China National Digital Switching System Engineering & Technological R&d Center

Zhuhai Comleader Information Science & Technology Corp., Ltd.

Other

Peking University

Purple Mountain Laboratories

Shanghai Redneurons Co., Ltd.

The Pla Information Engineering University

Shanhai Hongzhen Information Science & Technology Co. Ltd.

Shanghai Hongzhen Information Science & Technology Co. Ltd.

China National Digital Switching System Engineerin

Shanghai Hongzhen Information Science & Technology

Jiangxing Wu

Lei He

Peng Yi

Quan Ren

Yiwei Guo

Hailong Ma

Junfei Li

Ruihao Ding

Zhifeng Feng

Xin Yang

Hui Li

Han Wang

Jun Zhou

Qinrang Liu

Ke Song

Fan Zhang

Shuai Wei

Min Fu

Weili Zhang

Xueming Si

Hongchang Chen

Kedan Li

Yuxiang Hu

Ke Xu

Wei Li

Peng Wang

Ting Chen

Jianhui Zhang

Dongnian Cheng

Jvlong Lan

Juan Shen

Jianliang Shen

Peijie Li

Zhili Lin

Yunyong Zhang

Junfeng Ma

Huiyao An

Zheng Yuan

Jie Gao

Yiming Jiang

Shuo-yen Robert Li

Peng Zhang

Zheng Zhang

Jinsuo Zhou

Xinsheng Ji

Zhen Zhang

Xiang Chen

Jianmin Pang

Fengyu Zhang

Jichao Xie

Weitao Han

Jing Yu

Libo Tan

Yu Li

Kun Zhou

Xiangui Wang

Julong Lan

Zhiming Wang

Kaixuan Xing

Yufeng Li

Minqian Pu

Xingming Zhang

Shengfei Li

Binqiang Wang

Jing Wang

Kejiao Li

Jinwu Wei

Yiqin Lu

Shisheng Chen

Mengchang Chen

Xinchun Zhang

Guozhen Cheng

Yongji Dong

Jinling Li

Fusheng Zhu

Provided are network security defense method and network security defense system. The method includes: processing data multiple times using a preset processing strategy, where the processing strategy includes a first strategy and a second strategy, the first strategy is used for eliminating an influence of generalized disturbance on the second strategy, the second strategy after being eliminated the influence is applied to the data for calculation, storage and communication of the data, the first strategy includes an encoding strategy, a decoding strategy and a memory elimination strategy, and the generalized disturbance includes random disturbance and/or non-random disturbance; triggering a feedback control strategy based on a decoding result of the multiple processing results; and adjusting the first strategy according to the feedback control strategy.

Network security defense method, system and effect evaluation method, and related apparatus

Provided in the present application are a data processing method and apparatus based on data coding, and a device. The method comprises: performing N-channel error correction coding on data to be processed that is in information to be processed, so as to obtain N pieces of coded data to be processed; by using coded meta-channel data obtained by means of error correction coding, performing redundancy processing on the coded data to be processed, so as to obtain N pieces of response data; and then performing error correction decoding on the N pieces of response data, so as to obtain processing result information of the information to be processed.

Data processing method and apparatus based on data coding, and device

A structural encoding unit and an error correction decoding unit are divided. The structure encoding unit is divided into input branch processor and an input proxy processor; and the error correction decoding unit is divided into an output routing processor, an output proxy processor, an adjudication branch processor, an adjudication proxy processor and a voting processor. The input branch processor is used for duplicating and distributing messages, the arbitration branch processor is used for duplicating and distributing data, the voting processor is used for performing voting, and the output routing processor is used for selecting an output result from processing results of the output proxy processor according to a voting result of the voting processor.

Input/output system applied to network security defense system

Provided are a data processing system and method based on dynamic redundancy heterogeneous encoding, and a device. The method comprises: respectively performing error correction encoding on information to be processed and a processing rule, so as to form encoded information to be processed and an encoded processing rule; processing, by using the encoded processing rule, the encoded information to be processed, so as to obtain response data; and then performing error correction decoding on N pieces of response data, so as to obtain processing result information of the information to be processed.

Data processing system and method based on dynamic redundancy heterogeneous encoding, and device

The present application provides an instruction encoding-based data processing method and apparatus, and a device. N-path error correction encoding is performed on an instruction in information to be processed to obtain N encoded instructions, the encoded instructions and encoded meta channel programs obtained by the error correction encoding are used to perform redundant processing on data to be processed to obtain N pieces of response data, and then error correction decoding is performed on the N pieces of response data to obtain processing result information of the information to be processed. Because the N encoded instructions are heterogeneous and the encoded meta channel programs used in the N-path processing are heterogeneous, the randomness of the processing process can be improved, generalized disturbance in the data processing process can be corrected in combination with the error correction encoding and decoding methods, and thus the security of data processing is improved.

Instruction encoding-based data processing method and apparatus, and device

An output-decision-based negative feedback control method and system. The method includes: receiving, by an output decider, output responses of at least two heterogeneous functional equivalents, and dividing numbers corresponding to the at least two heterogeneous functional equivalents into at least one set according to the output responses; determining, by the output decider, credibility of each set according to the output responses, and sending the at least one set and the credibility corresponding to each set to a feedback controller via decision information; generating, by the feedback controller, a first scheduling policy and/or a second scheduling policy according to the decision information; and sending, by the feedback controller, the first scheduling policy to an input proxy, and/or sending a change instruction to the heterogeneous functional equivalent indicated by the second scheduling policy. The method can prevent in advance and process a heterogeneous functional equivalent that may be faulty.

Output-decision-based negative feedback control method and system

An apparatus for generating heterogeneous functional equivalent and method thereof includes: a heterogeneous functional equivalent generator and an element pool connected to the heterogeneous functional equivalent generator, where the element pool includes at least one element. The heterogeneous functional equivalent generator is configured to obtain a generation policy and is further configured to select element sets corresponding to the number from the element pool according to the generation policy. The heterogeneous functional equivalent generator is further configured to generate the number of heterogeneous functional equivalents based on the selected element sets. Because the elements for constructing heterogeneous functional equivalents are different, the relationship between element and service response output by the heterogeneous functional equivalent to outside is uncertain, thereby making it uneasy to sniff an unknown defect or a backdoor of the heterogeneous functional equivalent, and lowering the success rate of an intruder's attack on the heterogeneous functional equivalent.

Apparatus for generating heterogeneous functional equivalent and method thereof

An apparatus, method, and device for encapsulating heterogeneous functional equivalents are disclosed. The apparatus includes a redundancy controller, an input proxy, and an output proxy. In this application, a plurality of heterogeneous functional equivalents are encapsulated by an input proxy and an output proxy, so that the apparatus can support adaptation, normalization and dis-cooperation to cut a communication link employed by an attacker, such that it is difficult for the attacker to sniff and exploit unknown defects or backdoors, and a success rate of the attacker attacking an information system is reduced.

Apparatus, method and device for encapsulating heterogeneous functional equivalents

A method comprising: S1. dividing attack and defense processes associated with a computer network system into first one or more single-node attacks and second one or more link attacks based on attack granularity; S2. determining one or more single-node attack parameters associated with the computer network system based on configuration of the computer network system; S3. calculating (1) success probability and (2) time length of a single node attack by applying GSPN theory to mathematically analyze the determined one or more single-node attack parameters; S4. based on the success probability of the attacking single node as a parameter, using the Markov chain and the Martingale theory to calculate an average number of steps required for a successful link attack; and S5. calculating a total theoretical average attack time based on the average number of steps required for a successful link attack and the time length of a single node attack.

Anti-attacking modelling for CMD systems based on GSPN and Martingale theory

A method comprising: A. forming a consortium blockchain network using domain network nodes and selecting committee members from top-level domain nodes; B. the committee member who received most votes packs the genesis block and generates a random number; C. the housekeeper having the same number as the random number packs the current block and generates a random number for selecting a next housekeeper to pack the next block, each block is approved by more than half of the committee members; D. during the duty cycle, each housekeeper takes turns packing blocks and generating random numbers and the process is repeated. If a block is not approved, the housekeeper with the next number is requested to repack the block; and E. the last random number generated by a housekeeper before the duty cycle ends is used to select the housekeeper to pack the first block of the next duty cycle.

Determining consensus in a decentralized domain name system

The present disclosure relates generally to internet technology and more specifically to managing Top-level domain (TLD) name based on blockchain. An example method of managing Top-level domain name comprises the following steps: A. Using TLD nodes to form alliance network in the blockchain; B. Layering the system architecture in the alliance network to separate operations and data; and C. Reaching consensus among all nodes in the alliance network through consensus mechanism. A more effective and efficient consensus mechanism will increase the safety and reliability of the system and improve the efficiency of the system. Layering the system structure will ensure the efficiency and portability of the system.

Systems and methods for managing top-level domain names using consortium blockchain

The present invention discloses a software/hardware device with uncertain service function and structural characterization and a method for scheduling the same. The device comprises a policy generator, a scheduler and a plurality of heterogeneous functional equivalents with equivalent functions, wherein, the policy generator is configured for providing a scheduling policy for the heterogeneous functional equivalents to the scheduler; the scheduler is configured for receiving an external service request, determining heterogeneous functional equivalents that provide a service to the external service request according to the scheduling policy given by the policy generator, assigning the service request to the determined heterogeneous functional equivalents, and outputting a service response which has an uncertain relation with uncertain structural characterization according to a feedback and the scheduling policy given by the policy generator. Therefore, the service response provided to the service request has an uncertain correspondence relation with feedback results of the heterogeneous functional equivalents of the device, so that the effectiveness of detection or attack on an unknown loophole, trapdoor of the device is greatly lowered, and the protective ability of the software/hardware device is enhanced.

Software/hardware device with uncertain service function and structural characterization, and scheduling method thereof

A method and a device for establishing an information communication network system structure, as well as a server and a router. The method includes the steps of after establishing an initial service route, utilizing the server to periodically acquire current network resource configuration information and flow rate state information transmitted by each router node, and generating network resource view and network flow rate view; utilizing the server to acquire current real transmission performance of the initial service route according to the network resource view and the network flow rate view; including current real transmission performance and current business transmission requirement, and generating a reconstruction order when current real transmission performance does not match current business transmission requirement.

Method and device for establishing structure of a communication network system

Growing community of inventors

Zhengzhou, China

Jiangxing Wu