Cyber-Physical System (CPS) devices are increasing exponentially. Lacking confidentiality creates a vulnerable network. Thus, demanding the overall system with the latest and robust solutions for the defence mechanism...Cyber-Physical System (CPS) devices are increasing exponentially. Lacking confidentiality creates a vulnerable network. Thus, demanding the overall system with the latest and robust solutions for the defence mechanisms with low computation cost, increased integrity, and surveillance. The proposal of a mechanism that utilizes the features of authenticity measures using the Destination Sequence Distance Vector (DSDV) routing protocol which applies to the multi-WSN (Wireless Sensor Network) of IoT devices in CPS which is developed for the Device-to-Device (D2D) authentication developed from the local-chain and public chain respectively combined with the Software Defined Networking (SDN) control and monitoring system using switches and controllers that will route the packets through the network, identify any false nodes, take preventive measures against them and preventing them for any future problems. Next, the system is powered by Blockchain cryptographic features by utilizing the TrustChain features to create a private, secure, and temper-free ledger of the transactions performed inside the network. Results are achieved in the legitimate devices connecting to the network, transferring their packets to their destination under supervision, reporting whenever a false node is causing hurdles, and recording the transactions for temper-proof records. Evaluation results based on 1000+ transactions illustrate that the proposed mechanism not only outshines most aspects of Cyber-Physical systems but also consumes less computation power with a low latency of 0.1 seconds only.展开更多
空天地一体化网络作为6G技术的关键组成,在整合天基、空基和地基网络时,面临节点异构性、业务多样性等挑战,进而引发资源分配、竞争及故障风险等问题。基于此,聚焦基于软件定义网络(software defined network,SDN)与网络功能虚拟化(netw...空天地一体化网络作为6G技术的关键组成,在整合天基、空基和地基网络时,面临节点异构性、业务多样性等挑战,进而引发资源分配、竞争及故障风险等问题。基于此,聚焦基于软件定义网络(software defined network,SDN)与网络功能虚拟化(network functions virtualization,NFV)的空天地一体化网络任务部署与恢复,首先阐述了空天地一体化网络系统架构,介绍了各层网络构成、SDN和NFV原理及其相关应用,然后,针对上述挑战,以服务功能链技术为抓手,提出了面向任务的服务功能链优化部署、利用智能算法实现动态调度、通过匹配博弈算法完成失效恢复等策略,最后,构建了一个用例,设定节点部署、服务功能链建模等,验证了所提策略在提升服务功能链完成效率以及应对资源故障方面的有效性,旨在为空天地一体化网络资源管理提供理论基础。展开更多
针对传统的IP欺骗攻击缓解方法存在运算开销大、缺乏灵活性等问题,提出了一种基于动态限制策略的软件定义网络(software defined network,SDN)中IP欺骗攻击缓解方法。首先,利用Packet-In消息中三元组信息回溯攻击路径,定位IP欺骗攻击源...针对传统的IP欺骗攻击缓解方法存在运算开销大、缺乏灵活性等问题,提出了一种基于动态限制策略的软件定义网络(software defined network,SDN)中IP欺骗攻击缓解方法。首先,利用Packet-In消息中三元组信息回溯攻击路径,定位IP欺骗攻击源头主机;然后,由控制器制定动态限制策略对连接攻击源头主机的交换机端口的新流转发功能进行限制,待限制期满再恢复其转发新流的功能,限制期的大小随着被检测为攻击源的次数而增长。研究结果表明:这种动态的限制策略可阻隔攻击流进入SDN网络,从而有效避免SDN交换机、控制器以及链路过载;由于在限制期间无需再对这些限制的交换机端口进行实时监测,该方法在应对长时攻击时较传统方法具有更高的缓解效率和更少的资源消耗。展开更多
The world is moving at a high speed in the implementation and innovations of new systems and gadgets. 3G and 4G networks support currently wireless network communications. However, the networks are deemed to be slow a...The world is moving at a high speed in the implementation and innovations of new systems and gadgets. 3G and 4G networks support currently wireless network communications. However, the networks are deemed to be slow and fail to receive signals or data transmission to various regions as a result of solving the problem. This paper will analyze the use of Software Defined Network (SDN) in a 5G (fifth generation) network that can be faster and reliable. Further, in Mobile IP, there exist triangulation problems between the sending and receiving nodes along with latency issues during handoff for the mobile nodes causing huge burden in the network. With Cloud Computing and ecosystem for Virtualization developed for the Core and Radio Networks SDN OpenFlow seems to be a seamless solution for determining signal flow between mobiles. There have been a lot of researches going on for deploying SDN OpenFlow with the 5G Cellular Network. The current paper performs benchmarks as a feasibility need for implementing SDN OpenFlow for 5G Cellular Network. The Handoff mechanism impacts the scalability required for a cellular network and simulation results can be further used to be deployed the 5G Network.展开更多
随着信息通信技术的飞速发展,下一代通信网络(如5G/6G)对网络性能提出了更高的要求,特别是在低延迟、高带宽、海量设备接入和智能化管控等方面。文章分析了软件定义网络(Software Defined Network,SDN)在大带宽、低时延和大规模物联网...随着信息通信技术的飞速发展,下一代通信网络(如5G/6G)对网络性能提出了更高的要求,特别是在低延迟、高带宽、海量设备接入和智能化管控等方面。文章分析了软件定义网络(Software Defined Network,SDN)在大带宽、低时延和大规模物联网环境中的应用,提出了协议优化策略并采用理论建模与仿真实验相结合的方法,评估不同优化方案的效果。结果表明:SDN优化能有效降低网络延迟,提高带宽利用率,增强物联网设备管理能力。展开更多
传统网络依赖人工配置,在应对规模激增、需求复杂化及实时性要求提升的现代网络环境时,效率低下且成本高昂.大语言模型(Large Language Model,LLM)凭借其出色的自然语言理解能力,在网络自动化配置中展现出巨大的潜力.面向软件定义网络(S...传统网络依赖人工配置,在应对规模激增、需求复杂化及实时性要求提升的现代网络环境时,效率低下且成本高昂.大语言模型(Large Language Model,LLM)凭借其出色的自然语言理解能力,在网络自动化配置中展现出巨大的潜力.面向软件定义网络(Software Defined Networking,SDN),本文提出了一种基于LLM的轻量级自动化配置方法.在数据平面,提出了一种基于检索增强生成(Retrieval-Augmented Generation,RAG)技术的代码自动生成方法RetroP4,支持基于用户意图生成P4代码;在控制平面,提出了一种基于任务分解的流表自动生成方法CtrlSynth,支持基于用户意图和数据平面P4代码生成流表配置.实验结果表明:相较于通用大模型,RetroP4生成的P4代码的语法正确性提高了25%,语义正确性提高了87.5%;CtrlSynth能够准确生成与P4代码匹配的流表信息,在流量意图不超过300条时,准确率可达100%.展开更多
针对SDN流量工程中流量预测基于静态时空依赖的问题,提出了一种基于注意力机制的图卷积神经网络(GCN)与门控递归单元(GRU)集成的动态网络流量预测方法——AGCNGRU(attention mechanism for GCNGRU model)。借助GCN捕获网络中节点之间的...针对SDN流量工程中流量预测基于静态时空依赖的问题,提出了一种基于注意力机制的图卷积神经网络(GCN)与门控递归单元(GRU)集成的动态网络流量预测方法——AGCNGRU(attention mechanism for GCNGRU model)。借助GCN捕获网络中节点之间的流量空间依赖性和GRU捕获流量经过网络中各节点的时间依赖性,通过时间注意力机制设计每个隐藏状态的权重,以调整时间点流量信息的重要性,同时通过数据驱动空间注意力机制动态自适应调整Laplace矩阵,实现动态提取网络信息数据时空相关性,最终完成动态流量精准预测。在GEANT的数据集上的实验表明,所提出的方法在均方误差方面比GCNGRU减少24.8%,比GRU减少66.4%,并通过与传统路由算法OSPF、DDPG算法比较,在90%的流量负载强度下,网络性能比OSPF提升了24%,比DDPG提升了8.1%,进一步说明了AGCNGRU算法网络流量准确预测带来的时效性和有效性。展开更多
基金funded by Ajman University,AU-Funded Research Grant 2023-IRG-ENIT-22.
文摘Cyber-Physical System (CPS) devices are increasing exponentially. Lacking confidentiality creates a vulnerable network. Thus, demanding the overall system with the latest and robust solutions for the defence mechanisms with low computation cost, increased integrity, and surveillance. The proposal of a mechanism that utilizes the features of authenticity measures using the Destination Sequence Distance Vector (DSDV) routing protocol which applies to the multi-WSN (Wireless Sensor Network) of IoT devices in CPS which is developed for the Device-to-Device (D2D) authentication developed from the local-chain and public chain respectively combined with the Software Defined Networking (SDN) control and monitoring system using switches and controllers that will route the packets through the network, identify any false nodes, take preventive measures against them and preventing them for any future problems. Next, the system is powered by Blockchain cryptographic features by utilizing the TrustChain features to create a private, secure, and temper-free ledger of the transactions performed inside the network. Results are achieved in the legitimate devices connecting to the network, transferring their packets to their destination under supervision, reporting whenever a false node is causing hurdles, and recording the transactions for temper-proof records. Evaluation results based on 1000+ transactions illustrate that the proposed mechanism not only outshines most aspects of Cyber-Physical systems but also consumes less computation power with a low latency of 0.1 seconds only.
文摘空天地一体化网络作为6G技术的关键组成,在整合天基、空基和地基网络时,面临节点异构性、业务多样性等挑战,进而引发资源分配、竞争及故障风险等问题。基于此,聚焦基于软件定义网络(software defined network,SDN)与网络功能虚拟化(network functions virtualization,NFV)的空天地一体化网络任务部署与恢复,首先阐述了空天地一体化网络系统架构,介绍了各层网络构成、SDN和NFV原理及其相关应用,然后,针对上述挑战,以服务功能链技术为抓手,提出了面向任务的服务功能链优化部署、利用智能算法实现动态调度、通过匹配博弈算法完成失效恢复等策略,最后,构建了一个用例,设定节点部署、服务功能链建模等,验证了所提策略在提升服务功能链完成效率以及应对资源故障方面的有效性,旨在为空天地一体化网络资源管理提供理论基础。
文摘针对传统的IP欺骗攻击缓解方法存在运算开销大、缺乏灵活性等问题,提出了一种基于动态限制策略的软件定义网络(software defined network,SDN)中IP欺骗攻击缓解方法。首先,利用Packet-In消息中三元组信息回溯攻击路径,定位IP欺骗攻击源头主机;然后,由控制器制定动态限制策略对连接攻击源头主机的交换机端口的新流转发功能进行限制,待限制期满再恢复其转发新流的功能,限制期的大小随着被检测为攻击源的次数而增长。研究结果表明:这种动态的限制策略可阻隔攻击流进入SDN网络,从而有效避免SDN交换机、控制器以及链路过载;由于在限制期间无需再对这些限制的交换机端口进行实时监测,该方法在应对长时攻击时较传统方法具有更高的缓解效率和更少的资源消耗。
文摘The world is moving at a high speed in the implementation and innovations of new systems and gadgets. 3G and 4G networks support currently wireless network communications. However, the networks are deemed to be slow and fail to receive signals or data transmission to various regions as a result of solving the problem. This paper will analyze the use of Software Defined Network (SDN) in a 5G (fifth generation) network that can be faster and reliable. Further, in Mobile IP, there exist triangulation problems between the sending and receiving nodes along with latency issues during handoff for the mobile nodes causing huge burden in the network. With Cloud Computing and ecosystem for Virtualization developed for the Core and Radio Networks SDN OpenFlow seems to be a seamless solution for determining signal flow between mobiles. There have been a lot of researches going on for deploying SDN OpenFlow with the 5G Cellular Network. The current paper performs benchmarks as a feasibility need for implementing SDN OpenFlow for 5G Cellular Network. The Handoff mechanism impacts the scalability required for a cellular network and simulation results can be further used to be deployed the 5G Network.
文摘随着信息通信技术的飞速发展,下一代通信网络(如5G/6G)对网络性能提出了更高的要求,特别是在低延迟、高带宽、海量设备接入和智能化管控等方面。文章分析了软件定义网络(Software Defined Network,SDN)在大带宽、低时延和大规模物联网环境中的应用,提出了协议优化策略并采用理论建模与仿真实验相结合的方法,评估不同优化方案的效果。结果表明:SDN优化能有效降低网络延迟,提高带宽利用率,增强物联网设备管理能力。
文摘传统网络依赖人工配置,在应对规模激增、需求复杂化及实时性要求提升的现代网络环境时,效率低下且成本高昂.大语言模型(Large Language Model,LLM)凭借其出色的自然语言理解能力,在网络自动化配置中展现出巨大的潜力.面向软件定义网络(Software Defined Networking,SDN),本文提出了一种基于LLM的轻量级自动化配置方法.在数据平面,提出了一种基于检索增强生成(Retrieval-Augmented Generation,RAG)技术的代码自动生成方法RetroP4,支持基于用户意图生成P4代码;在控制平面,提出了一种基于任务分解的流表自动生成方法CtrlSynth,支持基于用户意图和数据平面P4代码生成流表配置.实验结果表明:相较于通用大模型,RetroP4生成的P4代码的语法正确性提高了25%,语义正确性提高了87.5%;CtrlSynth能够准确生成与P4代码匹配的流表信息,在流量意图不超过300条时,准确率可达100%.
文摘针对SDN流量工程中流量预测基于静态时空依赖的问题,提出了一种基于注意力机制的图卷积神经网络(GCN)与门控递归单元(GRU)集成的动态网络流量预测方法——AGCNGRU(attention mechanism for GCNGRU model)。借助GCN捕获网络中节点之间的流量空间依赖性和GRU捕获流量经过网络中各节点的时间依赖性,通过时间注意力机制设计每个隐藏状态的权重,以调整时间点流量信息的重要性,同时通过数据驱动空间注意力机制动态自适应调整Laplace矩阵,实现动态提取网络信息数据时空相关性,最终完成动态流量精准预测。在GEANT的数据集上的实验表明,所提出的方法在均方误差方面比GCNGRU减少24.8%,比GRU减少66.4%,并通过与传统路由算法OSPF、DDPG算法比较,在90%的流量负载强度下,网络性能比OSPF提升了24%,比DDPG提升了8.1%,进一步说明了AGCNGRU算法网络流量准确预测带来的时效性和有效性。
