HTTP-flooding attack disables the victimized web server by sending a large number of HTTP Get requests.Recent research tends to detect HTTP-flooding with the anomaly-based approaches,which detect the HTTP-flooding by ...HTTP-flooding attack disables the victimized web server by sending a large number of HTTP Get requests.Recent research tends to detect HTTP-flooding with the anomaly-based approaches,which detect the HTTP-flooding by modeling the behavior of normal web surfers.However,most of the existing anomaly-based detection approaches usually cannot filter the web-crawling traces from unknown searching bots mixed in normal web browsing logs.These web-crawling traces can bias the base-line profile of anomaly-based schemes in their training phase,and further degrade their detection performance.This paper proposes a novel web-crawling tracestolerated method to build baseline profile,and designs a new anomaly-based HTTP-flooding detection scheme(abbr.HTTP-sCAN).The simulation results show that HTTP-sCAN is immune to the interferences of unknown webcrawling traces,and can detect all HTTPflooding attacks.展开更多
The ergodic information rate for Orthogonal Frequency-Division Multiplexing/ Orthogonal Frequency-Division Multiple Access with amplify-and-forward(AF)relaying systems in the presence of frequency offsets is evaluated...The ergodic information rate for Orthogonal Frequency-Division Multiplexing/ Orthogonal Frequency-Division Multiple Access with amplify-and-forward(AF)relaying systems in the presence of frequency offsets is evaluated.Unlike previous work,per-subcarrier adaptive power allocation is performed on each relay to optimize the system ergodic information rate.For a given frequency offset and total number of relays M,the AF ergodic information rate is proven to be a monotonically increasing function of a(the ratio of the power allocated to the source node and the total transmit power),implying that the maximum ergodic information rate can be obtained at α=1(i.e.,there is no cooperative relay).Furthermore,the proof of "cooperative relays cannot improve the AF ergodic information rate in a quasi-static wireless channel" is also provided in this letter.展开更多
Inter-domain path computing is one big issue in multi-domain networks. The Hierarchical Path Computing Element (H-PCE) is a semi-central architecture for computing inter-domain path. To facilitate H-PCE in inter-domai...Inter-domain path computing is one big issue in multi-domain networks. The Hierarchical Path Computing Element (H-PCE) is a semi-central architecture for computing inter-domain path. To facilitate H-PCE in inter-domain path computing, this paper proposed a topology aggregation scheme to abstract the edge nodes and their connected inter-domain link as one vertex to achieve more optimal paths and confidentiality guarantee. The effectiveness of the scheme has been demonstrated on solving wavelength routing in multi-domain Wavelength Division Multiplexing (WDM) network via simulation. Simulation results show that this scheme reduces at least 10% inter-domain blocking probability, compared with the traditional Domain-to-the-Node (DtN) scheme.展开更多
QoS supported MAC mechanism is a key issue for supporting QoS in wireless ad hoc networks. A new backoff algorithm, named RWBO＋BEB, was proposed previ- ously to decrease the packet collision probability significantly...QoS supported MAC mechanism is a key issue for supporting QoS in wireless ad hoc networks. A new backoff algorithm, named RWBO＋BEB, was proposed previ- ously to decrease the packet collision probability significantly. In this paper, it is explored how to make RWBO＋BEB support service differentiation in wireless ad hoc networks, and a novel proportional service differentiation algorithm, named p-RWBO, is proposed to allocate the wireless bandwidth according to the band- width ratio of each station. In p-RWBO, station n＇s walking probability （Pw,n） is selected according to its allocated bandwidth ratio. An analytical model is proposed to analyze how to choose Pw, n according to the bandwidth ratios of station n. The simulation results indicate that p-RWBO can differentiate services in terms of both bandwidth and delay.展开更多
基金supported by National Key Basic Research Program of China(973 program)under Grant No.2012CB315905National Natural Science Foundation of China under grants 61172048,61100184,60932005 and 61201128the Fundamental Research Funds for the Central Universities under Grant No ZYGX2011J007
文摘HTTP-flooding attack disables the victimized web server by sending a large number of HTTP Get requests.Recent research tends to detect HTTP-flooding with the anomaly-based approaches,which detect the HTTP-flooding by modeling the behavior of normal web surfers.However,most of the existing anomaly-based detection approaches usually cannot filter the web-crawling traces from unknown searching bots mixed in normal web browsing logs.These web-crawling traces can bias the base-line profile of anomaly-based schemes in their training phase,and further degrade their detection performance.This paper proposes a novel web-crawling tracestolerated method to build baseline profile,and designs a new anomaly-based HTTP-flooding detection scheme(abbr.HTTP-sCAN).The simulation results show that HTTP-sCAN is immune to the interferences of unknown webcrawling traces,and can detect all HTTPflooding attacks.
基金the 863 project No.2014AA01A701,the National Natural Science Foundation of China，Program for New Century Excellent Talents in University，the open research fund of National Mobile Communications Research Laboratory Southeast University，the Research Foundation of China Mobile,and the Foundation of Beijing Engineering and Technology Center for Convergence Networks and Ubiquitous Services
文摘The ergodic information rate for Orthogonal Frequency-Division Multiplexing/ Orthogonal Frequency-Division Multiple Access with amplify-and-forward(AF)relaying systems in the presence of frequency offsets is evaluated.Unlike previous work,per-subcarrier adaptive power allocation is performed on each relay to optimize the system ergodic information rate.For a given frequency offset and total number of relays M,the AF ergodic information rate is proven to be a monotonically increasing function of a(the ratio of the power allocated to the source node and the total transmit power),implying that the maximum ergodic information rate can be obtained at α=1(i.e.,there is no cooperative relay).Furthermore,the proof of "cooperative relays cannot improve the AF ergodic information rate in a quasi-static wireless channel" is also provided in this letter.
基金Acknowledgements This work was supported by Chang Jiang Scholars Program of the Ministry of Education of China, National Science Fund for Distinguished Young Scholars under Grant No.60725104 the National Basic Research Program of China under Grant No. 2007CB310706+2 种基金 the National Natural Science Foundation of China under Ca＇ant No. 60932002, No. 60932005, No. 61071101 the Hi-Tech Research and Development Program of China under Grant No. 2009AA01Z254, No. 2009AA01Z215 NCEF Program of MoE of China, and Sichuan Youth Science and Technology Foundation under Crant No. 09ZQ026-032.
文摘Inter-domain path computing is one big issue in multi-domain networks. The Hierarchical Path Computing Element (H-PCE) is a semi-central architecture for computing inter-domain path. To facilitate H-PCE in inter-domain path computing, this paper proposed a topology aggregation scheme to abstract the edge nodes and their connected inter-domain link as one vertex to achieve more optimal paths and confidentiality guarantee. The effectiveness of the scheme has been demonstrated on solving wavelength routing in multi-domain Wavelength Division Multiplexing (WDM) network via simulation. Simulation results show that this scheme reduces at least 10% inter-domain blocking probability, compared with the traditional Domain-to-the-Node (DtN) scheme.
基金Supported by the National Natural Science Foundation of China （ No. 90304004）, High Technology Research and Development Program of China （ No 2005AA122310）, the Projects of the Science and Technology Council of Chongqing （2005BB2062, 2005AC2089）.
基金Supported by the National Key Basic Research Program (Grant No. 2007CB310706)the National Science Fund for Distinguished Young Schol- ars (Grant No. 60725102)+2 种基金the National Natural Science Foundation of China (Grant No. 60702055, 60672045)the National High Technology Research and Development Program of China (Grant No. 2007AA01Z246, 2007AA01Z227)Research Fund for the Doctoral Program of Higher Education (Grant No. 20060614018),and Program for New Century Excellent Talents in University
文摘QoS supported MAC mechanism is a key issue for supporting QoS in wireless ad hoc networks. A new backoff algorithm, named RWBO＋BEB, was proposed previ- ously to decrease the packet collision probability significantly. In this paper, it is explored how to make RWBO＋BEB support service differentiation in wireless ad hoc networks, and a novel proportional service differentiation algorithm, named p-RWBO, is proposed to allocate the wireless bandwidth according to the band- width ratio of each station. In p-RWBO, station n＇s walking probability （Pw,n） is selected according to its allocated bandwidth ratio. An analytical model is proposed to analyze how to choose Pw, n according to the bandwidth ratios of station n. The simulation results indicate that p-RWBO can differentiate services in terms of both bandwidth and delay.
