隧道模型下MTU问题的研究

提出了一种IPv4-IPv6-Tunnel的特定隧道模型,并针对该模型的实例就IPv4和IPv6两种接入情形,着重讨论了其中隧道MTU的发现和错误处理机制,给出相关比较。描述了模型的实现和MTU测试结果,总结了其可能的应用。     

基于Intel XScale IXP425处理器的嵌入式IPv6防火墙设计与实现

为解决防火墙对IPv6协议的兼容及对内部网络之间安全的保障问题。本文设计实现了基于Intel Xscale IXP425处理器的嵌入式IPv6防火墙。该防火墙能通过WEB实现远程管理．对IPv6网络包和IPv4网络包均可进行良好的过滤。防火墙能够判断出网络包的协议类型,分别加以处理,实行动态包过滤,并可以解决IPv6分片攻击问题。通过实际设定过滤规则,对防火墙在IPv6和IPv4下的工作情况进行测试,验证了防火墙的准确性和高效性。     

基于Intel XSeale IXP425处理器的嵌入式IPv6防火墙设计与实现

为解决防火墙对IPv6协议的兼容及对内部网络之间安全的保障问题。本文设计实现了基于Intel Xscale IXP425处理器的嵌入式IPv6防火墙。该防火墙能通过WEB实现远程管理．对IPv6网络包和IPv4网络包均可进行良好的过滤。防火墙能够判断出网络包的协议类型,分别加以处理,实行动态包过滤,并可以解决IPv6分片攻击问题。通过实际设定过滤规则,对防火墙在IPv6和IPv4下的工作情况进行测试,验证了防火墙的准确性和高效性。     

IPv6网络中一种基于路由协议的PMTU发现机制

提出了一种IPv6网络中基于路由协议的PMTU发现机制。通过对路由协议的扩展,在原有的路由信息中携带路由的MTU值,使路由的MTU在网络中传递,执行PMTU探测的主机最多只需要向其第一跳路由器发送一次探测包。使用ns2仿真工具模拟测试和在实际设备上进行拓扑及业务测试的实验结果表明,该机制可行,与传统PMTU机制相比,在探测次数及探测带来的连接时延上有极大的改进。     

基于Linux主机IPv6防火墙的设计与实现

针对频繁发生的“网络黑客”事件，创新地设计与实现了基于Linux主机的IPv6防火墙，主要论述了数据包捕获模块、数据处理模块、规则设置模块、数据库查询模块和流量统计模块的设计与实现。首先阐述了信息安全及防火墙的重要性，给出防火墙的概念和原理：然后分析基于Linu）（主机的IPv6防火墙系统总体设计思路．最后论述基于Linux主机的IPV6防火墙的设计与实现，并详述其具体实现的各个模块。     

IPv6端到端双程时延和包丢失率探测技术

介绍网络路径性能参数的概念,分析现有的IPv6网络路径性能的探测机制和技术。重点研究一种使用主动探测技术、基于ICMPv6的双程时延和包丢失率探测技术。给出详细的技术方案并进行编程实现。实验结果表明,所提出的探测方法是可行和有效的。     

嵌套移动网络中基于位置更新的隧道MTU发现机制

针对嵌套移动网络中的最大传输单元(MTU)问题,在分析现有方案不足和网络结构特点的基础上,建立了隧道MTU模型,提出一种基于位置更新的隧道MTU发现机制。该机制在家乡代理存储相互间的路径MTU值,利用路由器通告、绑定更新等信令消息携带MTU信息,在位置更新过程中实现了节点对隧道MTU的快速安全跟踪,并适用于多穴配置和多种路由优化方案。仿真分析表明,相比现有方案,该机制能够降低报文延迟和传输开销,提升带宽利用率。     

防火墙防护能力检测技术

针对目前常见的包过滤防火墙，文中论述了其保护主机的探测技术，包括防火墙的存在性、类型和ACL规则探测，以及绕过防火墙对保护主机进行连通性、端口探测的相关技术。对防火墙安全测试，检测防火墙的防护能力具有一定的实用价值。     

移动IPv6数据穿越防火墙问题的研究

和移动IPv4相比,移动IPv6取消了外地代理,移动节点和对端节点通信可以进行路由优化,直接通信,提高了数据传输效率。但现阶段防火墙不能正确处理移动IPv6数据包。本文在分析了移动IPv6通信原理和防火墙原理的基础上,着重研究了移动IPv6数据在穿越防火墙时出现的各种问题,并提出了一种使用非对称密钥并增加3个自定义选项的解决方案。     

基于多类型数据包的IPv6防火墙防护能力评测方法

为测试IPv6防火墙对潜在IPv6网络威胁的防护能力,研究IPv6防火墙防护能力评测方法。通过对IPv6协议的研究,本文构造了针对ICMPv6、单一扩展报头、多扩展报头、分片、地址范围的五类存在安全隐患的测试数据包,构建了C/S架构的防火墙测试框架,并基于框架和测试数据包构建了用于各类测试的独立测试模块,搭建了可用于测试有状态防火墙的测试环境,并提供了相应的测试方法。利用本文所提出的方法,对思科ASA5505防火墙进行了测试,发现了它的一些优点与不足。     

Only connect: teaching, technology and telesis

Abstract This paper describes an approach to the design of interactive multimedia materials being developed in a European Community project. The developmental process is seen as a dialogue between technologists and teachers. This dialogue is often problematic because of the differences in training, experience and culture between them. Conditions needed for fruitful dialogue are described and the generic model for learning design used in the project is explained.     

European Community policy and the market

Abstract This paper starts with some reflections on the policy considerations and priorities which are shaping European Commission (EC) research programmes. Then it attempts to position the current projects which seek to capitalise on information and communications technologies for learning in relation to these priorities and the apparent realities of the marketplace. It concludes that while there are grounds to be optimistic about the contribution EC programmes can make to the efficiency and standard of education and training, they are still too technology driven.     

一种自适应子融合集成多分类器方法

融合集成方法已经广泛应用在模式识别领域,然而一些基分类器实时性能稳定性较差,导致多分类器融合性能差,针对上述问题本文提出了一种新的基于多分类器的子融合集成分类器系统。该方法考虑在度量层融合层次之上通过对各类基多分类器进行动态选择,票数最多的类别作为融合系统中对特征向量识别的类别,构成一种新的自适应子融合集成分类器方法。实验表明,该方法比传统的分类器以及分类融合方法识别准确率明显更高,具有更好的鲁棒性。     

Avoiding semantic and temporal gaps in developing software intensive systems

Development of software intensive systems (systems) in practice involves a series of self-contained phases for the lifecycle of a system. Semantic and temporal gaps, which occur among phases and among developer disciplines within and across phases, hinder the ongoing development of a system because of the interdependencies among phases and among disciplines. Such gaps are magnified among systems that are developed at different times by different development teams, which may limit reuse of artifacts of systems development and interoperability among the systems. This article discusses such gaps and a systems development process for avoiding them.     

基于QTE的蒙古文显示机制研究与实现

蒙古语言是中国蒙古族使用的通用语言,由于蒙古文区别于其他文字的书写方式和其自身变形机制等特点,在很多通用的文字处理引擎中都不被支持。在嵌入式产品开发与应用领域中Linux加QTE已经成为流行方式。该文给出了一种在QTE环境上实现基于标准Unicode的蒙古文点阵显示和变形算法, 并自定义了支持蒙古文的QTE组件,扩展了QTE功能,为在Linux加QTE方式的嵌入式体系结构中处理蒙古文提供了一种解决方法。     

Designing economic np control charts: A programmed simulation approach

This paper presents control charts models and the necessary simulation software for the location of economic values of the control parameters. The simulation program is written in FORTRAN, requires only 10K of main storage, and can run on most mini and micro computers. Two models are presented - one describes the process when it is operating at full capacity and the other when the process is operating under capacity. The models allow the product quality to deteriorate to a further level before an existing out-of-control state is detected, and they can also be used in situations where no prior knowledge exists of the out-of-control causes and the resulting proportion defectives.     

基于AD9626的模拟信号采集存储卡设计

自然界的绝大部分信号都是以模拟的形式存在,因此模拟信号的采集转换存储在数字时代十分关键。文章讨论了在雷达信号处理领域基于AD9626的AD采集存储卡的设计原理、硬件结构和程序设计与芯片配置等问题,为今后相关领域的研究提供了可参考的方案。     

The development of robot art

Going through a few examples of robot artists who are recognized worldwide, we try to analyze the deepest meaning of what is called “robot art” and the related art field definition. We also try to highlight its well-marked borders, such as kinetic sculptures, kinetic art, cyber art, and cyberpunk. A brief excursion into the importance of the context, the message, and its semiotics is also provided, case by case, together with a few hints on the history of this discipline in the light of an artistic perspective. Therefore, the aim of this article is to try to summarize the main characteristics that might classify robot art as a unique and innovative discipline, and to track down some of the principles by which a robotic artifact can or cannot be considered an art piece in terms of social, cultural, and strictly artistic interest. This work was presented in part at the 13th International Symposium on Artificial Life and Robotics, Oita, Japan, January 31–February 2, 2008     

煤矿井下安全监控分站的设计及其仿真实现

为了设计一种具有低成本、低功耗、易操作、功能强且可靠性高的煤矿井下安全分站,针对煤矿安全生产实际,文章提出了采用MCS-51系列单片机为核心、具有CAN总线通信接口的煤矿井下安全监控分站的设计方案;首先给出煤矿井下安全监控分站的整体构架设计,然后着重阐述模拟量输入信号处理系统的设计过程,最后说明单片机最小系统及其键盘、显示、报警、通信等各个组成部分的设计;为验证设计方案的可行性与有效性,使用Proteus软件对设计内容进行仿真验证,设计的煤矿井下安全监控分站具有瓦斯、温度等模拟量参数超标报警功能和电机开停、风门开闭等开关量指示功能;仿真结果表明:设计的煤矿井下安全监控分站具有一定的实际应用价值.     

A human-computer interface for non-computer specialists

The COM teleconferencing system was designed to be easy to use for both beginners and people with much computer experience. A number of design choices in organizing the human-computer interface were considered very carefully. These design problems are not unique for teleconferencing applications, but will appear in many other developments of human-computer interfaces for non-computer specialists. This report discusses naming conventions, menu format, user commands, help facility and the treatment of ‘type ahead’ from the users.