TCP-ATCA: Improved Transmission Control Algorithm in Satellite Network

An adaptive transmission control algorithm based on TCP （TCP-ATCA） is proposed to reduce the effects of long propagation delay and high link error rate of the satellite network on the performances. The flow control and the error recovery are differentiated by combined dynamic random early detection-explicit congestion notification （DRED-ECN） algorithm, and, moreover, the pertaining congestion control methods are used in TCP-ATCA to improve the throughput. By introducing the entire recovery algorithm, the unnecessary congestion window decrease is reduced, and the throughput and fairness are improved. Simulation results show that, compared with TCP-Reno, TCP-ATCA provides a better throughput performance when the link capacity is higher （ ≥600 packet/s）, and roughly the same when it is lower. At the same time, TCP-ATCA also increases fairness and reduces transmission delay.

Improving Throughput of Transmission Control Protocol Using Cross LayerApproach

Most of the internet users connect through wireless networks. Majorpart of internet traffic is carried by Transmission Control Protocol (TCP). It hassome design constraints while operated across wireless networks. TCP is the traditional predominant protocol designed for wired networks. To control congestionin the network, TCP used acknowledgment to delivery of packets by the end host.In wired network, packet loss signals congestion in the network. But rather inwireless networks, loss is mainly because of the wireless characteristics such asfading, signal strength etc. When a packet travels across wired and wireless networks, TCP congestion control theory faces problem during handshake betweenthem. This paper focuses on finding this misinterpretation of the losses using crosslayer approach. This paper focuses on increasing bandwidth usage by improvingTCP throughput in wireless environments using cross layer approach and hencenamed the proposed system as CRLTCP. TCP misinterprets wireless loss as congestion loss and unnecessarily reduces congestion window size. Using the signalstrength and frame error rate, the type of loss is identified and accordingly theresponse of TCP is modified. The results show that there is a significant improvement in the throughput of proposed TCP upon which bandwidth usage isincreased.

A Stream Control Transmission Protocol Based OAM System of 3G Cellular Network

OAM (Operations, Administration and Maintenance) system is a very impo rtant component of 3G cellular network. In order to acquire overall managemen t, fast response and steady operation, an SCTP (Stream Control Transmission Prot ocol) based OAM, i.e., SOAM system was proposed. SOAM implements new characters of SCTP such as multi-stream, enforced SACK and heartbeat mechanism on its tran sport layer. These characters help SOAM decrease the message transmission delay and accelerate the link failure detection. Besides, a new component named SOAM agent was introduced to improve the operation efficiency of SOAM. The experim ental results prove the proposed SOAM system achieves better performance on sign aling transmission compared with conventional TCP based OAM system.

针对车地传输TCP协议优化的TTI-RTT拥塞控制算法

为适应铁路5G专用移动通信系统动态易变的网络环境,解决现有算法中存在的吞吐量减少、传输时延增加、检测数据车地传输可靠性难以保证的问题,在分析传输控制协议(TCP)传输拥塞控制过程,以及对比TCP-Reno,TCP-Vegas和TCP-Westwood 3种基础拥塞控制算法存在问题的基础上,提出一种联合传输时间间隔(TTI)和往返时延(RTT)的拥塞控制算法——TTI-RTT算法,即将RTT的成对比较测试统计量和网络当前拥塞因子联合起来作为网络拥塞判断标准,根据反映网络拥塞程度的拥塞因子动态调节加性和乘性因子,并在传输控制协议拥塞控制的不同条件下灵活调整传输时间间隔。采用NS-3仿真软件,构建考虑高速铁路5G-R无线信道误码影响的点对点通信网络拓扑结构,对TTI-RTT拥塞控制算法进行仿真验证,并与3种基础算法进行性能比较。结果表明:不同丢包率下所提算法的平均吞吐量均保持在9 Mb·s^(-1)以上,较基础算法中吞吐量最高且最稳定的TCP-Reno算法增加了约5.9%,且实时吞吐量稳定性具有显著改善。

Modbus TCP协议安全风险分析及对策研究

工业互联网作为新一代信息技术与工业系统深度融合的产物,正推动着工业生产方式的变革。然而,工控网络协议在设计之初因注重效率提升和功能实现忽视了一些安全性问题,加之应用中的安全漏洞和异常行为,导致其存在严峻的安全隐患。文章介绍了工业互联网的发展背景、趋势和工控网络协议特点,分析了当前应用最广泛的典型工控网络协议Modbus TCP的安全风险,研究了数据加密、数据完整性检测、身份认证及异常入侵检测等安全对策,提出一套Modbus TCP协议安全方案。该方案包含采用AES算法和RSA算法的数据加密和解密模块、采用SM3算法的数据完整性检测模块、采用动态口令认证技术的身份认证模块和基于数据特征的异常入侵检测系统,同时引入PKI进一步加强工控系统的安全性,为其他工控网络协议的安全防范提供借鉴和参考。

基于TCP/IP协议与关联规则的电力监控系统多线程通信方法

电力监控系统环境中存在过多噪声因素干扰,导致通信效率和质量低。为此,提出一种基于传输控制协议/网际协议(transmission control protocol/internet protocol,TCP/IP)与关联规则的多线程通信算法。将背景噪声看作电力监控信号的突变现象,查找回应突变函数的信号值,利用谐波分离算法,去除背景噪声。根据不同线程的传输特点,采用TCP/IP协议建立通信程序包,分别设置句柄、终止、挂起以及执行函数,为不同线程的通信数据,匹配不同的通信协议。试验结果证明:对电力监控系统源设备的传输信号多线程通信时,通信信号波频变化最为平稳,在0~2000 s的采样区间内,未出现传输为0现象;对背景噪声去噪后,波形相比原始信号变化明显较为稳定,没有出现过高或过低的幅值变化。所提方法通信信号表达平稳、效率较高,对原始信号的保留效果较好,去噪能力很强。

Cloud control for IIoT in a cloud-edge environment

The industrial Internet of Things(IIoT)is a new indus-trial idea that combines the latest information and communica-tion technologies with the industrial economy.In this paper,a cloud control structure is designed for IIoT in cloud-edge envi-ronment with three modes of 5G.For 5G based IIoT,the time sensitive network(TSN)service is introduced in transmission network.A 5G logical TSN bridge is designed to transport TSN streams over 5G framework to achieve end-to-end configuration.For a transmission control protocol(TCP)model with nonlinear disturbance,time delay and uncertainties,a robust adaptive fuzzy sliding mode controller(AFSMC)is given with control rule parameters.IIoT workflows are made up of a series of subtasks that are linked by the dependencies between sensor datasets and task flows.IIoT workflow scheduling is a non-deterministic polynomial(NP)-hard problem in cloud-edge environment.An adaptive and non-local-convergent particle swarm optimization(ANCPSO)is designed with nonlinear inertia weight to avoid falling into local optimum,which can reduce the makespan and cost dramatically.Simulation and experiments demonstrate that ANCPSO has better performances than other classical algo-rithms.

基于电力云边协同的非侵入式Modbus TCP协议安全增强方法

分布式电源(distributed resources,DR)中智能边缘设备数据传输的安全问题为电力系统带来了安全隐患。Modbus TCP(transmission control protocol)协议作为边缘设备采用的通信手段之一,其协议安全性的不足使得系统易遭到网络空间的攻击。为保障电力设备数据传输安全,对现有安全手段进行整理,分析现有安全手段在DR应用场景下的不足,提出一种非侵入式Modbus TCP协议安全增强方法。该方法采用云边协同的架构,利用电力控制中心云平台管理访问控制原则,将实际访问控制决策模块部署在边缘设备,并通过细粒度的访问控制组合限制恶意行为。依据Modbus协议参考指南,搭建DR应用场景进行渗透测试,验证该方法能有效防御重放攻击和中间人攻击,可将安全开销控制在百微秒以内,显著优于其他安全手段,满足DR对实时性的需求。

改进TCP/IP帧结构的多参数信道传输性能评估方法

目前,网络密集化现象加剧了信道传输性能的恶化。而普遍应用的评估方法由于参数考虑有限和适用范围受限,在信道传输性能评估方面面临显著挑战。针对信道传输性能评估困难的问题,提出一种改进传输控制协议/网际协议(TCP/IP)帧结构的多参数信道传输性能评估方法。首先,生成标准化的测试数据,包括伪随机码、基本曲线数据、自定义曲线数据,以确保测试数据遵循统一标准;其次,使用改进的TCP/IP帧结构,将总帧数、帧序号等测试数据信息封装在TCP/IP帧中,并对测试数据进行收发与解析,统计不同帧类型的帧数量、不同帧长度的帧数量、总帧数和有效数据量这4种基础信道传输信息;最后,分析接收数据得到误帧率和误码率这2种高级信道传输信息,完成信道传输性能的整体评估。所设计的方法采用6种不同的参数对信道质量进行评估,方法评估的精度可达0.01%,最小误差为0.01%,且兼容所有使用TCP/IP进行通信的信道。实验结果表明,所提出的信道传输性能评估方法可以完成对6种信道通信信息的统计与分析,准确评估信道传输性能。

A Dual-Channel Secure Transmission Scheme for Internet-Based Networked Control Systems

Two significant issues in Internet-based networked control systems （ INCSs）, transport performance of different protocols and security breach from Internet side, are investigated. First, for improving the performance of data transmission, user datagram protocol （UDP） is adopted as the main stand for controllers and plants using INCSs. Second, a dual-channel secure transmission scheme （DCSTS）based on data transmission characteristics of INCSs is proposed, in which a raw UDP channel and a secure TCP （transmission control protocol） connection making use of SSL/TLS （secure sockets layer/transport layer security） are included. Further, a networked control protocol （NCP） at application layer for supporting DCSTS between the controllers and plants in INCSs is designed, and it also aims at providing a universal communication mechanism for interoperability of devices among the networked control laboratories in Beijing Institute of Technology of China, Central South University of China and Tokyo University of Technology of Japan. By means of a networked single-degree-of-free- dom robot arm, an INCS under the new protocol and security environment is created. Compared with systems such as IPSec or SSL/TLS, which may cause more than 91% network throughput deduction, the new DCSTS protocol may yield results ten times better, being just 5.67%.

基于Modbus/TCP协议的ATS与FSK系统间通信接口设计

根据墨西哥某城市地铁指挥控制系统的设计需求,列车自动监控(ATS)系统与频移键控(FSK)系统之间数据交互采用网络接口,基于Modbus/TCP协议实现相应的以太网通信。为此提出基于Modbus/TCP协议的ATS与FSK系统间通信接口设计方案:利用Modbus/TCP协议的扩展灵活性,在传统Modbus/TCP协议的基础上进行扩展,实现ATS与FSK系统间的模拟列控信息、列车检测信息、FSK传输配置信息、网络配置信息的安全可靠传输;为了高效便捷地将从网口接收的信息解析后传输给FSK系统,选择在ARM/Linux+FPGA平台上实现通信接口。测试验证结果表明:该通信接口设计方案结构清晰且方便移植,能够正确有效地实现ATS与FSK系统间通信。

Accelerated transmission in peer-to-peer network

The design and evaluation of accelerated transmission （AT） systems in peer-to-peer networks for data transmission are introduced. Based on transfer control protocol （TCP） and peer-to-peer （P2P） substrate networks, AT can select peers of high performance quality, monitor the transfer status of each peer, dynamically adjust the transmission velocity and react to connection degradation with high accuracy and low overhead. The system performance is evaluated by simulations, and the interrelationship between network flow, bandwidth utilities and network throughput is analyzed. Owing to the collaborative operation of neighboring peers, AT accelerates the process of data transmission and the collective network performance is much more satisfactory.

AN ENHANCEMENT SCHEME OF TCP PROTOCOL IN MOBILE AD HOC NETWORKS:MME-TCP

Transmission Control Protocol (TCP) optimization in Mobile Ad hoc NETworks (MANETs) is a challenging issue because of some unique characteristics of MANETs. In this paper,a new end-to-end mechanism based on multiple metrics measurement is proposed to improve TCP performance in MANETs. Multi-metric Measurement based Enhancement of TCP (MME-TCP) designs the metrics and the identification algorithm according to the characteristics of MANETs and the experiment results. Furthermore,these metrics are measured at the sender node to reduce the overhead of control information over networks. Simulation results show that MME-TCP mechanism achieves a significant performance improvement over standard TCP in MANETs.

基于LwIP和Modbus TCP协议的网络控制器设计

为了实现对终端设备的网络远程控制和监测,该文设计了一款基于LwIP和Modbus TCP协议的网络控制器。该控制器以STM32F107RCT6和LAN9303芯片为核心,设计出了网络通信电路、网口电路、A/D采样电路、光耦隔离电路和IO口电路。软件设计主要完成了LwIP协议栈的移植、Modbus TCP协议程序和其他控制程序的编写。经过测试,所设计的网络控制器在对设备进行远程控制和监测时具有数据传输可靠、通讯稳定和实时性好的优点,能满足工厂使用。

基于LSTM的Modbus TCP协议模糊测试优化方法

针对工控系统传输协议模糊测试的路径爆炸和约束求解问题,提出一种基于长短时记忆(LSTM)网络的Modbus TCP协议模糊测试优化方法,挖掘出两种工控协议漏洞,分别为非法写入漏洞和数据值边界漏洞。抓取模糊测试数据包形成数据集,并根据状态码将其分为正常用例、异常用例和无效用例三种,通过LSTM识别出无效用例并剔除,提高漏洞挖掘效率。实验结果表明,LSTM识别模糊测试数据集的准确率达到93.87%,经过LSTM优化后的测试用例通过率从30.75%提升至33.99%。

BIFURCATIONS AND CHAOS CONTROL IN TCP-RED SYSTEM

Objective Analyzing the nonlinear dynamics of the TCP-RED congestion control system is of great importance. This study will help investigate the loss of stability in Internet and design a proper method for controlling bifurcation and chaos in such system. Methods Based on bifurcation diagram, the effect of parameter on system performance is discussed. By using the state feedback and parameter variation strategy, a simple real time control method is proposed to modify the existing RED scheme. Results With our control method, the parametric sensitivity of RED mechanism is attenuated. Moreover, a sufficient condition on the robust stability of the system is also derived to adjust the parameters in TCP-RED system. Conclusion The proposed method has the advantages of simple implementation and unnecessary knowledge of the exact system.

TCP Window Based Congestion Control -Slow-Start Approach

Transmission control protocol (TCP) has undergone several transformations. Several proposals have been put forward to change the mechanisms of TCP congestion control to improve its performance. A line of research tends to reduce speed in the face of congestion thereby penalizing itself. In this group are the window based congestion control algorithms that use the size of congestion window to determine transmission speed. The two main algorithm of window based congestion control are the congestion avoidance and the slow start. The aim of this study is to survey the various modifications of window based congestion control. Much work has been done on congestion avoidance hence specific attention is placed on the slow start in order to motivate a new direction of research in network utility maximization. Mathematical modeling of the internet is discussed and proposals to improve TCP startup were reviewed. There are three lines of research on the improvement of slow start. A group uses the estimation of certain parameters to determine initial speed. The second group uses bandwidth estimation while the last group uses explicit request for network assistance to determine initial startup speed. The problems of each proposal are analyzed and a multiple startup for TCP is proposed. Multiple startups for TCP specify that startup speed is selectable from an n-arry set of algorithms. We then introduced the e-speed start which uses the prevailing network condition to determine a suitable starting speed.

TCP/AWM网络系统的事件触发预设性能拥塞控制

研究了具有非响应用户数据报协议流干扰的TCP/AWM网络系统的跟踪控制问题.针对网络拥塞控制系统,给出了一种改进的网络模型.将预设性能控制和事件触发机制相结合,提出了一种新的AWM拥塞控制算法.利用改进的边界性能函数限制TCP/AWM网络系统的队列跟踪误差,提高了闭环系统的暂态和稳态性能,保证了所有闭环信号都是有界的.此外,采用基于一位信号传输的事件触发控制协议,当控制信号更新时,仅通过一个二进制信号(0或1)传输信息.与传统的事件触发控制协议相比,不仅考虑了有限的带宽,而且考虑了网络传输的成本以及安全性问题.最后,通过仿真验证和分析,证明了所提方法的可行性和优越性.

Multi-Stage Image Compression-Decompression System Using PCA/IPCA to Enhance Wireless Transmission Security

The goal of this paper is to propose a fast and secure multi-stage image compression-decompression system by using a wireless network between two Personal Computers (PCs). In this paper, the Principal Component Analysis (PCA) technique is used for multi-stage image compression and Inverse Principal Component Analysis (IPCA) for multi-stage image decompression. The first step of the proposed system is to select the input image, the second step is to perform PCA up to 9 times on the input image, this compression, and after multi-stage compression process then the third step begins by transforming across wireless Ad hoc Network (WANET) to the second computing device, forth step start with multi-stage decompression process up 9 times. The proposed system for different images is transferred over the wireless network using Transmission Control Protocol/Internet Protocol (TCP/IP), which is programmed using the network role property of the MATLAB program. The proposed system implements 25 different images correctly (100%). The main contribution of this paper is that we are dealing with the black image at the end of the compressed process ad start with a black image at the start of the decompressed process of this proposed system. In this work, the compressed and uncompressed images are compared with each other in their size and transmission time. This system can be very useful in networks because they provide a high level of protection to the transmitted data from hackers because they cannot guess how much the image has been compressed or what kind of information the image represents.

基于Modbus/TCP的无线通信网络安全加密控制系统设计

为控制明文加密时长、密文响应时长之间的相对时延量,实现无线网络对于通信数据的安全性加密,设计基于Modbus/TCP的无线通信网络安全加密控制系统;匹配PowerPC嵌入式架构与复位通信控制电路之间的实时连接关系,借助微处理器子模块,确定宿主机与客户机对通信网络的贡献价值,再按照Modbus/TCP协议连接标准,整合交换区中已存储的通信数据文本,完成无线通信网络安全加密控制系统硬件设计;根据基本协议要素,认证待加密数据的传输身份,实现对Modbus/TCP可信协议的定义;利用协议文件中的可信度条件,设置密钥模板,通过移植处理通信文本的方式,确定数据信息样本的扩容总量,完成安全加密接口设计,联合相关应用元件,实现基于Modbus/TCP的无线通信网络安全加密控制系统设计;实验结果表明,所设计系统明文加密时长、密文响应时长之间的相对时延量始终保持为0.1 ms,能够有效实现无线网络对于通信数据的安全性加密。