Internet Protocol Research Articles

Exploring IP Address Allocation Methods: A Comprehensive Analysis

Over the past 25 years, the current version of the Internet Protocol (IPv4) has remained largely unchanged. Its robustness and ease of implementation have made it a staple in networking. As the groundwork for IPv6 deployment was laid in the early stages, IPv4-based networks began preparations for the transition. This transition progressed through stages: initially, both IPv4 and IPv6 coexisted, then IPv6 gradually took precedence, leading to the eventual withdrawal of IPv4 networks from the market. Throughout this evolution, researchers developed various transition mechanisms tailored to different network infrastructures and stages of evolution. This paper conducts a comprehensive examination of IPv4, including its smart saving techniques, aimed at delaying the shift from IPv4 to IPv6. Additionally, it delves into addressing schemes that are likely to remain unchanged in the future. Moreover, the paper highlights the limitations of IPv4, emphasizing the importance of fortifying the present IPv4 network infrastructure until IPv6 is fully realized

One-key based cryptographically generated address for location update in next generation IP mobility

Mobile devices have risen due to internet growth in recent years. The next generation of internet protocol is evolving for mobile devices to generate their addresses and get continuous services across networks to support the enormous number of addresses in network-based mobility. The mobile device updates its current location to its home network and the correspondent users through a binding update scheme in the visited network. Numerous studies have investigated binding update schemes to verify the reachability of the mobile device at its home network. However, most schemes endure security threats due to the incompetence of authenticating user identity and concealing the temporary location of mobile devices. To address these issues, this paper proposes a secure and efficient binding update scheme (One-CLU) by incorporating a one-key-based cryptographically generated address (CGA) to validate and conceal the address ownership of mobile devices with minimal computations. The security correctness of the proposed One-CLU scheme is verified using AVISPA – a model checker. Finally, the simulation and the numerical results showthat the proposed scheme significantly reduces communication payloads and costs for the binding update, binding refresh, and packet delivery.

Sketching of interactive VoIP traffic with multivariate statistical learning-based classification

Classifying VoIP (Voice over Internet Protocol) traffic is vital for optimizing network performance and Quality of Service (QoS). This study introduces the Multivariate Statistical-Based Classification (MVSC) system, designed to classify network traffic with high accuracy and efficiency. As traditional methods struggle in the diverse and complex landscape of today’s network traffic, which includes voice, video, gaming, and data, the MVSC algorithm rises to the challenge. It employs Statistical Dissemination and leverages various statistical features such as Packet Size, Inter-Arrival Statistics, Packet and Data rates, Flow Length, and Five-tuple information to create nuanced profiles of network traffic packets. These packets are then grouped into distinct clusters based on their statistical attributes through Application Flow Cluster Grouping. A unique aspect of the MVSC system is its approach to representing each application flow as points in a two-dimensional space, where distances to predefined application profiles are calculated. The nearest profile then determines the type of VoIP traffic. Experimental results using university traffic data (KU-IDS) underscore the system’s high accuracy, consistently around 98-99%. These findings affirm the system’s suitability for real-time deployment. In summary, the MVSC system offers a robust and efficient solution for VoIP traffic classification, significantly boosting network performance and QoS, and proving to be an invaluable asset in contemporary network management.

“Stay tuned!"

“Stay tuned!"

Building IPv6 addressing scheme using Hybrid Duplicate Address Detection to prevent Denial of Service Attack

Internet Protocol version 6 (IPv6) address configuration is needed to meet the needs of current portable devices and wearable applications, where each device needs its own unique identification number. High complexity in Wireless Sensor Network (WSN) and Internet of Things (IoT) environments has increased challenges, such as low energy consumption and high overhead in IPv6 address configuration. The proposed IPv6 generation is based on a hybrid mathematical approach that retains the IP address’s confidentiality and prevents Denial of Service (DoS) attacks from new and existing nodes in the network. In this paper, the proposed hybrid protocol for DoS attacks from new and existing nodes is analyzed. It is evident from the results that the rate of successful configuration, overhead, and energy consumption is found to be better than the existing approach, namely, Programming Protocol-independent Packet Processors Duplicate Address Detection (P4DAD), match prevention technique, etc.

3MSF: A Multi-Modal Adaptation of the 6TiSCH Minimal Scheduling Function for the Industrial IoT.

Although wireless devices continuously gain communication capabilities, even state-of-the-art Industrial Internet of Things (IIoT) architectures, such as Internet Protocol version 6 over the Time-Slotted Channel Hopping (TSCH) mode of IEEE 802.15.4 (6TiSCH), continue to use network-wide, fixed link configurations. This presents a missed opportunity to (1) forego the need for rigorous manual setup of new deployments; and (2) provide full coverage of particularly heterogeneous and/or dynamic industrial sites. As such, we devised the Multi-Modal Minimal Scheduling Function (3MSF) for the TSCH link layer, which, combined with previous work on the routing layer, results in a 6TiSCH architecture able to dynamically exploit modern multi-modal hardware on a per-link basis through variable-duration timeslots, simultaneous transmission, and routing metric normalization. This paper describes, in great detail, its design and discusses the rationale behind every choice made. Finally, we evaluate three basic scenarios through simulations, showcasing both the functionality and flexibility of our 6TiSCH implementation.

A Blockchain-Based Secure Sharing Scheme for Electrical Impedance Tomography Data

Real-time electrical impedance tomography (EIT) data sharing is becoming increasingly necessary, due to the extensive use of EIT technology in various sectors, including material analysis, biomedicine, and industrial process monitoring. The prevalence of portable EIT equipment and remote imaging technology has led to a predominance of centralized storage, Internet protocol transmission, and certificates from certificate authorities (CA) in telemedicine data. This has resulted in compromised data security, network communication delays, high CA maintenance costs, increased risks of medical data privacy breaches, and low security. Therefore, this paper offers a consortia blockchain-based method for exchanging EIT data that addresses security and integrity concerns during data storage and exchange, while maintaining transparency and traceability. Proprietary re-encryption techniques are employed to guarantee traceability when exchanging anonymous data, enabling precise control over data access. This scheme serves to protect both data and identity privacy, as well as to trace the actual identity of potential malicious users, while also thwarting any coordinated efforts between partially trusted parties and data requesters seeking unauthorized access to confidential information. Additionally, a combination of blockchain and InterPlanetary File System (IPFS) distributed storage technology is utilized to ease the burden of EIT data storage. The feasibility and effectiveness of the proposed solution were validated through a series of experiments, demonstrating its ability to effectively prevent data tampering and misuse, reduce data management costs, and enhance the efficiency and quality of data sharing.

LiteGAP: Lightweight Group Authentication Protocol for Internet of Drones Systems

liteGAP: Lightweight Group Authentication Protocol for Internet of Drones Systems

Comparison of Usage between Voice Switching Communication System (Vscs) Direct Speech (Ds) Vsat (Very Small Aperture Terminal) System and Voip (Voice Over Internet Protocol)

One of the ground-to-ground DS coordination communications that need to be adapted to use on an IP basis, hereinafter referred to as Voice over Internet Protocol (VoIP). However, to be fully used and also as a substitute for VSAT, VoIP needs to be analyzed and also compared reliability and Cost Benefit Analysis (CBA) with VSAT. This is needed so that it is known that the adjustment to the improvement and development of technology and the future plan is ready to be implemented and also has a positive impact on aviation safety, operations and finances. The purpose of this study was to determine the comparison between the use of DS VSAT system with VoIP. The method used in this study is a mixed-method, with the category of descriptive analysis and the final results/conclusions of the study using the calculation of the percentage of data collecting (reliability test) and the ratio of cost benefit analysis (literature/archive studies). The results of the reliability test for 1 (one) year in 2021 obtained results for VSAT 99.53%-100% and for VoIP 99.5%-100%, from these results concluded in 1 (one) year the reliability between DS VSAT system and VoIP is the same ( Note: in December 2021 on the DS VSAT system there was a failure so that the percentage generated for 1 (one) month was only 99.95%, while the DS VoIP system in June to December never failed (failures that occurred in February - May could be due to the transition period for new equipment) While the results of Cost Benefit Analysis (CBA) between the two are 55.85%, where the use of DS VoIP systems is more financially efficient (saving) than the use of DS VSAT systems.

TCP/IP stack transport layer performance, privacy, and security issues

Transmission Control Protocol/ Internet Protocol (TCP/IP) is the backbone of Internet transmission. The Transport Layer of the TCP/IP stack, which includes TCP (Transmission Control Protocol) and UDP (User Datagram Protocol) protocols, plays a crucial role in ensuring reliable communication between devices over a network. To come up with measures that make networks more secure, it is important to learn about the vulnerabilities that exist in the transport TCP/IP stack and then have an understanding of the typical attacks carried out in such layer. This paper explores how the TCP Protocol works, the TCP/IP 3 Way Handshake, TCP Header Structure, the typical vulnerabilities and the classical attacks of transport layer TCP/IP, tools, and solutions adopted to prevent and reduce the chances of some of these attacks. The findings indicated that the major TCP/ IP stack transport layer threats include Finger printing, SYN Flood, TCP reassembly and sequencing, IP Spoofing, TCP session hijacking, RST and FIN denial of service attack, Ping of Death, Low Rate/ Shrew Attacks. Their preventive measures and mechanisms are discussed.

Implementation of a Contact Center with Interactive Voice Response Using Cisco Unified Communications

A popular voice-based communication service used to receive calls automatically is Interactive Voice Response (IVR). Generally, IVR is widely used by institutions to provide services to the public in consulting, offering, or providing information about a particular matter. One of the uses of IVR, among others, is the Contact Center. By using Voice over Internet Protocol (VoIP) technology and using the SIP Trunk service from the service provider, institutions can take advantage of the existing network infrastructure to save on telephone usage. VoIP technology also allows it to be integrated with Private Automatic Branch Exchange (PABX) using Cisco Unified Communications Manager (CUCM). While the IVR system uses Cisco Unified Contact Center Express (UCCX). In this study, the implemented contact center serves to receive calls from external parties. The telephone number uses a call hunting system that will distribute incoming calls to officers on duty at PT. Multipolar Technology Tbk.

A comprehensive survey of performance, security and privacy issues in the network interface layer of the TCP/IP

The network interface layer of the TCP/IP protocol suite, primarily comprised of the Internet Protocol (IP), serves as the backbone of modern internet communication. With its efficient data delivery, The network interface layer, presents key challenges in terms of performance, security, and privacy. This comprehensive survey delves into these three crucial aspects, analyzing the inherent vulnerabilities, limitations of the interface layer, and provide solutions of the related problems. The performance analysis explores throughput, latency, and bandwidth constraints, along with solutions such as bandwidth allocation and optimization techniques. Vulnerabilities within Network Interface Layer, including denial-of-service attacks and MAC address spoofing, are discussed, along with a review of existing security mechanisms. Privacy flaws are examined, covering MAC address tracking, profiling risks, and anonymization techniques, while also addressing privacy considerations on the Internet of Things. The survey analyzes several case studies providing comparative analysis of the network interface layer protocols, with support of the real world scenarios including performance analysis in high density environment, and security and privacy risks in smart homes networks. The findings provide a comprehensive understanding of the complexities surrounding performance, security, and privacy issues future directions and potential solutions.

Patient perceptions of disease burden and treatment of myasthenia gravis based on sentiment analysis of digital conversations

Myasthenia gravis (MG) is a rare, autoimmune, antibody-mediated, neuromuscular disease. This study analyzed digital conversations about MG to explore unprovoked perspectives. Advanced search, data extraction, and artificial intelligence-powered algorithms were used to harvest, mine, and structure public domain digital conversations about MG from US Internet Protocol addresses (August 2021 to August 2022). Thematic analyses examined topics, mindsets, and sentiments/key drivers via natural language processing and text analytics. Findings were described by sex/gender and treatment experience with steroids or intravenous immunoglobulin (IVIg). The 13,234 conversations were extracted from message boards (51%), social media networks (22%), topical sites (21%), and blogs (6%). Sex/gender was confirmed as female in 5703 and male in 2781 conversations, and treatment experience was with steroids in 3255 and IVIg in 2106 conversations. Topics focused on diagnosis (29%), living with MG (28%), symptoms (24%), and treatment (19%). Within 3176 conversations about symptoms, eye problems (21%), facial muscle problems (18%), and fatigue (18%) were most commonly described. Negative sentiments about MG were expressed in 59% of conversations, with only 2% considered positive. Negative conversations were dominated by themes of impact on life (29%), misdiagnosis problems (27%), treatment issues (24%), and symptom severity (20%). Impact on life was a key driver of negativity in conversations by both men (27%) and women (34%), and treatment issues was a dominant theme in conversations by steroid-treated (29%) and IVIg-treated (31%) patients. Of 1382 conversations discussing treatment barriers, 36% focused on side effects, 33% on lack of efficacy, 21% on misdiagnosis, and 10% on cost/insurance. Side effects formed the main barrier in conversations by both steroid-treated and IVIg-treated patients. Capturing the patient voice via digital conversations reveals a high degree of concern related to burden of disease, misdiagnosis, and common MG treatments among those with MG, pointing to a need for treatment options that can improve quality of life.

Velocity Based Performance Analysis of GreedLea Routing Protocol in Internet of Vehicle (IoV)

Intelligent routing protocols for IoV have also been made possible by the convergence of IoT and machine learning algorithm. In order to make informed routing decisions, these intelligent routing protocols examine data gathered from IoT devices like vehicle sensors and traffic monitoring systems using machine learning algorithms. Moreover, as the number of vehicles increases and road networks become more complex, traditional routing protocols for ad hoc networks are being replaced by more advanced and efficient protocols. The purpose of this study is to concentrate on these unique qualities of IoVs network scenario. A combined routing method has been developed to construct periodic connectivity and find routes on-demand in order to save route data as graphs. The simulation's findings show that GreedLea routing protocol outperforms GPSR and AODV routing protocols in terms of delay and packet delivery ratio (PDR). The results demonstrate that the average AODV latency is significantly higher when there are fewer vehicles on the network. This is due to the fact that connections are frequently lost at higher speeds and lower densities, and re-establishing new channels takes a lot of time. As the number of vehicles rises, efficiency improves and the wait gets shorter. The average latency, yet, keeps increasing as vehicle density increases due to the additional overheads related with routing.

Use of hybrid post-quantum key exchange in internet protocols

Use of hybrid post-quantum key exchange in internet protocols

A Security-Enhanced and Ultralightweight Communication Protocol for Internet of Medical Things

A Security-Enhanced and Ultralightweight Communication Protocol for Internet of Medical Things

A scalable, dynamic, and secure traffic management system for vehicular named data networking applications

Several intelligent transport systems in vehicular networks (VANETs) rely on IP-based models for inter-vehicle communication. However, many approaches for Cooperative Intelligent Transport Systems and distributed systems are not secure and appropriate for VANETs, using specific technologies, centralized network architectures, or limited communication models. In addition, many applications are forced to deal with complex services that the network layer does not provide. This paper proposes NDN-Waze, a comprehensive distributed and lightweight system for vehicular traffic management using Named Data Networking as the main underlying communication protocol. NDN-Waze is a proof-of-concept design that has applications in vehicular route guidance, traffic and mobility monitoring, as well as roadside units as a service in urban areas. We use the NDN-Waze route guidance module to compare the VANET model via Named Data Networking (NDN) and Internet Protocol (IP). Our study employs traditional network metrics to support the hypothesis that the communication architecture has a direct impact on both efficiency and the quality of service operations. The simulation results demonstrate that NDN properties can override traditional IP-based forwarding proposals in VANET.

Is cyber hygiene a remedy to IPTV infringement? A study of online streaming behaviours and cyber security practices

Spurred by the rapid modernisation of the sector and the advent of Internet Protocol Television (IPTV), audiovisual (AV) piracy is at epidemic levels, with interventions having limited effect. To date, the dominant themes in interventions have been around personal deterrence (i.e. the threat of legal action) and have not considered other factors that may influence an individual’s decision to consume infringing content. In this paper, we consider psychological factors, including perceptions around risk-taking, security behaviours, problematic internet use and personality traits, to gain a comprehensive understanding of factors influencing engagement with IPTV and the potential implications for cyber security. For this purpose, a survey was conducted with 283 participants living in the UK (age range 18–74, male 104), and an integrated structural equation model was constructed. Our findings showed a positive relationship between security behaviours and the perceived risk of viewing IPTV and a negative relationship between the dark personality triad and the perceived risk of viewing IPTV. They suggest that security behaviours fully mediate the relationship between problematic internet use and IPTV risk-taking, indicating a potential new path for anti-piracy interventions with greater efficacy.

Advanced approaches to prevent ARP attacks

Advanced approaches to prevent ARP attacks

Impact of Segmentation and Popularity-based Cache Replacement Policies on Named Data Networking

The data distribution mechanism of internet protocol (IP) technology is inefficient because it necessitates the user to await a response from the server. Named data networking (NDN) is a cutting-edge technology being assessed for enhancing IP networks, primarily because it incorporates a data packet caching technique on every router. However, the effectiveness of this approach is highly dependent on the router's content capacity, thus requiring the use data replacement mechanism when the router capacity is full. The least recently used (LRU) method is employed for cache replacement policy; yet, it is considered ineffective as it neglects the content's popularity. The LRU algorithm replaces the infrequently requested data, leading to inefficient caching of popular data when multiple users constantly request it. To address this problem, we propose a segmented LRU (SLRU) replacement strategy that considers content popularity. The SLRU will evaluate both popular content and content that has previously been popular in two segment categories, namely the probationary and protected segments. Icarus simulator was used to evaluate multiple comprehensive scenarios. Our experimental results show that the SLRU obtains a better cache hit ratio (CHR) and able to minimize latency and link load compared to existing cache replacement policies such as First In, First Out (FIFO), LRU, and Climb.