Search

Cloud computing (CC) permits the end-users to access the network via a shared resources field. The vulnerabilities on the service providers will augment with the augmentation of the demand for CC. Economical denial of service (EDoS) attacks take over the supplier financially affecting the disparate organizations that utilize the cloud data. It is not possible to identify the hackers subsequent to EDoS attacks; however, their passage can well be detected and blocked. Nevertheless, loads of challenges are there to surmount. The work renders an effectual EDoS–Dome system in CC. Secured user authentication is initiated here with the instigation of the secret question key technique in the user registration together with the verification phase. After that, for the effective tracing back of the hacked data, an effectual Obfuscation technique is developed aimed at IP spoofing. To attain fast response time (RT) along with block the passage of attackers, a CI-RDA load balancer is developed. Lastly, the developed regression coefficients deer hunting-deep Elman neural network classifies the user data into a blacklist or white list centered on particular conditions. The experimentation's outcomes exhibit that the proposed work is effectual with 97.01% accuracy and 97.05% recalls when weighed against prevailing methods to classify the attacks. It also encompasses lower cost as well as fast RT with the equivalent web services, which signifies a safe model in opposition to the EDoS attack. [ABSTRACT FROM AUTHOR]

A Local Area Network (LAN) is a private communication network for connecting computers and devices in a circumscribed location. This paper explains the design and implementation of LAN for a Hotel named 'Greenwich'. The network topology is achieved with the help of nodes such as Server, Routers, Switches, PCs, Wireless Devices, WLANs and Ethernet cables. The paper also deals with a few other topics like Server Configuration (HTTP, DNS, FTP and Email Servers), IP Address Configuration, transmission of packets among the devices in the network, working of IP phones and also how Virtual LANs can help in separating sectors in a network. All routers of all the floors are connected to the Internet. The entire network topology of Hotel Greenwich is simulated with the help of a simulating software called Cisco Packet Tracer (CPT). The implemented design is of primary level and can be enhanced for higher levels. [ABSTRACT FROM AUTHOR]

Protocol describes a cascade of formalised standards or agreements to be implemented as control regimes for flexible material and/or semiotic organisation. It predictably structures in an often layered, sometimes hierarchical way the behaviours of data and objects to participate in infrastructural networks. While 'protocol' may refer specifically to Internet protocols, it also describes a mode of organisation evident in a variety of technical and non-technical settings.

ATSC 3.0 is the Next Gen TV broadcast emission system defined by the Advanced Television Systems Committee (ATSC) encompassing the entire terrestrial broadcast system from the physical layer to the applications and presentation layer. This paper offers an overview of the important advancements in the ATSC 3.0 Standard, which is designed to inspire today's content creators, business leaders, and consumers. [ABSTRACT FROM AUTHOR]

Powerline communications (PLC)-based smart meter deployments are now a reality in many regions of the world. Although PLC elements are generally incorporated in smart meters and data concentrators, the underlying PLC network allows the integration of other smart grid services directly over it. The remote control capabilities that automation programs need and are today deployed over their medium voltage (MV) grid, can be extended to the low voltage (LV) grid through these existing PLC networks. This paper demonstrates the capabilities of narrowband high data rate (NB HDR) PLC technologies deployed over LV grids for smart metering purposes to support internet protocol internet protocol (IP) communications in the LV grid. The paper demonstrates these possibilities with the presentation of the simulation and laboratory results of IP communications over international telecommunication union: ITU-T G.9904 PLC technology, and the definition of a PLC Network Management System based on a simple network management protocol (SNMP) management information base (MIB) definition and applicable use cases.

Powerline communications (PLC)-based smart meter deployments are now a reality in many regions of the world. Although PLC elements are generally incorporated in smart meters and data concentrators, the underlying PLC network allows the integration of other smart grid services directly over it. The remote control capabilities that automation programs need and are today deployed over their medium voltage (MV) grid, can be extended to the low voltage (LV) grid through these existing PLC networks. This paper demonstrates the capabilities of narrowband high data rate (NB HDR) PLC technologies deployed over LV grids for smart metering purposes to support internet protocol internet protocol (IP) communications in the LV grid. The paper demonstrates these possibilities with the presentation of the simulation and laboratory results of IP communications over international telecommunication union: ITU-T G.9904 PLC technology, and the definition of a PLC Network Management System based on a simple network management protocol (SNMP) management information base (MIB) definition and applicable use cases. [ABSTRACT FROM AUTHOR]

ABSTRACT Vehicular ad hoc networks (VANETs) have drawn increasing attention in recent years due to their wide range of applications. At the present time, vehicle communication is exposed to many security threats, such as denial of service (DoS) attacks. In these attacks, a malicious node forges a large number of fake identities. Internet Protocol (IP) spoofing addresses is to disrupt the proper functioning of the fair data transfer between two fast moving vehicles. In this paper, IP spoofing addresses of DoS attacks have been detected and defended by using the Bloom-filter based IP-CHOCK detection method, which provides the availability of a service for the legitimate vehicles in the VANET. The IP spoofing addresses in the DoS attacks committed by fraud and malicious nodes have also been investigated. This method provides a secure communication as well as frees the bandwidth. This proposed approach requires fewer resources and is easy to deploy. Simulation results have shown that this method is efficient and effective to detect and defend against DoS attacks in the VANET. Specifically, this method provides faster detection time, lower storage capacity, and computational cost. Copyright © 2014 John Wiley & Sons, Ltd. [ABSTRACT FROM AUTHOR]

A remote monitoring system via Internet for the Multivariable and Level modules, available in Politécnico Colombiano Jaime Isaza Cadavid, is presented. It is achieved through an interaction between the S7-1200 PLC and a PC server with LabVIEW® software. The main aim is to provide a new way to obtain information about a remote process in real time that can be applied industrially for small and medium enterprises. This is a solution relatively cheaper than those existing in the market. First, the selection of the most relevant indicators for the 2 production processes is described, continuing with the selection of hardware and software tools needed to perform the remote monitoring via the Internet through a web-browser. A dynamic online file of historical indicators is created and finally communication tests from the same network and an external network are implemented to validate the full operation of the system. [ABSTRACT FROM AUTHOR]

Abstract: This paper presents a comparison study between the TLS-based security for DSMIPv6 and IKEv2 when establishing Security Associations between MN and HA. The network transmission and processing costs are examined for each protocol using different authentication methods. The results show that the TLS-based solution has less computation cost and less authentication delay than IKEv2with D–H Groups 5 and 14. However, the high amount of transmitted data for certificate based authentications increases the authentication delay in low bandwidth wireless networks. [Copyright &y& Elsevier]

Abstract: Service unification and application integration have brought about vendors, network operators, service providers, car- riers, businesses and infrastructures over a platform while offering the business plans, presenting solution packages, proposing virtualization strategies and outsourcing the resources whereas promising an all Internet Protocol (IP) setup. Diverse business goals from distinctive providers alongside the technology merger and service unification in addition to dynamic border traffic management issues introduce more complexity over such platforms. A decision-making frame- work for handling the border traffic management issues at private public network with multi homing support is presented. Augmented Multi Criteria Decision Making (MCDM) theory addresses the qualitative entities while constructing the structural hierarchy of goals, criteria, sub criteria and alternatives. Inter/Intra-domain knowledge over different planes (service, control and transport) is modeled by using ontology. Blending ontology with Bayesian captures uncertainty over the planes. A simple use-case is presented over the test-bed to validate the proposed solution. The system offers higher throughput with lower call/session/request drop at the cost of an add-on delay. [Copyright &y& Elsevier]

We present and experimentally evaluate Spread Identity (SI) - a new dynamic network address remapping mechanism that provides anonymity and DDoS defense capabilities for Internet communications. For each session between a source and destination host, the trusted source gateway dynamically and randomly assigns an IP address for the source host from the pool of all routable IP addresses allocated to the source organization. Similarly, in response to a name resolution query from the source gateway, the trusted authoritative DNS server for the destination organization dynamically assigns an IP address for the destination host from the pool of all routable IP addresses allocated to the destination organization. These assignments depend upon the state of the server (including load, residual capacity, time of day) and policy. Different hosts can share the same IP address when communicating with distinct peers. Each gateway creates a NAT entry, valid for the communication session, based on the dynamic assignment by its organization. An eavesdropper listening to packets flowing through the Internet between the source and destination gateways learns only the source and destination domains; the eavesdropper cannot see the actual complete IP addresses of the source and destination hosts. In addition, SI enhances DDoS defense capabilities by enabling packet filtering based on destination addresses. With multiple IP addresses for the same destination, filtering based on destination addresses can block attackers without necessarily blocking legitimate users. Deploying SI requires changes to organizational gateways and, possibly, to the edge-routers that interface with organizational gateways; but network mechanisms farther upstream, including the core routers in the Internet, remain unchanged. Likewise, the installed base of operating systems running individual hosts in the internal network, together with the end-user application suites they support, remain untouched. SI mechanisms are backward compatible, incrementally deployable, and robustly scalable. A naïve implementation of SI can increase the DNS traffic; however, when SI is implemented at both the source and the destination ends, it is possible for SI to reduce DNS traffic. Ns-2 simulations and experiments on the DeterLab test bed corroborate the main hypotheses and demonstrate advantages of the SI paradigm. Ns-2 simulations demonstrate that file transfer success rates for our SI DDoS protection mechanism are similar to those of filter- and capability-based approaches, with lower file transfer times than for filter-based approaches. DeterLab trials demonstrate that SI consumes similar resources (connection establishment time, network address translation table size, packet forwarding rate and memory) to those of a typical single NAT system, though with higher name resolution times. [ABSTRACT FROM AUTHOR]

Vehicular communication networks, such as the 802.11p and Wireless Access in Vehicular Environments (WAVE) technologies, are becoming a fundamental platform for providing real-time access to safety and entertainment information. In particular, infotainment applications and, consequently, IP-based communications, are key to leverage market penetration and deployment costs of the 802.11p/WAVE network. However, the operation and performance of IP in 802.11p/WAVE are still unclear as the WAVE standard guidelines for being IP compliant are rather minimal. This paper studies the 802.11p/WAVE standard and its limitations for the support of infrastructure-based IP applications, and proposes the Vehicular IP in WAVE (VIP-WAVE) framework. VIP-WAVE defines the IP configuration for extended and non-extended IP services, and a mobility management scheme supported by Proxy Mobile IPv6 over WAVE. It also exploits multi-hop communications to improve the network performance along roads with different levels of infrastructure presence. Furthermore, an analytical model considering mobility, handoff delays, collisions, and channel conditions is developed for evaluating the performance of IP communications in WAVE. Extensive simulations are performed to demonstrate the accuracy of our analytical model and the effectiveness of VIP-WAVE in making feasible the deployment of IP applications in the vehicular network. [ABSTRACT FROM PUBLISHER]

Highlights: [•] GNSS. [•] ERTMS/ETCS (European Railways Train Management System/European Train Control System). [•] EGNOS-Galileo infrastructures for localization. [•] Railway Safety. [•] Telecomunication by IP for train to track data exchange. [Copyright &y& Elsevier]

Technology and effective communication have been acknowledged as essential components of the globalization process. However, there is little empirical research regarding the role of technology in assisting individuals in communicating across cultures. Over a four week period, one hundred American and sixty Taiwanese subjects communicated virtually via the Internet Protocol (IP) services application Skype on a one-to-one basis in order to learn from each about their respective cultures and acquire communication skills. A survey was administered to the American participants at the end of the four weeks. The results of a Partial Least Squares analysis show strong support for using a self-efficacy modified task-technology fit perspective to understand the relationship between IP services applications and intercultural communication competence. The utilization of IP services applications and the perception that the IP services applications fit intercultural communication tasks are useful predictors for perceived intercultural communication competence. [ABSTRACT FROM AUTHOR]

With new technologies or products invented, customers migrate from a legacy product to a new product from time to time. This paper discusses a time series data mining framework for product and service migration analysis. In order to identify who migrate, how migrations look like, and the relationship between the legacy product and the new product, we first discuss certain characteristics of customer spending data associated with product migration. By exploring interesting patterns and defining a number of features that capture the associations between the spending time series, we develop a co-integration-based classifier to identify customers associated with migration and summarize their time series patterns before, during and after the migration. Customers can then be scored based on the migration index that integrates the statistical significance and business impact of migration customers. We illustrate the research through a case study of internet protocol (IP) migration in telecommunications and compare it with likelihood-ratio-based tests for change point detections. [ABSTRACT FROM AUTHOR]

Abstract: This paper proposes an original architecture for a fraud management system (FMS) for convergent. Next-generation networks (NGNs), which are based on the Internet protocol (IP). The architecture has the potential to satisfy the requirements of flexibility and application-independency for effective fraud detection in NGNs that cannot be met by traditional FMSs. The proposed architecture has a thorough four-stage detection process that analyses billing records in IP detail record (IPDR) format – an emerging IP-based billing standard – for signs of fraud. Its key feature is its usage of neural networks in the form of self-organising maps (SOMs) to help uncover unknown NGN fraud scenarios. A prototype was implemented to test the effectiveness of using a SOM for fraud detection and is also described in the paper. [Copyright &y& Elsevier]

Historically, interconnection in the world of the Internet has been approached significantly differently from interconnection in the fixed Public Switched Telephone Network (PSTN) and the mobile Public Land Mobile Network (PLMN). As fixed and mobile networks evolve to Next Generation Networks (NGNs) based on the Internet Protocol (IP), it becomes increasingly necessary to merge these perspectives in order to achieve a unified and integrated approach to network interconnection. There is a rich history of economic analysis of IP-based and of conventional switched networks that began to converge early in this decade. In 2008, this issue is coming to a boil, as regulators seek to provide regulatory certainty for the build-out of NGNs, even in the face of substantial uncertainties, and even though practical experience with NGNs is still in a very preliminary state, What can we learn from the historical evolution of the theory of interconnection for Internet, NGN, PSTN and PLMN? What issues are "in play" today? What is the appropriate destination in the long term? What nearer term measures are appropriate? [ABSTRACT FROM AUTHOR]

Boolean logic minimization is being applied increasingly to a new variety of applications that demand very fast and frequent minimization services. These applications typically have access to very limited computing and memory resources, rendering the traditional logic minimizers ineffective. We present a new approximate logic minimization algorithm based on ternary trie. We compare its performance with Espresso-II and ROCM logic minimizers for routing table compaction and demonstrate that it is 100 to 1000 times faster and can execute with a data memory as little as 16 KB. We also found that the proposed approach can support up to 25000 incremental updates per second. We also compare its performance for compaction of the routing access control list and demonstrate that the proposed approach is highly suitable for minimizing large access control lists containing several thousand entries. Therefore, the algorithm is ideal for on-chip logic minimization. [ABSTRACT FROM AUTHOR]

Abstract: The Internet is broken. There have been many attempts to fix it, but they are all complex and very difficult to implement and none of them answer the fundamental questions of what is wrong with it. The first basic flaw is the very nature of the Internet Protocol address. It is treated as both a name and an address to deliver the information to its end-to-end destination. In addition, the security of the protocol is dependent on that address. The second major flaw is the inability of the Internet protocols to address mobility with fast and secure handoff. The Secure Mobile Architecture (SMA) fundamentally addresses these flaws in the very nature of the Internet Protocols. It does this by treating the IP layer as an insecure transport layer. It requires four elements to effect this transformation of the Internet. It can be integrated into existing Intranets. It can function easily in the namespace of an Internet service provider (ISP), an enterprise, or governments. The rest of this chapter will take you through the architecture and its elements. [Copyright &y& Elsevier]

Practically every corporation that is connected to the Internet has at least one firewall, and often many more. However, the protection that these firewalls provide is only as good as the policy they are configured to implement. Therefore, testing, auditing, or reverse-engineering existing firewall configurations are important components of every corporation’s network security practice. Unfortunately, this is easier said than done. Firewall configuration files are written in notoriously hard to read languages, using vendor-specific GUIs. A tool that is sorely missing in the arsenal of firewall administrators and auditors is one that allows them to analyze the policy on a firewall. To alleviate some of these difficulties, we designed and implemented two generations of novel firewall analysis tools, which allow the administrator to easily discover and test the global firewall policy. Our tools use a minimal description of the network topology, and directly parse the various vendor-specific low-level configuration files. A key feature of our tools is that they are passive: no packets are sent, and the analysis is performed offline, on a machine that is separate from the firewall itself. A typical question our tools can answer is “from which machines can our DMZ be reached, and with which services?.” Thus, our tools complement existing vulnerability analyzers and port scanners, as they can be used before a policy is actually deployed, and they operate on a more understandable level of abstraction. This paper describes the design and architecture of these tools, their evolution from a research prototype to a commercial product, and the lessons we have learned along the way. [ABSTRACT FROM AUTHOR]

This paper deals with a smart-transducer wireless network for industrial applications. Thanks to its high popularity, a solution based on IEEE802.11 (also known as wireless fidelity or Wi-Fi) is experimentally investigated. A master-slave network organization is proposed to allow several sensors to be connected with generic Wi-Fi devices like PCs; a proprietary protocol over Internet Protocol (IP)/User Datagram Protocol (UDP) has also been developed. Last, some low-cost prototypes have been built to test the network behavior performances in terms of timing characteristics and power dissipation. Experimental results prove the applicability in a soft real-time (nontime-critical) industrial context. [ABSTRACT FROM AUTHOR]

In this paper, we tackle the problem of how to expand Internet protocol (IP) networks with performance guarantees, in a cost-effective way. We first propose an optimization model that deals with selecting the location of the routers, selecting their types, expanding the access and the backbone networks and selecting the transmission link types. The model also considers the routing of the IP traffic using a standardized routing protocol. The performance guarantees we refer to are bandwidth guarantees between the clients' routers. The performance guarantees stand not only for the normal state of the network, but also for all failure scenarios of interest to the network planner. A tabu-based metaheuristic algorithm is proposed to find solutions of the model. Numerical results show that "good" solutions can be found using the proposed algorithm. [ABSTRACT FROM AUTHOR]

We develop algorithms for joint IP-layer routing and WDM logical topology reconfiguration in IP-over-WDM networks experiencing stochastic traffic. At the wavelength division multiplexing (WDM) layer, we associate a nonnegligible overhead with WDM reconfiguration, during which time tuned transceivers cannot service backlogged data. The Internet Protocol (IP) layer is modeled as a queueing system. We demonstrate that the proposed algorithms achieve asymptotic throughput optimality by using frame-based maximum weight scheduling decisions. We study both fixed and variable frame durations. In addition to dynamically triggering WDM reconfiguration, our algorithms specify precisely how to route packets over the IP layer during the phases in which the WDM layer remains fixed. We demonstrate that optical-layer constraints do not affect the results, and provide an analysis of the specific case of WDM networks with multiple ports per node. In order to gauge the delay properties of our algorithms, we conduct a simulation study and demonstrate an important tradeoff between WDM reconfiguration and IP-layer routing. We find that multihop routing is extremely beneficial at low-throughput levels, while single-hop routing achieves improved delay at high-throughput levels. For a simple access network, we demonstrate through simulation the benefit of employing multihop IP-layer routes. [ABSTRACT FROM PUBLISHER]

In this paper, we address the problem of optimizing the delivery of multimedia services with different quality-of-service (QoS) requirements to mobile users. We assume that the network provides two distinct classes of service to which users may subscribe: Premium, or Economy. Subscribers to the Premium service pay more for their connections but receive a higher level of quality measured by a set of parameters such as call blocking probability, coding rate, and format of the multimedia services. By optimizing the delivery of the multimedia services, we mean that the network guarantees that all users receive their agreed-upon contractual level of quality, while maximizing the links' throughput, avoiding congestion, and maintaining the QoS requirements for each type of media (e.g., video, voice and data). Our proposed solution is based upon utilizing genetic algorithms to solve a multi-objective optimization function that adaptively selects the downloading bit-rate for each type of traffic flow subject to the constraints of the optimization function. A traffic flow is an abstract of aggregate traffic of the same type of media (e.g., voice, video, or data) that is downloaded to a group of users who share some common attribute such as the same class of service. The optimization function is adaptive in the sense that the selected downloading bit-rates are time-dependant according to the dynamics of the links' traffic-loads and users' requests. It is implemented on every output port of each node in the network. The function is used to control a filter that changes the coding rate of each media-type and, if necessary, performs transcoding of one, or more, media-types (i.e., video, voice, or data). Simulation results show significant improvement in terms of increasing the number of admitted users, while maintaining the QoS requirements, as well as target call blocking rates. An interesting result to report is that the performance improvement of the system (measured by t... [ABSTRACT FROM AUTHOR]

This paper proposes a distributed multimedia delivery mobile network for video streaming in 3rd generation (3G) mobile communications. The joint design of layered coding (LC) and multiple description coding (MDC) is employed to address the bandwidth fluctuations and packet loss problems in the wireless network and to further enhance the error resilience tools in MPEG-4. A new Internet protocol (IP) differentiated services (DiffServ) video marking algorithm is presented to support an unequal error protection of the LC components. Both intra-RAN (radio access network) handoff and inter-RAN handoff procedures are discussed, which provide path diversity to combat streaming video outage due to handoff in the universal mobile telecommunications system (UMTS). Computer simulation results demonstrate that: (1) the newly proposed IP DiffServ video marking algorithm is more suitable for video streaming in an IP mobile network as compared with the previously proposed algorithm, and (2) the proposed handoff procedures have better performance in terms of handoff latency, end-to-end delay and handoff scalability than that in UMTS. Copyright © 2005 John Wiley & Sons, Ltd. [ABSTRACT FROM AUTHOR]

In this paper, we present a new methodology for the design of fault-tolerant logical topologies in wavelength-routed optical networks supporting Internet protocol (IP) datagram flows. Our design approach generalizes the "design protection" concepts, and relies on the dynamic capabilities of IP to reroute datagrams when faults occur, thus achieving protection and restoration, and leading to high-performance cost-effective fault-tolerant logical topologies. In this paper, for the first time we consider resilience properties during the logical topology optimization process, thus extending the optimization of the network resilience also to the space of logical topologies. Numerical results clearly show that our approach outperforms previous ones, being able to obtain very effective survivable logical topologies with limited computational complexity. [ABSTRACT FROM AUTHOR]

In the forthcoming fourth-generation (4G) all-IP mobile communications era, apart from the cellular/mobile networks, Wireless Personal Area Networks (PANs) and Local Area Network (LAN) are expected to fulfil the “anywhere and anytime” ubiquitous services'' requirement. Users will request forming “ad hoc” personal area networks to enable personal devices to autonomously inter-communicate, while Wireless LANs will enable communication with colleagues at work, at conferences, at “hot spots”, at home, or on the move. In parallel, advanced sensor devices of the surrounding environment will recognize the user and provide for added value services. In order to achieve this, open standard interfaces and interoperability between devices and manufacturers are mandatory. In this paper, we describe the most important, mature Wireless PAN and LAN standards, and introduce some evolving new standards. [Copyright &y& Elsevier]