Internet Inter-Domain Path Inferring:Methods,Applications,and Future Directions

The global Internet is a complex network of interconnected autonomous systems(ASes).Understanding Internet inter-domain path information is crucial for understanding,managing,and improving the Internet.The path information can also help protect user privacy and security.However,due to the complicated and heterogeneous structure of the Internet,path information is not publicly available.Obtaining path information is challenging due to the limited measurement probes and collectors.Therefore,inferring Internet inter-domain paths from the limited data is a supplementary approach to measure Internet inter-domain paths.The purpose of this survey is to provide an overview of techniques that have been conducted to infer Internet inter-domain paths from 2005 to 2023 and present the main lessons from these studies.To this end,we summarize the inter-domain path inference techniques based on the granularity of the paths,for each method,we describe the data sources,the key ideas,the advantages,and the limitations.To help readers understand the path inference techniques,we also summarize the background techniques for path inference,such as techniques to measure the Internet,infer AS relationships,resolve aliases,and map IP addresses to ASes.A case study of the existing techniques is also presented to show the real-world applications of inter-domain path inference.Additionally,we discuss the challenges and opportunities in inferring Internet inter-domain paths,the drawbacks of the state-of-the-art techniques,and the future directions.

Improving Inter-Domain Fast Handover Using MIH Services in Mobile WiMAX

Recently, the IP connectivity during the Mobile Node (MN) movement between Base Stations (BSs) belonging to different Internet Service Providers (ISPs) is still a key issue to be tackled. In this paper, therefore, we develop a new scheme to improve the performance of inter-domain fast handover over mobile WiMAX networks. The framework basically relies on the Fast Handover for Mobile IPv6 protocol (FMIPv6) when the Media Independent Information Services (MIIS) as defined in IEEE802.21 standard is applied to enable the Mobile Node in storing the information of the neighboring networks. A Fully Qualified Domain Name (FQDN) is also used to identify the IP address of the previous network operator and the MN during its movements. Since both MIIS and FQDN can support the node mobility between multiple domains, our proposed scheme can also be called P-FMIPv6. The numerical results show that the latency of IP connectivity of this proposed handover can be significantly reduced in addition to less service disruption time during handovers as compared to the existing FMIPv6 when IEEE802.16e network is considered.

Inter-domain routing and wavelength assignment based on source routing in ASON

The inter-domain and intra-domain routings are treated jointly with dynamically distributed algorithms in automatically switched optical networks （ASON） based on source routing. The proposed algorithms are discussed through numerical calculations. The routing loops can be avoided efficiently and the inter-domain signaling complexity is reduced significantly. The performance of the blocking probability is also improved.

Elimination of inter-domain interactions increases the cleavage fidelity of the restriction endonuclease Dralll

Dralll is a type liP restriction endonucleases （REases） that recognizes and creates a double strand break within the gapped palindromic sequence CACTNNN^GTG of double-stranded DNA indicates nicking on the bottom strand; indicates nicking on the top strand）. However, wild type Dralll shows significant star activity. In this study, it was found that the prominent star site is CATSGTT;GTG, consisting of a star 5＇ half （CAT） and a canonical 3＇ half （GTG）. Dralll nicks the 3＇ canonical half site at a faster rate than the 5＇ star half site, in contrast to the similar rate with the canonical full site. The crystal structure of the Dralll protein was solved. It indicated, as supported by mutagenesis, that Dralll possesses a ~13a- metal HNH active site. The structure revealed extensive intra-molecular interactions between the N-terminal domain and the C-terminal domain containing the HNH active site. Disruptions of these interactions through site- directed mutagenesis drastically increased cleavage fidelity. The understanding of fidelity mechanisms will enable generation of high fidelity REases.

基于情境感知的网络谣言早期检测方法研究

[研究目的]现有网络谣言检测方法多依靠情感特征、语法特征、外部知识等信号来验证信息的真伪,具有滞后性,提出一种基于情境感知的网络谣言检测方法,以应对网络谣言早期检测的需要。[研究方法]该方法利用拉谱拉斯谱聚类完成领域内和领域间的话题情境聚类,依据领域内和领域间的话题分布,构建四个话题情境,用于捕捉话题的热度和新颖度;并融合新闻文本、风格特征、情感等特征设计一个谣言情境感知模型。[研究结果/结论]通过在中文数据集Ch-9和英文数据集En-3的实验验证,结果显示该方法均高于基础模型,验证了话题情境可以增强证据,有利于谣言的早期发现。

Provisioning of Inter-Domain QoS-Aware Services

Cooperation among service providers, network providers, and access providers in the Internet allows the creation of new services to offer to customers that are in other domains, thus increasing revenue. However, the Internet heterogeneous environment, where each provider has its own policies, infrastructure and business goals, hinders the deployment of more advanced communication services. This paper presents a Quality of Service （QoS） for Inter-Domain Services （QIDS） model that allows inter-domain QoS-aware services to be defined, configured, and adapted in a dynamic and on-demand fashion, among service providers. This is accomplished by： 1） the use of a common communication channel （business layer） where service providers publish and search for services, and interact with each other to contract and manage these services; 2） the templates to specify the business and technical characteristics of the services; 3） the automatic composition of services using service dements （smaller services） a^cording to performance and service-specific QoS parameters; and 4） the creation and enforcement of configuration rules for the underlying infrastructure. A prototype was implemented to validate QIDS and performance tests were conducted on an inter-domain Border Gateway Protocol （BGP）/Multiprotocol Label Switching （MPLS） Virtual Private Network （VPN） scenario.

基于域间Mixup微调策略的跨被试运动想象脑电信号分类算法

为了缓解传统微调算法的灾难性遗忘问题,本文提出了一种基于域间Mixup微调策略的跨被试运动想象脑电信号分类算法Mix-Tuning。Mix-Tuning通过预训练、微调的二阶段训练方式,实现跨领域知识迁移。预训练阶段,Mix-Tuning使用源域数据初始化模型参数,挖掘源域数据潜在信息。微调阶段,Mix-Tuning通过域间Mixup,生成域间插值数据微调模型参数。域间Mixup数据增强策略引入源域数据潜在信息,缓解传统微调算法在样本稀疏场景下的灾难性遗忘问题,提高模型的泛化性能。Mix-Tuning被进一步应用于运动想象脑电信号分类任务,实现了跨被试正向知识迁移。Mix-Tuning在BMI数据集的运动想象任务达到了85.50%的平均分类准确率,相较于被试–依赖和被试–独立训练方式的预测准确率58.72%和84.01%,分别提高26.78%和1.49%。本文分析结果可为跨被试运动想象脑电信号分类算法提供参考。

多域蛋白质残基间距离深度学习预测方法

自然界生物中,大约有超过三分之二的真核蛋白质含有多个结构域.虽然AlphaFold2已经实现了端到端的蛋白质结构预测的重大突破,对于单域的静态蛋白质结构的预测精度几乎达到了实验测定的水平,但是对于多域蛋白质结构的预测精度仍然有待提高.本文提出了一种名为MDDpre的多域蛋白质残基距离预测方法.首先从多序列比对和模板中提取了序列谱、位置熵、互信息、去除背景噪声的互信息、平均接触势能、MSA特征矩阵、行注意力矩阵以及模板域间距离特征,然后设计了一个集合了三角形更新、轴向注意力机制和卷积残差块的网络来预测多域蛋白质的域间和域内距离.在62个多域蛋白质的实验结果表明,MDDpre优于现有的方法,能够有效提升多域蛋白质的残基距离预测精度.

结构类似模板增强的端到端多域蛋白质组装方法

使用同源模板能够有效的提升蛋白质结构预测的精度,然而,对于部分多域蛋白,PDB中可用的同源模板较少,这可能会影响预测精度.为了进一步提高多域蛋白质的建模精度,本文提出了基于结构类似模板结合同源模板的端到端多域组装方法MTDA.首先,搜索序列数据库生成多序列比对,以及分别搜索PDB100和MPDB生成同源模板和结构类似模板;进而提取序列特征、模板特征和单域特征;然后通过一个基于EfficientNetV2架构和注意力机制相结合的神经网络来预测多域蛋白质的域间方位从而直接将多个单域结构组装为全链结构.在125个测试蛋白和65个人类蛋白上的实验结果表明,MTDA优于仅使用同源模板的端到端组装方法E2EDA以及全链建模方法AlphaFold2.

Research on the Evolution of Country-Level BGP Network Ecosystems in 24 Years

The global Internet is composed of more than 70,000 autonomous domain networks interconnected through the Border Gateway Protocol(BGP).Studying the ecological evolution of BGP network is of great significance for analyzing the evolution trend of the global Internet.This paper focuses on the evolution of Country-Level BGP network ecosystems in 24 years,and innovatively studies the relationship between Country-Level BGP network and economy,breaking through the limitations of traditional research that only focuses on BGP network.The results revealed that the number of global BGP networks has increased by nearly 23 times and that network interconnection has increased nearly 80 times over in 24 years.It was found that the growth of the global BGP network ecosystem has slowed overall due to major global security events,although the BGP network ecosystem in some Southeast Asian countries is developing against the trend.At the same time,there is a significant positive correlation between the BGP network ecology and the national economy in the time dimension;there is a strong positive correlation in the spatial dimension,but the trend is weakening year by year.

RPKI去中心化安全增强技术综述

资源公钥基础设施(RPKI)搭建了中心层级化的IP地址资源认证基础设施。在增强互联网域际路由系统安全的同时,RPKI也将中心性引入路由系统。根据证书认证中心职能,提出RPKI体系中的认证中心、操作中心和发布中心,并从3个中心对RPKI去中心化安全增强技术综述。首先,从认证、操作和发布角度细化RPKI中心化风险。其次,从3个风险角度分类RPKI去中心化安全增强技术的技术思路和解决措施。再次,从安全性、可扩展性和增量部署分析比较相关技术。最后,总结存在的问题并展望未来的研究方向。

以信息为中心的天地一体化网络分域路由机制研究

针对现有星间路由策略难以实现天地一体化网络(space-ground integrated information-centric network,SGI 2CN)中卫星拓扑高动态变化情况下多源内容高效传输的问题,提出面向多源内容的分域星间路由机制(area-divided-based inter-satellite routing mechanism,ADISR)。根据给定区域划分原则,构建基于虚拟节点的卫星网络模型。对于域内路由,根据内容源位置和缓存更新,采用基于链路状态最短路径算法和状态更新算法实现域内动态路由;对于域间路由,通过综合考虑节点和链路状态提出基于辅助图的启发式算法实现跨域数据传输。仿真结果表明,与已有路由机制相比,ADISR能解决SGI 2CN中多源多路径问题,减少网络丢包率,降低内容传播时延,提高网络吞吐量。

运营商网络源地址验证能力增强方案

互联网架构设计之初未考虑对IP数据包中源地址进行可信验证,这在后续网络发展中逐渐凸显为安全风险。源地址验证技术不断推陈出新,近年来业界提出了基于路由协议扩展通告消息并生成独立源地址验证表的分布式源地址验证机制,但仍受限于非对称路由、设备异构及局部升级等问题,同时缺乏可视化与能力开放。文章结合运营商网络实际情况,提出一种基于网络控制器的源地址验证能力增强方案,旨在自适应地提升自治域内和自治域间的源地址验证准确性,强化网络的感知、检测与分析能力。文章首先概述源地址验证的技术体系与发展历程,其次分析运营商网络源地址验证技术的部署情况与能力要求,再次阐述所提方案的系统架构与关键技术,最后对未来源地址验证技术发展给予展望,为构建更安全、高效的下一代网络架构提供方向建议。

对互联网体系结构创新的认识与思考

互联网是促进现代社会经济发展和科技创新的重要信息基础设施;然而,支撑并规范互联网正常运行的关键核心技术——互联网的TCP/IP(Transport Control Protocol/Internet Protocol)体系结构——几十年来几乎保持不变.本文首先从技术自身弊端、社会发展需求、技术转移周期、科技革命规律四个方面论述了开展互联网体系结构创新的必要性.其次,运用系统科学原理阐明了TCP/IP体系结构弊端的根源.再次,运用系统观念揭示了信息网络的功能本质和网络间的互联本质,发现了信息传递的四个自然属性(对象属性、身份属性、位置属性、手段属性).在此基础上,简要介绍了基于两个本质和四个自然属性开展创新互联网体系结构创新的实例——共生网络.最后,结合共生网络架构展望了部署新型互联网体系结构的总体路径.

改进Petri网下异构跨域用户身份验证方法

在异构跨域用户身份验证时,由于用户身份存在属性特征难以捕捉、状态描述误差大等问题,导致验证精准度较低,为有效解决这一问题,文中提出一种基于改进Petri网的用户身份验证算法。利用改进Petri网反映不同局域网中事物间依赖关系,将异构跨域用户活动模型与Petri网模型转换,采用同步用户的状态变化提取实时状态特征值。通过建立云间身份认证中心,计算用户不同身份代表性词语在一定周期内出现的次数和频率值。提取频率最高的词语,并计算该词语在待验证用户全部代表词语库中的权重值,对比权重值与验证熵值,将得到的验证参数输入到认证中心,输出验证结果。实验结果表明,所提方法在先验节点比例为8%时,验证准确率达到0.9,且召回率和综合指标均在0.6以上,具备一定的抗攻击性,整体实用性能强、利用价值高。

基于低对比度红外图像时空信息的气体泄漏检测

气体泄漏事故造成的危害是多方面的,如环境污染、人员财产损失、火灾爆炸。红外热成像作为可实现大范围快速成像的定性探测技术被广泛使用,相比一般红外图像,气体红外图像的对比度更低,边缘更加模糊,不易识别。针对上述问题,本文提出一种基于混合高斯背景建模的低对比度气体红外图像泄漏检测方法。首先,在预处理阶段,提出时域自适应帧间滤波算法实现红外图像的降噪和细节保持;然后,基于空域信息和梯度信息约束,提出时空混合高斯背景模型实现泄漏气体目标的前景的初步提取;最后,为更好地去除前景检测中干扰的运动目标,利用改进的快速鲁棒的模糊C均值聚类方法实现气体区域的自适应分割。实验结果表明,在5 m的泄漏距离下,该检测算法可有效提高准确率,弥补气体区域空洞问题,降低其他运动物体的干扰,气体泄漏检测准确率在92.3%~96.3%,与其他算法相比具有显著的抗干扰和区域分割能力。

基于空间域与频域特征自适应融合和类间边界区域增强的三维海马分割

目的海马萎缩是诊断阿尔茨海默病等诸多精神疾病的临床重要标志,因此准确分割海马是一个重要的科学问题。随着深度学习的发展,人们提出了大量先进的自动分割方法。然而,由于MRI中各种噪声的影响以及海马不同类别之间不清晰的边界,三维海马分割仍然具有挑战性。因此本文旨在提出新的自动分割方法来更精确地分割海马头、体、尾。方法为了克服这些挑战,本文提出了两个策略。一种是空间域与频域特征自适应融合策略,通过快速傅立叶变换和卷积自动选择合适的频率组合,减少噪声对特征提取的影响。另一种是类间边界区域增强策略,它允许网络通过加权每个类之间边界区域的损失函数来增强对边界区域的学习,以达到精确定位边界和调节海马头、体、尾大小的目的。结果在50例青少年大脑MRI数据集上进行的实验表明,我们的方法实现了较先进的海马分割,海马头、体、尾相较于现有的方法都取得了一定的提升。消融实验证明我们提出的两种策略有效,我们还在260例Task04_Hippocampus数据集上验证了网络具有强大的泛化能力,说明本文提出的方法可用于更多的海马分割场景。结论我们提出的方法可以帮助临床医生更清楚地观测海马萎缩,并完成更精确的病情诊断和追踪。

路由器带宽池化技术在域间链路故障恢复中的应用

随着信息技术的飞速发展,网络规模持续扩大,业务需求急剧增长,网络设备故障导致的链路中断问题日益严峻。传统的故障处理方法高度依赖人工介入,不仅响应时间长,处理过程复杂,而且难以满足现代网络对高可靠性和快速恢复的需求。本文探讨了带宽池化技术在域间链路故障恢复中的应用,分析了其在提升网络稳定性和缩短故障恢复时间方面的优势,并阐述了带宽池化技术的实现原理、技术特点及应用实例,为未来的网络故障恢复提供了创新思路和方法。

660 MW汽轮发电机转子绕组匝间短路隐患的诊断分析及改造方法

某电厂660M W汽轮发电机在检修时发现转子匝间绝缘劣化迹象。结合相关试验数据和运行记录,判断该转子存在匝间短路隐患。同时根据制造厂家建议和机组深度调峰的需求,对该发电机转子进行灵活性改造。

自治系统间的安全路由协议GesBGP

域间路由协议BGP的安全性直接影响着互联网路由的可用性.虽然现有很多改进的BGP安全方案可以解决这些安全问题,但这类方案存在很多设计缺陷(例如,路由资源消耗问题).在文中,作者充分考虑了安全BGP的目标并提出了一个Good-Enough-Security BGP(GesBGP)协议.GesBGP在可信计算技术的基础上使用基于身份的密钥(IBS)算法确保BGP协议中身份的真实性.IBS算法的引入有效地消除了传统安全BGP协议中部署集中公钥基础设施(PKI)以及公钥证书的分发和储存问题.此外,GesBGP不单纯依赖于安全密钥算法,基于可信计算技术的BGP可信服务从路由器系统本身防止了系统配置的非法篡改,消除了路由消息的多重累积签名.在提出的优化GesBGP协议中,通过部署BGP的安全规则建立AS之间强制信任关系,进一步消除了BGP通告消息中的累积签名.安全分析和性能评价表明,优化的GesBGP在确保BGP安全性的同时有效地改进了GesBGP的性能.