ID 原文 译文
2363 然而,分离引入了新的网络安全问题。 However, the separation incurs many security prob-lems.
2364 我们发现通过构造特定规则可以构造跨层回环攻击,使得数据包在控制器和交换机之间不断循环转发。 In this paper, we find that we can construct controller-to-switch loop (CSL)attacks by leveraging dedicated rules andwell constructed packets.
2365 跨层回环会造成控制器拥塞,并导致控制器无法正常工作。 The attacks can effectively exhaust controller resource, which leads to denial of service (DoS).
2366 现有的策略一致性检测方案并不能检测跨层回环攻击。 The existing OpenFlow policy verification schemes only focus on detecting data plane loop, and cannot detect such controller-to-switch loops.
2367 为此,本文提出了一种实时检测和防御跨层回环的方法。 In order to detect CSL attacks, we proposed a novel policy verification scheme.
2368 通过构造基于 Packet-out的转发图分析规则路径,从而快速检测和防御回环。 The scheme constructs a packet forwarding graph by analyzing network update events and packet-out messages, and efficiently identifies the forwarding loopsby traversing the graph.
2369 我们在开源控制器 Floodlight 上实现了我们提出的回环检测和防御方案,并在 Mininet 仿真器上对其性能进行了评估,结果表明本方案能够实时检测并有效防御跨层回环攻击。 In order to evaluate our defense, we implement it in the Floodlight controller, and perform experi-ments with Mininet. The experimental results show that our defense can precisely detect the loop attacks and effectively throttle them.
2370 本文以任意预粗糙代数为赋值格的粗糙逻辑为研究对象,基于格赋值理论,通过在预粗糙代数赋值格和全体公式集上分别建立概率测度,利用积分方法提出了粗糙逻辑中公式的一种新的粗糙概率真度。 In this paper, based on lattice evaluation theory and by defining probality measure in pre-rough algebra e-valuation lattice and set of all formulae respectively, the new type of rough probabilistic truth degree of formulae in roughlogic is introduced by the integral method.
2371 证明了粗糙概率真度的 MP 规则、HS 规则和交推理规则,同时引入了公式的精确度和粗糙度的概念。 The MP rule, HS rule and meet inference of rough probabilistic truth degree areproved, the concept of accuracy degree and roughness degree of fomulae are introduced also.
2372 基于粗糙概率真度,提出公式间的 9 种粗糙相似度和伪距离,进而提出 3 种近似推理模式,研究了相关性质。 At the meantime, the concept ofrough similarity degree and pseudo-distances between formulae are introduced and three different kinds of approximate rea-soning models are estabished.