108 results about "Packet arrival" patented technology

The invention relates to an office process automation data analysis method based on a symmetric encryption algorithm, and the technical scheme comprises the following steps: introducing an encryption strategy generator, and dynamically adjusting the parameters of the symmetric encryption algorithm including the key length and the encryption round number through the real-time analysis of the data communication content including the data sensitivity, the frequency and the data volume; constructing a self-adaptive optimization model, and adjusting an encryption strategy according to external conditions such as a network state, equipment computing power and user behaviors; fragmenting the data packet before transmission, and allocating different transmission paths according to current network conditions and security evaluation; constructing a dynamic data recombination module at a data receiving end, and verifying and recombining data when encrypted data packets of different paths arrive; a lightweight key negotiation protocol based on symmetric encryption is adopted, and a key is generated and negotiated immediately when two communication parties initiate data exchange; a secret key life cycle management mechanism is introduced, and the service life and the number of times of limitation are set for each secret key.

The invention provides a power system intrusion detection and defense method based on artificial intelligence, and belongs to the technical field of power system intelligent control, and the method comprises the steps: 1, collecting data based on a multi-dimensional data collection layer, and forming an original data flow containing a time-space synchronization mark; 2, dynamically segmenting the original data stream by adopting a self-adaptive sliding window mechanism, automatically adjusting the size of a window according to the arrival frequency of a data packet, and converting the continuous data stream into a final triple sequence; 3, extracting and analyzing the features of the final triple sequence, and determining an equipment behavior mode and sequential logic of power operation; 4, performing deviation analysis on the equipment behavior mode and the normal behavior mode, and generating a primary alarm signal when the deviation degree exceeds a dynamic threshold value; and 5, starting multi-stage interlocking verification based on the primary alarm signal to determine an intrusion type, and matching a preset response rule base according to the intrusion type. Intrusion behaviors in the power system are effectively detected and defended in real time.

A server delay controller includes: a packet harvesting unit that refers to a packet held in a ring buffer when a packet arrives and executes harvesting to delete an entry of a corresponding queue from the ring buffer, a sleep management unit that puts the thread to sleep in a case in which a packet does not arrive for a predetermined period, and cancels the sleep of the thread through a hardware interrupt at the time of packet arrival, and an idle state recovery control unit that periodically wakes up the thread during sleep or wakes up the thread immediately before the packet arrival in accordance with a packet arrival timing.

The invention relates to the technical field of malicious software detection, in particular to a malicious code detection method based on behavior analysis, which comprises the following steps of: monitoring a system event stream and process resource occupation data, fixed time interval sampling is adopted to capture a network data packet arrival time interval, CPU occupancy rate fluctuation, a target file lock contention state and a mouse cursor pixel position. According to the method, multi-dimensional system event streams and process resource occupation data such as network data packet arrival time intervals, CPU occupancy rate fluctuation, target file lock contention states and mouse cursor pixel positions are monitored, mutual information entropy between different event streams is calculated, and hidden association which cannot be perceived by a traditional detection method can be revealed. The mode is no longer limited to analysis of isolated behaviors of a single process, but captures weak signals generated when malicious software performs communication or data leakage by using a covert channel by quantifying statistical dependency between seemingly unrelated events.

The invention relates to the technical field of cloud computing and information security services, and particularly discloses a network security and data hosting integrated cloud service system and method, and the method comprises the steps: obtaining a multi-dimensional behavior data flow of a user, and generating a user feature vector; inputting the user feature vector into an incremental clustering algorithm, calculating the distance between the feature vector and a clustering center, performing user classification according to a distance threshold, and generating a user type tag; calculating a user reputation score based on the historical behavior statistical data of the category to which the user belongs; a sliding window algorithm is adopted to collect a data packet arrival time interval sequence, a jitter value in a window is calculated, a jitter value at the next moment is predicted, the number of packet loss in the window is counted, and a packet loss rate estimation value is calculated; and inputting the user type label, the reputation score, the jitter prediction value and the packet loss rate estimation value into a QoS decision engine. According to the invention, the problem of poor high-value user experience caused by unreasonable resource allocation is solved.

The invention provides a malicious encrypted traffic classification method and system based on a session spatio-temporal feature map. The method comprises the following steps: sliding on a cleaned encrypted traffic session by using a sliding window with a predefined duration, and extracting statistical characteristics of the encrypted traffic session, including a packet size characteristic, a packet arrival time characteristic and a packet load alpha-Renyi entropy; taking the packet size feature and the packet arrival time feature of the encrypted traffic session as a Y axis and an X axis respectively, mapping the packet load alpha-Renyi entropy into a gray value, and forming a session spatial-temporal feature map; and inputting the session spatio-temporal feature map into a ResNet-50 model of a CBAM attention mechanism to perform malicious encrypted traffic classification. The scheme provided by the invention can adapt to different malicious encrypted traffic application scenes, so that more efficient and more accurate encrypted traffic classification is realized.

The invention discloses a dynamic protocol identification method and system based on multi-modal data, and belongs to the technical field of data protocol identification, the identification method comprises the following steps: S1, calculating a data packet arrival interval time standard deviation, and judging whether a communication mode is a periodic or sudden communication mode; s2, dividing the data packet according to the length, calculating and counting the probability distribution of each interval, and calculating the Shannon entropy value of the data packet; s3, generating a protocol fingerprint according to the data packet arrival interval time standard deviation, the Shannon entropy value of the data packet and the probability distribution of each interval; and S4, classifying the data packets by adopting an edge AI classification engine. The protocol identification accuracy can be improved, and the network security protection capability is improved.

The invention relates to the technical field of network slicing, in particular to a communication bandwidth guarantee system based on service priority, which comprises a switching intention sensing module for receiving a measurement result of user equipment based on a source base station and judging a switching trend by comparing a preset threshold value of the signal strength of a service cell with a preset threshold value of the signal strength of an adjacent cell in the result. In the invention, the user switching service feature set is dynamically constructed by sensing the comparison of the signal intensity of the service cell and the adjacent cell before switching and combining the context information of the user and the historical service flow monitoring record, so that the predictive value of the user behavior in the network switching is further mined; in this way, the required bandwidth resources are quantized and calculated in advance when the slice user is about to switch. And resource block reservation positioning is performed in combination with the average data rate and the data packet arrival mode, so that the resource scheduling precision is optimized, and bandwidth occupation of a key service by burst traffic during switching is avoided.

The invention discloses an encrypted malicious traffic detection method and system and a computer readable storage medium, and belongs to the technical field of traffic detection. The encrypted malicious traffic detection method comprises the following steps: acquiring original network traffic data, and constructing a packet length sequence and a packet arrival time interval sequence to form an original time sequence matrix; and extracting a time-frequency energy distribution diagram and a frequency band energy sequence from the packet length sequence through continuous wavelet transform. A time domain time sequence convolution network based on an expansion causal convolution structure is adopted, and a time domain feature vector is extracted from an original time sequence matrix. And extracting frequency domain feature vectors from the time-frequency energy distribution diagram and the frequency band energy sequence by adopting a time-frequency attention and frequency band re-scaling attention module. And performing malicious traffic dichotomy and malicious traffic behavior type multi-classification processing on the time-frequency aggregation feature vector through a hierarchical classifier, and outputting a classification result. According to the scheme, the malicious traffic characterization capability of deep fusion of time-frequency features is realized, and the detection precision of the encrypted malicious traffic is improved.

Methods, systems, and devices for wireless communication are described for user equipment (UE) indication of uplink scheduling information to a base station. The uplink scheduling information may provide information on a periodic traffic pattern, such as for periodic extended reality (XR) data flows. The uplink scheduling information may provide uplink assistance information (UAI) to a base station to assist the base station with providing uplink resources that efficiently serve an XR session. The UAI may indicate one or more of a periodicity of uplink traffic, an offset between uplink traffic and a packet arrival, a data size for uplink traffic for each time period associated with the XR session, a request to enable uplink transmission skipping, or any combinations thereof. A base station may provide one or more dynamic grants, configured grants, or proactive grants to a UE based on the uplink scheduling information.

This disclosure provides systems, devices, apparatus, and methods, including computer programs encoded on storage media, for rendering delay aware packet pacing for real time multimedia applications. A processor of a first device transmits, to a second device, an indication of a processing delay associated with a set of packets associated with media content. The processor receives, from the second device, the set of packets in a packet arrival pattern that is based on the processing delay.

The invention provides a reliable multi-link transmission method for resisting cascade degradation of a scheduling system, which comprises the following steps: a sender updates link state information based on a data packet arrival event, and implements a degradation strategy on available links based on the updated link state information, so as to determine a degraded link in the available links; the data packet to be sent is sent through the remaining undegraded links in the available links; and the receiver receives the to-be-sent data packet and evaluates whether the current scheduling mode satisfies a preset condition based on the to-be-sent data packet, if not, a notification data packet is sent to the sender, and the sender selects a proper link to be promoted to a scheduling state based on the notification data packet and a promotion strategy. According to the method and the device, the transmission performance caused by link deterioration can be greatly reduced, the problem of transmission state division error caused by environment burst interference can be avoided, and the accuracy of link state evaluation can be improved.

The present invention proposes an information age minimization access method for large-scale Internet of Things scenarios, which relates to the technical field of wireless communications. First, the discretized time is divided into a number of small slots with a certain time length, and the number of user nodes in the network and the data packet arrival rate of the user nodes are obtained by a central base station to obtain a state equation of the probability of successful network transmission, and then the access channel probability in the state equation is optimized. By analyzing the expected optimal access channel probability and the solution of the monostable boundary optimal access channel probability within (0, 1), the optimal access channel probability is obtained. Finally, the central base station notifies each user node of the optimal access channel probability, and performs channel access and data packet transmission according to the optimal access channel probability, thereby minimizing the average peak information age of the network, and ensuring the stability of the network transmission performance while achieving the optimal information timeliness of the network.

The embodiment of the application provides a kind of mining behavior detection method, wherein the method comprises: the first computer equipment obtains data packet arrival time sequence, the data packet arrival time sequence includes the time that at least one data packet from target equipment arrives second computer equipment;The first computer equipment obtains block arrival time sequence, and the block arrival time sequence includes the time that at least one mining task arrives mining equipment;The first computer equipment judges the approximate degree of data packet arrival time sequence and block arrival time sequence in time;If the approximate degree is greater than or equal to the first threshold value of preset, determine that the target equipment is suspected mining equipment.The technical scheme of the application can be free from manual operation and maintenance, cover multiple mining scenarios, and can protect user privacy, with strong versatility.

This application provides a software switch caching acceleration method and related apparatus based on FPGA, belonging to the field of network packet processing technology. The method includes: compiling a caching rule set into a decision tree forest using a decision tree construction algorithm, the decision tree forest comprising multiple decision trees of equal depth; mapping the decision tree forest to multiple parallel tree pipelines, the tree pipelines running on the FPGA, each tree pipeline corresponding to a decision tree, and each pipeline stage corresponding to a node layer of the decision tree; broadcasting a preset data packet to all tree pipelines for parallel processing; for each tree pipeline, guiding the preset data packet to traverse each pipeline stage until the preset data packet reaches the target leaf node of the decision tree; performing parallel rule matching on the preset data packet at the target leaf node of each decision tree to obtain the target caching rule matching the preset data packet, thereby accelerating flow table caching classification.

Disclosed are techniques for wireless communication. In an aspect, a radio frequency identification (RFID) station may receive a first packet from an RFID tag at a first arrival time. The RFID station may receive a second packet from the RFID tag at a second arrival time after the first arrival time. The RFID station may estimate a distance between the RFID station and the RFID tag based on an inter-packet arrival time between the first packet and the second packet, the inter-packet arrival time being based on a time difference between the first arrival time and the second arrival time.

This invention discloses a dynamic optimization method for network switch port WRR scheduling resources based on convex optimization modeling. Applied to the field of switching equipment scheduling and control, it addresses the problem that existing scheduling weight configurations cannot adapt to environmental changes, resulting in unstable forwarding performance of switching equipment. This invention establishes constraint functions based on port bandwidth, token resources, and queue number, collects the arrival probability distribution of data packets in each queue within the switch port to establish a distribution model, and combines the constraint functions and the collected model to construct a convex optimization problem for switch port queue resource allocation. The objective of the optimization problem is defined as minimizing the sum of queuing probabilities of the switch queues. The problem is solved using an existing convex optimization solver, and the results are configured as the weights of each port queue based on the Weighted Round Robin (WRR) scheduling algorithm. This invention solves the problem of adaptive resource allocation during dynamic network traffic exchange, enabling network switching equipment to provide stable network performance under different service loads.

Methods, devices, and systems are provided for synchronizing a source device with a sink device. In some examples, the source device plays first audio using, e.g., an electro-acoustic transducer. The source device transmits a stream of packets to the sink device to be used by the sink device for playing second audio, where the playing of the second audio is to be synchronized within a predefined tolerance with the playing of the first audio. In response to determining there is a delay in average packet arrival times of the stream of packets at the sink device, the source device adjusts the playing of the first audio to maintain synchronization with the playing of the second audio within the predefined tolerance.

A method for managing transmission over a network by adjusting a flow control window based on one or more parameters obtained from one or more connections, applications or network conditions. In one embodiment a controller modifies the receiver TCP advertised window of one or several connections to match the end-to-end bandwidth-delay product (BDP) for bandwidth fair sharing and improving the quality of experience (QoE). The controller can be placed in any given entity managing packets, such as a sender entity, a transmitting entity or any other entity handling connection packets. A mechanism for estimating available path bandwidth and / or link capacity and location by analyzing the distribution of inter-packet arrival times. Packet pair dispersion analysis can be utilized based on passive evaluation of the acknowledgements of a TCP flow or based on active probing. Machine learning using a neural network can be used to analyze the distribution of inter-packet arrival times.

To provide an OLT and the like that achieve low delay guarantee.SOLUTION: An OLT used in a PON using an optical splitter has a collection unit and a processing unit. The collection unit collects time information of arrival of packets from an ONU and data volume information of the packets. The processing unit determines transmission timing of the ONU on the basis of transmission timing information assigned to the ONU, the time information, and the data volume information.SELECTED DRAWING: Figure 2

The invention relates to the field of network-on-chip, and particularly provides a network-on-chip hybrid routing design method and device, and the method comprises the following steps: S1, carrying out the pre-calculation and coding of multi-path deterministic information; pre-calculating deterministic information of a shortest path and 1-2 non-shortest paths, and encoding the information to a data packet header flit; s2, carrying out two-hop congestion sensing and multi-path cooperative switching; receiving a self VC state and a next hop node VC state through an extended credit signal, and calculating a joint congestion index; s3, fault detection and dynamic remapping are coordinated; comprising a fault monitoring unit and a path reconstruction unit, the fault monitoring unit detects faults of the fault monitoring unit and adjacent nodes and links, and the path reconstruction unit generates deterministic information of a local alternative path; s4, data packet arrival and resource release; and the collaborative decision module instructs to output the data packet from the local port. Compared with the prior art, flexible path switching, accurate congestion avoidance and dynamic fault bypassing can be realized.

The invention provides a multi-channel routing anti-interference decision-making method for a limited buffer area, and the method comprises the steps: 1, analyzing the interference of a jammer, the mutual interference between nodes, the influence of channel noise and path loss on a signal-to-interference ratio in an interference scene of a multi-hop wireless network, and calculating the transmission rate between adjacent nodes; 2, calculating the data volume of a node buffer area according to the data packet arrival rate, the interference conflict, the mutual interference conflict, the buffer area overflow packet loss and the maximum transmission frequency packet loss; 3, modeling an anti-interference routing and channel joint optimization problem of the distributed multi-hop network as a partial observable random game; the nodes realize long-term efficiency maximization based on local observation information; step 4, setting a layered DQN architecture; a routing anti-interference problem in a multi-channel scene is split into upper-layer routing planning and lower-layer channel selection. According to the method, the successful transmission rate of the data packet is improved, and the convergence speed of the algorithm is accelerated.

A controlling unit reads out, at timings that may be asynchronous to time slots, first counter values indicating quantities of arrived packets, collects second counter values read out at those timings along with corresponding readout times, and generates a data sequence where the second counter values are arranged; divides the data sequence into equal-length periods to obtain first and second periods, and superimposes first and second data sequences included in the first and second periods, respectively; and determines a first time range in which second counter values in the first data sequence are equal to or greater than one, and a second time range in which second counter values in the second data sequence are equal to or greater than one, identifies a common time range shared between the two time ranges, and estimates time slots corresponding to the common time range as packet arrival time slots.

The present invention is to solve the breaking of memory consistency caused by disturbance of packet arrival order in an environment in which a plurality of computers are interconnected via a plurality of data links and the plurality of computers perform communication synchronization by MBCF with each other. A transmission-side process includes a transmission number-counting unit that counts the number of transmission of the operation request packet for each reception-side process and attaches a count number before or after counting-up of the operation request packet to the operation request packet, a reception-side process includes a reception number-counting unit that counts the number of reception of the operation request packet for each transmission-side process, and a transmission destination computer performs processing of the operation request packet when a count number of the reception number-counting unit and the count number attached to the operation request packet are consecutive.

The invention discloses a dynamic flow rate control method and device between heterogeneous network element devices, and relates to the technical field of heterogeneous network element device collaboration.The method comprises the steps that a control plane analyzes network flow duration and packet counting features through a flow feature perception model, and a flow state probability model is established to dynamically calculate the processing priority of each flow; in combination with the model and the real-time processing capacity and load of downstream equipment, a data plane dynamically adjusts the flow transmission rate by adopting a probability token bucket mechanism, and global statistical information is used for guiding a local decision; triggering statistical updating by a data packet arrival event, checking whether a preset period is exceeded or not, and synchronously updating traffic characteristics; and after reasoning analysis of the heterogeneous device coprocessing sub-model, a result is fed back to a control plane, token bucket parameters and model weights are dynamically adjusted, and closed-loop feedback of flow distribution is realized. According to the method, the overall throughput performance and the load balancing capacity in a high-speed network environment are remarkably enhanced.

The invention discloses a wave packet self-identification method, which considers wave packet frequency dispersion and multi-mode compensation at the same time, and can realize analysis of various ultrasonic detection signals. The method comprises the following steps: firstly, constructing an over-complete dictionary for the waveform of a target wave packet, and considering the frequency dispersion characteristics of waves; then, on the basis of a Bayesian reasoning method, effective wave packets in the aliasing wave packets are recognized and reconstructed, and automatic calibration of the wave packets with the specified form in the detection signals is achieved; and finally, determining the physical meanings of different wave packets in combination with the arrival sequence of the wave packets. Due to the self-recognition characteristic of the method, rapid analysis of massive signals can be dealt with, so that a large number of repeated ultrasonic tests are realized, and the reliability and the precision of a final result are improved. The wave packet self-identification method can be popularized to various physical test signals of different detection objects.

The invention provides a network gray fault detection method and device, a medium and a switch system, the method is applied to a first switch in a message transmission path, the first switch is other switches except a second switch in the message transmission path, and the second switch is an ingress switch; the first switch receives a target message flow sent by a preceding-stage switch, and the target message flow is obtained in the mode that a second switch adds check key values to message headers of all messages in the message flow in sequence based on a self-circulation key generator according to the message arrival sequence; performing XOR accumulation processing on the verification key value carried by each message in the target message flow in sequence, and determining a verification value of the target message flow; and under the condition that the verification value is different from the preset value, determining that the packet loss gray fault event exists in the transmission process of the message flow. According to the embodiment of the invention, the detection efficiency and detection precision of the packet loss gray fault can be improved.

The application discloses a kind of dynamic protocol identification method and system based on multi-modal data, belong to the technical field of data protocol identification, identification method includes: S1: calculate data packet arrival interval time standard deviation, judge communication mode is periodic or burst communication mode;S2: data packet is divided according to length, calculate and count the probability distribution of each interval, and calculate the Shannon entropy value of data packet;S3: according to data packet arrival interval time standard deviation, the Shannon entropy value of data packet and the probability distribution of each interval, generate protocol fingerprint;S4: using edge AI classification engine classifies data packet.The application can improve the accuracy of protocol identification, improve network security protection capability.

The application discloses a method for resisting satellite Internet of Things uplink interference attack, and a satellite Internet of Things system comprises a central gateway, a plurality of service areas and a space segment; the service area comprises a plurality of legal terminal nodes, and the space segment is composed of one or more communication satellites in geostationary or non-geostationary orbits. Each communication satellite provides a single or multiple beams to cover different service areas, the satellite can connect the service areas to the central gateway, and then store collected messages and transmit the messages to the central gateway. The method comprises the following steps: calculating a MAC layer load G, calculating a preamble time, calculating an average data packet arrival number, and calculating a minimum IC step length under a specified detection probability through a Poisson distribution. The application has the advantages that the system performance decline caused by the preamble camouflage attack can be resisted, the preamble deception interference which has a great influence on the system performance is effectively eliminated, and the system stability is greatly improved.