TL;DR: This paper is the first to present the state-of-the-art of the SAGIN since existing survey papers focused on either only one single network segment in space or air, or the integration of space-ground, neglecting the Integration of all the three network segments.
Abstract: Space-air-ground integrated network (SAGIN), as an integration of satellite systems, aerial networks, and terrestrial communications, has been becoming an emerging architecture and attracted intensive research interest during the past years. Besides bringing significant benefits for various practical services and applications, SAGIN is also facing many unprecedented challenges due to its specific characteristics, such as heterogeneity, self-organization, and time-variability. Compared to traditional ground or satellite networks, SAGIN is affected by the limited and unbalanced network resources in all three network segments, so that it is difficult to obtain the best performances for traffic delivery. Therefore, the system integration, protocol optimization, resource management, and allocation in SAGIN is of great significance. To the best of our knowledge, we are the first to present the state-of-the-art of the SAGIN since existing survey papers focused on either only one single network segment in space or air, or the integration of space-ground, neglecting the integration of all the three network segments. In light of this, we present in this paper a comprehensive review of recent research works concerning SAGIN from network design and resource allocation to performance analysis and optimization. After discussing several existing network architectures, we also point out some technology challenges and future directions.
TL;DR: In this paper, the authors proposed a bridge-like approach for non-TCP/IP traffic in an extended local area network (LAN) with a database associated with extended LAN segment addresses with port numbers.
Abstract: A device and related method for coupling segments of an extended local area network (LAN) in such a way that message traffic employing inter-network protocols such as TCP/IP will be handled without the difficulties usually associated with bridges, and without the complexity and expense of full IP router capability. The device operates like a bridge for non-TCP/IP traffic. For TCP/IP traffic it operates in a bridge-like manner but maintains a database associating extended LAN segment addresses with port numbers in the device, so that packets can be automatically forwarded over a spanning tree connecting the network segments. A host computer in any network segment can address others in different network segments of the extended LAN as though all were in a single LAN. The device of the invention functions to block the flow of ARP messages and to generate ARP replies that render the device of the invention transparent to hosts within the extended LAN. The device is also transparent to true IP routers, which may still be used to effect communication with points outside the extended LAN.
TL;DR: In this paper, a data collection module collects data from a network segment and a flow processor coupled with a capture system coupled to the flow processor filters and buffers the collected data, and a main processor processes the filtered data.
Abstract: A probe apparatus, method and computer program product for application monitoring are provided. A data collection module collects data from a network segment. A flow processor coupled to the data collection module classifies the collected data into a plurality of flows. A capture system coupled to the flow processor filters and buffers the collected data. A main processor processes the filtered data.
TL;DR: In this paper, a network model is analyzed using optimization rules and network performance objectives to determine the optimal configuration of the network according to the network performance objective, which is repeated for each potential resource position in the network.
Abstract: An optimization method collects data regarding network topology and traffic flow and creates a network model. The model is analyzed using optimization rules and network performance objectives to determine the optimal configuration of the network according to the network performance objectives. An optimization rule for positioning a shared central resource on the network identifies the communication paths between all clients of the resource and assigns a cost value to the traffic flowing between the clients and the resource. This is repeated for each potential resource position in the network. The position having the lowest traffic cost is the optimal position for the resource. An optimization rule for partitioning network segments determines all possible partitions at the hubs of a segment and scores the performance of each possible partition, according to network performance goals. The hub partition having the lowest score is the optimal hub for partitioning the network segment.
TL;DR: In this paper, the authors describe a system and methods of securing a computing network by defining one or more dynamic policy enforcement points (DPEPs) on a network segment and specifying one of these DPEPs as an active policy enforcement point (APEP).
Abstract: Systems and methods of securing a computing network are described Communication from unauthorized devices is prevented by defining one or more dynamic policy enforcement points (DPEPs) on a network segment and specifying one of these DPEPs as an active policy enforcement point (APEP) The APEP prevents communication from unauthorized devices by spoofing an ARP response If an APEP becomes unavailable, another of the one or more DPEPs is automatically selected as a new APEP Members of the one or more DPEPs may be non-dedicated devices configured as DPEPs by the addition of security software The number of DPEPs and APEPs can automatically scale with the number of devices on the computing network