IP Services Research Articles

Involved Security Solution in Voice over IP Networks

In this paper, the work involves setting up a secure VoIP solution. At first, we presented some attacks scenarios affecting confidentiality, authenticity and integrity in the VoIP network. In the second part, we focused on VOIP security themes, so our work has focused on areas where enhancing VoIP security is essential. The convergence towards everything of IP is now a reality. The efforts made by infrastructure providers, whether fixed, mobile, and cabled or wireless. This is also evident in operators who now only design the services they offer in the context of everything IP. But with the increasing use of Voice over IP (VoIP) technology, services and protocols are becoming increasingly vulnerable. In this context work several organizations that promote the research and development of network security, warn users of the attacks risks that may affect the communications confidentiality. This work proposed to explore the security vulnerabilities associated with VoIP networks and to present some solutions to avoid and minimize these threats.

Measuring the Centrality of DNS Infrastructure in the Wild

The centralization of the global DNS ecosystem may accelerate the creation of an oligopoly market, thereby, increasing the risk of a single point of failure and network traffic manipulation. Earlier studies have revealed the level of centralization in terms of the market share of public DNS services and DNS traffic seen by major CDN providers. However, the level of centralization in the infrastructure of the DNS Ecosystem is not well understood. In this paper, we present a novel and lightweight measurement approach that effectively discovers resolver pools from a single probing point. We conduct an Internet-wide active measurement on the client-side as well as the server-side DNS infrastructure to assess the level of DNS centralization in terms of the supporting infrastructure. Our measurement results show that the DNS infrastructure is much more centralized than previously believed. Over 90% of forwarding resolvers are backed by less than 5% (4071) of indirect resolvers. Merely 0.45% (12,679) of all name servers across 1138 gTLDs, operated by just 10 DNS providers, provide authoritative domain resolution service for 48.5% (more than 100 million) of domain names. We also investigated several leading DNS providers in IP infrastructure, load distribution, and service geo-distribution. The findings of our measurements provide novel insights into the centrality of the DNS infrastructure, which will help the Internet community promote the understanding of the DNS ecosystem.

Secure and Efficient Multicast-Enabled Handover Scheme Pertaining to Vehicular Ad Hoc Networks in PMIPv6

In VANET, mobility management and handover management are two of the most intriguing and challenging research topics. The existing mobility management infrastructures are unable to provide seamless secure mobility and handover management. It is very common in a vehicular network that when a vehicle roams between two domains, its reachability status may be compromised. The main reason for this is the higher handover latency and packet loss during the handover process. In the last decade, IP-based mobility protocols have been proposed for interoperable handover management systems. There has been a great deal of interest in providing IP multicast to mobile nodes such as vehicles, and numerous strategies have been put forth thus far. This research article proposes an IP multicast-enabled handover architecture for VANET in PMIPv6. Adding the IP multicast facility to the authentication server allows handover management that is both intra-domain and inter-domain, which originally was not supported by PMIPv6. This makes it possible for the IP service of a vehicle to maintain a connection from any location, without changing the earlier application. Additionally, a secure architecture with authentication capabilities built on top of PMIPv6 is suggested for VANET to address the authentication problem. Finally, the article compares the performance of the proposed architecture with that of the ones currently in use by varying several factors, including the vehicle’s density, the setup costs required, and the unit transmission costs on wired and wireless links, and it shows that our proposed solution ensures the handover process with a minimal cost change.

DR-SDSN: An Elastic Differentiated Routing Framework for Software-Defined Satellite Networks

Software-defined satellite networking (SDSN) has recently gained unprecedented attention due to its great controllability for traffic delivery. However, it is still facing several fundamental challenges in routing, which mainly involves effective network maintenance, heterogeneous network convergence, and customized flow steering. Hence, in this article, we propose an elastic routing framework for SDSN, aiming to first build a robust control path for signalling exchanges, then offer a transparent channel for IP services based on Loc/ID mappings and associated encapsulations, and finally enable hybrid packet forwarding manners to meet user various demands. Moreover, we define a new 8 B network header for DR-SDSN to further decrease overheads in packet encapsulations, where 16-bit addresses are used instead of 32-bit IPv4 and 128-bit IPv6 addresses. At last, we have implemented a corresponding proof-of-concept prototype with the modified Ryu and OvS, and the Linux socket application programming interface is also extended to handle our protocol with 16-bit addresses. Extensive evaluations are performed and associated results have confirmed the feasibility and advantages of the proposed DR-SDSN framework.

Healthcare resource use and reimbursement amount by site of care in patients with diffuse large B-cell lymphoma receiving chimeric antigen receptor T-cell (CAR-T) therapy – a retrospective cohort study using CMS 100% Medicare claims database

Chimeric antigen receptor T-cell (CAR-T) infusion settings may impact healthcare resource use (HRU) and reimbursement amounts. Adults with diffuse large B-cell lymphoma receiving CAR-T therapy were identified from the Centers for Medicare & Medicaid Services (CMS) 100% fee-for-service Medicare database and stratified into inpatient (IP; n = 380) and outpatient (OP; n = 50) cohorts based on CAR-T infusion setting. During the first month post-infusion, OP cohort had significantly fewer IP visits, IP days, intensive care unit (ICU) stays, ICU days, and significantly more OP, emergency room (ER) visits, than IP cohort. In subsequent months, HRU became comparable between cohorts. Medicare reimbursement amounts during the first month post-infusion were nominally higher in the OP vs. IP cohort and comparable in subsequent months. The reimbursement amounts did not reflect the reduced HRU with OP infusions, potentially due to differences in Medicare payment policies for OP vs. IP services.

Development of the Hikari Denwa Fault-isolation Tool for Voice Over IP Services

Development of the Hikari Denwa Fault-isolation Tool for Voice Over IP Services

Clinicians\u2019 perspectives on supporting individuals with severe anorexia nervosa in specialist eating disorder intensive treatment settings during the COVID-19 pandemic

BackgroundThe COVID-19 pandemic has significantly affected intensive treatment settings (i.e., inpatient [IP] and day patient [DP]) in specialist eating disorder services. However, the impact on clinicians working in these services is largely unknown. We therefore explored the perspectives of those supporting individuals with severe anorexia nervosa (AN) in intensive treatment settings during the pandemic.MethodsBetween May 2020 and June 2021, we interviewed clinicians (n = 21) who delivered IP and/or DP treatment to patients with severe AN in four specialist eating disorder services in the United Kingdom. Data relating to experiences during COVID-19 were analysed using reflexive thematic analysis.ResultsWe identified six themes: Disruptions to Routine Treatment; Introduction of Virtual Treatment; Separation from Treatment, Others and the World; Impact on Recovery; Impact on Staff; and Pressure on Referral Pathways. COVID-19 posed significant challenges to IP and DP services: forcing closures, operating with restrictions and virtual treatment, and impacting delivery of essential treatment components, referral pathways, clinician wellbeing, risk management, and patient isolation and recovery trajectories. Opportunities arose, in particular in DP services offering virtual support.ConclusionsCOVID-19 challenged the continuation of multidisciplinary treatment. The findings underline the necessity for medical, psychological, practical, and nutritional support, as well as carer involvement and fostering social connections to remain at the forefront of intensive treatment for severe AN. They also emphasise the uncertainty surrounding which intensive treatment may be best suited to which patient when, particularly within the context of virtual DP support.

Optimal Hybrid Precoding Based QoE for Partially Structured Massive MIMO System

Precoding is a beamforming technique that supports multi-stream transmission in which the RF chain plays a significant role as a digital precoding at the receiver for wireless communication. The traditional precoding contains only digital signal processing and each antenna connects to each RF chain, which provides high transmission efficiency but high cost and hardware complexity. Hybrid precoding is one of the most popular massive multiple input multiple output (MIMO) techniques that can save costs and avoid using complex hardware. At present, network services are currently in focus with a wide range of traffic volumes. In terms of the Quality of Service (QoS), it is critical that service providers pay a lot of attention to this parameter and its relationship to Quality of Experience (QoE) which is the measurement of the overall level of user satisfaction. Therefore, this paper proposes hybrid precoding of a partially structured system to improve transmission efficiency and allocate resources to provide network services to users for increasing the user satisfaction under power constraints that optimize the quality of baseband precoding and radio frequency (RF) precoding by minimizing alternating algorithms. We focus on the web browsing, video, and Voice over IP (VOIP) services. Also, a Mean Opinion Score (MOS) is employed to measure the level of user satisfaction. The results show that the partially structured system provides a good user satisfaction with the network's services. The partially structured system provides high energy efficiency up to 85%. Considering web service, the partially structured system for 10 users provides MOS at 3.21 which is higher than 1.75 of fully structured system.

Interconnection In the Convergence Era (IP-BASED Interconnection Regulation Challenges)

The IP age of networks and services is increasing very quickly. Starting from its VoIP, NGN, and IMS to today's IP services landscape, which includes fixed and mobile high-definition (HD) voice, HD video calling, unified communications (UC), video conferencing, and telepresence, cooperation, instant messaging (IM), and the rich communication suite (RCS). Convergence is one of the most significant current trends in the ICT sector. It has changed the way services are delivered and obscured the distinction between fixed and mobile services. The transition to Next-Generation Networks (NGN) is the most important next phase in the ICT sector's convergence-driven evolution. In the realms of NGN, VoIP, and IMS, there is no PSTN equivalent; instead, there are "IP islands " that locate the total value of an IP service. The next basic step is to expand the arrive of those services across a totally interconnected cross-network premise in order to maximize their overall esteem among their target audiences. The liberalization of infrastructure services depends on managing the interconnection interface between the competitive and regulated sectors. These paper outlines regulation issues raised by IP-based interconnection and examine the current practices and procedural ways that being developed to address these concerns.

University libraries provide intellectual property information service in China: theoretical framework and system development

PurposeThere is no proposed solution to address the unresolved issues of constructing the Chinese university intellectual property information service system (IPISS) to promote the whole process service efficiency of IP creation, utilization, protection and management. The purpose of this paper is to propose a complete system, including theoretical framework and system development which addresses the existing difficulties to IP create, protect and transfer for researchers in universities. The paper shares the practice of utilizing the system developed by Wuhan University IP research team known as Wuhan University Intellectual Property Information Service System (WHU-IPISS).Design/methodology/approachFirst, the IPISS of 23 universities in China was investigated on the internet. Aiming at the deficiencies of the system, such as single service type, lack of patent display window, low management efficiency. This paper constructs the theoretical framework, proposes the IP ecological chain model, divides it into four sub-chains and carries on the functional design. Further, under the theoretical framework, the IPISS was developed, including the resource supply management system, user demand matching system, resource assessment system and expert support system. Finally, the system was applied to Wuhan University to provide IP services in the whole process for university researchers.FindingsWHU-IPISS realizes the functions of IP resource supply, demand matching, value evaluation and expert support. It solves the IP needs of university researchers and provides a guarantee for their technology research, patent portfolio, patent transfer and patent rights protection. It also improves the efficiency of IP service and can construct the IP ecosphere in universities.Originality/valueThe WHU-IPISS solution resolves issues of “How to develop the university IP whole process service model, fulfilling the IP service needs for universities' researchers”. The software will be released as open-source for other universities' use. The publishing model is also useful for those universities that intend to implement the IPISS.

Searching for a new normal-Hospital-employed researchers' experiences during the COVID-19 pandemic.

BackgroundThis study focuses on hospital‐employed researchers, a relatively new staff group. Their job descriptions vary, which may lead to lack of clarity or preparedness regarding their roles and core tasks during a crisis such as COVID‐19.AimThe aim of this study was to explore hospital‐employed healthcare researchers' experiences of work during the COVID‐19 pandemic.DesignA qualitative design based on Graneheim and Lundman's latent content analysis of two focus groups with researchers in clinical practice was chosen to explore researchers' experiences of work during the COVID‐19 pandemic.MethodsFifteen hospital researchers participated in two focus groups, divided into predoctoral and postdoctoral researchers. Focus groups were conducted in May 2020 during the COVID‐19 pandemic, using the voice over IP service, Skype®, due to risk of contagion.Findings‘Searching for a new normal during the COVID‐19 pandemic’ was the main theme during the latent content interpretation, with subthemes of (i) balancing calm and insecurity, (ii) negotiating core tasks and (iii) considering the future.ConclusionThe 15 researchers tried to balance calm and insecurity within work and family, on standby for the hospital's contingency plan, and in their research tasks. This led them to negotiate their core tasks and to reflect on the changes and consequences for their positions as researchers in clinical practice in the future.

Modelling and performance analysis of DWDM passive optical network

Passive optical networks are emerging as the main technology for building access networks. The current metropolitan optical communication networks operate at 1Gbps, which appears to be insufficient for the future development and exponential growth of traffic from IP services. The existing various traffic-intensive services and the growing interest in 4K video content and streaming services require the introduction of new solutions within passive optical networks (PON). A promising option is the combination of 10 Gbps and above high-speed data transmission with spectral multiplexing. DWDM will provide the required high spectral efficiency, but in contrast will require the use of a proper modulation scheme to achieve a longer distance. In this paper a model for performance analysis and solving optimization problems for DWDM-PON networks is developed. Different signal modulations are considered and a comparative analysis is performed. The behaviour of the system at different input parameters is modelled. Performance analysis is performed by evaluating the spectral characteristics and values of BER and Q-factor.

Optimization Technology of Optical Fiber Communication Network Based on Service Classification

Optical fiber has huge bandwidth, as a physical medium, it has good anti electromagnetic interference characteristics and excellent security performance, which is very suitable for the establishment of backbone transmission network. Wavelength division multiplexing(WDM) network based on optical fiber has been widely used. Using optical fiber for information transmission can give full play to the nearly unlimited transmission capacity of optical fiber. With the advent of the information age, data service has become the mainstream business, replacing the original telephone voice service. The great development of data transmission service further promotes the continuous development of WDM network technology. Among all kinds of services in optical network, IP service accounts for the largest proportion. In optical networks, switching is an important technology. Network performance is directly related to switching technology. With the development of optical communication technology, a variety of optical switching devices are introduced into WDM optical network, such as optical packet switching, optical burst switching and so on. This makes WDM layer have the ability of dynamic path establishment and removal similar to IP layer. In order to improve the performance of the optical network and reduce the blocking rate of the network, in WDM optical network, the services are designed in different levels. For some very important services, the highest priority is given, and the optical path channel with better survivability and higher fault tolerance is selected. For general services, it can be designed as a lower level service, and choose the appropriate optical path channel for transmission. The experimental results show that this hierarchical service design method can make more effective use of network resources, reduce the network blocking rate, and improve the overall performance of the network.

Survey of Countering DoS/DDoS Attacks on SIP Based VoIP Networks

Voice over IP (VoIP) services hold promise because of their offered features and low cost. Most VoIP networks depend on the Session Initiation Protocol (SIP) to handle signaling functions. The SIP is a text-based protocol that is vulnerable to many attacks. Denial of Service (DoS) and distributed denial of service (DDoS) attacks are the most harmful types of attacks, because they drain VoIP resources and render SIP service unavailable to legitimate users. In this paper, we present recently introduced approaches to detect DoS and DDoS attacks, and classify them based on various factors. We then analyze these approaches according to various characteristics; furthermore, we investigate the main strengths and weaknesses of these approaches. Finally, we provide some remarks for enhancing the surveyed approaches and highlight directions for future research to build effective detection solutions.

Machine Learning Based Classification Accuracy of Encrypted Service Channels: Analysis of Various Factors

Visibility into network traffic is a key requirement for different security and network monitoring tools. Recent trends in the evolution of Internet traffic present a challenge for traditional traffic analysis methods to achieve accurate classification of Internet traffic including Voice over IP (VoIP), text messaging, video, and audio services among others. A key aspect of this trend is the rising levels of encrypted multiple service channels where the payload is opaque to middleboxes in the network. In such scenarios, traditional approaches such as Deep Packet Inspection (DPI) or examination of Port numbers are unable to achieve the classification accuracy required. This work investigates Machine Learning-based network traffic classifiers as a means of accurately classifying encrypted multiple service channels. The study carries out a thorough study which (i) proposes and evaluates two machine learning-based frameworks for multiple service channels analysis; (ii) undertakes feature engineering to identify the minimum number of features required to obtain high accuracy while reducing the effects of over-fitting; (iii) explores the portability and robustness of the frameworks trained models under different network conditions: location, time, and volume; and (iv) collects and analyzes a large-scale dataset including nine classes of services, for benchmarking purposes.

Gestión del servicio de préstamos interbibliotecarios del Acuerdo de Bibliotecas Universitarias de la provincia de Córdoba (ABUC)

El presente trabajo describe la gestión de los préstamos interbibliotecarios (PI) del Acuerdo de Bibliotecas Universitarias de Córdoba. Se plantearon como objetivos para determinar el nivel de uso del servicio, el porcentaje de documentos obtenidos sobre el total de peticiones realizadas, la aplicación de encuestas de satisfacción, el uso de sistemas de promoción/difusión, la tipología de usuarios que utilizan el servicio, la tipología de documentos que solicitan, la forma en que las bibliotecas reciben las peticiones, las formas de envío utilizadas y los costos asociados al servicio. Se identificaron además las fortalezas y debilidades respecto a la logística y a la gestión del servicio, el nivel de satisfacción respecto al software de gestión y el nivel de conocimiento respecto al reglamento de PI. Se llevó a cabo un estudio exploratorio descriptivo con enfoque cuantitativo. El diseño fue transversal enmarcado en un estudio de campo cuyas unidades de análisis fueron los bibliotecarios encargados del servicio de PI y los directores de las bibliotecas miembros de ABUC. Se pudo concluir que la mayor fortaleza del servicioestá en el acceso a otras colecciones, lo que permite ampliar el acervo bibliográfico disponible para los usuarios. Las mayores debilidades del servicio de préstamos interbibliotecarios estuvieron relacionadas con los problemas relativos al software Cor-pib y con el envío y recepción de los documentos.

Mitigating DRDoS Network Attacks via Consolidated Deny Filter Rules

This article is concerning distributed reflection denial of service (DRDoS) attacks. These DRDoSattacks are more frequent and large scale, and are one of the biggest threats on the Internet. This paperdiscusses the best way to defend from these attacks using public cloud defenses, such as AmazonAWS, Google GCP, and Microsoft Azure, at a very low cost. Our mitigation strategy takes advantageof the fact that the attacker does not have full control to change the source IP port to anything theywant, when used in these reflective attacks. We propose to have the customer host their Web serversand other types of supporting servers in the public cloud. The cloud provider then reserves a /CIDRblock of IP addresses, which will be protected. The cloud providers customers who opt in, will beallocated an IP address from this block. This block will be used as the source IP address deny portionof the firewall rule-sets. Then the public cloud providers will use BGP4 Flow-Spec or some scriptingsolution, to have their IP service provider neighbors perform the actual filtering of the DRDoS attacktraffic concerning attacks against these servers.

Model of an operator system for the IP services quality monitoring in accordance with the ITU-T requirements Y.1540, Y.1541, Y.1543

Research subject. The paper considers the model of the operator's system for monitoring the quality of IP services in accordance with the requirements of ITU-T Y.1540, Y.1541, Y.1543. Method. Implementation of a generalized monitoring model as a software application based on a two server control system. Core results. A variant of the model and a scheme of the monitoring system elements interaction are proposed. Recommendations on the structure of the system have been developed and formulas for calculating indicators have been proposed. A trial assessment of the public network segment at UNI points was carried out. Practical relevance. The considered model and approaches to its implementation will allow to monitor operator networks in accordance with ITU-T requirements and promote the development of networks and new data transmission services.

Аналіз вимог до процесів управління функціональними сервісами єдиної інформаційної системи управління оборонними ресурсами

The article highlights the needs to create a Unified Information System for Defense Resources Management (DRMIS). The main problems of creating DRMIS are identified in the article. The research shows that form of consolidation of information and providing prompt access to it for analysis and effective decision-making process. The core of IT service in the military-defense environment is also revealed. There are three areas of management of functional services of a Single Information System for Defense Resources Management is separated to: - Development, acquisition and implementation of IT services; - Provision and support of IT services (formalization of customer service requirements for IT services, coordination of divergences between service requirements with the relevant IP service resources and provision of end users with IT services that meet requirements); - Monitoring. Requirements to the processes of management of functional services of DRMIS are formed: functionality, service time, availability, reliability, confidentiality, scale and cost. The basic requirements for the management of functional services are also determined not only by the properties of the IP that provide them. The quality of the IP service itself is essential, as well as the level of regulation of the IP service and end users of IT services. The advantages of using DRMIS functional services in the Defense Sector are indicated: - Transparency of state bodies; - Increasing public confidence in the activities of government agencies; - Reduction of costs and time for the implementation of strategic, large-scale tasks; - Increasing labor productivity; - Access to services 24/7/365; - Clear and timely response to changes in regulations and focus on future global challenges; - Creating the image of Ukraine as an IT state. It is established that in modern conditions the complexity of information systems in the field of defense is growing, and methods and technologies for effective management of their IT infrastructure are developing dynamically. The directions of further effective management of IT services in the field of defense are developed.

Analysis and implementation of SDH protocol in 10Gbps POS signal

The data transmission network based on synchronous digital Hierarchy (SDH) can fundamentally solve the problems of capacity, quality, network management, security and so on in the network transmission of IP services. POS (Packet Over SDH) technology is a way to implement IP service in SDH data transmission network. An analytical solution of SDH protocol with Stratix5 FPGA as the core is studied. According to the SDH standard defined by ITU-T, the analytical circuit of SDH protocol in 10Gbps POS signal is designed on FPGA. The circuit is divided into data receiving module, line overhead module, channel spending module and status register output module, to complete data receiving, information extraction, and output of state information and net load data. The results of functional simulation and board level test show that the scheme is accurate, efficient and consistent with the standard, which can provide some reference value for the development of SDH technology.