Search

Your search keyword '"Sadre, Ramin"' showing total 239 results
Start Over Author "Sadre, Ramin"

Refine your results

more »

more »

more »
239 results on '"Sadre, Ramin"'

1. Supervising Smart Home Device Interactions: A Profile-Based Firewall Approach

Author

De Keersmaeker, François, Sadre, Ramin, and Pelsser, Cristel

Subjects
Computer Science - Networking and Internet Architecture, Computer Science - Cryptography and Security, C.2.3
Abstract

Internet of Things devices can now be found everywhere, including in our households in the form of Smart Home networks. Despite their ubiquity, their security is unsatisfactory, as demonstrated by recent attacks. The IETF's MUD standard has as goal to simplify and automate the secure deployment of end devices in networks. A MUD file contains a device specific description of allowed network activities (e.g., allowed IP ports or host addresses) and can be used to configure for example a firewall. A major weakness of MUD is that it is not expressive enough to describe traffic patterns representing device interactions, which often occur in modern Smart Home platforms. In this article, we present a new language for describing such traffic patterns. The language allows writing device profiles that are more expressive than MUD files and take into account the interdependencies of traffic connections. We show how these profiles can be translated to efficient code for a lightweight firewall leveraging NFTables to block non-conforming traffic. We evaluate our approach on traffic generated by various Smart Home devices, and show that our system can accurately block unwanted traffic while inducing negligible latency., Comment: 13 pages of body text, 16 pages total

Published
2023

3. Data Availability Sampling in Ethereum: Analysis of P2P Networking Requirements

Author

Król, Michał, Ascigil, Onur, Rene, Sergi, Rivière, Etienne, Pigaglio, Matthieu, Peeroo, Kaleem, Stankovic, Vladimir, Sadre, Ramin, and Lange, Felix

Subjects
Computer Science - Networking and Internet Architecture, Computer Science - Cryptography and Security
Abstract

Despite their increasing popularity, blockchains still suffer from severe scalability limitations. Recently, Ethereum proposed a novel approach to block validation based on Data Availability Sampling (DAS), that has the potential to improve its transaction per second rate by more than two orders of magnitude. DAS should also significantly reduce per-transaction validation costs. At the same time, DAS introduces new communication patterns in the Ethereum Peer-to-Peer (P2P) network. These drastically increase the amount of exchanged data and impose stringent latency objectives. In this paper, we review the new requirements for P2P networking associated with DAS, discuss open challenges, and identify new research directions.

Published
2023

4. A Public Network Trace of a Control and Automation System

Author

Ndonda, Gorby Kabasele and Sadre, Ramin

Subjects
Computer Science - Cryptography and Security, Computer Science - Networking and Internet Architecture, Electrical Engineering and Systems Science - Systems and Control
Abstract

The increasing number of attacks against automation systems such as SCADA and their network infrastructure have demonstrated that there is a need to secure those systems. Unfortunately, directly applying existing ICT security mechanisms to automation systems is hard due to constraints of the latter, such as availability requirements or limitations of the hardware. Thus, the solution privileged by researchers is the use of network-based intrusion detection systems (N-IDS). One of the issue that many researchers encounter is how to validate and evaluate their N-IDS. Having access to a real and large automation systems for experimentation is almost impossible as companies are not inclined to give access to their systems due to obvious concerns. The few public traffic datasets that could be used for off-line experiments are either synthetic or collected at small testbeds. In this paper, we will describe and characterize a public traffic dataset collected at the HVAC management system of a university campus. Although the dataset contains only packet headers, we believe that it can help researchers, in particular designers of flow-based IDS, to validate their solutions under more realistic conditions. The traces can be found on https://github.com/gkabasele/HVAC_Traces.

Published
2019

5. NetSheriff: Sheltering Software-Defined Networks from Rogue Switches

Author

Laffranchini, Paolo, Miranda, João, Machado, Nuno, Rodrigues, Luís, Rivière, Etienne, Sadre, Ramin, Goos, Gerhard, Founding Editor, Hartmanis, Juris, Founding Editor, Bertino, Elisa, Editorial Board Member, Gao, Wen, Editorial Board Member, Steffen, Bernhard, Editorial Board Member, Woeginger, Gerhard, Editorial Board Member, Yung, Moti, Editorial Board Member, Georgiou, Chryssis, editor, and Majumdar, Rupak, editor

Published
2021
Full Text
View/download PDF

6. Brief Announcement: Effectiveness of Code Hardening for Fault-Tolerant IoT Software

Author

Zavalyshyn, Igor, Given-Wilson, Thomas, Legay, Axel, Sadre, Ramin, Goos, Gerhard, Founding Editor, Hartmanis, Juris, Founding Editor, Bertino, Elisa, Editorial Board Member, Gao, Wen, Editorial Board Member, Steffen, Bernhard, Editorial Board Member, Woeginger, Gerhard, Editorial Board Member, Yung, Moti, Editorial Board Member, Devismes, Stéphane, editor, and Mittal, Neeraj, editor

Published
2020
Full Text
View/download PDF

11. Measuring and Modeling Multipath TCP

Author

Tran, Viet-Hoang, Sadre, Ramin, Bonaventure, Olivier, Hutchison, David, Series editor, Kanade, Takeo, Series editor, Kittler, Josef, Series editor, Kleinberg, Jon M., Series editor, Mattern, Friedemann, Series editor, Mitchell, John C., Series editor, Naor, Moni, Series editor, Pandu Rangan, C., Series editor, Steffen, Bernhard, Series editor, Terzopoulos, Demetri, Series editor, Tygar, Doug, Series editor, Weikum, Gerhard, Series editor, Latré, Steven, editor, Charalambides, Marinos, editor, François, Jérôme, editor, Schmitt, Corinna, editor, and Stiller, Burkhard, editor

Published
2015
Full Text
View/download PDF

12. A First Look at Real Multipath TCP Traffic

Author

Hesmans, Benjamin, Tran-Viet, Hoang, Sadre, Ramin, Bonaventure, Olivier, Hutchison, David, Series editor, Kanade, Takeo, Series editor, Kittler, Josef, Series editor, Kleinberg, Jon M., Series editor, Mattern, Friedemann, Series editor, Mitchell, John C., Series editor, Naor, Moni, Series editor, Pandu Rangan, C., Series editor, Steffen, Bernhard, Series editor, Terzopoulos, Demetri, Series editor, Tygar, Doug, Series editor, Weikum, Gerhard, Series editor, Steiner, Moritz, editor, Barlet-Ros, Pere, editor, and Bonaventure, Olivier, editor

Published
2015
Full Text
View/download PDF

13. Towards Bandwidth Estimation Using Flow-Level Measurements

Author

de O. Schmidt, Ricardo, Sperotto, Anna, Sadre, Ramin, Pras, Aiko, Hutchison, David, editor, Kanade, Takeo, editor, Kittler, Josef, editor, Kleinberg, Jon M., editor, Mattern, Friedemann, editor, Mitchell, John C., editor, Naor, Moni, editor, Nierstrasz, Oscar, editor, Pandu Rangan, C., editor, Steffen, Bernhard, editor, Sudan, Madhu, editor, Terzopoulos, Demetri, editor, Tygar, Doug, editor, Vardi, Moshe Y., editor, Weikum, Gerhard, editor, Sadre, Ramin, editor, Novotný, Jiří, editor, Čeleda, Pavel, editor, Waldburger, Martin, editor, and Stiller, Burkhard, editor

Published
2012
Full Text
View/download PDF

14. SSHCure: A Flow-Based SSH Intrusion Detection System

Author

Hellemons, Laurens, Hendriks, Luuk, Hofstede, Rick, Sperotto, Anna, Sadre, Ramin, Pras, Aiko, Hutchison, David, editor, Kanade, Takeo, editor, Kittler, Josef, editor, Kleinberg, Jon M., editor, Mattern, Friedemann, editor, Mitchell, John C., editor, Naor, Moni, editor, Nierstrasz, Oscar, editor, Pandu Rangan, C., editor, Steffen, Bernhard, editor, Sudan, Madhu, editor, Terzopoulos, Demetri, editor, Tygar, Doug, editor, Vardi, Moshe Y., editor, Weikum, Gerhard, editor, Sadre, Ramin, editor, Novotný, Jiří, editor, Čeleda, Pavel, editor, Waldburger, Martin, editor, and Stiller, Burkhard, editor

Published
2012
Full Text
View/download PDF

16. Towards Cheaper Tourists' Emotion and Satisfaction Estimation with PCA and Subgroup Analysis

Author

Lucas Maris, Yuki Matsuda, Sadre, Ramin, Keiichi Yasumoto, and UCL - SST/ICTM/INGI - Pôle en ingénierie informatique

Abstract

Smart tourism leverages ubiquitous sensors to recognise the state of tourists and provide them with a better-tailored sightseeing experience. We previously reported on our EmoTour system [1], which uses behavioural cues and audiovisual data collected during sightseeing to estimate tourists' emotional status and satisfaction levels. Some of this data is however not exceedingly convenient to collect, as eye-gaze trackers for instance are not widely available nor usually worn by regular tourists. In this paper, we explore different possibilities to both improve our previous results and lessen the cost of data collection, to work towards a system that is better suited for real-world applications. Using Principal Component Analysis dimensionality reduction, we show how leaving out either or both of eye-gaze tracker and physiological wristband sensor data can have little to no impact on the quality of predictions, and improve on our previously reported classification and regression scores. We also apply this new method to explore differences in emotional responses according to participants' nationality, age, and gender.

Published
2023

17. A Survey of Public IoT Datasets for Network Security Research

Author

De Keersmaeker, François, Cao, Yinan, Kabasele Ndonda, Gorby, Sadre, Ramin, and UCL - SST/ICTM/INGI - Pôle en ingénierie informatique

Subjects
IoT, taxonomy, datasets, network, Security, Datasets, Traffic generation, security, Networks, Taxonomy
Abstract

Publicly available datasets are an indispensable tool for researchers, as they allow testing new algorithms on a wide range of different scenarios and making scientific experiments verifiable and reproducible. Research in IoT security is no exception. In particular, the design of traffic classification and intrusion detection solutions for network security relies on network traces obtained from real networks or realistic testbeds. In this paper, we provide a detailed survey on the existing datasets containing IoT network traffic. We classify them according to several features that help researchers quickly find the datasets that fit their specific needs. In total, we survey 74 datasets that we found by analyzing more than 100 scientific articles. We also discuss the weaknesses of existing datasets, identify challenges, and point to future directions for creating new IoT datasets.

Published
2023

18. A Statistical Analysis of Network Parameters for the Self-management of Lambda-Connections

Author

Fioreze, Tiago, Granville, Lisandro, Sadre, Ramin, Pras, Aiko, Hutchison, David, Series editor, Kanade, Takeo, Series editor, Kittler, Josef, Series editor, Kleinberg, Jon M., Series editor, Mattern, Friedemann, Series editor, Mitchell, John C., Series editor, Naor, Moni, Series editor, Nierstrasz, Oscar, Series editor, Pandu Rangan, C., Series editor, Steffen, Bernhard, Series editor, Sudan, Madhu, Series editor, Terzopoulos, Demetri, Series editor, Tygar, Doug, Series editor, Vardi, Moshe Y., Series editor, Weikum, Gerhard, Series editor, Sadre, Ramin, editor, and Pras, Aiko, editor

Published
2009
Full Text
View/download PDF

19. Machine‐as‐a‐Service: Blockchain‐based management and maintenance of industrial appliances.

Author

Tran, Viet Hoang, Lenssens, Bernard, Kassab, Ayham, Laks, Alexis, Rivière, Etienne, Rosinosky, Guillaume, and Sadre, Ramin

Subjects
PLANT maintenance, INDUSTRIAL management, OPERATIONS management, INTERNET of things
Abstract

Machine‐as‐a‐Service (MaaS) is an emerging service model for industrial appliances. With MaaS, machines are rented instead of being acquired, and their lifecycle is handled by an ecosystem of specialized actors, such as different independent maintenance companies certified for interventions on specific hardware. As the number of actors, clients, and providers involved in a MaaS ecosystem grows, maintaining mutual trust relationships between all involved parties and orchestrating MaaS operations in centralized fashion quickly becomes intractable. We present a blockchain‐based approach to providing MaaS in industrial settings where rented machines are equipped with IoT sensors, and where MaaS operations are orchestrated in a transparent, decentralized, and scalable way using a collection of smart contracts deployed over an infrastructure combining the Ethereum and InterPlanetary File System decentralized services. We detail the operations of MaaS, such as the lifecycle of management operations, and report on the performance of a prototype implementation deployed in the cloud. [ABSTRACT FROM AUTHOR]

Published
2023
Full Text
View/download PDF

20. Measurement Artifacts in NetFlow Data

Author

Hofstede, Rick, Drago, Idilio, Sperotto, Anna, Sadre, Ramin, Pras, Aiko, Hutchison, David, editor, Kanade, Takeo, editor, Kittler, Josef, editor, Kleinberg, Jon M., editor, Mattern, Friedemann, editor, Mitchell, John C., editor, Naor, Moni, editor, Nierstrasz, Oscar, editor, Pandu Rangan, C., editor, Steffen, Bernhard, editor, Sudan, Madhu, editor, Terzopoulos, Demetri, editor, Tygar, Doug, editor, Vardi, Moshe Y., editor, Weikum, Gerhard, editor, Roughan, Matthew, editor, and Chang, Rocky, editor

Published
2013
Full Text
View/download PDF

21. Simulative and Analytical Evaluation for ASD-Based Embedded Software

Author

Sadre, Ramin, Remke, Anne, Hettinga, Sjors, Haverkort, Boudewijn, Hutchison, David, Series editor, Kanade, Takeo, Series editor, Kittler, Josef, Series editor, Kleinberg, Jon M., Series editor, Mattern, Friedemann, Series editor, Mitchell, John C., Series editor, Naor, Moni, Series editor, Nierstrasz, Oscar, Series editor, Pandu Rangan, C., Series editor, Steffen, Bernhard, Series editor, Sudan, Madhu, Series editor, Terzopoulos, Demetri, Series editor, Tygar, Doug, Series editor, Vardi, Moshe Y., Series editor, Weikum, Gerhard, Series editor, and Schmitt, Jens B., editor

Published
2012
Full Text
View/download PDF

22. Difficulties in Modeling SCADA Traffic: A Comparative Analysis

Author

Barbosa, Rafael R. R., Sadre, Ramin, Pras, Aiko, Hutchison, David, Series editor, Kanade, Takeo, Series editor, Kittler, Josef, Series editor, Kleinberg, Jon M., Series editor, Mattern, Friedemann, Series editor, Mitchell, John C., Series editor, Naor, Moni, Series editor, Nierstrasz, Oscar, Series editor, Pandu Rangan, C., Series editor, Steffen, Bernhard, Series editor, Sudan, Madhu, Series editor, Terzopoulos, Demetri, Series editor, Tygar, Doug, Series editor, Vardi, Moshe Y., Series editor, Weikum, Gerhard, Series editor, Taft, Nina, editor, and Ricciato, Fabio, editor

Published
2012
Full Text
View/download PDF

26. Hidden Markov Model Modeling of SSH Brute-Force Attacks

Author

Sperotto, Anna, Sadre, Ramin, de Boer, Pieter-Tjerk, Pras, Aiko, Hutchison, David, Series editor, Kanade, Takeo, Series editor, Kittler, Josef, Series editor, Kleinberg, Jon M., Series editor, Mattern, Friedemann, Series editor, Mitchell, John C., Series editor, Naor, Moni, Series editor, Nierstrasz, Oscar, Series editor, Pandu Rangan, C., Series editor, Steffen, Bernhard, Series editor, Sudan, Madhu, Series editor, Terzopoulos, Demetri, Series editor, Tygar, Doug, Series editor, Vardi, Moshe Y., Series editor, Weikum, Gerhard, Series editor, Bartolini, Claudio, editor, and Gaspary, Luciano Paschoal, editor

Published
2009
Full Text
View/download PDF

27. A Labeled Data Set for Flow-Based Intrusion Detection

Author

Sperotto, Anna, Sadre, Ramin, van Vliet, Frank, Pras, Aiko, Hutchison, David, editor, Kanade, Takeo, editor, Kittler, Josef, editor, Kleinberg, Jon M., editor, Mattern, Friedemann, editor, Mitchell, John C., editor, Naor, Moni, editor, Nierstrasz, Oscar, editor, Pandu Rangan, C., editor, Steffen, Bernhard, editor, Sudan, Madhu, editor, Terzopoulos, Demetri, editor, Tygar, Doug, editor, Vardi, Moshe Y., editor, Weikum, Gerhard, editor, Nunzi, Giorgio, editor, Scoglio, Caterina, editor, and Li, Xing, editor

Published
2009
Full Text
View/download PDF

28. Detecting Spam at the Network Level

Author

Sperotto, Anna, Vliek, Gert, Sadre, Ramin, Pras, Aiko, Hutchison, David, Series editor, Kanade, Takeo, Series editor, Kittler, Josef, Series editor, Kleinberg, Jon M., Series editor, Mattern, Friedemann, Series editor, Mitchell, John C., Series editor, Naor, Moni, Series editor, Nierstrasz, Oscar, Series editor, Pandu Rangan, C., Series editor, Steffen, Bernhard, Series editor, Sudan, Madhu, Series editor, Terzopoulos, Demetri, Series editor, Tygar, Doug, Series editor, Vardi, Moshe Y., Series editor, Weikum, Gerhard, Series editor, Oliver, Miquel, editor, and Sallent, Sebastià, editor

Published
2009
Full Text
View/download PDF

29. Anomaly Characterization in Flow-Based Traffic Time Series

Author

Sperotto, Anna, Sadre, Ramin, Pras, Aiko, Hutchison, David, editor, Kanade, Takeo, editor, Kittler, Josef, editor, Kleinberg, Jon M., editor, Mattern, Friedemann, editor, Mitchell, John C., editor, Naor, Moni, editor, Nierstrasz, Oscar, editor, Pandu Rangan, C., editor, Steffen, Bernhard, editor, Sudan, Madhu, editor, Terzopoulos, Demetri, editor, Tygar, Doug, editor, Vardi, Moshe Y., editor, Weikum, Gerhard, editor, Akar, Nail, editor, Pioro, Michal, editor, and Skianis, Charalabos, editor

Published
2008
Full Text
View/download PDF

30. Changes in the Web from 2000 to 2007

Author

Sadre, Ramin, Haverkort, Boudewijn R., Hutchison, David, Series editor, Kanade, Takeo, Series editor, Kittler, Josef, Series editor, Kleinberg, Jon M., Series editor, Mattern, Friedemann, Series editor, Mitchell, John C., Series editor, Naor, Moni, Series editor, Nierstrasz, Oscar, Series editor, Pandu Rangan, C., Series editor, Steffen, Bernhard, Series editor, Sudan, Madhu, Series editor, Terzopoulos, Demetri, Series editor, Tygar, Doug, Series editor, Vardi, Moshe Y., Series editor, Weikum, Gerhard, Series editor, De Turck, Filip, editor, Kellerer, Wolfgang, editor, and Kormentzas, George, editor

Published
2008
Full Text
View/download PDF

31. A Fixed-Point Algorithm for Closed Queueing Networks

Author

Sadre, Ramin, Haverkort, Boudewijn R., Reinelt, Patrick, Hutchison, David, editor, Kanade, Takeo, editor, Kittler, Josef, editor, Kleinberg, Jon M., editor, Mattern, Friedemann, editor, Mitchell, John C., editor, Naor, Moni, editor, Nierstrasz, Oscar, editor, Pandu Rangan, C., editor, Steffen, Bernhard, editor, Sudan, Madhu, editor, Terzopoulos, Demetri, editor, Tygar, Doug, editor, Vardi, Moshe Y., editor, Weikum, Gerhard, editor, and Wolter, Katinka, editor

Published
2007
Full Text
View/download PDF

46. Chaos Duck: Towards Automatic IoT Software Fault-Tolerance Analysis

Author

Zavalyshyn, Igor, Given-Wilson, Thomas, Legay, Axel, Sadre, Ramin, Riviere, Etienne, and UCL - SST/ICTM/INGI - Pôle en ingénierie informatique

Abstract

Internet of Things (IoT) device software frequently handles sensitive data. This software has to be resistant to faults to prevent leakage and ensure data privacy and security. Source code hardening is a common way to make software fault- tolerant. However, the effectiveness and performance impact of a chosen hardening technique are not always obvious. Moreover, it becomes increasingly difficult to predict potential attack vectors and implement proper countermeasures. To assist in this task, we developed Chaos Duck, an automatic tool for IoT software fault-tolerance analysis. Chaos Duck emulates various fault types and provides statistics on their impact on software security and stability. We present a case study in which we use Chaos Duck to compare five software hardening techniques applied to the PRESENT block cipher implementation. We show that some simple hardening techniques may improve fault-tolerance, while others can instead reduce overall security and introduce new vulnerabilities. Our contributions are twofold: we offer a software fault-tolerance analysis tool to IoT developers seeking to make their software secure and robust, and we shed light on the efficiency of various hardening techniques.

Published
2021

Catalog

Books, media, physical & digital resources
See catalog results