SSH-Based Device Identity and Trust Initialization

ABSTRACT

Managing devices in distributed network environments is always challenging. There are two fundamental problems that constantly puzzle network administrators. First, how are devices securely identified? Second, how can devices initialize trust between each other? This paper introduces a Secure Shell (SSH) public key-based device identification and trust initialization mechanism. By utilizing the widely deployed SSH protocol stacks, a device's SSH public keys, together with the attributes that describe the name, location, version, capabilities, etc., of a device, are registered as secure device identities. By exchanging the public key using SSH protocol itself, a circle of mutual trust can be initialized between managed devices and a central administration console. The mutual trust allows configuration data to be pushed from the administration console to all the trusted devices. It can also be used as the trust anchor to further initialize other type of trust.     

On absolute (robust) stability: slope restrictions andstability multipliers

Absolute stability for systems with several sector‐restricted and slope‐restricted nonlinearities is studied in this paper. A critical analysis of the multipliers is performed and the multipliers of Yakubovich type are chosen because the stability inequality is obtained with a minimum of technical assumptions. The main part of the paper is devoted to obtaining the Yakubovich‐type criterion in the unified context of stable, critical, and unstable cases for the linear part. The paper is motivated by the problem of pilot in‐the‐loop oscillations of the aircrafts where critical and unstable cases appear and the saturation nonlinearity is both sector and slope restricted. The paper contains some applications of the frequency domain inequalities. The conclusions show a ‘parsimony principle’: using as few free parameters as possible to obtain the largest possible domain of stability. The paper ends with conclusions and hints for further development. Copyright © 2011 John Wiley & Sons, Ltd.     

十二孔闸改建工程抢工措施探讨

十二孔闸改建工程因＂引黄补淀＂要求,工期由原来设计的10个月压缩为两个半月,改建工程项目部克服多项困难组织抢工,在抢工过程中出现一些不足之处给抢工任务造成不利影响,该文着重分析抢工措施中的不足之处及提出应该注意的问题。     

水利通信专网与公网多媒体互通初探

为解决水利部通信专网无法与公用通信网及其他专网实现多媒体业务互通,分析水利部多媒体通信平台的结构、功能及主要应用特点,结合公网IMS技术,提出水利部通信专网与公网多媒体互通测试方案,分析测试方案的业务流程和技术特点,描述测试效果,分析应用前景和发展方向。     

十二孔闸改建工程抢工措施探讨

十二孔闸改建工程因“引黄补淀”要求,工期由原来设计的10个月压缩为两个半月,改建工程项目部克服多项困难组织抢工,在抢工过程中出现一些不足之处给抢工任务造成不利影响,该文着重分析抢工措施中的不足之处及提出应该注意的问题.     

公交车和驾驶员集成调度算法研究

为解决公交车及驾驶员调度优化问题,本文给出了一种基于免疫计算的调度优化方案。设计了公交车和驾驶员调度问题的数学模型,给出了非劣邻域支配的多目标免疫优化算法的框架、基于实数编码的比例克隆算子和领域变异算子以及支配抗体的拥挤距离公式,并在仿真环境下进行了实验。实验结果表明,本文算法能有效地解决公交车及驾驶员调度优化问题,具有较好的应用价值。     

浅谈突发公共事件中网络舆情监测指标体系的应用

本文介绍的网络舆情监测指标体系由舆情发布者指标、舆情要素指标、舆情受众指标、舆情传播指标以及区域和谐度指标五个指标群构成。笔者针对网络舆情的实时监测及预警预报,研究了不同指标的量化方法,给出了相应的计算公式。     

基于自组装DNA计算的NTRU密码系统破译方案(英文)

自组装DNA计算在解决NP问题,尤其在破译密码系统方面,具有传统计算机无法比拟的优势．文中提出了一种用自组装DNA计算破译NTRU公钥密码系统的方法．针对NTRU密码系统的特点,采用DNA瓦片编码信息,借助于瓦片间的粘性末端进行自组装,给出了求解多项式卷积运算的实现方案．在此基础上,通过引入非确定性的指派瓦片,提出了一种破译NTRU系统的非确定性算法．通过创建数以亿计的参与计算的DNA瓦片,该算法可以并行地测试每个可能的密钥,以高概率地输出正确密钥．该方法最大的优点是充分利用了DNA瓦片具有的海量存储能力、生化反应的巨大并行性以及组装的自发有序性．理论分析表明,该方法具有一定的可行性．     

基于GML的公共交通数据建模

文章分析了目前的交通信息系统的建模方法及其存在的问题,结合GML3.1、GML模式和线性参考方法,研究了使用GML对公共交通数据模型的几何和拓扑关系建模的方法。以城市公共交通模型为开发实例,给出了基于GML的郑州市公共交通的建模方案和具体实现方法,并使用XSLT技术将最终结果可视化。     

应用LIDIA库实现ELGamal公钥密码系统

ELGamal公钥密码系统中涉及大整数的运算。虽然某些计算机语言(比如ruby)能支持任意精度的运算,但由于密码系统对效率的要求很高,不适合用它们来编写实际的系统。文章采用c++语言,应用LIDIA库来实现完整的ELGamal公钥系统的加解密过程。