Border Gateway Protocol(BGP),as the standard inter-domain routing protocol,is a distance-vector dynamic routing protocol used for exchanging routing information between distributed Autonomous Systems(AS).BGP nodes,com...Border Gateway Protocol(BGP),as the standard inter-domain routing protocol,is a distance-vector dynamic routing protocol used for exchanging routing information between distributed Autonomous Systems(AS).BGP nodes,communicating in a distributed dynamic environment,face several security challenges,with trust being one of the most important issues in inter-domain routing.Existing research,which performs trust evaluation when exchanging routing information to suppress malicious routing behavior,cannot meet the scalability requirements of BGP nodes.In this paper,we propose a blockchain-based trust model for inter-domain routing.Our model achieves scalability by allowing the master node of an AS alliance to transmit the trust evaluation data of its member nodes to the blockchain.The BGP nodes can expedite the trust evaluation process by accessing a global view of other BGP nodes through the master node of their respective alliance.We incorporate security service evaluation before direct evaluation and indirect recommendations to assess the security services that BGP nodes provide for themselves and prioritize to guarantee their security of routing service.We forward the trust evaluation for neighbor discovery and prioritize the nodes with high trust as neighbor nodes to reduce the malicious exchange routing behavior.We use simulation software to simulate a real BGP environments and employ a comparative experimental research approach to demonstrate the performance evaluation of our trust model.Compared with the classical trust model,our trust model not only saves more storage overhead,but also provides higher security,especially reducing the impact of collusion attacks.展开更多
Recently, the IP connectivity during the Mobile Node (MN) movement between Base Stations (BSs) belonging to different Internet Service Providers (ISPs) is still a key issue to be tackled. In this paper, therefore, we ...Recently, the IP connectivity during the Mobile Node (MN) movement between Base Stations (BSs) belonging to different Internet Service Providers (ISPs) is still a key issue to be tackled. In this paper, therefore, we develop a new scheme to improve the performance of inter-domain fast handover over mobile WiMAX networks. The framework basically relies on the Fast Handover for Mobile IPv6 protocol (FMIPv6) when the Media Independent Information Services (MIIS) as defined in IEEE802.21 standard is applied to enable the Mobile Node in storing the information of the neighboring networks. A Fully Qualified Domain Name (FQDN) is also used to identify the IP address of the previous network operator and the MN during its movements. Since both MIIS and FQDN can support the node mobility between multiple domains, our proposed scheme can also be called P-FMIPv6. The numerical results show that the latency of IP connectivity of this proposed handover can be significantly reduced in addition to less service disruption time during handovers as compared to the existing FMIPv6 when IEEE802.16e network is considered.展开更多
The global Internet is a complex network of interconnected autonomous systems(ASes).Understanding Internet inter-domain path information is crucial for understanding,managing,and improving the Internet.The path inform...The global Internet is a complex network of interconnected autonomous systems(ASes).Understanding Internet inter-domain path information is crucial for understanding,managing,and improving the Internet.The path information can also help protect user privacy and security.However,due to the complicated and heterogeneous structure of the Internet,path information is not publicly available.Obtaining path information is challenging due to the limited measurement probes and collectors.Therefore,inferring Internet inter-domain paths from the limited data is a supplementary approach to measure Internet inter-domain paths.The purpose of this survey is to provide an overview of techniques that have been conducted to infer Internet inter-domain paths from 2005 to 2023 and present the main lessons from these studies.To this end,we summarize the inter-domain path inference techniques based on the granularity of the paths,for each method,we describe the data sources,the key ideas,the advantages,and the limitations.To help readers understand the path inference techniques,we also summarize the background techniques for path inference,such as techniques to measure the Internet,infer AS relationships,resolve aliases,and map IP addresses to ASes.A case study of the existing techniques is also presented to show the real-world applications of inter-domain path inference.Additionally,we discuss the challenges and opportunities in inferring Internet inter-domain paths,the drawbacks of the state-of-the-art techniques,and the future directions.展开更多
The inter-domain and intra-domain routings are treated jointly with dynamically distributed algorithms in automatically switched optical networks （ASON） based on source routing. The proposed algorithms are discussed...The inter-domain and intra-domain routings are treated jointly with dynamically distributed algorithms in automatically switched optical networks （ASON） based on source routing. The proposed algorithms are discussed through numerical calculations. The routing loops can be avoided efficiently and the inter-domain signaling complexity is reduced significantly. The performance of the blocking probability is also improved.展开更多
Dralll is a type liP restriction endonucleases （REases） that recognizes and creates a double strand break within the gapped palindromic sequence CACTNNN^GTG of double-stranded DNA indicates nicking on the bottom st...Dralll is a type liP restriction endonucleases （REases） that recognizes and creates a double strand break within the gapped palindromic sequence CACTNNN^GTG of double-stranded DNA indicates nicking on the bottom strand; indicates nicking on the top strand）. However, wild type Dralll shows significant star activity. In this study, it was found that the prominent star site is CATSGTT;GTG, consisting of a star 5＇ half （CAT） and a canonical 3＇ half （GTG）. Dralll nicks the 3＇ canonical half site at a faster rate than the 5＇ star half site, in contrast to the similar rate with the canonical full site. The crystal structure of the Dralll protein was solved. It indicated, as supported by mutagenesis, that Dralll possesses a ~13a- metal HNH active site. The structure revealed extensive intra-molecular interactions between the N-terminal domain and the C-terminal domain containing the HNH active site. Disruptions of these interactions through site- directed mutagenesis drastically increased cleavage fidelity. The understanding of fidelity mechanisms will enable generation of high fidelity REases.展开更多
Cooperation among service providers, network providers, and access providers in the Internet allows the creation of new services to offer to customers that are in other domains, thus increasing revenue. However, the I...Cooperation among service providers, network providers, and access providers in the Internet allows the creation of new services to offer to customers that are in other domains, thus increasing revenue. However, the Internet heterogeneous environment, where each provider has its own policies, infrastructure and business goals, hinders the deployment of more advanced communication services. This paper presents a Quality of Service （QoS） for Inter-Domain Services （QIDS） model that allows inter-domain QoS-aware services to be defined, configured, and adapted in a dynamic and on-demand fashion, among service providers. This is accomplished by： 1） the use of a common communication channel （business layer） where service providers publish and search for services, and interact with each other to contract and manage these services; 2） the templates to specify the business and technical characteristics of the services; 3） the automatic composition of services using service dements （smaller services） a^cording to performance and service-specific QoS parameters; and 4） the creation and enforcement of configuration rules for the underlying infrastructure. A prototype was implemented to validate QIDS and performance tests were conducted on an inter-domain Border Gateway Protocol （BGP）/Multiprotocol Label Switching （MPLS） Virtual Private Network （VPN） scenario.展开更多
基金funded by the National Natural Science Foundation of China,grant numbers(62272007,62001007)the Natural Science Foundation of Beijing,grant numbers(4234083,4212018)The authors also extend their appreciation to King Khalid University for funding this work through the Large Group Project under grant number RGP.2/373/45.
文摘Border Gateway Protocol(BGP),as the standard inter-domain routing protocol,is a distance-vector dynamic routing protocol used for exchanging routing information between distributed Autonomous Systems(AS).BGP nodes,communicating in a distributed dynamic environment,face several security challenges,with trust being one of the most important issues in inter-domain routing.Existing research,which performs trust evaluation when exchanging routing information to suppress malicious routing behavior,cannot meet the scalability requirements of BGP nodes.In this paper,we propose a blockchain-based trust model for inter-domain routing.Our model achieves scalability by allowing the master node of an AS alliance to transmit the trust evaluation data of its member nodes to the blockchain.The BGP nodes can expedite the trust evaluation process by accessing a global view of other BGP nodes through the master node of their respective alliance.We incorporate security service evaluation before direct evaluation and indirect recommendations to assess the security services that BGP nodes provide for themselves and prioritize to guarantee their security of routing service.We forward the trust evaluation for neighbor discovery and prioritize the nodes with high trust as neighbor nodes to reduce the malicious exchange routing behavior.We use simulation software to simulate a real BGP environments and employ a comparative experimental research approach to demonstrate the performance evaluation of our trust model.Compared with the classical trust model,our trust model not only saves more storage overhead,but also provides higher security,especially reducing the impact of collusion attacks.
文摘Recently, the IP connectivity during the Mobile Node (MN) movement between Base Stations (BSs) belonging to different Internet Service Providers (ISPs) is still a key issue to be tackled. In this paper, therefore, we develop a new scheme to improve the performance of inter-domain fast handover over mobile WiMAX networks. The framework basically relies on the Fast Handover for Mobile IPv6 protocol (FMIPv6) when the Media Independent Information Services (MIIS) as defined in IEEE802.21 standard is applied to enable the Mobile Node in storing the information of the neighboring networks. A Fully Qualified Domain Name (FQDN) is also used to identify the IP address of the previous network operator and the MN during its movements. Since both MIIS and FQDN can support the node mobility between multiple domains, our proposed scheme can also be called P-FMIPv6. The numerical results show that the latency of IP connectivity of this proposed handover can be significantly reduced in addition to less service disruption time during handovers as compared to the existing FMIPv6 when IEEE802.16e network is considered.
基金the China Postdoctoral Science Foundation(2023TQ0089)the National Natural Science Foundation of China(Nos.62072465,62172155)the Science and Technology Innovation Program of Hunan Province(Nos.2022RC3061,2023RC3027).
文摘The global Internet is a complex network of interconnected autonomous systems(ASes).Understanding Internet inter-domain path information is crucial for understanding,managing,and improving the Internet.The path information can also help protect user privacy and security.However,due to the complicated and heterogeneous structure of the Internet,path information is not publicly available.Obtaining path information is challenging due to the limited measurement probes and collectors.Therefore,inferring Internet inter-domain paths from the limited data is a supplementary approach to measure Internet inter-domain paths.The purpose of this survey is to provide an overview of techniques that have been conducted to infer Internet inter-domain paths from 2005 to 2023 and present the main lessons from these studies.To this end,we summarize the inter-domain path inference techniques based on the granularity of the paths,for each method,we describe the data sources,the key ideas,the advantages,and the limitations.To help readers understand the path inference techniques,we also summarize the background techniques for path inference,such as techniques to measure the Internet,infer AS relationships,resolve aliases,and map IP addresses to ASes.A case study of the existing techniques is also presented to show the real-world applications of inter-domain path inference.Additionally,we discuss the challenges and opportunities in inferring Internet inter-domain paths,the drawbacks of the state-of-the-art techniques,and the future directions.
基金Supported by the National Natural Science Foundation of China （No. 60372096）, the Program for Century Excellent Talents in University （No. NCET- 05-0112） and the High Technology Research and Development Program of China （No. 2006AA01Z246）.
文摘The inter-domain and intra-domain routings are treated jointly with dynamically distributed algorithms in automatically switched optical networks （ASON） based on source routing. The proposed algorithms are discussed through numerical calculations. The routing loops can be avoided efficiently and the inter-domain signaling complexity is reduced significantly. The performance of the blocking probability is also improved.
文摘Dralll is a type liP restriction endonucleases （REases） that recognizes and creates a double strand break within the gapped palindromic sequence CACTNNN^GTG of double-stranded DNA indicates nicking on the bottom strand; indicates nicking on the top strand）. However, wild type Dralll shows significant star activity. In this study, it was found that the prominent star site is CATSGTT;GTG, consisting of a star 5＇ half （CAT） and a canonical 3＇ half （GTG）. Dralll nicks the 3＇ canonical half site at a faster rate than the 5＇ star half site, in contrast to the similar rate with the canonical full site. The crystal structure of the Dralll protein was solved. It indicated, as supported by mutagenesis, that Dralll possesses a ~13a- metal HNH active site. The structure revealed extensive intra-molecular interactions between the N-terminal domain and the C-terminal domain containing the HNH active site. Disruptions of these interactions through site- directed mutagenesis drastically increased cleavage fidelity. The understanding of fidelity mechanisms will enable generation of high fidelity REases.
文摘Cooperation among service providers, network providers, and access providers in the Internet allows the creation of new services to offer to customers that are in other domains, thus increasing revenue. However, the Internet heterogeneous environment, where each provider has its own policies, infrastructure and business goals, hinders the deployment of more advanced communication services. This paper presents a Quality of Service （QoS） for Inter-Domain Services （QIDS） model that allows inter-domain QoS-aware services to be defined, configured, and adapted in a dynamic and on-demand fashion, among service providers. This is accomplished by： 1） the use of a common communication channel （business layer） where service providers publish and search for services, and interact with each other to contract and manage these services; 2） the templates to specify the business and technical characteristics of the services; 3） the automatic composition of services using service dements （smaller services） a^cording to performance and service-specific QoS parameters; and 4） the creation and enforcement of configuration rules for the underlying infrastructure. A prototype was implemented to validate QIDS and performance tests were conducted on an inter-domain Border Gateway Protocol （BGP）/Multiprotocol Label Switching （MPLS） Virtual Private Network （VPN） scenario.
