A new method for multi-protocol label switching is presented in this study, whose core idea is to construct model for simulating process of accommodating network online loads and then adopt genetic algorithm to optimi...A new method for multi-protocol label switching is presented in this study, whose core idea is to construct model for simulating process of accommodating network online loads and then adopt genetic algorithm to optimize the model. Due to the heuristic property of evolutional method, the new method is efficient and effective, which is verified by the experiments.展开更多
A new coarse-grained differentiated least interference routing algorithm(CDLI) with DiffServ-Aware was presented.This algorithm is composed of off-line and on-line stages,taking into account both real-time traffic and...A new coarse-grained differentiated least interference routing algorithm(CDLI) with DiffServ-Aware was presented.This algorithm is composed of off-line and on-line stages,taking into account both real-time traffic and best-effort traffic.Off-line stage is to determine the shortest path set disjointed path(DP) database for real-time traffic,and to identify link critical value by traffic profile information of real-time traffic and DP database.On-line stage is at first to select route in the DP database for real-time traffic,if there is no path to meet the needs,the dynamic routing will be operated.On-line routing algorithm chooses the relatively short path for real-time traffic to meet their bandwidth requirements,and for best-effort traffic it chooses a lighter load path.The simulation results show that compared with the dynamic online routing algorithm(DORA) and constrained shortest path first(CSPF) algorithm,the new algorithm can significantly improve network throughput and reduce the average path length of real-time traffic.This guarantees quality of service(QoS) of real-time traffic while improving the utilization of network resources.展开更多
Silica-based planar lightwave circuit(PLC)devices can reduce transmission loss and cost in a quantum key distribution(QKD)system,and have potential applications in integration and production.A PLC-based quantum decodi...Silica-based planar lightwave circuit(PLC)devices can reduce transmission loss and cost in a quantum key distribution(QKD)system,and have potential applications in integration and production.A PLC-based quantum decoding integrated chip for multi-protocols is designed and fabricated,which is composed of variable optical splitters(VOSs),asymmetric Mach-Zehnder interferometers(AMZIs),and variable directional couplers(VDCs).Balanced pulse-pairs of four outputs are obtained simultaneously with measured delay times of 405 ps and 402 ps,respectively.The chip has advantages in achieving high interference visibility and low quantum bit error rate(QBER).展开更多
【目的】工业控制系统(industrial control system,ICS)中设备间通信过程高度依赖工控协议来实现,协议安全性对保障ICS稳定运行起到关键作用。漏洞挖掘与入侵检测等作为ICS安全防御体系的核心技术组件,其有效性依赖于对工控协议结构及...【目的】工业控制系统(industrial control system,ICS)中设备间通信过程高度依赖工控协议来实现,协议安全性对保障ICS稳定运行起到关键作用。漏洞挖掘与入侵检测等作为ICS安全防御体系的核心技术组件,其有效性依赖于对工控协议结构及语义功能的精确解析。协议逆向分析作为解析协议结构与语义功能的关键技术,其核心环节语义推断精度直接决定协议理解的准确性。然而,受限于工控协议文档缺失、格式异构性强等现实条件,现有语义推断方法普遍依赖专家经验,存在自动化水平不足、跨协议泛化性能有限等固有瓶颈,难以适应实际工业环境中多源异构协议的高精度解析需求。【方法】为解决上述问题,本文提出mBERT协同多源领域自适应与结构化掩码策略的语义推断方法。通过mBERT模型实现跨协议通用语义表示;利用结合注意力权重与位置编码设计的结构化掩码策略,增强模型对协议结构和语义内在联系的表示能力,提高语义推断方法的自动化程度和效率;利用结合对抗训练的多源领域自适应逐步微调策略,提升模型对多个源协议的语义通用表示能力,增强其在多种工控协议上的适用性,实现关键字语义的有效推断。【结果】在辽宁省石油化工行业信息安全重点实验室的典型能源企业攻防演练靶场中开展实验验证,采集了S7comm、Modbus/TCP和EtherNet/IP三种工控协议数据,并利用协议复杂度评分机制组建训练数据集。结果表明,多源领域自适应逐步微调策略能够显著提升模型性能,将其与结构化掩码策略结合,进一步提高了语义推断精度,且本文方法在精确度、召回率与F_(1)分数指标上均显著优于现有基线方法。【结论】本文提出了mBERT协同多源领域自适应与结构化掩码策略的语义推断方法,在语义推断中采用高维球面映射与多任务损失函数,增强了不同语义类别的区分度与模型对协议语义的深层辨识能力。本文方法不仅显著降低了对人工先验知识的依赖,也提升了语义推断效率与跨协议适用性,为工控协议逆向分析及工业系统安全防护提供了具备理论支撑的新路径。展开更多
基金This work was supported by the National Natural Science Foundation of China (No10371097)Open Project of Com-putational Key Laboratory in Yunnan Provice
文摘A new method for multi-protocol label switching is presented in this study, whose core idea is to construct model for simulating process of accommodating network online loads and then adopt genetic algorithm to optimize the model. Due to the heuristic property of evolutional method, the new method is efficient and effective, which is verified by the experiments.
基金Project(2003AA781011) supported by the National High-Tech Research and Development of Program of China Project(20072022) supported by Science and Technology Foundation of Liaoning Province,China
文摘A new coarse-grained differentiated least interference routing algorithm(CDLI) with DiffServ-Aware was presented.This algorithm is composed of off-line and on-line stages,taking into account both real-time traffic and best-effort traffic.Off-line stage is to determine the shortest path set disjointed path(DP) database for real-time traffic,and to identify link critical value by traffic profile information of real-time traffic and DP database.On-line stage is at first to select route in the DP database for real-time traffic,if there is no path to meet the needs,the dynamic routing will be operated.On-line routing algorithm chooses the relatively short path for real-time traffic to meet their bandwidth requirements,and for best-effort traffic it chooses a lighter load path.The simulation results show that compared with the dynamic online routing algorithm(DORA) and constrained shortest path first(CSPF) algorithm,the new algorithm can significantly improve network throughput and reduce the average path length of real-time traffic.This guarantees quality of service(QoS) of real-time traffic while improving the utilization of network resources.
基金Project supported by the National Key Research and Development Program of China(Grant No.2018YFA0306403)the National Nature Science Foundation of China(Grant No.61805232).
文摘Silica-based planar lightwave circuit(PLC)devices can reduce transmission loss and cost in a quantum key distribution(QKD)system,and have potential applications in integration and production.A PLC-based quantum decoding integrated chip for multi-protocols is designed and fabricated,which is composed of variable optical splitters(VOSs),asymmetric Mach-Zehnder interferometers(AMZIs),and variable directional couplers(VDCs).Balanced pulse-pairs of four outputs are obtained simultaneously with measured delay times of 405 ps and 402 ps,respectively.The chip has advantages in achieving high interference visibility and low quantum bit error rate(QBER).
文摘【目的】工业控制系统(industrial control system,ICS)中设备间通信过程高度依赖工控协议来实现,协议安全性对保障ICS稳定运行起到关键作用。漏洞挖掘与入侵检测等作为ICS安全防御体系的核心技术组件,其有效性依赖于对工控协议结构及语义功能的精确解析。协议逆向分析作为解析协议结构与语义功能的关键技术,其核心环节语义推断精度直接决定协议理解的准确性。然而,受限于工控协议文档缺失、格式异构性强等现实条件,现有语义推断方法普遍依赖专家经验,存在自动化水平不足、跨协议泛化性能有限等固有瓶颈,难以适应实际工业环境中多源异构协议的高精度解析需求。【方法】为解决上述问题,本文提出mBERT协同多源领域自适应与结构化掩码策略的语义推断方法。通过mBERT模型实现跨协议通用语义表示;利用结合注意力权重与位置编码设计的结构化掩码策略,增强模型对协议结构和语义内在联系的表示能力,提高语义推断方法的自动化程度和效率;利用结合对抗训练的多源领域自适应逐步微调策略,提升模型对多个源协议的语义通用表示能力,增强其在多种工控协议上的适用性,实现关键字语义的有效推断。【结果】在辽宁省石油化工行业信息安全重点实验室的典型能源企业攻防演练靶场中开展实验验证,采集了S7comm、Modbus/TCP和EtherNet/IP三种工控协议数据,并利用协议复杂度评分机制组建训练数据集。结果表明,多源领域自适应逐步微调策略能够显著提升模型性能,将其与结构化掩码策略结合,进一步提高了语义推断精度,且本文方法在精确度、召回率与F_(1)分数指标上均显著优于现有基线方法。【结论】本文提出了mBERT协同多源领域自适应与结构化掩码策略的语义推断方法,在语义推断中采用高维球面映射与多任务损失函数,增强了不同语义类别的区分度与模型对协议语义的深层辨识能力。本文方法不仅显著降低了对人工先验知识的依赖,也提升了语义推断效率与跨协议适用性,为工控协议逆向分析及工业系统安全防护提供了具备理论支撑的新路径。
