检索结果-内蒙古大学图书馆

arXiv 2022年

作者： Becker, Soeren Pfandzelter, Tobias Japke, Nils Bermbach, David Kao, Odej Technische Universität Berlin Distributed and Operating Systems Research Group Germany Technische Universität Berlin Einstein Center Digital Future Mobile Cloud Computing Research Group Germany

The growing research and industry interest in the Internet of Things and the edge computing paradigm has increased the need for cost-efficient virtual testbeds for large-scale distributed applications. researchers, students, and practitioners need to test and evaluate the interplay of hundreds or thousands of real software components and services connected with a realistic edge network without access to physical infrastructure. While advances in virtualization technologies have enabled parts of this, network emulation as a crucial part in the development of edge testbeds is lagging behind: As we show in this paper, NetEm, the current state-of-the-art network emulation tooling included in the Linux kernel, imposes prohibitive scalability limits. We quantify these limits, investigate possible causes, and present a way forward for network emulation in large-scale virtual edge testbeds based on eBPFs. Copyright © 2022, The Authors. All rights reserved.

关键词： Edge computing

来源：评论

学校读者我要写书评

暂无评论

CPCED: a container escape detection system based on CNI plugin

CPCED: a container escape detection system based on CNI plug...

引用

IEEE International Conference on Trust, Security and Privacy in computing and Communications (TrustCom)

作者： Yu Hao Xu Zhang Dongbin Wang School of Cyberspace Security Beijing University of Posts and Telecommunications Beijing China School of Cyberspace Security Beijing University of Posts and Telecommunications National Engineering Research Center for Mobile Internet Security Beijing China School of Cyberspace Security Beijing University of Posts and Telecommunications Key Laboratory of Ministry of Education and Trustworthy Distributed Computing and Service Beijing China

ISBN: (数字)9798331506209

ISBN: (纸本)9798331506216

Container escape detection is a critical research topic in the field of cloud security. Among the challenges faced in modern cloud security, the issue of container escape poses a significant threat due to its direct impact on the security of the host machine. Although recent research has proposed various methods to address such issue, they have shortcomings in terms of real-time capabilities and deployment in multinode environments. Meanwhile, container network interface (CNI) plugins provide network functionality for container management systems such as Kubernetes, offering ease of use and scalability. Therefore, we propose CPCED, a real-time container escape detection system running on a generic CNI plugin, and implement the prototype. The system defines the container namespace event that is used to detect insecure interactions by monitoring its changes in the permissions of the process namespace. To detect the events, an algorithm is proposed to extract suspicious process paths and command context in Kubernetes and Docker environments. The experimental results show that this system detects nine container escape vulnerabilities successfully. Compared to PACED, one of the real-time container escape attack detection systems, the memory usage of CPCED is reduced by 7.6% on average, and the average detection time of single vulnerability is 18.6% of PACED’s.

关键词： Privacy Runtime Cloud computing security Scalability Prototypes Computer architecture Containers Real-time systems Security Network interfaces

来源：评论

学校读者我要写书评

暂无评论

A Hybrid Routing Mutation Mechanism based on Mutation Cost and Resource Trustworthiness in Network Moving Target Defense 7

A Hybrid Routing Mutation Mechanism based on Mutation Cost a...

引用

7th IEEE International Conference on Data Science in Cyberspace, DSC 2022

作者： Guo, Kun Gao, Yibo Wang, Dongbin Zhi, Hui Zhang, Tao Lu, Yueming Key Laboratory of Trustworthy Distributed Computing and Service Ministry of Education Beijing University of Posts and Telecommunications Beijing China Beijing University of Posts and Telecommunications Cyberspace Security Research Center Peng Cheng Laboratory Beijing China Beijing University of Posts and Telecommunications National Engineering Laboratory for Mobile Network Beijing China TravelSky Technology Limited Beijing China China Academy of Launch Vehicle Technology Beijing China

ISBN: (数字)9781665474801

ISBN: (纸本)9781665474801

Network moving target defense technology can effectively defend against attacker monitoring of the service. The technology makes it more difficult for attackers to attack and can ensure secure communication for services. However, there may be multiple network attacks in the network. As a result, there may be security problems with the trustworthiness of the network resource mutation space required for network moving target defense technology. The focus of current researches is mostly on the mutation timing and cost optimization of the resource mutation space. It may lead to the possibility that the resources in the resource mutation space have been already under network attacks. In this paper, we propose a hybrid routing mutation mechanism based on mutation cost and resource trustworthiness in SDN networks. The mechanism is able to evaluate the routing mutation space selected by the routing-based network moving target defense technology. In terms of both mutation cost and resource trustworthiness, the optimal weighting ratio of the two factors will be to discovered. Simulation results show that the proposed mechanism can effectively enhance the ability of the routing mutation space to avoid attacked nodes and links and improve the transmission success rate of services. © 2022 IEEE.

关键词： Network routing

来源：评论

学校读者我要写书评

暂无评论

AuctionWhisk: Using an auction-inspired approach for function placement in serverless fog platforms

arXiv

引用

arXiv 2021年

作者： Bermbach, David Bader, Jonathan Hasenburg, Jonathan Pfandzelter, Tobias Thamsen, Lauritz Mobile Cloud Computing Research Group TU Berlin Einstein Center Digital Future Berlin Germany Distributed and Operating Systems Research Group TU Berlin Germany

The Function-as-a-Service (FaaS) paradigm has a lot of potential as a computing model for fog environments comprising both cloud and edge nodes, as compute requests can be scheduled across the entire fog continuum in a fine-grained manner. When the request rate exceeds capacity limits at the resource-constrained edge, some functions need to be offloaded towards the cloud. In this paper, we present an auction-inspired approach in which application developers bid on resources while fog nodes decide locally which functions to execute and which to offload in order to maximize revenue. Unlike many current approaches to function placement in the fog, our approach can work in an online and decentralized manner. We also present our proof-of-concept prototype AuctionWhisk that illustrates how such an approach can be implemented in a real FaaS platform. Through a number of simulation runs and system experiments, we show that revenue for overloaded nodes can be maximized without dropping function requests. Copyright © 2021, The Authors. All rights reserved.

关键词： Fog

来源：评论

学校读者我要写书评

暂无评论

A Hybrid Routing Algorithm based on Destruction Resistance Cost and Reliability in Flying Ad-Hoc Networks 7

A Hybrid Routing Algorithm based on Destruction Resistance C...

引用

7th International Conference on Computer and Communications, ICCC 2021

作者： Guo, Kun Wang, Dongbin Zhi, Hui Gao, Yibo Zhang, Tao Lv, Tiejun Lu, Yueming Beijing University of Posts and Telecommunications Key Laboratory of Trustworthy Distributed Computing and Service Ministry of Education Beijing China Beijing University of Posts and Telecommunications National Engineering Laboratory For Mobile Network Beijing China TravelSky Technology Limited Beijing China Beijing University of Posts and Telecommunications Cyberspace Security Research Center Peng Cheng Laboratory Beijing China China Academy of Launch Vehicle Technology Beijing China

ISBN: (纸本)9781665409506

Existing routing algorithms in Flying Ad-Hoc Net- works (FANETs) lack the optimization consideration of destruction resistance cost caused by routing recovery when some nodes fail suddenly. In this paper, we propose a hybrid routing algorithm based on destruction resistance cost and reliability. Based on the real-time network topology and network state, the algorithm can provide a multi-parameters-based routing path with low destruction resistance cost for communication transmission. It can ensure that the main routing path can be quickly recovered after interruption and reduce the process of discovering new routing paths. We have constructed a variety of simulation scenarios to analyze the proposed algorithm and the existing algorithms. The simulation results show that the pro- posed algorithm has good performance in reducing destruction resistance cost. © 2021 IEEE.

关键词： Routing algorithms

来源：评论

学校读者我要写书评

暂无评论

A Hybrid Routing Algorithm based on Destruction Resistance Cost and Reliability in Flying Ad-Hoc Networks

A Hybrid Routing Algorithm based on Destruction Resistance C...

引用

International Conference on Computer and Communications (ICCC)

作者： Kun Guo Dongbin Wang Hui Zhi Yibo Gao Tao Zhang Tiejun Lv Yueming Lu Key Laboratory of Trustworthy Distributed Computing and Service Ministry of Education Beijing University of Posts and Telecommunications Beijing China National Engineering Laboratory for Mobile Network Beijing University of Posts and Telecommunications Beijing China TravelSky Technology Limited Beijing China Cyberspace Security Research Center Peng Cheng Laboratory Beijing University of Posts and Telecommunications Beijing China China Academy of Launch Vehicle Technology Beijing China

ISBN: (纸本)9781665409513

关键词： Resistance Analytical models Costs Computer network reliability Simulation Routing Real-time systems

来源：评论

学校读者我要写书评

暂无评论

Adaptive Probabilistic Decision-Based Energy Saving Strategy for the Next Generation Cellular Wireless Systems

Adaptive Probabilistic Decision-Based Energy Saving Strategy...

引用

IEEE International Conference on Communications (ICC)

作者： W. Fu Z. Tao J. Zhang D. P. Agrawal Center of Distributed and Mobile Computing Department of Computer Science University of Cincinnati Cincinnati OH USA Mitsubishi Electric Research Laboratories Inc. Cambridge MA USA

As mobile stations (MSs) in the next generation cellular wireless systems will more frequently operate on multiple applications, such as web browsing, VoIP, online video etc., energy saving becomes more critical and face new challenges from the quality of service (QoS) requirements. A special operation state, called sleep mode, is designed for energy saving of MS, in which MS operates on continuous sleep cycles, where every sleep cycle is the sum of a listening window and a sleep window. This paper proposes an energy saving method that adaptively determines sleep cycles and shifts listening window. When MS is in sleep mode, the sleep cycles are extended by probabilistic decisions related to the traffic statistic attributes. Different from conventional methods, our method is also able to deal with mixed traffic pattern by shifting listening window. Extensive simulation results validate the advantages of our method both in terms of energy saving and shorter response time.

关键词： Quality of service mobile computing USA Councils Telecommunication traffic Traffic control Handheld computers Communications Society distributed computing Peer to peer computing Computer science

来源：评论

学校读者我要写书评

暂无评论

Clustering Based Fractional Frequency Reuse and Fair Resource Allocation in Multi-Cell Networks

Clustering Based Fractional Frequency Reuse and Fair Resourc...

引用

IEEE International Conference on Communications (ICC)

Fractional frequency reuse (FFR), using different frequency reuse factors for cell center and edge regions, is able to effectively improve spectrum efficiency in multi-cell OFDMA networks. However, optimal performance is hard to achieve in practice as the efficiency of resource allocation could drop drastically due to the constraint from the frequency partitions formed by FFR. Since the radio resource is pre-partitioned for cell edge and center, fair resource allocation in a cell is also difficult to implement. Conventional frequency partition adjustment either has high complexity due to global optimization or suffers from heavy performance degradation due to absence of effective control on inter-cell interference (ICI). To solve this issue, we create models for analyzing geographical distribution of interference in multi-cell networks. Based on the observed non-uniform distributed ICI, we redefine the zones for fractional reuse and propose clustering based FFR, which offers resource allocation higher flexibility and better fairness with additional spatial dimension. Extensive simulation has been performed to validate practicality and effectiveness of our proposed scheme.

关键词： Radio spectrum management Resource management Interference USA Councils Degradation Space technology Communications Society mobile computing Computer networks distributed computing

来源：评论

学校读者我要写书评

暂无评论

Differentiable Spectrum Partition for Fractional Frequency Reuse in Multi-Cell OFDMA Networks

Differentiable Spectrum Partition for Fractional Frequency R...

引用

IEEE Conference on Wireless Communications and Networking

作者： Weihuang Fu Zhifeng Tao Jinyun Zhang Dharma P. Agrawal Center for Distributed and Mobile Computing Department of Computer Science University of Cincinnati Cincinnati OH USA Mitsubishi Electric Research Laboratories Inc. Cambridge MA USA

To mitigate inter-cell interference (ICI) and achieve higher spectrum efficiency, fractional frequency reuse (FFR) has been widely adopted by the next generation wireless systems, wherein different frequency reuse factors are applied to cell center and cell edge zones. In such conventional FFR, a contiguous radio spectrum is partitioned in a fixed fashion across all cells for edge and cell center zones. This approach evidently lacks the flexibility of inter-cell and/or intra-cell resource allocation adjustment and the capability of dealing with traffic load fluctuation and quality of service (QoS) requirements variations. This paper models the implementation of FFR in a multi-cell network environment and proposes a scheme called D-FFR that can adaptively partition radio spectrum in a distributed manner to achieve different FFR configuration among different cells. Resource demands and various inter-cell/intracell allocation constraints are accounted in D-FFR to enable differentiable inter-cell and/or intra-cell throughput and deliver higher spectrum efficiency. Analytical and extensive simulation results are provided in the paper to validate the effectiveness of our proposed scheme.

关键词： Resource management Telecommunication traffic Quality of service Frequency conversion USA Councils Interference Throughput Communications Society mobile computing Computer networks

来源：评论

学校读者我要写书评

暂无评论

Error Control Strategies for WiMAX Multi-Hop Relay Networks

Error Control Strategies for WiMAX Multi-Hop Relay Networks

引用

GLOBECOM 2009 - 2009 IEEE Global Telecommunications Conference

作者： Weihuang Fu Zhifeng Tao Jinyun Zhang Dharma P. Agrawal Center of Distributed and Mobile Computing Department of Computer Science University of Cincinnati Cincinnati OH USA Mitsubishi Electric Research Laboratories Inc. Cambridge MA USA

Next generation wireless system such as advanced WiMAX (i.e., IEEE802.16m) and LTE advanced will fully embrace multi-hop relay architecture. The conventional Automatic Repeat reQuest (ARQ) and the more recent Hybrid ARQ (HARQ) are two simple yet highly effective error control techniques designed for single hop system. Nevertheless, extending them in a synergistic manner to support multi-hop relay networks is by no means a trivial undertaking. This paper explores a variety of multi-hop error control techniques such as hop-by-hop ARQ, 2-link ARQ and end-to-end ARQ, and various possible combinations with HARQ. We further establish an analytical framework for each of these key techniques and evaluate the performance. Based on the analysis and comparison, we propose a low complexity error control mechanism tailored for the multihop transmission features. Extensive simulation results compare the performance and validate our analytical framework.

关键词： Error correction WiMAX Spread spectrum communication Relays Automatic repeat request Performance analysis Analytical models Throughput Data communication Propagation delay

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：