共生网络——异构网络安全高效互联的体系结构与机理

罗洪斌; 张珊; 王志远

doi:10.11959/j.issn.1000-436x.2022079

您当前的位置：

首页 >

文章列表页 >

共生网络——异构网络安全高效互联的体系结构与机理

专题：多模态网络环境关键技术 | 更新时间：2024-06-05

- 共生网络——异构网络安全高效互联的体系结构与机理
- Architecture and mechanisms for secure and efficient internetworking of heterogeneous network
- 通信学报 2022年43卷第4期页码：36-49
- 作者机构：
  
  1. 北京航空航天大学计算机学院，北京 100191
  2. 北京航空航天大学软件开发环境国家重点实验室，北京 100191
  3. 数学、信息与行为学教育部重点实验室，北京 100191
  4. 未来区块链与隐私计算北京高精尖创新中心，北京 100191
- 作者简介：
  
  [ "罗洪斌（1977- ），男，重庆人，博士，北京航空航天大学教授、博士生导师，主要研究方向为互联网体系结构、异构网络跨域互联机理等" ]
  [ "张珊（1989- ），女，河南焦作人，博士，北京航空航天大学副教授、博士生导师，主要研究方向为异构网络资源管理、边缘网络缓存与智能等" ]
  [ "王志远（1993- ），男，山东淄博人，博士，北京航空航天大学副教授，主要研究方向为边缘计算、网络资源协同、移动互联网机制设计等" ]
- 基金信息：
  
  国家重点研发计划基金资助项目(2019YFB1802803);国家自然科学基金资助项目(61801011)
- DOI：10.11959/j.issn.1000-436x.2022079
  中图分类号： TP393
- 网络出版日期：2022-04，
  
  纸质出版日期：2022-04-25
- 稿件说明：
移动端阅览
罗洪斌, 张珊, 王志远. 共生网络——异构网络安全高效互联的体系结构与机理[J]. 通信学报, 2022,43(4):36-49.

Hongbin LUO, Shan ZHANG, Zhiyuan WANG. Architecture and mechanisms for secure and efficient internetworking of heterogeneous network[J]. Journal on communications, 2022, 43(4): 36-49.
罗洪斌, 张珊, 王志远. 共生网络——异构网络安全高效互联的体系结构与机理[J]. 通信学报, 2022,43(4):36-49. DOI： 10.11959/j.issn.1000-436x.2022079.

Hongbin LUO, Shan ZHANG, Zhiyuan WANG. Architecture and mechanisms for secure and efficient internetworking of heterogeneous network[J]. Journal on communications, 2022, 43(4): 36-49. DOI： 10.11959/j.issn.1000-436x.2022079.

摘要

介绍了共生网络——一种异构体制网络安全高效互联的体系结构与机理。首先，分析了异构网络互联面临的挑战，凝练出了异构网络互联亟须解决的科学问题。然后，分析和研究了异构网络互联而成网络空间的普适表征机理、体系结构模型、基本工作机理、跨域安全保障机理等。实验结果表明，共生网络已经形成了部分能力，如防范跨域攻击和数据泄露等。最后，介绍了待进一步解决的问题。

Abstract

An architecture named CoLoR (coupling service location and inter-domain routing) was introduced to securely and efficiently interconnect networks with different architectures (called heterogeneous networks below).First

the fundamental challenges and scientific problems that have to be addressed by CoLoR were raised.Then

the core aspects of CoLoR were described

including how to characterize and represent the cyberphysical system comprised by heterogeneous networks

the network architecture

the basic communication model and how secure internetworking was achieved.After that

results from prototype implementation were presented to demonstrate the feasibility and capability of CoLoR

including defending against attacks and preventing data leakage.Finally

some open issues were outlined for future studies.

关键词

Keywords

references

CHERITON D R . Sirpent:a high-performance internetworking approach [J ] . ACM SIGCOMM Computer Communication Review , 1989 , 19 ( 4 ): 158 - 169 .

CLARK D D , TENNENHOUSE D L . Architectural considerations for a new generation of protocols [J ] . ACM SIGCOMM Computer Communication Review , 1990 , 20 ( 4 ): 200 - 208 .

TENNENHOUSE D L , WETHERALL D J . Towards an active network architecture [J ] . ACM SIGCOMM Computer Communication Review , 1996 , 26 ( 2 ): 5 - 17 .

CHERITON D . Triad [J ] . ACM SIGOPS Operating Systems Review , 2000 , 34 ( 2 ): 34 .

KOPONEN T , CHAWLA M , CHUN B G , et al . A data-oriented (and beyond) network architecture [J ] . ACM SIGCOMM Computer Communication Review , 2007 , 37 ( 4 ): 181 - 192 .

JACOBSON V , SMETTERS D K , THORNTON J D , et al . Networking named content [C ] // Proceedings of the 5th International Conference on Emerging networking Experiments and Technologies . New York:ACM Press , 2009 : 1 - 12 .

ZHANG L X , AFANASYEV A , BURKE J , et al . Named data networking [J ] . ACM SIGCOMM Computer Communication Review , 2014 , 44 ( 3 ): 66 - 73 .

RAYCHAUDHURI D , NAGARAJA K , VENKATARAMANI A . MobilityFirst:a robust and trustworthy mobility-centric architecture for the future Internet [J ] . ACM SIGMOBILE Mobile Computing and Communication Review , 2012 , 16 ( 3 ): 2 - 13 .

NAYLOR D , MUKERJEE M K , AGYAPONG P , et al . XIA:architecting a more trustworthy and evolvable Internet [J ] . ACM SIGCOMM Computer Communication Review , 2014 , 44 ( 3 ): 50 - 57 .

KOPONEN T , SHENKER S , BALAKRISHNAN H , et al . Architecting for innovation [J ] . ACM SIGCOMM Computer Communication Review , 2011 , 41 ( 3 ): 24 - 36 .

PERRIG A , SZALACHOWSKI P , REISCHUK R M , et al . SCION:a secure internet architecture [M ] . Cham : Springer International Publishing , 2017 .

MCCAULEY J , HARCHOL Y , PANDA A , et al . Enabling a permanent revolution in Internet architecture [C ] // Proceedings of the ACM Special Interest Group on Data Communication . New York:ACM Press , 2019 : 1 - 14 .

张宏科 , 苏伟 . 新网络体系基础研究:一体化网络与普适服务 [J ] . 电子学报 , 2007 , 35 ( 4 ): 593 - 598 .

ZHANG H K , SU W . Fundamental research on the architecture of new network—universal network and pervasive services [J ] . Acta Electronica Sinica , 2007 , 35 ( 4 ): 593 - 598 .

HEGLAND A M , HAUGE M , HOLTZER A . Federating tactical edge networks:ways to improve connectivity,security,and network efficiency in tactical heterogeneous networks [J ] . IEEE Communications Magazine , 2020 , 58 ( 2 ): 72 - 78 .

NARAYAN S , ISHRAR S , KUMAR A , et al . Performance analysis of 4to6 and 6to4 transition mechanisms over point to point and IPSec VPN protocols [C ] // Proceedings of 2016 Thirteenth International Conference on Wireless and Optical Communications Networks (WOCN) . Piscataway:IEEE Press , 2016 : 1 - 7 .

CLARK D D . Designing an Internet [M ] . Massachusetts : The MIT Press , 2018 .

LUO H B , CHEN Z , LI J W , et al . Preventing distributed denial-of-service flooding attacks with dynamic path identifiers [J ] . IEEE Transactions on Information Forensics and Security , 2017 , 12 ( 8 ): 1801 - 1815 .

LUO H B , CHEN Z , LI J W , et al . On the benefits of keeping path identifiers secret in future Internet:a DDoS perspective [J ] . IEEE Transactions on Network and Service Management , 2018 , 15 ( 2 ): 650 - 664 .

LUO H B , CUI J B , CHEN Z , et al . Efficient integration of software defined networking and information-centric networking with CoLoR [C ] // Proceedings of 2014 IEEE Global Communications Conference . Piscataway:IEEE Press , 2014 : 1962 - 1967 .

LUO H B , CHEN Z , CUI J B , et al . CoLoR:an information-centric Internet architecture for innovations [J ] . IEEE Network , 2014 , 28 ( 3 ): 4 - 10 .

李红祎 . 基于 OMNeT++的 CoLoR 分组转发机制仿真与分析 [D ] . 北京:北京交通大学 , 2019 .

LI H Y . OMNeT++-based simulation for packet forwarding mechanisms in CoLoR [D ] . Beijing:Beijing Jiaotong University , 2019 .

张康宁 . 共生网络中数据跨域传输管控机制的设计与实现 [D ] . 北京:北京航空航天大学 , 2021 .

ZHANG K N . Design and implementation of a control mechanism for data cross-domain transmission in CoLoR network [D ] . Beijing:Beihang University , 2021 .

潘刚 . 智慧协同网络中边界路由器的设计与开发 [D ] . 北京:北京交通大学 , 2018 .

PAN G . Design and development of the border router in SINET [D ] . Beijing:Beijing Jiaotong University , 2018 .

温兴泵 . 服务标识通告和查找机制的设计与实现 [D ] . 北京:北京交通大学 , 2018 .

WEN X B . Design and implementation of announcement and lookup mechanisms for service identifiers [D ] . Beijing:Beijing Jiaotong University , 2018 .

WEN X B , LUO H B , LIN Y . Interest forwarding in CoLoR:a baseline implementation and performance evaluation [C ] // Proceedings of 2016 IEEE/CIC International Conference on Communications in China (ICCC) . Piscataway:IEEE Press , 2016 : 1 - 6 .

刘洲彪 . 共生网络中的DDoS攻击检测与溯源机制研究与验证 [D ] . 北京:北京航空航天大学 , 2020 .

LIU Z B . DDoS attack detection and traceback in CoLoR network:mechanism design and validation [D ] . Beijing:Beihang University , 2020 .

陈哲 . 智慧协同网络基于路径标识的路由体系及安全性研究 [D ] . 北京:北京交通大学 , 2016 .

CHEN Z . Research on path-identifier-based routing architecture and its security in smart identifier network [D ] . Beijing:Beijing Jiaotong University , 2016 .

LI J W , LUO H B , ZHANG S , et al . Traffic engineering in information-centric networking:opportunities,solutions and challenges [J ] . IEEE Communications Magazine , 2018 , 56 ( 11 ): 124 - 130 .

LI J W , LUO H B , ZHANG S , et al . Design and implementation of efficient control for incoming inter-domain traffic with information-centric networking [J ] . Journal of Network and Computer Applications , 2019 , 133 : 109 - 125 .

李隽杰 . 基于共生网络的无人机集群路由机制设计与仿真 [D ] . 北京:北京航空航天大学 , 2020 .

LI J J . CoLoR based routing mechanism for UAV swarm networking:design and simulation [D ] . Beijing:Beihang University , 2020 .

ZHANG M , LUO H B , ZHANG H K . A survey of caching mechanisms in information-centric networking [J ] . IEEE Communications Surveys ＆ Tutorials , 2015 , 17 ( 3 ): 1473 - 1499 .

LUO H B , CHEN Z , CUI J B , et al . An approach for efficient,accurate,and timely estimation of traffic matrices [C ] // Proceedings of 2014 IEEE Conference on Computer Communications Workshops . Piscataway:IEEE Press , 2014 : 67 - 72 .

浏览量

785

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

网络体系结构的研究现状和发展动向

全栈信创电子邮件系统实践

基于多智能体强化学习的异构网络CRE偏置动态优化算法

基于审计博弈的安全协作频谱感知方案

面向异构网络的可重构智能表面辅助资源优化方法