Survivability of systems under multiple factor impact

The paper considers vulnerable multi-state series-parallel systems operating under influence of external impacts. Both the external impacts and internal failures affect system survivability, which is determined as the probability of meeting a given demand. The external impacts are characterized by several destructive factors affecting the system or its parts simultaneously.In order to increase the system's survivability a multilevel protection against the destructive factors can be applied to its subsystems. In such systems, the protected subsystems can be destroyed only if all of the levels of their protection are destroyed.The paper presents an algorithm for evaluating the survivability of series-parallel systems with arbitrary configuration of multilevel protection against multiple destructive factor impacts. The algorithm is based on a composition of Boolean and the Universal Generating Function techniques.Illustrative examples are presented.     

New insights on survivability in multi-domain optical networks

With the development of intelligent optical networks and the general multi-protocol label switching (GMPLS) technique, the seamless convergence between IP network and optical network is no longer be a dream but a practical reality. Similar to the Internet, current optical networks have been divided into multiple domains each of which has its own network provider and management policy. Therefore, the development of multi-domain optical networks will be the trend of new-generation intelligent optical networks, and GMPLS-based survivability for multi-domain optical networks will become a hot topic of research in the future. This paper provides a comprehensive review of the existing survivable schemes in multi-domain optical networks and analyzes the shortcomings of current research. Based on previous studies, we present possible challenges and propose new ideas to design efficient survivable schemes to guide the future work of researchers in multi-domain optical networks.     

Decision support for network disruption mitigation

Our increasing reliance on networks of all types, coupled with their increasing vulnerability to disruption, makes it critical to better understand risks associated with natural disasters, terrorist attacks, and other incidents. However, choosing how to best protect, reinforce, and improve a network given a limited budget is a complex problem. We have developed an integrated approach that examines the effects of different network disruption scenarios for a variety of performance measures. The developed decision support methodology allows for comprehensive exploration of disruption impacts, statistically and visually, and facilitates examination of “what-if” planning scenarios.     

ER-TCP: an efficient TCP fault-tolerance scheme for cluster computing

This paper proposes a novel scheme, named ER-TCP, which transparently masks the failures happened on the server nodes of a cluster from clients at TCP connection granularity. In this scheme, TCP connections at the server side are actively and fully replicated to remain consistency so as to be transplanted over healthy parts during failure. A log mechanism is designed to cooperate with the replication to achieve small sacrifice on the performance of communication and makes the scheme scales beyond a few nodes, even when they have different processing capacities. We built a prototype system at a four-node cluster with ER-TCP, and conducted a series of experiments on that. The experimental result told us that ER-TCP has relatively small penalty on the communication performance, especially when it is used to synchronize multiple replicas. The results of real applications show that ER-TCP will incur small sacrifice on performance of web server at light load, and it can be used to distribute files very efficiently and reliably.

一种生存性分析系统的设计与实现

针对信息系统生存性分析的概念和几个基本属性的深入研究,根据以往在网络安全领域的研究成果,结合当前实现生存性分析系统的几种不同的设计思路,提出了基于漏洞扫描技术实现生存性分析系统的可行性方案,并详细说明了完成生存性分析系统的分析过程设计.阐述该生存性分析系统实现的软件模块结构和各个模块间的调用关系,建立适合当前计算机处理能力的生存性分析核心计算方法公式,最后给出了这个生存性分析系统的输出结果的例子报表.     

MVL条件下k—out—of-n：S系统的研究

复杂网络环境下的系统组件往往处于多种不同状态,二值逻辑(BL)在描述多种组件状态时显得无能为力.本文提出了采用多值逻辑(MVL)分析组件状态,重点描述k-out-of-n:S系统模型,并采用Minkowski距离和定义可生存性函数描述系统状态和可生存性.实验表明,MVL条件下的k-out-of-n:S模型很好地描述了系统的状态扣可生存性.     

一种多功能网络监控与防御平台设计与实现

本文提出了一种多功能网络监控与防御系统。文中根据网络自身的结构,从骨干层、汇聚层、接入层三个层次分析,采用三层设计模式,它们相互独立又相互协作,共同构成高性能、多层次、多功能综合解决方案。形成深度防御体系,最大限度地保护企业和组织的网络安全。     

黑客入侵防护体系研究与设计

该文全面地介绍了黑客及黑客攻击造成的危害,列举了一些著名的黑客攻击工具,在详细分析黑客攻击手段及其防范措施的基础上,结合实践经验和研究成果,给出一个有效的黑客入侵防护体系的设计与实现。     

网络信息系统的生存性技术研究

网络生存性技术是指在遭受攻击、故障或意外事故时,系统能够及时地完成其关键任务的能力,是目前网络安全研究的新方向。它比传统的信息保护技术、信息保障技术更能满足目前网络应用的现状,突破了传统的网络安全的概念,从新的角度对网络安全问题进行研究。本文首先分析了可生存性与传统网络安全技术的差别,并给出了生存性的基本定义、特征属性、测定标准、实现方法等,然后介绍了可生存系统设计的两种设计方法,并对两种设计方法进行了对比分析。     

IP／DWDM光因特网路由选择机制的研究

The requirements of IP/DWDM optical Internet routing are analyzed. Guaranteeing QoS, survivability and last routing, and supporting multicast and making lull use of the resources of network are the basic requirements for it. Point out that QoS and survivability are the most important two keys to optical Internet routing. Summarize the common implementations which are used to satisfy these requirements. At last, point out the further steps that should be taken.