一种基于SDN的流接入安全系统的设计与实现

为创建防范攻击和流监测功能为一体的网络安全环境,基于软件定义网络(SDN)分离网络数据平面和控制平面的天然特性,利用Open Flow协议以流集中管控网络的方式综合接入控制和网络审计2种网络安全技术,提出了一种基于SDN的流接入安全系统(SDN-FASS).设计了SDNFASS体系结构,讨论了它提供接入控制和审计功能的工作过程,并研究了接入控制的安全策略及网络审计的流日志提取与分析几个关键技术.为测试SDN-FASS的接入控制和网络安全审计特性,搭建了一个原型系统,并进行了多维控制和流日志回溯分析的试验.结果表明,该系统具有灵活定义网络接入控制安全策略;在线高效获取流记录以及以毫秒级速度快速搜索海量流日志;不仅能够用于防范网络外部的攻击,而且能够用于监测网络内部的非法操作.     

技术成果

正家庭网络集成服务平台行业领域:软件和信息技术服务业专利信息:非专利技术成熟度:已有样品技术推广方式:正在技术推广联系人:张欢欢联系方式:0572-6697320成果内容简介:以家庭网关为主导,设计了中继器及Ⅰ、Ⅱ、Ⅲ类接入模块,通过家庭网络实现对各类传感器、安防设施、开关等对象的统一监测和控制,将安全防卫、灯光控制、温湿度控制、家用电器等纳入集成服务平台,实     

基于蓝牙技术的智能家居集成系统研究

智能家居集成系统将家居生活中各种家用电器和设备集成,实施家用电器与设备的自动管理和控制、家庭生活的安全监测和预警。本文针对智能家居集成系统的信息采集、传输与远程控制技术开展研究。     

一种安全的网络接入和远程家电控制方案

随着智能家居环境的出现和普及,远程接入和家电远程控制中的安全性成为十分重要的议题。文章分析了远程接入和网络家电控制中的安全问题,综合采用了一次性口令认证、SSL及组访问策略等技术,提出了一种安全的网络远程接入和远程家电控制方案。该方案适合需要高安全性的网络远程接入和基于家居服务器的智能家庭网络环境中的网络家电控制。     

LonWorks技术在现代楼宇中的应用

ＬｏｎＷｏｒｋｓ技术是一种计算机网络技术,是一种完全开放的全分布式,并具有互操作性的现场控制网络技术。它可以用于航空航天、工业过程控制、楼宇控制、电力系统自动化、医疗仪器．交通（例如汽车火车）、军事和包括防卫控制等诸多方面。近年来国内外应用ＬｏｎＷｏｒｋｓ建设智能化小区和智能住宅发展迅速,家用电器从单个设备的自动化、智能化走向各种家用电器的网络化,通过Ｉｎｔｅｒｎｅｔ网远距离控制和监视,使家用电器走上更高层次的自动化和智能化。美国微软等已在研制智能家电;国内海尔集团首先提出了“海尔网络” 的概念…     

基于网络微积分的QoS接入策略

针对网络服务质量中的接入控制存在的数据流可控性问题,提出一种基于网络微积分的接入策略.首先针对接入控制中的带宽计算,引入了网络微积分中的有效带宽与等效容量模型,其次建立了接入控制中接受域的数学模型.并对该模型的理论意义进行分析.最后,通过实验仿真来说明此算法的有效性.     

基于电力线载波通信的家电控制系统

电力线载波通信是用电力线路作为通信媒介进行数据传输。介绍了在低压配电线上用电力线载波专用芯片ST7536实现数据的传输，采用电力线载波形式，设计出了一个家电网络控制系统，对家电网络进行远程集中控制，可以对多路家用电器的运行情况进行实时监测和控制，并分析了电力线通信的通道特性及其干扰，结合电力通信的特点提出了解决办法。     

“接口＋编号”接入控制策略实现研究

随着网络应用的不断发展,网络业务服务质量保证变得越来越重要,接入控制功能的实现为业务提供商给用户基于策略的流量限制提供了可能,更好地满足网络成本与业务服务等级之间的公平性,同时提高了网络的安全性。边缘设备接入控制的关键技术是在实现接入控制的同时保证数据转发处理的性能。本文基于边缘设备接入控制需求和接入控制策略表的特点,设计并分析了多种匹配算法,提出了接入控制策略实现中需考虑的关键因素。文章的最后给出了"接口 编号"链表式接入控制表的实现。该实现方法被应用国内驻地网边缘设备的接入控制,应用效果良好。     

基于linux系统的无线嵌入式网关设计与实现

本文以ADM5120嵌入式微处理为核心,移植嵌入式linux操作系统,构建基于802．11g网络接入的无线网关,该网关采用无线与有线的接入方式,适合不同环境下的接入要求。并在此平台上开发嵌入式Web服务器,提供HTTP服务,进而远程监测和管理传感器网络。     

基于无源光网络的发动机性能监测系统研究

针对常规发动机性能监测方法在高功率微波环境下不适用的问题,研制出一种场线联合电磁脉冲防护和无源光网络接入技术相结合的性能监测系统.建立监测节点高功率微波耦合响应的电磁仿真模型,定量分析总线诊断节点的高功率微波防护性能.试验结果表明,在场强50 kV/m的宽带高功率微波环境下该性能监测系统运转正常,实现了监测数据和控制命...     

Markedness and its Interpretation in Language Use

Language markedness is a common phenomenon in languages, and is reflected from hearing, vision and sense, i.e. the variation in the three aspects such as phonology, morphology and semantics. This paper focuses on the interpretation of markedness in language use following the three perspectives, i.e. pragmatic interpretation, psychological interpretation and cognitive interpretation, with an aim to define the function of markedness.     

Characterization of Ordovician carbonate reservoirs, southeastern Saskatchewan, Canada

The discovery of the prolific Ordovician Red River reservoirs in 1995 in southeastern Saskatchewan was the catalyst for extensive exploration activity which resulted in the discovery of more than 15 new Red River pools. The best yields of Red River production to date have been from dolomite reservoirs. Understanding the processes of dolomitization is, therefore, crucial for the prediction of the connectivity, spatial distribution and heterogeneity of dolomite reservoirs.The Red River reservoirs in the Midale area consist of 3～4 thin dolomitized zones, with a total thickness of about 20 m, which occur at the top of the Yeoman Formation. Two types of replacement dolomite were recognized in the Red River reservoir: dolomitized burrow infills and dolomitized host matrix. The spatial distribution of dolomite suggests that burrowing organisms played an important role in facilitating the fluid flow in the backfilled sediments. This resulted in penecontemporaneous dolomitization of burrow infills by normal seawater. The dolomite in the host matrix is interpreted as having occurred at shallow burial by evaporitic seawater during precipitation of Lake Almar anhydrite that immediately overlies the Yeoman Formation. However, the low δ18O values of dolomited burrow infills (-5.9‰～ -7.8‰, PDB) and matrix dolomites (-6.6‰～ -8.1‰, avg. -7.4‰ PDB) compared to the estimated values for the late Ordovician marine dolomite could be attributed to modification and alteration of dolomite at higher temperatures during deeper burial, which could also be responsible for its 87Sr/86Sr ratios (0.7084～0.7088) that are higher than suggested for the late Ordovician seawaters (0.7078～0.7080). The trace amounts of saddle dolomite cement in the Red River carbonates are probably related to "cannibalization" of earlier replacement dolomite during the chemical compaction.     

Features of Women's language

Language is a means of verbal communication. People use language to communicate with each other. In the society, no two speakers are exactly alike in the way of speaking. Some differences are due to age, gender, statue and personality. Above all, gender is one of the obvious reasons. The writer of this paper tries to describe the features of women＇s language from these perspectives： pronunciation, intonation, diction, subjects, grammar and discourse. From the discussion of the features of women＇s language, more attention should be paid to language use in social context. What＇s more, the linguistic phenomena in a speaking community can be understood more thoroughly.     

A computer generator for randomly layered structures

AcomputergeneratorforrandomlylayeredstructuresYUJia shun1,2,HEZhen hua2(1.TheInstituteofGeologicalandNuclearSciences,NewZealand;2.StateKeyLaboratoryofOilandGasReservoirGeologyandExploitation,ChengduUniversityofTechnology,China)Abstract:Analgorithmisintrod…     

低渗透非均质砂岩油藏启动压力梯度研究

理论推导与室内实验相结合,建立了低渗透非均质砂岩油藏启动压力梯度确定方法。首先借助油藏流场与电场相似的原理,推导了非均质砂岩油藏启动压力梯度计算公式。其次基于稳定流实验方法,建立了非均质砂岩油藏启动压力梯度测试方法。结果表明:低渗透非均质砂岩油藏的启动压力梯度确定遵循两个等效原则。平面非均质油藏的启动压力梯度等于各级渗透率段的启动压力梯度关于长度的加权平均;纵向非均质油藏的启动压力梯度等于各渗透率层的启动压力梯度关于渗透率与渗流面积乘积的加权平均。研究成果可用于有效指导低渗透非均质砂岩油藏的合理井距确定,促进该类油藏的高效开发。     

On Tragic Consciousness In The Works By Ernest Hemingway

As an American modern novelist who were famous in the literary world, Hemingway was not a person who always followed the trend but a sharp observer. At the same time, he was a tragedy maestro, he paid great attention on existence, fate and end-result. The dramatis personae's tragedy of his works was an extreme limit by all means tragedy on the meaning of fearless challenge that failed. The beauty of tragedy was not produced on the destruction of life, but now this kind of value was in the impact activity. They performed for the reader about the tragedy on challenging for the limit and the death.     

海南岛地体及其毗邻陆缘晚中生代—新生代古地磁研究和构造演化

本文叙述了对海南岛及其毗邻大陆边缘白垩纪到第四纪地层岩石进行古地磁研究的全部工作过程。通过分析岩石中剩余磁矢量的磁偏角及磁倾角的变化,提出海南岛白垩纪以来经历的构造演化模式如下:早期伴随顺时针旋转而向南迁移,后期伴随逆时针转动并向北运移。联系该地区及邻区的地质、地球物理资料,对海南岛上述的构造地体运动提出以下认识:北部湾内早期有一拉张作用,主要是该作用使湾内地壳显著伸长减薄,形成北部湾盆地。从而导致了海南岛的早期构造运动,而海南岛后期的构造运动则主要是受南海海底扩张的影响。海南地体运动规律的阐明对于了解北部湾油气盆地的形成演化有重要的理论和实际意义。     

An Index mechanism for multi-scale view in spatial databases

There are numerous geometric objects stored in the spatial databases. An importance function in a spatial database is that users can browse the geometric objects as a map efficiently. Thus the spatial database should display the geometric objects users concern about swiftly onto the display window. This process includes two operations:retrieve data from database and then draw them onto screen. Accordingly, to improve the efficiency, we should try to reduce time of both retrieving object and displaying them. The former can be achieved with the aid of spatial index such as R-tree, the latter require to simplify the objects. Simplification means that objects are shown with sufficient but not with unnecessary detail which depend on the scale of browse. So the major problem is how to retrieve data at different detail level efficiently. This paper introduces the implementation of a multi-scale index in the spatial database SISP (Spatial Information Shared Platform) which is generalized from R-tree. The difference between the generalization and the R-tree lies on two facets: One is that every node and geometric object in the generalization is assigned with a importance value which denote the importance of them, and every vertex in the objects are assigned with a importance value,too. The importance value can be use to decide which data should be retrieve from disk in a query. The other difference is that geometric objects in the generalization are divided into one or more sub-blocks, and vertexes are total ordered by their importance value. With the help of the generalized R-tree, one can easily retrieve data at different detail levels.Some experiments are performed on real-life data to evaluate the performance of solutions that separately use normal spatial index and multi-scale spatial index. The results show that the solution using multi-scale index in SISP is satisfying.     

《Chinese Science Bulletin》SUBJECT INDEX TO VOLUME 59(2014)

正~~     

Achieving Unusual States of Matter Under High Pressure

The elongation method,originally proposed by Imamura was further developed for many years in our group.As a method towards O(N)with high efficiency and high accuracy for any dimensional systems.This treatment designed for one-dimensional(ID)polymers is now available for three-dimensional(3D)systems,but geometry optimization is now possible only for 1D-systems.As an approach toward post-Hartree-Fock,it was also extended to