检索结果-南通市图书馆

Secure Cloud Architecture for 5G Core Network

在线全文

学校读者我要写书评

暂无评论

Chinese Journal of Electronics 2021年第3期30卷 516-522页

作者： LI Lingshu WU Jiangxing hu hongchao LIU Wenyan GUO Zehua PLA Strategic Support Force Information Engineering University Beijing Institute of Technology

Service-based architecture(SBA) is a profound advancement in the novel 5 G Core network(5 GC). Existing studies show that SBA can benefit from cloud computing to achieve extensibility, modularity,reusability, and openness. It also brings security problems(e.g., hypervisor hijacking, and malware injection). To provide secure 5 G services, we propose a service-based cloud architecture called Mimicloud for 5 GC based on dynamic and heterogeneous techniques. Mimicloud provides flexible reconfiguration mechanisms to protect containers and eliminate all attack knowledge obtained from adversaries. We use multiple containers to execute crucial services and ensure security with *** employs heterogeneous components to prevent multiple containers from being breached through the same vulnerabilities. Experimental results show that Mimicloud can effectively strengthen the security of the 5 GC. The performance overhead is analyzed in order to demonstrate its scalability.

关键词： service-based architecture service-oriented architecture telecommunication security 5G Core network service-based cloud architecture secure cloud architecture Mimicloud for 5GC architecture secure 5G services cloud computing SBA telecommunication computing invasive software 5G mobile communication

Defensive deception framework against reconnaissance attacks in the cloud with deep reinforcement learning

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Science China(Information Sciences) 2022年第7期65卷 67-85页

作者： huanruo LI Yunfei GUO Shumin huO hongchao hu Penghao SUN Department of Computer Science Information Engineering University Department of Communication Technologies Academy of Military Science

Implementing defensive deception in the cloud is promising to proactively counter reconnaissance attack. This technique presents decoys to camouflage cloud assets and distracts attack resource. However,the major challenge is to develop an effective deception strategy to orchestrate digital decoys. To address this issue, we propose a deep reinforcement learning(DRL)-based defensive deception framework. First,we formulate a utility function, which mathematically models underlying threats associated with common vulnerabilities among virtual machines in the cloud. Then, we customize training interfaces and the neural networks for a DRL agent. The reward function reflects the effectiveness of asset concealment and the waste of attack resources, referring to a comprehensive defense goal. Finally, the well-trained DRL agent generates the optimal defense strategy. It specifies a more granular deception strategy than existing proposals. Simulation results show that the proposed framework leads to a 7.87% average advantage in realizing the comprehensive defense goal. Moreover, it can stably improve the concealment degree of cloud assets up to 20.58%, and increase the attack cost up to 40.40%. This study shows that it is promising to improve cloud security with deception defense and artificial intelligence techniques.

关键词： cyber deception defense Cyber Deception Defense artificial intelligence Artificial Intelligence Cloud Security cloud security Reconnaissance Attack reconnaissance attack Deep Reinforcement Learning deep reinforcement learning deception strategy Deception Strategy

同方期刊数据库

Toward a Scalable SDN Control Mechanism via Switch Migration

在线全文

学校读者我要写书评

暂无评论

China Communications 2017年第1期14卷 111-123页

作者： Guozhen Cheng Hongchang Chen hongchao hu Zhiming Wang National Digital Switching System Engineering & Technological R&D Center Zhengzhou 450002 China

Dynamic Controller Provisioning Problem(DCPP) is a key problem for scalable SDN. Previously, the solution to this problem focused on adapting the number of controllers and their locations with changing network conditions, but ignored balancing control loads via switch migration. In this paper, we study a scalable control mechanism to decide which switch and where it should be migrated for more balanced control plane, and we define it as Switch Migration Problem(SMP). The main contributions of this paper are as follows. First, we define a SDN model to describe the relation between controllers and switches from the view of loads. Based on this model, we form SMP as a Network Utility Maximization(NUM) problem with the objective of serving more requests under available control resources. Second, we design a synthesizing distributed algorithm for SMP--- Distributed Hopping Algorithm(DHA), by approximating our optimal objective via Log-Sum-Exp function. In DHA, individual controller performs algorithmic procedure independently. With the solution space F, we prove that the optimal gap caused by approximation is at most 1/βlog|F|, and DHA procedure is equal to implementation of a time-reversible Markov Chain process. Finally, the results are corroborated by several numerical simulations.

关键词： software-defined networking scalability switch migrations Markov chain

Orchestrating Network Functions in Software-Defined Networks

在线全文

学校读者我要写书评

暂无评论

China Communications 2017年第2期14卷 104-117页

作者： hongchao hu Lin Pang Zhenpeng Wang Guozhen Cheng National Digital Switching System Engineering & Technological R&D Center Zhengzhou 450002 China

*** networking(SDN) enables *** companies to participate in the network function innovations. A number of instances for one network function will inevitably *** in the network. Although some orchestration architecture has been proposed to chain network functions, rare works are focused on how to optimize this process. In this paper, we propose an optimized model for network function orchestration, function combination model(FCM). Our main contributions are as following. First, network functions are featured with a new abstraction, and are open to external providers. And FCM identifies network functions using unique type, and organizes their instances distributed over the network with the appropriate way. Second, with the specialized demands, we can combine function instances under the global network views, and formulate it into the problem of Boolean linear program(BLP). A simulated annealing algorithm is designed to approach optimal solution for this BLP. Finally, the numerical experiment demonstrates that our model can create outstanding composite schemas efficiently.

关键词： software-defined network network function function orchestrating

ATSSC:An Attack Tolerant System in Serverless Computing

在线全文

学校读者我要写书评

暂无评论

China Communications 2024年第6期21卷 192-205页

作者： Zhang Shuai Guo Yunfei hu hongchao Liu Wenyan Wang Yawen Information Engineering University Zhengzhou 450002China

Serverless computing is a promising paradigm in cloud computing that greatly simplifies cloud *** serverless computing,developers only provide function code to serverless platform,and these functions are invoked by its driven ***,security threats in serverless computing such as vulnerability-based security threats have become the pain point hindering its wide *** ideas in proactive defense such as redundancy,diversity and dynamic provide promising approaches to protect against ***,these security technologies are mostly applied to serverless platform based on“stacked”mode,as they are designed independent with serverless *** lack of security consideration in the initial design makes it especially challenging to achieve the all life cycle protection for serverless application with limited *** this paper,we present ATSSC,a proactive defense enabled attack tolerant serverless *** integrates the characteristic of redundancy,diversity and dynamic into serverless seamless to achieve high-level security and ***,ATSSC constructs multiple diverse function replicas to process the driven events and performs cross-validation to verify the *** order to create diverse function replicas,both software diversity and environment diversity are ***,a dynamic function refresh strategy is proposed to keep the clean state of serverless *** implement ATSSC based on Kubernetes and *** and experimental results demonstrate that ATSSC can effectively protect serverless computing against cyberattacks with acceptable costs.

关键词： active defense attack tolerant cloud computing security serverless computing

An Effective and Scalable VM Migration Strategy to Mitigate Cross-VM Side-Channel Attacks in Cloud

在线全文

学校读者我要写书评

暂无评论

China Communications 2019年第4期16卷 151-171页

作者： Chao Yang Yunfei Guo hongchao hu Wenyan Liu Yawen Wang National Digital Switching System Engineering & Technological Research Center

Co-residency of virtual machines(VMs) of different tenants on the same physical platform would possibly lead to cross-VM side-channel attacks in the cloud. While most of current countermeasures fail for real or immediate deployment due to their requirement for modification of virtualization structure, we adopt dynamic migration, an inherent mechanism of the cloud platform, as a general defense against this kind of threats. To this end, we first set up a unified practical information leakage model which shows the factors affecting side channels and describes the way they influence the damage due to side-channel attacks. Since migration is adopted to limit the time duration of co-residency, we envision this defense as an optimization problem by setting up an Integer Linear Programming(ILP) to calculate optimal migration strategy, which is intractable due to high computational complexity. Therefore, we approximate the ILP with a baseline genetic algorithm, which is further improved for its optimality and scalability. Experimental results show that our migration-based defense can not only provide excellent security guarantees and affordable performance cost in both theoretical simulation and practical cloud environment, but also achieve better optimality and scalability than previous countermeasures.

关键词： side-channel attacks information leakage virtual machine migration genetic algorithm

SMAF: a secure and makespan-aware framework for executing serverless workflows

在线全文

学校读者我要写书评

暂无评论

Science China(Information Sciences) 2023年第3期66卷 295-296页

作者： Shuai ZHANG Yunfei GUO Zehua GUO hongchao hu Guozhen CHEN Institute of Information Technology Information Engineering University School of Automation Beijing Institute of Technology Purple Mountain Laboratories

Serverless computing, or function-as-a-service(FaaS), is an emerging service provision paradigm in cloud computing. Workflow, which comprises a set of tasks with datadependent on each other, is a typical application abstract model in clouds. Generally, applications in serverless computing can be modeled by serverless workflow, in which multiple functions are orchestrated together as a workflow to provide an integrated service [1].

关键词：

LDAS&ET-AD:Learnable Distillation Attack Strategies and Evolvable Teachers Adversarial Distillation

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Computers, Materials & Continua 2024年第5期79卷 2331-2359页

作者： Shuyi Li hongchao hu Xiaohan Yang Guozhen Cheng Wenyan Liu Wei Guo National Digital Switching System Engineering&Technological R&D Center The PLA Information Engineering UniversityZhengzhou450000China

Adversarial distillation(AD)has emerged as a potential solution to tackle the challenging optimization problem of loss with hard labels in adversarial ***,fixed sample-agnostic and student-egocentric attack strategies are unsuitable for ***,the reliability of guidance from static teachers diminishes as target models become more *** paper proposes an AD method called Learnable Distillation Attack Strategies and Evolvable Teachers Adversarial Distillation(LDAS&ET-AD).Firstly,a learnable distillation attack strategies generating mechanism is developed to automatically generate sample-dependent attack strategies tailored for distillation.A strategy model is introduced to produce attack strategies that enable adversarial examples(AEs)to be created in areas where the target model significantly diverges from the teachers by competing with the target model in minimizing or maximizing the AD ***,a teacher evolution strategy is introduced to enhance the reliability and effectiveness of knowledge in improving the generalization performance of the target *** calculating the experimentally updated target model’s validation performance on both clean samples and AEs,the impact of distillation from each training sample and AE on the target model’s generalization and robustness abilities is assessed to serve as feedback to fine-tune standard and robust teachers *** evaluate the performance of LDAS&ET-AD against different adversarial attacks on the CIFAR-10 and CIFAR-100 *** experimental results demonstrate that the proposed method achieves a robust precision of 45.39%and 42.63%against AutoAttack(AA)on the CIFAR-10 dataset for ResNet-18 and MobileNet-V2,respectively,marking an improvement of 2.31%and 3.49%over the baseline *** comparison to state-of-the-art adversarial defense techniques,our method surpasses Introspective Adversarial Distillation,the top-performing method in terms of robustne

关键词： Adversarial training adversarial distillation learnable distillation attack strategies teacher evolution strategy

Synthesis and Kinetics of Hydrogenated Rosin Dodecyl Ester as an Environmentally Friendly Plasticizer

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Renewable Materials 2020年第3期8卷 289-300页

作者： Qiaoguang Li Sheng Gong Jie Yan hongchao hu Xugang Shu Hanqing Tong Zhiye Cai School of Chemistry and Chemical Engineering Zhongkai University of Agriculture and EngineeringGuangzhou510225China Zhongkai University of Agriculture and Engineering College of Chemistry and Chemical EngineeringGuangdong University of TechnologyGuangdong Province Key Laboratory of Waterfowl Healthy BreedingGuangzhou510225China College of Chemical Engineering Guangdong University of Petrochemical TechnologyMaoming525000China

The plasticizer is an important polymer material ***-toxic and environmentally friendly plasticizers are developed recently in order to decrease fossil fuel reserves,serious environmental pollution and the toxicity of phthalate *** this study,a new,efficient and environmentally friendly plasticizer of hydrogenated rosin dodecyl ester was prepared by an esterification reaction of hydrogenated rosin and *** influences of different reaction conditions(including different catalysts,the catalyst concentration,the ratio of the reactants,reaction temperature,and reaction time)on the esterification yield are examined and *** rosin dodecyl ester with 71.8%yield was synthesized under the optimized reaction conditions(1:0.8 molar ratio of rosin to dodecanol,1 mol%tetrabutyl titanate concentration,and 210℃for 6 h).The esterification reaction is a second-order reaction,and kinetic calculations showed that the activation energy is 39.77 KJ·mol^(−1).The structure of the hydrogenated rosin dodecyl ester was confirmed by FT-IR spectroscopy and^(13)C NMR ***,the thermal stability of target product(hydrogenated rosin dodecyl ester)was also tested by thermal gravimetric analysis(TGA),which showed a good thermal stability.

关键词： Environmentally friendly plasticizer hydrogenated rosin dodecyl ester synthesis kinetics study