网络安全性

As network processor become core hardware in the next generation network device. The research in this paper is quality and security of network information transmission based-on network processor.

因此网络处理器将成为下一代网络设备的核心硬件，本文的研究问题是基于网络处理器的网络服务质量和网络信息传输的安全性。

Firstly, this paper puts forward an improved authentication and key distribution scheme for internet environment, in which we adhibit multilevel authentication center, encryption technology of DES, RSA and one-way function to actualize the safety of communication among the different user on network and reduces the workload of the authentication institution; at the same time, this scheme can also assure the security of network. Besides, it use the temporary symbol and the responds" sign of both-side correspondent to replace time stamp and applies them to internet communication to countercheck "rebroadcast attack and accordingly resolves the problem that it needs synchronization for network clock.

本文在首先提出一种改进的Internet网络环境下的认证及密钥分配方案，该方案考虑采用了多级认证中心，DES、RSA和单向函数加密机制，实现了网络上不同用户间的安全通信，降低了网上认证机构的工作量，同时也能够保证网络的安全性；并用通信双方的临时标志和响应者标识来代替时间戳应用于Internet通信中以防止"重播"攻击，从而解决了以往需要网络时钟同步这一难题。

The next generation optical network will be divided into multiple routing domains to improve the performance of routing and signaling, network reliability, scalability and security. It will be essential to define the border of network management and to adopt the technology of distributed management and hierarchical routing.

为了定义网络的管理边界、提高路由和信令的性能、提高网络的可靠性，可扩展性和安全性以及兼容不同系统间的技术差异，以ASON为代表的下一代光网络将被划分为多个路由域，采用分布式管理和分层的网络路由体系。

To time;Appear the phenomenon that more than ten a students carry out homology operation in the campus net Central Standing Committee, so consider the control that erupt the information;Student the exploitation network pretends the industry, the teacher wants to be at home to stir the number interview school network, the student status management information delivers on the net, so also want the safety that consider the network, preventing the black a breakage network, student copy homework;Campus net again is tool that teacher to face to the different knowledge level of structure, student with transact the personnel, it help us betterly exaltation teaching level, transact the efficiency with study the interest, so the application should be simple with the management easy line, interface amity, not proper too the profession turns.

校园网的建设主要是为了教学应用，而多媒体辅助教学和多媒体教室是教学应用的核心，在网络建设时应考虑多媒体信息的特点，如信息量大，对时间延迟敏感等；在校园网中常会出现几十个学生执行相同操作的现象，所以要考虑并发信息的控制；学生利用网络做作业，教师要在家拨号访问学校网络，学籍管理信息在网上传输，所以也要考虑网络的安全性，防止黑客破坏网络，学生抄袭作业；校园网又是面向不同知识层次的教师、学生和办公人员的工具，它帮助我们更好地提高教学水平、办公效率和学习兴趣，所以应用和管理应简便易行，界面友好，不宜太专业化。

This invention provides a method for transferring third party landing based on IP network including: a door network station carries a ciphered KEY generated randomly by a service server to send a link request to a third party network station so as to avoid transmission of user ciphered codes and ensure absolute security of user codes, besides, since the third party network station calls back the Web server by copying the ciphered KEY to verify the cryptographic key so as to secure the absolute safety of shaking hands, since the door network station does not transfer user ciphered codes with the third party network station, which is not necessary to synchronize with the door station about codes, thus the requirement of complicated maintenance to synchronization on ciphered codes to the third party is reduced.

本发明提供了一种基于IP网络转接第三方登陆的方法，其关键是，由门户网站携带业务服务器随机生成的加密KEY向第三方网站发送链接请求，避免了用户密码的传输，因而保证了用户密码的绝对安全性。再有，由于第三方网站通过复制加密KEY回调Web服务器，由Web服务器进行密钥验证，因而又保证了握手的绝对安全性。应用本发明，由于门户网站与第三方网站之间不传递用户密码，使得第三方网站无需与门户网站进行密码同步等机制的处理，在大大提高安全性的同时，降低了对第三方网站对于密码同步机制等复杂维护的要求。

The traditional risk assessment system for detection and assessment of modules should not dynamically to move in the network with the required distribution,limiting the assessment of speed,efficiency and scope of application and so on.

通过对人工智能、"软件人"和网络安全风险评估技术的深入研究，提出一种基于"软件人"群的网络安全风险评估模型，能够动态地反应、评估网络系统的安全性，有效地解决了传统风险评估系统中检测和评估模块不能在网络中动态移动、随需分布，并限制评估速度、效率和应用范围等问题。

Firstly, this paper puts forward an improved authentication and key distribution scheme for internet environment, in which we adhibit multilevel authentication center, encryption technology of DES, RSA and one-way function to actualize the safety of communication among the different user on network and reduces the workload of the authentication institution; at the same time, this scheme can also assure the security of network. Besides, it use the temporary symbol and the responds" sign of both-side correspondent to replace time stamp and applies them to internet communication to countercheck "rebroadcast attack and accordingly resolves the problem that it needs synchronization for network clock.

本文在首先提出一种改进的Internet网络环境下的认证及密钥分配方案，该方案考虑采用了多级认证中心，DES、RSA和单向函数加密机制，实现了网络上不同用户间的安全通信，降低了网上认证机构的工作量，同时也能够保证网络的安全性；并用通信双方的临时标志和响应者标识来代替时间戳应用于Internet通信中以防止&重播&攻击，从而解决了以往需要网络时钟同步这一难题。

Nowadays, with the high- speed development of information technology, the application of the network is getting more and more extensive. On the one hand, for almost users, the dependence of the network becomes stronger. On the other hand, the requests of high speed and safeties of network have been presented .In 2002, It is so significant in the synthetical wiring realm of network to confirm the standard of the TIA/ EIA-568- B.

在当今高速发展的信息社会，网络的应用越来越广泛，人们对于网络的依赖性越来越强，对于网络的高速性和安全性的要求也越来越高。2002年，TIA/EIA-568-B布线部件标准的正式确定，在网络综合布线领域具有重大的意义。

But also is facing some thornier question in the movement,like network audit scope too small, lacks the high quality the auditpersonnel, the software system function are few, the network auditdivulges a secret the event sometimes has and so on, investigates itsreason mainly is the financial network system and the auditingdepartment network construction development is not balanced; Thenetwork audit security waits for strengthens; The high quality auditpersonnel seriously lacks; Lacks outstanding network audit softwareand so on.

但在运行中也面临着一些较为棘手的问题，如网络审计的范围太小，缺乏高素质的审计人员，软件系统功能少，网络审计泄密事件时有发生等，究其原因主要是财务网络体系及审计部门网络化建设发展不平衡；网络审计的安全性有待加强；高素质的审计人员严重缺乏；缺乏优秀的网络审计软件等等。

Bringing security metric as a QoS parameter is a new strategy in QoS routing.Aiming at the problems that the way of characterizing the link safety using only one security metric in QoS routing,a strategy that using multi-security metric as routing parameter is proposed.This will characterize the link safety much more exact.The authors will use the strategy mentioned before for secure routing based on differentiated service.An algorithm named MOSRA（Multi-Object Optimal Secure Routing Algorithm）based on nondominated sorting genetic algorithm under Differentiated Service Model is proposed to solve the NP complete.

将安全度量作为一种QoS参数进行路由选择是目前网络安全路由研究的一个新思路，针对现有方法采用一个安全度量参数描述链路安全性，进行路由选择存在的问题，提出一种多安全度量的链路安全性描述策略，能够更加全面准确地描述网络链路的安全特征；该描述策略应用于区分服务模型下的安全路由选择，并提出了基于改进的非支配遗传算法的多目标最优化安全路由算法求解这一多目标多约束的NP完全问题。

Neither the killing of Mr Zarqawi nor any breakthrough on the political front will stop the insurgency and the fratricidal murders in their tracks.

在对危险的南部地区访问时，他斥责什叶派民兵领导人对中央集权的挑衅行为。

In fact,I've got him on the satellite mobile right now.

实际上 我们已接通卫星可视电话了