ATM承载IP的地址解析体系结构探讨

该文提出了一种新的ATM承载IP的地址解析体系结构,并描述了该体系结构的工作机制。通过对时延性能进行分析和软件仿真,证明新的体系结构有更高的解析效率。

ARP协议简介及ARP木马防治

介绍了ARP协议的工作原理。针对ARP的特点,在局域网内查找感染ARP木马的主机,提出防治ARP木马的相关办法。

动态主机配置协议泛洪攻击在软件定义网络中的实时防御

在软件定义网络(SDN)中,动态主机配置协议(DHCP)泛洪攻击报文通常能通过reactive方式主动地进入控制器,对SDN危害巨大。针对传统的DHCP泛洪攻击防御方法无法阻止SDN中该攻击带来的控制链路阻塞这一问题,提出一种DHCP泛洪攻击的动态防御机制(DDM)。DDM包含检测模型和缓解模型。在检测模型中,不同于他人提出的静态阈值检测方法,采用DHCP流量均速和IP池余量两个关键参数建立动态峰值估计模型来评估端口是否受到攻击,若受到攻击则交由缓解模型进行防御。在缓解模型中,利用地址解析协议(ARP)的应答特点进行IP池清洗,并设计了周期内分时段拦截机制对攻击源进行截流,在缓解阻塞的同时,最大限度减少拦截对用户正常使用的影响。仿真实验结果表明,相对静态阈值检测,DDM检测误差平均降低18.75%。DDM缓解模型能高效地拦截流量,同时将用户在拦截期正常接入网络的等待时间平均缩短81.45%。

Research of data transmission security in videoconference system

Many coal enterprises have built the videoconference systems on their LAN （Local Area Network）. As the development of these enterprises, their organizations are distributed over our country and even over the world. Therefore, the videoconference systems have to run over WAN （Wide Area Network）. Normally, the structure of a videoconference system is center_division including MCU （multi control unit）and participants. No QoS and security assurance are available now because all videoconference system is based on TCP/IP. Therefore, the system stability is absolutely depended on the Network. This paper discussed how to anti ARP attacking. The method discussed in this paper is based on TCP/IP.