矿井串联系统模糊可靠性理论的研究

矿井系统不仅具有随机性，而且同时也具有模糊性，在系统分析与设计过程中应同时考虑这两种不确定性因素的影响。文中提出了模糊故障、模糊功能、系统模糊运营状态和广义可靠度等概念，并在此基础上提出了求单元及串联系统的生产能力、营运费用、应急维修费用、修理时间和广义可靠度等指标的方法，建立了使系统平均生产能力最大的系统最优运营策略的数学模型。     

IP骨干网络中QoS技术的分析

简要介绍了IP骨干网络中对QoS技术的定义和其影响因素,并对目前几种比较流行的QoS模型进行了对比.最后重点介绍了DiffServ模型的工作机制,组成部件和相应的实现算法.通过对一些算法的描述,有助于为对从事网质量传输研究或者传输模型实现的相关人员提供一些感性的认识.     

我国奶牛场收入政策及发展

叙述了我国目前乳业概况，就经济体制转变以来，我国的奶生产情况，牧场收入，政府所起的作用及乳业今后面临的挑战等问题进行了分析和论述。     

后工业时代米兰单功能城区更新

在物化的形式上,解释米兰城市发展历史上的单功能城区的改造意义,并由此分析单功能城区更新的经验:单功能城区向混合居住模式的更新是发展方向;城区的功能重新定义对城区发展有重要意义;以新的建设为基础,发展城区自身的特色,做到城市在更新和特色之间的协调。     

The Tenet experience and the design of protocols for integrated-services internetworks

The research done by the Tenet Group in multimedia networking has reached a point where it may be useful to reflect on the significance of its results for the current debate on how integrated-services internetworks should be designed. Such reflections constitute the main subject of this paper. The principles of the work and the conclusions reached so far by the Tenet researchers are discussed in the light of the conflict between the two major technologies being proposed to build future information infrastructures: namely, the Internet and the ATM technologies. The Tenet approach suggests one feasible way for resolving the conflict to the advantage of all the users of those infrastructures. This paper discusses various fundamental aspects of integrated-services network design: the choice of the service model, the type of charging policy to be adopted, and the selection of a suitable architecture.     

小世界网络中的删边扩容效应

不同于无标度网络,小世界网络中体现负载特性的介数分布和体现连接特征的度分布这两种结构差异很大,依据这个差异,我们提出了有效的删边扩容方法并进行了仿真实验,并进一步从容量与最大介数的关系理论分析确证了实验结果.接着,我们分析了小世界网络中介数分布的差异性与删边扩容效果的相关性,把基于介数的基尼系数变化用于度量删边扩容的效果,指出了结构差异是导致删边扩容效应的必要条件.还指出了无论从容量与介数的定义、仿真结果、结构差异与删边扩容效果的关系来看,都应该从介数入手来实现删边扩容方法,这种方法反直觉,有很多变种,并且实现方便、节省成本,作为一类新的路由策略可以广泛地应用于各类通信网络和交通网络等领域.     

支持公平服务的CICQ分层混合调度策略

为到达业务提供性能保障是衡量一个交换系统性能的重要参考.针对现有联合输入交叉点排队交换结构(CICQ)调度策略缺乏基于流的服务质量保障,探讨了在CICQ交换结构实施基于"流"调度的可能性,提出了一种能够为到达业务流的提供公平服务的分层混合调度策略(HSFS).HSFS采用分层的混合调度机制,每个输入、输出端口可独立地进行变长分组交换,其复杂度为O(1),具有良好可扩展特性.理论分析结果表明,HSFS无需加速便能为到达业务提供时延上限、速率和公平性保障.最后,基于SPES对HSFS的性能进行了评估.     

Achieving fair service with a hybrid scheduling scheme for CICQ switches

Providing performance guarantees for arriving traffic flows has become an important measure for today’s routing and switching systems. However, none of current scheduling algorithms built on CICQ (combined input and cross-point buffered) switches can provide flow level performance guarantees. Aiming at meeting this requirement, the feasibility of implementing flow level scheduling is discussed thoroughly. Then, based on the discussion, it comes up with a hybrid and stratified fair scheduling (HSFS) scheme, which is hierarchical and hybrid, for CICQ switches. With HSFS, each input port and output port can schedule variable length packets independently with a complexity of O(1). Theoretical analysis show that HSFS can provide delay bound, service rate and fair performance guarantees without speedup. Finally, we implement HSFS in SPES (switch performance evaluation system) to verify the analytical results.     

A novel logic-based automatic approach to constructing compliant security policies

It is significant to automatically detect and resolve the incompliance in security policy.Most existing works in this field focus on compliance verification,and few of them provide approaches to automatically correct the incompliant security policies.This paper proposes a novel approach to automatically transform a given security policy into a compliant one.Given security policy Π and delegation policy M declared by logic programs,the approach automatically rewrites Π into a new one ΠM which is compliant with M and is readable by the humans.We prove that the algorithm is sound and complete under noninterference assumption.Formally,we show that the security policy query evaluation algorithm with conflict and unsettlement resolution still works very well on ΠM.The approach is automatic,so it doesn’t require a administrator with excess abilities.In this sense,our proposal can help us to save much manpower resource in security management and improves the security assurance abilities.     

数据交换传输安全模型设计及实现

在WebServices应用中,保证数据交换传输的安全性和完整性非常重要,而当前技术下的WebServices却在安全性方面存在着一些不足。为了保护在WebServices中消息交换的安全传递,文中通过X．509证书实现了WebServices消息签名和加密,阐述了利用WSE3．0构建安全WebServices的方法,设计并实现了一种基于策略的可扩展系统安全架构,其中采用了证书管理、数据同步以及用户校验三种机制。在实现架构的过程中,将安全通信主体分为Web服务端和服务应用端,并通过对系统安全性的分析验证,证明此架构具有良好的安全性。随着信息化技术的发展,安全架构中安全策略的应用会越来越广泛和深入。