网络安全防御系统的安全策略及系统框架研究

1 智能小区网络的特点 小区智能化主要体现在家庭交互信息宽带化、安防自动化和物业管理智能化等方面.计算机网络作为智能化系统的建设重点,必须要宽带化.在宽带网络的基础平台上,可以构筑多种应用系统,例如Internet接入、物业管理、社区服务等.     

无线完成最后接入

印度洋岛留尼旺岛(La Reunion)的无线传输应用项目是 Cegetel(法国私营电信运营商)为了扩充其在当地的 GSM 网络,并为用户提供优质的无线传输应用以及经济高效的接入服务。La Reunion 属于复杂多山的地形,铺设有线基础设施非常困难,Cegetel 希望通过宽带无线接入满足岛内用户的需要。La Reunion 项目需要建设包括 St.Denis.Le Port、St.Paul,Le Tampon 以及 St.Pierre 等五个市区的宽带无线接入(BWA)传输和接入网络,同时保证宽带无     

光载无线电技术(ROF)的应用

随着人们对无线宽带网络多媒体的要求越来越高,第四代无线网络接入技术在未来无线通信网络的应用方面的作用越来越大.在对ROF技术的基本原理和ROF关键技术进行论述的基础上,主要就其在网络融合以及应用方面进行了较为详细的阐述,以期对ROF技术的推广起到一定的促进作用.     

宽带应用时机已到

目前宽带建设存在宽带与窄带割裂发展的误区。有不少人认为宽带是全新的网络,它并不是在窄带基础上发展形成的,必须重新建网,因而各个网络运营商,接入商各自为政,自行发展,致使当前国内投入建设的宽带网络的接入技术种类繁多,难以相互衔接。对此有业内人士指出,ADSL、光纤接入、以太网接入、无线接入等各种形式并存,不仅将来市场整合困难,更重要的是,用户的利益根本无法保证。但是任何事物都是在历史的基础上前行的,宽带的发展自然不能脱离窄带网络的基础。目前中国的宽带商务应用应该是由窄带向宽带过渡,不是完全取代窄带,而是要在窄带的基础上发展。各个企业的种种努力,对宽带的美好憧憬,使人们逐渐感觉到,企业宽带应用的气息越来越逼近了。     

铁煤集团光纤宽带网络建设

在激烈的信息化市场竞争下,铁煤集团采用先进的GPON技术进行光纤宽带FTTB接入建设.本文主要介绍了铁煤集团光纤宽带网络建设的组网方案、建设方案.铁煤集团通过开展光纤宽带建设拓展了市场,从而保障企业健康、稳定、持续的发展.     

探讨宽带无线Mesh网络的关键技术与应用

随着网络技术的飞速发展,无线网络的组网模式也发生着变化。基于人们对日常网络的需求,结合不断被更新的802.11x标准,一种覆盖范围广、接入可靠、传输带宽高、扩展性强的新型无线网络被提出,它就是无线Mesh网络。本文从宽带无线Mesh网络的简要概述以及优势分析入手,分析其核心技术,探索该网络在各领域的应用。     

无线技术企业企业无线网络设计

随着信息技术的飞速发展和我国国民经济信息化的推进,在企业、公司、政府内全面实现信息电子化交换和信息资源共享成为必要。使用无线局域网产品可以实现建筑群网络连接、宽带互连网络接入以及移动获取网络服务等功能。无线网络产品具有传输距离远、可以在建筑物之间或建筑物内施工困难的环境下使用、支持移动漫游等特点,因此可以使用它来替代传统的电信线缆来构建未来的教育网络。该文对无线技术企业无线网络进行详细设计,无线网络的基础入手,介绍了无线网络的作用,该企业的概况及对企业无线网络进行了详细规划,着重介绍了无线局域网网络的管理和使用方面。     

解析校园网如何实现宽带共享入网模式

随着学校信息化的建设及数据通讯业的不断发展,同时各大运营商也积极加入校园宽带网络建设,校园实行宽带化是一个必然的大趋势,其中宽带共享接入网络成为重点。目前主要模式有:无线接入、ADSL技术、光纤到户等。该文主要通过各种宽带共享入网模式进行探讨,从而促进校园网更加快速稳定地发展。     

宽带上网方案比较

建设宽带社区可通过电话线、有线电视网络及高速以太网、全光纤网络、无线接入等方案实现。从实践来看，这几种方案在网络接入方式、用户负担的成本、可以提供的服务内容等方面不尽相同．所适用的范围也大不一样，因此构建宽带社区必须因地制宜。     

校园环境下无线网络的应用优势

在不断提倡教育信息化的当下,构建数字化校园历来都是校园建设的重点之一。而有线网络正是实现校园数字化的重要基石,校园有线网络覆盖率的不断提升使得数字化校园的基本框架已大体完成。但有线网络存在着网络接入端口不足,网络接入受地点和环境限制等应用局限,而无线网络则能以最小化成本实现网络接入最大化,并且突破物理限制连接"信息孤岛"。此外,无线网络还能够继承有线网络的便捷化管理。这些应用优势,使得无线网络在校园的应用,已经成为一种必然且必需的趋势。     

现代化矿井通信技术与系统

提出了由矿用有线调度通信系统、矿井移动通信系统、矿井广播通信系统和矿井救灾通信系统等组成的煤矿井下通信技术体系。提出矿用调度通信系统应采用矿用有线调度通信系统。提出全矿井移动通信系统宜采用WiFi、3G、4G等通信技术。提出矿井广播通信系统既可采用矿用有线调度通信系统远程供电广播技术,也可采用基于以太环网和无源光网络的IP通信技术。提出矿井救灾通信系统应采用无线多媒体通信技术,宜采用WiFi和MESH等通信技术。提出矿井移动通信系统应满足手机脱网通信、基站脱网通信、无线自组织网络、接入煤矿井下有线宽带传输平台等要求。指出在手机脱网通信、接入煤矿井下有线宽带传输平台、无线自组织网络、矿用无线摄像机、基站脱网通信、多功能矿井移动通信系统、矿井无线宽带传输等方面,WiFi优于WCDMA、CDMA2000和TD-SCDMA。提出多功能矿井移动通信系统和矿井无线宽带传输宜采用WiFi。     

OmniCon: a Mobile IP‐based vertical handoff system for wireless LAN and GPRS links

Wi‐Fi based hotspots offer mobile users broadband wireless Internet connectivity in public work spaces and corporate/university campuses. Despite the aggressive deployment of these hotspots in recent years, high‐speed wireless Internet access remains restricted to small geographical areas due to the limited physical coverage of wireless LANs. On the other hand, despite their lower throughput, cellular networks have a significantly wider coverage and are thus much more available. Recognizing that 2.5G or 3G cellular networks can effectively complement wireless LANs, we set out to develop a vertical handoff system that allows mobile users to seamlessly fall back to such cellular networks as the general packet radio service (GPRS) or 3G whenever wireless LAN connectivity is not available. The resulting handoff mechanism allows a network connection of a mobile node to operate over multiple wireless access networks in a way that is transparent to end user applications. In this paper, we present the design, implementation, and evaluation of a fully operational vertical handoff system, called OmniCon, which enables mobile nodes to automatically switch between wireless LAN and GPRS, based on wireless LAN availability, by introducing a simple extension to the existing Mobile IP implementation. We discuss the design issues in the proposed vertical handoff system for heterogeneous networks, including connection setup problems due to network address translation, and the disparity in link characteristics between wireless LANs and GPRS. A detailed performance evaluation study of the OmniCon prototype demonstrates its ability to migrate active network connections between these two wireless technologies with low handoff latency and close to zero packet loss. Copyright © 2006 John Wiley & Sons, Ltd.     

Mobility management and control in intelligent wireless ATM networks

This paper shows how the Asynchronous Transfer Mode (ATM) signaling and the Intelligent Network (IN) concept can be exploited to support mobility in an ATM-based network with wireless access parts and mobile users. The proposed architecture exploits the enhanced service control processing features offered by the IN technology to support location management. The access signaling protocol structure is based on the principles of separation between call and bearer channel control, employed in fixed broadband access networks. The design objective is to minimize the changes required to the wired network signaling, by taking advantage of the well-developed capability sets. This allows the easy introduction of the wireless ATM technology (W-ATM) into the real world. It is shown that the proposed signaling protocol model provides cost-effective implementations without degrading the agreed Quality of Service (QoS) and the system's performance. A comparative signaling performance evaluation is carried-out to demonstrate the impact of the proposed signaling protocol architecture onto various performance measures and to quantify the relative gains. The obtained results can be used for network design purposes in a large-scale private installation supporting many users. The signaling protocol architecture aims for private W-ATM networks, but can be readily extended to fulfill the signaling requirements of public environment broadband wireless systems.     

WiMAX在宽带无线城市中的应用

WiMAX是基于IEEE802．16标准的无线宽带接入技术,可为固定、移动、便携形式的通信终端提供更为便捷的宽带无线接入。与wi—Fi等无线通信技术相比,WiMAX具有更强的抗干扰性,更高的带宽利用率,因此,在无线城市建设中WiMAX、3G和WiFi三者的技术结合会创造出一个完美的宽带无线网络,实现数字化生活。     

基于MIPv6的AAA系统接入控制的实现

随着移动IPv6技术的发展以及无线移动终端的普及，无线网络在人们的生活中扮演着越来越重要的角色，但应用于固定网络的AAA系统已经无法适用于无线环境。该文针对移动IPv6环境下，由于用户在不同网络间漫游所导致的接入控制交接问题，提出了基于MIPv6的AAA系统接入控制方案，给出了Linux平台上的实现，通过实验证明了方案的有效性和可行性。     

Integrating mobile IP with ad hoc networks

Extending traditional IEEE 802.11-based access points to incorporate the flexibility of mobile ad hoc networks would help make the dream of ubiquitous broadband wireless access a reality. The authors discuss several issues related to integrating the mobile Internet protocol with Manets.     

Impact of wireless access on traffic management in ATM networks

Traffic management plays an important role in providing differentiated quality of service and supporting the integration of a variety of broadband services within a common ATM network. Wireless ATM access networks are under definition in standards bodies as well as subject of various research activities and first field trials. The nature of the wireless medium requires new protocols that are able to cope with multiple access, error prone wireless channels, and user mobility. When attaching a wireless ATM network to a fixed ATM network proper interaction of traffic and resource management functions throughout both networks is necessary to achieve stringent QoS objectives. In this paper the relation between mobile specific protocols and traffic management functions as well as their mutual impacts are discussed. Three key areas to enable seamless traffic management integration are identified and possible solutions are outlined.     

Evaluation of mobility and quality of service interaction

With the fast adoption of IP-based communications for mobile computing, users are expecting a similar service in wireless and wired networks. This raises the need for setting guarantees to the quality of the offered service (QoS), despite the technology of the access network (AN) or the mobility of the terminal. As mobile computing is getting more popular on a daily basis, new broadband cellular wireless ANs will appear with overlapping coverage in hot spots. This generates a new challenge for QoS provision, as it will have to deal with fast mobility of terminals. Various QoS architectures have been defined, but none provides full support for guaranteed service levels for mobile hosts (MHs). This paper discusses the problems related to providing QoS to MHs and identifies the existing solutions and future work needed.     

移动IPv6网络基于身份的层次化接入认证机制

设计了一种基于身份的层次化签名方案,并在该方案基础上提出了一种适用于移动IPv6网络环境的层次化接入认证方法.该方法使用分级NAI(Network Access Identifier)作为公钥,简化了无线移动环境中的密钥管理;利用层次化思想对接入认证和移动注册进行层次化管理,减少了切换认证处理流程;基于签名机制实现了用户与接入网络的双向认证.作者用设计的切换延时分析模型,对该方法和几种传统方法进行了比较,证明当移动节点远离家乡域及在一定范围内频繁微移动时,该方法比传统方法的效率更高.通过安全性分析证明了该方法在一定程度上实现了私钥的保密性、签名的不可伪造性等功能.最后还讨论了该方法的一种可扩展变形,用于实现多级层次化移动IPv6框架下的接入认证.     

An access authentication protocol for trusted handoff in wireless mesh networks

WMNs (Wireless Mesh Networks) are a new wireless broadband network structure based completely on IP technologies and have rapidly become a broadband access measure to offer high capacity, high speed and wide coverage. Trusted handoff in WMNs requires that mobile nodes complete access authentication not only with a short delay, but also with the security protection for the mobile nodes as well as the handoff network. In this paper, we propose a trusted handoff protocol based on several technologies, such as hierarchical network model, ECC (Elliptic Curve Cryptography), trust evaluation and gray relevance analysis. In the protocol, the mobile platform's configuration must be measured before access to the handoff network can proceed and only those platforms whose configuration meets the security requirements can be allowed to access the network. We also verify the security properties through formal analysis based on an enhanced Strand model and evaluate the performance of the proposed protocol through simulation to show that our protocol is more advantageous than the EMSA (Efficient Mesh Security Association) authentication scheme in terms of success rate and average delay.