Search

The more integrated networks are with the internet, the more our security concerns grow. Virtual Private Networks (VPNs) have been used to solve the problem of internet security. As more locations need to be securely connected, more configurations and greater complexity are given to a network design. Dynamic Multipoint VPN (DMVPN) was used in this research with some supporting protocols to allow changing of Internet Protocol (IP) addresses of remote locations. It proves to be a very scalable VPN technique with minimal configurations and robustness. Lesser delay between two branches of an organization among other advantages, such as elimination of triangular routing, and dynamic changing IP addresses were achieved.

Today's Internet makes hosts and individual networks inherently insecure because permanent addresses turn destinations into permanent attack targets. This paper describes an Evasive Internet Protocol (EIP), a change to the data plane of the Internet that: 1) prevents senders from forging their identities while preserving the current Internet privacy paradigm; 2) gives recipients full control over who can communicate with them and for how long; 3) achieves the above features without requiring global signaling protocols; and 4) allows coexistence with and graceful introduction into the current Internet. We motivate our approach, present the architectural design, and evaluate it through trace-driven and synthetic simulations as well as prototype testing.

Current host-centric Internet Protocol (IP) networks are facing unprecedented challenges, such as network attacks and the exhaustion of IP addresses. Motivated by emerging demands for security, mobility, and distributed networking, many research projects have been initiated to design the future Internet from a clean slate. In order to obtain a thorough knowledge of security in future Internet architecture, we review a number of well-known projects, including named data networking, Content Aware Searching Retrieval and sTreaming, MobilityFirst Future Internet Architecture Project (MobilityFirst), eXpressive Internet Architecture, and scalability, control, and isolation on next-generation network. These projects aim to move away from the traditional host-centric networks and replace them with content-centric, mobility-centric, or service-centric networks. However, different principles and designs also raise various issues on network security. For each project, we describe its architecture design and how it deals with security issues. Furthermore, we compare these projects and discuss their pros and cons. Open security issues are pointed out for directing future research.

This article surveys one Internet mobility approach that is highlighted by the employment of an identifier namespace. This approach uses identifiers other than traditional IP addresses to name mobile hosts, contents, or other entities, and introduces a mapping function to locate the entities in the global scope. Although this approach has been adopted by many Internet mobility solutions and is also considered as a promising way to support mobility in the future Internet, there lacks a comprehensive review and analysis of this approach together with related solutions, especially the ones proposed in recent years. This article describes the emergence, evolution, and state of the art of the approach, and gives a classification, a review, and a comparison of typical solutions related to the approach. This article also presents discussions of open issues, challenges, and research trends on designing future Internet mobility solutions.

The recent trend of integration among new network services such as the long-term evolution (LTE) based on internet protocol (IP) needs reputable analyses and prediction information on the internet traffic. The IP along with increased internet traffics due to expanding new service platforms such as smartphones will reflect policies such as network QoS according to new services. The establishment of monitoring methods and analysis plans is thus required for the development of internet traffics that will analyze their status and predict their future. The paper with the speed of Internet traffic model is developed for monitoring the state of the experiment and verified. The problem is that the proposed service Internet service provider (ISP) to resolve the conflict between the occurrences can be considerably Internet traffic and that the state of data may be helpful in understanding. The paper advancement policy to reflect the network traffic volume of Internet services and users irradiation with increased traffic due to the development and management of the analysis was carried out experimental measurements.

Internet Protocol (IP) addresses are a crucial resource for the functioning of the Internet. Much like a telephone number, an IP address is assigned to every network interface (router, computer, mobile telephone, server, etc.) that connects to the Internet. These addresses are currently assigned using the fourth version of the Internet Protocol, or IPv4. There are a limited number of addresses that can be assigned using IPv4 and the supply of unallocated addresses is effectively exhausted. This paper (i) identifies key facts and challenges arising from IPv4 address scarcity; (ii) outlines and analyzes potential responses to IPv4 scarcity; and (iii) concludes that a decisive transition from IPv4 to IPv6 is the most durable and effective response to the exhaustion of IPv4 addresses resulting from the growth of the global Internet and the exploding demand for IP addresses.

The Network performance optimization, configuration depends on proper design of complete network. The network layer is concerned with getting packets from source all the way to destination. The packets may cross many networks to reach the destination. To achieve its goals, the network layer must know about the topology, communication subnets and the version of the IP addresses used. Considering the present scenario, we are using IP v4 which needs to communicate with IP v6. The present networks are using only IP version 4 it is necessary to design and deploy certain methods which will help in communicating with the future generation of IP addresses. The present applications are still using IP version 4 to communicate and hence it is necessary to securely migrate them with the latest IP version. We present a secure tunneling mechanism that has some advantages over the other models. The model discussed here can be used to establish hybrid communications between the two different versions of Internet protocol in both ways.

Many of today's devices are internet-enabled with IPv4 internet addresses, exposing them to internet threats. To determine the true scale of vulnerabilities being introduced, particularly in the IPv4 internet address space, a new methodology of scanning the entire IPv4 internet space is required. To improve scanning speeds we created a framework combining fast connectionless port scanners with a thorough and accurate connection-oriented scanner to verify results. The results are stored to a database. This combined framework provides more robust results than current connectionless scanners, yet still scans the IPv4 internet fast enough to be practically usable for mass scanning.

Background/Objectives: Internet of Things (IoT) is going to govern the future world where all devices will be connected with each-other. The expectation with the Internet of Things is that the increase in number of devices going to be truly dramatic. Method: With the increase in the number of devices, the amount of traffic will grow together with data. IoT will have huge number of power sensitive smaller devices and they're going to put significant constraint on the total bandwidth of the system. This paper analyses how 6LoWPAN, a practical developed for resource constrained IP based systems suitable for Internet of Things with respect to Internet Protocol. Findings/Applications: Internet protocols used to be fine-tuned, modified, changed to be able to accommodate the era of Internet of Things. 6LoWPAN has different features like, support for 64 bit or 16-bit addressing, targeted at low power networks including Bluetooth low energy, header compression for IPv base as well as for UDP headers, network auto configuration and neighbor discovery, support for multicast, unicast, and broadcast, supporting the concept of fragmentation. This makes 6LoWPAN a best suited protocol for IoT.

In recent years the increasingly frequent use of the Web service, the advent of the cloud computing, the exponential growing of mobile devices with the introduction of pervasive and ubiquitous computing and the emergence of extreme distributed systems have brought to light the problem of the no longer adequate distribution of data packets over Internet and the related IP protocol issues. This paper promotes flat labels as a real alternative to IP addresses for a future Internet architecture and proposes FLIP as first network layer protocol for flat labels. Among several features absolutely not existing in IP protocol, FLIP has a native support for crypto-currencies.

Change is necessary to update for IPV6 and evolution in Internet is inevitable, ever since the Internet was born. Internet protocols kept on improving and changing dramatically. They expose new challenges and new features. It's high time that our Internet address have to be upgraded as heap of thing around us got upgraded. Internet protocol is currently version 4 and is being upgraded to 6. Internet was once very inaccessible and limited to very few mass, but today it's a primary quill and basic need. Every user has connectivity through various range of devices such as Laptop's, tablet's, desktop's and IOT (Internet of Things). A few decades ago one IP per user was sufficient but now a user with a range of devices needs more than 8 IP's on average. This resulted in exhausting IP at IANA (Internet Assigned Number Authority) and forcing it to update and upgrade to a better version of protocol. Although the new version looks promising, it has to overcome certain challenges of compatibility. IPV6 is similar to IPV4 but it has very significant features it's easy to adopt, but highly irritating for transition. Although for quite a few years many transition techniques are introduced but not all could actually bring a change due to the lack of flexibility and the amount of difficulty involved. This approach not only aid in retaining the present good practices but also supplies the goodies of modern version unless the transition is complete. Nonetheless, even after transition we will have to be able to have the previous generation utilities still being legitimate and not being void. Certain features such as Auto-configuration of IPV6 will build users to mislead ISP and access higher volumes of data at greater than usual speeds they're allotted. Specific blocked sites may be unblocked by connecting to any IP over the globe as a result resulting a deep flaw within the grounds of security. Security is a most important trouble over Internet, because of above flaws very less are ready to adopt this latest IP variant. This paper deals with IPV6 transition in much huge sense, permitting ISP's to keep the existing security principles still valid making internet a long way safer than ever before. This paper presents a software solution to help the transition, it re-addresses the basic needs and finally establishes a feasible solution which still maintains the applicability and maintainability of both systems until the last device upgrades to ipv6 with no compromise to any existing applications or new applications to come. The solution proposed is for ISP's and the backbone providers of internet and not for individual users.

The research community has proposed numerous network security solutions, each dealing with a specific problem such as address spoofing, denial-of-service attacks, denial-of-quality attacks, reflection attacks, viruses, or worms. However, due to the lack of fundamental support from the Internet, individual solutions often share little common ground in their design, which causes a practical problem: deploying all these vastly different solutions will add exceedingly high complexity to the Internet routers. In this paper, we propose a simple generic extension to the Internet, providing a new type of information, called path addresses, that simplify the design of security systems for packet filtering, fair resource allocation, packet classification, IP traceback, filter push-back, etc. IP addresses are owned by end hosts; path addresses are owned by the network core, which is beyond the reach of the hosts. We describe how to enhance the Internet protocols for path addresses that meet the uniqueness requirement, completeness requirement, safety requirement, and incrementally deployable requirement. We evaluate the performance of our scheme both analytically and by simulations, which show that, at small overhead, the false positive ratio and the false negative ratio can both be made negligibly small.

This paper presents a provisional design proposal for the modification of the numbering and address representation of Internet Protocol 4 (IPv4), the Internet address system nearing exhaustion, based on biology. Biologically-inspired designs have been applied in diverse technological fields with varying degrees of successes. The paper proposes the expansion of IPv4 addresses by the concatenation of twelve 8 bit suffixes to each IPv4 address using numbers derived from DNA sequences. The author outlines a design proposal for the modification of the addressing system of the network layer in the TCP/IP hierarchy. This scheme, if deemed possible, could see the creation of at least 6.4 × 10 26 unique addresses and prolong the usefulness of IPv4, beyond the projected operational time frame of ten years.

IP is the primary protocol that establishes the Internet; it is responsible for routing packets across network. IPv4 is the first version of the protocol to be widely deployed. IPv4 uses 4 bytes addresses, which limits the address space to more than 4 billion possible unique addresses. All of network devices construct on the IPv4. While the Internet widely deployed and used. IP addresses are being incrementally delegated to end users, an IPv4 address shortage has been developing. IPv4 addresses were insufficient for the Internet. IPv6 provide 2128 address and provide sufficient IPs for the Internet. But now the software and devices are only supporting IPv4. In this paper, we developed a new UTM appliance. The proposed system considers the integration of IPv4 network and IPv6 network in the Internet.

The next generation protocol (Ipv6) also called Iping, which should replace the current generation of Internet protocol (Ipv4), brings many enhancements over Ipv4. Ipv4 has been a great success for more than 20 years, since its interception in 1980 but due to limited address space, complex configuration and very important lack of security it does not fulfil the requirement of the exponentially growing internet. Because of inadequate address and for other issues, Ipv6 was proposed by the network working group of the internet engineering taskforce (IETF) which provides many new features like quality of services, auto-address configuration, end to end connectivity, security, simple routing header and so on. This paper identifies security holes to the new features introduced in Ipv6 and security holes that are not altered by new futures of Ipv6. Keywords: Ipv4, Ipv6, Ipsec, NAT, TCP/IP, security holes, IP 1. INTRODUCTION The current generation of Internet protocol (IPv4) has been in use for more than 20 years and has not significantly changed since it was introduced in 1981. IPV4 has proven to be robust, interoperable and easily implemented. With Ipv4, options were integrated into the basic Ipv4 header whereas in Ipv6 they are handled as extension headeThe IPV4 specifies a 32 bit IP address field is a key component of the internet infrastructure and have many issues like complex configuration, limited address space, large routing tables, demand for real time data transfer and lack of security which does not fulfil the requirement of the exponential growth of the internet. To eliminate some of the mentioned imperfection, Network-working group of the Internet engineering task force (IETF) proposed a new suite of protocols called the Internet protocol version (IPv6) [1]. Industry stakeholder and Internet experts generally agree that IPv6-based network would be technically superior to the commonly installed base of IPv4-based networks [2]. The IPv6 with 128 bit address space provides large IP addresses and also with classless and auto address configuration features, IPv6 provides a new innovative communication services among the nodes and improved security by using IPsec as a part of packet header. IPv6 provides various improvements over IPv4 like simplicity, large address space, simple routing header format, extension for authentication and privacy, flow labelling capabilities, quality of services (Qos) and very important security at IP level. In addition, through auto configuration and mobility feature of IPv6 nodes on the Internet can communicate in simpler way. However, IPv6 with new features will likely generate newer protocol attacks and IPv4 related attack would morph into new form. Although the IPv6 protocol is still developing, it is fully functional and its implementation and usage in the real network is possible [3]. In section 2, we will discuss the new features introduced in IPv6. In section 3, these features are discussed along with security holes. Section 4 outlines security threats that are common to IPv4. Finally the conclusion will be given.

If the Internet were a ship at sea, the voyage would begin under clear skies and strong winds - through surging tides, the ship's course would be steadfast, with no evidence for alarm. But now a storm approaches, indefatigable in its task to vitiate the Internet. The storm utilizes next-generation Internet (NGI) to proliferate vulnerabilities in mobile wireless communications. An unsafe environment is the eye of the storm. A complete redesign of the Internet Protocol (IP) has already begun, making NGI invariably in- tricate, yet meant for the long term.

The growth of the Internet has brought about many challenges for its critical infrastructure. The DNS infrastructure, which translates mnemonic host names into IP addresses understood by the routers, is frequently the target of cache poisoning attacks. Internet routers are also experiencing alarming growth in their routing table sizes, which may soon make it impossible for them to forward packets quickly enough to meet demand. Further, concerns about IPv4 address space exhaustion loom on the horizon despite the availability of IPv6. In this paper, we take a fresh look at Internet routing and propose a scheme that addresses all of these concerns cleanly. Our scheme forgoes IP addresses entirely and instead uses host names as identifiers in packets. The scalability of routing is ensured by encapsulating these packets in highly aggregated routing locators: we use autonomous system numbers (ASNs), which are already an integral part of inter-domain routing. We present data and experiments to show that a much simpler and scalable routing infrastructure can be designed for a future Internet by using fewer identifiers for its entities.

Internet using is increasing rapidly. Internet occured as a result of commincating nodes with each. New internet users are joining to this structure and development of it is going on. In such a big structure, communication of two nodes is possible only if they find each other. Various addressing protocols have been developed to obtain this. The well-known is called Internet Protocol ( IP ). Currently IP is used IP Version 4 ( Ipv4). Ipv4 has limited address. This limited addresses does not meet the growth of internet. Because of inadequate internet address, IP Version 6 ( IPV6 ) was developed in 1995. Ipv6 brings many enhancement. Ipv6 was designed with security in mind. It is bringing security enhancments into modern IP network. This paper analyses Ipv6 and Ipv4 Threat Comparisons on two stage. First part focuses on the attacks with Ipv4 and Ipv6 similarities. Second part is focuses on the attacks with new considirations in Ipv6. (C) 2010 Elsevier Ltd. All rights reserved.

Internet users seek solutions for mobility, multi-homing, support for localised address management (i.e. via NATs), and end-to-end security. Existing mobility approaches are not well integrated into the rest of the Internet architecture, instead primarily being separate extensions that at present are not widely deployed. Because the current approaches to these issues were developed separately, such approaches often are not harmonious when used together. Meanwhile, the Internet has a number of namespaces, for example the IP address or the Domain Name. In recent years, some have postulated that the Internet's namespaces are not sufficiently rich and that the current concept of an address is too limiting. One proposal, the concept of separating an address into an Identifier and a separate Locator, has been controversial in the Internet community for years. It has been considered within the IETF and IRTF several times, but always was rejected as unworkable. This paper takes the position that evolving the naming in the Internet by splitting the address into separate Identifier and Locator names can provide an elegant integrated solution to the key issues listed above, without changing the core routing architecture, while offering incremental deployability through backwards compatibility with IPv6.

Most routing protocols in MANET use IP addresses as one of the most important routing information. To implement the routing protocol of MANET, the IP assignment in MANET should be solved. Allocating IP addresses is one of current key issues in the MANET, due to the absence of a centralized agent server. Previous methods require a large address space or can not use all the IP addresses of the given IP address space. For that reason, many IP addresses remain unused. To resolve this, we propose an IP address assignment protocol that uses the contiguous IP address assignment strategy without unused IP addresses. Simulations perform on ns-2 and confirm the viability of our protocol.

IPv6 proponents are now supporting the once-criticized network address translation technology to enable communication between the two technologies and allow for an orderly transition to IPv6. It could provide more than enough IP addresses for the exploding number of Internet-connected devices. The Internet protocol's previous version, IPv4, could not do so.

According to an estimate several billion smart devices will be connected to the Internet by year 2020. This exponential increase in devices is a challenge to the current Internet architecture, where connectivity is based on host-to-host communication. Information-Centric Networking is a novel networking paradigm in which data is addressed by its name instead of location. Several ICN architecture proposals have emerged from research communities to address challenges introduced by the current Internet Protocol (IP) regarding e.g. scalability. Content-Centric Networking (CCN) is one of the proposals. In this paper we present a way to use CCN in an Internet of Things (IoT) context. We quantify the benefits from hierarchical content naming, transparent in-network caching and other information-centric networking characteristics in a sensor environment. As a proof of concept we implemented a presentation bridge for a home automation system that provides services to the network through CCN.

We present a new network-layer architecture that provides generalized addressing. The forwarding infrastructure is independent of the addressing architecture, so multiple addressing architectures can be used simultaneously. We compare our solution with the existing Internet protocols for unicast and multicast services, given the address assignment used in the Internet. By means of an extensive simulation study, we determine the range of parameters for which the overhead costs (delay, state, and network load) of our service are comparable to those of the Internet.

The Internet Engineering Task Force, under the Danvers Doctrine, is attempting to offer strong security in all or nearly all TCP/IP (Transmission Control Protocol/Internet Protocol) standards. In the meantime, organizations can overlay security on top of the Internet with dialog protection systems, most notably Point-to-Point Tunneling Protocol and IPsec (IP security) virtual private networks. This chapter discusses both of these approaches to making the Internet more secure. It also looks at how we can make the Internet more forensic, that is, more capable of stopping attacks when they occur and more capable of identifying attackers. Keywords: cryptographic systems; forensic; Internet engineering task force (IETF); IP security (IPsec); point-to-point tunneling protocol (PPTP); TCP/IP

During the last two decades, several value-added services (e.g., IP multicast, IP traceback, etc.) have been proposed to extend the functional capabilities of the Internet. Due to the increasing role of these services, there is a need to better understand their impact on the network. In this paper, we present an experimental study on the intersection characteristics of end-to-end Internet paths and trees. We analyze these characteristics to understand the scale and the distribution of ''state overhead'' that is incurred on the routers by various value-added network services. For the reliability of our analysis, a representative, end-to-end router-level Internet map is essential. Although several maps are available, they are at best insufficient for our analysis. Therefore, in the first part of our work, we exert a measurement study and present an alternative approach to obtain an end-to-end router-level map conforming to our constraints. In the second part, we conduct various experiments using our map and shed some light on the scale and distribution of the state overhead of value-added Internet services in both unicast and multicast environments.

The Internet is broken. There have been many attempts to fix it, but they are all complex and very difficult to implement and none of them answer the fundamental questions of what is wrong with it. The first basic flaw is the very nature of the Internet Protocol address. It is treated as both a name and an address to deliver the information to its end-to-end destination. In addition, the security of the protocol is dependent on that address. The second major flaw is the inability of the Internet protocols to address mobility with fast and secure handoff. The Secure Mobile Architecture (SMA) fundamentally addresses these flaws in the very nature of the Internet Protocols. It does this by treating the IP layer as an insecure transport layer. It requires four elements to effect this transformation of the Internet. It can be integrated into existing Intranets. It can function easily in the namespace of an Internet service provider (ISP), an enterprise, or governments. The rest of this chapter will take you through the architecture and its elements.

The IPv4 addressing scheme, which was proposed by IETF in 1981, provides 4.3 billion unique 32-bit IP addresses but has been fully exhausted in Feb, 2011. This exhaustion of unique IP addresses poses significant challenges to the addition of new devices to the Internet as well as offering new services. Internet of Things, which provides interconnected uniquely identifiable devices in the existing Internet infrastructure, will be greatly affected by the lack of unique IP addresses. In order to connect to the existing Internet infrastructure, every new device needs a uniquely identified IP address for communication. It has been estimated that by the year 2020 more than 30 billion devices would be connected to the Internet. In order to meet the challenge of such vast requirement of unique IP addresses, the devices in IoT will have to adopt IPv6, which is the latest version of Internet Protocol. IPv6 uses 128-bit IP addresses and offers 2 128 unique IP addresses. Therefore, it expands IPv4 and provides new features of end to end connections as well as new services. In this paper, the various challenges with respect to providing connectivity, security, mobility, etc., have been discussed and how IPv6 helps in meeting those challenges.

The explosion of the number of devices and users on the Internet results in massive amounts of data and information. This poses the most complex challenges in security we have ever faced. The detection of malicious domains and Internet protocol (IP) addresses has been a hot topic in cyber security. We present a scalable and effective graph inference system for detecting malicious domains and IP addresses. The goal is to protect Internet users from network threats. Based on the loopy belief propagation algorithm, the system infers every domain or IP reputation, flagging it with high reputation as malicious one. We have evaluated the system with 75 million-node graph constructed from the huge dataset (500 gigabytes). The system attains performance with 86% and 87% area under receiver operating curves for inferring domain and IP reputations respectively. We demonstrate that the graphical solution provides rapid assessment of safe or risky sites on McAfee's data. It provides an automatic tool for web reputation inference in the field and serves as an assisting tool for “first pass” classification and triaging.

With the rapid development of wireless communication technologies, machine-to-machine (M2M) communications, which is an essential part of the Internet of Things (IoT), allows wireless and wired systems to monitor environments without human intervention. To extend the use of M2M applications, the standard of Internet Protocol version 6 (IPv6) over Low power Wireless Personal Area Networks (6LoWPAN), developed by The Internet Engineering Task Force (IETF), would be applied into M2M communication to enable IP-based M2M sensing devices to connect to the open Internet. Although the 6LoWPAN standard has specified important issues in the communication, security functionalities at different protocol layers have not been detailed. In this paper, we propose an enhanced authentication and key establishment scheme for 6LoWPAN networks in M2M communications. The security proof by the Protocol Composition Logic (PCL) and the formal verification by the Simple Promela Interpreter (SPIN) show that the proposed scheme in 6LoWPAN could enhance the security functionality with the ability to prevent malicious attacks such as replay attacks, man-in-the-middle attacks, impersonation attacks, Sybil attacks, and etc.

The foreseen increase in the number of services and applications, coupled with ever more stringent Quality of Service (QoS) requirements, will require more muscle from what the Internet can deliver today. Today we have a differentiated services framework, with evolutionary approach supplements, such as Mobile IP (Internet Protocol), IPSec (IP Security), DiffServ (Differentiated Services), HIP (Host Identity Protocol), RSerPool (Reliable Server Pooling), SCTP (Stream Control Transmission Protocol), LISP (Locator/Identifier Separation Protocol), IPv6 (IP version 6) and Shim6 (Site Multihoming by IPv6 Intermediation). However, the current Internet ecosystem still harbours severe shortcomings, in terms of performance, reliability, scalability, security and many other categories including societal, economical and business aspects, which have led to future Internet research efforts. Quite clearly, the existing Internet needs to evolve to be ready for 5G services. The European Commission (EC) Future Internet Architecture (FIArch) Experts Reference Group (ERG) has analysed the existing design principles and initiated efforts for developing novel ones. This chapter specifically addresses a consolidated step in the research community towards answering new principles, inspired by widely accepted future Internet paradigms, such as the Internet of Things, Software Defined Networking, Network Function Virtualisation, Mobility and the notion of the ‘Differentiation of services with aggregate resource control framework’. Moreover, we introduce a ‘resource over provisioning’ approach and design guidelines as a potential solution for effective use of network capacity in the 5G internet.

Internet routers are a commons. While modest regulatory measures have generally been successful for Information Communication Technologies (ICT), this paper argues that the lack of regulation has hindered the technological evolution of the Internet in some areas. This issue is examined through five Internet problems, and the technological solutions adopted. The key contribution of this paper is the explanation of these issues and the identification of areas where misaligned incentives promote inadequate solutions or inaction. The paper reviews the available measures to encourage the adoption of globally beneficial Internet technologies.

The recent advances in wireless communication technology and the unprecedented growth of the Internet have paved the way for wireless networking and IP mobility. Mobile Internet protocol has been designed within the IETF to support the mobility of users who wish to connect to the Internet and maintain communications as they move from place to place. This study describes and summarizes the current Internet draft for mobile IP (MIPv4) with its major components: agent discovery, registration and tunneling. In addition, we outline the available encapsulation techniques and route optimization procedure. In the end, we describe the design of the new protocol for transparent routing of IPv6 packets to mobile IPv6 nodes operating in the Internet.

With the development of mobile communication and Internet technology, there is a strong need to provide connectivity for roaming devices to communicate to other communication end point in the Internet at any time and anywhere. The key issue of this vision is how to support mobility in TCP/IP networks. In this paper, we review the TCP/IP protocol stack and analyze the problems associated with it in a mobile environment. We then investigate the mobility support techniques and existing solutions to provide mobility support in the Internet. We classify the proposed solutions based on the protocol layers and present examples for each category. We also provide a comparison of the different solutions belonging to different categories and in the same category, including their advantages and disadvantages, and conclude that there is no single solution perfectly addresses mobility support for the Internet. We conclude this survey with a recommendation of features that need to be satisfied in Internet mobility support.

We consider a resource allocation problem, where resources of different capacities must satisfy multiple demands. The demand sizes and the resource capacities are limited to sizes that are power-of-two integers (i.e., 1, 2, 4, 8, …). The cost of the resources exhibit economies-of-scale savings, i.e., the cost per capacity unit is smaller for resources with larger capacity. The problem is to select the minimum-cost set of resources that satisfies the demands, while each of the demands must be assigned to a single resource and the number of selected resources does not exceed a specified upper bound. We present algorithms that take advantage of the special structure of the problem and provide optimal solutions in a negligible computing effort. This problem is important for the allocation of blocks of Internet Protocol (IP) addresses, referred to as subnets. In typical IP networks, subnets are allocated at a large number of nodes. An effective allocation attempts to balance the volume of excess addresses that are not used versus fragmentation of addresses at nodes to too many subnets with a discontinuous range of addresses. Due to the efficiency of the algorithms, they can readily be used as valuable modules in IP address management systems. © 2005 Wiley Periodicals, Inc. Naval Research Logistics, 2005.

The next-generation version of Internet Protocol, IPv6, will dramatically increase the available number of IP addresses while enabling efficient and secure peer-to-peer communication. Peer-to-peer will be particularly useful in the embedded systems arena, with millions of new devices taking advantage of Internet connectivity. We have grown accustomed to connecting desktop computers to the Internet. In future, we will see embedded systems taking advantage of the Internet in new ways. By removing the limitation of IP addresses, IPv6 will enable a large number of new types of devices and applications to benefit from the Web. Many embedded systems will have their own IP addresses. This will enable direct peer-to-peer communication, and it will also enable unprecedented security with IPsec, the IP security protocol. At the same time, we can foresee a leap in QoS, as real-time traffic, such as voice and video, become prioritised and are able to take advantage of the available bandwidth.

Though appropriate for core Internet infrastructure, the Internet Protocol is unsuited to routing within and between emerging ad-hoc edge networks due to its dependence on hierarchical, administratively assigned addresses. Existing ad-hoc routing protocols address the management problem but do not scale to Internet-wide networks. The promise of ubiquitous network computing cannot be fulfilled until we develop an Unmanaged Internet Protocol (UIP), a scalable routing protocol that manages itself automatically. UIP must route within and between constantly changing edge networks potentially containing millions or billions of nodes, and must still function within edge networks disconnected from the main Internet, all without imposing the administrative burden of hierarchical address assignment. Such a protocol appears challenging but feasible. We propose an architecture based on self-certifying, cryptographic node identities and a routing algorithm adapted from distributed hash tables., 7 pages, 3 figures

Due to volatile market conditions and increased competition, network operators and Internet service providers have been put under enormous pressure to cut costs while providing the same if not better levels of service to customers. Several aspects of network design are subject to review to assess possible cost savings while maintaining service levels and reliability. This article focuses on Internet protocol network infrastructure design, and in particular investigates architectural options for interconnecting small "IP metro" PoPs to an "IP core" PoP. The baseline architecture is characterized by dual uplink circuits from the metro to the core PoP. Three variants of an alternative architecture based on a single uplink circuit from the metro to the core PoP are compared against the baseline network in terms of end-to-end availability/downtime and capital cost.

The success of the Internet has attracted more people to take part in network navigation. Numerous wireless-communication devices have rapidly evolved in the past decade. The demand for mobile communications is increasing and packet data services through Internet protocol (IP) networks have become a trend. To supply more IP addresses to network devices and improve network performance, a new IP version 6 (IPv6) was developed by the Internet Engineering Task Force in 1994. IPv6 supports certain features that make mobility management more efficient in mobile IP. A cellular architecture is needed to improve the communications quality and to reduce power consumption, both at the base and mobile stations. In a cellular environment, handoffs occur frequently. Reducing the defects caused by handoffs is extremely important in the mobile network environment. This is especially important for high-speed moving devices. In this paper, a handoff strategy called neighbor-assisted agent architecture, which takes advantage of the ad-hoc network to improve handoff performance, is proposed. Timing analytical and simulation results show that the proposed mechanism can provide a better solution than mobile IP for handoff breaks during high-speed movement.

Increasingly, network applications must communicate with counterparts across disparate networking environments characterized by significantly different sets of physical and operational constraints; wide variations in transmission latency are particularly troublesome. The proposed Interplanetary Internet, which must encompass both terrestrial and interplanetary links, is an extreme case. An architecture based on a "least common denominator" protocol that can operate successfully and (where required) reliably in multiple disparate environments would simplify the development and deployment of such applications. The Internet protocols are ill suited for this purpose. We identify three fundamental principles that would underlie a delay-tolerant networking (DTN) architecture and describe the main structural elements of that architecture, centered on a new end-to-end overlay network protocol called Bundling. We also examine Internet infrastructure adaptations that might yield comparable performance but conclude that the simplicity of the DTN architecture promises easier deployment and extension.

IPv4, the workhorse protocol of the currently popular TCP/ IP protocol suite, is fast becoming obsolete. The exponential growth of the Internet is the main reason that has required the creation of the next generation of Internet Protocol-IPv6. IPv6 is much more flexible and promises to take care of the address space and security issues in the foreseeable future. In this part we explain the new features introduced in the emerging Internet Protocol standard and why they have been introduced.

The Internet is based on a layered set of protocols a#x2014; the most basic of which is TCP/IP a#x2014; and the servers and routers that support them. This special issue addresses challenges to the Internet's basic protocols as our collective Internet usage increases in both magnitude and type and becomes increasingly crucial for our economy and culture. "Designing a Deployable Internet: The Locator/Identifier Separation Protocol" shows how to achieve better scalability for mobile devices by separating the location from the identification function of the IP addresses. "IPv6 Deployment and Spam Challenges" shows that IPv6 introduces new problems for fighting spam and denial-of-service attacks, and offers solutions. "All-Weather Transport Essentials" surveys current Internet protocols and principles for their revision to address known problems that can be expected to become more serious in the near future.

The Internet Engineering Task Force (IETF) standardized and published the IPv4 protocol in September 1981. After almost 30 years, the remaining IPv4 addresses have been distributed by Internet Assigned Numbers Authority (IANA) in February 2011. Due to the exhaustion of IPv4 addresses, the transition from IPv4 to IPv6 is required definitely. The IPv6 protocol and address will gradually replace IPv4, and they might coexist in the Internet for a long time. In Taiwan, the Government plans to migrate most of websites and Internet services during 2013 to 2016. In order to prevent the IPv6-only users cannot acquire the same information as IPv4 users, some content providers start to evaluate the content consistency of websites. However, these tasks need manpower and waste time. In this paper, we propose an on-line evaluation system for reducing the efforts of content comparison. We utilize the concept of web crawler to detect the website supports dual-stack or not, and evaluate the content consistency automatically. According to the evaluation report, the engineers are able to realize the inconsistent contents of website between IPv4 and IPv6.

Internet Protocol version 4 sets rules for some aspects of communication over the Internet. The protocol, amongst other things, specifies the format of an Internet Protocol address. This format places restrictions on the total number of possible addresses. In 2011 the supply of new addresses was exhausted. A new version of the standard, version 6, has been developed. This provides substantially more addresses. The intention is to replace version 4 with version 6. Organizations are deciding whether or not now is the right time to change. The change incurs an expenditure of time and money. If any of the hardware does not support the new protocol then it will have to be replaced. Also, software needs to be upgraded. A change requires a transitional phase. It is not possible to make the necessary updates to hardware and software over a weekend, say. This paper looks at the issues that are relevant to a decision to change.

An emerging generation of mission-critical networked applications is placing demands on the Internet protocol suite that go well beyond the properties they were designed to guarantee. Although the "next generation internet" (NGI) is intended to respond to the need, when we review such applications in light of the expected functionality of the NGI, it becomes apparent that the NGI will be faster but not more robust. We propose a new kind of virtual overlay network (VON) that overcomes this deficiency and can be constructed using only simple extensions of existing network technology. In this paper, we use the restructured electric power grid to illustrate the issues, and elaborate on the technical implications of our proposal.

When the Internet Engineering Task Force approved Internet protocol version 6, proponents acclaimed it as a major development. Since then, IPv6 has received support only in some areas. In Asia, for example, the profusion of smart cellular phones and PDAs has caused the demand for IP addresses to outstrip the limited supply provided by IPv4, the previous Internet protocol version. Meanwhile, equipment and OS vendors have just begun supporting IPv6, as have manufacturers of devices using wireless and embedded technologies. However, there is relatively little support for IPv6, particularly in North America, from the Internet service providers (ISPs) and network administrators who would use the protocol and thus are key to its success. The paper considers how IPv6's current adoption status is a study in contrast between initial vendor support and a lack of deployment by ISPs and network administrators.

We present a communication framework to enable control and collaboration between multiple users over the Internet. We first discuss standard Internet protocols and extensions known as middleware and technologies in the context of Internet telerobotics. A protocol and framework suitable for collaborative telerobotic control are then introduced and discussed. Finally, an example of how the framework might be used for a simple telerobotic system is presented. The system has been tested locally but is not yet freely available on the Internet.

The Internet is under rapid growth and continuous evolution in order to accommodate an increasingly large number of applications with diverse service requirements. In particular, Internet telephony, or voice over IP is one of the most promising services currently being deployed. Besides the potentially significant cost reduction, Internet telephony can offer many new features and easier integration with widely adopted Web-based services. Despite these advantages, there still exist a number of barriers to the widespread deployment of Internet telephony. The most prominent one, however, is how to ensure the QoS needed for voice conversation. The purpose of this article is to survey the state-of-the-art technologies in enabling the QoS support for voice communications in the next-generation Internet. In this article, we first review the existing technologies in supporting voice over IP networks, including the basic mechanisms in the IETF Internet telephony architecture and ITU-T H.323-related Recommendations. We then discuss the IETF QoS framework, specifically the Intserv and Diffserv framework. Finally, we present two leading companies' (Cisco and Lucent) solutions to offering IP telephony services as examples to illustrate how real systems are implemented.

The Session Initiation Protocol (SIP) provides advanced signaling and control functionality for a wide variety of multimedia services. SIP can efficiently and scalably locate resources based on a location-independent name and then negotiate session characteristics. It can find use in applications ranging from Internet telephony and conferencing to instant messaging, event notification, and the control of networked devices. We summarize the main protocol features and describe a range of extensions currently being discussed within the Internet Engineering Task Force.

The Internet architecture has evolved over time, adapting to the needs of its users and incorporating new technology as it has been developed. The introduction of multiprotocol label switching (MPLS) as a part of the Internet forwarding architecture has immediate applications in traffic engineering and virtual private networks. In the longer term, MPLS may affect how traffic transits the Internet and the services that the Internet delivers.

Despite its obvious success, the Internet suffers from end-to-end performance and availability problems. We believe that intelligent routers at key access and interchange points could improve Internet behavior by actively managing traffic. We describe the inefficiencies in routing and transport protocols in the modern Internet. We are constructing a prototype, called Detour, a virtual Internet, in which routers tunnel packets over the commodity Internet instead of using dedicated links.