共生网络——异构网络安全高效互联的体系结构与机理

doi:10.11959/j.issn.1000-436x.2022079

通信学报 ›› 2022, Vol. 43 ›› Issue (4): 36-49.doi: 10.11959/j.issn.1000-436x.2022079

• 专题：多模态网络环境关键技术 • 上一篇下一篇

共生网络——异构网络安全高效互联的体系结构与机理

罗洪斌¹^,²^,³^,⁴, 张珊¹^,²^,³^,⁴, 王志远¹^,⁴

¹ 北京航空航天大学计算机学院，北京 100191
² 北京航空航天大学软件开发环境国家重点实验室，北京 100191
³ 数学、信息与行为学教育部重点实验室，北京 100191
⁴ 未来区块链与隐私计算北京高精尖创新中心，北京 100191

修回日期:2022-03-22 出版日期:2022-04-25 发布日期:2022-04-01
作者简介:罗洪斌（1977- ），男，重庆人，博士，北京航空航天大学教授、博士生导师，主要研究方向为互联网体系结构、异构网络跨域互联机理等
张珊（1989- ），女，河南焦作人，博士，北京航空航天大学副教授、博士生导师，主要研究方向为异构网络资源管理、边缘网络缓存与智能等
王志远（1993- ），男，山东淄博人，博士，北京航空航天大学副教授，主要研究方向为边缘计算、网络资源协同、移动互联网机制设计等
基金资助:
国家重点研发计划基金资助项目(2019YFB1802803);国家自然科学基金资助项目(61801011)

Architecture and mechanisms for secure and efficient internetworking of heterogeneous network

Hongbin LUO¹^,²^,³^,⁴, Shan ZHANG¹^,²^,³^,⁴, Zhiyuan WANG¹^,⁴

¹ School of Computer Science and Engineering, Beihang University, Beijing 100191, China
² National Key Laboratory for Software Development Environment, Beihang University, Beijing 100191, China
³ Key Laboratory of Mathematics, Information and Behavioral Semantics, Ministry of Education, Beijing 100191, China
⁴ Beijing Advanced Innovation Center for Future Blockchain and Privacy Computing, Beijing 100191, China

Revised:2022-03-22 Online:2022-04-25 Published:2022-04-01
Supported by:
The National Key Research and Development Program of China(2019YFB1802803);The National Natural Science Foundation of China(61801011)

摘要/Abstract

摘要：

介绍了共生网络——一种异构体制网络安全高效互联的体系结构与机理。首先，分析了异构网络互联面临的挑战，凝练出了异构网络互联亟须解决的科学问题。然后，分析和研究了异构网络互联而成网络空间的普适表征机理、体系结构模型、基本工作机理、跨域安全保障机理等。实验结果表明，共生网络已经形成了部分能力，如防范跨域攻击和数据泄露等。最后，介绍了待进一步解决的问题。

关键词: 异构网络, 网络互联, 网络体系结构, 安全, 高效

Abstract:

An architecture named CoLoR (coupling service location and inter-domain routing) was introduced to securely and efficiently interconnect networks with different architectures (called heterogeneous networks below).First, the fundamental challenges and scientific problems that have to be addressed by CoLoR were raised.Then, the core aspects of CoLoR were described, including how to characterize and represent the cyberphysical system comprised by heterogeneous networks, the network architecture, the basic communication model and how secure internetworking was achieved.After that, results from prototype implementation were presented to demonstrate the feasibility and capability of CoLoR, including defending against attacks and preventing data leakage.Finally, some open issues were outlined for future studies.

Key words: heterogeneous network, internetworking, network architecture, security, efficiency

中图分类号:

TP393

罗洪斌, 张珊, 王志远. 共生网络——异构网络安全高效互联的体系结构与机理[J]. 通信学报, 2022, 43(4): 36-49.

Hongbin LUO, Shan ZHANG, Zhiyuan WANG. Architecture and mechanisms for secure and efficient internetworking of heterogeneous network[J]. Journal on Communications, 2022, 43(4): 36-49.

图/表 12

图1

图2

表1

表2

图3

图4

图5

图6

图7

表3

图8

图9

参考文献 32

[1]	CHERITON D R . Sirpent:a high-performance internetworking approach[J]. ACM SIGCOMM Computer Communication Review, 1989,19(4): 158-169.
[2]	CLARK D D , TENNENHOUSE D L . Architectural considerations for a new generation of protocols[J]. ACM SIGCOMM Computer Communication Review, 1990,20(4): 200-208.
[3]	TENNENHOUSE D L , WETHERALL D J . Towards an active network architecture[J]. ACM SIGCOMM Computer Communication Review, 1996,26(2): 5-17.
[4]	CHERITON D . Triad[J]. ACM SIGOPS Operating Systems Review, 2000,34(2): 34.
[5]	KOPONEN T , CHAWLA M , CHUN B G ,et al. A data-oriented (and beyond) network architecture[J]. ACM SIGCOMM Computer Communication Review, 2007,37(4): 181-192.
[6]	JACOBSON V , SMETTERS D K , THORNTON J D ,et al. Networking named content[C]// Proceedings of the 5th International Conference on Emerging networking Experiments and Technologies. New York:ACM Press, 2009: 1-12.
[7]	ZHANG L X , AFANASYEV A , BURKE J ,et al. Named data networking[J]. ACM SIGCOMM Computer Communication Review, 2014,44(3): 66-73.
[8]	RAYCHAUDHURI D , NAGARAJA K , VENKATARAMANI A . MobilityFirst:a robust and trustworthy mobility-centric architecture for the future Internet[J]. ACM SIGMOBILE Mobile Computing and Communication Review, 2012,16(3): 2-13.
[9]	NAYLOR D , MUKERJEE M K , AGYAPONG P ,et al. XIA:architecting a more trustworthy and evolvable Internet[J]. ACM SIGCOMM Computer Communication Review, 2014,44(3): 50-57.
[10]	KOPONEN T , SHENKER S , BALAKRISHNAN H ,et al. Architecting for innovation[J]. ACM SIGCOMM Computer Communication Review, 2011,41(3): 24-36.
[11]	PERRIG A , SZALACHOWSKI P , REISCHUK R M ,et al. SCION:a secure internet architecture[M]. Cham: Springer International Publishing, 2017.
[12]	MCCAULEY J , HARCHOL Y , PANDA A ,et al. Enabling a permanent revolution in Internet architecture[C]// Proceedings of the ACM Special Interest Group on Data Communication. New York:ACM Press, 2019: 1-14.
[13]	张宏科, 苏伟 . 新网络体系基础研究:一体化网络与普适服务[J]. 电子学报, 2007,35(4): 593-598.
	ZHANG H K , SU W . Fundamental research on the architecture of new network—universal network and pervasive services[J]. Acta Electronica Sinica, 2007,35(4): 593-598.
[14]	HEGLAND A M , HAUGE M , HOLTZER A . Federating tactical edge networks:ways to improve connectivity,security,and network efficiency in tactical heterogeneous networks[J]. IEEE Communications Magazine, 2020,58(2): 72-78.
[15]	NARAYAN S , ISHRAR S , KUMAR A ,et al. Performance analysis of 4to6 and 6to4 transition mechanisms over point to point and IPSec VPN protocols[C]// Proceedings of 2016 Thirteenth International Conference on Wireless and Optical Communications Networks (WOCN). Piscataway:IEEE Press, 2016: 1-7.
[16]	CLARK D D . Designing an Internet[M]. Massachusetts: The MIT Press, 2018.
[17]	LUO H B , CHEN Z , LI J W ,et al. Preventing distributed denial-of-service flooding attacks with dynamic path identifiers[J]. IEEE Transactions on Information Forensics and Security, 2017,12(8): 1801-1815.
[18]	LUO H B , CHEN Z , LI J W ,et al. On the benefits of keeping path identifiers secret in future Internet:a DDoS perspective[J]. IEEE Transactions on Network and Service Management, 2018,15(2): 650-664.
[19]	LUO H B , CUI J B , CHEN Z ,et al. Efficient integration of software defined networking and information-centric networking with CoLoR[C]// Proceedings of 2014 IEEE Global Communications Conference. Piscataway:IEEE Press, 2014: 1962-1967.
[20]	LUO H B , CHEN Z , CUI J B ,et al. CoLoR:an information-centric Internet architecture for innovations[J]. IEEE Network, 2014,28(3): 4-10.
[21]	李红祎 . 基于 OMNeT++的 CoLoR 分组转发机制仿真与分析[D]. 北京:北京交通大学, 2019.
	LI H Y . OMNeT++-based simulation for packet forwarding mechanisms in CoLoR[D]. Beijing:Beijing Jiaotong University, 2019.
[22]	张康宁 . 共生网络中数据跨域传输管控机制的设计与实现[D]. 北京:北京航空航天大学, 2021.
	ZHANG K N . Design and implementation of a control mechanism for data cross-domain transmission in CoLoR network[D]. Beijing:Beihang University, 2021.
[23]	潘刚 . 智慧协同网络中边界路由器的设计与开发[D]. 北京:北京交通大学, 2018.
	PAN G . Design and development of the border router in SINET[D]. Beijing:Beijing Jiaotong University, 2018.
[24]	温兴泵 . 服务标识通告和查找机制的设计与实现[D]. 北京:北京交通大学, 2018.
	WEN X B . Design and implementation of announcement and lookup mechanisms for service identifiers[D]. Beijing:Beijing Jiaotong University, 2018.
[25]	WEN X B , LUO H B , LIN Y . Interest forwarding in CoLoR:a baseline implementation and performance evaluation[C]// Proceedings of 2016 IEEE/CIC International Conference on Communications in China (ICCC). Piscataway:IEEE Press, 2016: 1-6.
[26]	刘洲彪 . 共生网络中的DDoS攻击检测与溯源机制研究与验证[D]. 北京:北京航空航天大学, 2020.
	LIU Z B . DDoS attack detection and traceback in CoLoR network:mechanism design and validation[D]. Beijing:Beihang University, 2020.
[27]	陈哲 . 智慧协同网络基于路径标识的路由体系及安全性研究[D]. 北京:北京交通大学, 2016.
	CHEN Z . Research on path-identifier-based routing architecture and its security in smart identifier network[D]. Beijing:Beijing Jiaotong University, 2016.
[28]	LI J W , LUO H B , ZHANG S ,et al. Traffic engineering in information-centric networking:opportunities,solutions and challenges[J]. IEEE Communications Magazine, 2018,56(11): 124-130.
[29]	LI J W , LUO H B , ZHANG S ,et al. Design and implementation of efficient control for incoming inter-domain traffic with information-centric networking[J]. Journal of Network and Computer Applications, 2019,133: 109-125.
[30]	李隽杰 . 基于共生网络的无人机集群路由机制设计与仿真[D]. 北京:北京航空航天大学, 2020.
	LI J J . CoLoR based routing mechanism for UAV swarm networking:design and simulation[D]. Beijing:Beihang University, 2020.
[31]	ZHANG M , LUO H B , ZHANG H K . A survey of caching mechanisms in information-centric networking[J]. IEEE Communications Surveys ＆ Tutorials, 2015,17(3): 1473-1499.
[32]	LUO H B , CHEN Z , CUI J B ,et al. An approach for efficient,accurate,and timely estimation of traffic matrices[C]// Proceedings of 2014 IEEE Conference on Computer Communications Workshops. Piscataway:IEEE Press, 2014: 67-72.

PID前缀	邻域	下一跳节点	通信方式
PX₀	A	R₁	MPLS
PX₁(B)	D	R₉	IPv4
PX₂(B)	C	R₇	IPv4
PX₃(B)	F	R₅	IPv4
?	?	?	?
PX_N(B)	E	R₃	IPv4

SID(前缀)	下一跳节点	下一跳网络	PID前缀
SID₁	R₇	C	PX₂(B)
SID₂	R₇	C	PX₂(B)
SID₃	R₉	D	PX₁(B)
?	?	?	?

情形	测试结果/(万个·秒^-1)
请求分组来自域内，发往域内	352.6
请求分组来自域内，发往域外	121.9
请求分组来自域外，发往域内	321.1
请求分组来自域外，发往域外	96.6

共生网络——异构网络安全高效互联的体系结构与机理

Architecture and mechanisms for secure and efficient internetworking of heterogeneous network

在线阅读

PDF下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 12

参考文献 32

相关文章 15

Metrics

推荐阅读 0

[1]	赵仕祺, 黄小红, 钟志港. 基于信誉的域间路由选择机制的研究与实现[J]. 通信学报, 2023, 44(6): 47-56.
[2]	李元诚, 秦永泰. 基于深度强化学习的软件定义安全中台QoS实时优化算法[J]. 通信学报, 2023, 44(5): 181-192.
[3]	刘雪娇, 钟强, 夏莹杰. 基于双层分片区块链的车联网跨信任域高效认证方案[J]. 通信学报, 2023, 44(5): 213-223.
[4]	刘盈泽, 郭渊博, 方晨, 李勇飞, 陈庆礼. 基于有限理性的网络防御策略智能规划方法[J]. 通信学报, 2023, 44(5): 52-63.
[5]	谢人超, 文雯, 唐琴琴, 刘云龙, 谢高畅, 黄韬. 轨道交通移动边缘计算网络安全综述[J]. 通信学报, 2023, 44(4): 201-215.
[6]	罗智勇, 张玉, 王青, 宋伟伟. 基于贝叶斯攻击图的SDN入侵意图识别算法的研究[J]. 通信学报, 2023, 44(4): 216-225.
[7]	余雪勇, 邱礼翔, 宋家宁, 朱洪波. 无人机辅助边缘计算中安全通信与能效优化策略[J]. 通信学报, 2023, 44(3): 45-54.
[8]	徐明, 张保俊, 伍益明, 应晨铎, 郑宁. 面向网络攻击和隐私保护的多智能体系统分布式共识算法[J]. 通信学报, 2023, 44(3): 117-127.
[9]	张艳硕, 刘宁, 袁煜淇, 杨亚涛. 基于ISRSAC数字签名算法的适配器签名方案[J]. 通信学报, 2023, 44(3): 178-185.
[10]	康海燕, 龙墨澜. 基于吸收马尔可夫链攻击图的网络攻击分析方法研究[J]. 通信学报, 2023, 44(2): 122-135.
[11]	刘彩霞, 季新生, 邬江兴. 移动通信网的内生安全共性问题及破解之道[J]. 通信学报, 2022, 43(9): 70-79.
[12]	石润华, 于辉, 柯唯阳, 徐小桐. 基于BB84态的量子匿名一票否决协议[J]. 通信学报, 2022, 43(8): 109-120.
[13]	陈炜宇, 骆俊杉, 王方刚, 丁海洋, 王世练, 夏国江. 无线隐蔽通信容量限与实现技术综述[J]. 通信学报, 2022, 43(8): 203-218.
[14]	郭渊博, 李勇飞, 陈庆礼, 方晨, 胡阳阳. 融合Focal Loss的网络威胁情报实体抽取[J]. 通信学报, 2022, 43(7): 85-92.
[15]	杜瑞忠, 张玉晴, 李明月. 基于双向索引的高效连接关键字查询动态可搜索加密方案[J]. 通信学报, 2022, 43(5): 123-132.