Open Systems Interconnection Research Articles

Development of a system for protecting against DDoS attacks at the L7 level of the OSI model - HTTP Flood

In today’s world of globalization and the development of information technology, it is not possible to build a business and production without using the latest advances in science and technology related to information technology. The most promising branches of the direction of information technology are the development and application of cryptographic means of protecting information for various purposes, including the use by government bodies and commercial organizations, the implementation of electronic document management tools, the expansion of the use of encryption schemes based on public keys and means of protecting web resources from DoS attacks. It is necessary to give the following assessment that the problem of countering and repelling Denial of Service attacks is an urgent problem in connection with the widespread introduction of information technologies and the globalization of the Internet, which, in turn, requires effective protection methods corresponding to the adequate cost of providing services. This paper proposes a practical implementation of a technique for detecting one of the most common DDoS attacks at the L7 level of the OSI model - HTTP Flood.

A Novel Game-Based Approach for Computer Networks

Teaching consists of Ideation, Perception, Inception, and Reproduction. A teacher's job is challenging to sustain and maintain all the above characteristics in the classroom. The vital role of a teacher in the classroom pertains to gaining the student's attention. In this gesture, the Active Learning classroom plays a predominant role in understanding a student's empathy. This paper uses a novel game-based learning-by-doing approach to imbibe the concept of the OSI model with the RRR game. The game named RRR represents Ride, Route, and Retract. The learning model applies to a representation of 3I's Tautology. The Outcome of this experiment is a representation to visualize the context and annotate the content. The pedagogy represented in this game aims to meet the learning objectives and outcomes of the specific topic that aims to meet Outcome-based Education. Keywords: Perception, Inception, pedagogy, machine learning, classroom dynamics.

Development of interaction augmented reality environment for TCP/IP and OSI model teaching

Development of interaction augmented reality environment for TCP/IP and OSI model teaching

A new feature popularity framework for detecting cyberattacks using popular features

We propose a novel feature popularity framework, and introduce this new framework to the cybersecurity domain. Feature popularity has not yet been used in machine learning or data mining, and we implement it with three web attacks from the CSE-CIC-IDS2018 dataset: Brute Force, SQL Injection, and XSS web attacks. Feature popularity is based upon ensemble Feature Selection Techniques (FSTs) and allows us to more easily understand common and important features between different cyberattacks. Three filter-based and four supervised learning-based FSTs are used to generate feature subsets for each of our three different web attack datasets, and then our feature popularity frameworks are applied. Classification performance for feature popularity is mostly similar as compared to when “all features” are evaluated (with feature popularity subsets having better performance in 5 out of 15 experiments). Our feature popularity technique effectively builds an ensemble of ensembles by first building an ensemble of FSTs for each dataset, and then building another ensemble across a dataset agreement dimension. The Jaccard similarity is also employed with our feature popularity framework in order to better identify which attack classes should (or should not) be grouped together when applying feature popularity. The four most popular features across all three web attacks from this experiment are: Flow_Bytes_s, Flow_IAT_Max, Fwd_IAT_Std, and Fwd_IAT_Total. When only using these four features as input to our models, classification performance is not seriously degraded. This feature popularity framework granted us new and previously unseen insights into the web attack detection process with CSE-CIC-IDS2018 big data, even though we had intensely studied it previously. We realized these four particular features cannot properly identify our three web attacks, as they operate mainly from the time dimension and NetFlow features from layers 3 and 4 of the OSI model. Conversely, our three web attacks operate in the application layer (7) of the OSI model and should not leave signatures in these four features. Feature popularity produces easier to explain models which provide domain experts better visibility into the problem, and can also reduce the complexity of implementing models in real-world systems.

Physical layer security using boundary technique for emerging wireless communication systems

AbstractThe broadcast nature of radio propagation in wireless communication has been suspected as the loopholes of passive or active attacks by unauthorized users (eavesdroppers). The physical layer security techniques operate at the lowest stack of OSI layer against conventional cryptographic approaches, operating at the upper layer. However, techniques such as channel coding, power (directional antenna and artificial noise), and spread spectrum have been (and continuously) deployed to safeguard against sophisticated attacks. Most of these deployments are theoretical, and a few are enhanced for efficient security against an intruder. In this article, a boundary technique approach is proposed and applied to the physical layer to improve its secrecy‐capacity and subdue adversary effects at the legitimate receiver. Hybrid performance metrics were adopted, and a Monte Carlo simulation was performed. The result obtained using secrecy outage probability, secrecy‐capacity, and intercept‐probability show that our proposed techniques enhance the secret transmission between the main transmitter and legitimate receiver. The simulation results were compared with the analytical methods. It was found that the channel between the transmitter and the main receiver has a better signal‐to‐noise ratio than the corresponding eavesdropper's channel. Conclusively, performance of the proposed technique is validated for applications in emerging wireless communication systems.

A security view for LIDO

This article deals with cybersecurity and specially IoT security. We add a seven view to the Internet of Things (IoT) universal modelling language called “LIDO”. “LIDO” has six (6) different views each represents an aspect of the IoT domain. Security deals with tree aspects: Confidentiality, Integrity, Availability (CIA). This CIA triad model is a safety model that is intended to guide strategies for data security inside the places of a society or corporation. The “OSI” propose a model made of seven security layers that satisfies this CIA triad Model. We present in this article a layered IoT security view based on standards. We have retained this OSI model in seven layers to build the security view. The most delicate layer that we can't control is the “human layer”. To address this lack, we propose to set up an ethic which regulates the conscience and the behavior of man. We propose to include this ethic that educators and security specialists will define in the textbooks of generations to come.

Next Generation Task Controller for agricultural Machinery using OPC Unified architecture

ISO 11783 is a communication protocol for tractors and implements. It specifies a network of control functions connected with a CAN bus. The task controller is a control function that is used to control implements based on planned tasks. Implements expose their structure to the task controller with Device Descriptor Object Pool XML files. The guidelines for modelling implements leave room for interpretation, which can lead to compatibility issues. The agricultural industry has decided that the physical layer of the future high-speed ISOBUS will use Ethernet, but the higher OSI layers are undecided. One Ethernet-compatible middleware to be considered is OPC UA, a platform-independent communication standard for systems and devices. It uses object-oriented information modelling techniques and allows users to define new information models based on the OPC UA base information model and its standardized extensions. In this article, an OPC UA information model was designed for data exchange between the task controller and implements, and its suitability for use in the high-speed Next-Generation ISO 11783 Task Controller was evaluated. Modelling rules for the information model were designed with a focus on modelling all types of implements that apply a product or products. OPC UA Implement Server and OPC UA Task Controller applications were developed to test the information model. The evaluation of these OPC UA applications showed that the OPC UA model (OPC UA for the Next Generation ISO 11783 Task Controller information model) presented is suitable for communication between the task controller and implements.

Model Development of Universal Hardware and Software Module for Medical Information System

Medical information systems (MIS) are the object of the research presented. They allow information processing throughout the patient's interaction with medical services - from contacting such institutions to monitoring the patient after rehabilitation. However, for various reasons, during the information process exchange within the framework of MIS, distortions of collected or transmitted data are possible, which leads to wrong medical decisions. Currently, new approaches are being implemented using Software-Defined Networks, but our work proposes an alternative solution designed to work conservatively with existing equipment using established protocols. To solve the stated problem, this study has developed a universal hardware-software module (UHSM) model, which ensures the effective transmission of sophisticated medical information through networks. A distinctive feature of such UHSM is the connection of different medical equipment in various related to MIS information networks, as well as automatic configuration under all current standards. The study demonstrates that for the most effective UHSM functioning, it is essential to consider the existing features arising during the interaction process of devices in the context of modern networks created for information exchange, based on the established communication model of open-system interconnection (OSI). Keywords—classification methods, information coding methods, information networks, knowledge base, medical information system, multilevel approach, structure synthesis of large systems, telemedicine technologies

An Ingenious Approach to Create Compassionate Teaching and Learning Environment

Abstract :The topology of Teaching is changing its wings from a vibrant classroom to an ingenious active-based classroom. In this context, up-gradation to build an adaptable Covid-19 system that revamps the traditional way of Teaching tautology to a generic active learning-based system has been essential aid in the topology of Teaching and Learning mechanisms. A conventional adaptive active learning system that justifies the topology needs and pedagogy builds a passionate Teaching and Learning environment. This paper illustrates a pedagogy selected to outline the OSI Model in the Computer Networks and vibrant the deliberate classroom environment to an active learning classroom environment that inspires the classroom teaching form to a compassionate Tautology of Active Learning environment. The literature suggests many ways to imbibe a concept, but literature misrecollects the pedagogy's selection according to the topology. Keywords : Topology, Tautology, Vibrant, Active Learning environment.

Simple and Flexible Way to Integrate Heterogeneous Information Systems and Their Services into the World Data System

The approach to applications integration for World Data Center (WDC) interdisciplinary scientific investigations is developed in the article. The integration is based on mathematical logic and artificial intelligence. Key elements of the approach - a multilevel system architecture, formal logical system, implementation - are based on intelligent agents' interaction. The formal logical system is proposed. The inference method and mechanism of solution tree recovery are elaborated. The implementation of application integration for interdisciplinary scientific research is based on a stack of modern protocols, enabling communication of business processes over the transport layer of the OSI model. Application integration is also based on coordinated models of business processes, for which an integrated set of business applications are designed and realized.

Efficient addressing schemes for internet of things

The internet of things (IoT) defines the connectivity of physical devices to provide the machine to machine communication. This communication is achieved through various wireless standards for sensor node connectivity. The IoT calls from the formation of various wireless sensor nodes (WSNs) in a network. The existing neighborhood discovery method had the disadvantage of time complexity to calculate the cluster distance. Our proposed method rectifies this issue and gives accurate execution time. This paper proposed mobility management system based on proxy mobile IPv6 as distributed PMIPv6 with constrained application protocol (CoAP-DPMIP) and PMIPv6 with constrained application protocol (CoAP-PMIP). It also provides the optimized transmission path to reduce the delay handover in IoT network. The PMIPv6 described the IPv6 address of mobile sensor device for efficient mobility management. The network architecture explains three protocol layers of open systems interconnection model (OSI model). The OSI layers are data link layer, network layer and transport layer. We have proposed the distance estimation algorithm for efficient data frames transmission. This paper mainly focuses the secure data transmission with minimum loss of error. The evaluation result proved that proposed technique performance with delay, energy, throughput and packet delivery ratio (PDR). Also, it measures the computational time very effectively.

Application Based performance monitoring heavy data transmission of Local Area Network

There are many applications should be work online, these applications can be seen in the application layer of OSI reference model, each one of these consumes particular band width, bit rate and network speed depending of the resources that used to make any application operate for example there is a widely difference between video streaming network application and text chatting application. In this paper when any computer network needs to be examined, at least two different applications should be taken for example to monitor network performance when these application going to work and get in action. In this paper the researcher designed and a local area network to implement dedicated applications, monitor the network factors performance, get results, and compare between applications.

Prediction of atmospheric corrosion from meteorological parameters: Case of the atmospheric basin of the Costa Rican Western Central Valley

The assessment of atmospheric corrosion is currently based on the study of atmospheric basins (AB). Modeling atmospheric corrosion in many cases involves the measurement of several meteorological and atmospheric pollution parameters, specifically temperature, relative humidity, chloride, and sulfur dioxide, making the estimation process more complex. However, for the Western Central Valley (WCV) in Costa Rica, a low-pollution AB, it is possible to develop simplified atmospheric corrosion models based on a small number of atmospheric parameters. In this paper, the meteorological variables of the study region were analyzed in terms of their dependency on altitude and their applicability in the development of a simplified model to predict the corrosion rate (Vcorr). The output of the predictive model was compared with the standard model of ISO 9223:2012, showing a higher skill and giving reliable results for a wide interval of altitudes.

Design and Implementation of Semi-Physical Platform for Label Based Frame Switching in Integrated Satellite Terrestrial Networks

With the explosion of traffic demand in recent years, the integration of satellite optical networks and terrestrial networks (ISTN) creates a promising networking solution for future low-latency, high-rate, and high-capacity communications. Owing to the high cost of deploying and maintaining a satellite optical network, it is critical to carefully design and plan the network to ensure the performance of the network. Thus, a semi-physical simulation platform based on software-defined networks (SDNs) is developed to simulate a satellite optical network and evaluate the performance of the proposed label-based advanced orbiting system (AOS) frame switching method that adheres to the Consultative Committee for Space Data Systems’ recommended standard (CCSDS). The semi-physical simulation platform has two major innovations: (1) adapting and integrating network protocols between the CCSDS and open system interconnect (OSI) reference models, particularly at the data link layer, and (2) the foundation for an SDN-based satellite optical network. In the control plane, real-time VxWorks Simulators serve as controllers to establish and manage various network protocols and the link manager protocol (LMP). Here, network protocols include open shortest path first (OSPF) for routing managing and controlling messages, constraint shortest path first–traffic engineering (CSPF-TE), and constraint-label distribution protocol (CR-LDP) for routing data services. LMP is used to assign and reserve satellite optical link resources. The performance of the architecture and protocols is evaluated via a semi-physical simulation platform.

Разработка системы мониторинга сетевого трафика с элементами фильтрации на уровне L2

This article proposes a network traffic monitoring system with filtering elements at the data link layer (L2) of the OSI model. This article presents the general requirements and approaches to the construction of the proposed monitoring and filtering system. The developed device is built on the basis of SDN technology, which makes it possible to create a more flexible and multifunctional network device compared to traditional network devices. In the process of developing the device, standard methods and components available to the masses were used. Under the conditions of the tasks set, a schematic diagram of the developed device based on the TE0714 TRM model board and the SFP standard transceiver is presented. It is proposed to use the device for a monitoring system with filtering elements. Network traffic monitoring is proposed to be implemented based on the SNMP protocol to collect information from critical network nodes. It is proposed to implement network traffic filtering based on a "white" list of MAC addresses to limit the list of devices that have access to the system. The practical significance of this article lies in the description of the approach to the development of a fundamental device for monitoring public and personal networks with flexibly defined additional and basic functions. The proposed device, thanks to the use of SDN technology, provides individual customization for customer requests, which means the possibility of expanding functionality without purchasing new hardware and firmware. The proposed device, due to the use of SDN technology, provides individual customization for customer requests, which means the possibility of expanding the functionality without purchasing new hardware and firmware.

Concepts of Cyber Security

This article summarizes, presents and develops technological concepts of cybersecurity according to the current state of the problem. Based on the OSI model, the main protocols used for it and hardware devices on the one hand, and the main vulnerabilities and threats on the other, the current protections against cyberattacks have been revealed.

Layer 8 Tarpits:

This paper presents a concept for utilising falsified documents and disinformation as a security measure by diminishing the utility of the stolen information for the attacker. Classical definition of tarpitting honeypots is to create virtual servers attractive to worms and other malware that answer their connection attempts in such a way that the machine on the other end becomes stuck. A common extension to the OSI model is to refer the user as the layer 8 on top of the application layer. By generating attractive looking but falsified documents and datasets within our secured network along with the real information, we could be able to force the malicious user on the other end similarly to be 'stuck' as they need to dig through and verify all the information they have managed to steal. This in effect slows down the opponents' decision making speed, can make their activity in the network more visible and possibly even mislead them. The concept has similarities to the Canary trap or Barium Meal type of tests, and using Honey tokens to help identify who might be the leaker or from which database the data was stolen. However, the amount of falsified data or fake entries in databases in our concept is significantly larger and the main purpose is to diminish the utility of the stolen data or otherwise leaked information. The requirement to verify the information and scan through piles of documents trying to found the real information among them can give more time to the defender to react if the attack was noticed. It will also reduce the value of the information if it is just dumped in the open, as its contents and authenticity can be more easily questioned. AI powered methods such as the GPT-3 that can generate massive amounts very realistic looking text which is hard to differentiate from human generated texts could make this type of concept more feasible to the defender to utilise. The shortcoming of this concept is the risk that legitimate end-users could also confuse the real and falsified information together if that is not prevented somehow.

Seguridad a nivel de enlace de datos en el modelo de interconexión de sistemas abiertos (OSI)

Communications networks can provide an innumerableamount of services in an organization that will allow it to satisfy its most important needs, helping it to fulfill its organizational objectives more efficiently.in their computing devices can cause a great disadvantagefor these objectives. Layer two of the OSI model is considered one of the most important in the flow of information, since it is practically the starting point for communication with the rest of the layers of this model, so there is a need to study computer attacks on this layer and implement techniques to improve security in this layer.

A survey of cyber security threats and solutions for UAV communications and flying ad-hoc networks

Unmanned aerial vehicles (UAVs) are a rapidly evolving technology, and being highly mobile, UAV systems are able to cooperate with each other to accomplish a wide range of different tasks. UAVs can be used in commercial applications, such as goods delivery, as well as in military surveillance. They can also operate in civil domains like search-and-rescue missions, that require multiple UAVs to collect location data as well as transmit video streams. However, the malicious use of UAVs began to emerge in recent years. The frequency of such attacks has been significantly increasing and their impact can have devastating effects. Hence, the relevant industries and standardisation bodies are exploring possibilities for securing UAV systems and networks.Our survey focuses on UAV security and privacy issues whilst establishing flying ad-hoc networks (FANETs) as well as on threats to the Internet of drones (IoD) infrastructure used to provide control and access over the Internet between UAVs and users. The goal of this survey is to categorise the versatile aspects of the UAV threat landscape and develop a classification approach based on different types of connections and nodes in FANETs and IoD. In particular, we categorise security and privacy threats on connections between UAVs, ground control stations, and personal pilot devices. All the most relevant threats and their corresponding defence mechanisms are classified using characteristics of the first four layers of the OSI model. We then analyse the conventional and novel UAV routing protocols, indicating their advantages and disadvantages from the cyber security perspective. To provide a deeper insight, the reviewed defence mechanisms have undergone a thorough examination of their security requirements and objectives such as availability, authentication, authorisation, confidentiality, integrity, privacy, and non-repudiation. Finally, we discuss the open research challenges, the limitations of current UAV standards, and provide possible future directions for research.

Design and analysis of intrusion detection systems for wireless mesh networks

Intrusion is any unwanted activity that can disrupt the normal functions of wired or wireless networks. Wireless mesh networking technology has been pivotal in providing an affordable means to deploy a network and allow omnipresent access to users on the Internet. A multitude of emerging public services rely on the widespread, high-speed, and inexpensive connectivity provided by such networks. The absence of a centralized network infrastructure and open shared medium makes WMNs particularly susceptible to malevolent attacks, especially in multihop networks. Hence, it is becoming increasingly important to ensure privacy, security, and resilience when designing such networks. An effective method to detect possible internal and external attack vectors is to use an intrusion detection system. Although many Intrusion Detection Systems (IDSs) were proposed for Wireless Mesh Networks (WMNs), they can only detect intrusions in a particular layer. Because WMNs are vulnerable to multilayer security attacks, a cross-layer IDS are required to detect and respond to such attacks. In this study, we analyzed cross-layer IDS options in WMN environments. The main objective was to understand how such schemes detect security attacks at several OSI layers. The suggested IDS is verified in many scenarios, and the experimental results show its efficiency.