Dynamic IP Address Research Articles

Maximizing Resource Utilization in GKE: A Case Study on IP AddressManagement and Budget Allocation in Google Kubernetes EngineConfig Page

Maximizing resource utilization in Google Kubernetes Engine (GKE) can lead to cost savings and better performance.This case study examines how an organization optimizes IP address management and budget allocation in GKE bycombining static and dynamic IP addresses, reserved instances, and autoscaling. The organization found that static IPaddresses were useful for critical services, while dynamic IP addresses were more appropriate for non-critical services.Using reserved instances and autoscaling allowed the organization to minimize costs while ensuring that resourceswere available when needed. The findings of this study have implications for organizations using GKE, highlighting theimportance of effective resource utilization for achieving optimal performance and cost savings.

Advanced Persistent Threat Detection and Mitigation Using Machine Learning Model

The detection of cyber threats has recently been a crucial research domain as the internet and data drive people’s livelihood. Several cyber-attacks lead to the compromise of data security. The proposed system offers complete data protection from Advanced Persistent Threat (APT) attacks with attack detection and defence mechanisms. The modified lateral movement detection algorithm detects the APT attacks, while the defence is achieved by the Dynamic Deception system that makes use of the belief update algorithm. Before termination, every cyber-attack undergoes multiple stages, with the most prominent stage being Lateral Movement (LM). The LM uses a Remote Desktop protocol (RDP) technique to authenticate the unauthorised host leaving footprints on the network and host logs. An anomaly-based approach leveraging the RDP event logs on Windows is used for detecting the evidence of LM. After extracting various feature sets from the logs, the RDP sessions are classified using machine-learning techniques with high recall and precision. It is found that the AdaBoost classifier offers better accuracy, precision, F1 score and recall recording 99.9%, 99.9%, 0.99 and 0.98%. Further, a dynamic deception process is used as a defence mechanism to mitigate APT attacks. A hybrid encryption communication, dynamic (Internet Protocol) IP address generation, timing selection and policy allocation are established based on mathematical models. A belief update algorithm controls the defender’s action. The performance of the proposed system is compared with the state-of-the-art models.

A Contactless IoT-Based GPS-Tracked Waste Bin to Curb Medical Waste Infections in Ghana

Irregular checking of waste especially in some medical facilities of Ghana leads to overflow of waste. A study by World Health Organisation (WHO) in February 2018 indicates that 15% of the total waste collected from medical facilities may be infectious, toxic, or radioactive and may contribute to unintended release of chemical or biological hazards. Considering the present COVID-19 pandemic and other diseases like ebola and hantavirus, it is critical to properly manage waste collected from medical facilities. In this study, Internet of Things (IoT) is used to design a smart bin to help reduce user contact to waste. Using a flowchart, a schematic model of the system was developed using Proteus 8.11 software. Two HCSR04 ultrasonic sensors were used to measure the waste level in the bin and detect proximity of objects to the bin to trigger an MG996R servo motor for automatic operation of the lid of the waste bin having a monitoring system. A NEO-6M GPS module was used to determine the location of the waste bin and displayed on a 16x2 LCD. A Graphical User Interface (GUI) was created for remote monitoring of waste over the internet. An ESP32 node MCU was programmed using Arduino software and used to interface the system with the GUI. The designed system was constructed and incorporated into a rectangular-shaped plastic bin. During testing, a hand wave at the sensor on the side of the container triggered opening of the bin. Sample waste placed in the bin were detected and real-time information regarding waste levels were sent to a self-designed HTML webpage called ‘Smart Bin’ with dynamic IP address. This system could be used in health facilities to prevent medical waste overflow, limit human contact to waste and avoid spread of infections.

Dynamic IP address and privacy: do police need a court order to access subscriber information?

Dynamic IP address and privacy: do police need a court order to access subscriber information?

Overall-transparent dynamic identifier-mapping mechanism against scanning and worm propagation in the SINET

Static assignment of IP addresses or identifiers can be exploited by an adversary to attack a network. However, existing dynamic IP address assignment approaches suffer from two limitations, namely: participation of terminals in the assignment and inadequate network server management. Thus, in this paper, we propose an Overall-transparent Dynamic Identifier-mapping Mechanism (ODIM) to manage the identifier of network nodes to defend against scanning and worm propagation in the Smart Identifier NETwork (SINET). We establish the selection and allocation constraints, and present selection and allocation algorithms to determine the constraints. The non-repetition probability and cover cycle allow us to evaluate the defense efficiency against scanning. We propose the probability for routing identifiers and derive the defense efficiency of ODIM against worm propagation. Simulation results and theoretical analysis show that the proposed method effectively reduces the detection probability of Routing IDentifiers (RIDs) and thus improves defense capabilities against worm propagation.

Combination of Virtual Private Network and Wireless Sensor Network: Protection Against The Interference Problem of IOT

As the era of the Internet of Things (IoT) is emerging rapidly, the interference problem is also increasing at the same pace. In IoT based connections, as we know that devices share a common communication channel to interact with each other, the interference problem arises as all the devices are connected. Once an attacker gains access to any of the devices in an IoT enabled network, the whole IoT network becomes susceptible to breach. The biggest example of it is the IoT enabled CCTV hacking. In this work, we are proposing the usage of Virtual Private Network (VPN) and Wireless Sensor Network (WSN) to create a virtual environment and to protect each device from IP address breach that is connected to an IoT network. Using VPN, each IoT device will gain their own virtual environment which will enable it for using a dynamic IP address to connect to another IoT device’s virtual environment. Using WSN, the virtual environments will be able to identify any signal interference that can cause any security breach.

유동 IP주소의 이용행위에 관한 온라인서비스제공자(OSP)의 책임 - CJEU ‘Breyer’ 사건(Case C-582/14)의 개인정보성 판단 기준을 중심으로 -

유동 IP주소의 이용행위에 관한 온라인서비스제공자(OSP)의 책임 - CJEU ‘Breyer’ 사건(Case C-582/14)의 개인정보성 판단 기준을 중심으로 -

Cisco Packet Tracer Simulation as Effective Pedagogy in Computer Networking Course

The Computer Networking course commonly taught in mixed mode involving lecture and practical session whereas beside face-to-face theory session, students need to experience hands-on activities in order to appreciate the technology and contents. Nevertheless the abstraction in Computer Networking course such as the complexity in TCP/IP network layering, the connection and configuration of client and server’s framework, differences in static and dynamic IP address configuration had imposed a great challenge for students to understand and grab the main concept of computer networking technology. As such, an approach of using computer network simulation and visualization tool in teaching and learning Computer Networking course is seen beneficial for educators and students. In this research, computer network simulation software of CISCO Packet Tracer was utilized in Computer Networking (MTN3023) course. Students (N=55) were exposed to CISCO Packet Tracer on which they developed Wide Area Network (WAN) that consists of configuration activities of Personal Computer (PC), Servers and Switches according to CISCO standard. Subsequently, student’s feedback and their insight on the effectiveness of CISCO packet Tracer in learning computer networking were probed using questionnaire. All the feedbacks were investigating statistically using SPSS 16.0. From the analysis, the descriptive results shown that all students were agreed (N=32 : Strongly Agree; N=23 : Agree) that CISCO Packet Tracer had successfully help them to understand several key concepts of computer networking and at the same quash some abstractions they faced in the course. In a nutshell, CISCO Packet Tracer as a simulation and visualization tool had been proven to be an effective software in supporting the teaching and learning of computer networking course.

Understanding the Usage of Industrial Control System Devices on the Internet

Industrial control system (ICS) devices play a crucial role in critical infrastructures, such as power grid. In recent years, numerous ICS devices are accessible on the Internet, resulting in potential security issues. However, there is a lack of deep understanding of these devices’ characteristics in the cyberspace. In this paper, we take the first step in this direction by investigating these visible ICS devices on the Internet. Because of the critical nature of ICSs, the detection of online ICS devices should be done in a nonintrusive and timely manner. We first analyze 17 industrial protocols widely used in ICSs and train a probability model through the learning algorithm to improve detection accuracy. Then, we discover online ICS devices in the IPv4 space while reducing the negative effects caused by industrial honeypots and dynamic IP addresses. To observe the dynamics of ICS devices in a relatively long run, we have deployed our discovery system on Amazon EC2 and detected online ICS devices in the whole IPv4 space for eight times from August 2015 to March 2016. Based on the ICS device data collection, we conduct a comprehensive data analysis to characterize the usage of ICS devices, especially in answer to the following three questions: 1) what are the distribution features of ICS devices; 2) who use these ICS devices; and 3) what are the functions of these ICS devices.

The European Court of Justice case of Breyer

This case note analyses the impact and significance of the European Court of Justice decision of Breyer . The European Court of Justice has expanded the definition of personal data to include dynamic IP addresses. The judgment improves the privacy situation of internet users across the European Union.

The Breyer Case of the Court of Justice of the European Union: IP Addresses and the Personal Data Definition

Case C-582/14 Patrick Breyer v Bundesrepublik Deutschland, Court of Justice of the European Union, 19 October 2016, not yet published, ECLI:EU:C:2016:779 A dynamic IP address of a website visitor is a piece of personal data for a website publisher, if the publisher has the legal means to identify the visitor, with the help of additional information held by the visitor’s Internet access provider. Article 2(h) and Article 7(f) of the Data Protection Directive

“In the public interest”: The privacy implications of international business-to-business sharing of cyber-threat intelligence

This article reports on preliminary findings and recommendations of a cross-discipline project to accelerate international business-to-business automated sharing of cyber-threat intelligence, particularly IP addresses. The article outlines the project and its objectives and the importance of determining whether IP addresses can be lawfully shared as cyber threat intelligence.The goal of the project is to enhance cyber-threat intelligence sharing throughout the cyber ecosystem. The findings and recommendations from this project enable businesses to navigate the international legal environment and develop their policy and procedures to enable timely, effective and legal sharing of cyber-threat information. The project is the first of its kind in the world. It is unique in both focus and scope. Unlike the cyber-threat information sharing reviews and initiatives being developed at country and regional levels, the focus of this project and this article is on business-to-business sharing. The scope of this project in terms of the 34 jurisdictions reviewed as to their data protection requirements is more comprehensive than any similar study to date.This article focuses on the sharing of IP addresses as cyber threat intelligence in the context of the new European Union (EU) data protection initiatives agreed in December 2015 and formally adopted by the European Council and Parliament in April 2016. The new EU General Data Protection Regulation (GDPR) applies to EU member countries, a major focus of the international cyber threat sharing project. The research also reveals that EU data protection requirements, particularly the currently applicable law of the Data Protection Directive 95/46/EC (1995 Directive) (the rules of which the GDPR will replace in practice in 2018), generally form the basis of current data protection requirements in countries outside Europe. It is expected that this influence will continue and that the GDPR will shape the development of data protection internationally.In this article, the authors examine whether static and dynamic IP addresses are “personal data” as defined in the GDPR and its predecessor the 1995 Directive that is currently the model for data protection in many jurisdictions outside Europe. The authors then consider whether sharing of that data by a business without the consent of the data subject, can be justified in the public interest so as to override individual rights under Articles 7 and 8(1) of the Charter of Fundamental Rights of the European Union, which underpin EU data protection. The analysis shows that the sharing of cyber threat intelligence is in the public interest so as to override the rights of a data subject, as long as it is carried out in ways that are strictly necessary in order to achieve security objectives. The article concludes by summarizing the project findings to date, and how they inform international sharing of cyber-threat intelligence within the private sector.

Data Mining in DHCP Security

A dynamic IP address is an IP address that is dynamically assigned to your computer by your Internet service provider (ISP). Once your computer or router is refreshed, your ISP dynamically assigns an IP address to your networking device using DHCP protocol. DHCP follows sequence in assigning an IP address to the host. If a particular host find its IP address it can easily know another host’s ip address through random search. This paper concentrates on giving an insight about DHCP security.

Visualizing and characterizing DNS lookup behaviors via log-mining

The Domain Name System (DNS) is a critical Internet service, which translates easily memorized domain names to numerical IP addresses for locating computer resources and services. In this paper, we try to explore the behaviors of DNS lookup by mining DNS logs from three primary DNS servers in a large university campus network in China. Our dataset is made up of two parts, namely DNS query logs and messages received or send by DNS servers. Firstly, through analyzing these DNS query logs, we are able to understand the overall trend of users’ surfing. For dealing with huge DNS dataset, we introduce an algorithm we call DNSReduce, which can be used to dig out top 10 client IP addresses and top 10 destination domain names efficiently. Moreover, we make comparative analysis of lookup behavior between wired and wireless users. Secondly, with messages received or send by DNS servers we can find these DNS servers׳behaviors, i.e., TTLs, equivalent answers and are able to accurately identify domain names with dynamic IP addresses. We provide different and specific visualization techniques for presenting these analysis results and show these techniques are very useful for understanding user behaviors, analyzing security events and characterizing overall tendency in campus network management.

Cloud-enabled Automation Systems using OPC UA

Emerging applications like smart grids and the Internet of Things pose new challenges to industrial systems. A drawback of OPC UA in the context of cloud-based applications are its client-server based communication concept and challenges due to firewalls, proxies, dynamic IP addresses, NATs and client-lookup strategies. Our aim is to interleave OPC UA with web and cloud technologies. We extended the communication concept of OPC UA and provide an evaluation of various protocols that serve as an additional transport layer underneath OPC UA.

On the Research of Internet Equipment Naming Methods

This paper analyzes the content of Internet naming problems as well as the current exist problems .We discuss the namespace and the major technologies, and then elaborating the important thinking on research of naming problems detailed and propose development direction in the future. In the paper, we propose a new method for devices naming due to the issues that exist in the Internet naming. Using this technical, it can solve the problem of the extremely scarce IPv4 and the IP address changed frequently on Internet devices. Equipment naming scheme has five major components: equipment name registered server, equipment communication server and client domain name server and client communication agency, the client login and configuration. It is a pattern in which the mobile device uses configured client software to issue a request to NG-DNS (new generation domain system).we have analyze on the realization of the key technology on the windows system. It has realized communication among equipments which are mobile, wireless, dynamic IP address, and hidden NAT and firewall. The method can be extended entry of Android devices.

Towards Dynamic and Scalable High-Speed IP Address Lookup Based on B+ Tree

Towards Dynamic and Scalable High-Speed IP Address Lookup Based on B+ Tree

Network measurement based modeling and optimization for IP geolocation

IP geolocation plays a critical role in location-aware network services and network security applications. Commercially deployed IP geolocation databases may provide outdated or incorrect location of Internet hosts due to slow record updates and dynamic IP address assignment by the ISPs. Measurement-based IP geolocation is used to provide real time location estimation of Internet hosts based on network delays. This paper proposes a measurement-based IP geolocation framework that provides location estimation of an Internet host in real time. The proposed frame work models the relationship between measured network delays and geographic distances using segmented polynomial regression model and semidefinite programming for optimization. Weighted and non-weighted schemes are evaluated for location estimation. The proposed framework shows close to 17 and 26 miles median estimation error for nodes in North America and Europe, respectively. The proposed schemes achieve 70–80% improvement in median estimation error comparing to the first order regression approach for experimental data collected from Planet-Lab.

Secure and Robust IPV6 Autoconfiguration Protocol For Mobile Adhoc Networks Under Strong Adversarial Model

Automatic IP address assignment in Mobile Ad hoc Networks (MANETs) enables nodes to obtain routable addresses without any infrastructure. Different protocols have been developed throughout the last years to achieve this service. However, research primarily focused on correctness, efficiency and scalability; much less attention has been given to the security issues. The lack of security in the design of such protocols opens the possibility of many real threats leading to serious attacks in potentially hostile environments. Recently, few schemes have been proposed to solve this problem, but none of them has brought satisfactory solutions. Auto-configuration security issues are still an open problem. In this paper, a robust and secure stateful IP address allocation protocol for standalone MANETs is specified and evaluated within NS2. Our solution is based on mutual authentication, and a fully distributed Autoconfiguration and CA model, in conjunction with threshold cryptography. By deploying a new concept of joint IP address and public key certificate, we show that, instead of earlier approaches, our solution solves the problem of all possible attacks associated with dynamic IP address assignment in MANETs. The resulting protocol incurs low latency and control overhead.

Distributed Dynamic Host Configuration Protocol (D2HCP)

Mobile Ad Hoc Networks (MANETs) are multihop wireless networks of mobile nodes without any fixed or preexisting infrastructure. The topology of these networks can change randomly due to the unpredictable mobility of nodes and their propagation characteristics. In most networks, including MANETs, each node needs a unique identifier to communicate. This work presents a distributed protocol for dynamic node IP address assignment in MANETs. Nodes of a MANET synchronize from time to time to maintain a record of IP address assignments in the entire network and detect any IP address leaks. The proposed stateful autoconfiguration scheme uses the OLSR proactive routing protocol for synchronization and guarantees unique IP addresses under a variety of network conditions, including message losses and network partitioning. Simulation results show that the protocol incurs low latency and communication overhead for IP address assignment.