118 results about "Logical network" patented technology

Techniques are disclosed for providing a context-aware description of anomalous behavior in a computer network. According to one embodiment of the present disclosure, a description of an anomaly detected in computer network activity is received. The description includes one or more features of the computer network associated with the anomaly. Contextual information relating to at least one of the features is generated based on a logical network topology. The logical network topology specifies a plurality of network traffic attributes of the computer network. An alert that includes a second description of the anomaly and the contextual information is generated.

Various systems and methods for providing risk-based vulnerability management are described herein. A system is configured to access an attack graph, the attack graph including exploits represented as preconditions and postconditions; access vulnerability information of a plurality of nodes in the network, the vulnerability information including conditions of the plurality of nodes in the network; access a network connectivity graph that represents a logical network topology of the plurality of nodes in the network; identify a set of attack paths in the attack graph by comparing the conditions of the plurality of nodes in the network with preconditions and postconditions in the attack graph; calculate a risk score for each of the set of attack paths in the attack graph; and present the risk score for each of the set of attack paths.

Embodiments provide solutions for establishing a secure communication channel between systems. A controller e.g. an administrator is able to construct a logical network of computing resources and define the relationships between those resources and the hierarchical structures that they are part of. Tags are used to label or identify the resources in accordance with their role or class within their network e.g. “staff laptop”, “guest laptop” etc., and multiple Tags can be assigned to a given resource. Policies (rules) associated with each tag provide a richness of functionality for each type of class as well as enabling constraints regarding use, security and / or user-related permissions to be applied across an entire group of network resources in a simple, efficient and secure manner. The controller can construct, define and control the resources within the connected environment. Embodiments provide solutions for preventing ARP poisoning attacks, and also improved approaches to DNS and PKI in an overlay network.

A communication method and a functional entity can be applied to the technical field of communication. The communication method may include that a second functional entity sends request information to a first functional entity, the first functional entity receives the request information, and the request information can be used for requesting to check whether a requirement (such as slice configuration) about a logical network to be created can be met or not. In response to determining that a demand (e.g., a slice configuration) cannot be satisfied, the first functional entity sends response information to the second functional entity including first time information, the second functional entity receives the response information, the first time information indicating that the demand can be satisfied in a first time period in the future. According to the method provided by the embodiment of the invention, the success rate of logic network creation can be effectively improved.

A system comprising, at least: a first apparatus configured to implement a session management function of a core network of a communication network system, the session management function operating in a control plane; and a second apparatus configured to implement the user plane function that operates in the user plane, the first apparatus configured at least to perform: deriving a network instance mapped to transport resources for a user plane from a network slice identifier of a packet data unit session relating to logical network resources, of the packet data unit session, between a user equipment and a data network; and providing an information element of the network instance to a user plane function of the core network and requesting the user plane function of the core network to exchange user plane traffic for the packet data unit session based on the network instance.

Network address migration using a destination compute instance to update network configuration information in a cloud environment is disclosed. A network interface either using a private address within a subnet corresponding to the created network interface or using a floating address outside of the subnet corresponding to the created network interface is created. A first node of the HA pair with a service provider interface. The first node is an active data server of the HA pair and the second node is a backup node of the HA pair. Requests are serviced the first node using the created network interface. Upon failure of the first node, the second node performs a failover, wherein if the first node was utilizing a floating address, the second node registers the second node with the service provider interface by adding an address of the second node to the route table.

The invention provides a computing power network isolation method and device for an intelligent computing center cloud platform, and relates to the technical field of intelligent computing centers, intelligent computing centers and computing power infrastructures, and the method comprises the steps: S1, obtaining first network boundary information; s2, configuring a network for the computing power of the intelligent computing center cloud platform based on the first network boundary information; and S3, according to the first network boundary information, the network is divided into at least two network isolation spaces according to network isolation objects, the network isolation objects comprise at least one of tenants, items, tasks, services, containers and virtual servers, and each network isolation space is configured with a corresponding logic network. In the invention, the network isolation space is divided for the computing power configuration logic network, and the first network boundary comprises the network boundary information of different granularities, so that the computing power of the intelligent computing center cloud platform can be subjected to network isolation according to multiple granularities, and the flexibility of network isolation can be improved.

Some embodiments provide a method for implementing a logical router of a logical network at a first Pod executing on a first node of a Kubernetes cluster to implement data message forwarding for the logical router. The method receives a data message for processing by the logical router. The method determines that the data message requires layer 7 (L7) service processing at the logical router. The method selects a second Pod from multiple Pods that perform L7 service for the logical router. Each of the Pods executes on a different node of the cluster. The method forwards the data message to the second Pod via a layer 2 (L2) construct that connects the first and second Pods.

The invention relates to the technical field of vehicles, and provides a vehicle-mounted terminal network equipment post-replacement management method and device, and the method comprises the steps: carrying out the network access verification of old piece equipment based on a preset first white list and a logic network address carried in a request under the condition that a network connection request of the old piece equipment is received, the first white list stores logic network addresses of offline old pieces; and under the condition that the network verification result indicates that the old piece equipment is allowed to access the in-vehicle domain network, vehicle binding relationship verification is performed on the old piece equipment based on a preset second white list, the equipment identification code of the old piece equipment and the change condition of the vehicle identification code bound with the old piece equipment, and the equipment identification code of the offline old piece is stored in the second white list. According to the method and the device provided by the invention, a traditional mode which completely depends on manual recording, judgment and operation is replaced, so that human errors are reduced, and accurate and automatic management of the life cycle state of the equipment is realized.

Embodiments of the disclosure relate to a secure, high-performance communication link that relies on single network, multiple logical port addressing. Embodiments of an infrastructure are associated with a high-performance communication link that allows for distribution of network traffic across multiple interconnects using a single network address with different logical network port addressing. This high-performance communication link supports data traffic across different processing logic units residing within a destination computing device.

Some embodiments provide a method for forwarding data messages at multiple edge gateways of a logical network that process data messages between the logical network and an external network. At a first edge gateway, the method receives a data message, having an external address as a destination address, from the logical network. Based on the destination address, the method applies a default route to the data message that routes the data message to a second edge gateway and specifies a first output interface of the first edge gateway for the data message. After routing the data message, the method applies a stored NAT entry that (i) modifies a source address of the data message to be a public NAT address associated with the first edge gateway and (ii) redirects the modified data message to a second output interface of the first edge gateway instead of the first output interface.

The present disclosure relates to enhancements in communications for beyond 5G (e.g., 6G) communication system. In one embodiment, the present disclosure discloses a method which comprises for each logical network entity providing a service and involved in a communication procedure within a communication system that comprises a plurality of logical network entities, facilitating, by at least one anchor logical network entity of the plurality of logical network entities, retrieving of state data associated with a user equipment (UE). The retrieving of the state data is performed at a beginning of the communication procedure from a viewpoint of the logical network entity. The method further comprises facilitating, by the at least one anchor logical network entity, storing of the state data at an end of the communication procedure from the viewpoint of the logical network entity.

A network system with a network core unit, a network-managing unit, a device-managing unit, and a network data-infrastructure, and a method for admitting an application device in this network system, are disclosed. The method includes authenticating the application device on network-level, notifying the network-managing unit about an authenticating result, configuring the network data-infrastructure to provide a connectivity between the network-managing unit and the device-managing unit, performing an authenticating action for the application device for authenticating the access device on application-level, notifying the network-managing unit about the authentication result, and configuring the network data-infrastructure to provide an isolated logical network connectivity between the application device and other equally authenticated application devices.

This invention relates to the field of data processing and discloses a method and system for project risk identification, early warning, and control. The method includes: acquiring state parameters of logical state nodes in a multi-dimensional data logical network, constructing state evolution trajectories, and calculating decay acceleration within adjacent time windows; identifying parallel monitoring node pairs sharing a common underlying resource pool and calculating the correlation of decay acceleration; when the correlation is negative and the difference exceeds a threshold, generating directed edges pointing to asymmetric resource offset occupancy in the topology graph and outputting early warning and control instructions. This invention identifies the asymmetry in the decay rate of evolution between parallel nodes, constructs asynchronous decay scissor difference judgment rules, achieves reverse mapping of resource scheduling imbalance, eliminates the blind spots of cross-path resource dependency perception in traditional monitoring systems, locks down the risk source before local fluctuations trigger global cascading failures, and improves the timeliness of early warning.

Some embodiments provide a method for distributing a service rule that is to be enforced across a first set of sites and that is defined by reference to a group identifier that identifies a group of machines. The method distributes the service rule to each site in the first set of sites. The method identifies at least one site in the first set of sites that is not in a second set of sites that has already received a definition of the group. The method distributes the group definition to each identified site in the first set of sites that has not already received the definition of the group.

The application discloses a railway construction simulation model generation method based on full-line design parameters, relates to the technical field of model simulation, collects line track geometric parameters, geological exploration data, bridge and tunnel structure parameters, construction mechanical performance indexes and environmental constraint conditions, constructs a multi-source heterogeneous database, constructs full-line design parameters after spatial coordinate unification and data cleaning, establishes a time and space dependency relationship of construction elements based on a line section topological structure of the railway, generates an initial construction logic network, optimizes the construction logic network according to construction efficiency, resource scheduling rules and dynamic constraint conditions, defines parallel construction events in a railway construction process, maps the full-line design parameters and the construction logic network into a three-dimensional visual simulation model of railway construction through a parameterized modeling engine, introduces real-time railway construction data, predicts a construction delay probability of the railway construction, and determines whether to make construction process adjustment and construction resource redistribution.

A network management apparatus includes at least one processor. The processor is configured to execute a reception process of receiving a signal supplied when a problem is detected in any of a plurality of logical networks in a network virtualization environment, and a first determination process of determining not to perform auto-healing in a case in which a problem is detected in a first logical network that is configured for platform monitoring and a problem is not detected in a second logical network that is configured for application monitoring.

The application discloses a dynamic time-sensitive application network routing method and device, a storage medium and an electronic device, and the method comprises the following steps: in the case that a node application initiates a data request to a center node, the center node determines a candidate path based on a network state matrix model, wherein the node application is a user node mapped on a data plane of a logical network topology of a dynamic time-sensitive application network, and the center node is located on a control plane of the logical network topology; a communication time delay of each candidate path calculated based on a routing metric is used to determine a target path from the candidate path, and a path planning parameter is formed; on the basis of the same time reference, the center node performs quadratic programming on the target path, and forms a shaping configuration parameter; and the center node issues the path planning parameter and the shaping configuration parameter to the node application, so that the node application performs data forwarding based on the target path. The application solves the technical problem of deterministic time delay transmission of time-sensitive applications in a dynamic complex network.

The invention relates to the technical field of cloud service systems, in particular to an SDN-based RoCE multi-tenant management system, which comprises the steps that a control node interacts with a working node, determines network configuration for a newly added tenant container, translates according to a logic network object pointed by the network configuration to obtain a logic data path flow table, and sends the logic data path flow table to the working node; the DPU node generates a flow table rule in accordance with the logical data path flow table. In order to solve the problem that the RoCE performance is reduced due to the fact that an existing tenant management system needs to consume long time to perform rule searching and routing when data writing is performed among multiple containers, the three nodes are introduced, and the RoCE performance is improved by determining a network model of a current pod network for a newly-added tenant container. Therefore, the network resources of the current network are accurately described, the related resources allocated to the tenant container are determined, the DPU node is controlled to route the data through the logic path data flow table, the more efficient inter-container communication efficiency is achieved, and the related network requirements of the RoCE process are met.

The present application relates to the technical field of railway logistics operation and maintenance, and discloses a logistics intelligent management optimization method fusing multi-source data analysis, which comprises the following steps: obtaining business text and structured equipment monitoring data, combining train working diagram and passenger flow density parameters to extract fault action vocabulary; using train arrival and departure time alignment data to lock effective physical time window containing fault evolution; performing passenger flow load decoupling processing on monitoring data, using a baseline model to remove basic load to generate standard residual waveform; fusing building information model and logical network, constructing spatial logical index based on comprehensive proximity; performing cross-station similar equipment matching based on multi-dimensional working condition feature vector and generating maintenance report. Through effectively stripping the interference of passenger flow environmental noise on equipment monitoring data, combining spatial logical correlation and working condition similarity matching, the accuracy of fault feature extraction and the reuse efficiency of cross-site operation and maintenance knowledge are significantly improved.

Embodiments of the present application relate to the technical field of communication, and disclose a multicast method, which comprises the following steps: determining virtual machine information of a target virtual machine; converting the virtual machine information into virtual port information corresponding to a preset SDN controller; and sending the virtual port information to the SDN controller, so that the SDN controller adds the target virtual machine into a multicast group of a virtual multicast network corresponding to a target cloud platform; the virtual multicast network is constructed in advance by the SDN controller according to network configuration information; the network configuration information is converted from logical network information of the target cloud platform; and the target cloud platform comprises the target virtual machine. In the above manner, the embodiments of the present application improve the processing efficiency of multicast services in a cloud environment.

A network management apparatus includes at least one processor. The processor is configured to execute a reception process of receiving a signal supplied when a problem is detected in any of a plurality of logical networks in a network virtualization environment, and a first determination process of determining not to perform auto-healing in a case in which a problem is detected in a first logical network that is configured for platform monitoring and a problem is not detected in a second logical network that is configured for application monitoring.

The present disclosure relates to a network method, a network device and a network apparatus. The network method is for a network comprising a plurality of logical network nodes connected by physical network links, the network method being performed by a controller of the network and comprising: determining a link quality of each physical link between a first logical network node and a second logical network node of the plurality of logical network nodes; and based on the determined link quality of each physical link, link quality labelling the physical links.

The present invention discloses a method for optimizing the power consumption of a multi-level MPRM logic circuit. By changing the layout of the logic network and the node order through the list method and the onset method, the power consumption of the highly optimized multi-level MPRM logic circuit can be effectively reduced while ensuring that the function of the logic network remains unchanged. Due to the combination of advanced cutting algorithms, the method of the present invention also has good optimization efficiency for large-area circuits. The experimental results of the EPFL and MCNC test sets show that the average power consumption optimization rate of the algorithm in this paper reaches 27.87% and 32.44% compared with the original circuit. Compared with the two-level MPRM power consumption optimization algorithm, the average area optimization rate is 4.04%, and the average power consumption optimization rate reaches 2.74%. The present invention provides a new research idea for the power consumption optimization of multi-level MPRM logic circuits: it not only provides a new method for reducing the power consumption of multi-level MPRM, but also effectively reduces the cost of integrated circuit design, which has strong theoretical and practical significance for electronic design automation.

This invention relates to the fields of network security and information technology, specifically to an agent mapping method and system for asset discovery in isolated network blind spots. The method includes: deploying agents on terminals to collect local data, including ARP cache, network connection tables, hardware fingerprints, and behavioral profiles, and encrypting and uploading this data. The main control center performs asset deduplication and authentication based on hardware fingerprints, and uses time window alignment and session continuity analysis algorithms to process connection data, resolving association ambiguities caused by timing misalignments and temporary connections, and establishing high-confidence cross-agent connection relationships. Finally, the connection relationships and behavioral profile data are merged, and unmanaged assets discovered at the link layer are included to synthesize a global asset topology across logical network segments. This invention improves the coverage, identification accuracy, and real-time performance of asset discovery in complex isolated network environments, while eliminating the risk of interference to business networks during the scanning process.

Methods, apparatus, and systems for providing effective slice-level load metrics reporting and load balancing are disclosed. In one example aspect, a wireless communication method includes transmitting, by a first network element, a request to a second network element requesting resource status at a slice level of a slice. The slice represents a logical network of a physical network infrastructure. The method also includes receiving, by the first network element, load information at the slice level from the second network element in response to the request.

A novel method for performing replication of messages in a network that bridges one or more physical networks to an overlay logical network is provided. A physical gateway provides bridging between network nodes of a physical network and virtual machines in the overlay logical network by serving as an endpoint of the overlay logical network. The physical gateway does not replicate messages from the bridged physical network to destination endpoints in the overlay logical network directly, but instead tunnels the message-to-be-replicated to a designated tunnel endpoint in the overlay logical network. The designated tunnel endpoint in turn replicates the message that was tunneled to it to other endpoints in the overlay logical network.

Embodiments of the present disclosure relate to secure, high performance communication links dependent on single network, multiple logical port addressing. Embodiments of the infrastructure are associated with a high performance communication link that allows network traffic to be distributed across multiple interconnects using a single network address with different logical network port addressing. This high performance communication link supports data traffic across different processing logic units residing within a destination computing device.

Some embodiments of the invention provide a method for implementing an edge device that handles data traffic between a logical network and an external network. The method monitors resource usage of a node pool that includes multiple nodes that each executes a respective set of pods. Each of the pods is for performing a respective set of data message processing operations for at least one of multiple logical routers. The method determines that a particular node in the node pool has insufficient resources for the particular node's respective set of pods to adequately perform their respective sets of data message processing operations. Based on the determination, the method automatically provides additional resources to the node pool by instantiating at least one additional node in the node pool.

The present invention relates to a method for extracting a molecular structural formula, a computer-readable medium, and a computing device. The method for extracting a molecular structural formula according to the present invention includes: a target detection step of detecting a molecular structural formula in an information source file and segmenting out a molecular structural formula image including the molecular structural formula from the information source file; a graphic recognition step of performing graphic recognition on the molecular structural formula image to obtain a character part and a skeleton part of the molecular structural formula; a feature point marking step of marking feature points in the skeleton part as first type feature points or second type feature points, the skeleton part including one or more line segments, and the feature points including endpoints of the one or more line segments; and a connection relationship inference step of using a Markov logic network to infer connection relationships between first type feature points, between second type feature points, and between first type feature points and second type feature points according to a predefined inference formula.