procedure independently. With the solution space F, we prove that the optimal gap caused by approximation is at most 1/βlog|F|, and DHA procedure is equal to implementation of a time-reversible Markov Chain process. Finally, the results are corroborated by several numerical simulations.

关键词： software-defined networking scalability switch migrations Markov chain

Improvement of Attributed Scattering Center Extraction by Using SAR Super-Resolution Preprocessing

在线全文

学校读者我要写书评

暂无评论

Journal of Beijing Institute of Technology 2023年第6期32卷 685-695页

作者： guozhen cheng Jiacheng Chen Fengming Hu Feng Xu Key Laboratory for Information Science of Electromagnetic Waves(MoE) Fudan UniversityShanghai 200433China

Synthetic aperture radar(SAR)is able to acquire high-resolution method using the active microwave imaging *** images are widely used in target recognition,classification,and surface analysis,with extracted *** scattering center(ASC)is able to describe the image features for these ***,sidelobe effects reduce the accuracy and reliability of the estimated ASC model *** paper incorporates the SAR super-resolution into the ASC extraction to improve its *** filter bank and subspace methods are demonstrated for preprocessing to supress the *** on the preprocessed data,a reinforcement based ASC method is used to get the *** experimental results show that the super-resolution method can reduce noise and suppress sidelobe effect,which improve accuracy of the estimated ASC model parameters.

关键词： synthetic aperture radar(SAR) spectrum estimation attributed scattering center(ASC) reinforcement learning

SecIngress:An API Gateway Framework to Secure Cloud Applications Based on N-Variant System

在线全文

学校读者我要写书评

暂无评论

China Communications 2021年第8期18卷 17-34页

作者： Dacheng Zhou Hongchang Chen guozhen cheng Weizhen He Lingshu Li National Digital Switching System Engineering and Technological R&D Center ZhengzhouHenan 450002China

Based on the diversified technology and the cross-validation mechanism,the N-variant system provides a secure service architecture for cloud providers to protect the cloud applications from attacks by executing multiple variants of a single software in parallel and then checking their behaviors’***,it is complex to upgrade current Software as a Service(SaaS)applications to adapt N-variant system *** arise from the inability of tenants to adjust the application architecture in the cloud environment,and the difficulty for cloud service providers to implement N-variant systems using existing API *** paper proposes SecIngress,an API gateway framework,to overcome the challenge that it is hard in the cloud environment to upgrade the applications based on N-variants *** design a two-stage timeout processing method to lessen the service latency and an Analytic Hierarchy Process Voting under the Metadata mechanism(AHPVM)to enhance voting *** implement a prototype in a testbed environment and analyze the security and performance metrics before and after deploying the prototype to show the effectiveness of *** results reveal that SecIngress enhances the reliability of cloud applications with acceptable performance degradation.

关键词： N-variant system API gateway cloud security analytic hierarchy process

Towards a Dynamic Controller Scheduling-Timing Problem in Software-Defined Networking

在线全文

学校读者我要写书评

暂无评论

China Communications 2017年第10期14卷 26-38页

作者： Zhenping Lu Fucai Chen guozhen cheng Chao Qi Jianjian Ai National Digital Switching System Engineering & Technological R&D Center Zhengzhou 450002 China

Controller vulnerabilities allow malicious actors to disrupt or hijack the Software-Defined Networking. Traditionally, it is static mappings between the control plane and data plane. Adversaries have plenty of time to exploit the controller's vulnerabilities and launch attacks wisely. We tend to believe that dynamically altering such static mappings is a promising approach to alleviate this issue, since a moving target is difficult to be compromised even by skilled adversaries. It is critical to determine the right time to conduct scheduling and to balance the overhead afforded and the security levels guaranteed. Little previous work has been done to investigate the economical time in dynamic-scheduling controllers. In this paper, we take the first step to both theoretically and experimentally study the scheduling-timing problem in dynamic control plane. We model this problem as a renewal reward process and propose an optimal algorithm in deciding the right time to schedule with the objective of minimizing the long-term loss rate. In our experiments, simulations based on real network attack datasets are conducted and we demonstrate that our proposed algorithm outperforms given scheduling schemes.

关键词： software-defined networking network security controller

An Approach for Network Function Combination Based on Least Busy Placement Algorithm

在线全文

学校读者我要写书评

暂无评论

China Communications 2016年第S1期13卷 167-176页

作者： XIE Lijun JIANG Yiming WANG Binqiang XIONG Gang cheng guozhen National Digital Switching System Engineering & Technological Research Center

Recently, integrating Softwaredefined networking(SDN) and network functions virtualization(NFV) are proposed to address the issue that difficulty and cost of hardwarebased and proprietary middleboxes management. However, it lacks of a framework that orchestrates network functions to service chain in the network cooperatively. In this paper, we propose a function combination framework that can dynamically adapt the network based on the integration NFV and SDN. There are two main contributions in this paper. First, the function combination framework based on the integration of SDN and NFV is proposed to address the function combination issue, including the architecture of Service Deliver Network, the port types representing traffic directions and the explanation of terms. Second, we formulate the issue of load balance of function combination as the model minimizing the standard deviations of all servers' loads and satisfying the demand of performance and limit of resource. The least busy placement algorithm is introduced to approach optimal solution of the problem. Finally, experimental results demonstrate that the proposed method can combine functions in an efficient and scalable way and ensure the load balance of the network.

关键词： software-defined networking network functions virtualization load balance least busy placement algorithm contribution degree