检索结果-内蒙古大学图书馆

2006 IEEE International Conference on Communications, ICC 2006

作者： Acharya, Subrata Wang, Jia Ge, Zihui Znati, Taieb F. Greenberg, Albert Department of Computer Science University of Pittsburgh Pittsburgh PA 15260 United States Telecommunications Program University of Pittsburgh Pittsburgh PA 15260 United States AT and T Labs Research Florham Park NJ 07932 United States

ISBN: (纸本)1424403553

The overall performance of a firewall is crucial in enforcing and administrating security, especially when the network is under attack. The continuous growth of the Internet, coupled with the increasing sophistication of the attacks, is placing stringent demands on firewall performance. In this paper, we describe a traffic-aware optimization framework to improve the operational cost of firewalls. Based on this framework, we design a set of tools that inspect and analyze both multidimensional firewall rules and traffic logs and construct the optimal equivalent firewall rules based on the observed traffic characteristics. To the best of our knowledge, this work is the first to use traffic characteristics in firewall optimization. Furthermore, we develop a novel adaptation mechanism that dynamically detects anomalous traffic behavior and adaptively alters the firewall rules to avoid serious performance degradation due to the traffic anomaly. To evaluate the performance of our approaches, we collected a large set of firewall rules and traffic logs at tens of enterprise networks managed by a Tier-1 service provider. Our evaluation results find these approaches very effective. In particular, we achieve more than 10 fold performance improvement by using the proposed traffic-aware firewall optimization. © 2006 IEEE.

关键词： computer system firewalls

来源：评论

学校读者我要写书评

暂无评论

Design and analysis of a quantum-based QoS-aware fair share server for integrated services networks

Design and analysis of a quantum-based QoS-aware fair share ...

引用

Annual Symposium on Simulation

作者： M.S. Boykin T.F. Znati Computer Science Department University of Pittsburgh Pittsburgh PA USA Computer Science Department Telecommunications Program University of Pittsburgh Pittsburgh PA USA

Discrete service disciplines have been shown capable of emulating the ideal generalized processor sharing (GPS) discipline within one maximum-sized packet's transmission time. As a result, the accuracy of such schemes increases with improvements in link speed due to the corresponding reduction in packet transmission delay. However the merits of such accuracy diminish with improvements in link speed as the impact on call admission decisions decreases. Meanwhile, overhead, in terms of the number of scheduling decisions to be made per unit time, increases with the number of packets transmitted. In response, this paper presents an overview of the QFQ service discipline which enables GPS emulation servers to dynamically "tune" their service quanta at run-time based upon the QoS requirements of their currently backlogged connections rather than the statically defined maximum network packet size. Through simulation, the paper also demonstrates how the overhead of a GPS emulation server can be reduced in high speed networks without jeopardizing QoS guarantees or adversely impacting fairness.

关键词： Network servers Intserv networks Global Positioning System Emulation computer science Runtime Web server Web sites Telecommunication traffic High-speed networks

来源：评论

学校读者我要写书评

暂无评论

Entropy as a measure of database information

Entropy as a measure of database information

引用

Annual computer Security Applications Conference

作者： E.A. Unger L. Harn V. Kumar Computer and Information Sciences Kansas State University USA Computer Science Telecommunications Program University of Missouri Kansas City USA

An estimate of the information a database contains and the quantification of the vulnerability of that database to compromise by inferential methods is discussed. Such a measure could be used to evaluate the deterrent value of extant protection methods and provide a measure of the potential for inferential compromise through the use of one of the known attack tools. The authors explore the use of the concept of entropy as defined for information by C.E. Shannon (1948; 1951), for the purpose of quantifying information content in a database and develop a measure of vulnerability based on entropy. Use of the measure, when exact disclosure through the use of a tracker is anticipated, is characterized for both static and dynamic databases at design and operational time.< >

关键词： Entropy Databases Protection Data security Area measurement Time measurement Information retrieval State estimation Information security Cryptography

来源：评论

学校读者我要写书评

暂无评论

An X.500 prototype to support integrated network management 93

An X.500 prototype to support integrated network management

引用

Proceedings of the 1993 ACM conference on computer science

作者： Wei Wei Adrian Tang OSI Laboratory Computer Science and Telecommunications Program University of Missouri at Kansas City Kansas City MO

ISBN: (纸本)9780897915588

Because of the heterogeneity and the distributed nature of integrated network management, a good approach to understand the managed objects by syntax/semantics on the remote managed systems can significantly improve the performance of management applications. In this paper, we describe an X.500 prototype to provide the directory services to support integrated network management. Four directory services are described: partial name resolution, abstract syntax resolution, navigation of Management Information Base, and access control to managed objects.

关键词：

来源：评论

学校读者我要写书评

暂无评论

OPTWALL: A Hierarchical Traffic-Aware Firewall 14

OPTWALL: A Hierarchical Traffic-Aware Firewall

引用

14th Symposium on Network and Distributed System Security, NDSS 2007

作者： Acharya, Subrata Abliz, Mehmud Mills, Bryan Znati, Taieb F. Wang, Jia Ge, Zihui Greenberg, Albert Department of Computer Science University of Pittsburgh PittsburghPA15260 United States Telecommunications Program University of Pittsburgh PittsburghPA15260 United States AT&T Labs Research Florham ParkNJ07932 United States

The overall efficiency, reliability, and availability of a firewall is crucial in enforcing and administrating security, especially when the network is under attack. The continuous growth of the Internet, coupled with the increasing sophistication of the attacks, is placing stringent demands on firewall performance. These challenges require new designs, architecture and algorithms to optimize firewalls. In this paper, we propose OPTWALL, an adaptive hierarchical firewall optimization framework aimed at reducing operational cost of firewalls. The main features of the proposed approach are the hierarchical design, splitting techniques, an online traffic adaptation mechanism, and a strong reactive scheme to counter malicious attacks (e.g. Denial-of-Service (DoS) attacks). To the best of our knowledge, this work is the first of its kind to use traffic characteristics in the design of an adaptive hierarchical firewall optimization framework. To study the performance of OPTWALL, a set of experiments are conducted on Linux ipchains. The performance evaluation study uses a large set of firewall policies and traffic traces managed by a Tier-1 ISP and provides security access for the ISP network from/to its business partners. Results show the high potential of OPTWALL to reduce the operational cost of firewalls. In particular, the results show that a performance improvement of nearly 35% can been achieved in a heavily loaded network environment. © 2007Proceedings of the Symposium on Network and Distributed System Security, NDSS 2007. All Rights Reserved.

关键词： Denial-of-service attack

来源：评论

学校读者我要写书评

暂无评论

A Dynamic, Tunable, QoS-Fair Scheduling Scheme for Mutlimedia Streams

引用

International Journal of Simulation: Systems, science and Technology 2002年第1-2期3卷 5-22页

作者： Boykiny, Michael S. Znati, Taieb F. Department of Computer Science University of Pittsburgh PittsburghPA United States Telecommunications Program University of Pittsburgh PittsburghPA United States

A great deal of packet scheduling research in high speed integrated, multimedia services networks (ISNs) aims to efficiently emulate the Generalized Processor Sharing (GPS) service discipline. The approach used by these schemes has been, first, to maximize the emulation accuracy through the use of packet-by-packet scheduling decisions and then to minimize the complexity involved in making such decisions. While reductions in algorithmic complexity are useful, we believe the straight-forward GPS emulation prescribed by these schemes is not necessary in ISNs. It is the fulfillment of quality of service QoS guarantees, not GPS accuracy, which represents the primary metric for success in ISNs. In this paper, we present a new scheduling approach, QoS-Aware Fair Sharing (QFQ), designed to reduce packet scheduling overhead while guaranteeing the QoS requirements of supported applications. Because the central goal of the QFQ discipline lies in meeting the QoS requirements of backlogged flows and not guaranteeing a weighted-fair portion of the server’s output to such flows, the QFQ approach provides ISN servers with a great deal of flexibility in determining how to service contending application flows. This paper presents this new and innovative scheme which seeks to exploit an excess capacity allocation policy in order to achieve a reduction in service overhead. This paper describes how such an objective can be achieved and shows how excess capacity can be identified for this purpose despite the presence of non-empty service queues. A set simulation experiments demonstrate the capabilities of the QFQ server and compare its performance to other ISN scheduling schemes. © 2002, UK Simulation Society. All rights reserved.

关键词： Quality of service

来源：评论

学校读者我要写书评

暂无评论

STCP: a generic transport layer protocol for wireless sensor networks

STCP: a generic transport layer protocol for wireless sensor...

引用

International Conference on computer Communications and Networks (ICCCN)

作者： Y.G. Iyer S. Gandham S. Venkatesan Telecommunications Engineering Program University of Technology Dallas USA Department of Computer Science University of Technology Dallas USA

We consider the issue of designing a generic transport layer protocol for energy-constrained sensor networks. We present the requirements for such a transport protocol and propose sensor transmission control protocol (STCP). STCP is a generic, scalable and reliable transport layer protocol where a majority of the functionalities are implemented at the base station. STCP offers controlled variable reliability, congestion detection and avoidance, and supports multiple applications in the same network. We present the design and implementation of STCP and evaluate the protocol with different scenarios and network characteristics.

关键词： Transport protocols Wireless application protocol Wireless sensor networks Base stations Sensor phenomena and characterization Temperature sensors computer networks computer science Media Access Protocol Delay

来源：评论

学校读者我要写书评

暂无评论

A software authentication system for the prevention of computer viruses 92

A software authentication system for the prevention of compu...

引用

Proceedings of the 1992 ACM annual conference on Communications

作者： Lein Harn Hung-Yu Lin Shoubao Yang Computer Science Telecommunications Program University of Missouri-Kansas City Kansas City MO Department of Computer Science University of Science and Technology of China Hefei Anhui 230026 PRC

ISBN: (纸本)9780897914727

In the absence of systematic techniques to detect the existence of computer viruses, preventing suspicious software from entering the system at the initial point of entry appears to be the best method to protect computing resources against attacks of computer viruses. Currently, software is distributed primarily by diskettes instead of online transmission. Diskettes are more susceptible to modification and masquerading while on-line transmission usually follows proper user/message authentication. A software authentication system is proposed which does not require a mutually trusted center of both software vendors and users, or users' interaction with any key center. Vendors assume responsibility by signing released software and users verify the authenticity of received software before using it. Through such an authentication process, users eliminate the risk of running “unlicensed” or modified programs, thus eliminating the possibility of virus infections.

关键词：

来源：评论

学校读者我要写书评

暂无评论

A performance evaluation model for a digital group with multislot traffic streams 92

A performance evaluation model for a digital group with mult...

引用

Proceedings of the 1992 ACM annual conference on Communications

作者： D. Medhi A. van de Liefvoort C. S. Reece Computer Science Telecommunications Program University of Missouri-Kansas City 5100 Rockhill Road Kansas City MO

ISBN: (纸本)9780897914727

We present a unified model to compute various performance measures when a mixture of multi-slot traffic streams is offered on a trunk group of an integrated digital network under various bandwidth control schemes. When we considered a bandwidth reservation scheme based on traditional trunk reservation and a variation called partial bandwidth reservation, we have observed that the performance criteria themselves has significant impact in deciding which reservation scheme to use and at what level to use.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Integrated control of connection admission, flow rate, and bandwidth for ATM based networks

Integrated control of connection admission, flow rate, and b...

引用

IEEE Annual Joint Conference: INFOCOM, IEEE computer and Communications Societies

作者： A. Pitsillides P. Ioannou D. Tipper Department of Computer Science University of Cyprus Department of Mathematics University of Cyprus Telecommunications Program University of Pittsburgh USA

We consider the combined control problem of connection admission, flow rate, and bandwidth allocation (capacity, service-rate) under nonstationary conditions. A fluid flow model in state variable form describes the time varying mean behaviour of available bit rate (ABR) traffic, which competes with guaranteed traffic for network resources. Using nonlinear control we derive an integrated control strategy, for the finite buffer and finite server case, that is insensitive to any propagation delay. We also derive bounds on mix between ABR and guaranteed traffic to ensure that control strategy is effective, and select control design variables which can be used to influence the delivered QoS. The performance of proposed scheme is evaluated using analysis and simulation. Simulation results show that it achieves effective server and buffer utilisation (as predicted by analysis) and by appropriate choice of control design variables achieves prescribed bounded delays (for guaranteed traffic only) and zero cell loss (even for ABR traffic demands exceeding server capacity, which if not controlled would cause losses). Hence proposed scheme delivers guaranteed QoS to user and avoids retransmissions, thus increasing network utilisation.

关键词： Centralized control Communication system traffic control Traffic control Fluid flow control Network servers Control design Analytical models Channel allocation Fluid flow Bit rate

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：