Packet Analysis Research Articles

A robust transmission with enhancement of 5G PHY using FBMC and AMC for machine-to-machine communication node

Advancement of 5G new radios has enabled more robust communication for the Machine-to-Machine (M2M) communication node, using filter bank multicarrier (FBMC). This paper focuses on robust transmission over random fluctuations of the channel and also enhances the battery life for the massive machine type communication (mMTC) node. Filter bank multicarrier and Adaptive Modulation Coding (AMC) have been utilized together to enhance the performance of the 5G (NR) PHY layer. A frame-to-frame implementation is used to diminish the impact of fading using AMC, while efficient utilization of spectrum is achieved using FBMC. The selection of the AMC profile is obtained through the analysis of uplink packets using the Distance Statistics (DS). The FBMC is incorporated with 5G PHY in place of OFDM to achieve the optimum utilization of spectrum and also obtain a significant reduction in peak to average power ratio (PAPR) for robust transmission, which saves 10% of the battery requirement. On the basis of channel state information, distance statistics were employed to optimize the AMC. The optimum selection of AMC with FBMC will reduce the bit error rate (BER) against multipath fading and ensure the better utilization of available spectrum to attain the optimum utilization of the power amplifier.

A study on methodology on VoIP-based communication investigation through network packet analysis

A study on methodology on VoIP-based communication investigation through network packet analysis

A study on methodology on VoIP based communication investigation through network packet analysis

A study on methodology on VoIP based communication investigation through network packet analysis

Evaluating Segment Routing Technology for MPLS-based Network

Multi-protocol label switching (MPLS) has proved its strength for large network traffic since it emerged. However, due to increasing demands on network services and for a massive traffic that continually growing, Segment Routing was developed and introduced to overcome the limitation in load balancing and scalability of current MPLS. This paper examines the effectiveness of the SR technique for MPLS-based networks with Traffic Engineering (TE) via experimental work where an implementation of basic SR scenarios is emulated and tested for some comparison criteria. These criteria were based on packet analysis for both simple ICMP and flow in stable conditions and for network convergence in case of failure. Simulation results confirm the effectiveness of SR in MPLS-TE-based networks in terms of convergence and reducing overhead traffic control.

Direct dissociative recombination of HCO+via the core-excited doublet and the lowest quartet states.

The dissociative recombination of HCO+ up to 1 eV collision energy is studied. New calculations for several core-excited HCO states provide improved potential energy surfaces crossing the HCO+ ground state surface in the vicinity of its equilibrium geometry. Wave packet analysis leads to significantly higher contributions of the direct mechanism to the cross section for electron energy ε < 0.7 eV than according to earlier studies [Larson et al., Phys. Rev. A, 2012, 85, 042702]. The limit H + CO(a3Π) is found to be the most probable exit channel. We discuss the improved agreement of theory with the latest experiments [Hamberg et al., J. Phys. Chem., 2014, 118, 6034] resulting from combination with the most recent calculations of the indirect process [Fonseca dos Santos et al., J. Chem. Phys., 2014, 140, 164308]. For the lowest quartet surfaces some vibrational states and their population and depopulation (mediated by spin-orbit coupling) are examined.

Dynamic deep stateful firewall packet analysis model

Due to challenges of COVID -19 pandemic, network is widely used and more networkthreats are evolving, therefore, there is a need to improve network tools in order tocontrol threats. Stateful firewall is a network tool that build up packet filters by keepingrecord of packet passing through the network in a state table, so that when a newpacket arrives, the stateful firewall filtering mechanism first checks to determine whetherthe information is similar to the one in state table, in order to allow or blocked a packet.Although several stateful firewall models have been developed to filter network packets,there is no model that is able to filter the entire parts of a network packet which includethe header, trailer and payloads. In the stateful firewall models developed, mixedresearch methodology have been used. The models are developed in pythonprogramming language; an experimental research design is used, string matching andpattern matching algorithms are used in developing the models.

Програмне забезпечення для простого аналізу файлів мережевого трафіку мовою Python

The object of this study is software for analyzing network traffic. The analysis of the most popular packet analyzers shows that most of them require significant technical skills and experience in working with network traffic from the user. Some of them have a complex and difficult to perceive graphical user interface. Therefore, an application was developed that is easy to use, has sufficient functionality for quick analysis and requires a minimum of system resources. The program works with a command line interface. The application allows the user to conduct an initial analysis of a network traffic file with the *.pcap extension. The main functions of the program include: viewing the IP and MAC addresses available in the file; displaying packet exchange between two hosts; viewing all packages for a certain period of time; viewing services to which connections were made. The created application will allow users even without professional training to conduct a basic analysis of intercepted network traffic.

The Analysis of Packet to Detect Malware Files

The article covers the procedure of detecting malicious files from a packet that was responsible to make the system infected, this paper will highlight all the key elements that play a pivotal role in detecting those files. The primary motivation behind this work is to provide information about those malware files and the detection of those files. This article also describes the use of perfect packet analysis software as well as its key features which can make our analysis simpler. Moreover, this article concludes with the author's perspective regarding malware analysis.

The Analysis of Packet to Detect Malware Files

The article covers the procedure of detecting malicious files from a packet which was responsible to make the system infected, this paper will highlight all the key elements that plays a pivotal role in detecting those files. The primary motivation behind this work is to provide information about those malware files and the detection of those files. This article also describes the use of perfect packet analysis software as well as its key features which can make our analysis simpler. Moreover, this article concludes with the author's perspective regarding the malware analysis.

Towards a blockchain-SDN-based secure architecture for cloud computing in smart industrial IoT

Some of the significant new technologies researched in recent studies include BlockChain (BC), Software Defined Networking (SDN), and Smart Industrial Internet of Things (IIoT). All three technologies provide data integrity, confidentiality, and integrity in their respective use cases (especially in industrial fields). Additionally, cloud computing has been in use for several years now. Confidential information is exchanged with cloud infrastructure to provide clients with access to distant resources, such as computing and storage activities in the IIoT. There are also significant security risks, concerns, and difficulties associated with cloud computing. To address these challenges, we propose merging BC and SDN into a cloud computing platform for the IIoT. This paper introduces “DistB-SDCloud”, an architecture for enhanced cloud security for smart IIoT applications. The proposed architecture uses a distributed BC method to provide security, secrecy, privacy, and integrity while remaining flexible and scalable. Customers in the industrial sector benefit from the dispersed or decentralized, and efficient environment of BC. Additionally, we described an SDN method to improve the durability, stability, and load balancing of cloud infrastructure. The efficacy of our SDN and BC-based implementation was experimentally tested by using various parameters including throughput, packet analysis, response time, bandwidth, and latency analysis, as well as the monitoring of several attacks on the system itself.

Extensive performance analysis of OpenDayLight (ODL) and Open Network Operating System (ONOS) SDN controllers

The term Software Defined Network or SDN is one of the many emerging technologies that has been revolutionizing the concept of networking. By decoupling the Data and Control plane, it has lot to offer in the field of information technology. The Control Plane is regarded as the brain of the network, which is a centralized unit of SDN network along with the controller. Selection of SDN controller is one of the most important task in designing of SDN based Network. Through this paper, we intend to compare two eminent controllers: OpenDayLight and ONOS controllers, according to their efficacy. Mininet, which is meant for demonstrating the simulation of switching and end-devices, has been taken into account. Apart from this, we have used Wireshark Packet Analyser and iperf, which provides real-time traffic flow between Mininet and the Controller. Performance of the controller plays an important role in the network and answers question like how it is going to perform. There are the various factors that helps in evaluating the performance of SDN controller. After analysing, it has been found that ONOS has better performance, with respect to throughput, TCP Window Scaling, TCP/UDP Bandwidth, Burst Rate, Jitter, Goodput, TCP Stevens Graph, Round Trip Time (RTT), and its usability. This paper helps us to understand performance abilities between ONOS and ODL in medium-to-large scale SDN Networks.

Enterprise Network Infrastructure Malicious Activity Analysis

Inter and intra-network connectivity have become a useful resource for accessibility and flexibility of data for different organizations. Online services are increasing day by day, everything is available online, it generates a huge amount of data, that require cyber security for ensuring secure interconnectivity between devices. Because of an exponential increase in internet users and cyber-attacks, the data security and credibility of various organizations is on stake. In the continued development of the threat environment, cyber security experts deal with numerous threat son daily basis. As multiple attacks on computer networks and systems are becoming stronger each day therefore current security tools are often inadequate to resolve issues relating to unauthorized users, reliability, and reliable network security. To maintain a safe environment, Intrusion-Detection Mechanisms (IDS) enabled to control device functions and detect intrusions should typically be used to supplement with other protection strategies; for which conventional security methods are inadequate. Actual users expect their requested information to be processed in real-time, while malicious traffic needs to be mitigated just as quickly as possible. As traffic increases, this problem becomes more complex. This paper contributes a detailed analysis of network packets to find anomaly detection based on the UNSW NB 15 dataset and investigate the the difference between IP packet behavior for both malicious and legitimate packets. Besides we acquaint with new methodologies to illuminate and appraise the network attack in a very proficient way using different machine learning algorithms which will accomplish locating the malicious traffic in the least execution time with precision

Comprehensive Evaluation Method of Bird Attack Prevention Effect Based on Data Packet Analysis

Comprehensive Evaluation Method of Bird Attack Prevention Effect Based on Data Packet Analysis

Перспективы использования машинного обучения для классификации сетевого трафика в технологиях доверенного взаимодействия

The current stage of development of the world community is characterized by an everincreasing role of the information sphere and is completely dependent on information resources and technologies, their quality and security. Computerization of all aspects of life has become the main reason that a significant part of the elements of social relations cannot be implemented without the use of new IT in various subject areas, and hence without the implementation of a reliable system of integrated security of the developed information automated systems. This article gives the concept of network traffic, considers the classification of network traffic, in which classification by port numbers, deep packet analysis, stochastic packet analysis, and the use of machine learning were identified. Methods for protecting information using trusted technologies were defined, where a general presentation of trust technologies was considered. The main conclusions are drawn on the prospects of using machine learning to classify network traffic in trusted technologies.

Deep packet analysis firewall model

Firewall (software or hardware device that monitors traffic into and out of the network). It can be classified as stateless or stateful. The existing firewalls are only concerned with filtering packets based on the information contained in the header part of every packet. The most improved stateful inspection firewalls have a state table enabling the storage of header information such as source address, destination address, port, connection status and protocol. Consequently, existing firewalls can be compared to only reading the book tittle and foregoing other essential activities such as evaluating the content of the book. The proposed Deep packet analysis firewall model, not only evaluated the header content of a packet but also open and examines the content in a packet in order to detect and block any threats. In addition, the proposed model will be analyzing the actual content of the traffic that is flowing through packet as opposed to existing firewall which only focuses on analyzing the header content. The model will also locate, detect, categorize, block, or reroute packets having certain data payload and specific codes that are not located, detected, categorized, blocked or redirected by existing firewall. Therefore, deep packet analysis firewall model is a feasible approach to overcome challenges faced in cyberspace today. The proposed Deep packet analysis firewall model will use mixed research method. Quantitative method will include obtaining data from the peer reviewed academic articles in the area of study. Quantitative method will also entail using a simulation by feeding quantitative data into the model to produce quantitative results. Finally, qualitative method will include conducting interviews and use of questionnaires

Railway foreign body vibration signal detection based on wavelet analysis

Based on the wavelet packet analysis method with time-frequency analysis characteristics, the measurement signal of the vibration system is processed for noise reduction, the soft-hard threshold compromise wavelet denoising method used has the advantages of soft threshold and hard threshold denoising, and through the introduction of compromise factors, signal processing can be performed more flexibly in signal analysis. For the denoised signal, the fundamental wavelet time-energy spectrum analysis, the main components of the signal can be clearly displayed, and according to the distribution of its energy in each frequency band, the signal characteristics can be displayed intuitively. Experimental results show: It can be determined that there is a foreign body intrusion incident at a position 520 m away from the monitoring point, rather than a normal train travel incident. In fact, we are walking back and forth at a distance of about 520 m from the monitoring point, simulating the intrusion of illegal foreign objects such as pedestrians and livestock beside the railroad tracks prove that analysis and judgment can be known, the wavelet analysis proposed by the author can realize the monitoring and judgment of some illegal foreign body intrusion incidents such as pedestrians and livestock.

Cluster Migration Distance for Performance Degradation Assessment of Water Pump Bearings.

Because the signal of water pump bearing is seriously disturbed by noise and the fault evolution is complex, it is difficult to describe the performance degradation trend of water pump bearing in a timely and accurate manner using the traditional performance degradation index (PDI). In this paper, a new Cluster Migration Distance (CMD) algorithm is proposed. The extraction of the indicator includes the following four steps: First, the relevant blind separation is used to extract the useful signal of the monitored bearing from the mixed signal; secondly, the impact component is further enhanced by wavelet packet analysis. Then, the redundancy of the original feature vectors is eliminated using our previously proposed KJADE (Kernel Joint Approximate Diagonalization of Eigen-matrices) method. Finally, the newly proposed CMD index is computed as PDI. By calculating the offset trajectory of the feature cluster centroid in the continuous running process of the bearing, CMD can aptly deal with the complex and variable features in the fault evolution process of the water pump bearing. The whole-life monitoring data of a 220 KW water pump system are processed. The results show that the proposed CMD index has better early-warning ability and monotonicity than the traditional kurtosis index.

Energy and Path-Aware-Reliable Routing in Underwater Acoustic Wireless Sensor Networks

In underwater acoustic sensor networks (UASNs), energy awareness, best path selection, reliability, and scalability are among the key factors that decide information delivery to the sea surface. Existing protocols usually do not combine such performance-affecting factors in information routing. As a result, the performance of such protocols usually deteriorates if multiple performance factors are taken into account. To cope with such performance deterioration, this article proposes two routing protocols for UASNs: energy and path-aware reliable routing (EPRR) and cooperative EPRR (Co-EPRR). Compared with the counterpart systems, the proposed protocols have been designed to deal with the problem of long propagation delays and achieve network reliability. The EPRR scheme uses nodes’ physical distance from the surface with its depth, which minimized the delay of packet transmission. The channel interaction time has been reduced, therefore, reducing unwanted channel effects on the data. Furthermore, the density of the nodes in the upper part of the network prevents data loss and limits the rapid death of the nodes. The second proposed scheme, Co-EPRR, uses the concept of routing information from the source to the destination on multiple paths. In Co-EPRR routing, the destination node can receive more than one copy of the data packet. This reduces unfavorable channel effects during data delivery. Both the schemes show good performance in terms of packet delivery ratio, received packet analysis, and end-to-end delay.

Three-phase inverters open-circuit faults diagnosis using an enhanced variational mode decomposition, wavelet packet analysis, and scalar indicators

Three-phase inverters open-circuit faults diagnosis using an enhanced variational mode decomposition, wavelet packet analysis, and scalar indicators

EXPERIMANTAL RESEARCHES OF OPERATOR-PILOT PERFORMANCE AND DEVELOPMENT OF HIS ACTIONS SUPPORT

Efficiency is an external manifestation of a person’s ability to perform purposeful activities of any kind, including professional activities. The main performance indicator is its level recorded by the on-board monitoring system in terms of heart rate variability (HRV) of the operator-pilot. A feature of the implemented approach in assessing the PL (performance level) indicator (in addition to obtaining a generalized integral indicator at the time of completion of the flight task) is that current indicators are used at different phases of the flight task, due to which the history of PL is tracked in the dynamics of changes in the working state with the identification of situations in which the support is required. Ensuring and maintaining the health (capacity) of the operator-pilot in the remote telepsychophysiological interactive interface mode “Pilot in the cockpit of the aircraft – flight director at the command point” showed the high efficiency of the proposed technology, tested at KPM-V. Such an interface was implemented on the basis of a broadband communication channel – information exchange as part of the KPM-V, and the flight director at the command point (CP) has the opportunity to prototype the situation and its development in order to develop more reliable expert recommendations to the operator-pilot. The interface, including the developed on-board biofeedback system, presents on its monitor of information signs of the external manifestation of the operator’s states in terms of the frequency and nature of respiratory movements. Changes in the structure of the wave respiratory packet spoke about the state of the operator and his performance. Comparison of these data in a single time with the HRV indicators made it possible to qualify the situation as the transition of the operator into a state of working stress, developing fatigue and overwork. The results of a semi-natural experiment with specific expert support (recommendations) of the operator-pilot performing low-altitude flight in difficult weather conditions with the search for objects of interest showed that suggesting a more advantageous maneuver for entering the zone of possible active actions from the CP made it possible to reduce the current level of performance at the time of support, not allow its predicted decrease by 20…30 % and increase the time for making a decision and its implementation by 10…13 s. At the same time, the reliability of the expert forecast of the operator’s PL according to the data of the analysis of the respiratory wave packet on the thermograms of the face was 70…90 %. The conducted cycle of research on the problem of the operator-pilot’s performance, its provision and support is not only of research interest, but can be used in the ergonomic examination of aviation equipment and the design of the crew’s work activities.