Search

The Covid-19 pandemic has upended the way we work, raising challenges but also rapidly accelerating the adoption of digital technologies to facilitate remote work. Although remote work poses certai...

Remote interaction and manipulation of physical objects is one of the promising directions in networked services across the connected world. In formalizing an enabling architecture, the IEEE P1918.1 Standard for the Tactile Internet (TI) is being developed to outline tactile interactions and democratizing skills. For the Tactile Internet to become a reality, advancements in network technologies, orchestrated with haptic-technologies and artificial intelligence, are necessary. The standardization of 5G, rolling out as the next generation of mobile communications, is paving the way for supporting the Tactile Internet vision. The IEEE P1918.1 Working Group (WG) has been developing the architecture, objectives, reasoning and future use cases of the Tactile Internet. This paper focuses on the potential for enabling TI-based remote surgery, and introduces a specific use case (cholecystectomy) that is mapped to the IEEE P1918.1 standard reference architecture. Challenging issues such as network design, Quality of Service (QoS), and multiplexing are taken into account and discussed. This work also emphasizes the role of deterministic message exchanges that would support Tactile Internet in carrying out a remote operation.

Introduction. The internet network of things, objects and devices connected to the internet is growing exponentially, due to the fact that the deployment and design of equipment has been carried out in a very diversified way, since there is no Internet standard for IoT things, so it has become cumbersome control and management of computer security in the networks connecting devices to the Internet of things. Objective. To propose the development of a standard protocol for the internet of things, considering the specifications of the existing devices and the current communication technologies, such as those that are in the deployment stage based on 5G.Based on the standard internet protocol of things, a methodology of risk management and IT security for IoT devices is proposed. Materials and methods. A generalized methodology is proposed, which combines good praxis to manage the risks in a system of connection of intelligent objects to the internet of things, reviewing the main factors of the security of the IoT connection system.

The IEEE Tactile Internet Standards Working Group (WG), designated the numbering IEEE P1918.1, undertakes pioneering work on the development of standards for the Tactile Internet. This chapter describes the WG, its intentions, its developing baseline standard, and the associated reasoning behind that, and touches on a further standard already initiated under its scope: IEEE P1918.1.1 on the Haptic Codecs for the Tactile Internet.

While initially conceived as a system for cryptocurrency transactions' validation among untrusted parties, blockchain technology has gained momentum as a tool that can theoretically be applied to many domains beyond the intended one. Among these domains, one of the biggest and most promising is the Internet of Things. The IEEE 1931.1 WG is currently working on the definition of an Internet standard for technical and functional interoperability of federated IoT systems for Real-Time Onsite Operations Facilitation (ROOF) that operate and function in a secure, semi-autonomous, and decentralized manner. Blockchain technology can play a key role in accomplishing this goal. In this article, after discussing the use of blockchain technology in the IoT, the architectural framework as well as the use of blockchain technology in the IEEE 1931.1 standard are discussed in terms of advantages brought, criticalities, and future improvements that are necessary for fruitful deployment within ROOF.

The importance of secure development of new technologies is unquestioned, yet the best methods to achieve this goal are far from certain. A key issue is that while significant effort is given to evaluating the outcomes of development (e.g., security of a given project), it is far more difficult to determine what organizational practices result in secure projects. In this paper, we quantitatively examine efforts to improve the consideration of security in Requests for Comments (RFCs)--- the design documents for the Internet and many related systems --- through the mandates and guidelines issued to RFC authors. We begin by identifying six metrics that quantify the quantity and quality of security informative content. We then apply these metrics longitudinally over 8,437 documents and 49 years of development to determine whether guidance to RFC authors changed these security metrics in later documents. We find that even a simply worded --- but effectively enforced --- mandate to explicitly consider security created a significant effect in increased discussion and topic coverage of security content both in and outside of a mandated security considerations section. We find that later guidelines with more detailed advice on security also improve both volume and quality of security informative content in RFCs. Our work demonstrates that even modest amounts of guidance can correlate to significant improvements in security focus in RFCs, indicating a promising approach for other network standards bodies.

The development and adoption of new protocols (or of extensions to existing protocols) is arguably central to the Internet’s evolution. However, and in spite of over 40 years of experience with this process, we have limited understanding of what factors may contribute to a protocol’s success. A sound technical design and a well-grounded purpose are obviously important, but we have many examples of failures that met those two criteria. What other factors affect a protocol’s likelihood of success, and under what circumstances? We investigate this question through a statistical approach, based on analyzing a set of about 250 Internet standard documents, Internet engineering task force request for comments (RFCs). We characterize these RFCs using a number of key features, which we then seek to associate with positive or negative odds when it comes to success. Our high-level results are intuitive, e.g., protocols that call for Internet-wide adoption face greater challenges. Focusing on more targeted subsets of protocols reveals more subtle and possibly more interesting differences between areas of the Internet landscape. We also apply our prediction framework to IPv6, and use different “what-if” scenarios to explore what might have affected its deployment.

Live VM Migration allows a running virtual machine or service to be moved from one host to another without the need to be shut down. This critical process offers many benefits for Internet services, including load balancing and service availability especially during host maintenance. Nevertheless, VM migration has been limited to layer 2 environments where the VM’s IP address can be migrated with the VM. This is because the IP address must remain reachable after the migration. This necessarily restricts the ability to migrate VMs, limiting their potential and utility.In this paper, we show how a new Internet standard, Multi-Path TCP, can be used to seamlessly migrate live VMs across WAN boundaries. This allows services to migrate closer to their clients while preserving active TCP connections, improving performance, responsiveness, and user engagement. We show this by designing and implementing LSM-MPTCP, a system for VM Migration over the WAN. We demonstrate how our approach can improve throughput and latency in a real cloud environment, achieving throughput improvements up to 6 times and reducing round-trip times by 99%. We also expose subtle networking issues related to migration that can heavily affect loss rates.

The global energy Internet standard support system plays a vital role in global energy interconnection. However, the system brings convenience to the global energy interconnection and introduces new security issues. Due to the diversity of users, the complexity of the environment and the internationalization, there will be more and more malicious network intrusions from outside and inside. The security system of the global energy Internet standard support system faces great challenges. To this end, this paper proposes a security architecture that combines active and passive, establishing a chain of trust between the active security architecture and the passive security architecture, ensuring a new security architecture, a security organization framework, a security policy framework, a security operation framework, and a closed-loop system that integrates the security technology framework. A deep learning algorithm was introduced for network intrusion learning to achieve sustainable management of the information security life cycle. The combination of active and passive security systems and continuous monitoring strategies based on deep learning fully ensure the security of the global energy Internet standard support system.

In June 1992, the Internet Activities Board sought to push the Internet Engineering Task Force into a solution for the Internet's address depletion problem. Its actions provoked a management crisis that forced a restructuring of the Internet standards governance process. Although the events have been characterized as a revolt by the Internet Engineering Task Force, this article revisits the preceding five years to show that the IETF, at least initially, sought to avoid the crisis.

These updates to RFC 5280 provide alignment with the 2008 specification for Internationalized Domain Names (IDNs) and add support for Internationalized Email Addresses in X.509 Certificates.

Web service has become irreplaceable for service-oriented application in both academia and industry in recent years. Quality of Service (QoS) is used to describe the nonfunctional characteristics of Web service. Identifying Web service QoS is crucial for service-oriented application designers because service users may obtain very different QoS performance of the same service in the client-side due to dynamic changes of Internet environment as well as user context. However, evaluating QoS performance of a large scale of Web services requires considerable time and resources in real-world. Existing methods can make a personalized prediction for average QoS values by employing historical data but fail to take into consideration the fluctuation feature of Web service QoS values. To address this issue, this paper proposes a novel method for personalized QoS prediction of dynamic Web Services. First, a novel approach is used to extract feature points of QoS sequences and dynamic time warping distance is used to compute the similarity instead of Euclidean distance. By finding the most similar QoS sequences of the target QoS sequence, the missing QoS values can be predicted without extra Web services invoking. To validate our method, we conduct a large number of experiments based on real-world Web service QoS data set. The experimental studies show that our method has higher accuracy rate compared with the existing methods.

The accuracy and diversity of recommendation algorithms have always been the research hotspot of recommender systems. A good recommender system should not only have high accuracy and diversity, but also have adequate robustness against spammer attacks. However, the issue of recommendation robustness has received relatively little attention in the literature. In this paper, we systematically study the influences of different spammer behaviors on the recommendation results in various recommendation algorithms. We further propose an improved algorithm by incorporating the inner-similarity of user’s purchased items in the classic KNN approach. The new algorithm effectively enhances the robustness against spammer attacks and thus outperforms traditional algorithms in recommendation accuracy and diversity when spammers exist in the online commercial systems.

Diabetes self-management education is a cornerstone of successful diabetes management. Various methods have been used to reach the increasing numbers of patients with diabetes, including Internet-based education. The purpose of this article is to review various delivery methods of Internet diabetes education that have been evaluated, as well as their effectiveness in improving diabetes-related outcomes.Literature was identified in the Cumulative Index to Nursing and Allied Health Literature (CINAHL), PubMed, Medline, EBSCO, the Cochrane Library, and the Web of Science databases through searches using the following terms: "type 2 diabetes AND internet/web based AND education" and "type 2 diabetes AND diabetes self-management education (DSME) AND web-based/internet OR technology assisted education." The search was limited to English language articles published in the last 10 years. The search yielded 111 articles; of these, 14 met criteria for inclusion in this review. Nine studies were randomized controlled trials, and study lengths varied from 2 weeks to 24 months, for a total of 2,802 participants.DSME delivered via the Internet is effective at improving measures of glycemic control and diabetes knowledge compared with usual care. In addition, results demonstrate that improved eating habits and increased attendance at clinic appointments occur after the online DSME, although engagement and usage of Internet materials waned over time. Interventions that included an element of interaction with healthcare providers were seen as attractive to participants.Internet-delivered diabetes education has the added benefit of easier access for many individuals, and patients can self-pace themselves through materials. More research on the cost-benefits of Internet diabetes education and best methods to maintain patient engagement are needed, along with more studies assessing the long-term impact of Internet-delivered DSME.

In developing countries, government agencies focus its transportation system developments on building more roads and bridge structures to alleviate the traffic, undermining the idea of using Intelligent Transportation Systems to maximize the capacity of existing infrastructure. When the public sectors perform poorly in managing traffic, a decentralized traffic management approach seems to be more appropriate. The vehicle-to-vehicle and vehicle-to-any communication systems are among the top choices in the decentralized system. Despite the potential benefits of V2V and V2X communication applications, there are many challenges in implementing them in developing countries. We identified the obstacles in various aspects and then designed the system within the framework of such constraints. Also, we envisioned the deployment of small, commercially available off-the-shelf routers which rely on open Internet standards, and used one or more unlicensed frequencies followed by setting a simple experiment up. We have successfully demonstrated that V2V mobile routers can be built from commodity components which are available in developing countries without depending on regulated radio frequencies hence achieving the freedom to use these V2V mobile routers almost everywhere. Since smart devices such as Smartphones and tablets can connect to the proposed mobile routers, there are endless possibilities to develop useful applications.

IEEE Internet Computing, 21 (2), ISSN:1089-7801, ISSN:1941-0131

Capitalizing on the latest developments in 5G and ultra-low delay networking as well as Artificial Intelligence (AI) and robotics, we advocate here for the emergence of an entirely novel Internet which will enable the delivery of skills in digital form. We outline the technical challenges which need to be overcome to enable such a vision, i.e., on the development of a 5G Tactile Internet, standardized haptic codecs, and AI to enable the perception of zero delay networks. The paper is concluded with an overview on the current capabilities, and the standardization initiatives in the IEEE 5G Tactile Internet standards working group as well as the IEEE 5G Initiative.

Internet protocols spread to potential adopters through several successive phases of implementation, commercialization, acquisition, and adoption of the protocol. This process of protocol deployment involves several stakeholders and varies depending on the deployment environment and the protocol in question. This complexity and the lack of comprehensive measurement studies call for a further conceptualization of measuring protocol diffusion along the whole deployment process. Therefore, this article develops a framework for measuring the deployment of Internet protocols, consisting of deployment steps, deployment models, deployment measures, and data sources. The measures are further linked to each other through deployment gaps and delays. In order to demonstrate the framework, it is used to assess how a set of pre-installed protocols spread in the Finnish mobile market. The framework highlights the differences between the deployment models and the importance to use both the deployment measures and gaps in the analysis of protocol success. Furthermore, the illustrative results indicate that protocol deployment is driven by applications, and show the existence of large deployment gaps between the protocol possession and usage. The results are relevant especially to researchers interested in holistically analyzing protocol deployment and protocol developers for measuring and improving the success of their protocols.

International audience; The TLS Internet Standard, previously known as SSL, is the default protocol for encrypting communications between clients and servers on the Web. Hence, TLS routinely protects our sensitive emails, health records, and payment information against network-based eavesdropping and tampering. For the past 20 years, TLS security has been analyzed in various cryptographic and programming models to establish strong formal guarantees for various protocol configurations. However, TLS deployments are still often vulnerable to attacks and rely on security experts to fix the protocol implementations. The miTLS project intends to solve this apparent contradiction between published proofs and real-world attacks, which reveals a gap between TLS theory and practice. To this end, the authors developed a verified reference implementation and a cryptographic security proof that account for the protocol's low-level details. The resulting formal development sheds light on recent attacks, yields security guarantees for typical TLS usages, and informs the design of the protocol's next version.

The debate on whether and how the Internet can protect and foster human rights has become a defining issue of our time. This debate often focuses on Internet governance from a regulatory perspective, underestimating the influence and power of the governance of the Internet’s architecture. The technical decisions made by Internet Standard Developing Organisations (SDOs) that build and maintain the technical infrastructure of the Internet influences how information flows. They rearrange the shape of the technically mediated public sphere, including which rights it protects and which practices it enables. In this article, we contribute to the debate on SDOs’ ethical responsibility to bring their work in line with human rights. We defend three theses. First, SDOs’ work is inherently political. Second, the Internet Engineering Task Force (IETF), one of the most influential SDOs, has a moral obligation to ensure its work is coherent with, and fosters, human rights. Third, the IETF should enable the actualisation of human rights through the protocols and standards it designs by implementing a responsibility-by-design approach to engineering. We conclude by presenting some initial recommendations on how to ensure that work carried out by the IETF may enable human rights.

Heterogeneity in constrained networks and gateways is perhaps one of the single greatest challenges facing end-to-end management of devices and networks in the IoT. Today, the Lightweight M2M (LWM2M) protocol, leveraged on open Internet standards, has become a strong contender for REST-based IoT management. However, significant challenges exist for remote gateway management, particularly for proxies and exposing proprietary or vendor-specific operations. This paper presents some effective solutions in LWM2M for overcoming these challenges, using object modelling and linking. The presented approaches are also validated with prototypes.

In this paper, we introduce the first fully implemented two-way authentication security scheme for the Internet of Things (IoT) based on existing Internet standards, specifically the Datagram Transport Layer Security (DTLS) protocol. By relying on an established standard, existing implementations, engineering techniques and security infrastructure can be reused, which enables easy security uptake. Our proposed security scheme is therefore based on RSA, the most widely used public key cryptography algorithm. It is designed to work over standard communication stacks that offer UDP/IPv6 networking for Low power Wireless Personal Area Networks (6LoWPANs). Our implementation of DTLS is presented in the context of a system architecture and the scheme's feasibility (low overheads and high interoperability) is further demonstrated through extensive evaluation on a hardware platform suitable for the Internet of Things.

In order to achieve the vision of sensor web, an oriented sensor web framework based on web services is presented in this paper. It provides a mechanism that varied sensor networks or devices can be connected to the framework. End-users can access sensor networks and integrate the sensor to their special applications through a stack of Internet standard protocols.

With increasing societal dependence on the Internet and new application areas emerging, the need for securing communications and identifying communication partners is expected to increase. However, the original Internet architecture is lacking these functionalities, and most of the protocols proposed to fix these issues have not been widely deployed. Often one of the reasons for such failure is that protocol designers have insufficient understanding of the potential adopters' economic incentives so one may end up designing protocols based on false or inaccurate assumptions. In this paper, we analyze the Host Identity Protocol (HIP) from this viewpoint. Based on 19 expert interviews, we identify six main reasons why HIP has not been widely deployed yet. Most importantly, (1) the demand for the functionalities of HIP has been low. Where demand would have existed, substitute solutions have been favored because (2) they were earlier on the market, (3) they have relative advantage due to some design choices of HIP, (4) HIP lacks early adopter benefits necessitating costly coordination among multiple stakeholders in public deployment scenarios, and (5) people have misconceptions about the deployability of HIP. Additionally, (6) the research-mindedness of HIP developers has lead to strategic mistakes and non-optimal design choices from the perspective of deployment. We also suggest strategies that HIP developers could take to foster the adoption of HIP. Besides providing value to HIP developers, the results propose some new adoption barriers and deployment strategies that could be taken into account when designing new protocols. Finally, the article also provides a template that could be followed when studying the feasibility of other protocols.

Mobile technology is revolutionizing the way companies do business, by improving business processes, increasing productivity and enhancing customer experience. Hence the need to manage/monitor the mobile phones has never been higher. Simple Networking Management Protocol (SNMP), is an internet standard protocol for managing IP devices on a network. Devices that typically support SNMP include routers, switches, servers, workstations, printers, modem racks and more. No doubt then, SNMP must be used to monitor smart phone devices for conditions that warrant administrative attention. In this paper we talk about 1. Building one of the very first SNMP Agents for Android Operating System implementing SNMP version I, II and III, 2. The results after performing benchmark tests on the SNMP Agent and measuring its performance on the phone and in challenging networks like 2G and 3G.

Internet standards development requires consideration of security issues in the protocols. But what does “security” mean in this context? We often conflate several different aspects into the blanket term “security.” Here, the author looks at some of these aspects separately.

Grid technology has emerged as an important new field, distinguished from conventional distributed computing by its focus on large-scale resource sharing, innovative applications, and, in some cases, high-performance orientation. To date, grid technology has been effectively put to use in academic and research institutions to power high-performance and technical computing applications. Grid technology is increasingly being viewed as the next phase of distributed technology. Built on pervasive Internet standards, grid technology enables organizations to share computing and information resources across department and organizational boundaries in a secure, highly efficient manner. Organizations around the world are utilizing grid technology today in such diverse areas as collaborative scientific research, drug discovery, financial risk analysis, and product design. Grid technology enables research-oriented organizations to solve problems that were infeasible to solve due to computing and data-integration constraints. Grids also reduce costs through automation and improved IT resource utilization. Finally, grid technology can increase an organization’s agility enabling more efficient business processes and greater responsiveness to change.

The era of the Internet presents new dilemmas in educating psychiatrists about professional boundaries. The objective of this overview is to clarify those dilemmas and offer recommendations for dealing with them.The characteristics of social networking sites, blogs, and search engines are reviewed with a specific focus on their potential to present problems of professional boundaries for psychiatrists.The professional boundary questions that have arisen in the expanded world of online communication can be subdivided into three areas: ethical concerns, professionalism issues, and clinical dilemmas. Only the first category involves true boundary problems as normally defined.The expansion of the Internet has redefined traditional areas of privacy and anonymity in the clinical setting. Guidelines are proposed to manage the alteration of professional boundaries, as well as issues of professionalism and clinical work, that have arisen from the complexities of cyberspace. The author discusses implications for residency training.

We examined the feasibility of home videoconferencing for providing cancer genetic education and risk information to people at risk. Adults with possible hereditary colon or breast and ovarian cancer syndromes were offered Internet-based counselling. Participants were sent web cameras and software to install on their home PCs. They watched a prerecorded educational video and then took part in a live counselling session with a genetic counsellor. A total of 31 participants took part in Internet counselling sessions. Satisfaction with counselling was high in all domains studied, including technical (mean 4.3 on a 1–5 scale), education (mean 4.7), communication (mean 4.8), psychosocial (mean 4.1) and overall (mean 4.2). Qualitative data identified technical aspects that could be improved. All participants reported that they would recommend Internet-based counselling to others. Internet-based genetic counselling is feasible and associated with a high level of satisfaction among participants.

Many efforts in past years have been made to lower the linguistic barriers for non-native English speakers to access the Internet. Internet standard RFC 3490, referred to as IDNA (Internationalizing Domain Names in Applications), focuses on access to IDNs (Internationalized Domain Names) in a range of scripts that is broader in scope than the original ASCII. However, the use of character variants that have similar appearances and/or interpretations could create confusion. A variant IDL (Internationalized Domain Label), derived from an IDL by replacing some characters with their variants, should match the original IDL; and thus a variant IDN does. In RFC 3743, referred to as JET (Joint Engineering Team) Guidelines, it is suggested that zone administrators model this concept of equivalence as an atomic IDL package. When an IDL is registered, an IDL package is created that contains its variant IDLs generated according to the zone-specific Language Variant Tables (LVTs). In addition to the registered IDL, the name holder can request the domain registry to activate some of the variant IDLs, free or by an extra fee. The activated variant IDLs are stored in the zone files, and thus become resolvable. However, an issue of scalability arises when there is a large number of variant IDLs to be activated. In this article, the authors present a resolution protocol that resolves the variant IDLs into the registered IDL, specifically for Han character variants. Two Han characters are said to be variants of each other if they have the same meaning and are pronounced the same. Furthermore, Han character variants usually have similar appearances. It is not uncommon that a Chinese IDL has a large number of variant IDLs. The proposed protocol introduces a new RR (resource record) type, denoted as VarIdx RR, to associate a variant expression of the variant IDLs with the registered IDL. The label of the VarIdx RR, denoted as the variant index, is assigned by an indexing function that is designed to give the same value to all of the variant IDLs enumerated by the variant expression. When one of the variant IDLs is accessed, Internet applications can compute the variant index, look up the VarIdx RRs, and resolve the variant IDL into the registered IDL. The authors examine two sets of Chinese IDLs registered in TWNIC and CNNIC, respectively. The results show that for a registered Chinese IDL, a very small number of VarIdx RRs, usually one or two, are sufficient to activate all of its variant IDLs. The authors also represent a Web redirection service that employs the proposed resolution protocol to redirect a URL addressed by a variant IDN to the URL addressed by the registered IDN. The experiment results show that the proposed protocol successfully resolves the variant IDNs into the registered IDNs.

Standards-development organizations (SDOs) comprise participants from large and small companies, academia, and the open source community. The participants come with varying backgrounds with regard to copyright and patents in the areas that are being standardized, and the SDOs must deal with these issues in ways that both satisfy the participants (and their employers) and result in useful standards. Each SDO - including the IEEE - has its own intellectual property (IP) policy. This issue, we look at how the IETF handles IP, in an overview cowritten by an attorney who has represented the IETF for some years and the current IETF Chair.

With the explosion of the World Wide Web and email the 32-bit addresses Internet Protocol version 4 used would run out in the not-so-distant future. In 1994, the Internet Engineering Task Force (IETF) established a working group to define the successor to IPv4, IPv6. In March 2008 the US government issued a memorandum requiring that by June 2008 "all agencies" infrastructure must be using IPv6. This article provides the rationale for the US government's edict, along with the technical features that distinguish IPv6 from its predecessor, IPv4.

Genome studies have revolutionised cancer research in recent years as high-throughput technologies can now be used to identify sets of genes potentially related with different processes in cancer. However, managing all this data and organising it into useful datasets is still a challenge in the bioinformatics field. Finding relationships between the molecular and genomic information and the clinical information available, within the medical informatics domain, is currently driving the development of translational research in biomedicine. The dispersion and complexity of the molecular information, the poor adherence to standards, together with the fast evolution of the experimental techniques, pose obvious challenges for the development of integrated molecular resources. In parallel, restricted access to medical information together with the gaps in the development of standard terminologies are typical limitations in the area of medical informatics. The development of research projects combining medical and molecular information together with the current efforts to standardise and integrate databases and terminologies are described in this review as a demonstration of the fruitful activity in this area.

Internet standards allow hardware and software from different sources to interoperate, and we can do virtually nothing on the internet without them. Here, Standards' new department editor discusses Internet standards in general, giving a brief overview of why they're necessary. He then delves into specific standards for email that aim to reduce spammers' ability to lie about who sent an email message (spoofing) - the Sender Policy Framework, Sender ID, and Domain Keys Identified Mail.

Image-data transmission from one site to another through public network is usually characterized in term of privacy, authenticity, and integrity. In this paper, we first describe a general scenario about how image is delivered from one site to another through a wide-area network (WAN) with security features of data privacy, integrity, and authenticity. Second, we give the common implementation method of the digital imaging and communication in medicine (DICOM) image communication software library with IPv6/IPv4 for high-speed broadband Internet by using open-source software. Third, we discuss two major security-transmission methods, the IP security (IPSec) and the secure-socket layer (SSL) or transport-layer security (TLS), being used currently in medical-image-data communication with privacy support. Fourth, we describe a test schema of multiple-modality DICOM-image communications through TCP/IPv4 and TCP/IPv6 with different security methods, different security algorithms, and operating systems, and evaluate the test results. We found that there are tradeoff factors between choosing the IPsec and the SSL/TLS-based security implementation of IPv6/IPv4 protocols. If the WAN networks only use IPv6 such as in high-speed broadband Internet, the choice is IPsec-based security. If the networks are IPv4 or the combination of IPv6 and IPv4, it is better to use SSL/TLS security. The Linux platform has more security algorithms implemented than the Windows (XP) platform, and can achieve better performance in most experiments of IPv6 and IPv4-based DICOM-image communications. In teleradiology or enterprise-PACS applications, the Linux operating system may be the better choice as peer security gateways for both the IPsec and the SSL/TLS-based secure DICOM communications cross public networks.

Besides the opportunities offered by the all-embracing Internet of Things (IoT) technology, it also poses a tremendous threat to the privacy of the carriers of these devices. In this work, we build upon the idea of an RFID-based IoT realized by means of standardized and well-established Internet protocols. In particular, we demonstrate how the Internet Protocol Security protocol suite (IPsec) can be applied in a privacy-aware manner. Therefore, we introduce a privacy-aware mutual authentication protocol compatible with restrictions imposed by the IPsec standard and analyze its privacy and security properties. With this work, we show that privacy in the IoT can be achieved without proprietary protocols and on the basis of existing Internet standards.

In the past, only major Internet players such as Amazon, eBay, and Google were interested in deploying large-scale Web services. However, this is changing rapidly as all sorts of companies and governmental organizations are suddenly looking toward Web services as a platform that might support a wide range of demanding applications. This emerging trend presents developers with a new challenge: building Web services solutions that scale. In a nutshell, a scalable system is one that can flexibly accommodate growth in its client base. Such systems typically run on a clustered computer or in a large data center and must be able to handle high loads or sudden demand bursts and a vast number of users. They must reliably respond even in the event of failures or reconfiguration. Ideally, they're self-managed and automate as many routine services such as backups and component upgrades as possible. Many settings also require security against attempted intrusions and distributed denial-of-service (DDoS) attacks. At a glance, today's Web services standards seem to answer these needs. However, a more probing analysis reveals many critical limitations.

The paper offers a general view of Web-based Training (WBT) as a number of knowledge transfer processes utilizing current and advanced Internet technology to facilitate and speed the flow of knowledge from people possessing that knowledge to people who need to acquire it. The key here is in the use of both conventional and innovative tools compatible with current Internet standards to transfer the knowledge. Thus, the paper introduces an innovative application of Internet technology to acquire, store, structure and transfer different types of human knowledge in a working environment. It starts with a number of typical training scenarios and shows that traditional WBT systems support only most rudimentary ones. It demonstrates a number of concepts and tools necessary in the real training situations. Those tools are bringing together a number of disparate areas, encompassing more than what was traditionally considered simply 'WBT'. The following knowledge transfer processes are discussed: WBT, Web-based tutoring, Web-based mentoring as well as Web-based knowledge mining, Web-based knowledge profiling and Web-based knowledge delivery. These processes were implemented as a number of typical knowledge transfer scenarios (http://coronet.iicm.edu). The scenarios were practically tested and evaluated with hundreds of users in a real industrial environment.

If code is law then standards bodies are governments. This flawed but powerful metaphor suggests the need to examine more closely those standards bodies that are defining standards for the Internet. In this paper we examine the International Telecommunications Union, the Institute for Electrical and Electronics Engineers Standards Association, the Internet Engineering Task Force, and the World Wide Web Consortium. We compare the organizations on the basis of participation, transparency, authority, openness, security and interoperability. We conclude that the IETF and the W3C are becoming increasingly similar. We also conclude that the classical distinction between standards and implementations is decreasingly useful as standards are embodies in code -- itself a form of speech or documentation. Recent Internet standards bodies have flourished in part by discarding or modifying the implementation/standards distinction. We illustrate that no single model is superior on all dimensions. The IETF is not effectively scaling, struggling with its explosive growth with the creation of thousands of working groups. The IETF coordinating body, the Internet Society, addressed growth by reorganization that removed democratic oversight. The W3C, initially the most closed, is becoming responsive to criticism and now includes open code participants. The IEEE SA and ITU have institutional controls appropriate for hardware but too constraining for code. Each organization has much to learn from the others.

This paper describes the authors’ experience with integrating an existing database-driven teaching file with the RSNA (Radiological Society of North America) Medical Imaging Resource Center (MIRC). MIRC is the product of an RSNA-sponsored initiative to enable medical institutions to share their electronic medical content (images, text, and multimedia) by creating a distributed repository accessible from the Internet. An existing database-driven teaching file, developed by the authors and used extensively by the University of California San Francisco (UCSF) Department of Radiology since 1998, was retrofitted to include an interface for handling broadcast queries initiated by a MIRC query service. These queries take place through the exchange of XML documents via HTTP. After all the storage services have responded, the results are collated by the query service and presented to the user. The teaching file and MIRC interface were developed using the 4th Dimension Relational Database Management System (RDBMS). The integration process primarily involved mapping the “MIRCdocument” schema to the teaching file’s schema, translating the actual MIRC query into the internal query language of the database and extending the access control mechanisms of the teaching file to allow public access. A working implementation of the interface required only 3 days of development time, with refinements taking place over several months. Interface development was greatly aided by MIRC’s use of well-established Internet standards. This project has demonstrated the feasibility of implementing a MIRC interface on an existing teaching file server.

AliEn (http://alien.cern.ch) (ALICE Environment) is a Grid framework built on top of the latest Internet standards for information exchange and authentication (SOAP, PKI) and common Open Source components. AliEn provides a virtual file catalogue that allows transparent access to distributed datasets and a number of collaborating Web services which implement the authentication, job execution, file transport, performance monitor and event logging. In the paper we will present the architecture and components of the system.

As more complex security services have been added to today's Internet, it becomes increasingly difficult to quantify their vulnerability to compromise. The concept of "attack surface" has emerged in recent years as a measure of such vulnerabilities, however systematically quantifying the attack surfaces of networked systems remains an open challenge. In this work we propose a methodology to both quantify the attack surface and visually represent semantically different components (or resources) of such systems by identifying their dependencies. To illustrate the efficacy of our methodology, we examine two real Internet standards (the X.509 CA verification system and DANE) as case studies. We believe this work represents a first step towards systemically modeling dependencies of (and interdependencies between) networked systems, and shows the usability benefits from leveraging existing services.

The long-term vision of an Internet of Things (IoT) is approaching reality and leading hardware vendors expect shipment of 50 billion devices in the near future. Emerging Internet standards will enable this huge number of embedded machines to interconnect and cooperate—and raise the challenge of building suitable software environments that provide scalability, reliability, and security at an efficient level. In this paper, we introduce such an approach—a modified actor model and a corresponding runtime environment. In contrast to common tools, it offers a higher level of abstraction to design and program applications for constrained devices, while remaining efficient, reliable, and open to include the security extensions from the agenda of the IETF.

The lack of privacy in P2P systems is an inherent characteristic of their design, as users have to expose their content interests. A variety of solutions have been proposed, offering several levels of protection to its users, from privacy to complete anonymity, but always at the cost of performance. However, most P2P users are reluctant to trade performance for privacy. In this paper we present a novel P2P system that hides user content interest without affecting performance. Our solution uses cover traffic in order to hide the user interests while improving the performance of the system. The cover traffic and performance benefits are provided through several techniques, such as caching, sub-announcing, relaying requests, and creating private swarms. We show that our system hides the real interests of a user from third parties, providing plausible deniability. We describe its design and implement it as an enhancement of the upcoming IETF P2P Streaming Protocol Internet standard. Our solution offers backwards compatibility and can also be integrated in other similar P2P protocols. Analysis of possible attacks shows that only an adversary who controls a very high percentage of the peers in the system can infer the content interest of the user, but even then, without complete certainty. Furthermore, using actual P2P client software, we show that our privacy enhancements do not lead to a performance loss.

The TLS Internet Standard features a mixed bag of cryptographic algorithms and constructions, letting clients and servers negotiate their use for each run of the handshake. Although many ciphersuites are now well-understood in isolation, their composition remains problematic, and yet it is critical to obtain practical security guarantees for TLS. We experimentally confirm that all mainstream implementations of TLS share key materials between different algorithms, some of them of dubious strength. We outline attacks in their handling of resumption and renegotiation, stressing the need to model multiple related instances of the handshake.We study the provable security of the TLS handshake, as it is implemented and deployed. To capture the details of the standard and its main extensions, we rely on miTLS, a verified reference implementation of the protocol. miTLS inter-operates with mainstream browsers and servers for many protocol versions, configurations, and ciphersuites; and it provides application-level, provable security for some.We propose new agile security definitions and assumptions for the signatures, key encapsulation mechanisms (KEM), and key derivation algorithms used by the TLS handshake. By necessity, our definitions are stronger than those expected with simple modern protocols. To validate our model of key encapsulation, we prove that both RSA and Diffie-Hellman ciphersuites satisfy our definition for the KEM. In particular, we formalize the use of PKCS#1v1.5 encryption in TLS, including recommended countermeasures against Bleichenbacher attacks, and build a 3,000-line EasyCrypt proof of the security of the resulting master secret KEM against replayable chosen-ciphertext attacks under the assumption that ciphertexts are hard to re-randomize.Based on our new agile definitions, we construct a modular proof of security for the miTLS reference implementation of the handshake, including ciphersuite negotiation, key exchange, renegotiation, and resumption, treated as a detailed 3,600-line executable model. We present our main definitions, constructions, and proofs for an abstract model of the protocol, featuring series of related runs of the handshake with different ciphersuites. We also describe its refinement to account for the whole reference implementation, based on automated verification tools.

In the last decade several concepts as Teleworking, Teleeducation and Telecooperation have been commonplace in the Internet scenario. Nevertheless, there is a lack of support for speeding up the development of new and specific distance operating applications. In this paper, a Virtual Operating System (VOS) environment is presented, which fills the gap between Internet standard transport protocols and new groupware applications. The VOS exports a public interface offering heterogeneous services as: information sharing, security, distributed transactions on a shared distributed file system, remote administration and dynamic downloading/uploading of Java code within a CORBA environment.

The basis of IoT is in the interconnection and communication between different devices to achieve common goals through internet. These devices are interconnected through a network which enables communication within these devices without any direct human intervention. But with such great potential, this technology reached a road-block due to incompatibility within various manufacturers of the same type of device and proprietary standards. I started this project with this problem in mind and I have created a brand and platform independent machine socialization device manager system. In this paper, to overcome the above mentioned problem, I have utilized micro controllers to connect to various existing device to solve the problem and propose a device to device communication with collaboration management. This technology is not restricted to usage in only the new network module enabled smart devices but also this can be used to operate the existing old (not smart) home appliances. Machine socialization was made possible with the use of XML, (an internet standard schema language) which we have used to gather device, task and relationship information of all the devices to show schema information. Full Text: PDF DOI: http://dx.doi.org/10.11591/ijece.v6i6.13266

The Administrative Simplification Title of the Health Insurance Portability and Accountability Act of 1996 addresses the creation and adoption of nationwide standards for the electronic exchange and confidentiality protection of all individually identified data used in health care administration. The U.S. Department of Health and Human Services (DHHS) is implementing standards under this law. In addition to new standards, the law mandates that the Congress pass a health information privacy bill by August 1999 or that the DHHS adopt privacy protections for health information by February 2000. Published in 2001 by John Wiley & Sons, Ltd.

The Internet provides unprecedented opportunities for interaction and data sharing among health care providers, patients and researchers. However, the advantages provided by the Internet come with a significantly greater element of risk to the confidentiality and integrity of information. This paper defines the basic security requirements that must be addressed in order to use the Internet to safely transmit patient and/or other sensitive Health Care information. It describes a suitable Internet Security Policy for Health Care Establishments and provides the set of technical measures that are needed for its implementation. The proposed security policy and technical approaches have been based on an extensive study of the related recommendations from the security and standard groups both in EU amid USA and our related work and experience. The results have been utilized in the framework of the Intranet Health Clinic project, where the use of the Internet for the transmission of sensitive Health Care information is of vital importance.

The acceleration of change in the telecommunications network environment is presenting a serious challenge to the protection of information. Intranets — internal use of World Wide Web technology — are compelling because use of familiar Internet standards for access also reduces costs. Undoubtedly, one of the major issues for intranets is information security, defined as the protection of information from accidental or intentional loss of availability, integrity, or confidentiality. Organizations providing internal data to external users, such as customers, vendors, consultants, and partners, face further hazards. The Web is designed to be open to everyone so that information can be easily disseminated throughout the world. Security on intra- nets requires control — individual identification and authentication of users along with specific authorization for access to resources. The romance with technology is proceeding at such a rapid pace that there seems to be little time for analysis of control ...