最新刊期

    卷 30 , 期 7 , 2014

      Topic: Network information security

    • Meaning and Vision of Mimic Computing and Mimic Security Defense

      Jiangxing Wu
      Vol. 30, Issue 7, Pages: 2-7(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.001
      摘要:To facilitate high-performance and high-security computing, a technology system based on mimic computing(MC)and mimic security defense(MSD)was proposed. The proposed system focused on both the multi-dimensional reconfigurable and functional architecture and the dynamic varied mechanism. An overview about the concept and mechanism of the MC and MSD was also introduced from the angles of meaning and vision. The science and engineering problems to be further addressed were given in the end.  
      关键词:mimic computing;mimic security defense;multi-level reconfiguration   
      1136
      |
      2611
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59619918 false
      更新时间:2024-06-05
    • Mingjie Ma, Fenggang Sun, Lidong Zhai, Yuejin Du
      Vol. 30, Issue 7, Pages: 8-12(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.002
      摘要:With the development of the internet and peripheral network products, information security draw more and more attention, after the outbreak of the prism, the national information security is not only caused the attention of world leaders, has attracted wide attention from people around the world. The security challenges in the new network security threats which our country was facing were analyzed and recommendations for future network development in China in the field of information security were put forward.  
      关键词:advanced persistent threat;security issue;security challenge;countermeasure recommendation   
      1250
      |
      2466
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59619922 false
      更新时间:2024-06-05
    • An Improved Network Risk Evaluation Metbod Based on Markov Game

      Wenfen Liu, Shuwei Zhang, Xin Gong
      Vol. 30, Issue 7, Pages: 13-18(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.003
      摘要:Network security risk assessment is an important means of acquiring and mastering the current and future state of network, which is of great significance to maintain the safe operation of the network. An improved risk assessment method based on Markov game that has simply changed the past was presented, in which the risk status of the network assets were classified into fixed categories. Depending on the game relationship between vulnerabilities fixing and threat attacking, this method has more detailed characterization of the network risk. Network attacks and vulnerabilities were sorted, which reduced the state space, making the scale of model input greatly reduced, improving the assessment of large-scale network efficiency. In addition, the relative importance of the hosts was taken into account to distinguish the contribution of different hosts on the network risk. Simulation results demonstrate the feasibility and effectiveness of this method.  
      关键词:network security;risk assessment;Markov game;vulnerability   
      720
      |
      1646
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59619920 false
      更新时间:2024-06-05
    • Julong Lan, Jianhui Zhang, Yanhong Wang, Hailong1 Ma, Youjun1 Bu
      Vol. 30, Issue 7, Pages: 26-31(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.005
      摘要:Routing protocol is the core network protocol. It is very important to enhancing network availability and security through improving the routing protocol. Based on the research of routing protocol and security mechanism, the concepts of routing potential and credible potential have been defined to characterize the availability and security feature. Furthermore, a novel routing protocol——multi-next hop routing protocol based on node potential was proposed. A good solution was given to deal with the network congestion caused by network unexpected events and the user information safety hazard from unsafe nodes simultaneously. The solution will play an important role to strengthen the network survivability and to safeguard network user information.  
      关键词:secure routing;node potential;multi-next hop routing   
      445
      |
      799
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59619966 false
      更新时间:2024-06-05
    • Zhi Yan, Jing Zhan
      Vol. 30, Issue 7, Pages: 32-38(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.006
      摘要:Usually the process of storing and analyzing with big data is under the framework of Hadoop within the environment of cloud computing while the risks of big data application on cloud derive from cloud service providers and remote users who access data without authorization. Based on the security issues of big data applying on cloud, a security system for big data oriented by trusted behavior was given. The system with Z formal specification was described and the definition of abstract behaviors which contains reading, updating, adding and deleting operation was given. According to the abstract behavior model, behaviors were divided into trusted behavior and malicious behavior and security analysis on each operation was given. By using Z/EVES tool verified and proved the correctness about the description.  
      关键词:big data;cloud computing security;formalization;Z, trusted behavior;Hadoop   
      483
      |
      726
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59619967 false
      更新时间:2024-06-05
    • Aijiang Liu, Changhui Huang, Guangjun Hu
      Vol. 30, Issue 7, Pages: 39-42(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.007
      摘要:Firstly, the character that the Trojans use domain name to control was analyzed and the method that DNS adopted to detect Trojans was introduced. Secondly, based on the analysis of static and dynamic characters for Trojan domain name, eight indicators were obtained as the input of BP neural network algorithm, including operation time of domain name, the period to visit the domain name, the variation speed of IP address, the country change of IP address, IP address of private address, the same domain name with multiple IP address for different countries, TTL value and search times of domain name. An improved BP neural network algorithm was proposed to solve training efficiency for a great number of domain names, and large average error. Finally, the experimental evaluation of samples was tested by improved neural network algorithm. Compared with traditional neural network algorithm, the detection efficiency is better.  
      关键词:Trojan;domain name;neural network   
      440
      |
      716
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59620021 false
      更新时间:2024-06-05

      Network information security

    • Jie Chen, Jianwei Liu, Mengmeng Wang, Shuangyu He, Jian Mao
      Vol. 30, Issue 7, Pages: 19-25(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.004
      摘要:The next generation internet security architectures were analyzed and the characteristics and security challenges of the existing network were studied. The security goals of reconfigurable network were defined, and the“security substrate”based security management and control mechanism of reconfigurable network was presented. The definition of “security substrate”was given and the corresponding reconfigurable networks security model was illustrated. The construction of security services with multilevel security structure and security service establishment process via “security substrate”were put forward, which were key components of the security management and control architecture of reconfigurable network.  
      关键词:next generation internet design;reconfigurable network;security substrate;dynamic security model   
      611
      |
      1097
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59619963 false
      更新时间:2024-06-05

      Research and development

    • Wei Chen
      Vol. 30, Issue 7, Pages: 43-52(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.008
      摘要:A novel communication service methodology, virtual real-time service, was proposed to discover and utilize the rich temporal and spectrum resource hidden in the negative time axis. Thanks to the delay tolerance of embedded wireless pushing,it could help to unify the content demand of different users,so as to achieve significant spectral and energy efficiency gains of wireless multicasting. The three extensions of cognition object, time scale, and coordination range, induced by virtual real-time service were described. The consumption of computation and storage resource was a cost to be paid for the gains of the energy and spectral efficiency.Hence,the multi-unit collaboration of computation (including cognition), storage, and communications units was highly desired to minimize the cost of computation and storage resource, while maximize the energy and spectral efficiency gains. The proposed scheme holds the promise of overcoming the stringent restrain on the spectral efficiency,which is caused by the current communication architecture and its underlying theory. The union of its two main characteristics, namely, time non-homogenous transmission and multi-unit collaboration,are expected to form a paradigm-shift theory on time non-homogenous multi-unit collaboration communications.  
      关键词:wireless communication;virtual real-time service;multi-unit collaborative communication;spectrum efficiency;cognitive wireless network;5G   
      388
      |
      936
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59620022 false
      更新时间:2024-06-05
    • Guogang Zhao, Liqiang Zhao, Kun Yang
      Vol. 30, Issue 7, Pages: 53-61(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.09
      摘要:Two-tier macro-femto-cellular networks have initially been proposed as a solution to the poor indoor coverage problem, but they are also capable of substantially reducing the overall energy consumption. However, the cross-tier and co-tier interference have to be carefully controlled with the aid of specific radio resource allocation and optimization techniques. A mobile cloud computing management architecture was proposed firstly. Then novel concept of spatial transmission efficiency for PtP radio link was first introduced with several existing efficiency metrics compared. An analytical model was conceived and a radio resource management algorithm based on LTE-A mobile cloud computing was designed. In order to achieve the optimal solution quickly, a rapid convergence of the iterative algorithm was designed. Simulation result shows the proposed algorithm achieves the maximum of system energy efficiency with a superior tradeoff with system throughput.  
      关键词:mobile cloud computing;two-tier macro-femto-cellular network;green wireless communication;radio resource allocation;LTE-A   
      380
      |
      612
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59620067 false
      更新时间:2024-06-05
    • Yongmei Gao, Chunhua Ju, Fuguang Bao
      Vol. 30, Issue 7, Pages: 62-69(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.010
      摘要:The rapid development of mobile network and internet technology, laid the foundation for the development of mobile e-commerce, and a new mobile consumption patterns appeared. The user characteristics model was designed by analyzing a large number of mobile users data sources and characteristics, and mobile user service model with the context analysis was built. Then, the telecommunication data processing framework on the basis of Hadoop framework was built. And also the analyzation of telecommunication data fusion and service mining application was made. It can be supportive for the new mobile consumption, consumption custom and personalized recommendation and marketing, etc.  
      关键词:mobile internet;user characteristic model;user service model;business data fusion   
      419
      |
      1250
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59620077 false
      更新时间:2024-06-05
    • Chao Qian, Xiaorong Zhu
      Vol. 30, Issue 7, Pages: 70-76(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.011
      摘要:The real-time video services in wireless networks are fragile to the dynamic network environment.Therefore, proper buffering management techniques are adopted to mitigate the impact of network fluctuation on user experiences. An adaptive buffer management algorithm based on queue prediction was proposed for wireless video streaming applications. By judging the current state of the buffer, the scheme adjusted the video playout rate and buffer size according to the real-time frame arrival rate and end-to-end delay. The experiments were conducted to validate the proposed algorithm.The experimental results show that this method is able to adaptively adjust buffer size and playout rate according to network fluctuations,which reduces the interrupt frequency and the number of lost frame effectively.  
      关键词:adaptive buffer management;queue prediction,;buffer status;delay contro   
      283
      |
      463
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59620108 false
      更新时间:2024-06-05
    • Jian Wang, Zhizhong Zhang, Yunlong Luo
      Vol. 30, Issue 7, Pages: 77-83(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.012
      摘要:Based on telecom operators increasingly urgent demand for intelligent pipeline, a kind of implementing scheme of user behavior perception system with self-learning function was proposed, which analyzed the protocols of user plane on S1 interface in long term evolution(LTE)network. Aiming at the traditional monitoring system with poor user perception and insufficient statistical capacity, the proposed system achieved user's behavior refined analysis which combined protocol decoding and services call/transaction detail records(xDR)synthesis method with the advantages of current prevailing internet behavior analysis technologies—deep packet inspection(DPI)technique and focused crawler technology. With the verification of existing network data, this system not only achieves the goal, but also has the guiding value of meeting the demand for intelligent pipeline.  
      关键词:LTE network;S1 interface;deep packet inspection;focused crawler;user's behavior perception   
      438
      |
      1595
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59620136 false
      更新时间:2024-06-05
    • Lan Liu, Jun Lin, Jun Cai
      Vol. 30, Issue 7, Pages: 84-89(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.013
      摘要:In the age of big data, large-scale, complexity of heterogeneous network security behavior should be considered. According to the features of huge amount and complex, big data analysis technologies for network security monitoring were proposed. Various types of heterogeneous data sources by data cleaning, and the key data through security event correlation, traffic rules based on wavelets and distributed sequence diagram model and other methods, were analyzed. Some ideas of network security monitoring system for big data environment were provided.  
      关键词:big data;correlation algorithm;data model;information security   
      498
      |
      1408
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59620144 false
      更新时间:2024-06-05
    • Interference Mitigation witb Adaptive Beamforming in Airport Gate Link

      Haoyu Xu, Han Zhou, Liangyou Wang, Sunzeng Cai, Zhenghang Zhu
      Vol. 30, Issue 7, Pages: 90-94(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.014
      摘要:On the current most advanced commercial airplanes, IEEE 802.11b/g based system-terminal wireless LAN(TWLN)-is a wireless solution that is able to support the high speed wireless transmission for gate link. However, IEEE 802.11b/g has no resistibility against interference; due to the strong co-channel interference at the airport, the current gate link system provides a very low data rate. An IEEE 802.11g based adaptive beamforming method was provided that improved the performance of the current TWLN system. The simulation shows the proposed method is able to reject interference and significantly improve the system performance.  
      关键词:adaptive beamforming;interference;IEEE 802.11g;terminal wireless LAN network;airport gate link   
      417
      |
      786
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59620165 false
      更新时间:2024-06-05
    • Design and Implementation of RF Communication Module in Intelligence Home

      Yan Zeng, Wenbin2 Cheng, Yuehong Dai
      Vol. 30, Issue 7, Pages: 95-99(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.015
      摘要:In view of the problem that different kinds of intelligence home terminals bring the great difference of network interface, the RF communication module which controls appliances through four-wire was designed. The interface of module is concise and highly compatible. First of all, the architecture of intelligence home which based on RF wireless communication technology was described. A wireless communication module using STM8S103F3 microcontroller and CC1101 wireless transceiver was designed. In addition, the hardware and software design of the communication module was discussed. Simulated FIFO buffer is used to ensure no loss of data while anti-collision function is realized by checking the frequency of electromagnetic wave before sending data. Test results show that this module can meet the demand of low cost, low power consumption and long distance wireless transmission.  
      关键词:RF wireless communication;STM8S103F3;CC1101;communication protocol   
      485
      |
      1384
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59620209 false
      更新时间:2024-06-05

      summarize

    • Summary of Large-Scale Grapb Partitioning Algoritbms

      Jinfeng Xu, Yihong Dong, Shiyi Wang, Xianmang He, Huahui Chen
      Vol. 30, Issue 7, Pages: 100-106(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.016
      摘要:The large-scale graph partitioning algorithms were summarized and graph computing models in the distributed environment were introduced. Firstly the large-scale static graph partitioning algorithms and the dynamic graph partitioning algorithms were discussed. Then the advantages and disadvantages of these algorithms and its adaptability conscientiously were sumed up. Finally, some meaningful research subjects about the distributed graph partition, which have not been explored were pointed out.  
      关键词:big data;large-scale graph;distributed graph partitioning;load balancing;bulk synchronous parallel model;MapReduce;dynamic graphs   
      578
      |
      4034
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59620236 false
      更新时间:2024-06-05

      Wide operating technology

    • Construction of a SDN Driven Novel Service System for Operatiors

      Jie Liu, Zhe Wang
      Vol. 30, Issue 7, Pages: 107-112(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.017
      摘要:In the mobile internet environment, the major service abilities of operators are gradually losing their advantages. The internet service environment requires an open, flexible, operational architecture. Cloud computing and SDN provide ideas and means of service network optimization for operators. Concept and methodology of SDN technology were analyzed, an extension of SDN concept to cover the upper applications, as well as an hierarchical, modular, loosely coupled, virtualization and open service system architecture based on SDN methodology were proposed, aimed at providing some references for further optimization and value-adding of operator's service system.  
      关键词:SDN;NFV;SOA;cloud computing;virtualization;controller;traffic operation;service chaining   
      247
      |
      559
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59620257 false
      更新时间:2024-06-05
    • Yingbo Zhu, Jianwei Diao, Bo Kang, Shengqiang Liu
      Vol. 30, Issue 7, Pages: 113-120(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.018
      摘要:iMusci Karaok is a service on IPTV developed and operated by China Telecom. It is needed to introduce active personalized push approach of content in order to improve user experience, due to higher cost of remote controller than PC and mobile phone. However, Karaok is a household service, and is ununiform to identify users on server side and terminal side, which will bring inaccurate result when normal recommendation algorithm is adopted. Meanwhile, traditional recommendation algorithm has defects of Matthew effect and cold reboot, which will decrease user experience. To tackle such problems of user experience, the recommendation algorithm was selected and optimized by combination of content label so as to increase recommendation objectively. This research is aiming at enhancing user experience effect rather than algorithm complexity.  
      关键词:association rule;label;personalized push;AHP;weight;SVD;independence test;Matthew effect   
      367
      |
      589
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59620322 false
      更新时间:2024-06-05
    • Jun Zhu, Bo Zhao, Xiaofeng Wang, Bo Wang
      Vol. 30, Issue 7, Pages: 121-124(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.019
      摘要:Newborn things are emerging in an endless stream in recent internet environment, such as VNO(virtual network operation), OTT(over-the-top). Maintenance system of telecommunication operators will no longer adapt to internal and external requirements, reflected as revenue growth slowed down, operation and maintenance costs increased and customer perception declined. It was described that in order to improve customer perception and enhance the competitiveness of enterprises, how telecommunication operators worked on network maintenance transition, to realize network maintenance, support business refinement management, improve the capability of rapid response of operation system.  
      关键词:network maintenance transition;intensive;refinement management;customer perception   
      326
      |
      1533
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59620327 false
      更新时间:2024-06-05
    • Study on PON Based LTE Small Cell Backbaul Tecbnology

      Min Cao, Ming Jiang, Chengbin Shen, Tao Zeng
      Vol. 30, Issue 7, Pages: 125-129(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.020
      摘要:Technical requirements for LTE small cell backhaul networks were investigated. The feasibility and necessity of LTE small cell backhaul based on PON were presented in detail, which covered the factors such as TCO, technical capability, engineering and etc. Those key technologies related to PON based LTE small cell backhaul and their implementations were discussed. Finally, the progress of standardization, status of chipset and equipment development, typical cases of deployment and field trial, were introduced.  
      关键词:passive optical network;long term evolution;mobile backhauling   
      369
      |
      1733
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59620332 false
      更新时间:2024-06-05
    • Researcb on PCI Self-Configuration Tecbnology of LTE eNB System

      Xiaoguang Zhu, Hua Jiang
      Vol. 30, Issue 7, Pages: 130-134(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.021
      摘要:PCI is an important LTE wireless parameter and impacts LTE network planning and network performance. The PCI self-configuration technology of LTE eNB system was mainly discussed, including the realization of SON architecture, self-configuration flow, the PCI resource planning and allocation strategies. The PCI self-configuration technology of LTE eNB system improves the LTE network deployment efficiency, enhances the performance of LTE network system, and reduces manual planning and operation.  
      关键词:physical cell identity;self-configuration;self-organizing network;LTE eNB system   
      674
      |
      1213
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59620359 false
      更新时间:2024-06-05
    • Study on Virtualized Residential Gateway Tecbnology

      Ming Jiang, Haolin Li, Chengbin Shen, Min Cao
      Vol. 30, Issue 7, Pages: 135-138(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.022
      摘要:Since the powerful function of residential gateway increased equipment costs and maintenance complexity, virtualized residential gateway technology emerged. The principle of virtualized residential gateway technology was investigated. Then two implementations of network deployment and the technical feasibility are analyzed. The CAPEX and OPEX of virtualized residential gateway were discussed compared with the existing residential gateway. Finally, with consideration of standardization and industry development, NERGˊs development trend and deployment strategy were proposed.  
      关键词:virtualization;residential gateway;network enhanced residential gateway   
      394
      |
      1206
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59620409 false
      更新时间:2024-06-05
    • Researcb on Private IP Address Mutiplexing in Mobile PS Domain

      Hui Xiao, Jinchao Lin, Weihua Cao, Wenyun Li
      Vol. 30, Issue 7, Pages: 139-142(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.023
      摘要:With the rapid development of mobile internet, a large number of IP address is consumed because most of mobile terminal is always online. Class A private IP address(10.0.0.0/8)are not adequate for large-scale operators any more. A new method was proposed which was by means of integrated carry gateway. The method can multiplex the private IP address of 10 segments, in order to solve shortage of IPv4 address before IPv6 will have been used in large-scale commercial.  
      关键词:private IP address multiplexing;network address translation;integrated carry gateway   
      254
      |
      536
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59620424 false
      更新时间:2024-06-05
    • Qing Zhang, Ping Huang
      Vol. 30, Issue 7, Pages: 143-148(2014) DOI: 10.3969/j.issn.1000-0801.2014.07.024
      摘要:In the background of the mobile internet, along with the big data technology development and customer demand individuation, customer experience requirements is increasing, including high real-time and high accuracy of customer needs. The traditional marketing model cannot meet the rapid development of innovative businesses. Data-driven precision marketing processes and methods of big data in telecom industry, as well as some of the critical IT capabilities to support the precision marketing processes were described.  
      关键词:data-driven;precision marketing;user behavior analysis;effect evaluation   
      305
      |
      1340
      |
      0
      <HTML>
      <L-PDF><XML><Meta-XML>
      <引用本文> <批量引用> 59620428 false
      更新时间:2024-06-05
    0