检索结果-南通市图书馆

On the revolution of the information network development paradigm

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Science China(Information Sciences) 2022年第11期65卷 281-295页

作者： jiangxing wu National Digital Switching System Engineering & Technology Research Center Strategic Support Force Information Engineering University

This paper summarizes the evolution logic, technical connotation, presupposition, applicable scope, and existing problems of information networks from the perspective of the development paradigm.This work aims to meet the requirements of symbiosis and coexistence, evolution and revolution, and integration of the function safety and network security of diversified networks and applications. Accordingly, we demonstrate the scientific necessity of the revolution of the information network development paradigm and propose the polymorphic network(PINet) paradigm that separates technical systems and the supporting environment. On this basis, we clarify the core idea, system form, and operation logic of the PINet paradigm and analyze the key technologies of the PINet paradigm in detail. Finally, we propose an engineering implementation scheme of the PINet paradigm, which explores possible methods and approaches to high-quality information networks at the development paradigm level.

关键词： information network development paradigm separation of technical systems and supporting environment polymorphic network (PINet)

Cyberspace Endogenous Safety and Security

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Engineering 2022年第8期8卷 179-185页

作者： jiangxing wu National Digital Switching System Engineering&Technological R&D Center Zhengzhou 450002China

Uncertain security threats caused by vulnerabilities and backdoors are the most serious and difficult problem in cyberspace.This paper analyzes the philosophical and technical causes of the existence of so-called"dark functions"such as system vulnerabilities and backdoors,and points out that endogenous security problems cannot be completely eliminated at the theoretical and engineering levels;rather,it is necessary to develop or utilize the endogenous security functions of the system architecture itself.In addition,this paper gives a definition for and lists the main technical characteristics of endogenous safety and security in cyberspace,introduces endogenous safety and security mechanisms and characteristics based on dynamic heterogeneous redundancy(DHR)architecture,and describes the theoretical implications of a coding channel based on DHR.

关键词： Cyberspace endogenous security problem Uncertain threat Cyberspace endogenous safety and security Relative right axiom Dynamic heterogeneous redundant architecture

Anti-Attacking Modeling and Analysis of Cyberspace Mimic DNS

在线全文

学校读者我要写书评

暂无评论

China Communications 2022年第5期19卷 218-230页

作者： Lei He Quan Ren Bolin Ma Weili Zhang jiangxing wu Institute of information technology Information Engineering Universityzhengzhou 450001China

With the rapid development of information technology,the cyberspace security problem is increasingly serious.Kinds of dynamic defense technology have emerged such as moving target defense and mimic defense.This paper aims to describe the architecture and analyze the performance of Cyberspace Mimic DNS based on generalized stochastic Petri net.We propose a general method of anti-attacking analysis.For general attack and special attack model,the available probability,escaped probability and nonspecial awareness probability are adopted to quantitatively analyze the system performance.And we expand the GSPN model to adjust to engineering practice by specifying randomness of different output vectors.The result shows that the proposed method is effective,and Mimic system has high anti-attacking performance.To deal with the special attack,we can integrate the traditional defense mechanism in engineering practice.Besides,we analyze the performance of mimic DNSframework based on multi-ruling proxy and input-output desperation,the results represent we can use multi ruling or high-speed cache servers to achieve the consistent cost of delay,throughput compared with single authorized DNS,it can effectively solve 10%to 20%performance loss caused by general ruling proxy.

关键词： cyberspace mimic DNS generalized stochastic Petri net anti-attacking modeling performance

Solve the False-Positive Problem of the Mimic System Based on the Best Mimic Component Set

在线全文

学校读者我要写书评

暂无评论

China Communications 2022年第5期19卷 253-266页

作者： Yuwen Shao Zheng Zhang Xiaomei Wang Chuanxing Pan jiangxing wu State Key Laboratory of Mathematical Engineering and Advanced Computing Zhengzhou 450001China China National Digital Switching System Engineering and Technological R&D Center Zhengzhou 450002China

At present,there is a problem of false positives caused by the too vast mimic scope in mimic transformation technology.Previous studies have focused on the“compensation”method to deal with this problem,which is expensive and cannot fundamentally solve it.This paper provides new insights into coping with the situation.Firstly,this study summarizes the false-positive problem in the mimic transformation,analyzes its possible harm and the root causes.Secondly,three properties about the mimic scope are proposed.Based on the three properties and security quantification technology,the best mimic component set theory is put forward to solve the false-positive problem.There are two algorithms,the supplemental method and the subtraction method.The best mimic component set obtained by these two algorithms can fundamentally solve the mimic system’s false-positive problem but reduce the cost of mimic transformation.Thus make up for the lack of previous researches.

关键词： mimic scope the best mimic component set false-positive rate mimic transformation

Thoughts on the development of novel network technology

在线全文

学校读者我要写书评

暂无评论

Science China(Information Sciences) 2018年第10期61卷 144-154页

作者： jiangxing wu National Digital Switching System Engineering and Technological R&D Center

In this paper, we explore potential innovations that could lead to breakthrough developments in Internet technologies. The deep integration of the Internet and economic society brings professionalized service capacity demand, while existing Internet infrastructure with its current technological systems still face a number of challenges, such as intelligence, diversification, personalization, robustness, and efficiency.First, we analyze the actual foundation of innovation and specify the basic technical features of a novel network. Then, we propose a fully dimensionally definable open architecture as the primary direction, and consider reshaping baseline technologies as a starting point and discuss the core operational mechanisms of the novel network based on such reshaped baseline technologies.

关键词： novel Internet technology open architecture full-dimensional definability diversified addressing and routing intelligence general robust control

Problems and solutions regarding generalized functional safety in cyberspace

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Security and Safety 2022年第1期1卷 90-102页

作者： jiangxing wu National Digital Switching System Engineering&Technological R&D Center Zhengzhou 450002China Purple Mountain Laboratories Nanjing 211111China

The common endogenous security problems in cyberspace and related attack threats have posed subversive challenges to conventional theories and methods of functional safety.In the current design of the cyber physical system(CPS),functional safety and cyber security are increasingly intertwined and inseparable,which evolve into the generalized functional safety(S&S)problem.The conventional reliability and cybersecurity technologies are unable to provide security assurance with quanti able design and veri cation metrics in response to the cyberattacks in hardware and software with common endogenous security problems,and the functional safety of CPS facilities or device has become a frightening ghost.The dynamic heterogeneity redundancy(DHR)architecture and coding channel theory(CCT)proposed by the cyberspace endogenous security paradigm could handle random failures and uncertain network attacks in an integrated manner,and its generalized robust control mechanism can solve the universal problem of quantitative design for functional safety under probability or improbability perturbation.As a generalized functional safety enabling structure,DHR opens up a new direction to solve the common endogenous security problems in the cross-disciplinary elds of cyberspace.

关键词： Common endogenous security problem Generalized functional safety(S&S) Dynamic heterogeneity redundancy(DHR)architecture General robust control mechanism Coding channel theory Common cross-disciplinary eld problems

Discussion on a new paradigm of endogenous security towards 6G networks

在线全文

学校读者我要写书评

暂无评论

Frontiers of Information Technology & Electronic Engineering 2022年第10期23卷 1421-1450页

作者： Xinsheng JI jiangxing wu Liang JIN Kaizhi HUANG Yajun CHEN Xiaoli SUN Wei YOU Shumin HUO Jing YANG Department of Computer Science and Technology Tsinghua UniversityBeijing 100084China National Digital Switching System Engineering&Technological R&D Center Zhengzhou 450002China Purple Mountain Laboratories:Networking Communications and SecurityNanjing 211111China

The sixth-generation mobile communication(6G)networks will face more complex endogenous security problems,and it is urgent to propose new universal security theories and establish new practice norms to deal with theªunknown unknownºsecurity threats in cyberspace.This paper first expounds the new paradigm of cyberspace endogenous security and introduces the vision of 6G cyberspace security.Then,it analyzes the security problems faced by the 6G core network,wireless access network,and emerging associated technologies in detail,as well as the corresponding security technology development status and the integrated development of endogenous security and traditional security.Furthermore,this paper describes the relevant security theories and technical concepts under the guidance of the new paradigm of endogenous security.

关键词： 6G security New paradigm of endogenous security Core network Wireless access network

MimicCloudSim:An Environment for Modeling and Simulation of Mimic Cloud Service

在线全文

学校读者我要写书评

暂无评论

China Communications 2021年第1期18卷 212-221页

作者： Liming Pu jiangxing wu Hailong Ma Yuhang Zhu Yingle Li Information Engineering University Zhengzhou 450002China

In recent years,an increasing number of application services are deployed in the cloud.However,the cloud platform faces unknown security threats brought by its unknown vulnerabilities and backdoors.Many researchers have studied the Cyber Mimic Defense(CMD)technologies of the cloud services.However,there is a shortage of tools that enable researchers to evaluate their newly proposed cloud service CMD mechanisms,such as scheduling and decision mechanisms.To fill this gap,we propose MimicCloudSim as a mimic cloud service simulation system based on the basic functionalities of CloudSim.MimicCloudSim supports the simulation of dynamic heterogeneous redundancy(DHR)structure which is the core architecture of CMD technology,and provides an extensible interface to help researchers implement new scheduling and decision mechanisms.In this paper,we firstly describes the architecture and implementation of MimicCloudSim,and then discusses the simulation process.Finally,we demonstrate the capabilities of MimicCloudSim by using a decision mechanism.In addition,we tested the performance of MimicCloudSim,the conclusion shows that MimicCloudSim is highly scalable.

关键词： cyber mimic defense mimic cloud service simulation dynamic heterogeneous redundancy

A proactive defense mechanism for mobile communication user data

在线全文

学校读者我要写书评

暂无评论

Science China(Information Sciences) 2018年第10期61卷 266-268页

作者： Caixia LIU Xinsheng JI jiangxing wu Xiao QIN The National Digital Switching System Engineering & Technological R&D Center Department of Computer Science and Software Engineering Samuel Ginn College of EngineeringAuburn University

Dear editor,Several studies have recently reported on major vulnerabilities in the Signaling System No.7 (SS7)used in mobile networks [1, 2]. The reported vulnerabilities and security issues would lead to the illegal acquisition and tampering of mobile communication user data, known as cellphone user data. The cellphone user data contain important information such as identity identification, location identification, security parameter-set. Due to

关键词： A proactive defense mechanism for mobile communication user data MSISDN