CN108848093B - Route calculation unit and network node device - Google Patents
Route calculation unit and network node device Download PDFInfo
- Publication number
- CN108848093B CN108848093B CN201810645671.1A CN201810645671A CN108848093B CN 108848093 B CN108848093 B CN 108848093B CN 201810645671 A CN201810645671 A CN 201810645671A CN 108848093 B CN108848093 B CN 108848093B
- Authority
- CN
- China
- Prior art keywords
- protocol stack
- stack software
- core processor
- software
- calculation unit
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1441—Countermeasures against malicious traffic
- H04L63/1466—Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/58—Association of routers
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1433—Vulnerability analysis
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides a route calculation unit and a network node device. The route calculation unit includes: the system comprises a multi-core processor, an input interface and an output interface, wherein the input interface and the output interface are respectively connected with the multi-core processor; the input interface is used for receiving protocol control data; the multi-core processor is used for calculating and processing the protocol control data by operating a plurality of sets of preset heterogeneous protocol stack software to obtain a plurality of calculation results, and determining routing data according to the plurality of calculation results; the output interface is used for outputting the routing data. The network node device comprises at least one route calculation unit as described above. The invention can effectively defend the attack aiming at the route calculation unit, and the defense mode is reliable and practical, thereby improving the safety of the network node equipment.
Description
Technical Field
The present invention relates to the field of internet technologies, and in particular, to a route calculation unit and a network node device.
Background
The network forwarding node equipment, the network link and the network terminal node form the whole information network; the network forwarding node equipment is responsible for receiving the network message, calculating the route and forwarding the network message according to the route table. The safety of the network forwarding node has important value to the safety of the whole information network, and the routing safety used as the basis of the node forwarding message is the key of the safety of the network node.
At present, potential safety hazards existing in routing nodes cannot be ignored, and defects caused by malicious backdoor implantation, system design and implementation and unconscious entry of source opening codes are difficult to avoid; an attacker generally obtains routing node information through routing tracking and port scanning, and then attacks against protocol defects or specific vulnerabilities. The security protection means of the network node routing more focuses on correct configuration and use of the router, timely checking analysis logs, and timely patching a system to block bugs, and an effective defense technology and means are lacked. The route forwarding function of a router and its critical location in the network determine it to be an important entry point for an attacker to carry out an attack. Once a router is controlled by an attacker, it will pose a significant security threat to the entire network.
At present, the existing active defense technology aiming at unknown vulnerabilities and backdoors usually solves the survivability problem of the network through a heterogeneous network model, or researches the effect of the diversity of a router manufacturer on improving the network elasticity by adopting a graph theory method; in addition, active defense may also be implemented through active changes of addresses or ports of communication service endpoints.
The existing active defense technology aiming at unknown bugs and backdoors has two main problems:
in the technology for solving the defense problem by increasing the network elasticity, the attacked node is often replaced by increasing the network node, so that the survivability of the network as a whole is improved, but the safety of the network node is difficult to ensure. Once the rest network nodes are also attacked by the second or more rounds of attack, the network is immediately broken down, and the reliability is poor.
The moving target defense technology defends unknown bugs and backdoors by adding dynamic property locally to software, and the dynamic property in the technology obviously increases the system operation cost. Meanwhile, the increase of the dynamic property needs to modify the original software by a larger margin, and from design (modification) to debugging, the deployment cost is higher, and the practicability is poorer.
Disclosure of Invention
In order to solve the above problems in the prior art, the present invention provides a route calculation unit and a network node device, so as to effectively defend against attacks on the route calculation unit, and the defense mode is reliable and practical, thereby improving the security of the network node device.
In a first aspect, the present invention provides a route calculation unit, including: the system comprises a multi-core processor, an input interface and an output interface, wherein the input interface and the output interface are respectively connected with the multi-core processor;
the input interface is used for receiving protocol control data;
the multi-core processor is used for calculating and processing the protocol control data by operating a plurality of sets of heterogeneous protocol stack software to obtain a plurality of calculation results, and determining routing data according to the plurality of calculation results;
the output interface is used for outputting the routing data.
Furthermore, the multi-core processor is integrated with a plurality of computing cores, and each computing core runs at most one set of heterogeneous protocol stack software.
Further, each set of the heterogeneous protocol stack software is executed by at least one of the computing cores.
Further, the multi-core processor is further configured to: and determining routing data according to the plurality of calculation results by operating output control software, and driving the output interface to output the routing data.
Further, the multi-core processor is specifically configured to: classifying the same calculation results into one class, and classifying all the calculation results; and counting the number of calculation results in each type, and determining the calculation result with the maximum number as the routing data.
Further, the multi-core processor is specifically further configured to: and driving the input interface to acquire the protocol control data by operating input control software, and distributing the protocol control data to a plurality of sets of heterogeneous protocol stack software.
Further, the multi-core processor is further configured to:
respectively detecting whether the calculation result corresponding to each set of heterogeneous protocol stack software is the same as the routing data;
if the calculation result is the same as the routing data, the heterogeneous protocol stack software corresponding to the calculation result is in a normal state; if the calculation result is different from the routing data, the heterogeneous protocol stack software corresponding to the calculation result is in an abnormal state;
resetting the heterogeneous protocol stack software in the abnormal state to an initial state;
and according to the running state of the heterogeneous protocol stack software in the normal state, carrying out synchronous processing on the heterogeneous protocol stack software in the abnormal state.
Further, the input interface and the output interface are disposed on the same interface controller, or the input interface and the output interface are disposed on respective interface controllers.
In a second aspect, the present invention provides a network node device, comprising: any of the route calculation units described above.
Further, the network node device further comprises a router and/or a switch.
The invention has the beneficial effects that:
the invention provides a route calculation unit and network node equipment, wherein the route calculation unit comprises a multi-core processor, an input interface and an output interface which are respectively connected with the multi-core processor; a plurality of computing cores are integrated in the multi-core processor, and a plurality of sets of heterogeneous protocol stack software are operated; each computing core operates one set of heterogeneous protocol stack software at most; after the input interface receives the protocol control data, the multi-core processor performs calculation processing on the protocol control data through a plurality of sets of heterogeneous protocol stack software, and preferentially outputs routing data. Because the protocol stack software bugs or the attack of the backdoor is difficult to be effective to more than two heterogeneous protocol stack software at the same time, the route calculation unit runs a plurality of sets of heterogeneous protocol stack software through the multi-core processor, calculates the generated route data and preferentially outputs the route data, can effectively defend the attack to the route calculation unit, and has reliable and practical defense mode, thereby improving the safety of the network node equipment. And the multi-core processor can also detect the running state of each set of heterogeneous protocol stack software in real time, correct the running state of the heterogeneous protocol stack software in time when the calculation result is different from the routing data, and improve the reliability of routing calculation.
Drawings
Fig. 1 is a schematic structural diagram of a route calculation unit according to an embodiment of the present invention;
fig. 2 is a schematic structural diagram of a route calculation unit according to another embodiment of the present invention;
fig. 3 is a schematic structural diagram of a route calculation unit according to yet another embodiment of the present invention;
fig. 4 is a schematic flowchart of a multi-core processor detecting a protocol stack software state according to an embodiment of the present invention;
fig. 5 is a flowchart of a route calculation performed by the route calculation unit according to the embodiment of the present invention;
fig. 6 is a schematic structural diagram of a network node device according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly described below with reference to the accompanying drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Fig. 1 is a schematic structural diagram of a route calculation unit according to an embodiment of the present invention. As shown in fig. 1, the route calculation unit 1 includes: a multi-core processor 10, and an input interface 11 and an output interface 12 respectively connected to the multi-core processor 10;
the input interface 11 is used for receiving protocol control data;
the multi-core processor 10 is configured to perform calculation processing on the protocol control data by running multiple sets of heterogeneous protocol stack software to obtain multiple calculation results, and determine routing data according to the multiple calculation results;
the output interface 12 is used for outputting the routing data.
Specifically, the heterogeneous protocol stack software generally refers to protocol stack software developed by different development groups or developers for the same protocol; the heterogeneous protocol stack software sets respectively perform calculation processing on the protocol control data to obtain calculation results matched with the number of the heterogeneous protocol stack software sets, that is, each heterogeneous protocol stack software set obtains one calculation result, so that the multi-core processor 10 can obtain a plurality of calculation results by operating the heterogeneous protocol stack software sets, then compares and screens the calculation results according to a preset screening rule for the calculation results, and selects an optimal calculation result as the routing data.
Because the protocol stack software bugs or the attacks of the backdoor are difficult to be effective to more than two heterogeneous protocol stack software at the same time, the routing computation unit provided by the embodiment of the invention can effectively defend the attacks aiming at the routing computation unit by running a plurality of sets of heterogeneous protocol stack software through the multi-core processor and preferentially outputting routing data, and the defense mode is reliable and practical, thereby improving the safety of network node equipment. And a routing calculation unit is built by using the multi-core processor, so that on one hand, relatively surplus calculation resources can be fully utilized, on the other hand, the software and hardware cost of the system is reduced, and the popularization and the deployment are facilitated.
On the basis of the embodiment, the multi-core processor is integrated with a plurality of computing cores; correspondingly, each computing core runs at most one set of preset heterogeneous protocol stack software.
For example, a multicore processor has four compute cores, core 1, core 2, core 3, and core 4; the multi-core processor is operated with three sets of heterogeneous protocol stack software, namely software A, software B and software C; at this time, the core 1, the core 2 and the core 3 are respectively responsible for running a set of heterogeneous protocol stack software, that is, software a, software B and software C are randomly distributed to the core 1, the core 2 and the core 3; the core 4 is now idle or performs other tasks, such as data input and output. That is, each computational core operates at most one set of protocol stack software, and the redundant data processing mode can avoid the problems of low operation efficiency or mutual interference of operations and the like caused by one computational core operating multiple sets of protocol stack software.
Fig. 2 is a schematic structural diagram of a route calculation unit according to another embodiment of the present invention. The routing calculation unit comprises a multi-core processor, and an input interface and an output interface which are arranged on an interface controller, wherein the input interface and the output interface are respectively and electrically connected with the multi-core processor through the interface controller. It will be appreciated by those skilled in the art that the input interface and the output interface are understood to be logical functions of a hardware device (i.e., an interface controller). The description will be given by taking an example that the multi-core processor is integrated with four computing cores (respectively including core 1, core 2, core 3 and core 4), and the multi-core processor runs three sets of heterogeneous protocol stack software (including protocol stack software a, protocol stack software B and protocol stack software C).
The core 1 is used for running protocol stack software A, the core 2 is used for running protocol stack software B, the core 3 is used for running protocol stack software C, and the core 4 is used for running input control software and output control software.
On the basis of the above embodiments, the preset input control software further includes: each set of the heterogeneous protocol stack software is run by at least one of the compute cores.
For example, the multi-core processor has eight computational cores, and the multi-core processor runs three sets of heterogeneous protocol stack software together; at this time, one set of heterogeneous protocol stack software can be operated in every two cores; the remaining two cores are idle or perform other tasks.
Each protocol stack software is operated by an independent core, and compared with a plurality of sets of protocol stack software operated by one core, the problem of low efficiency caused by the distribution of core operation resources among a plurality of protocol stack software can be solved, and better safety can be brought by the independent sharing of the core operation resources of each protocol stack software.
Fig. 3 is a schematic structural diagram of a route calculation unit according to still another embodiment of the present invention. As shown in fig. 3, in the route calculation unit, a multi-core processor is integrated with eight calculation cores (including core 1, core 2, and …, core 7, and core 8, respectively), and the multi-core processor runs three sets of heterogeneous protocol stack software (including protocol stack software a, protocol stack software B, and protocol stack software C).
The core 1 and the core 2 are used for running protocol stack software A, the core 3 and the core 4 are used for running protocol stack software B, the core 5 and the core 6 are used for running protocol stack software C, the core 7 is used for running input control software, and the core 8 is used for running output control software.
On the basis of the foregoing embodiments, the multi-core processor is further configured to: and determining routing data according to the plurality of calculation results by operating output control software, and driving the output interface to output the routing data.
Specifically, the output control software is specifically used for comparing and screening a plurality of calculation results according to a preset screening rule, selecting an optimal calculation result from the calculation results as routing data, and outputting the routing data through the output interface controller.
On the basis of the foregoing embodiments, the multi-core processor is specifically configured to: classifying the same calculation results into one class, and classifying all the calculation results; and counting the number of calculation results in each type, and determining the calculation result with the maximum number as the routing data.
For example, protocol control data Di is transmitted to the multi-core processor through the input interface, if the multi-core processor runs three sets of heterogeneous protocol stack software, the three sets of heterogeneous protocol stack software respectively calculate routing data according to the protocol control data Di, and respectively obtain calculation results DAO, DBO and DCO;
the calculation result generated by the heterogeneous protocol stack software A is DAO, the calculation result generated by the heterogeneous protocol stack software B is DBO, and the calculation result generated by the heterogeneous protocol stack software C is DCO; the DAO and the DBO are the same, and the DAO and the DBO belong to the same type and are classified into a first type of calculation result; DCO is different from DAO and DBO, and the DCO is divided into a first category and a second category. And if the number of the calculation results in the first type of calculation results is the largest, taking any one of the DAO and the DBO as routing data and outputting the routing data through an output interface.
It should be noted that if DAO, DBO and DCO are all the same, one of them is selected as routing data to be output; if the DAO, the DBO and the DCO are different pairwise, one path is selected as routing data to be output.
On the basis of the foregoing embodiments, the multi-core processor is further configured to: and driving the input interface to acquire the protocol control data by operating input control software, and distributing the protocol control data to a plurality of sets of heterogeneous protocol stack software.
For example, protocol control data Di is transmitted to the multi-core processor via the PCIe interface controller, copied by the input control software, and distributed to the sets of protocol stack software.
For example, three sets of heterogeneous protocol stack software, namely protocol stack software A, protocol stack software B and protocol stack software C, run in a multi-core processor; the calculation result of the protocol stack software A is M, the calculation result of the protocol stack software B is M, and the calculation result of the protocol stack software C is M ', and the calculation result is M' which is used as routing data to be output due to the fact that the number of the calculation results is large.
Generally, if the calculation results output by the multiple sets of heterogeneous protocol stack software are classified into two or more types, since the calculation result with the largest number of calculation results in each type is output as the routing data, the calculation result in the type with the smaller number is generally different from the routing data; at this time, whether the state of the protocol stack software is normal can be detected according to whether the calculation result output by each protocol stack software is the same as the routing data.
Fig. 4 is a schematic flowchart of a process of detecting a protocol stack software state by a multi-core processor according to an embodiment of the present invention, and as shown in fig. 4, the method includes:
s401, respectively detecting whether the calculation result corresponding to each set of heterogeneous protocol stack software is the same as the routing data;
s402, if the calculation result is the same as the routing data, the heterogeneous protocol stack software corresponding to the calculation result is in a normal state;
s403, if the calculation result is different from the routing data, the heterogeneous protocol stack software corresponding to the calculation result is in an abnormal state;
s404, resetting the heterogeneous protocol stack software in the abnormal state to an initial state;
s405, according to the running state of the heterogeneous protocol stack software in the normal state, synchronous processing is carried out on the heterogeneous protocol stack software in the abnormal state.
Specifically, in the embodiment of the invention, the multi-core processor can detect the running state of each set of heterogeneous protocol stack software in real time, and correct the running state of the heterogeneous protocol stack software in time when the calculation result is different from the routing data, so that the reliability of routing calculation is improved.
On the basis of the above embodiments, the input interface and the output interface are disposed on the same interface controller, or the input interface and the output interface are disposed on respective interface controllers.
Specifically, referring to the route calculation unit shown in fig. 2 and fig. 3, the interface controller where the input interface and the output interface are located may be the same interface controller, or may be two independent interface controllers. The interface standards of the input interface and the output interface can be different or can be matched with each other; the interface standard includes a PCIe (peripheral component interconnect express) interface or an ethernet interface, but may also be other interface standards. For example, when the interface standard is PCIe, both the input interface and the output interface may be implemented by a PCIe interface controller; certainly, the number of the PCIe interface controllers may be one, and the PCIe interface controllers are also used as the input interface and the output interface; two interfaces can be used for the input interface and the output interface respectively.
Fig. 5 is a flowchart of a routing calculation performed by the routing calculation unit according to the embodiment of the present invention. In this embodiment, three sets of heterogeneous protocol stack software are run as an example, as shown in fig. 5:
s501, numbering the computing cores of the multi-core processor as 1, 2, 3, 4 and …, and numbering heterogeneous protocol stack software as A, B and C;
s502, allocating 1 or more cores A1 of the multi-core processor to heterogeneous protocol stack software A;
s503, allocating 1 or more cores B1 of the multi-core processor to the heterogeneous protocol stack software B;
s504, allocating 1 or more cores C1 of the multi-core processor to the heterogeneous protocol stack software C;
s505, distributing 1 or more cores D1 of the multi-core processor to input control software and output control software;
s506, distributing the protocol control data to three heterogeneous protocol stack software A, B, C through an input interface and input control software;
s507, the three heterogeneous protocol stack software A, B, C respectively calculates routing data according to the input protocol control data;
and S508, the output control software carries out multiple decision according to the output data of the three heterogeneous protocol stack software, and the obtained result is used as final routing data and is output through an output interface.
In the above steps S502 to S505, the computing cores allocated to the heterogeneous protocol stack software A, B, C must be dedicated by the respective heterogeneous protocol stack software, each computing core can only run one set of heterogeneous protocol stack software, and the computing cores allocated to the heterogeneous protocol stack software cannot be re-allocated to the input control software and the output control software.
In the step S508, the step of performing multi-selection decision on the three paths of data is as follows:
(1) if the three paths of data are consistent, any one path is selected as output;
(2) if two paths of the three paths of data are consistent, any one path of the two consistent paths is selected as output;
(3) and if the three paths of data are different, selecting one path as output.
The number of the heterogeneous protocol stack software is usually at least three, and may be more than three, for example, five; the number of the calculation results corresponds to the number of the heterogeneous protocol stack software; meanwhile, the classification mode is still adopted, the number of calculation results in each type is calculated, and the calculation result with the largest number is output as routing data.
Fig. 6 is a schematic structural diagram of a network node device according to an embodiment of the present invention; as shown in fig. 6, the network node device 6 comprises at least one route calculation unit 61 as described in any of the embodiments above. The figure is illustrated as including three route calculation units 61.
In particular, the network node device may further include a router or a switch, or both.
The computer program product of the route calculation unit and the network node device provided in the embodiment of the present invention includes a computer readable storage medium storing a program code, where instructions included in the program code may be used to execute the method described in the foregoing method embodiment, and specific implementation may refer to the method embodiment, and is not described herein again.
Finally, it should be noted that: the above examples are only intended to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.
Claims (8)
1. A route calculation unit, comprising: the system comprises a multi-core processor, an input interface and an output interface, wherein the input interface and the output interface are respectively connected with the multi-core processor;
the input interface is used for receiving protocol control data;
the multi-core processor is used for calculating and processing the protocol control data by operating a plurality of sets of heterogeneous protocol stack software to obtain a plurality of calculation results, and determining routing data according to the plurality of calculation results; the multi-core processor is integrated with a plurality of computing cores, each computing core at most runs one set of heterogeneous protocol stack software, and each set of heterogeneous protocol stack software is run by at least one computing core; the heterogeneous protocol stack software refers to protocol stack software developed by different development groups or developers aiming at the same protocol;
the output interface is used for outputting the routing data.
2. The route calculation unit of claim 1, wherein the multi-core processor is further configured to:
and determining routing data according to the plurality of calculation results by operating output control software, and driving the output interface to output the routing data.
3. The route calculation unit of claim 2, wherein the multi-core processor is specifically configured to:
classifying the same calculation results into one class, and classifying all the calculation results;
and counting the number of calculation results in each type, and determining the calculation result with the maximum number as the routing data.
4. The route calculation unit of claim 1, wherein the multi-core processor is further configured to:
and driving the input interface to acquire the protocol control data by operating input control software, and distributing the protocol control data to a plurality of sets of heterogeneous protocol stack software.
5. The route calculation unit of claim 3, wherein the multi-core processor is further configured to:
respectively detecting whether the calculation result corresponding to each set of heterogeneous protocol stack software is the same as the routing data;
if the calculation result is the same as the routing data, the heterogeneous protocol stack software corresponding to the calculation result is in a normal state;
if the calculation result is different from the routing data, the heterogeneous protocol stack software corresponding to the calculation result is in an abnormal state;
resetting the heterogeneous protocol stack software in the abnormal state to an initial state;
and according to the running state of the heterogeneous protocol stack software in the normal state, carrying out synchronous processing on the heterogeneous protocol stack software in the abnormal state.
6. The route calculation unit of claim 1, wherein the input interface and the output interface are disposed on a same interface controller, or wherein the input interface and the output interface are disposed on respective interface controllers.
7. A network node device comprising at least one route calculation unit according to any of claims 1-6.
8. The network node device of claim 7, further comprising a router and/or a switch.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810645671.1A CN108848093B (en) | 2018-06-21 | 2018-06-21 | Route calculation unit and network node device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810645671.1A CN108848093B (en) | 2018-06-21 | 2018-06-21 | Route calculation unit and network node device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN108848093A CN108848093A (en) | 2018-11-20 |
| CN108848093B true CN108848093B (en) | 2021-02-09 |
Family
ID=64203637
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201810645671.1A Active CN108848093B (en) | 2018-06-21 | 2018-06-21 | Route calculation unit and network node device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN108848093B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113746735B (en) * | 2020-05-28 | 2023-04-28 | 阿里巴巴集团控股有限公司 | Method, device and equipment for detecting controller and computer storage medium |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102799563A (en) * | 2011-05-26 | 2012-11-28 | 上海红神信息技术有限公司 | Reconfigurable computing array and construction method |
| CN104408372A (en) * | 2014-11-26 | 2015-03-11 | 大连梯耐德网络技术有限公司 | System reloading based mimicry safety implementation system and method |
| CN105049419A (en) * | 2015-06-19 | 2015-11-11 | 中国人民解放军信息工程大学 | Mimicry-network step-by-step exchange routing system based on heterogeneous diversity |
| WO2017053303A1 (en) * | 2015-09-23 | 2017-03-30 | Google Inc. | Systems and methods for mobility management in a distributed software defined network packet core system |
| CN107347066A (en) * | 2017-07-05 | 2017-11-14 | 中国人民解放军信息工程大学 | A kind of function equivalence body isomery degree maximizes dispatching method and device |
| CN108134740A (en) * | 2017-12-08 | 2018-06-08 | 中国电子科技集团公司第三十研究所 | A kind of weighting ruling and accidental scheduling method based on physical isomerism redundancy |
-
2018
- 2018-06-21 CN CN201810645671.1A patent/CN108848093B/en active Active
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102799563A (en) * | 2011-05-26 | 2012-11-28 | 上海红神信息技术有限公司 | Reconfigurable computing array and construction method |
| CN104408372A (en) * | 2014-11-26 | 2015-03-11 | 大连梯耐德网络技术有限公司 | System reloading based mimicry safety implementation system and method |
| CN105049419A (en) * | 2015-06-19 | 2015-11-11 | 中国人民解放军信息工程大学 | Mimicry-network step-by-step exchange routing system based on heterogeneous diversity |
| WO2017053303A1 (en) * | 2015-09-23 | 2017-03-30 | Google Inc. | Systems and methods for mobility management in a distributed software defined network packet core system |
| CN107347066A (en) * | 2017-07-05 | 2017-11-14 | 中国人民解放军信息工程大学 | A kind of function equivalence body isomery degree maximizes dispatching method and device |
| CN108134740A (en) * | 2017-12-08 | 2018-06-08 | 中国电子科技集团公司第三十研究所 | A kind of weighting ruling and accidental scheduling method based on physical isomerism redundancy |
Also Published As
| Publication number | Publication date |
|---|---|
| CN108848093A (en) | 2018-11-20 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11902120B2 (en) | Synthetic data for determining health of a network security system | |
| CN109587168B (en) | Network function deployment method based on mimicry defense in software defined network | |
| CN107667505B (en) | System and method for monitoring and managing data center | |
| CN109417496B (en) | Automatic service function verification in a virtual network environment | |
| US10355949B2 (en) | Behavioral network intelligence system and method thereof | |
| CN109194684B (en) | Method and device for simulating denial of service attack and computing equipment | |
| US9491190B2 (en) | Dynamic selection of network traffic for file extraction shellcode detection | |
| CA2903649A1 (en) | System and method for creating a trusted cloud security architecture | |
| CN113703908A (en) | Mimicry virtual network management system | |
| Xu et al. | Identifying SDN state inconsistency in OpenStack | |
| CN108848093B (en) | Route calculation unit and network node device | |
| Valizadeh et al. | Ddos attacks detection in multi-controller based software defined network | |
| CN112235300B (en) | Cloud virtual network vulnerability detection method, system, device and electronic equipment | |
| CN114115068A (en) | Heterogeneous redundancy defense strategy issuing method of endogenous security switch | |
| Ma et al. | A comprehensive study on load balancers for vnf chains horizontal scaling | |
| CN110381082B (en) | Mininet-based attack detection method and device for power communication network | |
| US20170034207A1 (en) | Configurable network security | |
| US20170310700A1 (en) | System failure event-based approach to addressing security breaches | |
| KR101383069B1 (en) | Apparatus and method for detecting anomalous state of network | |
| JP2017211806A (en) | Communication monitoring method, security management system, and program | |
| Hori et al. | A comprehensive security analysis checksheet for OpenFlow networks | |
| CN111107035B (en) | Security situation sensing and protecting method and device based on behavior identification | |
| US20190243953A1 (en) | Enhanced security for multiple node computing platform | |
| Zhang et al. | Toward comprehensive network verification: Practices, challenges and beyond | |
| Cheng et al. | The anomaly detection mechanism using extreme learning machine for service function chaining |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |