With the exponential increase in information security risks,ensuring the safety of aircraft heavily relies on the accurate performance of risk assessment.However,experts possess a limited understanding of fundamental ...With the exponential increase in information security risks,ensuring the safety of aircraft heavily relies on the accurate performance of risk assessment.However,experts possess a limited understanding of fundamental security elements,such as assets,threats,and vulnerabilities,due to the confidentiality of airborne networks,resulting in cognitive uncertainty.Therefore,the Pythagorean fuzzy Analytic Hierarchy Process(AHP)Technique for Order Preference by Similarity to an Ideal Solution(TOPSIS)is proposed to address the expert cognitive uncertainty during information security risk assessment for airborne networks.First,Pythagorean fuzzy AHP is employed to construct an index system and quantify the pairwise comparison matrix for determining the index weights,which is used to solve the expert cognitive uncertainty in the process of evaluating the index system weight of airborne networks.Second,Pythagorean fuzzy the TOPSIS to an Ideal Solution is utilized to assess the risk prioritization of airborne networks using the Pythagorean fuzzy weighted distance measure,which is used to address the cognitive uncertainty in the evaluation process of various indicators in airborne network threat scenarios.Finally,a comparative analysis was conducted.The proposed method demonstrated the highest Kendall coordination coefficient of 0.952.This finding indicates superior consistency and confirms the efficacy of the method in addressing expert cognition during information security risk assessment for airborne networks.展开更多
SDN (Software Defined Network) has many security problems, and DDoS attack is undoubtedly the most serious harm to SDN architecture network. How to accurately and effectively detect DDoS attacks has always been a diff...SDN (Software Defined Network) has many security problems, and DDoS attack is undoubtedly the most serious harm to SDN architecture network. How to accurately and effectively detect DDoS attacks has always been a difficult point and focus of SDN security research. Based on the characteristics of SDN, a DDoS attack detection method combining generalized entropy and PSOBP neural network is proposed. The traffic is pre-detected by the generalized entropy method deployed on the switch, and the detection result is divided into normal and abnormal. Locate the switch that issued the abnormal alarm. The controller uses the PSO-BP neural network to detect whether a DDoS attack occurs by further extracting the flow features of the abnormal switch. Experiments show that compared with other methods, the detection accurate rate is guaranteed while the CPU load of the controller is reduced, and the detection capability is better.展开更多
空基网络通信应用中,采用恒包络波形体制可以降低设备特别是功放的复杂度,因此高效的成形偏移四相相移键控(SOQPSK)信号非常适合于空基网络。但是机载通信中多普勒频移较大,在低信噪比和短突发条件下,SOQPSK相干接收机必须有精确的载波...空基网络通信应用中,采用恒包络波形体制可以降低设备特别是功放的复杂度,因此高效的成形偏移四相相移键控(SOQPSK)信号非常适合于空基网络。但是机载通信中多普勒频移较大,在低信噪比和短突发条件下,SOQPSK相干接收机必须有精确的载波频率和相位同步才能获得较好的性能。针对低信噪比和短突发场景,提出了基于Turbo乘积码(TPC)编码的扩频SOQPSK宽带网络波形,并设计了导频与数据帧结构,利用译码器输出的软信息来改善载波同步的性能,通过迭代操作和联合解调、解扩,增强了系统的同步性能。仿真结果表明,在误码率为10-6时所需Eb/N0为3.65 d B,达到了波形设计指标要求。展开更多
当前,航空作战平台的发展已逐步由传统“机群”向智能“集群”过渡,因此,依托航空平台信息网络体系,实现用户信息需求与通信资源的有效匹配,成为航空集群通信交互的主要模式。基于航空信息网络在集群作战背景下的应用需求,介绍了航空集...当前,航空作战平台的发展已逐步由传统“机群”向智能“集群”过渡,因此,依托航空平台信息网络体系,实现用户信息需求与通信资源的有效匹配,成为航空集群通信交互的主要模式。基于航空信息网络在集群作战背景下的应用需求,介绍了航空集群及航空信息网络的研究进展,总结了现有航空信息网络在集群作战应用中存在的问题,阐述了软件定义网络(Software Defined Networking,SDN)技术为其带来的性能优势,并结合集群空战中通信服务调度实现场景分析了亟待解决的关键科学问题。展开更多
Technology trends such as Software-Defined Networking (SDN) are transforming networking services in terms of flexibility and faster deployment times. SDN separates the control plane from the data plane with its centra...Technology trends such as Software-Defined Networking (SDN) are transforming networking services in terms of flexibility and faster deployment times. SDN separates the control plane from the data plane with its centralised architecture compared with the distributed approach used in other management systems. However, management systems are still required to adapt the new emerging SDN-like technologies to address various security and complex management issues. Simple Network Management Protocol (SNMP) is the most widespread management protocol implemented in a traditional Network Management System (NMS) but has some limitations with the development of SDN-like services. Hence, many studies have been undertaken to merge the SDN-like services with traditional network management systems. Results show that merging SDN with traditional NMS systems not only increases the average Management Information Base (MIB) polling time but also creates additional overheads on the network. Therefore, this paper proposes a dynamic scheme for MIB polling using an additional MIB controller agent within the SDN controller. Our results show that using the proposed scheme, the average polling time can be significantly reduced (i.e., faster polling of the MIB information) and also requires very low overhead because of the small sized OpenFlow messages used during polling.展开更多
基金supported by the Fundamental Research Funds for the Central Universities of CAUC(3122022076)National Natural Science Foundation of China(NSFC)(U2133203).
文摘With the exponential increase in information security risks,ensuring the safety of aircraft heavily relies on the accurate performance of risk assessment.However,experts possess a limited understanding of fundamental security elements,such as assets,threats,and vulnerabilities,due to the confidentiality of airborne networks,resulting in cognitive uncertainty.Therefore,the Pythagorean fuzzy Analytic Hierarchy Process(AHP)Technique for Order Preference by Similarity to an Ideal Solution(TOPSIS)is proposed to address the expert cognitive uncertainty during information security risk assessment for airborne networks.First,Pythagorean fuzzy AHP is employed to construct an index system and quantify the pairwise comparison matrix for determining the index weights,which is used to solve the expert cognitive uncertainty in the process of evaluating the index system weight of airborne networks.Second,Pythagorean fuzzy the TOPSIS to an Ideal Solution is utilized to assess the risk prioritization of airborne networks using the Pythagorean fuzzy weighted distance measure,which is used to address the cognitive uncertainty in the evaluation process of various indicators in airborne network threat scenarios.Finally,a comparative analysis was conducted.The proposed method demonstrated the highest Kendall coordination coefficient of 0.952.This finding indicates superior consistency and confirms the efficacy of the method in addressing expert cognition during information security risk assessment for airborne networks.
基金supported by the Hebei Province Innovation Capacity Improvement Program of China under Grant No.179676278Dthe Ministry of Education Fund Project of China under Grant No.2017A20004
文摘SDN (Software Defined Network) has many security problems, and DDoS attack is undoubtedly the most serious harm to SDN architecture network. How to accurately and effectively detect DDoS attacks has always been a difficult point and focus of SDN security research. Based on the characteristics of SDN, a DDoS attack detection method combining generalized entropy and PSOBP neural network is proposed. The traffic is pre-detected by the generalized entropy method deployed on the switch, and the detection result is divided into normal and abnormal. Locate the switch that issued the abnormal alarm. The controller uses the PSO-BP neural network to detect whether a DDoS attack occurs by further extracting the flow features of the abnormal switch. Experiments show that compared with other methods, the detection accurate rate is guaranteed while the CPU load of the controller is reduced, and the detection capability is better.
文摘空基网络通信应用中,采用恒包络波形体制可以降低设备特别是功放的复杂度,因此高效的成形偏移四相相移键控(SOQPSK)信号非常适合于空基网络。但是机载通信中多普勒频移较大,在低信噪比和短突发条件下,SOQPSK相干接收机必须有精确的载波频率和相位同步才能获得较好的性能。针对低信噪比和短突发场景,提出了基于Turbo乘积码(TPC)编码的扩频SOQPSK宽带网络波形,并设计了导频与数据帧结构,利用译码器输出的软信息来改善载波同步的性能,通过迭代操作和联合解调、解扩,增强了系统的同步性能。仿真结果表明,在误码率为10-6时所需Eb/N0为3.65 d B,达到了波形设计指标要求。
文摘当前,航空作战平台的发展已逐步由传统“机群”向智能“集群”过渡,因此,依托航空平台信息网络体系,实现用户信息需求与通信资源的有效匹配,成为航空集群通信交互的主要模式。基于航空信息网络在集群作战背景下的应用需求,介绍了航空集群及航空信息网络的研究进展,总结了现有航空信息网络在集群作战应用中存在的问题,阐述了软件定义网络(Software Defined Networking,SDN)技术为其带来的性能优势,并结合集群空战中通信服务调度实现场景分析了亟待解决的关键科学问题。
文摘Technology trends such as Software-Defined Networking (SDN) are transforming networking services in terms of flexibility and faster deployment times. SDN separates the control plane from the data plane with its centralised architecture compared with the distributed approach used in other management systems. However, management systems are still required to adapt the new emerging SDN-like technologies to address various security and complex management issues. Simple Network Management Protocol (SNMP) is the most widespread management protocol implemented in a traditional Network Management System (NMS) but has some limitations with the development of SDN-like services. Hence, many studies have been undertaken to merge the SDN-like services with traditional network management systems. Results show that merging SDN with traditional NMS systems not only increases the average Management Information Base (MIB) polling time but also creates additional overheads on the network. Therefore, this paper proposes a dynamic scheme for MIB polling using an additional MIB controller agent within the SDN controller. Our results show that using the proposed scheme, the average polling time can be significantly reduced (i.e., faster polling of the MIB information) and also requires very low overhead because of the small sized OpenFlow messages used during polling.