MULTI-AGENT SYSTEM FOR WORM DETECTION AND CONTAINMENT IN METROPOLITAN AREA NETWORKS

Active worms can cause widespread damages at so high a speed that effectively precludes human-directed reaction, and patches for the worms are always available after the damages have been caused, which has elevated them self to a first-class security threat to Metropolitan Area Networks (MAN). Multi-agent system for Worm Detection and Containment in MAN (MWDCM) is presented to provide a first-class automatic reaction mechanism that automatically applies containment strategies to block the propagation of the worms and to protect MAN against worm scan that wastes a lot of network bandwidth and crashes the routers. Its user agent is used to detect the known worms. Worm detection agent and worm detection correlation agent use two-stage based decision method to detect unknown worms. They adaptively study the accessing in the whole network and dynamically change the working parameters to detect the unknown worms. MWDCM confines worm infection within a macro-cell or a micro-cell of the metropolitan area networks, the rest of the accesses and hosts continue functioning without disruption. MWDCM integrates Worm Detection System (WDS) and network management system. Reaction measures can be taken by using Simple Network Management Protocol (SNMP) interface to control broadband access server as soon as the WDS detect the active worm. MWDCM is very effective in blocking random scanning worms. Simulation results indicate that high worm infection rate of epidemics can be avoided to a degree by MWDCM blocking the propagation of the worms.

Simulation of Optical Packet-Switched Metropolitan Area Network

This paper introduces architectures of two types optical packet switched metropolitan area networks and their media access control protocols. We have designed related network simulation systems. With these simulation systems, the characteristics and performance of the two MANs can be achieved.

A Three-dimensional IP-based Telecom Metropolitan Area Network Model

The Metropolitan Area Network (MAN) has faced serious problems after years of rapid development. The model of three-dimensional IP-based MAN, proposed by ZTE, is a next-generation MAN solution, which not only solves the existing problems but also brings new ideas for the development of next-generation MAN.

DQCA:a New Medium Access Control Protocol for MANs

A new medium access control protocol for MANs named DQCA(Distributed QueueCyclic Access)is presented in this paper.When the users of DQCA MAN transfer long files,the network will reach a steady state which is fair after a transient period.The transient pe-riod is shorter than that of DQDB.DQCA MAN has the flexibility in bandwidth allocation:the users can achieve different throughputs if the parameters,Pmax(i),are set to be differ-ent.The implementation of priority mechanism is simpler than that of DQDB.

Design and Implementation of MAC Layer in 155.520Mbps Broadband Fiber Optic MAN

The fiber optic technology has matured to the point where Metropolitan Area Networks(MAN)can be built to operate at speeds from 150Mbps to more than 1Gbps.This paper in-troduces an experimental fiber optic MAN.The topology of this MAN is an open looped dualbus,and the data rate at each bus is 155.520 Mbps.We apply ATM technique and modified802.6 DQDB MAC protocol,using universal packet switching.The cell format is completelycompatible with B-ISDN cell.Through gateway the MAN can be interconnected with theBroadband Data Microwave Network,VSAT,Satellite Broadcast TV System,and Ether-net.There are up to 254 nodes connecting to the network,and the distance between two ad-jacent nodes covers more than 5 kilometers.We use 1.3μm SMF as the transmission medi-um.This paper emphasizes on the design and implementation of the Medium Access Control(MAC)Protocol.