Secure quality of service handling: SQoSH

Proposals for programmable network infrastructures, such as active networks and open signaling, provide programmers with access to network resources and data structures. The motivation for providing these interfaces is accelerated introduction of new services, but exposure of the interfaces introduces many new security risks. We describe some of the security issues raised by active networks. We then describe our secure active network environment (SANE) architecture. SANE was designed as a security infrastructure for active networks, and was implemented in the SwitchWare architecture. SANE restricts the actions that loaded modules can perform by restricting the resources that can be named; this is further extended to remote invocation by means of cryptographic credentials. SANE can be extended to support restricted control of quality of service in a programmable network element. The Piglet lightweight device kernel provides a “virtual clock” type of scheduling discipline for network traffic, and exports several tuning knobs with which the clock can be adjusted. The ALIEN active loader provides safe access to these knobs to modules that operate on the network element. Thus, the proposed SQoSH architecture is able to provide safe, secure access to network resources, while allowing these resources to be managed by end users needing customized networking services. A desirable consequence of SQoSH's integration of access control and resource control is that a large class of denial-of-service attacks, unaddressed solely with access control and cryptographic protocols, can now be prevented     

HLA战场虚拟环境仿真框架研究

高层体系结构(HLA)的出现为分布式仿真提供了新的技术支撑．有效地利用HLA为虚拟战场环境仿真服务,需对战场环境的描述方法和开发方案进行系统的研究．分析了基于HLA构造分布式虚拟战场环境的优越性,提出了有利于提高仿真逼真度、增强用户沉浸感的新的战场环境描述方法,给出了分布式虚拟战场环境研究框架,重点讨论了开发所涉及的几个关键问题,包括联邦成员、系统结构、仿真对象模型(SOM)和联邦对象模型(FOM)．实验和系统联调表明,该分布式虚拟战场环境仿真系统可以实现与其他作战实体仿真成员的正确交互,基本满足作战仿真需求．     

An evolvable ATM-based video network design supporting multipleaccess network technologies

This article describes an overall video network architecture with primary focus on the ATM subnetwork. The ATM subnetwork provides efficient switching capability for providing constant bit rate and variable bit rate video communication services. The ATM subnetwork can support multiple access networks like hybrid fiber coax (HFC), asymmetric digital subscriber line (ADSL), and fiber to the curb (FTTC). A broadband network controller is presented as the external controller for the ATM subnetwork which performs the functions of the session/network manager and the ATM-based connection management. The initial deployment of video is likely to be permanent virtual connection (PVC)-based, so a dynamic PVC-based scenario is described. The ATM switch architecture presented here has been optimized to support video applications. An evolution to the switched virtual connection environment and support of multiple services over the ATM subnetwork is also addressed. Traffic management schemes are discussed which provide the negotiated quality of service to the connections     

WCDMA系统中无线接入网建模的研究

本文主要讨论了第三代移动通信WCDMA系统无线接入网（RAN）建模中的几个关键模型的建立，包括典型业务模型和多小区模型，同时在分析WCDMA系统无线接入网结构的基础上，建立了WCDMA系统多业务、多小区的仿真平台，并对这种多业务、多小区情况下的系统容量进行了探讨。     

基于Agent的复杂系统建模与仿真研究

基于Agent建模与仿真克服了传统的建模技术存在的不足,为复杂系统研究提供了新的思路.在基于Agent的复杂系统建模方法分析的基础上,结合信息对抗环境下护航舰艇编队防空作战系统实例,设计了各个仿真Agent实体的模型结构,采用HLA/RTI作为多Agent仿真环境的支撑环境,在此基础上给出了系统仿真的逻辑结构和仿真流程...     

Analysis of Temperature in Phase Change Memory Scaling

We analyze constant-voltage isotropic and non-isotropic scaling issues for phase change memory (PCM) based on electrothermal physics. Various analytical and simulation models of general and typical PCM cells that support the analysis is also provided. The analysis shows that the maximum temperature in the PCM cell, which is a key parameter for PCM operation, is independent of geometrical sizes and depends only on the voltage and material properties. This leads to the minimum programming voltage concept, which is determined by material properties of the phase change material. Constant-voltage scaling, electrothermal modeling, ovonic unified memory (OUM), phase change memory (PCM, phase change random access memory, PRAM), proximity disturbance, thermal disturbance.     

DCNA Higher Level Protocols

This paper explains a philosophy for modeling the higher level communication functions into a network architecture for heterogeneous computer networks called Data Communication Network Architecture (DCNA), the logical structure of the architecture, and several protocols based on it. To specify higher level protocols among computers of different types, DCNA defines a logical model of a computer network consisting of three submodels: the basic model, the logical network model, and the virtual network model. The basic model represents a logical view of the network resources, e.g., processing power, files, data bases, I/O devices, and a layered structure for the basic mechanisms for accessing such resources, which incorporate the concept of sublevels as well as levels. The logical network model describes the mechanisms for unified management of network resources. The virtual network model describes the mechanisms for using network resources. The. common use of network resources, by several sets of interrelated applications is made easier by treating the logical network and the virtual network separately. These models form the basis for the stipulation of higher level protocols, such as network management protocols, message transfer protocols, virtual terminal protocols, and virtual file system protocols.     

雷达电讯虚拟样机构建与仿真技术研究

基于模型的系统工程(MBSE)是工业4. 0 的核心特征之一。借鉴MBSE 的思想,给出了雷达研发全流程中不同形态的电讯虚拟样机的内涵、作用和模型。提出了支持概念样机、功能样机和工程样机的协同仿真平台架构,研究了多领域专业仿真方法以及模型开发和管理两项关键技术。以机载火控雷达功能样机为例,形象展示了虚拟样机的建模、仿真与评估方法。基于虚拟样机的建模、仿真与虚拟验证手段将是复杂电子系统研制的新模式。     

Torus网络中基于中心距离的完全自适应路由算法

Torus网络凭借其优越的结构特性,引起了工业界和学术界的广泛关注.高效、无死锁的路由算法设计是互连网络研究的一个重要方面.针对Torus网络实现自适应路由所需虚通道数目多的缺点,提出了自适应路由算法Gear,该算法基于中心距离的方法来限制虚通道的使用,在虚切通交换下仅需两条虚通道即可为Torus网络提供无死锁自适应路由.通过仿真对所提算法的有效性进行了验证,结果表明,在同等情况下算法Gear的性能较经典的维序路由和Duato协议具有非常明显的优势.     

A signaling architecture for wireless ATM access networks

A multiservice wireless Asynchronous Transfer Mode (ATM) access system is considered from a signaling protocol viewpoint. In an attempt to generalize and extend results and experiences obtained from the specification, design, and implementation of fixed ATM‐based access networks, we extend the concept of the broadband V interface (referred to as VB) for application to wireless ATM access networks. The proposed architecture follows the signaling structure of Broadband ISDN (B‐ISDN) User–Network Interface (UNI), thus offering the possibility for integration of the wireless ATM access system into fixed B‐ISDN. It is shown that the use of the proposed access signaling architecture provides cost effective implementations without degrading the agreed Quality of Service (QoS), and simplifies call/connection and handover control. The evaluation of the proposed access signaling protocol structure yields results that fall within acceptable ATM signaling performance measures. A performance comparison of our approach with an alternative access signaling configuration is also carried out to quantify the relative gains. This revised version was published online in August 2006 with corrections to the Cover Date.     

属性驱动的多策略网格授权机制研究

网格系统存在大量动态的访问用户和每个自治域有自己的访问控制策略,因此具有动态性和自治性的访问控制需求。基于属性的访问控制和网格系统的授权需求提出了一个属性驱动的多策略访问控制模型（MP_ABAC,Multipolicy_supported Access Control based on Attribute）并基于继承和封装思想和可扩展访问控制标记语言（XACML）设计了MP_ABAC授权框架。框架在网格访问控制中存在很大的优势,为网格授权系统提供了开放的架构,且能够集成第三方基于属性的授权系统。     

SUCCESS: a next-generation hybrid WDM/TDM optical access network architecture

In this paper, the authors propose a next-generation hybrid WDM/TDM optical access network architecture called Stanford University aCCESS or SUCCESS. This architecture provides practical migration steps from current-generation time-division multiplexing (TDM)-passive optical network (PONs) to future WDM optical access networks. The architecture is backward compatible for users on existing TDM-PONs, while simultaneously capable of providing upgraded high-bandwidth services to new users on DWDM-PONs through advanced WDM techniques. The SUCCESS architecture is based on a collector ring and several distribution stars connecting the CO and the users. A semipassive configuration of the Remote Nodes (RNs) enables protection and restoration, making the network resilient to power failures. A novel design of the OLT and DWDM-PON ONUs minimizes the system cost considerably: 1) tunable lasers and receivers at the OLT are shared by all ONUs on the network to reduce the transceiver count and 2) the fast tunable lasers not only generate downstream data traffic but also provide DWDM-PON ONUs with optical CW bursts for their upstream data transmission. Results from an experimental system testbed support the feasibility of the proposed SUCCESS architecture. Also, simulation results of the first SUCCESS DWDM-PON MAC protocol verify that it can efficiently provide bidirectional transmission between the OLT and ONUs over multiple wavelengths with a small number of tunable transmitters and receivers.     

A-MAC: Adaptive Medium Access Control for Next Generation Wireless Terminals

Next generation (NG) wireless networks are envisioned to provide high bandwidth to mobile users via bandwidth aggregation over heterogeneous wireless architectures. NG wireless networks, however, impose challenges due to their architectural heterogeneity in terms of different access schemes, resource allocation techniques as well as diverse quality of service requirements. These heterogeneities must be captured and handled dynamically as mobile terminals roam between different wireless architectures. However, to address these challenges, the existing proposals require either a significant modification in the network structure and in base stations or a completely new architecture, which lead to integration problems in terms of implementation costs, scalability and backward compatibility. Thus, the integration of the existing medium access schemes, e.g., CSMA, TDMA and CDMA, dictates an adaptive and seamless medium access control (MAC) layer that can achieve high network utilization and meet diverse quality of service (QoS) requirements. In this paper, an adaptive medium access control (A-MAC) layer is proposed to address the heterogeneities posed by the NG wireless networks. A-MAC introduces a two-layered MAC framework that accomplishes the adaptivity to both architectural heterogeneities and diverse QoS requirements. A novel virtual cube concept is introduced as a unified metric to model heterogeneous access schemes and capture their behavior. Based on the virtual cube concept, A-MAC provides architecture-independent decision and QoS based scheduling algorithms for efficient multi-network access. A-MAC performs seamless medium access to multiple networks without requiring any additional modifications in the existing network structures. It is shown via extensive simulations that A-MAC provides adaptivity to the heterogeneities in NG wireless networks and achieves high performance.     

A layered modeling and simulation architecture for agent-basedsystem development

The paper proposes a layered architectural framework to support agent based system development in a collaborative, multidisciplinary engineering setting. This architecture is viewed from two distinct perspectives. First, the environment must enable agent based modeling and simulation. Second, it should support concurrent (team oriented) engineering. The main focus is on the proposed layered architecture delineating various needs of an agent based system, thus supporting incremental specification design, implementation, and testing. In our discussions, we distinguish between performing agents and simulated agents. The former refers to agents as they are performing their tasks in real-world settings. The latter refers to agents that have their behavior simulated in a virtual environment. In these terms, the proposed framework is intended to form the basis for environments that support development of agents, in both performance and simulation modes, as well as in hybrid combination (both performing and simulated agents interacting at the same time). The proposed framework is a step toward realization of agent based systems under the umbrella of the simulation based acquisition (SBA) initiative of the US Department of Defense     

Terminal-to-network communication in an ATM-based ISDN

This paper addresses the topic of signalling and connectionless data transfer virtual channels in ATM at the UNI. It recapitulates on the access signalling support in narrowband ISDN, as a representative of an STM network and the predecessor of the coming broadband ISDN. Also, the influence of the customer premises network architecture is taken into account. From there, it is investigated in which ways these principles can be extended, into a general access infrastructure and access configuration management for signalling and connectionless services in the ATM-based broadband ISDN. Some possible implications for the internal architecture of the CPN and the network are discussed. This brings some insight into the restrictions which standardization of these principles at the UNI may bring along for the architecture.     

Theories and models for Internet quality of service

We survey advances in theories and models for Internet quality of service (QoS). We start with the theory of network calculus, which lays the foundation for support of deterministic performance guarantees in networks, and illustrate its applications to integrated services, differentiated services, and streaming media playback delays. We also present mechanisms and architecture for scalable support of guaranteed services in the Internet, based on the concept of a stateless core. Methods for scalable control operations are also discussed. We then turn our attention to statistical performance guarantees and describe several new probabilistic results that can be used for a statistical dimensioning of differentiated services. Lastly, we review proposals and results in supporting performance guarantees in a best effort context. These include models for elastic throughput guarantees based on TCP performance modeling, techniques for some QoS differentiation without access control, and methods that allow an application to control the performance it receives, in the absence of network support     

基于Creator的视景仿真建模技术

根据三维视景仿真场景实时性要求高的特点，对三维模型的建模及优化提出了更高要求。综合利用Multigen Creator和Terra Vista等软件，以“MQ-1捕食者”无人机为例，在虚拟现实技术的基础上，利用构造无人机模型过程中的自由度(DOF)控制技术、模型数据库优化技术和纹理映射技术等关键技术来实现对无人机动态实体模型的构建和任务飞行的模拟。对以无人机为主体的虚拟环境视景仿真建模关键技术进行研究，实现对无人机等视景仿真模型的构建、虚拟环境的建模，生成高效、优化的模型，为后续实时仿真应用以及在三维模型的优化以及地形、影像和地理信息系统(GIS)数据的相互精确匹配上，打下坚实基础。