热备份路由协议技术和应用

简略阐述了HSRP（hot standby routing protocol,热备份路由协议。给出了一个HSRP的应用实例和配置HSRP的一般步骤与原则。     

SPREAD: Improving network security by multipath routing in mobile ad hoc networks

We propose and investigate the SPREAD scheme as a complementary mechanism to enhance secure data delivery in a mobile ad hoc network. The basic idea is to transform a secret message into multiple shares, and then deliver the shares via multiple paths to the destination so that even if a certain number of message shares are compromised, the secret message as a whole is not compromised. We present the overall system architecture and discuss three major design issues: the mathematical model for the generation and reconstruction of the secret message shares, the optimal allocation of the message shares onto multiple paths in terms of security, and the multipath discovery techniques in a mobile ad hoc network. Our extensive simulation results justify the feasibility and the effectiveness of the SPREAD approach.

基于ARP协议的攻击原理分析

文章详细介绍了ARP协议的功能、分组格式和工作原理，分析了当前ARP协议所存在的安全性问题。重点讨论了利用ARP协议自身的安全缺陷进行网络攻击的多种实现方法以及这些攻击所带来的危害，其中包含了简单的IP地址冲突、窜改ARP缓冲等攻击方法和较为复杂的交换网络下的嗅探、截获连接、广泛的DOS等。最后，结合实际管理，给出了一些有效的安全防范措施并简单说明了它们的优缺点。     

一种Ad Hoc网络单径和多径路由的选择算法

主要分析了Ad Hoc网络中单径路由协议和多径路由协议的特点。从路由中断时所传输分组的丢失率角度考虑,提出了一种单径路由和多径路由的路由协议选择算法。该算法考虑了由于网络的动态拓扑导致链路频繁失效时,原有路由中各节点缓存的分组会被丢弃的特征,通过选择合适的路由协议,降低分组的丢失概率,提高网络效率。     

一种匿名的E-Mail认证协议

文章提出了一种通过匿名方式进行通信的E-Mail认证协议,该协议借助离线可信第三方(Off-line Trusted Third Party)传递电子邮件内容,既能保证邮件内容的私密性,又能保证通信主体的匿名性。协议分为主协议、取消协议和完成协议三部分,具有不可否认性、公平性和认证性等性质。     

Admission control on multipath routing in 802.11-based wireless mesh networks

Admission control (AC) is a mechanism for meeting bandwidth requirements of data transmissions. Early research on admission control for wireless mesh networks (WMNs) was centered around single-path routing. Compared to single-path routing, parallel multipath routing may offer more reliable network services and better load balancing. Applying admission control to multipath routing could further improve service quality, but it also faces a number of challenges. For example, transmission on one path may affect transmission on a neighboring path. Addressing these challenges, this paper presents an AC algorithm on parallel multipath routing for WMNs. In particular, we formulate an optimization problem for achieving the best service based on available bandwidth and bandwidth consumption of to-be-admitted data sessions. While solving this problem is a complex task, we devise an optimal algorithm for selecting two node-disjoint paths with rate allocation, and propose a distributed multipath routing and admission control protocol to achieve a near-optimal solution. Simulations show that MRAC is efficient and effective in meeting bandwidth requirements.     

基于位置的 Ad Hoc 路由协议现状及发展

基于位置的Ad Hoc路由协议因其消除了对拓扑存储的依赖性,降低了相关能耗,提升了网络性能,成为了学者们重点关注的研究领域。介绍了基于位置的Ad Hoc路由协议的概念,分析了几个典型的基础路由协议,总结了现阶段研究面临的问题,归纳了基于地理位置路由协议国内外研究现状及发展趋势。     

移动AdHoc网络中的TCP改进技术

近年来,有关移动Ad Hoc网络的关键技术研究已经取得了很大的进展,如何有效地提高其网络性能仍然是目前研究的热点问题。本文结合这种网络拓扑动态变化、路由易发生改变的特点,分析了传统TCP协议在应用上遇到的挑战,并从两个途径研究了针对TCP技术的各种改进方案,同时提出了今后可能的研究方向。     

A routing framework for providing robustness to node failures in mobile ad hoc networks

Nodes in a mobile ad hoc network are often vulnerable to failures. The failures could be either due to fading effects, battery drainage, or as a result of compromised nodes that do not participate in network operations. Intermittent node failures can disrupt routing functionalities. As such, it is important to provide redundancy in terms of providing multiple node-disjoint paths from a source to a destination. In line with this objective, we first propose a modified version of the widely studied ad hoc on-demand distance vector routing protocol to facilitate the discovery of multiple node-disjoint paths from a source to a destination. We find that very few of such paths can be found. Furthermore, as distances between sources and destinations increase, bottlenecks inevitably occur and thus, the possibility of finding multiple paths is considerably reduced. We conclude that it is necessary to place what we call reliable nodes (in terms of both being robust to failure and being secure) in the network to support efficient routing operations. We propose a deployment strategy that determines the positions and the trajectories of these reliable nodes such that we can achieve a framework for reliably routing information. We define a notion of a reliable path which is made up of multiple segments, each of which either entirely consists of reliable nodes, or contains a preset number of multiple paths between the end points of the segment. We show that the probability of establishing a reliable path between a random source and destination pair increases tremendously even with a small number of reliable nodes when we use our algorithm to appropriately position these reliable nodes.     

An enhanced scheme for mutual authentication for healthcare services

With the advent of state-of-art technologies, the Telecare Medicine Information System (TMIS) now offers fast and convenient healthcare services to patients at their doorsteps. However, this architecture engenders new risks and challenges to patients' and the server's confidentiality, integrity and security. In order to avoid any resource abuse and malicious attack, employing an authentication scheme is widely considered as the most effective approach for the TMIS to verify the legitimacy of patients and the server. Therefore, several authentication protocols have been proposed to this end. Very recently, Chaudhry et al. identified that there are vulnerabilities of impersonation attacks in Islam et al.'s scheme. Therefore, they introduced an improved protocol to mitigate those security flaws. Later, Qiu et al. proved that these schemes are vulnerable to the man-in-the-middle, impersonation and offline password guessing attacks. Thus, they introduced an improved scheme based on the fuzzy verifier techniques, which overcome all the security flaws of Chaudhry et al.'s scheme. However, there are still some security flaws in Qiu et al.'s protocol. In this article, we prove that Qiu et al.'s protocol has an incorrect notion of perfect user anonymity and is vulnerable to user impersonation attacks. Therefore, we introduce an improved protocol for authentication, which reduces all the security flaws of Qiu et al.'s protocol. We also make a comparison of our protocol with related protocols, which shows that our introduced protocol is more secure and efficient than previous protocols.     

因特网路由协议研究综述

路由器是因特网组网的关键设备,而路由器的主要功能是运行路由协议,并与其它路由器交换路由信息形成本机上的路由表,同时根据路由表的信息正确转发分组。在Internet中,路由协议至关重要,它直接影响网络的性能。近年来,路由协议领域中开展了大量的研究工作,有力地推动了Internet的发展。本总结了当今Internet上所使用的单播、组播、QoSR、移动等路由协议的研究现状,并分析了进一步的研究方向。     

Proactive mitigation of impact of wormholes and sinkholes on routing security in energy-efficient wireless sensor networks

Sensor networks are deployed in a variety of environments for unattended operation. In a hostile terrain, sensor nodes are vulnerable to node capture and cryptographic material compromise. Compromised nodes can be used for launching wormhole and sinkhole attacks in order to prevent sensitive data from reaching intended destinations. Our objective in this paper is mitigating the impact of undetected compromised nodes on routing. To this end, we develop metrics for quantifying risk of paths in a network. We then introduce a novel routing approach: Secure-Path Routing (SPR) that uses expected path risk as a parameter in routing. Quantified path risk values are used in routing to reduce traffic flow over nodes that have high expected vulnerability. Selecting low risk routes may lead to the choice of energy-expensive routes. Thus, we develop algorithms for balancing risk with other path selection parameters, including energy consumption. We conduct simulation experiments to evaluate the effectiveness of our approach and study the tradeoff between security and energy. Simulation shows that SPR can be quite effective at increasing traffic flow over legitimate routes and that the impact of SPR on network lifetime is negligible.

Internet中QoS路由算法研究现状及其展望

目前,许多有关支持QoS(服务质量）的研究主要着眼于调度、拥塞控制和资源预留,而对QoS路上研究得不多,文中先对QoS路由中的问题进行分类,再对当前研究的一些路由算法进行了归纳与分析,这些算法对于在Internet中实现QoS有着重要的指导意义。