IP追踪中的自适应包标记

拒绝服务(DoS)攻击是目前最难处理的网络难题之一.最近,研究人员针对DoS攻击提出了多种方案,这些方案都各有优缺点.其中,由Savage等人提出的概率包标记方案受到了广泛的重视,也有不少的变种出现.在这一类的标记方案中,路由器以固定的概率选择是否标记一个数据包,这导致受害需要较多的数据包进行攻击路径的重构.本文提出一种自适应的标记策略,经实验验证受害者用较少的数据包即可重构攻击路径,这不仅为受害者及早地响应攻击争取了更多的时间,还限制了攻击者的伪造能力.

基于有序标记的IP包追踪方案

包标记方案是一种针对DoS攻击提出的数据包追踪方案，由于其具有响应时间快、占用资源少的特点，近年来受到了研究者的广泛关注．但由于包标记方案标记过程的随机性，使得受害者进行路径重构时所需收到的数据包数目大大超过了进行重构所必需收到的最小数据包数目，从而导致重构误报率的提高和响应时间的增长．本文提出了一种基于有序标记的IP包追踪方案，该方案通过存储每个目标IP地址的标记状态，对包标记的分片进行有序发送，使得在DoS发生时，受害者重构路径所需收到的标记包的数目大大降低，从而提高了对DoS攻击的响应时间和追踪准确度．该算法的提出进一步提高了包标记方案在实际应用中的可行性．

一种分块包标记的IP追踪方案

DDoS攻击以其高发性、高破坏力和难以防范的特点，近年来成为互联网的主要安全威胁之一．研究者们提出了多种对抗DDoS攻击的方法．：乓中，Savage等人提出的概率包标记方案以其易于实施、消耗资源小等优点，引起人们的重视．然而概率包标记方案存在两个明显缺陷：多攻击路径重构时的高误报率和高计算复杂度．在概率包标记的基础上，提出了一种分块包标记方案，该方案与概率包标记方案相比具有较低的误报率和较低的计算复杂度，因而具有更高的实际应用意义．

基于TCP/ IP 协议的CSR离子泵电源远程监控软件系统设计

This paper discuss a Ion-pump Power Supply control system making use of RS232 series bus and Intranet.The system s hardware VAC800 is composed of MSP430F149 mixed-signal processors produced by TI and UA7000A network model.MSP430F149 has advantages of ultra-low-power and high-integration.The Ion-pump Power Supply control system has the characteristics of strong function,simple structure,high reliability,strong resistance of noise,no peripheral chip,etc.Visual studio 2005 is used to design the system s softwa...中文文摘：论述了通过RS-232总线和Intranet网络,来实现对远端的离子泵电源的监测与控制。系统硬件VAC800由TI公司的MSP430F149混合信号处理器和UA7000A网络模块构成。MSP430F149具有超低功耗和高集成度等优点,利用它构建的离子泵电源监控系统功能强大,结构简单,可靠性高,抗干扰能力强。系统软件采用visual studio 2005设计。本监控系统能够很好地完成对加速器离子泵电源监视与控制。

基于TCP/IP协议的CSR离子泵电源远程监控软件系统设计

论述了通过RS-232总线和Intranet网络,来实现对远端的离子泵电源的监测与控制。系统硬件VAC800由TI公司的MSP430F149混合信号处理器和UA7000A网络模块构成。MSP430F149具有超低功耗和高集成度等优点,利用它构建的离子泵电源监控系统功能强大,结构简单,可靠性高,抗干扰能力强。系统软件采用visual studio 2005设计。本监控系统能够很好地完成对加速器离子泵电源监视与控制。

用于加速器控制的通用型TCP/IP-多串口协议转换器的研制

在加速器控制领域,经常涉及到要将带有标准RS-232串行接口的设备通过以太网连接来实现远程测控任务,本文所介绍的设计工作解决了8个串口设备通过一台基于CPLD和MSP430技术的通用型TCP/IP-多串口协议转换器来完成远程数据/命令的传送。

基于RFID的基带通信IP核的设计与仿真

分析基于射频识别(RFID)技术的系统基带通信过程,建立RFID基带传输模型,利用FPGA技术实现具有基带编解码、数据收发功能的通信IP核,介绍基于模块化思想的基带通信IP核的RTL设计方法,利用QuartusⅡ与Simulink工具进行系统仿真,仿真实验结果表明,该通信模块是有效的,能够为设计RFID通信系统提供高度集成的基带通信IP核。

FlexRay通信控制器IP的测试与验证

FlexRay是一种用于汽车的高速可确定性的，具备故障容错的总线系统，作下一代汽车网络协议，提供了充足的带宽、可靠性和实时响应能力，以实现线控应用，如节流阀、制动、转向和动态稳定性控制。该标准已经被越来越多的汽车制造商采用。目前国内尚未成功开发出相关产品，因此研究开发具有自主知识产权的IP具有十分重要的意义。 随着芯片复杂度的快速增长，验证成为SoC开发过程中面临的最有挑战性的一个环节。验证要占整个设计开发60%-80%的工作量。对于千万门级的SoC，充分、全面的验证尤为复杂，需要耗费大量的人力以及时间。为了缩短项目开发时间，加快产品面市步伐，要采用先进高效的验证方法，提高验证效率，同时保障验证的覆盖率。 本文所用到的FlexRay通信控制器IP核是由中科院沈阳自动化所SOC项目组自主设计的，本文对其进行了详细的功能验证。首先介绍了集成电路设计中的验证方法学，接着介绍了验证语言SystemVerilog，以及基于SystemVerilog语言的一种新的高效验证方法学VMM。在对FlexRay通信控制器IP核的结构及功能进行分析后采用VMM建立一个基于事务的、带约束的随机化验证平台对IP核进行了全面的功能验证。通过设计足够的case来保证模块的功能覆盖率。通过引用这种高效的验证方法学，发现了设计中存在的一些bug，对后续的改进与完善具有一定的指导意义。

基于IP QoS技术的网络机器人遥操作研究

针对基于 Internet机器人遥操作中存在的问题 ,结合 Internet网络技术的最新发展 ,借助 IP Qo S技术的特点和优势 ,本文研究并设计了基于集成业务体系结构的网络机器人遥操作系统 .通过分析 IP Qo S技术和机器人遥操作技术相互结合的可行性与合理性 ,表明该系统能够克服目前在 Internet遥操作过程中存在的问题并可在未来支持 IP Qo S技术的 Internet中发挥作用 .本文提出了该系统的设计原型及实现方法 .

On the Scalability-Performance Tradeoffs in MPLS and IP Routing

MPLS (Multi-Protocol Label Switching) has recently emerged to facilitate the engineering of network traffic. This can be achieved by directing packet flows over paths that satisfy multiple requirements. MPLS has been regarded as an enhancement to traditional IP routing, which has the following problems: (1) all packets with the same IP destination address have to follow the same path through the network; and (2) paths have often been computed based on static and single link metrics. These problems may cause traffic concentration, and thus degradation in quality of service. In this paper, we investigate by simulations a range of routing solutions and examine the tradeoff between scalability and performance. At one extreme, IP packet routing using dynamic link metrics provides a stateless solution but may lead to routing oscillations. At the other extreme, we consider a recently proposed Profile-based Routing (PBR), which uses knowledge of potential ingress-egress pairs as well as the traffic profile among them. Minimum Interference Routing (MIRA) is another recently proposed MPLS-based scheme, which only exploits knowledge of potential ingress-egress pairs but not their traffic profile. MIRA and the more conventional widest-shortest path (WSP) routing represent alternative MPLS-based approaches on the spectrum of routing solutions. We compare these solutions in terms of utility, bandwidth acceptance ratio as well as their scalability (routing state and computational overhead) and load balancing capability. While the simplest of the per-flow algorithms we consider, the performance of WSP is close to dynamic per-packet routing, without the potential instabilities of dynamic routing.

Sampling Biases in IP Topology Measurements

Considerable attention has been focused on the properties of graphs derived from Internet measurements. Router-level topologies collected via traceroute studies have led some authors to conclude that the router graph of the Internet is a scale-free graph, or more generally a power-law random graph. In such a graph, the degree distribution of nodes follows a distribution with a power-law tail. In this paper we argue that the evidence to date for this conclusion is at best insufficient. We show that graphs appearing to have power-law degree distributions can arise surprisingly easily, when sampling graphs whose true degree distribution is not at all like a power-law. For example, given a classical Erdös-Rényi sparse, random graph, the subgraph formed by a collection of shortest paths from a small set of random sources to a larger set of random destinations can easily appear to show a degree distribution remarkably like a power-law. We explore the reasons for how this effect arises, and show that in such a setting, edges are sampled in a highly biased manner. This insight allows us to distinguish measurements taken from the Erdös-Rényi graphs from those taken from power-law random graphs. When we apply this distinction to a number of well-known datasets, we find that the evidence for sampling bias in these datasets is strong.

Efficient building management with IP-based wireless sensor network

Existing Building/Energy Management Systems (BMS/EMS) fail to convey holistic performance to the building manager. A 20% reduction in energy consumption can be achieved by efficiently operated buildings compared with current practice. However, in the majority of buildings, occupant comfort and energy consumption analysis is primarily restricted by available sensor and meter data. Installation of a continuous monitoring process can significantly improve the building systems’ performance. We present WSN-BMDS, an IP-based wireless sensor network building monitoring and diagnostic system. The main focus of WSN-BMDS is to obtain much higher degree of information about the building operation then current BMSs are able to provide. Our system integrates a heterogeneous set of wireless sensor nodes with IEEE 802.11 backbone routers and the Global Sensor Network (GSN) web server. Sensing data is stored in a database at the back office via UDP protocol and can be access over the Internet using GSN. Through this demonstration, we show that WSN-BMDS provides accurate measurements of air-temperature, air-humidity, light, and energy consumption for particular rooms in our target building. Our interactive graphical user interface provides a user-friendly environment showing live network topology, monitor network statistics, and run-time management actions on the network. We also demonstrate actuation by changing the artificial light level in one of the rooms.