基于动态组播代理的移动组播协议

IETF移动IP工作组在移动IP协议中建议了支持主机移动的两种基本的组播机制:双向隧道MIP-BT和远程加入MIP-RS,它们具有互补的优缺点.文中汲取了IETF两种基本方法的优点,提出了一种新的基于动态组播代理的移动组播协议,该协议寻求最短转发路径和减少重建组播树频率之间的平衡点,从而达到最有效地利用网络资源的目的.仿真结果表明该方法具有良好的综合性能,是一种新的IPv6环境下高效的移动组播算法.     

A Dynamic Active Multicast Group Access Control Framework Based on Trust Management System

The current multicast model provides no access control mechanism. Any host can send data directly to a multicast address or join a multicast group to become a member, which brings safety problems to multicast. In this paper, we present a new active multicast group access control mechanism that is founded on trust management. This structure can solve the problem that exists in multicast members＇ access control and distributing authorization of traditional IP multicast.     

IPv6组播通信机制及其实现

组播通信可以节省带宽、减少网络拥塞、避免网络资源浪费,是一种特殊的、高效的通信方式。介绍了IPv6组播通信机制,提出了基于IPv6的PIM—SN协议的实现方案,说明了IPv6组播编程实现过程。     

IP组播网络安全威胁与积极测试

基于IP组播路由协议存在的安全问题,深入剖析了多种针对组播网络的DoS攻击行为,总结了三类组播DoS攻击模式,进而设计并实现了一个组播安全的主动测试框架以评估IP组播网络安全. 通过主动测试,可以发现组播路由协议以及组播部署中存在的安全隐患,帮助运营商及早发现和解决组播安全问题.     

Ad hoc网络中基于组播路由协议ODMRP的改进

将ODMRP作为研究对象 ,利用软件仿真的方式实现了基于Adhoc网络的ODMRP的路由协议的改进 .改进后的协议IODMRP通过新的路由选择算法使路由在最长时间内有效并使用主动探测的方式感知路径的状态 ,以达到充分利用Adhoc网络资源、提高节点通信质量的目的 .仿真实验验证了其性能     

A Lightweight Mobile RSVP for Unicast

This paper presents a lighter protocol, and it removes the multicast burdens from RSVP to adapt to unicast applications. At the same time, when RSVP is used in wireless networks, some issues about mobility raise popular concerns. The proposed protocol a lightweight mobile RSVP protocol, solves the problems by the following mechanisms： changeless flow identifier, a new state management and ＂refresh＂ mechanism.     

IPv6环境下匿名通信系统的设计与实现

匿名通信技术作为保护隐私的一种重要手段已经被广泛接受。但是在现有的网络环境下,由于IP(Internet protocol)地址相对固定,攻击者可以通过追查IP来破坏系统的匿名性。为了提高IPv6网络中通信的匿名性,该文提出了一种在IPv6下的P2P(peer-to-peer)匿名通信方案。该方案改进了IPv6下的地址生成算法,以及现有的基于葱头路由的匿名通信机制。通过利用IPv6地址空间大的优势,周期变换节点IP地址,避免了因IP地址标识而导致的隐私泄漏;通过葱头路由机制来保证IP地址的跨网段隐藏以及数据的加密。实验表明:2种方法的结合可以明显提高匿名通信系统的匿名性,并且该系统的通信效率和兼容性都没有减弱。     

A new algorithm for routing in ad-hoc network

In this paper, we propose a new algorithm for wireless mobile and ad-hoc network, which establishes dynamic cluster of nodes. The proposed algorithm, namely, the Mobility Sensitive Routing Protocol (MSRP), consists of routing in cluster and routing between clusters. Ad-hoc network can utilize MSRP to reduce information exchange and communication bandwidth, to shorten route acquisition delay, and to accommodate more nodes. Foundation item: Supported by the National Natural Science Foundation of China (60133010,60073043,70071042). Biography: Zhang Jian (1976-), male, Ph. D candidate. Lecturer, research direction: computer network, network optimization.     

基于移动IP组播机制的研究

无线宽带的接入需要目前计算环境提供对固定IP网络主机移动性的支持.一方面,互联网工程专门小组(IETF,Internet Engineering Task Force)在现有IP协议的基础上设计了一种支持主机漫游的网络层协议—Mobile IP;另一方面,作为一种高效的多点通信方式,IP组播在固定IP网络中提供了支持分布式多媒体应用和海量数据传送的机制.以移动IP作为路由协议面向移动主机提供组播机制是一个极具理论和实践意义的研究课题.在对相关文献进行深入研究的基础上,提出了一个新的解决方案,与现有移动IP组播机制仿真试验结果的比较表明,在相同环境下具有较小的资源开销和较高的效率,从而提供更好的网络服务质量(QoS Quality of Service)保证.     

IPv6成就下一代互联网

通过IPv4与IPv6的比较,讨论了20世纪的互联网协议IPv4的特性与不足和下一代互联网协议IPv6改进与优点。着重论述了基于移动IPv6协议集成的IP层移动功能和IPv6协议的内置安全机制。预测了在移动通信领域IPv最有可能首先得到广泛应用,实现移动互联 。     

Analysis and Application of Covert Channels of Internet Control Message Protocol

Based on the analysis of the covert channel＇s working mechanism of the internet control message protocol （ICMP） in internet protocol version 4 （IPv4） and Internet Protocol version 6 （IPv6）, the ICMP covert channd＇s algorithms of the IPv4 and IPv6 are presented, which enable automatic channeling upon IPv4/v6 nodes with non-IPv4-compatible address, and the key transmission is achieved by using this channel in the embedded Internet terminal. The result shows that the covert channel＇s algorithm, which we implemented if, set correct, the messages of this covert channel might go through the gateway and enter the local area network.     

一种用于MPRN的多播路由协议

提出了一种采用按需路由发现策略的移动分组无线网多播路由协议.协议采用了基于网格的方案.在协议中不需要维护全局的路由信息,通过按需路由发现过程,动态更新路由信息和建立多播转发组.多播数据包在转发组成员间进行有限泛洪,使协议能够降低带宽的占用及减少路由更新信息的传播.仿真实验说明,协议在带宽较窄、多播组成员数量变化较大的移动分组无线网环境中,具有较好的可靠性和工作效率.     

A Scalable Intrusion Detection System for IPv6

0 IntroductionIPv6 ,as a new, widely available version of Internet proto-col , contains numerous features that make it attractivefroma securitystandpoint[1].IPv6is not a panaceafor securi-ty,though, because the basic mechanisms for transportingpackets across the network stay mostly unchanged,and theupper-layer protocols that transport the actual application dataare mostly unaffected.IPv6 is usually deployed without cryp-tographic protections of any kind in real environment[2].So,IPv6 securi…     

移动IP中的多播技术分析及改进的新方案

以移动IP作为网络层路由支持向移动主机提供多播技术是一个巨大的挑战。首先对基于IP网络模型的移动IP和IP多播技术做概括论述，分析了IP多播的算法和多播路由协议。然后侧重研究在目前的移动IP中如何有效提供多播技术的支持，分析了在现有的IP网络中集成多播和移动性时出现的问题，阐明了几种可能的机制并比较了各自的优缺点。最后提出了一种改进的基于移动IP的移动主机多播技术支持，并和其他方案进行了比较。     

基于阶层式组播的移动IPv6切换方案

分析了移动IPv6协议在切换过程中存在的缺点,提出一种基于阶层式组播技术的方案,从而改善了移动IPv6的性能.     

A Partially Non-Cryptographic Security Routing Protocol in Mobile Ad Hoc Networks

In this paper, we propose a partially non-cryptographic security routing protocol （PNCSR） that protects both routing and data forwarding operations through the same reactive approach. PNCSR only apply public-key cryptographic system in managing token, but it doesn＇t utilize any cryptographic primitives on the routing messages. In PNCSR, each node is fair. Local neighboring nodes collaboratively monitor each other and sustain each other. It also uses a novel credit strategy which additively increases the token lifetime each time a node renews its token. We also analyze the storage, computation, and communication overhead of PNCSR, and provide a simple yet meaningful overhead comparison. Finally, the simulation results show the effectiveness of PNCSR in various situations.     

基于亲密伙伴安全通信方案的移动扩展研究

在对原有亲密伙伴安全通信方案及IPSec协议深入研究的基础上,结合移动IPv6网络中移动节点的特性,提出了一种基于移动IPv6网络的安全通信扩展方案.通过使用IKE移动性支持协议 (Mobile IKE,MOBIKE) 、在移动网络中构造动态分布式管理节点,解决了原方案不能直接运用于移动网络以及网络带宽利用率低的问题,使IPSec策略在移动IPv6网络中得到了灵活的应用.最后,通过对新方案进行仿真和分析证明了该方案的可行性.     

基于安全GRE隧道的Site-to-Site VPN构建方案研究与实现

为了实现经由Internet连接的两个私有网络之间能够利用隧道技术以私有IP地址的方式相互访问其内部资源,并且可以在隧道中传递动态路由协议信息,在基于Cisco路由器的配置过程中,通过利用GRE与IPSec两种技术共同构建Site—to—Site VPN,即首先使用GRE协议对用户数据和路由协议报文进行隧道封装。然后通过IPSec提供的数据机密性、数据完整性验证以及数据源认证功能保护在GRE隧道中传送的敏感数据,以实现GRE隧道的安全传输。通过结合GRE可支持承载IP组播流量与IPSec提供的安全特性创建Site-to-Site VPN,既解决动态路由协议在IPSec VPN隧道内正常通告的问题,又可以保护敏感数据穿越不安全通道的安全性。     

An Efficient Multicast Source Authentication Protocol

We propose an efficient multicast source authentication protocol called efficient multi-tree-chains scheme （EMTC）, which shows more loss resistibility, less communication cost, and no delay at receivers. The EMTC scheme is based on combination of single Chain scheme and Hash Tree Chains scheme, and integrates the advantages of both. In this scheme, stream is firstly divided into blocks with n packets, and each block consists of m clusters, everyone of which contains a tree of packets. All clusters are chained together. Through EMTC, packets of one cluster can be authenticated by any packet of the previous cluster. Compared to other multicast authentication protocols, the proposed scheme has the following advantages： ① dramatically improves the resistance to burst packets loss; ② low computation and communication overhead; ③ imposes low delay on the sender side and no delay on the receiver side.     

Multi-Path Routing and Resource Allocation in Active Network

An algorithm of traffic distribution called active multl-path routing (AMR) in active network is proposed. AMR adopts multi path routing and applies nonlinear optimize approximate method to distribute network traffic among muhiple paths. It is combined to bandwidtb resource allocation and the congestion restraint mechanism to avoid congestion happening and worsen. So network performance can be improved greatly. The frame of AMR includes adaptive traffic allocation model, the conception of supply bandwidth and its‘ allocation model, the principle of congcstion restraint and its‘ model, and the implement of AMR based on multi-agents system in active network. Through simulations. AMR has distinct effects on network performance. The results show AMR is a valid traffic regulation algorithm.