Update Chain-based Approach for Checking Route Oscillation of BGP

This paper presents a novel approach for checking route oscillation of border gateway protocol(BGP) quickly,by which the privacy of routing policies of autonomous system(AS) can be respected.Firstly,route update chain tag(RUCT) is constructed to track the forwarding of update report,and local routing library is made to record the changing history of update report.Then route oscillation can be identified by analyzing correlative state of RUCT and local routing library.The characteristic of this approach is that an arbitrary AS can check route oscillation alone only by sharing its network ID,which greatly respects the pri-vacy of routing policies for each AS.This paper shows that both looping in RUCT and consecutive positive-negative report in local record are sufficient conditions for route oscillation.Comparative experiments demonstrate the availability and efficiency of the proposed approach.     

防火墙技术剖析与启示

针对Internet面临的安全问题,阐述了设置防火墙的目的和作用,介绍了防火墙技术的基本概念和体系结构,讨论了实现防火墙的主要技术手段:数据包过滤、应用级网关和代理服务,并比较了这些技术各自的优缺点。在此基础上总结得出了关于防火墙正确配置、维护以及测试验证的几点重要启示,最后分析了传统防火墙的局限性,指出新一代防火墙应具有的特性。