Huawei Technologies Co., Limited

Boe Technology Group Co., Ltd.

Hefei Xinsheng Optoelectronics Technology Co., Ltd.

Jinming Li

Donghui Wang

Chengchen Hu

Xiaoxin Wu

Yan Chen

Peng Zhang

Chao Liu

Dongdong Zhang

Han Yan

Weiwei Zhou

Qingshuang Ren

Erfeng Shen

Tae Hyuck Yoon

Aihua Lei

Xiaofu Wu

Huanzhao Wang

Xingming Hu

Rubao Bi

Chaomou Dai

Shengwang Dong

A software defined network (SDN) system, controller, and controlling method, where the SDN system includes at least one Nlevel controller and at least two (N+1)level controllers belonging to the Nlevel controller, where the (N+1)level controller is configured to receive a first message sent by a node belonging to the (N+1)level controller, and when the first message is a cross-domain message according to status information of each node that is managed by the (N+1)level controller, forward the first message to the Nlevel controller to which the (N+1)level controller belongs, and the Nlevel controller receives the first message, and perform decision processing according to status information of the (N+1)level controller that is managed by and belongs to the Nlevel controller and status information of boundary nodes of the (N+1)level controller belonging to the Nlevel controller.

SDN network system, controller, and controlling method

Conflict detection and resolution methods and apparatuses relate to the field of communications technologies. The conflict detection method includes: acquiring, by a controller, a flow path of a data flow on a network, where the flow path is used to indicate a path along which the data flow reaches an address in a destination address range from an address in a source address range through at least two intermediate nodes on the network, a first flow table rule is added to or deleted from flow tables of the at least two intermediate nodes, and the first flow table rule is any flow table rule; and determining, by the controller, whether a conflict exists according to an address range of the flow path and an address range of a security policy.

Conflict detection and resolution methods and apparatuses

The application relates to controlling access in a software-defined network (SDN). A controller in the SDN receives an access request from an application program. The controller determines whether an operation on a resource as specified in the access request belongs to a permission list corresponding to the application program. The permission list includes a list of permitted operations on the resource by the application program. When the operation as specified in the access request belongs to the permission list, the controller sends a reply message allowing access by the application program. In this way, accesses by the application program are restricted according to the permission list, and malicious attacks from the application program can be prevented to ensure network security.

Method for controlling permission of application program and controller

The present disclosure relates to the communications field, and specifically, to a flow table processing method and an apparatus. The method includes: monitoring, by a switch, a flow table load of the switch; when the flow table load of the switch exceeds a preset threshold, determining, by the switch, a diffusion target of a target data flow according to a matching rule of a diffusive flow table; and when the determined diffusion target is a neighboring switch of the switch, forwarding, by the switch, the target data flow to the neighboring switch. When the flow table load of the switch exceeds the preset threshold, the switch may have been attacked. A data flow that fails to be matched to a flow entry is forwarded to the neighboring switch according to a diffusion probability, for processing by the neighboring switch.

Flow table processing method and apparatus

The present disclosure provides a cache device and a LCD screen production line. The cache device provided by the present disclosure includes an outer frame having an opening for picking and placing cached items on a first side wall thereof and a support bracket for horizontally supporting cached items therein; and first blowing means disposed on the second side wall of the outer frame for blowing air toward the opening; second blowing means disposed on the third side wall or the fourth side wall of the outer frame; an exhaust means disposed on a fourth side wall opposite to the third side wall of the frame.

Cache device and LCD screen production line

The present disclosure discloses a message attack defense method and apparatus. The method includes: receiving, by a controller, a report message sent by at least one switch; respectively storing, by the controller in a switch queue corresponding to each switch, the received report message that is sent by each switch; and performing, by the controller, round-robin scheduling on the switch queue corresponding to each switch.

Message attack defense method and apparatus

A method and an apparatus for improving network security. The method includes obtaining, by a control node, alarm information, where the alarm information includes address information of an attack source that attacks a subnet of at least two subnets and identification information of the attacked subnet of the at least two subnets, using, by the control node, the alarm information to sort the attack sources in descending order of threat levels, and using a sorting result as a blacklist, and sending, by the control node, the obtained blacklist to at least one subnet that is not attacked yet in the network system. The method and apparatus are applicable to collaborative defense among multiple subnets.

Method and apparatus for improving network security

The present disclosure provides a method, an apparatus, and a system for cooperative defense on a network. Alarm information sent by a security device of a first subnet that is being attacked is received by a controller; the controller generates flow table information according to the alarm information, and forwards the flow table information to a switching device of the first subnet and a switching device of at least one second subnet, which is equivalent to that, after detecting an attack, a security device of a subnet generates alarm information, and shares, by using the controller, the alarm information with a switching device of the subnet and a switching device of another subnet that is not being attacked, to form networkwide cooperative defense, thereby enhancing network security.

Method, apparatus, and system for cooperative defense on network

A method and an apparatus for improving network security are provided. The method includes obtaining, by a control node, alarm information, where the alarm information includes address information of an attack source that attacks a subnet of at least two subnets and identification information of the attacked subnet of the at least two subnets, using, by the control node, the alarm information to sort the attack sources in descending order of threat levels, and using a sorting result as a blacklist, and sending, by the control node, the obtained blacklist to at least one subnet that is not attacked yet in the network system. The method and apparatus are applicable to collaborative defense among multiple subnets.

Embodiments of the present invention provide a data stream security processing method and apparatus. In the embodiments of the present invention, security levels of data streams are determined according to different feature information of the data streams, and forwarding paths corresponding to the data streams are determined according to the security levels, where a forwarding path may go through a security device to implement a corresponding security function of the forwarding path, thereby improving data stream forwarding security and lightening load of a central controller.

Growing community of inventors

Beijing, China

Jinming Li