基于链路分析法的复合隐蔽通道检测

在研究隐蔽通道的检测方法时,可以将隐蔽通道分成两大类：单一隐蔽通道和复合隐蔽通道。复合隐蔽通道具有了跨越多主机的特点,简单的主机入侵检测体系结构很难对此进行检测,而数据融合技术可以有效地解决这个问题。文中提出了基于数据融合思想的链路分析法,并对复合隐蔽通道的特点、链路分析法检测复合隐蔽通道的理论以及软件的设计进行描述。     

石化设备故障诊断构件设计

我国石化企业成本竞争越来越激烈,设备利用率高、运行周期长的企业将获得明显的成本优势.故障诊断是设备管理的重要内容.本文对石化设备故障诊断系统的诊断模型、故障诊断构件化软件设计、诊断数据库管理等作了深入研究,在此基础上完成了石化设备故障诊断系统模块,并已作为设备管理综合决策系统的一部分在扬子石化、安庆石化中实施.     

基于NGN技术的石化企业通信专网设计与实现

国内大型石化企业的信息网络系统往往包括企业网络系统、通信专网系统、社区宽带系统等多套独立的子系统。随着企业信息网络系统变得日益庞大而复杂,出现了设备老化、业务扩展难、数据无法共享、管理效率低等问题,急需对企业通信专网进行升级改造。本文针对某石化企业的通信专网现状,采用下一代网络(Next Generation Network,NGN)体系对通信专网进行了规划设计,并利用NGN体系中软交换核心技术进行建设和实现。整个系统分二期建设,在一期建设中建立软交换核心层网络,将现有用户逐步转换为软交换用户,实现程控交换机的退网。二期建设则在数据中心进行软交换第二核心节点的建设,实现与企业网整合。采用3层核心交换机组成软交换承载网核心层,进而实现软交换组网的建设。还对关键设备的承载能力进行核算,测算出软交换的用户数。实践表明基于NGN技术的通信专网系统打破了企业信息通信网络的孤岛格局,优化了网络资源配置,能够为企业带来较好的效益,也为类似企业提供了借鉴经验。     

流程企业CIMS的工程应用

结合安庆石化CIMS总体设计 ,介绍了AQ -CIMS的目标、架构和技术路线。详细叙述了流程企业CIMS的体系结构、系统功能、集成、支撑环境以及关键技术和解决途径。     

弱点相关图生成算法及在信息系统弱点修补中的应用

本文给出了基于单调性假设、正向深度优先的弱点相关图生成算法（VCGA）,并建立弱点相关矩阵,该方法能够很好的分析多主机、多弱点网络系统的安全性,并解决了攻击图不适合处理大型网络系统的问题。举例说明了如何利用VCGA分析复杂网络系统安全性的方法及其在网络系统弱点修补中的应用。     

深度防御的企业网络

企业在日常的信息化管理中,必须通过合理有效的安全措施,来避免由于网络安全而带来的不必要的经济损失.本文通过分析企业网络系统安全的现状,结合企业的具体管理需求给出企业网络安全实现的目标,阐述了企业安全网络的设计与实现方法,并着重论述了阻止对企业业务网络主机的攻击的设计方法.     

大型石化企业的网络设计

本描述了石化企业内部网络系统的结构设计及造型。     

浅析企业网设计

本文站在企业信息化战略规划的高度,详细阐述了组建企业集成网络系统的设计流程、开发特点和规范,根据网络设计的原则,以及网络的性能指标特点,结合现代较新的网络技术,万兆以太网主干技术,提出了现代企业网络的设计所采用的技术和方法,并通过实际案例分析,对中铝广西分公司网络升级做出了初略的评估及建议。本文对于企业级组网具有一定的技术意义。     

一种双网络总线接口模块故障实时检测的硬件设计与实现

现有的机载单总线接口模块当网络总线通信故障时,主机系统无法获取模块及交联电路的状态信息,模块表面上看起来就像黑匣子一样无法访问,给主机系统带来了潜在的安全隐患,因此双网络总线接口模块的设计对于机载产品的故障检测具有重要的意义。该文设计了一种基于FC(Fibre Channel,光纤通道)和CAN的双网络总线接口模块,能够有效地完成接口模块的故障实时检测,提升了系统的测试性和维修性。     

新建企业的计算机网络规划

企业信息系统的建设是一项复杂的系统工程,它包含了网络、主机、服务器、操作系统、数据库、应用系统等多个组成部分。网络系统是整个系统信息交换互联的基础平台,如何构建一整套“稳定、高效、安全”的网络系统是在进行信息化建设中所要面对的首要任务。尤其是新建企业网络规划的好坏,将对企业未来信息化发展起到至关重要的作用。结合自己工作的实际情况,浅谈我公司的网络规划。     

Topology design of switched enterprise networks using a fuzzy simulated evolution algorithm

The topology design of switched enterprise networks (SENs) is a hard constrained combinatorial optimization problem. The problem consists of deciding the number, types, and locations of the network active elements (hubs, switches, and routers), as well as the links and their capacities. Several conflicting objectives such as monetary cost, network delay, and maximum number of hops have to be optimized to achieve a desirable solution. Further, many of the desirable features of a network topology can best be expressed in linguistic terms, which is the basis of fuzzy logic. In this paper, we present an approach based on Simulated Evolution algorithm for the design of SEN topology. The overall cost function has been developed using fuzzy logic. Several variants of the algorithm are proposed and compared together via simulation and experimental results are provided.     

企业园区三层网络架构的设计与实现

本文对某企业原有网络的不足进行了分析,重点阐述利用Cisco交换机构建该企业园区网络的核心层、汇聚层、接入层三层网络架构的设计与实施和网络光缆线路扩展改造方案的实施.     

Management,control, and design of integrated networks with real-time dynamic routing

Integrated real-time dynamic routing (IRR) networks provide dynamic routing features for multiple classes-of-service on an integrated transport network. In this paper it is shown that IRR networks allow reduced network management costs since with real-time dynamic routing a number of network operations are simplified or eliminated. These simplifications include eliminating the storage of voluminous routing tables in the network switches, eliminating the calculation of routing tables in network design, simplifying the routing administration operations which require downloading new routing information to the network, and eliminating the automatic rerouting function in on-line traffic management. A new bandwidth allocation technique is described here which is based on the optimal solution of a network bandwidth allocation model for IRR networks. The model achieves significant improvement in both the average network blocking and node pair blocking distribution when the network is in a congested state such as under peak-day loads. In a paper to appear in the next Journal issue we further describe a new algorithm for the transport design of IRR networks which achieves near-optimal capacity engineering. These optimization techniques attain significant capital cost reductions and network performance improvements by properly modeling the more efficient operation of IRR networks.     

LAN,ISLN与PRE—ISDN互连的一体网络

一体网络含有两层意义：１）多个专用网络变为单一网络；２）单一网络中每种业务都与原亚的专用网络中的使用完全一样，且可以和专用网的业务无隙互通。ＩＳＬＮ是ＬＡＮ中增加电话功能而实现的，它是单位内部的一体化网络。     

主机和网络设备：分类,产品及其容错问题

本文针对计算机通信网络（计算机网络）中的主机和主要网络设备（包括集线器、路由器和交换机）的大量现有产品，提出了多种分类方法。按不同的分类法对设备进行分类，既有利于深刻理解它们的工作原理，掌握其结构上的特点，又有利于新产品的研制。文章还讨论了提高网络可信性所必须解决的如下容错问题：计算机网络可信性评估与分配、网络节点计算机的容错结构、容错计算机在网络中的应用实例分析、网络软件的实时容错结构以及网络通信协议及其容错机制。     

石油化工企业信息化建设策略分析

计算机网络及通信技术的高速发展,推动着企业技术改造和进步。石油化工企业是流程型企业,实现企业生产经营信息高度集成,导入应用流程概念和原理开发流程概念,有利于企业通过信息网络及时掌握国内外市场信息,实现企业信息化建设。本文从石油化工企业的现状切入,根据石油化工企业现有形势和要求,用流程思想指导石油化工企业信息化建设。     

Formalization and configuration methodology for high-radix combined switches

In large switch-based interconnection networks, increasing the switch radix results in a decrease in the total number of network components, and consequently the overall cost of the network can be significantly reduced. Moreover, high-radix switches are an attractive option to improve the network performance in terms of latency since hop count is also reduced. However, there are some difficulties related to integration scale to design such switches. In this paper we present and formalize an interesting alternative for building high-radix switches going beyond the integration scale bounds. The idea basically consists in combining several current smaller switches to obtain switches having greater number of ports. This strategy will remain valid as the scale of integration keeps evolving. Although simple, this strategy raises key design challenges in order to these high-radix switches achieve the best performance. The resultant internal structure of these switches becomes an important design decision, and an arbitrary selection may produce a significant performance degradation. For this reason, we also propose a general methodology to configure in an optimal way the internal switch structure and apply it to a particular case in order to show how it works. The resultant switch configurations are evaluated in order to show the real potential of our proposal.     

Obtaining the optimal configuration of high-radix Combined switches

High-radix switches reduce network cost and improve network performance, especially in large switch-based interconnection networks. However, there are some problems related to the integration scale to implement such switches in a single chip. An interesting alternative for building high-radix switches consists of combining several current smaller single-chip switches to obtain switches with a greater number of ports. A key design issue of this kind of high-radix switches is the internal switch configuration, specifically, the correspondence between the ports of these high-radix switches and the ports of their smaller internal single-chip switches. In this paper we use artificial intelligence and data mining techniques in order to obtain the optimal internal configuration of all the switches in the network of large supercomputers running parallel applications. Simulation results show that using the resultant switch configurations, it is possible to achieve similar performance as with single-chip switches with the same radix, which would be unfeasible with the current integration scale.     

VPN和VoIP技术在企业数据网和电话网融合中的应用与实现

本文阐述了在企业内实现"二网合一"的技术途径和具体实施方法,提供了在公共网络中建立企业专用网的解决方案。接着以分布广泛的电力施工企业组网为例,介绍了如何在企业原有的网络基础上组建VPN,并在其上实现IP语音电话的方法。     

企业网络安全结构设计

在电子政务和电子商务应用快速发展的今天,信息安全问题越来越突出。该文主要从技术因素的角度阐述了如何进行安全的网络结构设计。结合企业网络的实际情况,采用模块化的设计理念,把企业网络分成两个部分:企业园区网络和企业边界网络,分析其中关键技术。