Search

As the proportion of new energy in power systems continues to increase, the widespread use of solar and wind-based distributed generation (DG) power in DC distribution networks will face problems such as new energy consumption, grid stability, and economical benefits in the future. At present, energy management strategies for photovoltaic (PV) grid-connected power generation systems are mainly researched in the field of AC–DC distribution network. This paper provides an advanced energy management strategy of the DC multiport energy router. Considering the battery state of charge (SOC), real-time electricity price (EP), and user-side electricity charge (EC), an energy management scheme based on the fuzzy coordinated control strategy is designed to improve the utilization of energy storage batteries and the economic benefits. A 20 kVA multi-port DC energy router simulation platform is established and verified in MATLAB/Simulink. The results show that the energy management strategies based on fuzzy coordinated controller can solve the multi-objective problem. Compared with traditional control strategies, the fuzzy collaborative energy management strategy has a more comprehensive optimization effect.

Minimizing latency and power are key goals in the design of NoC routers. Different proposals combine lookahead routing and router bypass to skip the arbitration and buffering, reducing router delay. However, the conditions to use them requires completely empty buffers in the intermediate routers. This restricts the amount of flits that use the bypass pipeline especially at medium and high loads, increasing latency and power. This paper presents NEBB, Non-Empty Buffer Bypass, a mechanism that allows to bypass flits even if the buffers to bypass are not empty. The mechanism applies to wormhole and virtual-cut-through, each of them with different advantages. NEBB-Hybrid is proposed to employ the best flow control in each situation. The mechanism is extended to torus topologies, using FBFC and shared buffers. The proposals have been evaluated using Booksim, showing up to 75% reduction of the buffered flits for single-flit packets, which translates into latency and dynamic power reductions of up to 30% and 23% respectively. For bimodal traffic, these improvements are 20 and 21% respectively. Additionally, the bypass utilization is largely independent of the number of VCs when using shared buffers and very competitive with few private ones, allowing to simplify the allocation mechanisms., Comment: 14 pages, 16 figures, LaTeX; this review is an update of the preprint to the accepted manuscript of the paper; the final version of this work has been published in the Journal of SystemArchitecture, DOI: https://doi.org/10.1016/j.sysarc.2020.101832

Control and management of network is a complex problem, and as the demand and use of network increases the focus is on this problem with attention toward time/delay sensitive application with focus on quality of service (QoS). Existing human body area network (HBAN) technology providing solution for congestion control and avoidance is not a full-proof solution for providing good services in all types of situations. The congestion control mechanism used by HBAN technology is end-to-end feedback based, which is implicit in nature and which needs to be addressed for providing efficient and effective congestion control algorithm. There is a limitation on accomplishing the control from edges of the network of such an end-to-end implicit feedback-based congestion control. Hence, to overcome with this issue additional mechanism is added in the router for accomplishing the end-to-end congestion control methods. This control on router has led to concept of active queue management (AQM). Thus, this chapter focuses on AQM-based schemes using fuzzy logic in order to provide a high utilization of network with low losses and delay within the network and thus providing effective control in HBAN system for providing smart e-health application using biosensors. Thus, this chapter proposes fuzzy logic-based congestion control protocol for HBAN network for efficient working of smart e-health application which provides reliable and efficient working of HBAN network and opens up area for further research with a new approach in this direction.

A mobile ad hoc network (MANET) is composed of a set of free and mobile nodes connected on an ad hoc basis. They form a temporary dynamic wireless network without any infrastructure. These mobile nodes act as hosts as well as routers in their mode of communication. As a router, these nodes provide connectivity by forwarding data packets among intermediate nodes until they reach the destination nodes. Routing protocol is used to maintain their communication and connectivity. However, due to security vulnerabilities of routing protocols and the absence of infrastructure, MANET is vulnerable to various security threats and attacks. The main objective of this research is to provide a comprehensive review of the existing vulnerabilities within ad hoc routing protocols that ultimately provides the basis to secure the communication in MANET. This chapter gives a brief summary about MANET and discusses the recent routing protocols, which are classified into three different categories as reactive, proactive, and hybrid protocols. In addition, it shows the current challenges and vulnerabilities on ad hoc routing protocols which lead to difficulties in designing and development of a secure routing protocol. Furthermore, it presents routing attacks into two categories, internal and external, as well as the security mechanism against them.

Quantum Grid is a patented packet-based power transmission concept enabling an energy Internet similar to the well-known Internet. The idea of the Quantum Grid is that power is transmitted by energy packets that are defined by a corresponding data packet including the sequence of power over the delivery time. Also every node and transmission line can be addressed similar to the Internet. The system nodes are built by so-called Quantum Grid Routers with three-tier architecture consisting of a business, routing, and power plane which are together with the grid assets building the Quantum Grid. The router is operated so as to achieve the techno-economic optimization of a cell, which can be composed by consumers, prosumers, and generators. This cell-based supply with self-organization capabilities can react better and quicker to dynamic change in generation and supply. Such self-organization capabilities are achieved through innovation in planes composing the network architecture. Therefore, on top of the Power Plane, the Routing and Control Plane is connected to a communication network to exchange information between all Quantum Grid Routers and enables to transmit the energy packets via set points that are given from a Business Plane above. Therefore, new business models can be developed in this plane introducing power by contract principle instead of power on demand. This means peer-to-peer contracts over the transmission of power packets between sinks and sources which are then realized by one-to-one power flows from source to sink. To avoid fraud and to optimize the grid, the power flow has to be controlled end to end. To reduce complexity and to enable self-organization, the packets will be “quantized.” Last but not least the transmission path is chosen by a rooting algorithm and can be different to the flow determined by Ohm and Kirchhoff. To archive this power electronic is used for controlling the power flow and forcing the transmission along the chosen path.

Energy Internet is a grand vision for future electric power system in which ubiquitous ownership, ubiquitous use, and ubiquitous sharing of electric energy can be achieved in real time. To facilitate the realization of such a vision, addressable and intelligent energy routers need to be developed. This chapter discusses the concept of Energy Internet, Energy Router, and how solid-state transformer can be utilized as an energy router in the Energy Internet.

The deployment of a simple-link sensor network-based physiological signal remote monitoring system is presented in this chapter. The proposed system consists of a Wireless Portable Sensor Unit (WPSU), which is installed at the patient’s home and measures the physiological signals and sends these to the remote monitoring station (i.e., at a hospital) through a wireless access point unit (home router). The received data of every patient is stored in the database server for review. Significant experiments have been carried out to evaluate the current consumption, life expectancy, and movement of a patient in an environment. From the experiments, it is observed that the current consumption and life expectancy of a WPSU has been found as 0.01529 A and two days 17 hours 24 minutes, respectively. Also, it is evaluated that the maximum mobility of a WPSU in an environment is 119-m line of sight from the wireless access point.

To maintain grid stability in terms of frequency and voltage with a high penetration of intermittent solar and wind power generation, machine to machine matching of the power supply and demand will be the key solution. The new concept of “Digital Grid” is introduced and developed. Digital Grid is the Blockchain based electricity market with the software-defined multiple inverters (Digital Grid Router) and AI edge computers (Digital Grid Controller). The Digital Grid can accept high penetrations of renewable power, prevent cascading outages, accommodate identifiable tagged electricity flows, track those transactions, and trade electricity and environmental value as identified unique products.

A switch fabric is a core component of any router that provides a physical path between the ingress linecard and the egress linecard. In this chapter, we present different types of backplanes that facilitate the movement of packets from one linecard to another linecard in a router. At a very high level, such switches can be broadly categorized as shared backplanes or switched backplanes. In a switched backplane, we consider single stage fabrics – shared memory and crossbar. We cover the scheduling algorithms for crossbar such as take-a-ticket, PIM, and iSLIP and analyze their pros and cons. We then discuss multistage switching fabrics, CLOS and Benes, and the complexity of scheduling algorithms in these switches. Finally, we explain various techniques about how to scale switches for higher link speeds.

A critical function of a router is to handle queueing of arriving packets and then schedule them on an outgoing interface. This is essentially the job of the “queue manager” at a router. An important requirement is that these functions need to be efficient so that a packet leaves a router extremely quickly while giving priority to certain packet types as and when needed. In this chapter, we discuss queueing disciplines a router might employ for scheduling packets and measures for dropping them.

The primary function of routers is to forward packets toward their final destination. To accomplish this, a router must decide for each incoming packet where to send it to next. To do this, the router must do a lookup function to determine the match for the destination address so that it knows which interface to forward the packet to. This chapter describes a number of algorithms that can be used for IP address lookup; their advantages and disavantages are also discussed. Finally, a discussion on hardware-based approaches are also included.

Probabilistic Packet Marking algorithm suggests a methodology to identify all the participated routers of the attack path by probabilistically marking the packets. In this approach, these marked packets contain partial information regarding the routers of the attack path. At receiver, to get the complete information of every router, it requires more number of marked packets and hence more combinations and more false positives. To overcome this drawback we have presented a novel idea in finding the exact IP address of the routers in the attack path by applying Chinese Remainder Theorem. The result of our implementation reveals that our idea requires less number of marked packets and takes no time in constructing the attack path. The same idea is true even in the case of multiple attackers.

To enhance the performance of on-chip communications of Globally Asynchronous Locally Synchronous Systems (GALS), a dynamic reconfigurable multi-synchronous router architecture is proposed to increase network on chip (NoC) efficiency by changing the path of the communication link in the runtime traffic situation. In order to address GALS issues and bandwidth requirements, the proposed multi-synchronous bidirectional NoC’s router is developed and it guarantees higher packet consumption rate, better bandwidth utilization with lower packet delivery latency. All the input/output ports of the proposed router behave as a bi-directional ports and communicate through a novel multi-synchronous first-in first-out (FIFO) buffer. The bidirectional port is controlled by a dynamic channel control module which provides a dynamic reconfigurable channel to the router itself and associated sub-modules. This proposed multi-synchronous bidirectional router architecture is synthesized using Xilinx ISE 14.7 and FPGA Virtex 6 family device XC6VLX760 is considered as target technology and its performance is evaluated in terms of power, area and delay. Keywords: Network-on-Chip (NoC), GALS, Bidirectional channel, Multi-synchronous FIFO, On-chip communications

In this chapter, you will learn how firewalls add security to TCP/IP networks. We’ll be working with both kinds of router-based firewalls: packet filters and stateful inspection. You will learn about the types of dedicated firewalls that run on purpose-built hardware. We’ll also examine firewall architectures and the use of DMZs. And because filtering works exactly the same with IPv6 as with IPv4, we will not have a special section on IPv6 firewalls.

In this chapter, you will learn how routers forward IP packets. We’ll start with the logical steps a router follows to forward (“route”) a packet out the next-hop interface. Then we’ll look at router architectures to see how specialized devices (there are “software-only” routers) accomplish routing and forwarding. Finally, you will learn about how IPv4 routers transition to handling IPv6 routing and various methods to tunnel IPv6 packets through links connected by IPv4-only routers. Tunnels were introduced in Chapters 3 and 4 and occur when the normal encapsulation sequence of packet–inside frame is violated in some fashion.

Publisher Summary Routers and switches perform the most fundamental actions on a network. They route and direct packets on the network and enable communications at the lowest layers. The ability to modify a router's configuration can enable packet redirection, which may allow a penetration tester the ability to intercept all packets and perform packet sniffing and manipulation. Penetration testing on a network device can be viewed from two different aspects: internal and external. While conducting an external penetration test, one assumes that a firewall protects the router, whereas on an internal assessment, there should be an unfiltered connection to the router. Switches are a type of networking device similar to hubs, which connect network equipment together to form the network. A router basically has two or more network interfaces and forwards (or blocks) network traffic between these interfaces. Firewall is most common device that blocks access to an internal network from the outside, and blocks users of the internal network from accessing potentially dangerous external networks or ports. The largest limiting factor of IPv4 is the available number of addresses; IPv6 was created to eliminate this problem by creating an address space capable of supporting 340 undecillion addresses. Footprinting tools, Traceroute, Nmap DNS are some of the open source tools that can be employed for the various phases of a network device penetration test. Finally exploitation tools like onesixtyone, hydra, TFTP brute force, and Ettercap are used for exploiting identified vulnerabilities, both configuration errors and software bugs, of which the former is more prevalent with network devices.

In this chapter, you will learn how routing works. We’ll look at both direct delivery of packets to a destination without a router and indirect delivery through a router, both of which happen all the time. Routers provide indirect delivery between LANs while bridges essentially provide direct delivery only. Packet switching, on the other hand, is a related form of indirect delivery that will be explored in a later chapter. You will learn about the role of routing tables and forwarding tables in the routing process. Technically, routers use the information in the routing table to create a forwarding table to forward packets to the next hop based on a metric, but many people use the terms routing and forwarding loosely, often using one term for both. We’ll try to use the terms as defined here consistently in this chapter, but there is no real formal definition of either term.

In this chapter, you will learn how multicast routing protocols allow multicast traffic to make its way from a source to interested receivers through a router-based network. We’ll look at both dense and parse multicast routing protocols, as well as some of the other protocols used with them (such as IGMP). You will learn how the PIM rendezvous point (RP) has become the key component in a multicast network. We’ll see how to configure an RP on the network and use it to deliver a simple multicast traffic stream to hosts. We’ll also see why multicast is not as common as people thought it might be.

A 1×2 optical router based on an achromatic liquid crystal polarization rotator has been designed and experimentally tested. The router can work in the spectral range used in step-index polymer optical fiber networks (400-700 nm) with low wavelength and temperature dependences. The theoretical design is fast and simple and has good agreement with experimental results. Experimental crosstalk is lower than -18.68 dB for both outputs, even with thermal variations of 10 °C. Performance improvement with respect to previously reported devices with similar structure has also been analyzed. This paper was supported by the Spanish Economy and Education Ministries through grants (Refs.TEC2012-37983-C03-02 and PRX12/00007). Publicado

The Onion Router, commonly referred at “Tor” has allowed for practically any person, regardless of technical expertise, to communicate anonymously over the Internet. Tor is not a covert means of Internet use, but rather, anonymizes Tor users in a manner that practically makes tracking or identifying users difficult if not impossible. The effectiveness of Tor is such that attempting to bypass its ability to anonymize traffic is overwhelming. In the context of the forensic analysis, uncovering the Internet communication may not be possible, but the forensic artifacts left behind may be valuable in the forensics investigation.

In this chapter, we show the results and discussions of the presented theoretical and experimental implementations. We use Mikrotik routers as end clients to generate random user datagram protocol (UDP) and transmission control protocol (TCP) packets to destination B. Mikrotik Linux-based firewall server gave us simulated behavior of attacks in large networks as well. We also focus on obtaining an optimum parameter for router setting and make trade-offs to improve efficiency of mitigating DDoS attacks. To achieve higher detection rate in the lowest time, we also consider and keep the two main factors of false-positive and false-negative errors optimum. In this work, we tried to satisfy these factors as well.

The Internet allows for an efficient, inexpensive collection of information without surfers’ consents. This includes surfers’ preferences, interests or even credit card information. Furthermore, it is well known that some oppressive governments filter the information that can digitally reach their countries. Also, there are evidences that certain governments spy on citizens and organizations through intercepting phone calls, activities on social media and blogs. For Internet browsing, several methods of privacy-preserving and anonymizers have been developed. An example of such a technology is The Onion Router (ToR) network, which has been proven to guarantee users’ anonymity and privacy while they are browsing the Internet. However, with the wide deployment of virtualization solutions and the tremendous migration to cloud-based services, many online services have moved onto the cloud. This situation complicates the issue of preserving a client’s privacy and anonymity and raises a “question mark” as to the efficiency of current anonymizers in this new environment. To the best of our knowledge, few studies have been conducted to analyze the compatibility between the ToR network and this new emerging infrastructure. This paper presents a qualitative analysis of the feasibility and efficiency of the ToR in cloud infrastructure and the possibility of integrating these technologies.

A novel adaptive routing algorithm - Efficient Dynamic Adaptive Routing (EDAR) is proposed to provide a fault-tolerant capability for Networks-on-Chip (NoC) via an efficient routing path selection mechanism. It is based on a weighted path selection strategy, which exploits the status of real-time NoC traffic made available via monitor modules. The key performance goal is to maintain throughput under congested and faulty conditions via effective routing path decisions. In the proposed EDAR, port weights are calculated in real-time according to the channel status - Idle/Busy/Congested/Faulty, and the port with the lowest weighting is ranked as the near-optimal route to forward packets. This mechanism enables the router to bypass congested ports and tolerate faulty ports. To assess the latency and throughput of the proposed routing algorithm, several traffic patterns for both fault-free and faulty NoCs were evaluated. Results show that EDAR can achieve higher throughput compared to other state of the art routing algorithms under various traffic patterns and levels of injected faults. In addition, the hardware area overhead for EDAR is demonstrated to have a reasonably low cost which maintains scalability for large NoC implementations.

This paper presents an extensive experimental evaluation of the layer 3 packet forwarding performance of virtual software routers based on the Linux kernel and the KVM virtual machine. The impact of various tuning and configuration options on forwarding performance is evaluated, focussing on the mechanism used for moving data to and from virtual machines, the algorithm used for scheduling the virtual router tasks, the number of used CPU cores, and the router tasks affinities. The presented results show how to properly configure the virtual router components to improve forwarding performance and the benefits of using appropriate CPU schedulers. Furthermore, some advanced architectures based on virtual router aggregation are evaluated. The presented experiments show that architectures based on router aggregation can better exploit the available CPU cores to reach performance not far from the ones obtained by non-virtualised software routers.

Nodes in wireless multi-hop networks establish links with their neighbors, which are used for data transmission. In general, in this kind of networks every node has the possibility of acting as a router, forwarding the received packets when they are not the final destination of the carried data. Due to the routing protocol procedures, when the network is quite dense the overload added by the routing management messages can be very high. To reduce the effects of this overload a topology control mechanism can be used, which can be implemented using different techniques. One of these techniques consists of enabling or disabling the routing functionality in every node. Many advantages result from selecting just a subset of nodes for routing tasks: reduction of collisions, protocol overhead, interference and energy consumption, better network organization and scalability. In this paper, a new protocol for topology control in wireless mesh networks is proposed. The protocol is based on the centrality metrics developed by social network analysts. Our target network is a wireless mesh network created by user hand-held devices. For this kind of networks, we aim to construct a connected dominating set that includes the most central nodes. The resulting performance using the three most common centrality measures (degree, closeness and betweenness) is evaluated. As we are working with dynamic and decentralized networks, a distributed implementation is also proposed and evaluated. Some simulations have been carried out to analyze the benefits of the proposed mechanism when reactive or proactive routing protocols are used. The results confirm that the use of the topology control contributes to a better network performance.

The Payment Card Industry (PCI) standard dictates the functionalities that should be provided by firewall technologies in order to ensure the security of data. There are two main requirements that are mentioned in the standard. First requirement is to install and maintain a firewall configuration to protect cardholder data and second, is not to use vendor-supplied defaults for system passwords and other security parameters. Requirement 1.1 of the PCI Data Security Standard (DSS), guides through the process of configuring, and maintaining the firewalls, and routers. Requirement 1.1.1 details a formal process for approving, and testing all external network connections, and changes to the firewall configuration. Requirement 1.1.2 needs a current network diagram. All connections to the cardholder data should be clearly documented, including any wireless networks. This diagram needs to remain current at all times. Requirement 1.1.3 states that firewalls need to be implemented at each connection point and between any De-Militarized Zone (DMZ) and the internal network. Finally, Requirement 1.1.8 is less stringent in PCI DSS v1.2 firewall, and router rule sets must be reviewed every 6 months instead of quarterly. Requirement 1.2 focuses on the integrity, and availability of cardholder data. Requirement 1.3 in the DSS focuses on restricting connections between publicly accessible servers and any system component in scope for PCI.

This chapter talks about how to properly secure your home network and your home Wi-Fi network and how to safely let guests connect to your home network without risking your home computer.

This chapter introduces the reader to the techniques and tools required to work unseen on the Internet, particularly, by any investigative targets. The chapter discusses the types of Internet anonymization in use and how those tools can be implemented by the investigator. The chapter also stresses the need for investigators to use these anonymizing techniques consistent with their agency or company’s mission and legal requirements. The discussion starts with common techniques, such as the use of factious personas and emails and use of open or public Wi-Fi networks. It then quickly proceeds to the use of web anonymizers, proxy servers, Virtual Private Networks (VPN), The Onion Router (Tor), and The Amnesic Incognito Live System (Tails). The chapter also introduces readers to Tor’s “hidden services,” where an illegal marketplace has set up shop on the Internet. Finally, the chapter concludes by discussing methods to catch criminals who use anonymizing techniques.

A distributed multistage software router (MSSR) is composed by several interconnected software routers running on personal computers (PCs). The MSSR architecture overcomes scalability and performance issues of single software router by providing parallel forwarding paths. Like many networking devices, a MSSR must be sized for peak traffic load, which implies energy inefficiency at low loads. Thus, we focus on energy saving schemes to improve the router energy efficiency by dynamically adapting the MSSR architecture to the currently offered load. We first introduce an optimal energy saving algorithm defined as a mixed integer linear programming (MILP) optimization model. Then, heuristic solutions, named differential algorithms are discussed. While the optimal approach provides higher energy savings, the heuristics avoid the complete MSSR reconfiguration, thus reducing forwarding delays and minimizing service interruption. The performance evaluation shows that the proposed heuristic algorithms, that gracefully modifies the internal MSSR configuration, preserve the load proportional energy demand characteristics of the optimal algorithm, with a minimal loss of efficiency, largely compensated by algorithm simplicity.

In this chapter of the book we will cover how to get Wireshark, install it and set it up for use on a computer. We will cover how the tool changes your network interface card (NIC) so that it can capture data, specifically what requirements would be needed in order to not only install but use Wireshark in production as well as many other tidbits of information to make your troubleshooting time painless and productive. We will briefly go over the interface and how to launch and use the tool.

Fibre-Wireless (FiWi) access networks have been proposed as flexible and cost-effective solutions for future access networks. At the wireless mesh section, wireless routers have to forward both local traffic from directly connected users and foreign traffic from neighbour wireless routers. How to allocate resources to local and foreign traffic at each router in a balanced way, while avoiding starvation of routers requiring less resources, is a fundamental issue that must be solved so that new services emerge. Here, we develop a repeated game framework for bandwidth allocation and propose an algorithm that allocates bandwidth in a fair manner. The algorithm is able to detect over claiming routers and avoid possible denial of service that these may cause to others. Moreover, unfruitful use of resource is prevented, avoiding the forwarding of packets that would be dropped at some point later in the path, and queueing delay conditions are kept similar among local and foreign traffic. These fair network conditions open way for QoS support since it is easier to ensure the operationality of services. This work was supported by FCT (Foundation for Science and Technology) of Portugal within CEOT (Center for Electronic, Optoelectronic and Telecommunications), and by J. Coimbra’s Ph.D. Grant SFRH/BD/37808/2007.

This chapter examines the effect of different queuing disciplines on packet delivery and delay for different services. It is noted that as a part of the resource allocation mechanisms, each router must implement some queuing discipline that governs how packets are buffered while waiting to be transmitted. Various queuing disciplines can be used to control, which packets get transmitted and which packets get dropped. The queuing discipline also affects the latency experienced by a packet, by determining how long a packet waits to be transmitted. Some of the common queuing disciplines are first-in-first-out (FIFO) queuing, priority queuing (PQ), and weighted-fair queuing (WFQ). In FIFO queuing, the first packet that arrives at a router is the first packet to be transmitted. PQ is a simple variation of the basic FIFO queuing. Each packet is marked with a priority; the mark can then be carried. WFQ allows a weight to be assigned to each flow. This weight effectively controls the percentage of the link's bandwidth each flow can get.

Correct functionality of network systems is critical for correct operation of the Internet. Optimization goals for network systems include high throughput performance, low power consumption, and low implementation cost. While software implementations of router functions on general-purpose workstation processors can provide the necessary functionality, these systems often lack in performance, power efficiency, and cost. Instead, specialized components have been developed to improve the operation of network systems. This chapter explores some of these specialized hardware components used for packet processing in router systems. Network processors use multiple parallel processor cores to implement packet forwarding and more advanced functions. These network processors provide a general-purpose platform, where the router operation can be changed by updating software. In contrast, hardware accelerators provide a fixed set of functions specialized for the networking domain. Hardware accelerators typically use custom logic implementations that achieve higher performance than software, but cannot be reprogrammed. Both general-purpose network processors and special-purpose hardware accelerators are used in modern router designs.

This chapter discusses the software that is used on network systems. This software can be structured into the control plane software that implements routing protocols and other control functions and the data plane software that implements packet forwarding operations. Router systems, where ease of code development is more important than high performance, may use conventional operating systems to implement control and data plane functionality. Most modern operating systems have support for efficient network processing. In high-performance routers, specialized router operating systems are used to provide support for scalable and heterogeneous router platforms. Data path processing in these systems may use modular router software, which permits dynamic configuration of data plane functionality. Run-time systems for packet processing platforms manage the dynamic module allocation process in response to changes in network traffic.

Publisher Summary This chapter presents the steps involved in implementing constituent service components in Java and how they are integrated into an overall application by means of service composition. The development of the core business logic may be achieved using traditional Java-based development. Such a composite application may indeed be an implementation of a custom application router as specified by JSR289. All XML web services components are implemented in Java by means of the JAX-RS API, which is a part of the Java EE specification. The business log of the virtual call center application is broken down into three phases. The first of these phases deals with interactive voice recognition system (IVR) interaction and blocking of direct calls to a specific agent. The JSR289 API is a low-level API that operates at the level of SIP packets and their headers and contents. Thus, even simple high-level actions like sending a SIP packet are actually implemented by a comparably long sequence of low-level API calls that first create a SIP packet with a required payload and then send it.

[EN] Current integration scales make possible to design chip multiprocessors with a large amount of cores interconnected by a NoC. Unfortunately, they also bring process variation, posing a new burden to processor manufacturers. Regarding the NoC, variability causes that the delays of links and routers do not match those initially established at design time. In this paper we analyze how variability affects the NoC by applying a new variability model to 100 instances of an 8 ¿ 8 mesh NoC synthesized using 45 nm technology. We also show that GALS-based NoCs present communication bottlenecks due to the slower components of the network, which cause congestion, thus reducing performance. This performance reduction finally affects the applications being executed in the CMP because they may be mapped to slower areas of the chip. In this paper we show that using a mapping algorithm that considers variability data may improve application execution time up to 50%. © 2010 Elsevier Inc. All rights reserved., This work was supported by the Spanish MEC and MICINN, as well as European Comission FEDER funds, under Grants CSD2006-00046 and TIN2009-14475-C04. It was also partly supported by the project NaNoC (project label 248972) which is funded by the European Commission within the Research Programme FP7.

Publisher Summary The Payment Card Industry (PCI) standard dictates the functionalities that should be provided by firewall technologies in order to ensure the security of data. There are two main requirements that are mentioned in the standard. First requirement is to install and maintain a firewall configuration to protect cardholder data and second, is not to use vendor-supplied defaults for system passwords and other security parameters. Requirement 1.1 of the PCI Data Security Standard (DSS), guides through the process of configuring, and maintaining the firewalls, and routers. Requirement 1.1.1 details a formal process for approving, and testing all external network connections, and changes to the firewall configuration. Requirement 1.1.2 needs a current network diagram. All connections to the cardholder data should be clearly documented, including any wireless networks. This diagram needs to remain current at all times. Requirement 1.1.3 states that firewalls need to be implemented at each connection point and between any De-Militarized Zone (DMZ) and the internal network. Finally, Requirement 1.1.8 is less stringent in PCI DSS v1.2 firewall, and router rule sets must be reviewed every 6 months instead of quarterly. Requirement 1.2 focuses on the integrity, and availability of cardholder data. Requirement 1.3 in the DSS focuses on restricting connections between publicly accessible servers and any system component in scope for PCI.

Publisher Summary Payment Card Industry Data Security Standards (PCI DSS) has many requirements that mandate ongoing actions with varying outcomes. Some requirements have documentation outputs that are reviewed during an annual assessment, and other requirements actions are in fact the compliance activity. Finally, some requirements do not have an actual maintenance requirement, but there is documentation that must be updated before an assessment. One of the requirements that need some kind of action was updated for PCI DSS version 1.2. Requirement 1.1.6 formerly required a quarterly review of all firewall, and router rules, and configurations. In version 1.2, the requirement is changed to every 6 months, which means that when an annual assessment is due, one should have documentation from at least two of these reviews. The reviews should be detailed enough to show that an engineer checked every item and validated that it was still needed. Requirement 3.1 mandates creating retention requirements for cardholder data. It has a quarterly requirement to purge old data by way of manual review or automated disposal process.

This chapter discusses the concepts of augmentations and mashups. Object augmentation is simple in theory—instead of designing a new ubiquitous computing device from scratch, a non-digital object is taken and information processing is added to it. The new device is much like the old device, but now with new behaviors. Mashups are a powerful method to quickly prototype new ubicomp user experiences. As such, they are a useful design technique. More important, they represent a new way to conceptualize the creation of new user experiences. Every thing, every old router and slow social network, becomes a potential building block. Combining the power of such services on the Web with dedicated sensing and display devices in the world gives a taste of the deep possibilities of this technique.

Nowadays, high performance System and Local Area Networks (SAN/LAN) have to serve heterogeneous traffic consisting of information flows with different bandwidth and latency requirements. This makes it necessary to provide Quality of Service (QoS) and optimize the design of network components. In this paper we present a hardware tool designed to analyze the performance of QoS networks, under given traffic conditions and server models. In particular, a reprogrammable multimedia traffic Generator/Monitor platform has been built. This permits prototyping the communication system of a high speed LAN/SAN on a single FPGA device. Hence, it can be used at design to produce more efficient devices. To illustrate the applicability of the platform we have used the Simple Multimedia Router (SMMR), an existing proposal to provide QoS. The modular structure of the tool and the fact that it has been implemented on an FPGA using a high level hardware programming language makes it flexible, scalable and easy to reconfigure. Besides, the architecture and implementation can be adapted to be used in more recent QoS NoC environments. © 2010 Elsevier B.V. All rights reserved.

Wireless technologies are rapidly evolving and the users are demanding the possibility of changing their point of attachment to the Internet (i.e. Access Routers) without breaking the IP communications. This can be achieved by using Mobile IP or NEMO. However, mobile clients must forward their data packets through its Home Agent (HA) to communicate with its peers. This sub-optimal route (lack of route optimization) considerably reduces the communications performance, increases the delay and the infrastructure load. In this paper, we present fP2P–HN, a Peer-to-Peer-based architecture that allows deploying several HAs throughout the Internet. With this architecture, a Mobile Node (MN) or a Mobile Community Network (i.e. a NEMO) can select a closer HA to its topological position in order to reduce the delay of the paths towards its peers. fP2P–HN uses a Peer-to-Peer network to signal the location of the different HAs. Additionally, it uses flexible HAs that significantly reduce the amount of packets processed by the HA itself. The main advantages of the fP2P–HN over the existing ones are that it is scalable, it reduces the communications delay and the load at the HAs. Since one of the main concerns in mobility is security, our solution provides authentication between the HAs and the MNs. We evaluate the performance of the fP2P–HN by simulation. Our results show that the fP2P–HN is scalable since the amount of signalling messages per HA does not increase, even if the number of deployed HAs increases. We also show that the average reduction of the communication’s delay compared to Mobile IP/NEMO is 23% (with a minimum deployment) and the reduction of the load at the HA is at least 54%. TRUE pub

This chapter discusses how nonvolatile data from a router can be collected for digital forensic investigation. Performing a forensic analysis on nonvolatile data on a router can reveal valuable information, but one must understand that the nonvolatile data may not represent the actual running configuration that was in operation at the time of the incident. If the router was rebooted since the incident occurred, the running configuration was overwritten by the startup configuration. Before connecting to the Cisco Router, one should interview the POC (Point of Contact) to gain an understanding of the incident, define incident response plan, examine the copies of collected evidence, and analyze them. One can connect to a Cisco router to collect its nonvolatile data through the console or AUX port and over the network using Telnet, Secure Shell (SSH), Hypertext Transfer Protocol (HTTP), or Hypertext Transfer Protocol over Secure Sockets Layer (HTTPS). While collecting nonvolatile data from a router, one should first gather data such as time, file system layout, and version information. An MD5 hash should be created using the router's MD5 command to verify that the copied files are exact duplicates of those that exist on the router. All printed copies should be authenticated with the date, time, and signature. The chapter explains how nonvolatile router data gathered from a Cisco router can be analyzed.

This chapter reviews the architecture of the Carrier Routing System (CRS), 12000, 7600, and Aggregation Services Router ASR1000 series router platforms. These platforms represent the best of core, Ethernet, and edge routers available to service providers building a high performance, highly available network infrastructure. It also presents an overview of the chassis, line card options, architecture, switch fabric, and QoS implementation. The Carrier Routing System (CRS) is Cisco’s next-generation core router family. The CRS platform is a carrier-grade, fully distributed, modular architecture that can be a standalone router, starting with 640 gigabits for second (Gbps) capacity through to a multishelf system, interconnecting through a central switch fabric shelf, providing capacity up to 92 terabits per second (Tbps). There are three basic chassis options available in the CRS series: the CRS-4/S, CRS-8/S, and CRS-16/S. There is also a multichassis option available, enabled by a dedicated switch fabric shelf called the CRS-Multi-Chassis (MC), to extend the total throughput capacity to 92 Tbps.

Publisher Summary With the incredible advance of the Internet, it has become more and more popular to set up virtual private networks (VPNs) within organizations. VPNs have been around for many years and have branched out into more and more varieties. A VPN is a set of tools which allow networks at different locations to be securely connected, using a public network as the transport layer The key to this technology is the ability to route communications over a public network to allow access to office servers, printers, or data warehouses in an inexpensive manner. As high-speed Internet has grown and become prevalent throughout the world, VPNs over the public Internet have become common. Not all VPNs had security in the early days. Packets of information are transmitted as clear text and can be easily seen. To keep the network systems secure, the information must be encrypted. Throughout the past 20 years, different encryption schemes have gained and lost favor. Some are too easy to break with the advanced speed of current computers; others require too much processing power at the router level, thus making their implementation expensive.

Publisher Summary This chapter presents some common command interface line shell (CLISH) configuration commands one might find in using on a day-to-day basis. When configuring interfaces, one must know the IP address and netmask of each interface one plan on using. Physical interfaces exist for each physical port on a network interface controller installed on the appliance. Before assigning IP address to an interface, one must configure the physical interface. This is done using the set interface phys_if_name command. When a physical interface is installed, the system automatically creates a corresponding logical interface. The add/set interface command, and its arguments, can be used to create and configure the logical interfaces on the Nokia appliance. Advanced tuning options are available from the CLISH interface, which lets adjust the way ones Nokia appliance handles sequence validation, maximum segment size for Transmission Control Protocol, and the stripping of the router alert IP option before passing packets to the firewall.

This chapter discusses how Cisco routers operate so that one can navigate through them efficiently and be able to get desired router information for forensic analysis. Connecting to the router is necessary to examine routers for information contained in them. There are many modes when it comes to Cisco routers and switches. It is very important to pay attention to the details as each mode has different commands and there are distinctive subtleties regarding the displayed prompts. Different modes affect one's ability to gain access to the router's information and issue commands. Routing protocols set up the rules (protocols) that permit the exchange of routing and data information. A router takes all the static and dynamic routing information it knows about and then selects the best route based on a number of criteria. Directly connected routes and static routes usually are at the top of the list. These are followed by efficient routing protocols that use many factors to best choose a route, followed by some that are not so slick and make semidecent route selections. Interior and exterior routing protocols dictate how the router will behave in terms of routing within an autonomous system as well as outside to join them together. Backing up configuration files is a required fundamental skill for Cisco router administrators and technicians. This ability also transfers to router forensic roles, too. Restoring Cisco config files is part of network defense when it comes to ensuring that the files are in the state they are expected to be in and when baselining the router to a working condition.

Router administrative connections can be made using several methods that include direct connection to the console port, a modem connection made to the auxiliary port, a Telnet connection made to a management interface of the router, a Hypertext Transfer Protocol (HTTP) connection to the Web interface, or through the Secure Shell (SSH) connection. HyperTerminal is one of the most widely used terminal emulation packages used by Windows user to configure Cisco equipment. HyperTerminal can be used for direct console connections to Cisco equipment or for Telnet access to Cisco equipment. HyperTerminal is very easy to configure. There are three main administrative modes on all Cisco devices that include User Exec mode, Privileged Exec mode, and Global Configuration mode. Each mode offers its own set of features and functions such as User Exec mode is the basic mode, which mostly offers the ability to view device usage and to do some basic troubleshooting. Privileged Exec mode offers escalated privileges, in which sensitive information can be viewed such as device configurations. One can also perform tasks that will change the behavior of a device, like enabling debugging options. Global Configuration mode allows changing the configuration of a device.

Publisher Summary This chapter focuses on the quality of service (QoS) applicable in IP communication scenarios and its various mechanisms and protocols. One of the approaches to provide QoS for real-time communications has traditionally been, and still is, to overdimension IP networks. The approaches to QoS in IP networks are independent of the application layer and occur at the IP level. Two additional models to deliver QoS in the IP architecture have been developed, which include integrated services (intserv) and differentiated services (diffserv). The integrated services approach is based on having the IP routers give preferential treatment to some IP flows over others, and to implement a preferential treatment for some flows, IP routers incorporate a couple of new functions, the classifier and the scheduler. The integrated services approach also defines two different services, the controlled load service [RFC 2211] and the guaranteed service [RFC 2212]. The differentiated services approach is also based on giving preferential treatment to some packets over others in the routers; however, instead of treating different flows separately, the diffserv approach relies on border routers marking the incoming packets with a tag called DSCP (differentiated services code point). The admission control component, on the other hand, makes the decision to accept or reject the resource reservation request based on two factors, the requester's resource reservation request and the available capacity in the router.