针对传统卫星网络中业务类型多样化导致的网络配置复杂和业务服务质量(quality of service,QoS)无法得到有效保障的问题,研究了基于软件定义网络(software-defined networking,SDN)的卫星网络架构,提出了一种能够满足多种QoS需求的自适...针对传统卫星网络中业务类型多样化导致的网络配置复杂和业务服务质量(quality of service,QoS)无法得到有效保障的问题,研究了基于软件定义网络(software-defined networking,SDN)的卫星网络架构,提出了一种能够满足多种QoS需求的自适应路由算法。首先,建立了软件定义卫星网络多约束条件路由选择优化模型;然后,使用拉格朗日松弛法对模型进行松弛处理;最后,使用梯度法进行迭代求解,搜索出满足带宽、时延、丢包率等多种QoS的最优路径。研究结果表明,该优化算法在QoS满意度方面相比近地轨道卫星路由算法提高了64%,在时延满意度和丢包率满意度方面相比软件定义路由算法提高了28%。展开更多
With the rapid advancement of the Internet of Things(IoT),the typical application of wireless body area networks(WBANs)based smart healthcare has drawn wide attention from all sectors of society.To alleviate the press...With the rapid advancement of the Internet of Things(IoT),the typical application of wireless body area networks(WBANs)based smart healthcare has drawn wide attention from all sectors of society.To alleviate the pressing challenges,such as resource limitations,low-latency service provision,mass data processing,rigid security demands,and the lack of a central entity,the advanced solutions of fog computing,software-defined networking(SDN)and blockchain are leveraged in this work.On the basis of these solutions,a task offloading strategy with a centralized low-latency,secure and reliable decision-making algorithm having powerful emergency handling capacity(LSRDM-EH)is designed to facilitate the resource-constrained edge devices for task offloading.Additionally,to well ensure the security of the entire network,a comprehensive blockchain-based two-layer and multidimensional security strategy is proposed.Furthermore,to tackle the inherent time-inefficiency problem of blockchain,we propose a blockchain sharding scheme to reduce system time latency.Extensive simulation has been conducted to validate the performance of the proposed measures,and numerical results verify the superiority of our methods with lower time-latency,higher reliability and security.展开更多
Software-Defined Networking(SDN)adapts logically-centralized control by decoupling control plane from data plane and provides the efficient use of network resources.However,due to the limitation of traditional routing...Software-Defined Networking(SDN)adapts logically-centralized control by decoupling control plane from data plane and provides the efficient use of network resources.However,due to the limitation of traditional routing strategies relying on manual configuration,SDN may suffer from link congestion and inefficient bandwidth allocation among flows,which could degrade network performance significantly.In this paper,we propose EARS,an intelligence-driven experiential network architecture for automatic routing.EARS adapts deep reinforcement learning(DRL)to simulate the human methods of learning experiential knowledge,employs the closed-loop network control mechanism incorporating with network monitoring technologies to realize the interaction with network environment.The proposed EARS can learn to make better control decision from its own experience by interacting with network environment and optimize the network intelligently by adjusting services and resources offered based on network requirements and environmental conditions.Under the network architecture,we design the network utility function with throughput and delay awareness,differentiate flows based on their size characteristics,and design a DDPGbased automatic routing algorithm as DRL decision brain to find the near-optimal paths for mice and elephant flows.To validate the network architecture,we implement it on a real network environment.Extensive simulation results show that EARS significantly improve the network throughput and reduces the average packet delay in comparison with baseline schemes(e.g.OSPF,ECMP).展开更多
准确且快速地检测分布式拒绝服务(distributed denial of service,DDoS)攻击是安全领域的一个重要研究课题,为了提高软件定义网络(software-defined networking,SDN)中DDoS攻击的检测率,采用XGBoost算法对网络中的流量进行建模.该方法...准确且快速地检测分布式拒绝服务(distributed denial of service,DDoS)攻击是安全领域的一个重要研究课题,为了提高软件定义网络(software-defined networking,SDN)中DDoS攻击的检测率,采用XGBoost算法对网络中的流量进行建模.该方法根据攻击发生时的流量信息提取特征并进行训练,能够有效地检测DDoS攻击.在实验中,采用mininet和floodlight模拟平台搭建SDN环境,使用HPing3生成不正常的网络流量.实验结果表明:在SDN中进行DDoS攻击检测时,该方法平均准确率为95.34%,与其他机器学习方法相比准确率更高,证明了该方法的有效性.展开更多
Nowadays, cyberspace has become a vital part of social infrastructure. With the rapid development of the scale of networks, applications and services have become enriched, and the bearing function of the underlying ne...Nowadays, cyberspace has become a vital part of social infrastructure. With the rapid development of the scale of networks, applications and services have become enriched, and the bearing function of the underlying network devices(such as switches and routers) has also been extended. To promote the dynamics architecture, high-level security, and high quality of service of the network, control network architecture forward separation is a development trend of the networking technology. Currently, software-defined networking(SDN) is one of the most popular and promising technologies. In SDN, high-level strategies are deployed by the proprietary equipment, which is used to guide the data forwarding of the network equipment. This can reduce many complicated functions of the network equipment and improve the flexibility and operability of the implementation and deployment of new network technologies and protocols. However, this novel networking technology faces novel challenges in term of architecture and security. The aim of this study is to offer a comprehensive review of the state-of-the-art research on novel advances of programmable SDN, and to highlight what has been investigated and what remains to be addressed, particularly, in terms of architecture and security.展开更多
文摘针对传统卫星网络中业务类型多样化导致的网络配置复杂和业务服务质量(quality of service,QoS)无法得到有效保障的问题,研究了基于软件定义网络(software-defined networking,SDN)的卫星网络架构,提出了一种能够满足多种QoS需求的自适应路由算法。首先,建立了软件定义卫星网络多约束条件路由选择优化模型;然后,使用拉格朗日松弛法对模型进行松弛处理;最后,使用梯度法进行迭代求解,搜索出满足带宽、时延、丢包率等多种QoS的最优路径。研究结果表明,该优化算法在QoS满意度方面相比近地轨道卫星路由算法提高了64%,在时延满意度和丢包率满意度方面相比软件定义路由算法提高了28%。
基金supported by the National Natural Science Foundation of China(No.61761007)the Scientific Research Project of Guangxi University Xingjian College of Science and Liberal Arts(No.Y2021ZK03)。
文摘With the rapid advancement of the Internet of Things(IoT),the typical application of wireless body area networks(WBANs)based smart healthcare has drawn wide attention from all sectors of society.To alleviate the pressing challenges,such as resource limitations,low-latency service provision,mass data processing,rigid security demands,and the lack of a central entity,the advanced solutions of fog computing,software-defined networking(SDN)and blockchain are leveraged in this work.On the basis of these solutions,a task offloading strategy with a centralized low-latency,secure and reliable decision-making algorithm having powerful emergency handling capacity(LSRDM-EH)is designed to facilitate the resource-constrained edge devices for task offloading.Additionally,to well ensure the security of the entire network,a comprehensive blockchain-based two-layer and multidimensional security strategy is proposed.Furthermore,to tackle the inherent time-inefficiency problem of blockchain,we propose a blockchain sharding scheme to reduce system time latency.Extensive simulation has been conducted to validate the performance of the proposed measures,and numerical results verify the superiority of our methods with lower time-latency,higher reliability and security.
基金supported by the National Natural Science Foundation of China for Innovative Research Groups (61521003)the National Natural Science Foundation of China (61872382)+1 种基金the National Key Research and Development Program of China (2017YFB0803204)the Research and Development Program in Key Areas of Guangdong Province (No.2018B010113001)
文摘Software-Defined Networking(SDN)adapts logically-centralized control by decoupling control plane from data plane and provides the efficient use of network resources.However,due to the limitation of traditional routing strategies relying on manual configuration,SDN may suffer from link congestion and inefficient bandwidth allocation among flows,which could degrade network performance significantly.In this paper,we propose EARS,an intelligence-driven experiential network architecture for automatic routing.EARS adapts deep reinforcement learning(DRL)to simulate the human methods of learning experiential knowledge,employs the closed-loop network control mechanism incorporating with network monitoring technologies to realize the interaction with network environment.The proposed EARS can learn to make better control decision from its own experience by interacting with network environment and optimize the network intelligently by adjusting services and resources offered based on network requirements and environmental conditions.Under the network architecture,we design the network utility function with throughput and delay awareness,differentiate flows based on their size characteristics,and design a DDPGbased automatic routing algorithm as DRL decision brain to find the near-optimal paths for mice and elephant flows.To validate the network architecture,we implement it on a real network environment.Extensive simulation results show that EARS significantly improve the network throughput and reduces the average packet delay in comparison with baseline schemes(e.g.OSPF,ECMP).
文摘准确且快速地检测分布式拒绝服务(distributed denial of service,DDoS)攻击是安全领域的一个重要研究课题,为了提高软件定义网络(software-defined networking,SDN)中DDoS攻击的检测率,采用XGBoost算法对网络中的流量进行建模.该方法根据攻击发生时的流量信息提取特征并进行训练,能够有效地检测DDoS攻击.在实验中,采用mininet和floodlight模拟平台搭建SDN环境,使用HPing3生成不正常的网络流量.实验结果表明:在SDN中进行DDoS攻击检测时,该方法平均准确率为95.34%,与其他机器学习方法相比准确率更高,证明了该方法的有效性.
基金Project supported by the National Natural Science Foundation of China(No.61831007)
文摘Nowadays, cyberspace has become a vital part of social infrastructure. With the rapid development of the scale of networks, applications and services have become enriched, and the bearing function of the underlying network devices(such as switches and routers) has also been extended. To promote the dynamics architecture, high-level security, and high quality of service of the network, control network architecture forward separation is a development trend of the networking technology. Currently, software-defined networking(SDN) is one of the most popular and promising technologies. In SDN, high-level strategies are deployed by the proprietary equipment, which is used to guide the data forwarding of the network equipment. This can reduce many complicated functions of the network equipment and improve the flexibility and operability of the implementation and deployment of new network technologies and protocols. However, this novel networking technology faces novel challenges in term of architecture and security. The aim of this study is to offer a comprehensive review of the state-of-the-art research on novel advances of programmable SDN, and to highlight what has been investigated and what remains to be addressed, particularly, in terms of architecture and security.
