基于多Agent内核级网络数据包的研究与应用

采用多Agent对网络数据包在Windows内核级进行有关的研究．使用NDIS中间驱动接口技术路线，提高对TCP／IP网络数据包的处理速度，减少丢包率，提高Windows操作系统下的网络数据包的处理效率，可以应用于Windows操作系统下软件，如分布式防火墙（内核级）、VPN客户端及服务器端软件、VLAN软件、Windows网络数据加密等。解决了以前对Windows网络数据包的处理只局限于应用程序接口层．如Winsock层次．对Windows网络数据包的处理效率不高．对Windows网络数据的拦截不彻底，不能在网络底层进行拆包和封包等问题。     

IP网络的高速监视

分析了高速IP网络的特点，并针对典型的VPN(Vinual Private Network)协议(IPSec和PPTP)设计了基于Linux操作系统的IP网络高速监视器，该监视器能对高速IP网络中的VPN通信进行实时监视和实时干扰．试验结果表明该高速监视器能够处理800Mbp／s的流量，能够对VPN协议(IPsec、PPTP)进行实时阻断；从接收IP数据包→策略匹配→发现该数据包违规→发送干扰数据包耗时约为0．055ms；     

基于 HMM的分布式拒绝服务攻击检测方法

在分布式拒绝服务（DDoS）攻击时，网络中数据包的统计特征会显示出异常．检测这种异常是一项重要的任务．一些检测方法基于数据包速率的假设，然而这种假设在一些情况下是不合理的．另一些方法基于IP地址和数据报长度的统计特征，但这些方法在IP地址欺骗攻击时检测率急剧下降．提出了一种基于隐马尔可夫模型（HMM）的DDoS异常检测方法．该方法集成了4种不同的检测模型以对付不同类型的攻击．通过从数据包中提取TCP标志位，UDP端口和ICMP类型及代码等属性信息建立相应的TCP，UDP和ICMP的隐马尔可夫模型，用于描述正常情况下网络数据包序列的统计特征．然后用它来检测网络数据包序列，判断是否有DDoS攻击．实验结果显示该方法与其他同类方法相比通用性更好、检测率更高．     

头部压缩技术在无线虚拟专用网中的应用研究

无线虚拟专用网技术解决了移动办公员工希望通过移动终端随时随地访问公司局域网的问题。但是用来实现VPN技术的IPsec安全机制引起了数据包的增大,这是在无线网络中所不希望看到的。针对该问题,研究传统的头部压缩机制只压缩外部IP头的不足,并提出应用头部压缩技术对IPsec数据包内外部IP头进行压缩的机制。该机制在IP数据包未进行ESP封装之前先运用IPHC算法进行IP头部压缩处理,然后再进行ESP封装,最后再对ESP封装的数据包的外部IP头和ESP头运用ROHC算法进行压缩处理。分析结果表明：该机制有效地减小数据包大小,从而降低无线虚拟专用网中的丢包率和传输代价。     

网络连接，轻松把握

功能简介 Network Statistics能显示当前网络连接状态．随着系统的启动而自动运行．可以显示电脑发送和收到的数据包数量、当前使用的网络协议和DNS服务器等内容。能更加直观地以MB或是KB来显示数据量；此外，许多功能如释放和更新本机IP地址等都不必依靠Ipconfig命令来实现，操作也非常简单。     

一种跨平台的实时TCP/IP协议栈设计

为提高异构系统下网络通信的实时性,提出一种跨平台的实时TCP/IP协议栈(RTTCP/IP)实现方法。运用操作系统适配技术屏蔽底层数据处理的差异性,增强协议栈的可移植性和可扩展性;通过简化TCP/IP协议栈的结构,减少协议栈对系统资源的占用;采用内存映射技术,将内核空间地址映射到用户空间,避免用户与内核间的数据拷贝操作;引入基于时分多址的介质访问机制和数据包优先级策略,防止网络传输冲突,解决数据包优先级倒置问题。测试结果表明,RTTCP/IP实现方法能够减少系统开销和通信延迟,提高系统实时性和稳定性。     

移动IP穿越NAT网关的研究与实现

在分析移动IP隧道数据包和NAT一起工作会出现问题的基础上，描述了基于IP-in-UDP隧道(简称UDP隧道封装)封装移动IP穿越NAT的解决机制，并给出了在企业虚拟专用网中移动IP穿越IPSec／NAT集成网关的一种实现。     

嵌入式Linux虚拟网卡驱动中数据包的提取及转发技术

网络设备是完成用户数据包在网络媒介上发送和接收的设备,它将上层协议传递下来的数据包以特定的媒介访问控制方式进行发送,并将接收到的数据传递给上层协议。提出了一种在Linux系统下编写虚拟网卡驱动程序,并在虚拟网卡驱动中提取出数据包,再根据事先约定好的规则对数据包做处理,最后通过Linux内核socket机制将数据包发送出去的技术。在工程项目中,采用此种技术,可以实现在虚拟网卡驱动中抓取出数据包,然后根据具体要求处理及转发数据包。     

IP VPN标准化进行时

IP VPN(虚拟专用网)是指通过开放的IP网络建立私有数据传输通道(即隧道),将远程的分支办公室、商业伙伴、移动办公人员等连接起来的一种专用网络技术。对企业而言,IP VPN可以替代传统租用线来连接计算机或局域网等。而任何IP VPN业务都是基于隧道技术实现的,隧道机制(如何建立私有数据传输通道并传输数据的方法)是VPN实施的关键。因此,IP VPN的标准化主要任务之一就是隧道机制的标准化。 参照OSI(Open System Internet)七层模型,我们把根据三层(网络层)地址信息转发数据包的协议,称为三层隧道协议如GRE、IPSec,把根据二层(数据链路层)地址信息转发数据包的协议,称为二层隧道协议如L2TP、MPLS。目前,GRE、IPSec、L2TP和MPLS等4种隧道协议是最流行的隧道协议标准。虽然这4种隧道协议提供了VPN的不同实施方法,但又可以结合使用,给用户提供更大的灵活性和可靠性。     

IP返回跟踪DoS攻击的三种数据包标记算法

阐述了一种以数据包标记为基础的IP返回跟踪机制，并根据该机制给出了对付DoS(拒绝服务)攻击的三种数据包标记算法。     

Only connect: teaching, technology and telesis

Abstract This paper describes an approach to the design of interactive multimedia materials being developed in a European Community project. The developmental process is seen as a dialogue between technologists and teachers. This dialogue is often problematic because of the differences in training, experience and culture between them. Conditions needed for fruitful dialogue are described and the generic model for learning design used in the project is explained.     

European Community policy and the market

Abstract This paper starts with some reflections on the policy considerations and priorities which are shaping European Commission (EC) research programmes. Then it attempts to position the current projects which seek to capitalise on information and communications technologies for learning in relation to these priorities and the apparent realities of the marketplace. It concludes that while there are grounds to be optimistic about the contribution EC programmes can make to the efficiency and standard of education and training, they are still too technology driven.     

一种自适应子融合集成多分类器方法

融合集成方法已经广泛应用在模式识别领域,然而一些基分类器实时性能稳定性较差,导致多分类器融合性能差,针对上述问题本文提出了一种新的基于多分类器的子融合集成分类器系统。该方法考虑在度量层融合层次之上通过对各类基多分类器进行动态选择,票数最多的类别作为融合系统中对特征向量识别的类别,构成一种新的自适应子融合集成分类器方法。实验表明,该方法比传统的分类器以及分类融合方法识别准确率明显更高,具有更好的鲁棒性。     

煤矿井下安全监控分站的设计及其仿真实现

为了设计一种具有低成本、低功耗、易操作、功能强且可靠性高的煤矿井下安全分站,针对煤矿安全生产实际,文章提出了采用MCS-51系列单片机为核心、具有CAN总线通信接口的煤矿井下安全监控分站的设计方案;首先给出煤矿井下安全监控分站的整体构架设计,然后着重阐述模拟量输入信号处理系统的设计过程,最后说明单片机最小系统及其键盘、显示、报警、通信等各个组成部分的设计;为验证设计方案的可行性与有效性,使用Proteus软件对设计内容进行仿真验证,设计的煤矿井下安全监控分站具有瓦斯、温度等模拟量参数超标报警功能和电机开停、风门开闭等开关量指示功能;仿真结果表明:设计的煤矿井下安全监控分站具有一定的实际应用价值.     

Avoiding semantic and temporal gaps in developing software intensive systems

Development of software intensive systems (systems) in practice involves a series of self-contained phases for the lifecycle of a system. Semantic and temporal gaps, which occur among phases and among developer disciplines within and across phases, hinder the ongoing development of a system because of the interdependencies among phases and among disciplines. Such gaps are magnified among systems that are developed at different times by different development teams, which may limit reuse of artifacts of systems development and interoperability among the systems. This article discusses such gaps and a systems development process for avoiding them.     

Designing economic np control charts: A programmed simulation approach

This paper presents control charts models and the necessary simulation software for the location of economic values of the control parameters. The simulation program is written in FORTRAN, requires only 10K of main storage, and can run on most mini and micro computers. Two models are presented - one describes the process when it is operating at full capacity and the other when the process is operating under capacity. The models allow the product quality to deteriorate to a further level before an existing out-of-control state is detected, and they can also be used in situations where no prior knowledge exists of the out-of-control causes and the resulting proportion defectives.     

The development of robot art

Going through a few examples of robot artists who are recognized worldwide, we try to analyze the deepest meaning of what is called “robot art” and the related art field definition. We also try to highlight its well-marked borders, such as kinetic sculptures, kinetic art, cyber art, and cyberpunk. A brief excursion into the importance of the context, the message, and its semiotics is also provided, case by case, together with a few hints on the history of this discipline in the light of an artistic perspective. Therefore, the aim of this article is to try to summarize the main characteristics that might classify robot art as a unique and innovative discipline, and to track down some of the principles by which a robotic artifact can or cannot be considered an art piece in terms of social, cultural, and strictly artistic interest. This work was presented in part at the 13th International Symposium on Artificial Life and Robotics, Oita, Japan, January 31–February 2, 2008     

View-based model-driven architecture for enhancing maintainability of data access services

In modern service-oriented architectures, database access is done by a special type of services, the so-called data access services (DAS). Though, particularly in data-intensive applications, using and developing DAS are very common today, the link between the DAS and their implementation, e.g. a layer of data access objects (DAOs) encapsulating the database queries, still is not sufficiently elaborated, yet. As a result, as the number of DAS grows, finding the desired DAS for reuse and/or associated documentation can become an impossible task. In this paper we focus on bridging this gap between the DAS and their implementation by presenting a view-based, model-driven data access architecture (VMDA) managing models of the DAS, DAOs and database queries in a queryable manner. Our models support tailored views of different stakeholders and are scalable with all types of DAS implementations. In this paper we show that our view-based and model driven architecture approach can enhance software development productivity and maintainability by improving DAS documentation. Moreover, our VMDA opens a wide range of applications such as evaluating DAS usage for DAS performance optimization. Furthermore, we provide tool support and illustrate the applicability of our VMDA in a large-scale case study. Finally, we quantitatively prove that our approach performs with acceptable response times.     

Explanation and prediction: an architecture for default and abductive reasoning

Although there are many arguments that logic is an appropriate tool for artificial intelligence, there has been a perceived problem with the monotonicity of classical logic. This paper elaborates on the idea that reasoning should be viewed as theory formation where logic tells us the consequences of our assumptions. The two activities of predicting what is expected to be true and explaining observations are considered in a simple theory formation framework. Properties of each activity are discussed, along with a number of proposals as to what should be predicted or accepted as reasonable explanations. An architecture is proposed to combine explanation and prediction into one coherent framework. Algorithms used to implement the system as well as examples from a running implementation are given.     

A pragmatic multi-method investigation of discrepant technological events: Coping,attributions, and ‘accidental’ learning

Discrepant technological events or situations that entail a problem, a misunderstanding or a difficulty with the Information Technology (IT) being employed, are common in the workplace, and can lead to frustration and avoidance behaviors. Little is known, however, about how individuals cope with these events. This paper examines these events by using a multi-method pragmatic approach informed by coping theory. The results of two studies – a critical incident study and an experiment – serve to build and test, respectively, a theoretical model that posits that individuals use a variety of strategies when dealing with these events: they experience negative emotions, make external attributions, and adopt engagement coping strategies directed at solving the event, eventually switching to a disengagement coping strategy when they feel they have no control over the situation. Furthermore, users’ efforts may result in ‘accidental’ learning as they try to overcome the discrepant IT events through engagement coping. The paper ends with a discussion of the results in light of existing literature, future opportunities for research, and implications for practice.