53 results about "Packet arrival" patented technology

The invention discloses an encrypted malicious traffic detection method and system and a computer readable storage medium, and belongs to the technical field of traffic detection. The encrypted malicious traffic detection method comprises the following steps: acquiring original network traffic data, and constructing a packet length sequence and a packet arrival time interval sequence to form an original time sequence matrix; and extracting a time-frequency energy distribution diagram and a frequency band energy sequence from the packet length sequence through continuous wavelet transform. A time domain time sequence convolution network based on an expansion causal convolution structure is adopted, and a time domain feature vector is extracted from an original time sequence matrix. And extracting frequency domain feature vectors from the time-frequency energy distribution diagram and the frequency band energy sequence by adopting a time-frequency attention and frequency band re-scaling attention module. And performing malicious traffic dichotomy and malicious traffic behavior type multi-classification processing on the time-frequency aggregation feature vector through a hierarchical classifier, and outputting a classification result. According to the scheme, the malicious traffic characterization capability of deep fusion of time-frequency features is realized, and the detection precision of the encrypted malicious traffic is improved.

The embodiment of the application provides a kind of mining behavior detection method, wherein the method comprises: the first computer equipment obtains data packet arrival time sequence, the data packet arrival time sequence includes the time that at least one data packet from target equipment arrives second computer equipment;The first computer equipment obtains block arrival time sequence, and the block arrival time sequence includes the time that at least one mining task arrives mining equipment;The first computer equipment judges the approximate degree of data packet arrival time sequence and block arrival time sequence in time;If the approximate degree is greater than or equal to the first threshold value of preset, determine that the target equipment is suspected mining equipment.The technical scheme of the application can be free from manual operation and maintenance, cover multiple mining scenarios, and can protect user privacy, with strong versatility.

This application provides a software switch caching acceleration method and related apparatus based on FPGA, belonging to the field of network packet processing technology. The method includes: compiling a caching rule set into a decision tree forest using a decision tree construction algorithm, the decision tree forest comprising multiple decision trees of equal depth; mapping the decision tree forest to multiple parallel tree pipelines, the tree pipelines running on the FPGA, each tree pipeline corresponding to a decision tree, and each pipeline stage corresponding to a node layer of the decision tree; broadcasting a preset data packet to all tree pipelines for parallel processing; for each tree pipeline, guiding the preset data packet to traverse each pipeline stage until the preset data packet reaches the target leaf node of the decision tree; performing parallel rule matching on the preset data packet at the target leaf node of each decision tree to obtain the target caching rule matching the preset data packet, thereby accelerating flow table caching classification.

This invention discloses a dynamic optimization method for network switch port WRR scheduling resources based on convex optimization modeling. Applied to the field of switching equipment scheduling and control, it addresses the problem that existing scheduling weight configurations cannot adapt to environmental changes, resulting in unstable forwarding performance of switching equipment. This invention establishes constraint functions based on port bandwidth, token resources, and queue number, collects the arrival probability distribution of data packets in each queue within the switch port to establish a distribution model, and combines the constraint functions and the collected model to construct a convex optimization problem for switch port queue resource allocation. The objective of the optimization problem is defined as minimizing the sum of queuing probabilities of the switch queues. The problem is solved using an existing convex optimization solver, and the results are configured as the weights of each port queue based on the Weighted Round Robin (WRR) scheduling algorithm. This invention solves the problem of adaptive resource allocation during dynamic network traffic exchange, enabling network switching equipment to provide stable network performance under different service loads.

The invention relates to the field of network-on-chip, and particularly provides a network-on-chip hybrid routing design method and device, and the method comprises the following steps: S1, carrying out the pre-calculation and coding of multi-path deterministic information; pre-calculating deterministic information of a shortest path and 1-2 non-shortest paths, and encoding the information to a data packet header flit; s2, carrying out two-hop congestion sensing and multi-path cooperative switching; receiving a self VC state and a next hop node VC state through an extended credit signal, and calculating a joint congestion index; s3, fault detection and dynamic remapping are coordinated; comprising a fault monitoring unit and a path reconstruction unit, the fault monitoring unit detects faults of the fault monitoring unit and adjacent nodes and links, and the path reconstruction unit generates deterministic information of a local alternative path; s4, data packet arrival and resource release; and the collaborative decision module instructs to output the data packet from the local port. Compared with the prior art, flexible path switching, accurate congestion avoidance and dynamic fault bypassing can be realized.

The present invention is to solve the breaking of memory consistency caused by disturbance of packet arrival order in an environment in which a plurality of computers are interconnected via a plurality of data links and the plurality of computers perform communication synchronization by MBCF with each other. A transmission-side process includes a transmission number-counting unit that counts the number of transmission of the operation request packet for each reception-side process and attaches a count number before or after counting-up of the operation request packet to the operation request packet, a reception-side process includes a reception number-counting unit that counts the number of reception of the operation request packet for each transmission-side process, and a transmission destination computer performs processing of the operation request packet when a count number of the reception number-counting unit and the count number attached to the operation request packet are consecutive.

The invention discloses a dynamic flow rate control method and device between heterogeneous network element devices, and relates to the technical field of heterogeneous network element device collaboration.The method comprises the steps that a control plane analyzes network flow duration and packet counting features through a flow feature perception model, and a flow state probability model is established to dynamically calculate the processing priority of each flow; in combination with the model and the real-time processing capacity and load of downstream equipment, a data plane dynamically adjusts the flow transmission rate by adopting a probability token bucket mechanism, and global statistical information is used for guiding a local decision; triggering statistical updating by a data packet arrival event, checking whether a preset period is exceeded or not, and synchronously updating traffic characteristics; and after reasoning analysis of the heterogeneous device coprocessing sub-model, a result is fed back to a control plane, token bucket parameters and model weights are dynamically adjusted, and closed-loop feedback of flow distribution is realized. According to the method, the overall throughput performance and the load balancing capacity in a high-speed network environment are remarkably enhanced.

The invention provides a network gray fault detection method and device, a medium and a switch system, the method is applied to a first switch in a message transmission path, the first switch is other switches except a second switch in the message transmission path, and the second switch is an ingress switch; the first switch receives a target message flow sent by a preceding-stage switch, and the target message flow is obtained in the mode that a second switch adds check key values to message headers of all messages in the message flow in sequence based on a self-circulation key generator according to the message arrival sequence; performing XOR accumulation processing on the verification key value carried by each message in the target message flow in sequence, and determining a verification value of the target message flow; and under the condition that the verification value is different from the preset value, determining that the packet loss gray fault event exists in the transmission process of the message flow. According to the embodiment of the invention, the detection efficiency and detection precision of the packet loss gray fault can be improved.

The application discloses a kind of dynamic protocol identification method and system based on multi-modal data, belong to the technical field of data protocol identification, identification method includes: S1: calculate data packet arrival interval time standard deviation, judge communication mode is periodic or burst communication mode;S2: data packet is divided according to length, calculate and count the probability distribution of each interval, and calculate the Shannon entropy value of data packet;S3: according to data packet arrival interval time standard deviation, the Shannon entropy value of data packet and the probability distribution of each interval, generate protocol fingerprint;S4: using edge AI classification engine classifies data packet.The application can improve the accuracy of protocol identification, improve network security protection capability.

The application discloses a method for resisting satellite Internet of Things uplink interference attack, and a satellite Internet of Things system comprises a central gateway, a plurality of service areas and a space segment; the service area comprises a plurality of legal terminal nodes, and the space segment is composed of one or more communication satellites in geostationary or non-geostationary orbits. Each communication satellite provides a single or multiple beams to cover different service areas, the satellite can connect the service areas to the central gateway, and then store collected messages and transmit the messages to the central gateway. The method comprises the following steps: calculating a MAC layer load G, calculating a preamble time, calculating an average data packet arrival number, and calculating a minimum IC step length under a specified detection probability through a Poisson distribution. The application has the advantages that the system performance decline caused by the preamble camouflage attack can be resisted, the preamble deception interference which has a great influence on the system performance is effectively eliminated, and the system stability is greatly improved.

The invention provides a DDS network fault test method, device and equipment, a medium and a program product. According to the method, an eBPF program is mounted in a kernel space; wherein the eBPF program has protocol analysis and rule matching functions, so as to realize analysis of an RTPS message and accurate matching of a fault injection rule; under the condition that the network packet reaches the mounting point, triggering an eBPF program; performing protocol analysis and injection fault type matching on the network packet, and determining an injection fault type corresponding to the network packet; determining a TC action code corresponding to the network packet based on the injection fault type; performing a fault injection test on the network packet based on the TC action code corresponding to the network packet through a flow control tool; the real-time performance and the accuracy of the fault injection process are ensured based on the execution capability of low delay and low resource occupation of the eBPF program, so that the function correctness and the system stability verification of the DDS under the abnormal network condition are realized on the premise of not depending on hardware equipment.

A user equipment modem device establishes a short range wireless communication link with a user or machine facility. A modem device may receive uplink jitter reporting configuration information from a radio access network node, the modem device may use the configuration information to determine when and how to report uplink jitter corresponding to traffic received by the modem device via a short range wireless communication link. Uplink jitter may be based on a deviation between an actual arrival of packets received by a modem device from a facility and an expected packet arrival period corresponding to the facility or an application executing thereon. The node may schedule uplink resources available for the modem device to transmit packets received from the facility to the node. The node may transmit a grant of the scheduled uplink resources to a modem device, which may transmit uplink traffic received from the facility to the node using the granted uplink resources.

The application discloses the network and information security technical field, specifically a kind of encryption traffic analysis method based on protocol perception state space and end cloud cooperation, sequentially execute bidirectional flow aggregation and multi-view feature adaptive representation, linear state space sequence modeling based on pre-protocol gate, macroscopic feature's residual gate attention purification, the asymmetric trust fusion of perception confusion with temperature annealing, based on heuristic confrontation and joint loss driven's fuse mechanism optimization, based on double defense and limited low-rank fine-tuning's asynchronous cooperative evolution system;Based on this, by mapping the data packet arrival time interval into the input level physical pre-calibration gate, under the premise of completely preserving the state space model extremely low linear complexity and hardware parallel scanning acceleration advantage, the historical feature cross-contamination of cross-session and dormant period message is blocked from source, which greatly improves the representation accuracy of the model in real long sequence network flow.

Disclosed are techniques for wireless communication. In an aspect, a radio frequency identification (RFID) station may receive a first packet from an RFID tag at a first arrival time. The RFID station may receive a second packet from the RFID tag at a second arrival time after the first arrival time. The RFID station may estimate a distance between the RFID station and the RFID tag based on an inter-packet arrival time between the first packet and the second packet, the inter-packet arrival time being based on a time difference between the first arrival time and the second arrival time.

The application discloses a network security decision management system based on multi-source data processing analysis, relates to the technical field of network security decision, and aims to solve the technical problem that in the prior art, communication behavior security detection cannot be accurately realized according to two types of core metadata, namely, a packet length sequence and a packet arrival time interval sequence. Specifically, a full-dimension security protection system covering single-point communication detection, group device cooperative monitoring and protection effect self-checking is constructed through multi-unit cooperative linkage. Multi-dimension data acquisition and analysis units lay a foundation for accurate detection, device cooperative sensing and detection units fill the gap of IoT device group security monitoring, a network risk self-checking and evaluating unit realizes continuous optimization of the protection effect, and a network security decision management platform guarantees efficient linkage and centralized control of each link, and effectively improves the comprehensiveness of network security detection, the accuracy of abnormality identification, the pertinence of protection measures and the efficiency of system operation.

The invention provides a time domain offset parameter adjustment method and device, equipment, a medium and a program product, relates to the technical field of communication, and is used for reducing end-to-end delay of a data packet. According to the specific technical scheme, the method comprises the following steps: acquiring a first time when a first data packet arrives at a modem buffer area and N second time when N second data packets arrive at the modem buffer area; on the basis of the first time and the N second times, an alignment deviation parameter is calculated and obtained, and the alignment deviation parameter is used for representing the phase dislocation degree between the actual sending time of the first data packet and the actual starting time of the CG resource window; when the alignment deviation parameter is smaller than 0 or larger than a preset threshold value, a first offset is obtained through calculation based on the frame period of the data frame, the first time and the N pieces of second time, the first offset is reported to the base station, and the first offset is used for the base station to update the time domain offset parameter in the CG configuration. The method and device are applied to a data packet sending scene.

The application provides a kind of active queue management method based on dynamic bandwidth perception, comprising: S1, real-time response data packet arrival, obtain the available bandwidth value of current network link and the length of data packet queue;S2, according to the available bandwidth value of current network link and the preset target forwarding delay, calculate the current congestion threshold;S3, compare the length of current data packet queue and the size of current congestion threshold, when the length of current data packet queue is greater than or equal to current congestion threshold, it is congestion state;When in congestion state, further judge whether the data stream to which the current arrived data packet belongs is aggressive flow, if it is aggressive flow, then according to the preset packet loss method, the current arrived data packet is randomly discarded.The application maps the changing link available bandwidth into dynamic threshold to manage queue, so that network device can efficiently utilize network bandwidth;Through dynamic identification of aggressive flow and targeted setting of packet loss strategy, network device can provide forwarding service more fairly.

The present disclosure relates to the field of communication and provides a method, a system and an electronic device of date communication. The method includes: the data name information uploaded by the producer is received through the pre-built satellite data depot, which includes at least three geosynchronous earth orbit satellites and several low-orbit satellites, and the data name information characterizes the data characterized by the producer; and the data in the satellite data depot is updated based on the data name information. In order to solve the defect that if a producer moves in an NDN network architecture, a consumer is difficult to locate a new position of the producer, so that a sent interest packet reaches an old position of the producer, and the packet is lost, which greatly affects the accuracy and efficiency of data transmission, the data packet of the moving producer can be cached in the data depot based on the pre-built satellite data depot in the solution of the present application, so that the influence of the movement of the producer on the network performance can be effectively shielded.

Described embodiments provide systems and methods for profiling low latency applications using telemetry. A data processing system can include one or more processors and memory. The data processing system can receive telemetry data for a plurality of flows of packets. The data processing system can determine, using the telemetry data, a variance of bandwidth, a variance of packet lengths, and a variance of inter-arrival times between packets for each of the flows of packets. The data processing system can determine a type of application for a flow of the flows of packets based at least on a signature of the variance of bandwidth, the variance of packet lengths, and the variance of inter-arrival times for the flow. The data processing system can take, in response to determining the type of application, one or more actions to provide a quality of service for the flow according to the type of application.

A method performed in a user equipment, UE (1), for controlling uplink transmission of data to a base station (110) of a wireless network (100), the method comprising: sending (806) a buffer status report, BSR (85), indicative of a buffer data level value to the base station; sending (806) information (86) indicative of a packet arrival rate of data into a transmission buffer to the base station; receiving (811) uplink resource information (87) from the base station in response to the BSR and the information; and transmitting (812) data (88) from the buffer using the received resource information.

This invention discloses a minimum latency MPTCP data scheduling method based on predicted packet arrival time. When the current data packet arrives at the sending buffer, the round-trip time is obtained based on the ACKs returned by the receiver to each sub-stream. The flight time of data packets in each sub-stream is calculated, the link parameters of each sub-stream are statistically analyzed, and the throughput of each sub-stream is calculated. Network jitter is calculated using previously recorded round-trip time samples from each sub-stream. The total number of bytes of unsent data packets in the sending queue of each sub-stream and the number of bytes of the current data packet are calculated. The time required for both unsent data packets and the current data packet to be sent is calculated. Considering packet loss feedback, the predicted arrival time of data packets in each sub-stream is comprehensively calculated, and the sub-stream with the smallest value is selected to schedule the current data packet. This invention can reasonably schedule data packets based on the arrival time of each data packet in each sub-stream, thereby reducing the number of out-of-order data packets at the receiver, reducing transmission latency, and meeting the low latency requirements of real-time video services.

The application provides a kind of battery state of charge estimation method and system under the condition of missing and non-gaussian noise measurement, it is related to battery management technical field, the method comprises: obtaining battery current and terminal voltage sampling data;Based on the equivalent circuit model of battery, state space modeling is carried out, and the unified measurement equation containing Bernoulli random variable is obtained to represent the state of measurement data packet arrival;When data arrives, the actual terminal voltage sample value is used to perform measurement update, when data is lost, the virtual measurement value is generated based on the prior estimate value of battery polarization voltage to replace the actual terminal voltage sample value to perform measurement update;The battery state of charge estimation value is determined according to the measurement update result.The application introduces virtual measurement compensation mechanism, solves the problem of SOC estimation interruption and error accumulation when measurement data is randomly lost, maintains the continuity of estimation process, and significantly improves the accuracy and robustness of battery state of charge estimation under the condition of packet loss.

A user equipment modem device and a user or machine appliance establish a short-range wireless communication link. The modem device may receive from a radio access network node uplink jitter reporting configuration information usable by the modem device to determine when and how to report uplink jitter corresponding to traffic received by the modem device via the short-range wireless communication link. Uplink jitter may be based on an actual arrival of packets by the modem device from the appliance with respect to an expected packet arrival periodicity corresponding to the appliance or an application executing thereon. The node may schedule uplink resources usable by the modem device to transmit packets received from the appliance to the node. The node may transmit a grant of the scheduled uplink resources to the modem device, which may use the granted uplink resources to transmit, to the node, uplink traffic received from the appliance.

The invention discloses a DQN-based network-on-chip arbitration intelligent optimization method, and belongs to the field of computer system structure network-on-chip interconnection. In an application task execution process, data packet arrival information of an input port of an on-chip network router is collected in real time, time density characteristics and fluctuation characteristics reflecting traffic intensity and time sequence fluctuation characteristics are extracted, and operation state information such as a router cache utilization rate, a port competition degree and an injection rate is combined, so that the data packet arrival information of the input port of the on-chip network router is obtained. And multi-dimensional state description of the router is constructed. A plurality of candidate basic arbitration strategies are preset, a deep Q network reinforcement learning model is adopted, and dynamic selection is carried out among the candidate arbitration strategies according to real-time router state information, so that a better arbitration strategy is selected under the constraint of communication delay and power consumption. Through continuous interactive learning with a network-on-chip operation environment, the method can adaptively match arbitration strategies under different load and flow scenes, effectively reduce communication delay and tail delay, and improve communication efficiency and energy efficiency of the network-on-chip.

The invention provides a charging pile payment transaction security authentication method and system based on a block chain, and belongs to the technical field of block chain application, and the method comprises the steps: extracting a data packet arrival time interval and sequence data of transmission layer sliding window changes, obtaining entropy and frequency information through statistical analysis, and fusing the entropy and frequency information to generate a traffic feature vector; and if the vector satisfies a man-machine interaction condition, constructing a set by using historical public keys of the block chain, and mapping the traffic features into constraint parameters to generate a ring signature voucher. And finally, the request is broadcasted to the block chain, the integrity of the voucher is verified by using an intelligent contract, the traffic characteristics are analyzed, and fund settlement is completed when verification is passed and the characteristics meet man-machine interaction conditions, so that the network traffic characteristics reflecting the authenticity of man-machine interaction can be embedded into a block chain ring signature algorithm. Automatic script attacks are effectively resisted while transaction privacy is guaranteed, and authenticity and security of payment transaction are ensured.

The application discloses a data encryption method for video communication and relates to the technical field of communication and information security. The application allocates a monotonically increasing FSN for each frame at the sending side, introduces anchor numbering AID and anchor digest AD, embeds a resolvable synchronization mark SM in the encrypted data, enables the receiving side to independently reconstruct the frame sub-key stream at any reachable frame, does not need to depend on the state of the last frame, fundamentally alleviates the decryption out-of-sync and long-time mosaic caused by burst packet loss, ensures the independent decryptability and integrity verification of the slice under disordering and rearrangement based on the packet-level unique counter formed by the FSN and the slice number, avoids the problem that the subsequent packet cannot be decrypted, repeatedly carries the SM across frames and supports interleaving / redundancy configuration, improves the recoverability of the synchronization information in the continuous frame loss scene, and reduces the additional resynchronization signaling and time delay jitter.

A method of processing packets in a computer, a computer and a computer program for the same. The computer comprises computing hardware and an OS (70) implemented on the computing hardware, the OS comprising a kernel (171), a ring buffer (72) managed by the kernel (171) in a memory space where the OS (70) is deployed, and a poll list in which packet arrival information is registered. The method executed in the kernel (171) comprises the steps of: starting a kernel thread that monitors arrival of a packet; and dequeuing a packet stored in the ring buffer (72) based on the packet arrival information. The kernel thread is dedicated to monitor the arrival of the packet by monitoring, according to a polling model, whether the packet arrival information has been registered in the poll list.

The application provides a kind of battery state of charge estimation method and system under the condition of missing and non-gaussian noise measurement, it is related to battery management technical field, the method comprises: obtaining battery current and terminal voltage sampling data;Based on the equivalent circuit model of battery, state space modeling is carried out, and the unified measurement equation containing Bernoulli random variable is obtained to represent the state of measurement data packet arrival;When data arrives, the actual terminal voltage sample value is used to perform measurement update, when data is lost, the virtual measurement value is generated based on the prior estimate value of battery polarization voltage to replace the actual terminal voltage sample value to perform measurement update;The battery state of charge estimation value is determined according to the measurement update result.The application introduces virtual measurement compensation mechanism, solves the problem of SOC estimation interruption and error accumulation when measurement data is randomly lost, maintains the continuity of estimation process, and significantly improves the accuracy and robustness of battery state of charge estimation under the condition of packet loss.