Translating configurations between different network devices is a common yet challenging task in modern network operations. This challenge arises in typical scenarios such as replacing obsolete hardware and adapting configurations to emerging paradigms like Software Defined Networking (SDN) and Network Function Virtualization (NFV). Engineers need to thoroughly understand both source and target configuration models, which requires considerable effort due to the complexity and evolving nature of these specifications. To promote automation in network configuration translation, we propose INTA, an intent-based translation framework that leverages Large Language Model (LLM) agents. The key idea of INTA is to use configuration intent as an intermediate representation for translation. It first employs LLMs to decompose configuration files and extract fine-grained intents for each configuration fragment. These intents are then used to retrieve relevant manuals of the target device. Guided by a syntax checker, INTA incrementally generates target configurations. The translated configurations are further verified and refined for semantic consistency. We implement INTA and evaluate it on real-world configuration datasets from the industry. Our approach outperforms state-of-the-art methods in translation accuracy and exhibits strong generalizability. INTA achieves an accuracy of 98.15% in terms of both syntactic and view correctness, and a command recall rate of 84.72% for the target configuration. The semantic consistency report of the translated configuration further demonstrates its practical value in real-world network operations.

Research in the area of Distributed Denial of Service (DDoS) attack detection is of paramount importance in the field of network security. Many existing studies employ static evaluation methods that fail to account for the reduction in accuracy due to the impact of inference latency on the timeliness of classification results. Furthermore, these studies frequently rely on simulated datasets for experimentation, which often lack the complexity and challenge of real-world attacks. These limitations significantly hinder the applicability of such research in practical scenarios. To overcome these challenges, we propose an evaluation methodology for real-time DDoS attack detection incorporating inference latency considerations. Additionally, we have developed a challenging DDoS dataset named THU-DDoS2024 and conducted experiments across four classification algorithms. This novel evaluation method and the newly generated dataset are integrated into an evaluation framework named E-DDoS. Leveraging E-DDoS, the “Intelligent Classification of High-Speed Network Traffic (ICNT)”, Grand Challenge was initiated. This event aims to motivate both academic and industrial sectors to delve into high-speed traffic classification tasks, thereby enhancing the applicability of research outputs to real-world applications.