Search

Ongoing political, environmental, and economic crises require infrastructures that can respond to crises in ways that do not replicate and reinforce inequality. To this end, we use a case study method of analysis that compares the authors' previous work on Internet infrastructure at the levels of development, governance, and use to explore how these imaginaries promote or impede people-centered change in the development and maintenance of Internet infrastructure. This theoretical work puts the three existing cases in conversation to better understand how Internet infrastructure alternatives presented as radical, new, or non-hierarchical present shortcomings and opportunities, so that it might be more possible to imagine better, more truly radical, people-centered alternatives. From this comparison, we close our discussion with three heuristics for radical infrastructure: the need for pushing for alternative ensembles of support, busting the myth of technosolutionism, re-politicizing Internet infrastructure, and encouraging technical communities to build around cooperativity, not connectivity. [ABSTRACT FROM AUTHOR]

The rapid growth of network services and applications has led to an exponential increase in data flows on the internet. Given the dynamic nature of data traffic in the realm of internet content distribution, traditional TCP/IP network systems often struggle to guarantee reliable network resource utilization and management. The recent advancement of the Quick UDP Internet Connect (QUIC) protocol equips media transfer applications with essential features, including structured flowcontrolled streams, quick connection establishment, and seamless network path migration. These features are vital for ensuring the efficiency and reliability of network performance and resource utilization, especially when network hosts transmit data flows over end-to-end paths between two endpoints. QUIC greatly improves media transfer performance by reducing both connection setup time and transmission latency. However, it is still constrained by the limitations of single-path bandwidth capacity and its variability. To address this inherent limitation, recent research has delved into the concept of multipath QUIC, which utilizes multiple network paths to transmit data flows concurrently. The benefits of multipath QUIC are twofold: it boosts the overall bandwidth capacity and mitigates flow congestion issues that might plague individual paths. However, many previous studies have depended on basic scheduling policies, like round-robin or shortest-time-first, to distribute data transmission across multiple paths. These policies often overlook the subtle characteristics of network paths, leading to increased link congestion and transmission costs. In this paper, we introduce a novel multipath QUIC strategy aimed at minimizing flow completion time while taking into account both path delay and packet loss rate. Experimental results demonstrate the superiority of our proposed method compared to standard QUIC, Lowest-RTT-First (LRF) QUIC, and Pluginized QUIC schemes. The relative performance underscores the efficacy of our design in achieving efficient and reliable data transfer in real-world scenarios using the Mininet simulator. [ABSTRACT FROM AUTHOR]

Time series of counts are observed widely in actuarial science, finance, epidemiology and biology. These time series may exhibit over-, equi- and under-dispersion. The Poisson distribution is commonly used in count time series models, but it is restricted by the equality of mean and variance. Other distributions such as the generalized Poisson, double Poisson, hyper-Poisson, and COM-Poisson distributions have been proposed to replace the Poisson distribution to model the different levels of dispersion in time series of counts. These models have certain limitations such as complex expressions for the mean and variance which complicate the formulation as GARCH models. In this study, we propose an alternative hyper-Poisson (AHP) distribution, with simple forms of conditional mean and variance, for an integer-valued GARCH (INGARCH) model for time series of counts that also exhibit the different levels of dispersion. We demonstrate that the AHP-INGARCH model is comparable to some existing INGARCH models. Additionally, the model can cover a wider range of dispersion. The maximum likelihood estimation can be used to estimate the parameters of the proposed model. Applications to three real-life data sets related to polio, internet protocol and daily COVID-19 new deaths underscore the usefulness of the proposed model in studying both over-dispersed and under-dispersed time series of counts. [ABSTRACT FROM AUTHOR]

The low earth orbit (LEO) satellite constellations exhibit dynamic network topology due to the intermittent inter-satellite links (ISLs). To ensure efficient data delivery in LEO satellite networks, it is crucial to find an appropriate routing protocol that is capable of accommodating the dynamic topology. In this paper, we consider two typical IP-based and ICN-based link-state routing protocols (i.e., OSPF and NLSR, respectively) and investigate the adaptability in LEO satellite networks. Specifically, we first analyze and compare their advantages and disadvantages in LEO satellite networks from the perspectives of link state detection, link state synchronization, and packet forwarding scheme. To verify our analysis, we conduct extensive packet-level experiments on OMNeT++. Our analysis and simulation unveil several critical insights. First, IP-based OSPF (following push-based communication) outperforms the ICN-based NLSR (following pull-based communication) in terms of the routing convergence and control overhead in satellite networks. Specifically, OSPF converges faster than NLSR up to 90.8% and yields less control overhead under the Iridium constellation. Second, the ICN-based NLSR (supporting Interest aggregation and in-network caching) outperforms the IP-based OSPF in terms of the packet delivery performance, especially under the content-sharing traffic pattern (up to 206%). However, the occasional ISL failure significantly reduces the content delivery performance of NLSR under the point-to-point traffic pattern. To sum up, our study unveils the necessity of properly integrating IP-based and ICN-based link-state routing paradigms in LEO satellite networks. [ABSTRACT FROM AUTHOR]

This research aims to evaluate and put into practise the design of a small hydropower plant on a stream at São Vicente, in Madeira Island, supported by internet of things (IoT). The photogrammetry technique is also used with a comprehensive digital transformation, in which new concepts, methods and models, such as machine learning (ML), and big data analytics play an important role due to the huge availability time series that have to be exploited in hydropower design studies. Nowadays, digitalization and massive data availability are imposing new ways to address many of the current challenges associated with the energy and digital transition. This research is based on a simple small hydropower design, to present an integrated methodology using new methods assigned by an internet protocol system, which includes the development of different steps and components supported by GIS, photogrammetry and the use of advanced tools, with the support of a drone survey with internet communication (IoT) that allow the generation of experimentally-based estimates in situ characterization, the volumetric flow, the hydrological data treatment, the hydraulic calculations and economic estimations for a real hydro project. Therefore, hydrological variables, hydraulic analysis and topographical survey are carried out in the IoT application platform supported by new tools and methods to optimise the size of hydraulic structures, estimate the performance and potential of the hydropower plant towards the best solution for energy and digital transition. Firstly, the data-base for the all study and posterior sizing of the case study of hydropower plant are defined and then the corresponding analyses and results are presented. Then, the cost estimation for the construction, maintenance and operation of the selected elements that compose the hydropower topology are determined, as well as the respective economic balance, considering the annual energy production. In addition, both economic and environmental return on investment is discussed. Finally, an analysis to equate the cost estimates and the respective benefits of hydropower generation using this new approach applicability is stablished, taking into account some economic indicators to determine the profitability of the project.

The detection of cyber threats has recently been a crucial research domain as the internet and data drive people's livelihood. Several cyberattacks lead to the compromise of data security. The proposed system offers complete data protection from Advanced Persistent Threat (APT) attacks with attack detection and defence mechanisms. The modified lateral movement detection algorithm detects the APT attacks, while the defence is achieved by theDynamic Deception system that makes use of the belief update algorithm. Before termination, every cyber-attack undergoes multiple stages, with themost prominent stage being LateralMovement (LM). The LMuses a Remote Desktop protocol (RDP) technique to authenticate the unauthorised host leaving footprints on the network and host logs. An anomaly-based approach leveraging the RDP event logs onWindows is used for detecting the evidence of LM. After extracting various feature sets from the logs, the RDP sessions are classified using machine-learning techniques with high recall and precision. It is found that the AdaBoost classifier offers better accuracy, precision, F1 score and recall recording 99.9%, 99.9%, 0.99 and 0.98%. Further, a dynamic deception process is used as a defence mechanism to mitigate APT attacks.Ahybrid encryption communication, dynamic (Internet Protocol) IP address generation, timing selection and policy allocation are established based on mathematical models. Abelief update algorithm controls the defender's action. The performance of the proposed system is compared with the state-of-the-art models. [ABSTRACT FROM AUTHOR]

(How) are Chinese actors contributing to increased state influence in Internet standard-making? In its open and private-based dimension, the Internet is possibly the twenty-first century's epitome of the liberal international order in its global spatial dimension. Therefore, many see deep normative challenges deriving from the rise of powerful, non-liberal actors such as China. In particular, China and Chinese stakeholders are often portrayed as supporters and promoters of a multilateral Internet governance model based on digital sovereignty aimed at completely replacing the existing multistakeholder, private-based model. Academic views on this topic have become less dichotomous throughout the years, especially as China's position on it has become more nuanced. However, this academic and policy debate is still open. This article analyses Chinese stakeholder actions in the Internet Engineering Task Force (IETF), the key venue for Internet standard-making. Through network analysis, this article maps the engagement of Chinese stakeholders in selected working groups of the IETF over time. Through expert interviews, this article interprets the drivers, evolution, and impact of such engagement. This research yields two main findings: first, it shows that the Chinese government does not have full control of its domestic private actors, among which there is both collaboration and conflict. Second, it concludes that Chinese stakeholders have increasingly accepted the existing functioning of IETF standard-making as they grew influential within it. [ABSTRACT FROM AUTHOR]

The advancements in network technologies and the evolution of the Internet of Things (IoT) have made supporting industrial control systems over probabilistic data networks promising. However, control systems’ communication over the traditional data networks is faced with problems of instability in feedback control and poor quality of performance due to time-varying data propagation delay. This paper presents two approaches that can enable real-time industrial control over non-deterministic computer networks allowing control system designers to take advantage of the existing communication infrastructures. The first approach is based on system-level interaction over two wires network called the collaboration network. The second approach is based on the implementation of the virtual local area network (VLAN). This method allows real-time control of industrial equipment or systems over IP-based networks while other computers are connected. Nodes providing real-time control services have the same PortID on the VLAN switch. This approach minimizes data traffic and reduces time-varying delay in system control over IP networks. The first approach was modeled and simulated using Proteus ISIS software. Two PIC16F877A microcontrollers were used to represent two nodes. CISCO packet tracer was used in the second approach to model and simulate IP-based control system communications over the traditional data network. Results indicate that the use of a two-wire collaborative network approach to a real-time control system is effective but requires an additional network alongside the main data traffic channel. VLAN, therefore, presents a more flexible approach that relies on the same infrastructures.

Transparansi pelayanan telekomunikasi merupakan amanat yang tertuang dalam Undang-Undang Nomor 36 tahun 1999. Pentarifan interkoneksi bukan lagi hanya terpaku pada layanan voice dan sms saja, karena karakteristik pengguna layanan saat ini bergerak ke arah layanan data. Model pentarifan yang saat ini digunakan dalam menentukan tarif interkoneksi pada dasarnya diperuntukkan bagi layanan voice dan sms, sehingga model tersebut belum tentu sesuai jika diaplikasikan pada layanan berbasis Internet Protokol (IP). Penelitian ini merupakan evaluasi dari model-model yang tersedia dalam menentukan model yang paling efektif untuk digunakan dalam layanan berbasis IP. Penelitian ini menerapkan metode Consistent Fuzzy Preference Relations (CFPR) untuk menentukan alternatif terbaik dari model pentarifan interkoneksi berbasis IP. Metode CFPR, yang merupakan modifikasi dari metode Analytical Hierarchy Process (AHP), menjamin konsistensi matriks perbandingan berbagai kriteria ketika menggunakan AHP. Sehingga alternatif model pentarifan interkoneksi yang dihasilkan dalam penelitian ini dapat dijadikan rujukan pihak regulator tanpa meragukan konsitensi dari perbandingan kriteria-kriterianya. Berhadasarkan pengolahan data, model Pentarifan Interkoneksi Berbasis Internet Protokol yang paling disarankan adalah Bottom up -Long Run Average Incremental Cost (BU-LRAIC). Hal ini dikarenakan model tersebut memenuhi kriteria sangat baik dan fair secara teknikal, ekonomi maupun dampak social yang dihasilkan.

Tunnel merupakan teknik membangun jalur komunikasi lokal antara dua atau lebih router menggunakan jaringan IP publik. Permasalahan yang dihadapi pada sistem tunneling saat ini adalah belum adanya pedoman untuk memilih teknik yang tepat sesuai topologi jaringan yang digunakan. Pada praktik di lapangan, pemilihan dilakukan berdasarkan pengalaman atau mengikuti SOP. Merek perangkat yang mendukung untuk tunneling sangat beragam di Indonesia, salah satunya adalah Nokia. Makalah ini berfokus untuk menghasilkan pedoman pada tunnel yang dimiliki perangkat Nokia, yaitu tunnel GRE. Analisis dilakukan dengan berbagai skenario rekayasa trafik, meliputi kondisi saat tanpa beban dan berbagai kondisi lain bila terjadi gangguan jaringan. Hasil yang diperoleh menunjukkan GRE saat tanpa beban berjalan dengan normal. Pada keadaan dengan beban dari awal, GRE mendapatkan throughput 0,995 Mbps dan delay rata-rata 11,484 ms; dengan beban mendadak mendapatkan throughput 1,059 Mbps dan delay 11,386; dan saat gangguan jaringan dilakukan dengan perintah ping mendapatkan hasil satu RTO. Tunnel GRE cocok digunakan pada implementasi jaringan baru karena kesederhanaan dalam konfigurasinya yang cukup mengaktifkan metrik OSPF untuk menyeimbangkan trafik pada tiap interface router tertentu.

Multi-path Transmission Control Protocol (MP-TCP) Coupled Congestion Control algorithm focuses on amalgamating the increased BandWidth (BW) of multiple available links while avoiding MP-TCP's higher aggressiveness in comparison to usual TCP flows on every utilized link. Therefore, this leads to exceedingly conventional behavior when the network paths do not share a congested link. Further, the situation worsens when the network paths possess varying characteristics (i.e., available BW, Packet Loss Rate (PLR), and delay), leading to incurring overheads such as higher re-ordering, buffer-blocking, and needless retransmissions in the network. We observe that the presently implemented MP-TCP scheduler suffers from lower channel utilization due to its conventional congestion window (cwnd) adaptation scheme. As a result, the protocol compromises application-level throughput performance. To address these issues, we propose an Adaptive-Data Scheduling Policy (A-DSP), which dynamically adjusts the cwnd growth according to the paths' Round Trip Time (RTT) variations. To regulate the transmission rate of each path concerning its assessed RTT variation, we design and implement an adaptive fast retransmission policy as well. The evaluations indicate that A-DSP decreases the File Transfer Time by over 50% compared to the MP-TCP scheduler. We also observe throughput performance gains of up to 46%, 19%, and 34% for different PLR, BW, and path delay values, respectively, compared to MP-TCP. Moreover, A-DSP also offers considerable performance improvement compared to other multi-path approaches. [ABSTRACT FROM AUTHOR]

Information and communication technologies have become the foundation of modern life due to their numerous advantages. However, their rapid introduction with an insufficient emphasis on security and protection unnecessarily exposes them to potential risks. In the paper, we focus on cybersecurity from the perspective of the growing amount of threats in modern networks. We describe the concept, operation, and purpose of a network telescope, i.e., a system that records unsolicited traffic to dark Internet Protocol addresses. We present the architecture of the system developed at the Faculty of Electrical Engineering, University of Ljubljana, and analyze the data collected in more than ten years of its operation. More than 2 billion events collected from 2011 onwards, exhibit an exponential trend of growth. Only five years ago, a vast majority of incoming packets was targeting ports of popular server management services (e.g., Telnet, SSH), while today the distribution is much more long-tailed and responds quickly to emerging vulnerabilities. We examine the nature of the collected data, describe the possible use cases, and present some data visualizations. [ABSTRACT FROM AUTHOR]

Introduction/purpose: The article should specify the network signaling type Q-SIG, which is standardized especially for implementation in digital telecommunication networks of integrated services (ISDN), emphasizing the possibility of its further application in the Private Telecommunications Network of Integrated Services of the Serbian Armed Forces (PISN of SAF), i.e. in the Private Automatic Telephone Network of the Serbian Armed Forces (PATN of SAF). Methods: An analysis of the existing standards was performed: ECMA355 and ECMA-336 and a synthesis of the possibilities of their application in the PATN of SAF. Results: The procedure for the application of Q-SIG is processed in a situation when the peripheral parts of the PISN of SAF, which operate on the principle of transmission and circuit switching by TDM (Time Division Multiplexing), are connected via a central Core network with the IP (Internet Protocol), which operates on the principle of packet transmission and switching with the SIP (Session Initiation Protocol). A method of the application of the tunneling of encapsulated Q-SIG messages through the IP network, defined by ECMA-355 Standard, has been developed. The necessary functions for mapping the transmission of tunneled signaling messages Q-SIG and mapping voice (and other audio) information to media streams during VoIP (Voice over IP) communication through that network, which are defined by ECMA-336 Standard, are described. Conclusion: The application of ECMA-355 and ECMA-336 Standards is a new solution in the PATN of SAF with the use of the IP network to connect the IP PINX using the Q-SIG tunneling procedures and mapping functions for their transmission and transmission of audio signals. This then opens up a whole range of new possibilities that, with the growth of the Core network and their application, will rapidly contribute to the creation of a broad Telecommunication information system backbone for the implementation of real-time multimedia communications and the transition to Unified Communications (UC).

Defending against DoS (denial of service) attacks has become a great challenge, especially for institutions that provide access to their services in the public network. State-of-the-art identity concealing tools and vast number of computers connected to the network require ensuring appropriate means for entities at risk to enable defence from the particular type of threats. This article presents a concept of user authentication in IP communication. The concept consists in providing the receiver with the possibility to determine sender՚s identity at the Internet layer level. This provides both the capability of defence against DoS attacks and possibility of utilizing the presented model over existing Internet network, which is directly responsible for transmission. The authors hope that the concept is a significant step in the perception of public network data transmission.

Permasalahan yang ada diwarnet cyber terletak pada belum terdapatnya sistem keamanan server warnet, oleh karena itu beberapa kali server warnet cyber mengalami permasalahan karena adanya penyerangan yang dilakukan oleh pihak lain seperti ping flood, smurf attack dan lain - lain. Ada beberapa alternatif solusi untuk mengatasi permasalahan keamanan warnet yang kurang maksimal salah satunya adalah penerapan metode IDS (Intrusion Detection System). Sistem ini bekerja dengan membuat peringatan bahwa adanya penyusupan dari luar yang bisa membaca parameter berupa alamat IP (Internet Protocol) penyerang. Dengan Implementasi sistem ini ,maka sistem mampu menutup akses terhadap usaha-usaha penyerangan terhadapa jaringan komputer. Dengan demikian jalur komunikasi menggunakan Snort dan IDS bisa lebih efisien.

To mitigate the challenges that Flash Event (FE) poses to IP-Traceback techniques, this paper presents an IP Traceback scheme for detecting the source of a DoS attack based on Shark Smell Optimization Algorithm (SSOA). The developed model uses a discrimination policy with the hop-by-hop search. Random network topologies were generated using the WaxMan model in NS2 for different simulations of DoS attacks. Discrimination policies used by SSOA-DoSTBK for the attack source detection in each case were set up based on the properties of the detected attack packets. SSOA-DoSTBK was compared with a number of IP Traceback schemes for DoS attack source detection in terms of their ability to discriminate FE traffics from attack traffics and the detection of the source of Spoofed IP attack packets. SSOA-DoSTBK IP traceback scheme outperformed ACS-IPTBK that it was benchmarked with by 31.8%, 32.06%, and 28.45% lower FER for DoS only, DoS with FE, and spoofed DoS with FE tests respectively, and 4.76%, 11.6%, and 5.2% higher performance in attack path detection for DoS only, DoS with FE, and Spoofed DoS with FE tests, respectively. However, ACS-IPTBK was faster than SSOA-DoSTBK by 0.4%, 0.78%, and 1.2% for DoS only, DoS with FE, and spoofed DoS with FE tests, respectively.