Search

Digital twin technology provides a reliable paradigm to address the high trial-and-error costs and limited perception capabilities in satellite networking. However, the dynamic constellation topology and real-time twin applications remain significant challenges in satellite network design. This paper proposes a network topology simulation approach that dynamically analyzes the inter-satellite topology based on pre-calculated ephemeris and orbital information. Furthermore, the paper introduces a digital twin algorithm based on network virtualization, cloud platform management, and software-defined networking to validate and analyze the twin requirements at different stages. Finally, a low Earth orbit (LEO) constellation twin validation environment is constructed to verify the networking protocols at various stages. The experimental results demonstrate the performance of the proposed twin systems at different stages. [ABSTRACT FROM AUTHOR]

The significance of detecting network traffic anomalies in cybersecurity cannot be overstated, especially given the increasing frequency and complexity of computer network attacks. As new Internet-related technologies emerge, so do more intricate attacks. One particularly daunting challenge is represented by dictionary-based bruteforce attacks, which require effective real- time detection and mitigation methods. In this paper, we investigate Secure Shell or Secure Socket Shell, is a network protocol that gives users, particularly system administrators, a secure way to access a computer over an unsecured network(SSH)and File Transfer Protocol is a standard network protocol used for the transfer of files from one host to another over a TCP-based network, such as the Internet (FTP) brute-force attack detection by using Our research focuses on using the machine learning approach to detect SSH and FTP brute-force attacks. A reasonably thorough investigation of machine learners' efficacy in identifying brute force assaults on SSH and FTP is made possible by employing several classifiers. Bruteforce assaults are a popular and risky method of obtaining usernames and passwords. Applying ethical hacking is an excellent technique to examine the effects of a brute-force assault. This article discusses many defense strategies and approaches to using bruteforce assaults. The pros and cons of several defense strategies are enumerated, along with information on which kind of assault is easiest to identify. we made use of machine learning classifiers: Naive Bayes, Random Forest, Logistic Regression, we determined that the Random Forest algorithm achieved the highest level with an accuracy the contribution lies in demonstrating the feasibility of training and evaluating basic Random Forest models with two independent variables to classify CSE-CIC-IDS2018 dataset. [ABSTRACT FROM AUTHOR]

This document is an editorial published in the journal Frontiers in Physics. It discusses the theory and applications of long-range dependent (LRD) processes, which are of interest to researchers in various fields, including physics and computer science. LRD processes differ from conventional random processes in terms of their autocorrelation function, power spectrum density, and probability density function. The editorial highlights two models of LRD processes: fractional Gaussian noise (fGn) and the generalized Cauchy process. It also mentions several papers included in the research topic, which explore the use of LRD processes in precision time protocol, dynamic routing algorithms, identification of cryptomining behavior, and modeling global sea surface chlorophyll concentration. [Extracted from the article]

Multipath wireless access aims to seamlessly aggregate multiple access networks to increase data rates and decrease latency. It is currently being standardized through the ATSSS architectural framework as part of the fifth-generation (5G) cellular networks. However, facilitating efficient multi-access communication in next-generation wireless networks poses several challenges due to the complex interplay between congestion control (CC) and packet scheduling. Given that enhanced ATSSS steering functions for traffic splitting advocate the utilization of multi-access tunnels using congestion-controlled multipath network protocols between user equipment and a proxy, addressing the issue of nested CC becomes imperative. In this paper, we evaluate the impact of such nested congestion control loops on throughput over multi-access tunnels using the recently introduced Multipath DCCP (MP-DCCP) tunneling framework. We evaluate different combinations of endpoint and tunnel CC algorithms, including BBR, BBRv2, CUBIC, and NewReno. Using the Cheapest Path First scheduler, we quantify and analyze the impact of the following on the performance of tunnel-based multipath: (1) the location of the multi-access proxy relative to the user; (2) the bottleneck buffer size, and (3) the choice of the congestion control algorithms. Furthermore, our findings demonstrate the superior performance of BBRv2 as a tunnel CC algorithm. [ABSTRACT FROM AUTHOR]

The intersection of cybersecurity and opportunistic networks has ushered in a new era of innovation in the realm of wireless communications. In an increasingly interconnected world, where seamless data exchange is pivotal for both individual users and organizations, the need for efficient, reliable, and sustainable networking solutions has never been more pressing. Opportunistic networks, characterized by intermittent connectivity and dynamic network conditions, present unique challenges that necessitate innovative approaches for optimal performance and sustainability. This paper introduces a groundbreaking paradigm that integrates the principles of cybersecurity with opportunistic networks. At its core, this study presents a novel routing protocol meticulously designed to significantly outperform existing solutions concerning key metrics such as delivery probability, overhead ratio, and communication delay. Leveraging cybersecurity's inherent strengths, our protocol not only fortifies the network's security posture but also provides a foundation for enhancing efficiency and sustainability in opportunistic networks. The overarching goal of this paper is to address the inherent limitations of conventional opportunistic network protocols. By proposing an innovative routing protocol, we aim to optimize data delivery, minimize overhead, and reduce communication latency. These objectives are crucial for ensuring seamless and timely information exchange, especially in scenarios where traditional networking infrastructures fall short. By large-scale simulations, the new model proves its effectiveness in the different scenarios, especially in terms of message delivery probability, while ensuring reasonable overhead and latency. [ABSTRACT FROM AUTHOR]

The seamless integration of intelligent Internet of Things devices with conventional wireless sensor networks has revolutionized data communication for different applications, such as remote health monitoring, industrial monitoring, transportation, and smart agriculture. Efficient and reliable data routing is one of the major challenges in the Internet of Things network due to the heterogeneity of nodes. This paper presents a traffic-aware, cluster-based, and energy-efficient routing protocol that employs traffic-aware and cluster-based techniques to improve the data delivery in such networks. The proposed protocol divides the network into clusters where optimal cluster heads are selected among super and normal nodes based on their residual energies. The protocol considers multi-criteria attributes, i.e. energy, traffic load, and distance parameters to select the next hop for data delivery towards the base station. The performance of the proposed protocol is evaluated through the network simulator NS3.40. For different traffic rates, number of nodes, and different packet sizes, the proposed protocol outperformed LoRaWAN in terms of end-to-end packet delivery ratio, energy consumption, end-to-end delay, and network lifetime. For 100 nodes, the proposed protocol achieved a 13% improvement in packet delivery ratio, 10 ms improvement in delay, and 10 mJ improvement in average energy consumption over LoRaWAN. [ABSTRACT FROM AUTHOR]

Efficient and reliable data routing is critical in Advanced Metering Infrastructure (AMI) within Smart Grids, dictating the overall network performance and resilience. This paper introduces Q-RPL, a novel Q-learning-based Routing Protocol designed to enhance routing decisions in AMI deployments based on wireless mesh technologies. Q-RPL leverages the principles of Reinforcement Learning (RL) to dynamically select optimal next-hop forwarding candidates, adapting to changing network conditions. The protocol operates on top of the standard IPv6 Routing Protocol for Low-Power and Lossy Networks (RPL), integrating it with intelligent decision-making capabilities. Through extensive simulations carried out in real map scenarios, Q-RPL demonstrates a significant improvement in key performance metrics such as packet delivery ratio, end-to-end delay, and compliant factor compared to the standard RPL implementation and other benchmark algorithms found in the literature. The adaptability and robustness of Q-RPL mark a significant advancement in the evolution of routing protocols for Smart Grid AMI, promising enhanced efficiency and reliability for future intelligent energy systems. The findings of this study also underscore the potential of Reinforcement Learning to improve networking protocols. [ABSTRACT FROM AUTHOR]

Over the years, there has been a significant surge in the popularity of instant messaging applications (IMAs). However, the message notification functionality in IMAs exhibits certain limitations. Some IMAs fail to alert users about new messages after their phone restarts unless they unlock the phone. This is a consequence of end-to-end encryption (E2EE) and the app not knowing the message is in the queue until the app decrypts it. This approach using E2EE is used to prevent offline attacks, as the key is unavailable to decrypt the notification messages. In this paper, we introduce a novel design and implementation of a message notification protocol for IMAs based on the Signal protocol. The proposed protocol aims to securely display notifications on a locked device and ensures that cryptographic keys are stored in a location that is isolated from the user's device to prevent offline attacks. This approach enhances the security of private key storage, safeguarding private keys against various external threats. The innovative design strengthens the off-site key management system, rendering it resilient against offline attacks and mitigating the risk of key compromise. Additionally, the proposed protocol is highly efficient, requiring no specialized hardware for implementation. It offers confidentiality of cryptographic keys and protection against offline attacks, further enhancing the overall security of the system. We evaluate the protocol's effectiveness by analyzing multiple independent implementations that pass a suite of formal tests via ProVerif. [ABSTRACT FROM AUTHOR]

Bluetooth Low Energy Mesh (BLE Mesh) enables Bluetooth flexibility and coverage by introducing Low-Power Nodes (LPNs) and enhanced networking protocol. It is also a commonly used communication method in sensor networks. In BLE Mesh, LPNs are periodically woken to exchange messages in a stop-and-wait way, where the tradeoff between energy and efficiency is a hard problem. Related works have reduced the energy consumption of LPNs mainly in the direction of changing the bearer layer, improving time synchronization and broadcast channel utilization. These algorithms improve communication efficiency; however, they cause energy loss, especially for the LPNs. In this paper, we propose a constrained flooding algorithm based on time series prediction and lightweight GBN (Go-Back-N). On the one hand, the wake-up cycle of the LPNs is determined by the time series prediction of the surrounding load. On the other, LPNs exchange messages through lightweight GBN, which improves the window and ACK mechanisms. Simulation results validate the effectiveness of the Time series Prediction and LlightWeight GBN (TP-LW) algorithm in energy consumption and throughput. Compared with the original algorithm of BLE Mesh, when fewer packets are transmitted, the throughput is increased by 214.71%, and the energy consumption is reduced by 65.14%. [ABSTRACT FROM AUTHOR]

The rapid development of the Industrial Internet of Things (IIoT) and its application across various sectors has led to increased interconnectivity and data sharing between devices and sensors. While this has brought convenience to users, it has also raised concerns about information security, including data security and identity authentication. IIoT devices are particularly vulnerable to attacks due to their lack of robust key management systems, efficient authentication processes, high fault tolerance, and other issues. To address these challenges, technologies such as blockchain and the formal analysis of security protocols can be utilized. And blockchain-based Industrial Internet of Things (BIIoT) is the new direction. These technologies leverage the strengths of cryptography and logical reasoning to provide secure data communication and ensure reliable identity authentication and verification, thereby becoming a crucial support for maintaining the security of the Industrial Internet. In this paper, based on the theory of the strand space attack model, we improved the Fiber Channel Password Authentication Protocol (FACP) security protocol in the network environment based on symmetric cryptography and asymmetric cryptography. Specifically, in view of the problem that the challenge value cannot reach a consensus under the symmetric cryptography system, and the subject identity cannot reach a consensus under the asymmetric cryptography system, an improved protocol is designed and implemented to meet the authentication requirements, and the corresponding attack examples are shown. Finally, the effectiveness and security of the protocol were verified by simulating different networking environments. The improved protocol has shown an increase in efficiency compared with the original protocol across three different network configurations. There was a 6.43% increase in efficiency when centralized devices were connected to centralized devices, a 5.81% increase in efficiency when centralized devices were connected to distributed devices, and a 6.32% increase in efficiency when distributed devices were connected to distributed devices. Experimental results show that this protocol can enhance the security and efficiency of communication between devices and between devices and nodes (servers, disks) in commonly used Ethernet passive optical network (EPON) environments without affecting the identity authentication function. [ABSTRACT FROM AUTHOR]

Network protocol implementations, as integral components of information communication, are critically important for security. Due to its efficiency and automation, fuzzing has become a popular method for protocol security detection. However, the existing protocol-fuzzing techniques face the critical problem of generating high-quality inputs. To address the problem, in this paper, we propose MSFuzz, which is a protocol-fuzzing method with message syntax comprehension. The core observation of MSFuzz is that the source code of protocol implementations contains detailed and comprehensive knowledge of the message syntax. Specifically, we leveraged the code-understanding capabilities of large language models to extract the message syntax from the source code and construct message syntax trees. Then, using these syntax trees, we expanded the initial seed corpus and designed a novel syntax-aware mutation strategy to guide the fuzzing. To evaluate the performance of MSFuzz, we compared it with the state-of-the-art (SOTA) protocol fuzzers, namely, AFLNET and CHATAFL. Experimental results showed that compared with AFLNET and CHATAFL, MSFuzz achieved average improvements of 22.53% and 10.04% in the number of states, 60.62% and 19.52% improvements in the number of state transitions, and 29.30% and 23.13% improvements in branch coverage. Additionally, MSFuzz discovered more vulnerabilities than the SOTA fuzzers. [ABSTRACT FROM AUTHOR]

Underwater wireless sensor networks are gaining popularity since supporting a broad range of applications, both military and civilian. Wireless acoustics is the most widespread technology adopted in underwater networks, the realization of which must face several challenges induced by channel propagation like signal attenuation, multipath and latency. In order to address such issues, the attention of researchers has recently focused on the concept of cooperative communication and networking, borrowed from terrestrial systems and to be conveniently recast in the underwater scenario. In this paper, we present a comprehensive literature review about cooperative underwater wireless sensor networks, investigating how nodes cooperation can be exploited at the different levels of the network protocol stack. Specifically, we review the diversity techniques employable at the physical layer, error and medium access control link layer protocols, and routing strategies defined at the network layer. We also provide numerical results and performance comparisons among the most widespread approaches. Finally, we present the current and future trends in cooperative underwater networks, considering the use of machine learning algorithms to efficiently manage the different aspects of nodes cooperation. [ABSTRACT FROM AUTHOR]

Reflection attacks are one of the most intimidating threats organizations face. A reflection attack is a special type of distributed denial-of-service attack that amplifies the amount of malicious traffic by using reflectors and hides the identity of the attacker. Reflection attacks are known to be one of the most common causes of service disruption in large networks. Large networks perform extensive logging of NetFlow data, and parsing this data is an advocated basis for identifying network attacks. We conduct a comprehensive analysis of NetFlow data containing 1.7 billion NetFlow records and identified reflection attacks on the network time protocol (NTP) and NetBIOS servers. We set up three regression models including the Ridge, Elastic Net and LASSO. To the best of our knowledge, there is no work that studied different regression models to understand patterns of reflection attacks in a large network. In this paper, we (a) propose an approach for identifying correlations of reflection attacks, and (b) evaluate the three regression models on real NetFlow data. Our results show that (a) reflection attacks on the NTP servers are not correlated, (b) reflection attacks on the NetBIOS servers are not correlated, (c) the traffic generated by those reflection attacks did not overwhelm the NTP and NetBIOS servers, and (d) the dwell times of reflection attacks on the NTP and NetBIOS servers are too small for predicting reflection attacks on these servers. Our work on reflection attacks identification highlights recommendations that could facilitate better handling of reflection attacks in large networks. [ABSTRACT FROM AUTHOR]

The increasing use of cloud services in several areas has led to the growth of data-intensive applications. It is necessary to find ways to enhance the efficiency of communications within the networks of data centers to improve the performance of cloud environments. Explicit Congestion Notification (ECN) is used by Data Center TCP (DCTCP) to enhance congestion control in data center networks. The DCTCP uses ECN to assess the amount of congestion, whereas normal TCP congestion management can simply detect its presence. This paper examines DCTCP using the Random Early Detection (RED) queue management strategy. The evaluation reveals that employing Random Early Detection incurs certain costs. The RED is criticized on the one hand for both short- and medium-term connections due to longer completion time delays compared to typical DCTCP techniques. Because of ECN, DCTCP may maintain small queue sizes. However, because RED uses the average queue size, it penalizes short-lived traffic because it does not reach the bottleneck quickly. An intelligent queue management mechanism with ECN is believed to enhance DCTCP's performance in a cloud-computing environment by predicting sending rates and providing fast feedback on queue length. [ABSTRACT FROM AUTHOR]

In the process of collecting evidence of activities and events in network devices, there are problems with content and storage, and we aim to solve the problems faced by network devices in network forensics. In this paper, we propose a simple method for solving the problems with content and storage in acquiring communication logs on end hosts, implement a sniffing tool that captures raw packets with communication event control, compare it with existing tools, and conduct experiments and considerations. Through these experiments and considerations, we confirmed that the proposed communication log acquisition method can be implemented on the end host, and that the problem can be solved by using a tool that implements the proposed method. Also, we confirmed that it can be applied to real-world communication log collection scenarios, and that it can coexist with existing systems and tools that collect communication logs. [ABSTRACT FROM AUTHOR]

The adoption of reliable and real-time communication technology is an absolute necessity for the advancement of Internet of Things (IoT) applications. Messaging protocols such as MQTT, AMQP, and HTTP are frequently used for communication with resource-constrained IoT devices. However, choosing a suitable and effective messaging protocol presents a daunting challenge for organizations, as it depends on the specific characteristics and messaging requirements of the IoT system. Therefore, it is crucial to have a comprehensive understanding of three established messaging protocols, such as the Hypertext Transfer Protocol (HTTP), the Message Queuing Telemetry Transport (MQTT), and the Advanced Message Queuing Protocol (AMQP), to appropriately apply them in practical projects. In this paper, information technology solutions are provided for a chain of solar farms to improve harvest productivity, facilitate warning notifications, and enable remote control. Subsequently, a detailed comparative analysis is performed, considering various interconnected criteria, to gain valuable insight into the strengths and limitations of these protocols. The results show that MQTT and AMQP play a role in enhancing overall efficiency and speed within the framework of our suggested photovoltaic system. [ABSTRACT FROM AUTHOR]

Blockchain technology has been increasingly integrated into various fields of economic and social development. However, scalability issues such as low broadcast efficiency, high communication overhead, and high redundant transmission rate have greatly limited the large-scale application of blockchain. This paper proposes a new scalability-enhanced Kademlia network protocol (SEKad), which optimizes blockchain network transmission in terms of both network topology and communication broadcast mechanism, provides a new approach to solving the scalability problem from the network layer. In SEKad protocol, firstly, SEKad employs a method that aligns the physical topology with the network topology for node clustering. This strategy groups neighboring nodes into clusters, streamlining network complexity and reducing network diameter. Secondly, SEKad presents a cluster-adaptable network topology based on Kademlia (Kad-CA). Kad-CA improves the rationality and efficiency of per-hop routing, optimizing the construction of K buckets and thus enhancing overall network efficiency. Finally, within the network transmission model, SEKad devise the smallest sub-tree broadcasting mechanism and the minimum redundant transmission mechanism for Kad-CA. These mechanisms work to reduce the redundant transmission rate, and enhance broadcasting efficiency. In order to evaluate the performance of SEKad, we built an experimental platform and conducted evaluations. The experimental results show that SEKad has better network scalability and stability, the network diameter size can be reduced by 27% and the redundant transmission rate can be reduced by 30%. [ABSTRACT FROM AUTHOR]

With the rapid convergence of the Internet of Things (IoT) and command and control communication networks, there is a swift surge in computation-intensive applications and heterogenous devices. Building an edge computing network near the protocol gateway not only facilitates network protocol conversion, but also alleviates computational load on the gateway. Nevertheless, traditional protocol gateways necessitate the inclusion of conversion methods for all communication protocols in the network for data interoperability with other devices. Consequently, constructing low-complexity protocol conversion programs, and the more efficient and equitable allocation of edge server resources, are critical challenges that need to be addressed. This paper investigates the joint problem of task offloading and heterogeneous protocol device access in command and control communication networks, deriving the benefit parameters of task offloading. We propose a real-time data unified access platform, which, by distributing configuration files, enables the IoT gateway to generate protocol conversion programs, thereby transforming all device protocols into a unified common protocol. Furthermore, to enhance the efficiency of heterogeneous device access to the network, we design a data parsing/encapsulation algorithm based on the real-time data unified access platform, supporting bidirectional mapping of two types of data. Experimental validation confirms the reasonability and effectiveness of the proposed scheme. [ABSTRACT FROM AUTHOR]

In recent years, Censorship and anti-censorship technology is developing rapidly. The censorship and surveillance systems track traffic on the network; they identify protocols and traffic, block malicious and illegal transportation, and keep the network under control. It can protect the security of network users but also bring risks to their private security, especially that of users chat. In this paper, we introduce MuChat, a free convert chat application for instant communication on mobile, which is designed as censorship as well as surveillance-resistant platform for coverting communication in the censorship region. To evade detection by Internet censors, MuChat uses multi-instant messaging channels provided by public companies to transform messages. It applies end-to-end encryption for information security and transmits data covertly by steganography technology for individual privacy. It also provides perfect forward security protection of users' historical messages. We design and implement MuChat, with this report on the security and performance of MuChat. The evaluation shows that MuChat has proved its high security in terms of running against active attacks, passive attacks, and traffic analysis methods in recent years. It supports all the functions of instant messages with low latency. For short words, it takes only 1–2 s while the base channels take about 0.5 s, and for 20-megabyte files messages with 35–45 s while about 30–40 s for base channels. In our view, this meets the instant communication needs of users. Besides, its architecture can fully support any other public communication channels which can be added by the user. [ABSTRACT FROM AUTHOR]

This paper proposes a new H ∞ static output feedback control method to address the congestion control problem in transmission control protocol networks using active queue management routers. Based on linear matrix inequality optimization, this method determines a static output feedback control law to minimize the H ∞ norm of the transfer function between the controlled queue length of the buffer and the exogenous disturbance affecting the available link bandwidth. A linear matrix inequality formulation is presented as a sufficient condition to guarantee the closed-loop system's asymptotic stability while maintaining disturbance rejection within a specified level, regardless of round-trip time delays. The proposed robust static output feedback control eliminates the need to measure or estimate all system states, thus simplifying practical implementation. The effectiveness of the proposed design method is demonstrated by applying it in a practical process, as illustrated through a numerical example. [ABSTRACT FROM AUTHOR]

This paper investigates the distributed optimization problem for a class of nonlinear uncertain multi-agent systems with unmeasured states, switched parameters, and directed communication topologies changing in the control process. To achieve the goal of optimizing the global objective function, a penalty function is constructed through making up of a sum of local objective functions and integrating consensus conditions of the multi-agent systems to utilize local and neighboring information. Radial basis function neural-networks and neural-networks state observer are applied to approximate the unknown nonlinear functions and obtain the unmeasured states, respectively. To avoid "explosion of complexity" and obtain derivatives for virtual control functions continuously, dynamic surface control technology is proposed to develop a distributed adaptive backstepping neural network control protocol to ensure that all the agents' outputs asymptotically reach consensus to the optimal solution of the global objective function. Simulations demonstrate the effectiveness of the proposed control scheme. [ABSTRACT FROM AUTHOR]

The Internet of Things (IoT) networks always operate within the context of diverse and constrained characteristics of the devices. Low-Power and Lossy Networks (LLNs) constitute a network architecture commonly utilized in IoT application deployments, facilitating networking and the establishment of paths for data transmission. The Routing Protocol for Low-Power and Lossy Networks (RPL) demonstrates promising capabilities for LLN network operations, supporting IPv4 and IPv6-enabled services. The RPL protocol constructs a Destination Oriented Directed Acyclic Graph (DODAG) logical routing topology based on defined Objective Function (OF) metrics. Routing operations within the DODAG utilize these metrics and constraints to select parent nodes and calculate optimal routes between two nodes. Standardized OFs have traditionally focused on either parent node selection or routing objectives within the DODAG, often treating load balancing and bottleneck optimization separately. However, their combined impact on RPL's effectiveness has been overlooked. This paper introduces an Adaptively Composite Objective Function (AC-OF) approach that considers the combined objectives of DODAG load balancing and optimized routing operations. Through simulation evidence, the paper presents improved network parameters. The AC-OF implementation brings out significant results in the form of a balanced DODAG topology and it has good impacts on data transmission, control overhead messages, parent switching, delay, energy consumption, and node lifetime. [ABSTRACT FROM AUTHOR]

FIDO2 authentication is starting to be applied in numerous web authentication services, aiming to replace passwords and their known vulnerabilities. However, this new authentication method has not been integrated yet with network authentication systems. In this paper, we introduce FIDO2CAP: FIDO2 Captive-portal Authentication Protocol. Our proposal describes a novel protocol for captive-portal network authentication using FIDO2 Authenticators as security keys and passkeys. For validating our proposal, we have developed a prototype of FIDO2CAP authentication in a mock scenario. Using this prototype, we performed a usability experiment with 15 real users. This work makes the first systematic approach for adapting network authentication to the new authentication paradigm relying on FIDO2 authentication. [ABSTRACT FROM AUTHOR]

In a world where digitization is rapidly advancing, the security and privacy of intra-domain communication within organizations are of critical concern. The imperative to secure communication channels among physical systems has led to the deployment of various security approaches aimed at fortifying networking protocols. However, these approaches have typically been designed to secure protocols individually, lacking a holistic perspective on the broader challenge of intra-domain communication security. This omission raises fundamental concerns about the safety and integrity of intra-domain environments, where all communication occurs within a single domain. As a result, this paper introduces HSM4SSL, a comprehensive solution designed to address the evolving challenges of secure data transmission in intra-domain environments. By leveraging hardware security modules (HSMs), HSM4SSL aims to utilize the Secure Socket Layer (SSL) protocol within intra-domain environments to ensure data confidentiality, authentication, and integrity. In addition, solutions proposed by academic researchers and in the industry have not addressed the issue in a holistic and integrative manner, as they only apply to specific types of environments or servers and do not utilize all cryptographic operations for robust security. Thus, HSM4SSL bridges this gap by offering a unified and comprehensive solution that includes certificate management, key management practices, and various security services. HSM4SSL comprises three layers to provide a standardized interaction between software applications and HSMs. A performance evaluation was conducted comparing HSM4SSL with a benchmark tool for cryptographic operations. The results indicate that HSM4SSL achieved 33% higher requests per second (RPS) compared to OpenSSL, along with a 13% lower latency rate. Additionally, HSM4SSL efficiently utilizes CPU and network resources, outperforming OpenSSL in various aspects. These findings highlight the effectiveness and reliability of HSM4SSL in providing secure communication within intra-domain environments, thus addressing the pressing need for enhanced security mechanisms. [ABSTRACT FROM AUTHOR]

The rapid development of mobile communication devices has brought challenges to wireless networks, where data packets are able to organize and maintain local area networks more freely without the constraints of wired devices. Scholars have developed diverse network protocols on how to ensure data transmission while maintaining its self-organizational nature. However, it is difficult for traditional network protocols to meet the needs of increasingly complex networks. In order to solve the problem that the better node set may not be selected when selecting the node set responsible for forwarding in the traditional OLSR protocol, a multi-objective optimized OLSR algorithm is proposed in this paper, which incorporating a new MPR mechanism and an improved NSGA-II algorithm. In the process of route discovery, the intermediate nodes responsible for forwarding packets are determined by the new MPR mechanism, and then the main parameters in the OLSR protocol are provided by the multi-objective optimization algorithm. Matlab was used to build a self-organizing network in this study. In addition, the conventional OLSR protocol, NSGA-II algorithm and multi-objective simulated annealing algorithm are selected to compare with the proposed algorithm. Simulation results show that the proposed algorithm can effectively reduce packet loss and end-to-end delay while obtaining better results in HV and Spacing, two multi-objective optimization result evaluation metrics. [ABSTRACT FROM AUTHOR]

This paper presents the implementation of a synchronous Structural Health Monitoring (SHM) framework utilizing wireless, low-cost, and off-the-shelf components. Vibration-based condition monitoring plays a crucial role in assessing the reliability of structural systems by detecting damage through changes in vibration parameters. The adoption of low-cost Micro-Electro-Mechanical Systems (MEMS) sensors in Wireless Sensor Networks (WSNs) has gained traction, emphasizing the need for precise time synchronization to schedule wake-up times of multiple sensor nodes for data collection. To address this challenge, our proposed method introduces a TCP/IP socket programming-based mimic broadcasting mechanism and a scalable sensing network controlled by a central gateway, leveraging the Raspberry Pi Python platform. The system operates using Internet of Things (IoT) concepts and adopts a star topology, where a packet is transmitted from the gateway to initiate measurements simultaneously on multiple sensor nodes. The sensor node comprises a MEMS accelerometer, a real time clock DS3231 module and Raspberry Pi Zero 2W (RPi0-2W), while the gateway employs a Raspberry Pi 4 (RPi4). To ensure accurate time synchronization, all Pi0-2W nodes were configured as Network Time Protocol (NTP) clients, synchronizing with an RPi4 server using chrony, the reliable implementation of the NTP. Through experimental evaluations, the system demonstrates its effectiveness and reliability in achieving initial time synchronization. This study addresses the challenge of achieving precise time alignment between sensor nodes through the utilization of the Dynamic Time Wrapping (DTW) method for Frequency Domain Decomposition (FDD) applications. The contribution of this research significantly enhances the field by improving the accuracy and reliability of time-aligned measurements, with a specific focus on utilizing low-cost sensors. By developing a practical and cost-effective SHM framework, this work advances the accessibility and scalability of structural health monitoring solutions, facilitating more widespread adoption and implementation in various engineering applications [ABSTRACT FROM AUTHOR]

This paper introduces a pioneering method for real-time image processing in electronic component assembly, revolutionizing quality control in manufacturing. By promptly capturing images from pick-and-place machines during the interval between component pick-up and mounting, defects are identified and promptly addressed in line. This proactive approach ensures that defective components are rejected before mounting, effectively preventing issues from ever occurring, thus significantly enhancing efficiency and reliability. Leveraging rapid network protocols such as gRPC and orchestration via Kubernetes, in conjunction with C++ programming and TensorFlow, this approach achieves an impressive average turnaround time of less than 5 milli-seconds. Rigorously tested on 20 operational production machines, it not only ensures adherence to IPC-A-610 and IPC-STD-J-001 standards but also optimizes production efficiency and reliability. [ABSTRACT FROM AUTHOR]

We study consensus in a protocol capturing in a simplified manner the major features of the majority of Proof of Stake blockchains. A committee is formed; one member proposes a block; and the others can check its validity and vote for it. Blocks with a majority of votes are produced. When an invalid block is produced, the stakes of the members who voted for it are "slashed." Profit-maximizing members interact with adversaries seeking to disrupt consensus. When slashing is limited, free-riding and moral-hazard lead to invalid blocks in equilibrium. We propose a protocol modification producing only valid blocks in equilibrium. Authors have furnished an Internet Appendix , which is available on the Oxford University Press Web site next to the link to the final published paper online. [ABSTRACT FROM AUTHOR]

The rapid proliferation of Internet of Things (IoT) devices has raised significant concerns regarding the trustworthiness of IoT devices, which is becoming a crucial aspect of our daily lives. In this paper, we deal with this important aspect by taking into account Meshtastic, a dynamic mesh networking protocol that offers robustness and adaptability, important characteristics for the dynamic and heterogeneous IoT environment. LoRaWAN (Low-Range Wide Area Network), a low-power, long-range wireless communication standard, introduces energy efficiency and extends the reach of IoT networks, enabling secure communication over extended distances. To improve the trustworthiness of IoT devices, we present an integrated approach that leverages the strengths of Meshstastic's dynamic mesh networking capabilities and LoRa's low-power, long-range communication, along with the integration of a reputation model specifically designed for IoT. We evaluated the performance of the proposed solution through several simulations and real-world experiments. The results show that the devices' measured values of trust reflect the real behaviour of the devices. These findings underscore the viability and applicability of the Meshtastic protocol utilising LoRa technology as a pivotal step towards establishing resilient and trustworthy IoT infrastructures in the face of evolving security challenges. [ABSTRACT FROM AUTHOR]

Having access to the specifications of network protocols is essential for several reasons in IT security. When the specifications are not known, one may turn to protocol reverse engineering methods to reconstruct these, typically by analysing recorded network traffic or inspecting an executable that implements the protocol. First, the format and structure of the messages need to be recovered, then the state machine of the protocol itself. Over the years, several solutions have been proposed for both tasks. As a consequence, picking the right solution for a given scenario is often a complex problem that involves evaluating and comparing various solutions. In this paper, we review the current means of evaluating the performance of protocol state machine reverse engineering methods. To help alleviate the shortcomings of the current methodology, we propose two new metrics of performance to be measured: correctness and completeness of output for partial runs (when runtime is bounded). These, combined with previously used metrics should make it easier to pick the most ideal choice for a given use case. We also propose the examination of cases where the algorithms have to work with incomplete or inaccurate syntactical information. We showcase how these new metrics and related information may be useful for the evaluation and comparison of various algorithms by applying these new methods to evaluate the performance of a recent protocol state machine reverse engineering method. [ABSTRACT FROM AUTHOR]

The establishment of the Underwater Internet of Things (UIoT) and the realization of interconnection between heterogeneous underwater intelligent devices are urgent global challenges. Underwater acoustic networking is the most suitable technology to achieve UIoT for medium to long ranges. This paper presents an underwater Wi-Fi network, called uw-WiFi, that utilizes a master–slave mode architecture. uw-WiFi is dedicated to solving the problem of underwater acoustic networking with limited coverage range and number of nodes. To ensure the reliability of different types of data in the network, a reliable segmentation transmission protocol based on data type is designed. Additionally, on-demand scheduling based on the reservation MAC protocol is developed to solve the channel resource sharing problem. The uw-WiFi system has undergone shallow sea tests, and the experimental results demonstrate that the uw-WiFi network is capable of achieving a network throughput of 500 bps or higher, indicating superior network performance. [ABSTRACT FROM AUTHOR]

The objective of forensic analysis of cloud computing traffic is to identify any suspicious or malicious behavior in network activities within cloud computing settings. This includes examining network connections, data transfer patterns, and data payloads. To effectively analyze cloud computing traffic associated with IoT devices, it is imperative to understand cloud infrastructure and network protocols. The prevalence of IoT devices in cloud environments necessitates efficient forensic analysis techniques to address security incidents. Considering the distinctive attributes of IoT devices and the decentralized nature of cloud environments, this paper investigates the challenges and considerations related to forensic analysis in cloud computing systems incorporating IoT devices. The framework we present includes comprehensive guidelines about data collection, preservation, analysis, and forensic analysis in IoT-based cloud computing systems. As well as providing practical case studies, we demonstrate how our framework works in real-world scenarios involving IoT-based cloud computing. Providing tangible solutions to the forensic challenges specific to IoT-based cloud computing systems, the findings of this research contribute significantly to a better understanding of these challenges. [ABSTRACT FROM AUTHOR]

A botnet is a collection of Internet-connected computers that have been suborned and are controlled externally for malicious purposes. Concomitant with the growth of the Internet of Things (IoT), botnets have been expanding to use IoT devices as their attack vectors. IoT devices utilise specific protocols and network topologies distinct from conventional computers that may render detection techniques ineffective on compromised IoT devices. This paper describes experiments involving the acquisition of several traditional botnet detection techniques, BotMiner, BotProbe, and BotHunter, to evaluate their capabilities when applied to IoT-based botnets. Multiple simulation environments, using internally developed network traffic generation software, were created to test these techniques on traditional and IoT-based networks, with multiple scenarios differentiated by the total number of hosts, the total number of infected hosts, the botnet command and control (CnC) type, and the presence of aberrant activity. Externally acquired datasets were also used to further test and validate the capabilities of each botnet detection technique. The results indicated, contrary to expectations, that BotMiner and BotProbe were able to detect IoT-based botnets—though they exhibited certain limitations specific to their operation. The results show that traditional botnet detection techniques are capable of detecting IoT-based botnets and that the different techniques may offer capabilities that complement one another. [ABSTRACT FROM AUTHOR]

The Controller Area Network with Flexible Data-Rate (CAN-FD) bus is the predominant in-vehicle network protocol, responsible for transmitting crucial application semantic signals. Due to the absence of security measures, CAN-FD is vulnerable to numerous cyber threats, particularly those altering its authentic physical values. This paper introduces Physical Semantics-Enhanced Anomaly Detection (PSEAD) for CAN-FD networks. Our framework effectively extracts and standardizes the genuine physical meaning features present in the message data fields. The implementation involves a Long Short-Term Memory (LSTM) network augmented with a self-attention mechanism, thereby enabling the unsupervised capture of temporal information within high-dimensional data. Consequently, this approach fully exploits contextual information within the physical meaning features. In contrast to the non-physical semantics-aware whole frame combination detection method, our approach is more adept at harnessing the physical significance inherent in each segment of the message. This enhancement results in improved accuracy and interpretability of anomaly detection. Experimental results demonstrate that our method achieves a mere 0.64% misclassification rate for challenging-to-detect replay attacks and zero misclassifications for DoS, fuzzing, and spoofing attacks. The accuracy has been enhanced by over 4% in comparison to existing methods that rely on byte-level data field characterization at the data link layer. [ABSTRACT FROM AUTHOR]

The industrial control and automation sector has invested in the development and standardization of new wireless (WirelessHART, ISA 100.11a, and WIA-PA) and wired (Profibus/Profinet, Modbus, and LonWORK) solutions aimed at automating processes to support standard monitoring and control functions from the perspective of addressing critical applications, as well as those integrated within the Building Internet of Things (BIoT) concept. Distributed data acquisition and control systems allow modern installations to monitor and control devices remotely. Various network protocols have been proposed to specify communication formats between a client/gateway and server devices, with Modbus being an example that has been widely implemented in the latest industrial electrical installations. The main contribution made in this paper concerns the completion of the Modbus Extension (ModbusE) specifications for the server station in the classical Modbus communication architecture, as well as their implementation and testing in an STM32F4 kit. A general-purpose control architecture is proposed for BIoT sector, comprising both intelligent touch switches and communication protocols of which the Modbus protocol is used extensively for the monitoring and control part, especially between clients, smart switches, and devices. The specific contributions concern the presentation of a scientific and practical implementation of improved specifications and their integration as software modules on ModbusE protocol server stations. A client station with a VirtualComm USB PC connection is also implemented in the lab to test the operation of the proposed server with specific Modbus applications. [ABSTRACT FROM AUTHOR]

With the development of IoT technology and the improvement of people's living standards, smart locks have become prevalent in ordinary households. However, for enterprises and institutions requiring unified management and control capabilities for networked smart locks, the technology has been relatively lagging, and there is a lack of established brands. Existing products are mostly based on wireless low-power network protocols, leading to common issues of low stability, limited network scalability, and high maintenance efforts. This paper addresses the problems existing in current networked lock systems and leverages the centralized office characteristics of enterprises and institutions. By integrating IoT technology and Power over Ethernet- (PoE-) centralized power supply, we have developed a networked smart lock system with unified management and control capabilities. This system is primarily designed for applications in offices, collective dormitories, and hotels of enterprises, institutions, and schools. The test results demonstrate that even with a scale of over tens of thousands of networked locks under unified control, the system maintains fast response times and low packet loss rates. It also incorporates energy-saving and environmentally friendly features, as well as easy automatic updates, facilitating convenient postdeployment maintenance. Thus, it effectively meets the requirements for centralized management and control in different application scenarios with centralized use of rooms. In conclusion, this research has led to the development of a unified management and control networked smart lock system, which is well suited for enterprises, institutions, and schools. Its scalability, speed, energy efficiency, and ease of maintenance make it an excellent solution for various application scenarios requiring centralized management and control of access. [ABSTRACT FROM AUTHOR]

Copyright of Revista Vínculos is the property of Revista Vinculos and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

• Temporary continuous observation task using non-customized constellation is studied. • A hybrid method for multi-satellite scheduling and task planning is proposed. • A joint simulation software system is developed via STK and Python. • The proposed technique has higher efficiency and target adaptability. This paper put forward a method to address the problem, of how to select multiple satellites from a given heterogeneous constellation and plan their tasks to implement a temporary mission for ground or aerial targets successive observation, while hardly affecting the constellation's original mission as much as possible. First, considering the observation geometric constraints of the satellite on the target, an observability analysis model for effective observation of the satellite on the target is established to characterize the observable spatio-temporal scope. Considering the time-length requirement of sustained observation on the target, a multi-satellite-to-target sustained observation model is constructed for the scheduling of satellites. Second, to address the problem of selecting task satellites in a given heterogeneous constellation, a mathematical model for task planning is established to maximize observation benefits and minimize task burdens. Third, a hybrid method of multi-satellite scheduling and task planning is designed with fault tolerance, based on dynamic programming and an improved contract network protocol algorithm. Next, a joint simulation software system is established through the secondary development of STK and Python, which includes satellite-target observability analysis, task satellite selection, task allocation and planning, and full process visible demonstration functions. Finally, simulation cases verified the effectiveness and superiority of the proposed technique. [ABSTRACT FROM AUTHOR]

With large-scale Cyber-Physical Systems (Internet of Things) deployments, the low-cost networked devices are becoming ubiquitous. Time stamping of events is a basic requirement and it is crucial for distributed/isolated systems/devices to work in unison. The system clocks of these devices are not very stable and their behaviour is affected by ageing and environmental conditions. A clock’s timing behaviour is generally analysed independently by comparison to a highly stable standard reference clock using specialized instruments. Network Time Protocol (NTP) is widely used for time synchronization over computer networks. As the NTP server clock is more stable in comparison to a client’s system clock, the variation in the end device’s clock offset values with respect to the NTP server clock over a long time can be considered for analysing the behaviour of the end device’s clock. This paper presents a method for analysing clock behaviour based on NTP messages. A computer programme is developed, which utilizes an open-source NTP client library to exchange NTP messages and records end device’s system clock’s offset variations over time for a given periodicity to analyse the behaviour. This black box analysis approach does not require any direct access to the end device’s clock circuit. The solution may be useful for analysing clock behaviour for long-term stability under actual environmental conditions, for deciding time synchronization periodicity to optimize the number of synchronization packet exchanges, and for pre-deployment timing stability assessment of devices for deployment scenarios having intermittent/non-availability of periodic time synchronization. [ABSTRACT FROM AUTHOR]

Summary The cluster networking protocols are the roots that embed intelligent decision‐making and enhance the lifespan of wireless sensor networks (WSNs). Wireless sensors with limited capabilities face several challenges due to the heterogeneous application environments. Especially, the mobility‐incorporated sensors in most situations trouble the cluster network's robustness. Many cluster networking protocols have been presented in the past to enhance the network lifespan and data delivery ratio. However, they lack a dedicated and efficient mechanism for mobility assistance, an adequate cluster management process and cluster head selection criteria. To overcome these issues and for the uniform energy load distribution, we propose a mobility‐compatible cache controlled cluster networking protocol (MC‐CCCNP) in this paper. It is an energy‐efficient cluster networking protocol that supports sensor movement. Network resource management and routing are controlled distributively by an optimal number of cache nodes. It defines a new strategy for cache node deployment based on neighbour density as well as a weight formula for cluster head selection and cluster formation based on the residual energy, the distance to the base station and the node velocity. It also includes techniques for detaching and reconnecting a mobile node to an appropriate cluster cache if it crosses the cluster boundary. We simulate and compare the performance of our protocol with the centralised energy‐efficient clustering routing, energy‐efficient mobility‐based cluster head selection protocol and dual tier cluster‐based routing protocols over different network configurations with varying mobility, scalability and heterogeneity. The MC‐CCCNP showed remarkable improvements in energy utilisation uniformity and energy consumption. With the improved network lifespan, it also maintains a higher data throughput rate of 95% or more in almost all network configurations. [ABSTRACT FROM AUTHOR]

Summary: IoT‐assisted WSN contains various nodes, which are placed on a huge scale that increases complications. Thus, the challenges and issues of these networks fluctuate as compared to WSNs. Hence, sensor nodes are imperative unit that runs on less energy resources. Hence, devising a robust and energy‐effective protocol for increasing network lifetime is a complex task. This paper devises a novel hybrid optimization‐driven approach for selecting cluster head (CH) in IoT‐assisted WSNs. Initially, the simulation of IoT nodes is done by configuration. Thereafter, the Cluster Head selection is done using a newly devised optimization technique, namely the Taylor‐Political optimizer (Taylor‐PO). Thus, fitness is newly developed by adapting certain attributes like energy, delay, inter and intra‐cluster distance, Link Lifetime (LLT), predicted energy, and delay. Here, the multipath routing is accomplished using Tunicate Swarm gray wolf optimization (TSGWO). Thus, the proposed Taylor‐PO is offered for effective Cluster Head selection along with multipath routing using TSGWO. The proposed Taylor‐PO offered improved performance with smallest delay of 0.006 sec, highest energy of 2.368 J, highest throughput of 494.043 kbps. [ABSTRACT FROM AUTHOR]

Routing protocol plays a vital role in FANETs (Flying Ad-Hoc Networks) by facilitating communication between nodes and enabling the establishment of efficient routes. In a FANET, where the nodes can be drones, airplanes or other unmanned aerial vehicles, mobility is a key aspect that requires proper route management. Among the most well-known and widely used routing protocols in different types of networks is AODV (Ad hoc On-Demand Distance Vector). AODV is a reactive routing protocol specially designed for ad hoc networks, including FANET networks. It offers an efficient solution to establish dynamic routes between nodes when direct communication between a source node and the destination node is not possible. However, most of the studies available in the literature mainly focus on the comparison between different routing protocols. They often neglect to examine in detail the performance of the same routing protocol under different circumstances or conditions. This paper offers a thorough investigation into the influence of noise on the AODV protocol in FANET networks. Furthermore, we introduce a proposed enhancement to the AODV protocol, specifically designed to improve its ability to withstand the effects of noise. Additionally, we present simulation results that evaluate the performance of AODV in terms of throughput, End-to-End Delay, Packet Delivery Ratio (PDR), and energy consumption. [ABSTRACT FROM AUTHOR]

This paper presents a survey on the MAC and network layer of Wireless Sensor Networks. Performance requirements of the MAC layer are explored. MAC layer protocols for battery-powered networks and energy harvesting-based networks are discussed and compared. A detailed dis- cussion on design constraints and classification of routing protocols is presented. Several routing protocols are compared in terms of such parameters as: energy consumption, scalability, network lifetime and mobility. Problems that require future research are presented. The cross-layer approach for WSNs is also surveyed. [ABSTRACT FROM AUTHOR]

Vehicle‐to‐grid (V2G) network has a clear advantage in terms of economic advantages, it has attracted the interest of electric vehicle (EV) and power grid users. However, numerous security concerns limit its further progress. In existing V2G protocols a trusted third party independently generates the master key of the system, so if the adversary compromises the third party, then the system may become vulnerable to system master key leakage attack. Recently, Su et al. presented a privacy‐preserving mutual authentication protocol for V2G networks. Firstly, we crypt‐analysis Su et al.'s protocol and show that their protocol is vulnerable to several security attacks such as the reveal of the master secret key, impersonation attacks and the incorrect notion of EV's anonymity and traceability and does not meet the security features they claimed in their paper. Secondly, we verify that Su et al.'s protocol is unsafe against impersonation attacks, system key leakage, and electrical vehicle anonymity attack using the AVISPA tool. [ABSTRACT FROM AUTHOR]

Internet of Vehicles is in demand with the technological expansion, where smart vehicles can communicate with other vehicles, infrastructure, and humans. Traffic management has become more complex with increased traffic density on the road. To avoid severe road accidents, emergency message dissemination in a timely manner is a significant challenge. In this paper, we proposed an emergency message dissemination technique for vehicular networks with the integration of Software defined networks and fog computing. The aim is to offer V2I and V2V communication with minimal latency, reduced congestion, and a high packet delivery rate while achieving maximum information coverage. Three distinct communication modes are defined, each with its own set of algorithms. In the event of a failure in any of these mechanisms, an alternative method is available to deliver a message without the need for an extended wait for link recovery. An optimum forwarder node is selected to rebroadcast a message to the destination. The proposed architecture is analyzed and compared with an existing protocol by conducting a set of simulations. The results section demonstrates the efficiency of our proposed architecture. [ABSTRACT FROM AUTHOR]

Background: VCI is a severe public health problem facing the world today. In addition to pharmacological treatment, non-invasive neuromodulation techniques have also been effective. At this stage, non-invasive neuromodulation techniques combined with pharmacological treatment are the mainstay of clinical treatment, and clinical trials are continuing to be conducted, which is becoming the direction of treatment for VCI. Therefore, we outline this systematic review and network meta-analysis protocol to evaluate and rank clinical data in future studies which can develop optimal protocols for the clinical treatment of VCI with non-invasive neuromodulation techniques in combination with drugs. Methods: The network meta-analysis will search eight databases, including PubMed, Embase, Cochrane Library, Web of Science, China Knowledge Infrastructure Library (CNKI), China Biology Medicine disc (CBM)), Wanfang Data Knowledge Service Platform and Vipshop Journal Service Platform (VIP), for a period of from the establishment of the library to January 30 2022. The quality of the studies will be evaluated using the Cochrane Review's Handbook 5.1 and the PEDro scale to assess the evidence and quality of the included randomised controlled trials. Risk of bias assessment and heterogeneity tests will be performed using the Review Manager 5.4 program, and Bayesian network meta-analysis will be performed using the Stata 16.0 and WinBUGS 1.4.3 program. Results: The results of the network meta-analysis will be published in a peer-reviewed journal. Conclusions: Our study is expected to provide high quality evidence-based medical evidence for the treatment of VCI by clinicians. Trial registration: PROSPERO:CRD42022308580. [ABSTRACT FROM AUTHOR]

Traditional partial synchronous Byzantine fault tolerant (BFT) protocols are confronted with new challenges when applied to large-scale networks like IoT systems, which bring about rigorous demand for the liveness and consensus efficiency of BFT protocols in asynchronous network environments. HoneyBadgerBFT is the first practical asynchronous BFT protocol, which employs a reliable broadcast protocol (RBC) to broadcast transactions and an asynchronous binary agreement protocol (ABA) to determine whether transactions should be committed. DumboBFT is a follow-up proposal that requires fewer instances of ABA and achieves higher throughput than HoneyBadgerBFT, but it does not optimize the communication overhead of HoneyBadgerBFT. In this paper, we propose TortoiseBFT, a high-performance asynchronous BFT protocol with three stages. We can significantly reduce communication overhead by determining the order of transactions first and requesting missing transactions after. Our two-phase transaction recovery mechanism enables nodes to recover missing transactions by seeking help from 2 f + 1 nodes. To improve the overall throughput of the system, we lower the verification overhead of threshold signatures in HoneyBadgerBFT, DumboBFT, and DispersedLedger from O n 3 to O n 2 . We develop a node reputation model that selects producers with stable network conditions, which helps to reduce the number of random lotteries. Experimental results show that TortoiseBFT improves system throughput, reduces transaction delays, and minimizes communication overhead compared to HoneyBadgerBFT, DumboBFT, and DispersedLedger. [ABSTRACT FROM AUTHOR]