With the expansion of network services,large-scale networks have progressively become common.The network status changes rapidly in response to customer needs and configuration changes,so network configuration changes ...With the expansion of network services,large-scale networks have progressively become common.The network status changes rapidly in response to customer needs and configuration changes,so network configuration changes are also very frequent.However,no matter what changes,the network must ensure the correct conditions,such as isolating tenants from each other or guaranteeing essential services.Once changes occur,it is necessary to verify the after-changed network.Whereas,for the verification of large-scale network configuration changes,many current verifiers show poor efficiency.In order to solve the problem ofmultiple global verifications caused by frequent updates of local configurations in large networks,we present a fast configuration updates verification tool,FastCUV,for distributed control planes.FastCUV aims to enhance the efficiency of distributed control plane verification for medium and large networks while ensuring correctness.This paper presents a method to determine the network range affected by the configuration change.We present a flow model and graph structure to facilitate the design of verification algorithms and speed up verification.Our scheme verifies the network area affected by obtaining the change of the Forwarding Information Base(FIB)before and after.FastCUV supports rich network attributes,meanwhile,has high efficiency and correctness performance.After experimental verification and result analysis,our method outperforms the state-of-the-art method to a certain extent.展开更多
MPEG 4 is a basic tool for interactivity and manipulation of video sequences. Video object segmentation is a key issue in defining the content of any video sequence, which is often divided into two steps: initial obj...MPEG 4 is a basic tool for interactivity and manipulation of video sequences. Video object segmentation is a key issue in defining the content of any video sequence, which is often divided into two steps: initial object segmentation and object tracking. In this paper, an initial object segmentation method for video object plane(VOP) generation using color information is proposed. Based on 3 by 3 linear templates, a cellular neural network (CNN) is used to implemented object segmentation. The Experimental results are presented to verify the efficiency and robustness of this approach.展开更多
软件定义网络(software defined network,SDN)是一种新兴的网络范式,其解耦了控制平面和数据平面,实现了网络管理的灵活性。然而,控制平面的逻辑集中化带来了新的挑战,即在各种故障情况下确保较高的可用性。文章在带内控制平面的前提下...软件定义网络(software defined network,SDN)是一种新兴的网络范式,其解耦了控制平面和数据平面,实现了网络管理的灵活性。然而,控制平面的逻辑集中化带来了新的挑战,即在各种故障情况下确保较高的可用性。文章在带内控制平面的前提下,提出一种控制平面恢复方法,该方法重复利用旧的控制路径规则,并建立相应的数学模型;最终提出一种考虑复用控制规则的树形恢复算法,并证明当控制路径以最短路径树的形式部署时,算法的近似度为3。实验结果表明,该方法具有较高的有效性。展开更多
The E-plane waveguide branch directional couplers are analyzed by a method which combines the multimode network theory with rigorous mode-matching approach. The electromagnetic field components are expanded by the sup...The E-plane waveguide branch directional couplers are analyzed by a method which combines the multimode network theory with rigorous mode-matching approach. The electromagnetic field components are expanded by the superposition of LSEx modes rather than TE and TM modes in the mode-matching procedure. Meanwhile, the electromagnetic problem is transferred into the network problem through the mode-matching treatment. It is shown that the present method has the advantages of simplicity and less computation without affecting the accuracy of the calculation.展开更多
In a translucent network scenario, development of an optical control plane (OCP) that is aware of the location and number of available regenerators and all-optical wavelength converters (AOWCs) is of paramount importa...In a translucent network scenario, development of an optical control plane (OCP) that is aware of the location and number of available regenerators and all-optical wavelength converters (AOWCs) is of paramount importance. However, current generalized multiprotocol label switching (GMPLS) protocol suite does not consider the distribution of regenerator and AOWC availability information to all the network nodes. In this paper, we propose a novel optical control plane (OCP) architecture that 1) disseminates information about network components (i.e. regenerators and AOWCs) to all the network nodes, and 2) evaluates candidate routes which use fewest amounts of network components. Performance of the proposed OCP is compared with a recently proposed hybrid OCP approach in terms of blocking performance, number of deployed components and lightpath establishment setup times. The obtained simulation results show that the proposed OCP approach demonstrates low connection blocking and establishes lightpaths by 1) minimizing the overall network cost owing to the deployment of minimum total number of network components, and 2) demonstrating acceptable lightpath establishment setup times at all traffic loads. Further, the proposed OCP methodology is compatible and suitable for controlling the operations of a novel electro-optical hybrid translucent node which is a latency efficient technology capable of delivering a cost effective implementation suitable for large scale deployment.展开更多
网络遥测是一种新型的网络测量技术,具有实时性强、准确性高、开销低的特点。现有网络遥测技术存在无法收集多粒度网络数据、无法有效存储大量原始网络数据、无法快速提取及生成网络遥测信息、无法利用内核态及用户态特性设计网络遥测...网络遥测是一种新型的网络测量技术,具有实时性强、准确性高、开销低的特点。现有网络遥测技术存在无法收集多粒度网络数据、无法有效存储大量原始网络数据、无法快速提取及生成网络遥测信息、无法利用内核态及用户态特性设计网络遥测方案等问题。为此,提出了一种融合内核态及用户态的、基于遥测数据图和同步控制块的多粒度、可扩展、覆盖全网的网络遥测机制(a nEtwork telemetry mechAnism based on telemetry data Graph in kerneL and usEr mode,EAGLE)。EAGLE设计了一种能够收集多粒度数据且数据平面上灵活可控的网络遥测数据包结构,用于获取上层应用所需的数据。此外,为快速存储、查询、统计、聚合网络状态数据,实现网络遥测数据包所需遥测数据的快速提取与生成,EAGLE提出了一种基于遥测数据图及同步控制块的网络遥测信息生成方法。在此基础上,为了最大化网络遥测机制中网络遥测数据包的处理效率,EAGLE提出了融合内核态及用户态特性的网络遥测信息嵌入架构。在Open vSwitch上实现了EAGLE方案并进行了测试,测试结果表明,EAGLE能够收集多粒度数据并快速提取与生成遥测数据,且仅增加极少量的处理时延及资源占用率。展开更多
软件定义网络(Soft Defined Network,SDN)交换机作为数据转发与策略执行的设备,恶意攻击者通过侵蚀SDN交换机对网络进行隐秘而致命的攻击,严重影响用户的端到端通信质量。首先提出了一种边缘交换机被攻击者劫持后的数据窃取攻击过程,可...软件定义网络(Soft Defined Network,SDN)交换机作为数据转发与策略执行的设备,恶意攻击者通过侵蚀SDN交换机对网络进行隐秘而致命的攻击,严重影响用户的端到端通信质量。首先提出了一种边缘交换机被攻击者劫持后的数据窃取攻击过程,可以逃避网络范围内的异常检测,并证明了这种攻击的隐蔽性。为了抵御此种攻击,提出了一种流信息一致性检测方法,将主机信息纳入一致性检测中,并基于Ryu控制器在mininet平台上进行实验。实验结果表明,防御方法在抵御边缘交换机攻击的同时不会带来过多的负载增加。展开更多
物联网(Internet of Things,IoT)即服务(IoT as a Service,IoTaaS)与6G分布式核心网的融合将成为未来IoT发展的重要趋势,亟需一种分布式自治组网架构支持IoT中较为普遍的公网与专网混合组网以及多子网对等组网。针对混合组网中复合网络...物联网(Internet of Things,IoT)即服务(IoT as a Service,IoTaaS)与6G分布式核心网的融合将成为未来IoT发展的重要趋势,亟需一种分布式自治组网架构支持IoT中较为普遍的公网与专网混合组网以及多子网对等组网。针对混合组网中复合网络功能存储库(Network Repository Function,NRF)的服务注册与发现流程信令交互复杂导致时延较大的问题,设计了一种基于分布式自治数据面技术的复合NRF互联系统,提出了基于JSON语义的网络功能信息存储方法和基于B+树状结构的索引方法,降低了数据索引时间复杂度,简化了跨网络节点的多层网元数据获取流程。展开更多
基金supported by the Fundamental Research Funds for the Central Universities(2021RC239)the Postdoctoral Science Foundation of China(2021 M690338)+3 种基金theHainan Provincial Natural Science Foundation of China(620RC562,2019RC096,620RC560)the Scientific Research Setup Fund of Hainan University(KYQD(ZR)1877)the Program of Hainan Association for Science and Technology Plans to Youth R&D Innovation(QCXM201910)the National Natural Science Foundation of China(61802092,62162021).
文摘With the expansion of network services,large-scale networks have progressively become common.The network status changes rapidly in response to customer needs and configuration changes,so network configuration changes are also very frequent.However,no matter what changes,the network must ensure the correct conditions,such as isolating tenants from each other or guaranteeing essential services.Once changes occur,it is necessary to verify the after-changed network.Whereas,for the verification of large-scale network configuration changes,many current verifiers show poor efficiency.In order to solve the problem ofmultiple global verifications caused by frequent updates of local configurations in large networks,we present a fast configuration updates verification tool,FastCUV,for distributed control planes.FastCUV aims to enhance the efficiency of distributed control plane verification for medium and large networks while ensuring correctness.This paper presents a method to determine the network range affected by the configuration change.We present a flow model and graph structure to facilitate the design of verification algorithms and speed up verification.Our scheme verifies the network area affected by obtaining the change of the Forwarding Information Base(FIB)before and after.FastCUV supports rich network attributes,meanwhile,has high efficiency and correctness performance.After experimental verification and result analysis,our method outperforms the state-of-the-art method to a certain extent.
文摘MPEG 4 is a basic tool for interactivity and manipulation of video sequences. Video object segmentation is a key issue in defining the content of any video sequence, which is often divided into two steps: initial object segmentation and object tracking. In this paper, an initial object segmentation method for video object plane(VOP) generation using color information is proposed. Based on 3 by 3 linear templates, a cellular neural network (CNN) is used to implemented object segmentation. The Experimental results are presented to verify the efficiency and robustness of this approach.
文摘软件定义网络(software defined network,SDN)是一种新兴的网络范式,其解耦了控制平面和数据平面,实现了网络管理的灵活性。然而,控制平面的逻辑集中化带来了新的挑战,即在各种故障情况下确保较高的可用性。文章在带内控制平面的前提下,提出一种控制平面恢复方法,该方法重复利用旧的控制路径规则,并建立相应的数学模型;最终提出一种考虑复用控制规则的树形恢复算法,并证明当控制路径以最短路径树的形式部署时,算法的近似度为3。实验结果表明,该方法具有较高的有效性。
文摘The E-plane waveguide branch directional couplers are analyzed by a method which combines the multimode network theory with rigorous mode-matching approach. The electromagnetic field components are expanded by the superposition of LSEx modes rather than TE and TM modes in the mode-matching procedure. Meanwhile, the electromagnetic problem is transferred into the network problem through the mode-matching treatment. It is shown that the present method has the advantages of simplicity and less computation without affecting the accuracy of the calculation.
文摘In a translucent network scenario, development of an optical control plane (OCP) that is aware of the location and number of available regenerators and all-optical wavelength converters (AOWCs) is of paramount importance. However, current generalized multiprotocol label switching (GMPLS) protocol suite does not consider the distribution of regenerator and AOWC availability information to all the network nodes. In this paper, we propose a novel optical control plane (OCP) architecture that 1) disseminates information about network components (i.e. regenerators and AOWCs) to all the network nodes, and 2) evaluates candidate routes which use fewest amounts of network components. Performance of the proposed OCP is compared with a recently proposed hybrid OCP approach in terms of blocking performance, number of deployed components and lightpath establishment setup times. The obtained simulation results show that the proposed OCP approach demonstrates low connection blocking and establishes lightpaths by 1) minimizing the overall network cost owing to the deployment of minimum total number of network components, and 2) demonstrating acceptable lightpath establishment setup times at all traffic loads. Further, the proposed OCP methodology is compatible and suitable for controlling the operations of a novel electro-optical hybrid translucent node which is a latency efficient technology capable of delivering a cost effective implementation suitable for large scale deployment.
文摘网络遥测是一种新型的网络测量技术,具有实时性强、准确性高、开销低的特点。现有网络遥测技术存在无法收集多粒度网络数据、无法有效存储大量原始网络数据、无法快速提取及生成网络遥测信息、无法利用内核态及用户态特性设计网络遥测方案等问题。为此,提出了一种融合内核态及用户态的、基于遥测数据图和同步控制块的多粒度、可扩展、覆盖全网的网络遥测机制(a nEtwork telemetry mechAnism based on telemetry data Graph in kerneL and usEr mode,EAGLE)。EAGLE设计了一种能够收集多粒度数据且数据平面上灵活可控的网络遥测数据包结构,用于获取上层应用所需的数据。此外,为快速存储、查询、统计、聚合网络状态数据,实现网络遥测数据包所需遥测数据的快速提取与生成,EAGLE提出了一种基于遥测数据图及同步控制块的网络遥测信息生成方法。在此基础上,为了最大化网络遥测机制中网络遥测数据包的处理效率,EAGLE提出了融合内核态及用户态特性的网络遥测信息嵌入架构。在Open vSwitch上实现了EAGLE方案并进行了测试,测试结果表明,EAGLE能够收集多粒度数据并快速提取与生成遥测数据,且仅增加极少量的处理时延及资源占用率。
文摘软件定义网络(Soft Defined Network,SDN)交换机作为数据转发与策略执行的设备,恶意攻击者通过侵蚀SDN交换机对网络进行隐秘而致命的攻击,严重影响用户的端到端通信质量。首先提出了一种边缘交换机被攻击者劫持后的数据窃取攻击过程,可以逃避网络范围内的异常检测,并证明了这种攻击的隐蔽性。为了抵御此种攻击,提出了一种流信息一致性检测方法,将主机信息纳入一致性检测中,并基于Ryu控制器在mininet平台上进行实验。实验结果表明,防御方法在抵御边缘交换机攻击的同时不会带来过多的负载增加。
文摘物联网(Internet of Things,IoT)即服务(IoT as a Service,IoTaaS)与6G分布式核心网的融合将成为未来IoT发展的重要趋势,亟需一种分布式自治组网架构支持IoT中较为普遍的公网与专网混合组网以及多子网对等组网。针对混合组网中复合网络功能存储库(Network Repository Function,NRF)的服务注册与发现流程信令交互复杂导致时延较大的问题,设计了一种基于分布式自治数据面技术的复合NRF互联系统,提出了基于JSON语义的网络功能信息存储方法和基于B+树状结构的索引方法,降低了数据索引时间复杂度,简化了跨网络节点的多层网元数据获取流程。