ID |
原文 |
译文 |
2363 |
然而,分离引入了新的网络安全问题。 |
However, the separation incurs many security prob-lems. |
2364 |
我们发现通过构造特定规则可以构造跨层回环攻击,使得数据包在控制器和交换机之间不断循环转发。 |
In this paper, we find that we can construct controller-to-switch loop (CSL)attacks by leveraging dedicated rules andwell constructed packets. |
2365 |
跨层回环会造成控制器拥塞,并导致控制器无法正常工作。 |
The attacks can effectively exhaust controller resource, which leads to denial of service (DoS). |
2366 |
现有的策略一致性检测方案并不能检测跨层回环攻击。 |
The existing OpenFlow policy verification schemes only focus on detecting data plane loop, and cannot detect such controller-to-switch loops. |
2367 |
为此,本文提出了一种实时检测和防御跨层回环的方法。 |
In order to detect CSL attacks, we proposed a novel policy verification scheme. |
2368 |
通过构造基于 Packet-out的转发图分析规则路径,从而快速检测和防御回环。 |
The scheme constructs a packet forwarding graph by analyzing network update events and packet-out messages, and efficiently identifies the forwarding loopsby traversing the graph. |
2369 |
我们在开源控制器 Floodlight 上实现了我们提出的回环检测和防御方案,并在 Mininet 仿真器上对其性能进行了评估,结果表明本方案能够实时检测并有效防御跨层回环攻击。 |
In order to evaluate our defense, we implement it in the Floodlight controller, and perform experi-ments with Mininet. The experimental results show that our defense can precisely detect the loop attacks and effectively throttle them. |
2370 |
本文以任意预粗糙代数为赋值格的粗糙逻辑为研究对象,基于格赋值理论,通过在预粗糙代数赋值格和全体公式集上分别建立概率测度,利用积分方法提出了粗糙逻辑中公式的一种新的粗糙概率真度。 |
In this paper, based on lattice evaluation theory and by defining probality measure in pre-rough algebra e-valuation lattice and set of all formulae respectively, the new type of rough probabilistic truth degree of formulae in roughlogic is introduced by the integral method. |
2371 |
证明了粗糙概率真度的 MP 规则、HS 规则和交推理规则,同时引入了公式的精确度和粗糙度的概念。 |
The MP rule, HS rule and meet inference of rough probabilistic truth degree areproved, the concept of accuracy degree and roughness degree of fomulae are introduced also. |
2372 |
基于粗糙概率真度,提出公式间的 9 种粗糙相似度和伪距离,进而提出 3 种近似推理模式,研究了相关性质。 |
At the meantime, the concept ofrough similarity degree and pseudo-distances between formulae are introduced and three different kinds of approximate rea-soning models are estabished. |