Search

SYN Flood Attack is one form of distributed denial of service attack that attains the handshake process of TCP. This attack consumes all available server resources and provokes legitimate traffic which aims to make the server unavailable. It causes serious damage to cloud server and networking protocols. The main objective of this research work is to train the neural network for detecting the attack and to secure network connection. A novel binary fruit fly optimization algorithm with deep learning is proposed to predict the syn flood attack. The proposed algorithm is implemented using the KDD cup dataset. DL- BFFA algorithm has achieved 99.96% detection accuracy for detecting the SYN Flood Attack. A comparison study is conducted to validate the proposed model.

Duhok University has two main campuses. The first is the Malta campus located at the western part of the city and consists of seven colleges. The second one is the Duhok center which is located in the city center, it comprises six colleges in addition to the university chancellor office. This research paper proposes a network design for Duhok University to enable student and academic staff exchanges their academic and administrative information efficiently. The proposed IP Network design is made of three layers of which the core layer consists of two Cisco SONET 12012 which is connected by dual links. One of the SONETs is assigned to the Malta Campus and the other to Duhok center campus. The minimum spanning tree is calculated for the proposed IP network by using real distances between university colleges. At the distribution layer, a hierarchical topology is used to connect the college campus to its nearest main campus. The network is attached to the two main FTP and HTTP servers. The data stream of each college is forwarded to Cisco router 4700. The user layer in each department is implemented using star topology through a Cisco switch 2924. Mobility access is added to the proposed design to support wireless devices. The design is implemented using OPNET 14.5 modular. Network performance and server's quality are tested by calculating (packet/second), delays, traffic send, traffic receives utility, and throughput in case of heavy load the network performance and server's quality. The results show that the proposed Duhok University IP network fulfills the network requirements and future expansion

Internet of Things (IoT) is one of the fastest emerging networking paradigms enabling a large number of applications for the benefit of mankind. Advancements in embedded system technology and compressed IPv6 have enabled the support of IP stack in resource constrained heterogeneous smart devices. However, global connectivity and resource constrained characteristics of smart devices have exposed them to different insider and outsider attacks, which put users’ security and privacy at risk. Various risks associated with IoT slow down its growth and become an obstruction in the worldwide adoption of its applications. In RFC 6550, the IPv6 Routing Protocol for Low Power and Lossy Network (RPL) is specified by IETF’s ROLL working group for facilitating efficient routing in 6LoWPAN networks, while considering its limitations. Due to resource constrained nature of nodes in the IoT, RPL is vulnerable to many attacks that consume the node’s resources and degrade the network’s performance. In this paper, we present a study onvarious attacks and their existing defense solutions, particularly to RPL. Open research issues, challenges, and future directions specific to RPL security are also discussed. A taxonomy of RPL attacks, considering the essential attributes like resources, topology, and traffic, is shown for better understanding. In addition, a study of existing cross-layered and RPL specific network layer based defense solutions suggested in the literature is also carried out.

Modern Living, as we know it, has been impacted meaningfully by the Internet of Things (IoT). IoT consists of a network of things that collect data from machines (e.g., mobile devices) and people. Mobile application development is a flourishing tendency, given the increasing popularity of smartphones. Nowadays, users are accessing their desired services on the smartphone by means of dedicated applications as the latter offers a more customized and prompt service. In addition, companies are also looking to persuade users by offering interactive and effective mobile applications. Mobile application developers are using IoT to develop better applications. However, there is no generalized consensus on the selection of best architecture or even the most suitable communications protocols to be used on an IoT application development. Therefore, this article aims at presenting approaches, architectures, and methodologies relevant to the development of mobile IoT solutions.

The quality of service (QoS) in networking is the process of managing network resources to reduce packet loss and to lower network jitter and latency. QoS has been widely used in traditional network and can also be implemented in the 5G standard based on a software-defined network (SDN). A traditional network carries several challenges, such as vendor dependency, the complexity of managing a large network, dynamically changing forwarding policies, and more. Software-defined networking is a new networking strategy designed to address the challenges of a traditional IP network, such as high levels of complexity and inability to adapt to the new quality of service requirements in a timely manner. The fundamental idea behind SDNs compared to the conventional networking paradigm is the creation of horizontally integrated systems through the separation of the control and the data plane while providing an increasingly sophisticated set of abstractions. Recently, various SDN-enabled QoS frameworks have emerged that offer many possibilities for network reconfiguration and high-level definition of policies. QoS requirements for 5G networks have been defined on the basis of three main categories of use cases: extreme mobile broadband (xMBB), massive machine type communications (mMTC) IoT/M2M devices, and highly reliable М2М-communication (ultra-reliable machine-type communications – uMTC). This paper analyzes and surveys the QoS based on the openflow protocol method and QoS based on open-source SDN controllers method in 5G network. In addition, we discuss various architectural issues of open-source SDN controllers network and examine their impact on the QoS. Furthermore, we outline the characteristics of the QoS parameters such as latency, availability, reliability, jitter, and bandwidth in the 5G network. Finally, the article discusses and compares parameters of the QoS in 5G determined by world’s leaders in 5G technology.

Segment Routing (SR) is a new routing paradigm based on source routing and provide traffic engineering (TE) capabilities in IP network. By extending interior gateway protocol(IGP), SR can be easily applied to IP network. However, upgrading current IP network to a full SR one can be costly and difficult. Hybrid IP/SR network will last for some time. Aiming at the low flexibility problem of static TE policies in the current SR networks, this paper proposes a Deep Reinforcement Learning (DRL) based TE scheme. The proposed scheme employs multi-path transmission and use DRL to dynamically adjust the traffic splitting ratio among different paths based on the network traffic distribution. As a result, the network congestion can be mitigated and the performance of the network is improved. Simulation results show that our proposed scheme can improve the throughput of the network by up to 9% than existing schemes.

Information-Centric Networking (ICN) has been recently recognized as a promising future Internet paradigm by providing content-oriented functionality and in-network caching characteristic rather than relying on overlay or end-to-end communication mode. However, the deployment of ICN on the real network is very difficult or even almost impossible at the current stage. In other words, the end-to-end IP network always has the overwhelming development strengths. In spite of this, the end-to-end IP network has no the adequate in-network caching resources to offload the traffic. At the right time, as the essential and significant characteristic of ICN, in-network caching has great potential to be applied into IP network in order to dramatically reduce load pressure of Origin Server (OS). Therefore, we in this paper enable IP network to have the capacity of in-network caching, and on this base, we investigate the comprehensive routing and content delivery. Firstly, the network topology is divided into a number of Autonomous Systems (ASs), and each AS has an Information Management Center (IMC) which has rich functionalities by maintaining Content Index Table (CIT), Physical Topology Index Table (PTIT) and Response Request Table (RRT). Then, CIT is used to conduct both intra-AS routing and explicitly collaborative caching, and PTIT is used to conduct both inter-AS routing and adaptive content delivery including on-path and off-path. In particular, RRT is only sent to OS so that the end-to-end communication connection is switched off. Finally, the experimental results reveal that the proposed scheme can reduce load pressure of OS around 45.7% over Deltacom and 54.8% over GTS. In addition, compared to the previous work, the proposed scheme has better performance.

In recent years, ICN (Information-Centric Networking) has been under the spotlight as a network that mainly focuses on transmitted and received data rather than on the hosts that transmit and receive data. Generally, the communication networks such as ICNs are required to be robust against network failures caused by attacks and disasters. One of the metrics for the robustness of conventional host-centric networks, e.g., TCP/IP network, is reachability between nodes in the network after network failures, whereas the key metric for the robustness of ICNs is content availability . In this paper, we analytically obtain the content availability against the node removal in the case where just a single path from a node to a repository, i.e., contents server, storing contents is available and where multiple paths to the repository are available, respectively. Furthermore, through several numerical evaluations, we investigate the effect of the structure of network topology as well as the pattern and scale of the network failures on the content availability in ICN. Our findings include that, regardless of patterns of network failures, the content availability is significantly improved by caching contents at routers and using multiple paths.

Congestion control has a vital role in the prosperity of any network. Thus, designing an effective mechanism for congestion control of the NDN is an active research area. In NDN, congestion control and interest forwarding mechanisms are usually considered an integrated plane for the network traffic management. In this paper, we propose to decouple the forwarding and congestion control planes. We offer a novel architecture for the NDN router in which congestion control and forwarding modules cooperate for interest flow management and congestion control. Based on this framework, we introduce a new explicit feedback-based congestion control protocol (3CP) for managing the consumers’ sending rate in an NDN environment that multi-source and multi-path content delivery is intrinsically supported. 3CP employs a new per-packet feedback computation to inform consumers from the available resource of paths toward repositories. Also, it provides feedback to the forwarding mechanism of a router for adjusting the sending rate of interest packets to each interface. By interest flow management, 3CP controls the traffic of data packets in the network. As a significant achievement, 3CP prevents multi-path flows from acquiring more network resources and could manage fair resource allocation to the flows in each path, whereas the consumers obtain the same throughput. The packet-level simulation was conducted by an NDN simulator, and the results confirmed that 3CP outperforms the existing multi-source/multi-path congestion control mechanisms in NDN.

Tunnel is a technique of building a local communication path between two or more routers using a public IP network. The problems faced in tunneling systems are currently lacking guidelines for choosing the right technique according to the network topology used. In the electoral field, it is done based on experience or following SOPs. The brands of devices that support tunneling are very diverse in Indonesia, one of which is Nokia. This study focuses on the tunnel owned by Nokia devices, namely the GRE in order to produce guidelines for using the GRE tunnel. The analysis is carried out with various traffic engineering scenarios including no-load conditions, and various other conditions when there is a network outage. The results showed that the GRE without load runs normally. When the load from the beginning of the GRE gets a throughput of 0.995 Mbps and an average delay of 11.484 ms, when with a sudden load it gets a throughput of 1.059 Mbps and a delay of 11.386 and when a network disturbance is carried out with the ping command it gets 1 RTO. The GRE tunnel follows the LDP protocol path so it is suitable for use in new network implementations because of its simplicity in its configuration which is enough to activate the OSPF metric to balance traffic on each particular router interface

The COMET experiment at J-PARC aims to search for the neutrinoless transition of a muon to an electron. We have developed the readout electronics board called ROESTI for the COMET straw tube tracker. We plan to install the ROESTI in the gas manifold of the detector. The number of vacuum feedthroughs needs to be reduced due to space constraints and cost limitations. In order to decrease the number of vacuum feedthroughs drastically, we developed a network processor with a daisy-chain function of Gigabit Ethernet for the FPGA on the ROESTI. We implemented two SiTCPs, which are hardware-based TCP processors for Gigabit Ethernet, in the network processor. We also added the data path controllers which handle the Ethernet frames and the event data. The network processor enables ROESTI to process the slow control over UDP/IP and to transfer event data over TCP/IP. By using the network processor, we measured the throughput, the stability, and the data loss rate for two to six ROESTIs. In any number of boards, the throughput of the event data transfer achieved the theoretical limit of TCP over the Gigabit Ethernet stably and ROESTI stably sent 100% of the data., IEEE Real Time 2020 Conference, 8 pages, 17 figures

As the world is moving toward newer technologies and to meet the requirements of the same adapting toward different network topology. SDN is such example of a network which solves many issues or limitations of a traditional TCP/IP network. As majority of workspace is moving towards SDN, many new vulnerabilities are also emerging, and to protect the network and systems on these networks, in this paper we discuss and propose a dataset which would be helpful in training an intrusion detection system over SDN which would also include the intrusion dataset for traditional TCP/IP network too. We generate this data over SDN topology by attacking the host system present in the network, then analyse the generated data using CICFlowmeter which would give us the desired dataset for intrusion detection.

Mobile Ad hoc NETwork (MANET) is a distributed architecture-less network having mobile nodes dynamically building up routes among themselves for transmission of packets. Security is the most crucial interest for its essential working. Due to its distinctive features including active network topology, lack of fixed/centralized authority, slower data transfer rate, a limited number of resources, bandwidth, and battery power, it is often attackable by malevolent nodes. Various types of attacks can affect network operations and make trans-reception untrustworthy. In order to obtain a more robust MANET operation through innovative design and development strategies, the study of severity of various attacks and their respective counter measures is necessary. This paper presents a detailed survey of TCP/IP layerwise attacks on MANET and the corresponding defence mechanisms. Further, a MANET scenario using a standard dynamic routing protocol Ad Hoc On-demand Distance Vector (AODV) is framed and tested under the routing disruption attacks viz. grayhole, blackhole, and cooperative blackhole. The attacks are simulated in the EXata environment to determine their prevalence over others in varying network scenarios. The comparative performance analysis is also carried out based on the measurements of the state-of-the-art evaluation metrics like Packet Delivery Ratio (PDR), end-to-end delay, throughput, jitter, and the number of data packets dropped by malicious nodes. The presented work brings uniqueness where it covers a wide variety of attacks, respective defence mechanisms, and a successful practical demonstration to validate the severity of selective dominant attacks all at one place which is not found in earlier literature.

In Named Data Networking (NDN) architecture, data can be obtained from multiple content sources (i.e., producers or caching nodes) with multiple paths, making the traditional end-to-end (i.e., TCP/IP) congestion control scheme invalid. In addition, the NDN multi-path discovery and management are still an open issue as the dynamic network topology changes. In this article, we propose a multi-path congestion control mechanism, named MPCC, which includes two major components, i.e., multi-path discovery and multi-path congestion control. Particularly, for multi-path discovery, we first devise a path tag to uniquely mark each sub-path in the forwarding process, and then propose a tag-aware forwarding strategy to discover and manage sub-paths. For multi-path selection and congestion control, we first integrate the metrics of packet loss, bandwidth, round trip time, and path centrality, for path assessment, based on which, we then leverage the Upper Confidence Bound (UCB) algorithm to select sub-paths in order to maximize the network throughput. In addition, for selected sub-paths, we have devised a sub-path window adaptation algorithm to avoid multi-path congestions. At last, we implement MPCC in ndnSIM and conduct extensive experiments for performance evaluation. Our results demonstrate that MPCC can discover all sub-paths in real-time for the multi-path scenario, and can effectively avoid multi-path congestions with improving throughput and reducing transmission time.

We consider protection switching in an IP over optical network. There is IP Fast Reroute Loop-free Alternates (IP FRR LFA) at the IP layer, and protection switching at the optical layer. Our network model assumes a completely connected IP network over an optical ring network that is required to protect a predetermined fraction of network bandwidth. This model leads to analytical formulas on network protection costs which we show are accurate. We also show that network cost is at or near zero when the network is required to protect at most 33% of traffic. A cost comparison to networks using MPLS Fast Reroute (MPLS FRR) further indicates that LFA is a feasible protection mechanism.

Introduction: Accuracy and total design and implementation cost of the GPS framework determine the viability of GPS based projects. As the greater part of the advanced framework including telemetry, IoT, Cloud, and AUTOSAR frameworks use GPS to get exact outcomes, finding a software-controlled error correction becomes important. The execution of open source library such as RTKLIB will help in controlling and revising GPS blunders. Methods: The project utilizes the RTKLIB along with two stations for better accuracy. The RTKGPS framework works under Linux environment, which is embedded in the Beagleboard. The communication between the GPS system is set up utilizing both serial communication protocol and TCP/IP suite. Results: To get high precision inside the network, two GPS modules are utilized. One of them will be mounted on the rover and another GPS is the base station of the setup. Both the GPS will have a double radio wire setup to increase the reception level to reduce the noise and obtain centimeterlevel precision. For long-range communication, rover utilizes Wi-Fi with TCP/IP stack protocol. In this research paper, setup is intended to accomplish the centimeter level precision through libraries in a Linux environment. Conclusion: The design will be set up and tried on a college campus under various conditions with different error parameters to acquire a low cost and centimeter level GPS accuracy.

Computer crimes and attacks on data networks have increased significantly, so it has become necessary to implement techniques that detect these threats and safeguard the information of organizations. Network Intrusion Detection Systems (NIDS) allow detecting anomalies and attacks in real time, by analyzing the local and outgoing traffic of the network. At present, to improve its performance, it has been chosen to use Machine Learning (ML) techniques that automate these processes and improve the detection of an anomaly. This paper implements ML techniques through the use of datasets, in the context of a NIDS, for the detection and prediction of anomalies on networks. Tests were performed with non-supervised and supervised learning algorithms on NSL-KDD and UNSW-NB15 datasets. An exploratory analysis of data together with dimensionality reduction techniques allowed us to understand the nature of the data, prior to the modeling. The results show that the methodology can be extrapolated for real scenarios with different network configurations.

This article reviews several exploits of input-handling vulnerabilities and categorizes these vulnerabilities based on their root causes. We describe the language-theoretic security paradigm and discuss how it can be used to tackle these categories of vulnerabilities.

A majority of PC hubs impart utilizing apparently irregular Internet Protocol source and objective locations. Information bundles coordinating with models characterized by a moving window of substantial locations are acknowledged for additional preparing, while those that don't meet the rules are immediately dismissed. Upgrades to the fundamental plan incorporate (1) a heap balancer that appropriates bundles across various transmission ways as per transmission way quality; (2) a DNS intermediary worker that straightforwardly makes a virtual private organization in light of a space name request; (3) an enormous to-little connection data transfer capacity the board highlight that forestalls disavowal of-administration assaults at framework chokepoints; (4) a traffic limiter that controls approaching parcels by restricting the rate at which a transmitter can be synchronized with a beneficiary; and (5) a flagging synchronizer that permits countless hubs to speak with a focal hub by dividing the correspondence work between two separate elements. Preposterous decade, dispersed hash table-(DHT-) based steering conventions have been embraced in remote impromptu organizations (WANETs) to accomplish versatility in the course disclosure stage by evading the flooding instrument. The security parts of the steering conventions dependent on the DHT component are vital to address and have not been talked about in the current writing. In this manner, tending to the security issues in DHT-based directing conventions would forestall the assistance interruption, decline the traffic overhead, and diminish the parcel misfortune in the organization

The Internet of Health Things (IoHT) is an extended version of the Internet of Things that is acting a starring role in data sharing remotely. These remote data sources consist of physiological processes, such as treatment progress, patient monitoring, and consultation. The main purpose of IoHT platform is to intervene independently from geographically remote areas by providing low-cost preventive or active healthcare services. Several low-power biomedical sensors with limited computing capabilities provide IoHT’s communication, integration, computation, and interoperability. However, IoHT transfers IoT data via IP-centric Internet, which has implications for security and privacy. To address this issue, in this paper, we suggest using named data networking (NDN), a future Internet model that is well suited for mobile patients and caregivers. As the IoHT contains a lot of personal information about a user’s physical condition, which can be detrimental to users’ finances and health if leaked, therefore, data protection is important in the IoHT. Experts and scholars have researched this area, but the reconstruction of existing schemes could be further improved. Also, doing computing-intensive tasks leads to slower response times, which further worsens the performance of IoHT. We are trying to resolve such an error, so a new NDN-based certificateless signcryption scheme is proposed for IoHT using the security hardness of the hyperelliptic curve cryptosystem. Security analysis and comparisons with existing schemes show the viability of the designed scheme. The final results confirm that the designed scheme provides better security with minimal computational and communicational resources. Finally, we validate the security of the designed scheme against man-in-the-middle attacks and replay attacks using the AVISPA tool.

Many countries are experiencing a transformation from the traditional generation power system into a smart grid which incorporates communication and data processing technologies. New services become possible and are important to improve the system operation, but there is a large increase in data gathering. This new paradigm increases the complexity of the network and brings new security issues. This article simplifies the understanding of security in power networks by surveying one hundred and eight recent studies in smart grid security, mapping graphically the type of risk they represent to their location in the smart grid, organizing them by the lifecycle of smart grid data as proposed by 1, and comparing the ideal case to the current Brazilian scenario.

With the ever increasing demand for higher speed internet connectivity that can fulfil the application continuous need for higher bandwidth Google being the pioneer in many web-based services has launched a new UDP-based protocol named quick UDP internet connections (QUIC), which aims at providing faster data delivery without requiring upgrades or modifications to the network infrastructure. The goal of this paper is to provide an overview about QUIC protocol, propose the design and implementation of a test-bed, that is used experimentally to evaluate QUIC protocol under different network conditions and scenarios. In particular, the performance advantage of QUIC in terms of delay and throughput are examined taking into account different network conditions that resemble the real internet environment. Two scenarios are proposed, the first one investigates the protocol performance under a controlled network environment, while the second one tests the protocol in a real uncontrolled network. To achieve that, a test-bed is proposed and implemented that emulates the network impairments encountered in real-network such as packet loss, bit errors, and bandwidth limitation in a controlled manner. After that, QUIC is tested in real operational wired and wireless networks. In both scenarios, QUIC outperforms TCP in terms of delay, which strengthens QUIC position for being a potential alternative to TCP.

The universal serial bus (USB) is widely used as a general purpose computer peripheral interface. With the development of cloud services and sharing technologies, the remote application of local USB devices is becoming a key issue. Superspeed and low-latency cloud data transmission through USB interface becomes practical and important. In this paper, a remote SuperSpeed USB hub based on IP network is proposed. In this system, the Field Programmable Gate Array (FPGA) and USB 3.0 transceivers are used to pack and unpack USB data in real time which is transmitted between host and device through the switch. The use of active response is to solve the problem of response time uncertainty caused by network transmission. We have realized the link layer and protocol layer of USB3.0 based on FPGA, realized all transmission modes of USB3.0 protocol, and realized the network transmission of superspeed data stream. The test results show that local USB devices can use the USB hub for superspeed and low-latency communication with remote hosts over the network. The realization of this system has far-reaching significance. For example, the USB interface data and control signals in VR can realize cloud network transmission for remote experiment education.

Internet protocol (IP) is a part of the Transmission Control Protocol (TCP) /IP suite that operates below the network layer of the Open Systems Interconnection (OSI) reference model and is employed as an interface between the network and data link layer. The address resolution protocol (ARP) is a protocol used by IP for mapping an IP address to the corresponding media access control address that is a hardware address harnessed to identify the source and destination of each frame sent on the Ethernet. The man-in-the-middle (MITM) attack is a kind of the Ethernet attack that can be carried out depending on ARP cache-memory poisoning to intercept communications between two systems on Ethernet, and it could, without difficulty, be applied when the attacker is in control of a router along normal point of traffic. To secure systems on Ethernet as well as to prevent ARP cache-memory poisoning, it is necessary to have a good prevention model of MITM attacks. In this article, using the client/server-based intrusion detection system (CSIDS), a precise model to prevent ARP poisoning attacks is proposed and implemented. Our analysis is adequately characterized by implementing a real-time analysis for the received ARP packets, and in the case of detection of a suspicious ARP packet, a resolution message will be exchanged between system parts on the same network. To evaluate the ability of detection and prevention of CSIDS, we design and implement a novel protocol. At the same time, we compare the performance between CSIDS with the standard operations of ARP. Our experimental results reveal that our methodology completely protects hosts against cache poisoning attacks. We further show the effectiveness of our technique in identifying the abnormal ARP packets.

Nowadays, efficient and effective stream processing has become increasingly important in many real-world applications such as sensor data monitoring, network intrusion detection, IP network traffic analysis, and so on. In practice, stream data often encounter the problem of having some data attributes missing, due to reasons such as packet losses, network congestion/failure, and so on. In such a scenario, it is rather important, yet challenging, to accurately and efficiently monitor top-k objects over incomplete data stream, which may potentially indicate some dangerous and critical security events (e.g., fire, network intrusion, or denial-of-service attack). In this paper, we formally define the problem of top-k query over incomplete data stream (Topk-iDS), which continuously detects top-k objects with the highest ranking scores over an incomplete data stream. Due to unique characteristics such as incompleteness and stream processing, we propose a cost-model-based data imputation approach, design effective pruning strategies to reduce the Topk-iDS search space, and carefully devise dynamically updated data synopses to facilitate Topk-iDS query processing. We also propose an efficient algorithm to perform the data imputation and incremental Topk-iDS computation at the same time. Finally, through extensive experiments, we evaluate the efficiency and effectiveness of our proposed Topk-iDS query answering approach over both real and synthetic data sets..

Smartphone reconnaissance, the first step to launch security attacks to a target smartphone, enables an adversary to tailor attacks by exploiting the known vulnerabilities of the target system. In this paper we investigate smartphone OS identification with encrypted traffic. We propose four algorithms to do that, which are based on the spectral analysis of the encrypted traffic. The algorithms are designed for high identification accuracy by removing noise frequency components and for high efficiency in terms of computation complexity. We evaluate the identification algorithms with smartphone traffic collected over three months. The experiment results show that the algorithms can identify the smartphone OS accurately. The identification accuracy can reach 100% with only 30 seconds of smartphone traffic.

Deep Packet Inspection (DPI) of the network traffic is used on a regular basis within the traditional and virtualized environments. But changes in the network architecture with the introduction of containers, microservices, application functions, network functions, and the penetration of 5G access technology are adding more traffic complexity, especially in the so-called east-west flow direction. Network Functions Virtualization (NFV) has become an unavoidable step for further IP network development. In this context, DPI is becoming a challenge. Furthermore, the penetration of 5G allows access of various kinds of devices to the network with cloudification logic which drives them. This paper provides a performance analysis of a selected set of supervised machine learning (ML) algorithms for classification of network traffic within an NFV environment. The goal is to find a suitable algorithm that will classify the traffic from a point of both precision and speed, especially because in the 5G networks any packet delay may compromise the quality of service requirements. The research shows that out of the 6 algorithms tested, Decision Tree algorithm has the best overall performance, from both classification precision and time consumption point of view. It has proved as a reliable classifier that is performing evenly across different classes. Due to the specifics of the virtualized environments and encryption methods, payload data, source, destination, and port information of the network traffic packets are excluded from any statistical operation used for classification by the ML algorithms.

With the shift to the Internet Protocol (IP) in professional media production, the demand for a remote professional media production system (hereinafter “remote production”) is increasing. In remote production, a venue is connected with a broadcasting station by an IP network, and live programs are produced not on the venue side but on the broadcasting station side. In recent years, flexible remote production systems that use cloud computing over the IP network have been considered. In this work, to achieve remote production using a low-latency cloud, we examined the roundtrip-delay requirement for remote production and investigated which network configurations satisfied this requirement by testing network models from Japan, Europe, the USA, and China, which included metropolitan area networks. Two different program production equipment configurations were examined: a diverse path configuration with seamless switching (DPC) and a single path configuration with forward error correction processing (SPC). The results showed that the roundtrip-delay requirement was 33.4 ms (one-way transmission-delay: 16.7 ms) and that the server processing latency in the cloud should be kept in the range of 2–6 ms to satisfy the transmission-delay requirement for achieving a coverage rate of approximately 50% when using DPC and SPC for program production equipment configurations. We also found that, in all network models, SPC was better able to improve the coverage rate while satisfying the transmission-delay requirement than DPC. These findings should be useful for helping broadcasters design remote production systems using a low-latency cloud network.

Next generation networking architecture is required to be reliable, scalable, flexible, secure and has other advanced features. Traditional TCPIP networks are complex and cannot meet the requirements for high-quality network services. Software Defined Network (SDN) is an important technology that enables a completely new approach in how we develop and manage networks. SDN divides the data plane and control plane and promotes logical centralization of network control so that the controller can schedule the data in the network effectively through OpenFlow protocol. In this paper, we simulate the two SDN controllers of Ryu and POX, and compare their latency and throughput performance under Simple-Tree-Based (STB) and Fat-Tree-Based (FTB) network topologies. An SDN networking model has been designed using a Mininet emulator, and the code for custom STB/FTB topology is executed in Python script. Simulation outcomes indicate that in latency mode Ryu controller exhibited better results than POX controller, making it more suitable for small-scale SDN deployments. From the throughput simulation, POX controller displayed better results than Ryu, showing that it is able to respond to requests more promptly under complex FTB traffic loads, but with more hardware resources utilization.

This paper presents a high performance 4-layer communication architecture for a smart micro-grid testbed which consists of a 2 kVA Distributed Energy Resource (DER) inverter with PV and battery channels capable of advanced grid supportive and grid forming functions in the Process layer, a Raspberry Pi computer in the Interface layer, a customized Edge Intelligent Device (EID) in the Sub-station layer, and an end-to-end solar energy optimization platform (e-SEOP) in the Supervisory layer. The Raspberry Pi serves as a communication interface which communicates with the DER inverter using Serial Peripheral Interface (SPI) communication and talks to the EID using Modbus TCP/IP protocol. This paper provides a convenient and comprehensive solution to SPI and Modbus TCP/IP communication implementation in a smart micro-grid. The challenges of coordination between communication and system control and between different communication protocols have been addressed, which leads to a boost in the communication efficiency and makes the system highly scalable, flexible and adaptive. The proposed communication architecture as well as the micro-grid test bench have been validated through hardware experiments. The results indicate a reliable and efficient communication among different layers, which facilitates large-scale status monitoring of edge devices and coordinated control of the entire system.

NDN (Named Data Networking) is one of the most popular future network architecture, a “clean slate” design for replacing the traditional TCP/IP network. However, the lookup algorithm of FIB entry in NDN is the bottleneck of the current NDN. Owing to the unique identifier of content name, whose length is variable, the size of FIB entries is proliferating, and the effectiveness of lookup algorithms is low. This paper proposed an entropy-oriented name processing mechanism, compressing the content names effectively by bringing in an encoding scheme. This mechanism can be split into two parts: name compression and lookup. The first part compressed the content names and converted them into a kind of code with a smaller size by considering the information redundancies of content names; the second part built a compact structure to minimize the memory footprint of FIB entries with keeping the high lookup performance. This mechanism outperformed many traditional name lookup algorithms, had better flexibility and cost less memory footprint.

The Fifth Generation of Communication Networks (5G) envisions a broader range of services compared to previous generations, supporting an increased number of use cases and applications. The broader application domain leads to increase in consumer use and, in turn, increased hacker activity. Due to this chain of events, strong and efficient security measures are required to create a secure and trusted environment for users. In this paper, we provide an objective overview of 5G security issues and the existing and newly proposed technologies designed to secure the 5G environment. We categorize security technologies using Open Systems Interconnection (OSI) layers and, for each layer, we discuss vulnerabilities, threats, security solutions, challenges, gaps and open research issues. While we discuss all seven OSI layers, the most interesting findings are in layer one, the physical layer. In fact, compared to other layers, the physical layer between the base stations and users’ device presents increased opportunities for attacks such as eavesdropping and data fabrication. However, no single OSI layer can stand on its own to provide proper security. All layers in the 5G must work together, providing their own unique technology in an effort to ensure security and integrity for 5G data.

Simulation of egress is vital for minimizing losses during fire disasters, however accurate simulations are scarce and real-life data is hard to come by. In this paper, a Proposed Wireless Fire Evacuation Model (PWFEM) is proposed to simulate fire evacuation process in a short time to minimize evacuee’s exposure to the harmful radiation and fire hazards. The PWFEM simulation realistic by supposing fire scenario at cabined contains electrical cables inside a standard Main Control Room (MCR) in a Nuclear Power Plant (NPP) building. In addition, a new Hybrid Safest Shortest Exit (HSSE) is developed which consists of three stages: safest route based on rules-based technique, evacuees location based on the DV-hop technique [1] and shortest route that depends on Dijkstra technique. The PWFEM Simulations are appreciated to yield a realistic fire scenario by using a telecommunications TCP/IP network in form of server and client sides that help in transfer data inside internal networks in the NPP building. On the server-side, suppose that Consolidated Model of Fire Growth and Smoke Transport (CFAST) fire modeling is applied to simulate the fire scenario in MCR through CFAST model to generate fire products as output data in excel sheets and sends them to the client-side. The client-side then runs HSSE to produce the tree map for safest and shortest routes to help the evacuee for safe exit from his/her location. HSSE can be implemented on evacuee’s watches. From the results, it is concluded that PWFEM can simulate the fire scenario inside MCR, furthermore it is validated that HSEE can be used as an efficient emergency fire evacuation technique that can produce safest and shortest exit route for evacuee in any location inside NPP in very small time. In addition, PWFEM can be used for simulating fire evacuation inside any high-risk buildings and can appreciate yielding any realistic fire scenario with many types of fire sources in different places inside buildings.

With advances in digital technologies, development and verification of DSP audio systems are becoming more and more challenging. Due to high communication requirements introduced with surround audio channel- and latest object-based technologies such as DTS:X and Dolby Atmos, computer's sound card capabilites are expanded with an external audio interface for exchanging high-resolution content between computer and DSP device under test. In this article, the Ethernet TCP/IP-based audio interface solution is proposed. The main idea was to come with the cost-effective communication solution using standard Ethernet IEEE 802.3 hardware, free open-source network stacks, and finally implementing TCP application protocol in point-to-point topology instead of porting custom UDP streaming protocol. Experiments conducted in order to observe overall performance of the system indicate that expected throughput is achieved, but at the cost of long delays and high memory consumption.

Feeding fish is the most important thing in raising fish, with regular feeding to fish the fish will be able to continue to breed, In general, the process of feeding still requires human resources that are still manual, so that it will be difficult and disrupt human activity itself, if the process carried out must spread the food in the aquarium when someone is not in place, Therefore, currently IOT (Internet of Thing) technology has been developed which can facilitate human activities with remote control systems. The process of feeding with a remote control system is done using android, so as to simplify and save someone's time in the process of feeding without having to be in place. The control system used is Arduino ESP8266 as a single board micro controller platform, so that the control device can function to connect the WI-FI network. The process of connecting an Arduino ESP8266 device with a smartphone is done using the broker as hosting, the broker used was MQTT (Message Queuing Telemetry Transport), MQTT is a protocol that runs on the TCP / IP stack and is designed specifically for machine to machine that does not have a specific address. MQTT broker's working system is to implement publish as data sender, subcribe as data recipient, and topic as hosting data broker.

A procedure for multi-criteria selection of optimal design solutions is proposed, taking into account the set of contradictory indicators of designed telecommunication system quality. In the procedure, the formal numerical method of weighting factors for solving the MCO problem is supplemented with an informal procedure by the method of narrowing the Pareto set for choosing the only best solution using additional expert information from a decision maker (DM). The inclusion of the decision maker in the interactive mode allows to refine the solution and bring it closer to the goal. In contrast to formal numerical methods, this allows changing the values of some partial criteria in dynamics to achieve the required quality of the optimized system. The problem of choosing a speech codec for IP networks is solved using the proposed procedure. The selection of a set of partial criteria has been substantiated. Solutions are obtained for different values of the weights of partial criteria with the involvement of a decision maker. The results obtained allow to conclude that the proposed procedure can be used by popular IP-PBXs when justifying the choice of an optimal codec version for the user.

A novel framework, Medium-Term Disruption Tolerant Software Defined Network (MDT-SDN), is proposed to handle medium-term disruptions of the order 10 seconds to 6 minutes. Such medium-term disruptions are crucial for the next generation wireless networks that use TCP/IP protocol stack, where the existing disruption tolerant approaches may under-perform due to resource constraints. MDT-SDN enables network control with an additional STORE action which exploits the nodes’ memory for buffering packets within the TCP/IP stack during link disruptions and forwards them as the links become alive. First, we model the network with medium-term disruptions using temporal graphs and design an Earliest Arrival Path with Minimal Storage Time (EAPMST) controller algorithm to demonstrate the MDT-SDN framework. The framework is realized in a software defined wireless mesh network testbed, using in-band control, involving mobile nodes with three mobility models: ( ${i}$ ) stationary nodes, ( ii ) group mobility, and ( iii ) random mobility. Experimental results with four application protocols justify the efficacy of MDT-SDN in providing storage control and additional performance benefits. MDT-SDN along with EAPMST improves the throughput beyond 25% with random mobility model and is capable of carrying packets and maintaining sessions during medium-term disruptions using the existing TCP/IP stack. The use of EAPMST reduces packets’ buffering time by 24.45% in group mobility while the buffering time increases in random mobility by 5.82%. However, EAPMST significantly reduces the buffer occupancy by 60.28% and 44.49% for group and random mobility, respectively.

Communities are an important feature of real-world networks that can reveal the structure and dynamic characteristics of networks. Accordingly, the accurate detection and analysis of the community structure in large-scale IP networks is highly beneficial for their optimization and security management. This paper addresses this issue by proposing a novel community detection method based on the similarity of communication behavior between IP nodes, which is determined by analyzing the communication relationships and frequency of interactions between the nodes in the network. On this basis, the nodes are iteratively added to the community with the highest similarity to form the final community division result. The results of experiments involving both complex public network datasets and real-world IP network datasets demonstrate that the proposed method provides superior community detection performance compared to that of four existing state-of-the-art community detection methods in terms of modularity and normalized mutual information indicators.

To tackle the traffic congestion over channels, we propose a new transmission scheme, which is powered by the concept of index bit (IB), to increase the transmission efficiency. In this letter, the item of bit-unit (BU) is adopted to replace that of IP packet. Explicitly, every BU is divided into two parts: one is IB, and the other is conventional bit (CB). In specific, every IB is of equal length with its value representing the length of the corresponding CB. At the transmitter side, a storage is prepared for caching CBs temporarily, and has been divided into multiple sub-buffers in advance. Each CB is loaded into certain sub-buffer according to its IB, which is hidden during storing and transmission. To augment the benefit, a dynamic balancing method is proposed to adjust the width of each sub-buffer iteratively. Our numerical results demonstrate the achieved transmission efficiency gain. With the dynamic adjustment continues deeply, the utility function is increased in fluctuation to a saturated level.

With more and more people accessing the internet to get information and the absence of settings on data traffic it will cause the network to be slow. The network traffic settings in Linux Ubuntu still use scripts that are relatively more difficult to use and understand for some people, so tools are needed to configure them. Capture network traffic application is Software designed to capture communications connected to servers. Capture network traffic application can only log data and read TCP/IP and HTTP protocols. The Capture network traffic application has various features, including checking whether the server is on or off, capturing traffic packets on a LAN network, and displaying a map of the URL location. So the results of this study explain the creation of a Traffic Management Configurator to facilitate traffic monitoring settings in gateways that connect different networks. Furthermore, this traffic monitoring application is used to view the actual packets of traffic on the network and network statistics. Both applications use the web as an interface to the user.

In this paper, we report a smart street lighting control system using the ESP8266 which is a low-cost Wi-Fi chip with full TCP/IP stack and microcontroller capability. Our system is equipped with a web server developed in HTML code. Hence, our smart street lighting system can be controlled wirelessly to turn ON or turn OFF, and it can be monitored its environmental condition (i.e., temperature and humidity around the system). All sensors used in this system are pure digitally-outputted sensor: DHT11 to monitor the ambient temperature and humidity and BH1750 to adjust the street light intensity automatically. The dimming technique was applied in the control system by using Pulse Width Modulation (PWM). The system was divided into two main parts: Gateway and Node in which these two parts employ the ESP8266. The Gateway as a coordinator will send a message to the node as an end device (in this work, the streetlight act as a Node). Later, the node will send the ACK to the Gateway. As results, each node can send a message to other nodes.

Vehicular named data networking (VNDN) has the data-centric and in-network caching advantages that are in line with the requirements of multi-hop content retrieval in vehicular ad hoc networks (VANETs). Some current restrictive forwarding strategies utilize single-path forwarding to mitigate the Interest broadcast storm in VNDN. However, these strategies do not provide any reliable mechanism for Interest and Data forwarding to address the problem of low performance caused by the dynamic and unreliable VANETs communication environment. In this paper, we propose a packet forwarding strategy based on optimal and backup (PFOB) for VNDN. For Interest, PFOB establishes a single-path forwarding with high reliability and reachability by increasing the signal strength and node-degree criterion and retransmission mechanism. For Data, PFOB provides a reliable multi-path backup forwarding mechanism without additional network overhead. Simulation results show that PFOB can effectively improve the Interest satisfaction ratio, reduce the number of application retransmissions, and reduce the Interest satisfaction delay compared to the current strategies.

TCP/IP has become an undeniable leader in the areas of Information Technology. It is a well-established fact that data transfer between devices occur by the rules defined by the TCP/IP protocol. Each layer of TCP/IP model generally has more than one protocol for carrying out the functions that the layer complies to. TCP/IP model is used widely and it is essential to understand how different protocols work to provide different functionalities. In this article, through the deep consideration of TCP/IP protocol the understanding of the protocols at five layers of TCP/IP is specified.

Purpose of research. Currently, various technologies and methods are used to control the integrity and authenticity of data transmitted through open communication channels. One of them is the technology for transmitting sequences of information packets connected to each other in chains using certain cryptographic algorithms. Similar approaches are used in the well-known blockchain technology and are focused on large volumes of transmitted and protected information and large sizes of additional service information fields. The purpose of this article is to study the characteristics of systems, transmission of small information packets in comparison with traditional size frames of TCP/IP stack, in which the broken packet sequence order is restored using the chain method, by analyzing hash sequences available in each of such packets.Methods. In this article, simulation modeling, system analysis method, method of systematization and ranking of the obtained results are used.Results. It is shown that increasing the size of the additional field with the hash of the previous message from 4 to 6 bits has a significant effect on reducing the probability of erroneous restore of the order of information packets. Further increasing the length of the hash field reduces the probability of error by only 2 to 5 % for each additional bit of the hash field for any length of the chain being restored. It is shown that the coefficient of the usage of the communication channel (the ratio of useful chain of packets to the volume of information transmitted through the communication channel) is maximum when the length of the hash field is 6 in the whole range of sizes of the field information part of the data packet.Conclusion. The paper shows that the chain method is applicable for restoring the original sequence of information packets transmitted from the source to the receiver in systems where the preservation of the sequence of packets is not guaranteed. The obtained values of the transmission system parameters allow us to ensure acceptable reliability of data transmission with a minimum amount of additional service information, and achieve information redundancy less than that in similar ones by 10-15.

Nowadays, many people will be used internet that for their work, communication, education, economic and organization necessary that is used today. Network address translation (NAT) is a method of remapping an IP address space into another by modifying network address information in the IP header of packets while they are in transit across a traffic routing device. A network is a system of hardware and software, put together for the purpose of communication and resource sharing. A network includes transmission hardware devise to interconnect transmission media and to control transmissions and software to decode and format data. The Internet protocol suite is the computer networking model and set of communications protocols used on the Internet and similar computer networks. Knowledge on how the internet is able to communicate with internet users is a mystery to some people. Internet communication need to be TCP/IP protocol which means that TCP is Transmission Control Protocol, or what is sometimes simply used to refer to Internet Protocol, is the basic unit for communication on the internet. This can also be applied to private internet, like Ethernet and so on. Despite TCP and IP being used interchangeably, there is a slight difference between the two in relation to the roles they play IP is directly responsible for obtaining internet addresses and then it is the work of TCP to deliver the data obtained to the addresses achieved by IP. TCP/IP provides end-to-end connectivity specifying how data should be packetized, addressed, transmitted, routed and received at the destination. This paper aim is described operation and models of TCP-IP suite in data communication network.

It by and large acknowledged that the trouble of system congestion control stays a basic issue and a high need, particularly given the developing size, request, and speed (transfer speed) of the inexorably coordinated administrations systems. In spite of the examination endeavors spreading over several decades and accordingly the sizable measure of different plans proposed, there are no generally worthy control arrangements. Current arrangements in existing systems are progressively getting insufficient, and it's commonly acknowledged that these arrangements can only with significant effort extent even with different proposed "fixes". In this paper, a Fuzzy based congestion control is talked about to manage the congestion control issue. The exhibition of the controlled framework is assessed by means of reenactment.

Active queue management (AQM) is a congestion control mechanism for the early notification of the incipient congestion pursued by dropping/marking packets. The novelty in our result is that we are able to consider heterogeneous traffic (i.e., multiclass traffic) where each class has its own packet discarding policy, queue size, and bandwidth share. Then, this is so far the first control theory-based approach for the AQM problem on the TCP/IP routers that allows multiclass AQM. Our proposed technique assumes that each class has already a controller, designed a priori, and focuses on designing a static state feedback controller where the proposed design approach is based on the solution of linear matrix inequalities (LMIs). From the theoretical conditions, a new controller design methodology for discrete time systems with multi-delays, saturated inputs, and disturbances is proposed to overcome the obstacle of bilinearity which leads to a quite simple LMI condition that is numerically tractable with any convex optimization algorithm. A numerical example is provided at the end of this paper to show the effectiveness and performances of the proposed approach in the presence of multiclass traffic.

As the SMPTE ST 2059 standards for accurate synchronization and time labeling gain traction, it is important for users and system integrators alike to understand how time transfer, using the IEEE 1588 Precision Time Protocol (PTP), could be affected by unintentional malfunctioning or misconfigured devices as well as by malicious attacks. Given the mission-critical nature of broadcast infrastructure, secured time distribution is rapidly becoming a mandatory requirement. Although ST 2059-2 defines a PTP profile, it does not address how to secure all parts that define the timing system. The IEEE 1588 standard provides a certain level of fault tolerance by autonomously activating an auxiliary reference in the case of loss of the primary time source. Yet, PTP time transfer is not sufficiently well protected to either withstand deliberate attacks or cope with misconfigured or malfunctioning devices. Consequently, both scenarios must be investigated in detail. This entails a thorough analysis of all the relevant attacks on Global Navigation Satellite System (GNSS) receivers to misaligned message rates or corrupted messages, to name but a few. This article addresses ways to secure different components of the timing system, ranging from the Master clock(s) across the IP network and finally to the media nodes generating or receiving ST 2110 flows. Beyond securing the timing system, special care should be taken to immediately identify potentially harmful degradations and/or failures using multiple approaches that provide efficient means to correlate events. This is covered by a series of recommendations and best practices to ensure operational stability.

Wheel Soccer Division, Indonesian Robot Contest is an annual competition held by the Ministry of Education. One team in this division consists of 3 robots connected in wireless communication coordinated by base station. Besides that, base station computer also connects the robots with referee computer or called Refbox (Referee Box). Refbox as server for base station computer and base station computer as server for robots. The problem arises in base station has to play double roles, as server and client. In testing had two the results of communication from the referee box to basestation and basestation to the client so the data from the referee box can be accepted by the client with a success rate of 93%.

The quality of experience (QoE) of the end-users is a critical criterion of measurement in VoIP (Voice over Internet Protocol) systems for technical and commercial purposes. We investigate how quality of service (QoS) influences QoE and assesses the QoE in VoIP communication. Our contributions are three-fold. First, the impacts of QoS on QoE are comprehensively analyzed by experimental means and an association test method, instead of independently studying each parameter. Second, an algorithm is proposed to integrate the effects of QoS parameters with spatial or temporal characteristics on QoE. Third, we apply machine learning regression algorithms with QoS impairments, noise and echo impairments to nonintrusive voice quality prediction in different network environments. The results from numerous experiments show that fairly accurate prediction can be obtained from these models. Our work will achieve a more accurate evaluation of the QoE in VoIP by using QoS parameters, clarify the influence of IP network environments, noise and echo impairments on the quality and reliability of VoIP traffic, and provide QoS parameter requirements for the VoIP application that runs at the desired QoE level.