Research of the computer network architecture based on Meta-Net

Xinnian Wang,Yixiang Chen

DOI: https://doi.org/10.1109/IEEC.2010.5533190

2010-01-01

Abstract:In this paper, the concept of "Meta-Network" is put forward based on the trusted domain, and it is described by a formal language. Consider for the network safety, the corresponding rules are brought out to build the enterprise security network structure based on the Meta-Network. © 2010 IEEE.

What problem does this paper attempt to address?

Research on Network Architecture with Trustworthiness and Controllability.

Chuang Lin,Xue-Hai Peng

DOI: https://doi.org/10.1007/s11390-006-0732-2

IF: 1.871

2006-01-01

Journal of Computer Science and Technology

Abstract:In this paper, the architecture of trustworthy and controllable networks is discussed to meet arising application requirements. After reviewing the lessons and experiences of success and failure in the Internet and summarizing related work, we analyze the basic targets of providing trustworthiness and controllability. Then, the anticipant architecture is introduced. Based on the resulting design, several trustworthy and controllable mechanisms are also discussed.
Meta Computing

Xue Xiao,Minghui Xu,Xi Cheng,Dongxiao Yu,Runyu Pan,Chenxu Wang,Weifeng Lyu

DOI: https://doi.org/10.1109/MNET003.2300092

IF: 10.294

2023-02-19

IEEE Network

Abstract:With the continuous improvement of information infrastructures, academia and industry have been constantly exploring new computing paradigms to fully exploit computing powers. In this paper, we propose Meta Computing, a new computing paradigm that aims to utilize all available computing resources hooked on the Internet, provide efficient, fault-tolerant, and personalized services with strong security and privacy guarantee, and virtualize the Internet as a giant computer, that is, “Network-as-a-Computer, NaaC”, or “Meta Computer” for short, for any task or any person on-demand. Meta computing possesses the following three functional characteristics: supporting zero-trust environments, integrating all available computing resources, and configuring meta computers on-demand. In this article, we present an architecture for meta computers and put forward open technological challenges to realize meta computing.

Computer Science,Engineering
Architecture of Trustworthy Networks

Xue-hai Peng,Chuang Lin

DOI: https://doi.org/10.1109/DASC.2006.20

2006-01-01

Abstract:Existing isolated and add-on secure systems are rarely robust under attack, misoperation and internal faults. Secure communication only offers little protection if one ore more components are compromised, and are not sufficient for holistic and systemic security. This paper proposes the concept of trustworthy networks, which makes advances along these traditional researches on network security in combination. We outline the key challenges in constructing trustworthy networks, and define three properties, namely security, survivability and controllability. Consulting human interactions, the abstract architecture for trustworthy networks is proposed, depicting protocols layers, topology structure, entities and components, and protocol steps
Research on a New Infrastructure of Trustworthy Networks

ZHANG Min,LUO Guang-chun

DOI: https://doi.org/10.3969/j.issn.1001-0548.2007.06.012

2007-01-01

Abstract:The application security problem of Internet is far from being completely solved. In this paper, some basic concepts and critical issues in trustworthy computer network are first introduced. Then an architecture of trustworthy network, and host Identity Protocol as end system identity, is proposed to make sure communicate trustworthy.
Computer Network Security Technology Research

Shen Wei

DOI: https://doi.org/10.1007/978-3-319-98776-7_98

2018-11-05

Abstract:With the development of the information technology, computer information system has played an important role in modern society. As long as any break appears in computer information system, it takes a huge effect in whole society. Based on the analysis of network information safety factors, and then put forward common computer network information safety protection strategy, and the development of the network information safety was prospected and formed the network information safety protection system. There is an important, direct and realistic significance in research about computer system security. With the development of computer and communication technology, the computer net will penetrate every field of our social life as an important method of exchanging information. So, recognizing the frangibility and potential threatens of the net and some existent security problems objectively, taking effectively security strategy and ensuring the security of the net information are the things that every country, and group and every person must envisage. From the basic concept and existent problem of the net information security, some digital security technologies, such as information cryptography technology, digital abstract, digital signature, digital envelope and digital credentials have been analyzed in the paper.
Efficiently Secure Architecture for Future Network

YANG Xin,LI Hui,QUE Jianming,MA Zhentai,LI Gengxin,YAO Yao,WANG Bin,JIANG Fuli

DOI: https://doi.org/10.11896/jsjkx.220600265

2023-01-01

Abstract:Traditional IP-based Internet offers an end-to-end data transport service and has developed rapidly in the past half-century.However,serious security incidents emerged from attacks based on traditional networks.Traditional security mechanisms(e.g.,firewalls,intrusion detection systems) enhance security.However,most of them only provide some remedial strategies rather than solve the address-security problem radically due to the lack of change in network design.The overall in-depth security of the networked system cannot be guaranteed without a fundamental change.In order to meet the development requirements of the next generation of an endogenous security network,one of the future networks,the multi-identifier network(MIN),is introduced as our research background.This paper proposes an efficient scheme in hieratical architecture that provides comprehensive protection by addressing the security aspects pertaining to the network and application layers.At the network layer,the proposed architecture develops a multi-identifier routing scheme with embedded identity-based authentication and packet signature mechanisms to provide data tamper-resistance and traceability.At the application layer,the proposed architecture designs a mimic defensive scheme combined with weighted network centrality measures.This scheme focuses on protecting the core components of the whole network to improve the service's robustness and efficiently resist potential attacks.This paper tests and evaluates the proposed scheme from a theoretical and practical perspective.An analytical model is built based on the random walk for theoretical evaluation.In experiments,the proposed scheme is developed in MIN as MIN-VPN.Then considering IP-VPN as a baseline,anti-attack tests are conducted on IP-VPN and MIN-VPN.The results of theoretical evaluations and experiments show that the proposed scheme provides excellent transmission performance and successful defense against various TCP/IP-based attacks with acceptable defensive cost,demonstrating this security mechanism's effectiveness.In addition,after long-period penetration testing in three international elite security contests,the proposed method is effectively immune to all TCP/IP-based attacks from thousands of professional teams,thus verifying its strong security.
Towards Trusted Networks

guoming lu,lemin li,jianming liao,yujie hao,janping li

DOI: https://doi.org/10.1142/9789812799524_0243

2008-01-01

Abstract:Over the last two decades, the Internet has transformed the life of people around the world. However, there are aspects of its design, based on decisions made in the 1970's that severely limit its security, availability, and manageability. Trusted network is the promising technology to address these problems. In this paper, we first review trusted computing, and then we study essential properties of trusted network, at last outline the key challenges in constructing trusted networks.
Composable Tools For Network Discovery And Security Analysis

G Vigna,F Valeur,Jy Zhou,Ra Kemmerer

DOI: https://doi.org/10.1109/CSAC.2002.1176274

2002-01-01

Abstract:Security analysis should take advantage of a reliable knowledge base that contains semantically-rich information about a protected network. This knowledge is provided by network mapping tools. These tools rely on models to represent the entities of interest, and they, leverage off network discover), techniques to populate the model structure with the data that is pertinent to a specific target network. Unfortunately, existing tools rely on incomplete data models. Networks are complex systems and most approaches oversimplify their target models in an effort to limit the problem space. In addition, the techniques used to populate the models are limited in scope and are difficult to extend.This paper presents NetMap, a security tool for network modeling, discovery, and analysis. NetMap relies on a comprehensive network model that is not limited to a specific network level; it integrates network information throughout the layers. The model contains information about topology, infrastructure, and deployed services. In addition, the relationships among different entities in different layers of the model are made explicit. The modeled information is managed by using a suite of composable network tools that can determine various aspects of network configurations through scanning techniques and heuristics. Tools in the suite are responsible for a single, well-defined task. Each tool has an abstract specification of the input, the output, the type of processing, and the requirements for carrying out a task. Tool descriptions are expressed in a Network Tool Language. The tool descriptions are then stored in a database. By using the network model and the tool descriptions, NetMap is able to automatically determine which tools are needed to perform a particular complex task and how the tools should be scheduled to obtain the requested results.
Computer Network Security System Research

xue yong wan,liang zhang,wei xu,hong hui gong

DOI: https://doi.org/10.4028/www.scientific.net/AMM.599-601.1457

2014-01-01

Abstract:the computer network is widely applied to people's attention,computer network security is very important,we must take effective measures to ensure the security of computer network.This paper analyzes the implications of computer network security system and its security mechanism,and for the current network security should be involved in some of the elements is introduced.
Construction of the Secure Enterprise Network Based on Multi-layer Protection

Wang Hong-pin

Abstract:In this paper we first analyze the present situation of the network security. In view of current development trend of network attack, together with practical experience and research results, the paper proposes a workable enterprise network security multi-layer protection strategy, and has given a concrete construction plan. This plan not only takes seriously to protect system's constitution, but also integrated many level protection products. Application has shown that the plan can improve integration security protection func- tions of the enterprise network.

Engineering,Computer Science
Trusted computer systems in network environment

Tiange SI,Duo LIU,Yiqi DAI

DOI: https://doi.org/10.3321/j.issn:1000-0054.2007.07.034

2007-01-01

Abstract:To deal with worsening network security problems, a trusted computer system model for network applications was developed based on the transparence computing paradigm. The model effectively controls security problems within the computer by using transparence computing technology. Problems among computers inside a network can be controlled by using a star topology with the monitor in the center of the model which watches and controls communications among the system entities. The monitor can filter data transfers and dynamically isolate physical connections among host computers, between host computers and servers, as well as between host computers and the outside network. Analyses show that this model effectively solves network security problems and guarantees local area network safety.
Security, Controllability, Manageability and Survivability in Trustworthy Networks

WANG Sheng,YU Hong-fang,XU Du

DOI: https://doi.org/10.3969/j.issn.1009-6868.2008.01.008

2008-01-01

Abstract:The Internet plays increasingly important roles in everyone's life, but the existence of a mismatch between the basic architectural idea beneath the Internet and the emerging requirements for it is also becoming more and more obvious. Although the Internet community came up with a consensus that the future network should be trustworthy, the concept of networks and the ways leading us to a trustworthy network are not yet clear. This research insists that the security, controllability, manageability, and survivability should be basic properties of a trustworthy network. The key ideas and techniques involved in these properties are studied, and recent developments and progresses are surveyed. At the same time, the technical trends and challenges are briefly discussed.
Research on Trusted Campus Network System Based on Authentication Technology

阎浩,张燕,严筱永

DOI: https://doi.org/10.3969/j.issn.1006-2475.2010.01.037

2010-01-01

Abstract:The traditional campus network system uses firewall and some access control policies to ensure its security,the network of this model just can prevent the danger from external,but can not effectively guard against the internal hidden security flaws,therefore,improving the internal security is an important link for secirity of the whole campus network.This paper analyzes the principle and characteristic of trusted network,applies the trusted network into the campus network,puts forward a new campus network system based on the authentication technology,at the same time,also describes its structure and elements,and gives the network topology diagram,finally analyzes the priciple of security mechanism and the specific methods for achieving this.
A Framework and It's Application for Security Architecture of Computer Networks

Haixin Duan,Jianping Wu

DOI: https://doi.org/10.3321/j.issn:1002-8331.2000.05.008

2000-01-01

Abstract:The definitions of some concepts related to security architecture for computer networks are presented firstly in this paper, and then, a framework is proposed from the aspect of security requirements. Based on the analysis of dependence among security services, a method is presented for classifying and rating network security according to se curity services and mechanisms. After the analysis of security mechanisms in TCP/IP protocol including IPSec and SSL, a protocol layered entity model is presented for implementation of security services and security management. From the aspect of entity unit, all kinds of security technologies are organized into to four layers. The place of security management in the architecture and content of management activities for large networks are described. At the end of this paper, further research directions are pointed about the security architecture.
Secure Network Component Architecture Model

Zhou Yi,Li Ying,Li Yang,Wu Zhaohui

DOI: https://doi.org/10.1109/icnsc.2006.1673131

2006-01-01

Abstract:In the Internet computing environment, clients usually invoke remote components to accomplish computation. As a result, many security problems are raised. Traditional network component architecture model focuses on business logic. It takes into little consideration the security problems when business logic is invoked. This paper proposes secure network component architecture model (SNCAM) to address them. It classifies clients according to their credibility levels on the component side. Next, we discuss the main idea of this paper, which is the security domain. To reduce the overhead introduced by the security mechanisms, a method called security agent is proposed. Finally, it quantitatively determines the performance cost introduced by the security mechanisms, and when to use the security agent
The Research of Network Security Technologies

Zhen Wang,Zhijie Liu,Xiaoyao Xie

DOI: https://doi.org/10.1109/icasid.2009.5277012

2009-01-01

Abstract:Based on this essay, we introduce the current network security technologies and problems. Also, we analyze the excellence and weakness of the firewall technologies, the intrusion detection and prevention technology in order to integrate the firewall technology and intrusion prevention technology, which can help to improve the real-time check, accuracy and recovery ability of the network security system.
Research for Network Security System Design

余冬梅,刘密霞,冯涛

DOI: https://doi.org/10.3969/j.issn.1673-629x.2004.02.041

2004-01-01

Abstract:The greater the availability of the network, the greater its vulnerability to threats from within and outside the organization. To an organization, an enterprise, constructing an appropriate network security system is very necessary. Based on a framework for network security system design put forwarded in, detailed analysis of the phase of network security design is made in this paper, and architecture model and policy management implemented model are given, which hangs security architecture, security policy implement and the enforced mechanism of network security together, and insures the transition between high-level security requirement analysis and the low-level system implementation smoothly.
Research on Computer Network Security Analysis Modeling Based on Artificial Intelligence Technology

Yan Huang

DOI: https://doi.org/10.1088/1757-899X/740/1/012114

2020-03-17

IOP Conference Series: Materials Science and Engineering

Abstract:With the development of network technology, network is more and more closely related to people’s lives. Network security has been paid more and more attention, and the research on network security has gradually been put on the agenda. The main purpose of computer network security research is to extract the system data and factors related to computer network security and establish a model to analyze computer network security. Computer security concerns people’s vital interests. Now, hacker attacks and virus intrusions often occur, which threaten people’s privacy and security. The research work of security analysis needs to extract the system resources and security factors related to computer network security and establish a security model oriented to security analysis. Based on the analysis of the connotation and current situation of computer network security, this paper points out the main problems existing in the network security model, in order to explore a practical model for improving computer network security analysis.

Computer Science,Physics
Network Security Emergency Response System Based on Metropolitan Area Network

Yan LIU

DOI: https://doi.org/10.3969/j.issn.1671-1122.2015.09.037

2015-01-01

Abstract:With the rapid popularization of the Internet, the security threat facing the network information security is also becoming more and more serious. This paper presents a based on metropolitan area network coverage throughout the city of the Internet and the key network infrastructure of network security emergency response system, and introduces the hierarchical architecture. The core functions of the system are described in detail. At key network nodes of MAN, the system can timely warn large-scale network attacks and virus spread, which can protect the Internet and key sites of network security. This paper also presents the measures of system validation.
Research on Security Technology of Mobile Network in Software Architecture

CHEN Zhen,XU Jian-lin,YU Yi-fan,LIU Hong-jian

DOI: https://doi.org/10.3969/j.issn.1671-1122.2013.12.002

2013-01-01

Abstract:With the wide application of mobile terminal, security issues of mobile network software system have become increasingly prominent, the world has many researchers devoted themselves to the study of mobile network system security. This paper analyzes the current commonly used in mobile network software architecture and security risk, put forward a variety of security solutions for the direction and methods, summarizes the progress of research in the field on each direction, the security tools are analyzed, and the future research ideas are discussed.

Research of the computer network architecture based on Meta-Net

Research on Network Architecture with Trustworthiness and Controllability.

Meta Computing

Architecture of Trustworthy Networks

Research on a New Infrastructure of Trustworthy Networks

Computer Network Security Technology Research

Efficiently Secure Architecture for Future Network

Towards Trusted Networks

Composable Tools For Network Discovery And Security Analysis

Computer Network Security System Research

Construction of the Secure Enterprise Network Based on Multi-layer Protection

Trusted computer systems in network environment

Security, Controllability, Manageability and Survivability in Trustworthy Networks

Research on Trusted Campus Network System Based on Authentication Technology

A Framework and It's Application for Security Architecture of Computer Networks

Secure Network Component Architecture Model

The Research of Network Security Technologies

Research for Network Security System Design

Research on Computer Network Security Analysis Modeling Based on Artificial Intelligence Technology

Network Security Emergency Response System Based on Metropolitan Area Network

Research on Security Technology of Mobile Network in Software Architecture