Proxy Server Research Articles

Zero Trust VPN (ZT-VPN): A Systematic Literature Review and Cybersecurity Framework for Hybrid and Remote Work

Modern organizations have migrated from localized physical offices to work-from-home environments. This surge in remote work culture has exponentially increased the demand for and usage of Virtual Private Networks (VPNs), which permit remote employees to access corporate offices effectively. However, the technology raises concerns, including security threats, latency, throughput, and scalability, among others. These newer-generation threats are more complex and frequent, which makes the legacy approach to security ineffective. This research paper gives an overview of contemporary technologies used across enterprises, including the VPNs, Zero Trust Network Access (ZTNA), proxy servers, Secure Shell (SSH) tunnels, the software-defined wide area network (SD-WAN), and Secure Access Service Edge (SASE). This paper also presents a comprehensive cybersecurity framework named Zero Trust VPN (ZT-VPN), which is a VPN solution based on Zero Trust principles. The proposed framework aims to enhance IT security and privacy for modern enterprises in remote work environments and address concerns of latency, throughput, scalability, and security. Finally, this paper demonstrates the effectiveness of the proposed framework in various enterprise scenarios, highlighting its ability to prevent data leaks, manage access permissions, and provide seamless security transitions. The findings underscore the importance of adopting ZT-VPN to fortify cybersecurity frameworks, offering an effective protection tool against contemporary cyber threats. This research serves as a valuable reference for organizations aiming to enhance their security posture in an increasingly hostile threat landscape.

Vulnerabilities, Privacy Risks, and Ethical Implications of Residential Proxy Services

Vulnerabilities, Privacy Risks, and Ethical Implications of Residential Proxy Services

A Blockchain‐Based Proxy Re‐Encryption Scheme With Cryptographic Reverse Firewall for IoV

ABSTRACTAs the internet of vehicles (IoV) technology develops, it promotes the intelligent interaction among vehicles, roadside units, and the environment. Nevertheless, it also brings vehicle information security challenges. In recent years, vehicle data sharing is suffering to algorithm substitution attacks (ASA), which means backdoor adversaries can carry out filtering attacks through data sharing. Therefore, this paper designs a blockchain‐based proxy re‐encryption (PRE) scheme with cryptographic reverse firewall (BIBPR‐CRF) for IoV. In our proposal, CRF can promise the internal safety of vehicle units. More specifically, it can prevent ASA attacks while ensuring chosen plaintext attack (CPA)‐security. Meanwhile, the PRE algorithm can provide the confidential sharing and secure operation of data. Moreover, we use a consortium blockchain service center (CBSC) to store the first ciphertext and re‐encrypt it with smart contracts on the blockchain, which can avoid single point of failure and achieve higher efficiency compared to proxy servers. Finally, we evaluate the performance of BIBPR‐CRF with regard to communication cost, computational cost, and energy consumption. Our proposal is the most fitting for IoV application, in contrast with the other three schemes.

Pathways to specialist community perinatal mental health services: a two-site longitudinal retrospective service evaluation.

During pregnancy and the postpartum period, women's mental health can deteriorate quickly. Timely and easy access to services is critically important; however, little is known about the pathways women take to access services. Previous research has shown that women from ethnic minority groups in the United Kingdom experience more access issues compared to the White British women. To describe pathways taken to specialist community perinatal mental health services and explore how they vary across services and ethnic groups. This is a two-site, longitudinal retrospective service evaluation conducted in Birmingham and London during 6 months (1 July-31 December 2019). Electronic records of 228 women were accessed and data were extracted on help-seeking behaviour, referral process and the type of pathway (i.e. simple or complex). Data were collected using the adapted World Health Organization encounter form and analysed using uni- and multivariable analyses. The median time from the start of perinatal mental illness to contact with perinatal mental health services was 20 weeks. The majority of patients accessed perinatal mental health services through primary care (69%) and their pathway was simple, that is they saw one service before perinatal mental health services (63%). The simple pathway was used as a proxy for accessible services. In Birmingham, compared to London, more referrals came from secondary care, more women were experiencing current deterioration in mental health, and more women followed a complex pathway. Despite differences between ethnic groups regarding type of pathway and duration of patient journey, there was no evidence of difference when models controlled for confounders such as clinical presentation, general characteristics and location. The service's location was the strongest predictor of the type of pathway and duration of patient journey. The heterogeneity among categorised ethnic groups; data extracted from available electronic records and not validated with patient's own accounts of their pathways to care; unanalysed declined referrals; the study was conducted before the COVID-19 pandemic and pathways may be different in the post-COVID-19 period. The study provides important insights into how patients find their way to community perinatal mental health services. It shows that there is a great degree of variability in the time taken to get into these services, and the pathway taken. This variation does not come from different needs of patients or different clinical presentations but rather from service-level factors. The studied community perinatal mental health services in the United Kingdom operate with a significant degree of variability in the types and characteristics of patient pathways. Future research should explore these issues on the national and international levels. Additionally, future research should explore the reasons for the different pathways taken and the outcomes and risks associated with them. This article presents independent research funded by the National Institute for Health and Care Research (NIHR) Health and Social Care Delivery Research programme as award number 17/105/14.

Designing a Multi-Level Caching Forward Index for Recommendation System Services

This paper introduces a forward index based on microservices, which effectively addresses the issue of forward read amplification in recommendation systems through a multi-layer caching mechanism. This allows the forward service to handle a large number of concurrent requests with limited resources while ensuring service stability and final value rate. The paper provides a detailed description of the forward index's data structure design, traffic penetration calculation, and overall service architecture design, dividing the system into three parts: SDK, proxy service, and storage, corresponding to data query, data processing, and data storage respectively. In the SDK design, three components are employed: Cache Slot, synchronous queue, and timer, supporting synchronous, asynchronous, and flexible request forms. The proxy service design handles heterogeneous data and online computation, supporting batch and asynchronous designs, and provides a dynamic data protocol to adapt to the characteristic needs of different microservices. The storage layer design considers performance, cost, and maintainability, utilizing a Cache & SSD model to cope with high-concurrency scenarios.

Predictive Prefetching in Client–Server Systems: A Navigational Behavior Modeling Approach

A key challenge faced in client–server systems that heavily rely on data is the fast delivery of data to end-users. To address this difficulty, this study presents a novel approach for modeling and forecasting user navigational browsing behavior, to establish an efficient prefetching mechanism. Regarding the approach for representing page visit data, we employ the Word2Vec embedding technique to encode each user’s page visit as a numerical vector. Regarding the encoding of browsing activity data, we utilize aggregation on the embedding vectors. These vectors correspond to page visits occurring sequentially and are used to describe each user’s browsing behavior using a numerical vector. In the proposed method, machine learning algorithms are employed to analyze and model the browsing behavior of all users. Machine learning models are employed to forecast the next user action during the navigation of data-intensive web and mobile application web pages. Subsequently, we employ this forecast to establish an intelligent prefetching method, which provides the capability of acquiring predicted web page data in proxy servers before it is requested. An experimental study was conducted using a large-scale open-source dataset derived from a mobile application used in a coffee shop, containing several hundred thousand sessions from tens of thousands of users over a 10-day period. The evaluation employed metrics such as prediction accuracy which can be called prefetching accuracy and cache hit/miss rates. The machine learning algorithms applied include K-Nearest Neighbor, AdaBoost, Decision Tree, Support Vector Machine, Multi-layer Perceptron, Random Forest, LightGBM, Long Short-Term Memory and Bidirectional Long Short-Term Memory. The purpose of this experimental study was to examine the efficacy of the proposed approach. The findings of the empirical investigation suggest that the proposed method has the potential to provide an efficient prefetching methodology when sufficient user navigational data is available. Hence, the method enhances the performance of data-intensive client–server-based systems.

An Approach to Secure Data Sharing in the Internet of Things Using Blockchain- Based Proxy Re-Encryption

The prevalence of data sharing has increased with the rise in popularity of cloud computing and the Internet of Things (IoT). However, ensuring data security is difficult because of the possible negative consequences of illegal data usage. This study presents a method for ensuring the secure transmission of data in cloud environments: proxy re-encryption. The identity-based encryption method enables data owners to transfer encrypted data to the cloud. Subsequently, a proxy re-encryption framework enables authorized individuals to access the data. To surpass the limitations of IoT device resources, we utilize an edge device as a proxy server to transfer computationally intensive tasks to a separate device. By utilizing the advantages of information-centric networking, we can optimize network capacity and enhance service quality by efficiently distributing cached content across the proxy. This method decreases bottlenecks in centralized systems while providing precise control over data access. The proposed work demonstrates the effectiveness of the strategy in ensuring data security, confidentiality, and integrity through thorough security research and plan review.

Rancang Bangun Sistem Autentikasi Hotspot Berbasis Radius Server Menggunakan Mikrotik Pada Sekolah Menengah Kejuruan Negeri 5 Luwu

This study aims to design and build a hotspot network system using userman and proxy server radius at SMK Negeri 5 Luwu to solve problems because users are not limited in using devices to make internet connections in the school environment. Radius servers run a centralized user administration system. This system will certainly simplify the task of an administrator. With this system, users can use hotspots in different places by authenticating to the radius server. This research was conducted at SMK Negeri 5 Luwu. The research method used in this study is Network Development Life Cycle (NDLC). Data collection methods consisting of direct observation methods to the research location, interviews with one of the operators as well as network operators / administrators in the school, literature studies. Testing was conducted using browser, CMD and Speedtest. The results of research with the hotspto using userman and radius server using the same user as the password in user authentication management to improve network security have been successfully implemented internet networks in schools to improve network security, so it is very helpful for network providers in managing and monitoring all users connected to their networks.

A Proxy Re-Encryption Approach to Secure Data Sharing in the Internet of Things Based on Blockchain

The Internet of Things has seen data sharing as one of its most useful applications in cloud computing. As eye-catching as this technology has been, data security remains one of the obstacles it faces since the wrongful use of data leads to several damages. In this article, we propose a proxy re-encryption approach to secure data sharing in cloud environments. Data owners can outsource their encrypted data to the cloud using identity-based encryption, while proxy re-encryption construction will grant legitimate users access to the data. With the Internet of Things devices being resource-constrained, an edge device acts as a proxy server to handle intensive computations. Also, we make use of the features of information-centric networking to deliver cached content in the proxy effectively, thus improving the quality of service and making good use of the network bandwidth. Further, our system model is based on blockchain, a disruptive technology that enables decentralization in data sharing. It mitigates the bottlenecks in centralized systems and achieves fine-grained access control to data. The security analysis and evaluation of our scheme show the promise of our approach in ensuring data confidentiality, integrity, and security

A Reliable and Equitable Attribute-Based Proxy Re-encryption System for Cloud Data Sharing

The widespread acceptance and quick growth of cloud computing have made data sharing easier than ever before. What is preventing widespread adoption of cloud computing, however, is how to guarantee the security of the user's data in the cloud. Safe data sharing in cloud computing can be achieved through the use of proxy re-encryption. With the use of a semi trusted cloud server, a data owner can encrypt shared data in the cloud using their own public key, converting it into an encryption meant only for authorized recipients to control access. To help us grasp this fundamental better, this paper provides a thorough and motivating overview of re-encryption of proxy servers from a variety of angles. For granular access control of shared data, Ciphertext-Policy Attribute based Aes (CP-ABE) is a possible cryptographic primitive. Each user in CP-ABE has a set of attributes, and access structures based on attributes are used to encrypt data. If and only if a user's characteristics meet the requirements of the ciphertext access structure, the user can decrypt a ciphertext. Practical applications typically call for additional requirements in addition to this fundamental one. Our research centers on the significant problem of attribute revocation, which poses a challenge for CP-ABE methods

A Blockchain-Based Proxy Re-Encryption Method for Safe Data Sharing in the Internet of Things

Data sharing has emerged as one of the Internet of Things' most beneficial uses in cloud computing. Even though this technology has been visually appealing, one of its challenges is data security because improper usage of data can result in various harms. We suggest a safe data exchange method for cloud environments in this article: proxy re-encryption. Data owners can utilize identity-based encryption to send their encrypted data to the cloud, where it will be accessible to authorized users through proxy re- encryption construction. An edge device serves as a proxy server to manage demanding calculations since Internet of Things devices are resource- constrained. Additionally, by efficiently delivering cached content in the proxy and utilizing the capabilities of information-centric networking, we enhance service quality and optimize network bandwidth. Additionally, the foundation of our system concept is blockchain, a revolutionary technology that permits decentralization in data sharing. Fine-grained access control to data is achieved, and bottlenecks in centralized systems are lessened.

Web Scraping Application

Abstract: The web scraping application is designed to empower users in tracking and monitoring the prices of products on the Amazon platform. Utilizing advanced web scraping techniques with Cheerio and Axios, the application allows users to add specific products for real-time price monitoring. Leveraging the Next.js framework for efficient web development, the application integrates MongoDB for seamless data storage. To overcome potential access restrictions, the application employs proxy services provided by Bright Data. The inclusion of Cron Jobs facilitates automation and scheduling, ensuring timely updates of product prices. For user engagement and communication, Node Mailer is utilized to send email notifications about price changes. Additionally, the application offers features such as historical price data visualization and user preferences management. Through a combination of these tools and technologies, application aims to provide users with a comprehensive and userfriendly solution for effective price tracking and informed decision-making on the Amazon platform.

Script late injection: a framework to introduce JavaScript into web pages

Script injection is one type of fault present in web, which mostly utilizes user data to execute code without applying any type of filters. Script injection can impact both client and server making exposing them to vulnerabilities. Security and related products may need to execute logic on the client-side generally in a browser. In order to achieve this, proxy servers inject appropriate JavaScript code into the responses they proxy. Typically, the injection point is at the end of the body element. The framework introduced in this paper rather uses a stack-based approach to determine the injection point in the web page. Ten kilobytes from the end of a web page are given as a string input to the framework, after tokenization and construction of the vector of tokens. A stack is used to determine the injection point. Along with the position of the injection point, a warning flag is also estimated indicating the correctness of the injection point. Different types of web pages were considered for running the unit tests and fuzzy tests on the framework. These classes of pages are determined by crawling most used web pages. The injected scripts are executed once the body content is completely loaded. Hence, it can retrieve maximum information without affecting end-user performance. It also does the job at a low cost.

Reverse Proxy Technology

Reverse proxy technology plays a critical role in modern web architecture by enhancing security, improving performance, and facilitating efficient content delivery. This paper provides a comprehensive review of reverse proxy technology, covering its fundamental concepts, architectural components, deployment scenarios, and practical applications. We delve into the mechanisms behind reverse proxy servers, discussing how they intercept client requests and forward them to backend servers, as well as how they handle responses. Additionally, we explore the various benefits of using reverse proxies, such as load balancing, SSL termination, caching, and protection against common web attacks. Furthermore, we analyze real-world use cases of reverse proxy technology across different industries, including e-commerce, media streaming, and enterprise applications. Lastly, we go over new developments and trends in reverse proxy technology, like the use of serverless architectures for deployments that are both scalable and economical and the incorporation of machine learning for intelligent request routing. Our goal in offering this thorough review is to improve knowledge of reverse proxy technology and stimulate additional study and advancement in this area.

Ascertainment of Photosynthetic Biomass Curves in the Early Growth Stages of Selected Dominat Native and Endemic Plant Species in Lowland Rainforest Ecosystems, Sri Lanka that as a Proxy for Value Primary Ecosystem Services and towards Conservation

The lowland rainforests play a significance role in maintaining the rich biodiversity of threatened endemic and native species of flora. However, the physiognomy of many species is still poorly known. The main objective of this study was to established the gains in photosynthetic Biomass (PB) during the early growth phases of three native and endemic tree species Garcenia quaesita, Dipterocarpus zeylanicus and Artocapus nobilis, which are frequently found in the low land rainforest ecosystems in south-west Sri Lanka. The study was based on field data collection and through observations based on empirical measurements which focused on PB accumulation in the early growth stages of above tree species. The sampled individuals were found in the reforested site in Hinduma, Sri Lanka and Sampling was carried out in four sites which represented the growth at 1, 2, 3 and 4 years. Purposive sampling was carried out and 30 individuals from each and individual age group as mentioned above, totaling 360 individuals of the plant species. Fresh weight was measured from collected leaves and analyzed to derive PB curves using statistical software Minitab version 15. Oxygen production (1 g of PB gives 0.4 g of Oxygen) was quantified using the measured PB value applied to the standard allometric equation. PB and Oxygen production of selected tree species demonstrated an exponential growth after the age of 3 years. Results shows that at the end of 4th year D. zeylanicus produce highest PB value, i.e., 2,483.55 grms and then 550.92 and 421.36 grams occupied by A. nobilis and G. quaesita. Also, PB and Oxygen production had a significant relationship with the age. In conclusion all the selected species under the given climatic conditions shows an increasing rate of PB, and oxygen production with age up to 3 years with an exponential growth thereafter. The findings of this study will be used to explored and included in the contractual process of value Primary Ecosystem Services (PES) hence all the PES derivatives such as carbon sequestering values and oxygen production based on the PB value of that given plant species. Therefore, it creates new scientific proven records to archive economic opportunities, which are not still identified and value of primary ecosystem services of tree dominated ecosystems/land uses to achieve national green economic policy management objectives. Such an economy described above, can generate new ecosystem servicing values and socioeconomical benefits which, at the same time, promotes conservation of these species and their unique environments. 
 Keywords: Conservation, Green economy, Lowland rainforests, Photosynthetic Biomass, Primary ecosystem services

RT-CBCH: Real-Time VPN Traffic Service Identification Based on Sampled Data in High-Speed Networks

Virtual Private Network (VPN) technology can bypass censorship and access geographically locked services. Some harmful information may be hidden in VPN traffic and circumvent the surveillance systems, bringing a significant challenge to network security. Considering the increasing richness of service types in VPN traffic, identifying traffic service facilitates further targeting harmful VPN traffic. Therefore, VPN traffic service identification is critical in network management. The existing identification methods use complete traffic for analysis. However, massive data analysis in high-speed networks consumes enormous resources, limiting the real-time processing of traffic identification. This paper proposes a real-time VPN traffic service identification method named RT-CBCH. We construct features that are still available after sampling and design a fast traffic processing structure based on Counting Bloom Filter and Chained Hash Table (CBCH). Experimental results validate the real-time capability, stability and accuracy of our method. At the sampling ratio of 1/256, it takes only 23.63 seconds to process the mixed traffic of 900-second traffic generated on a 10 Gbps link and our collected V2Ray traffic, which is increasingly common in VPN traffic. Under different sampling ratios, the identification results remain respectable, with an overall accuracy of about 90% for application service and over 99% for V2Ray proxy service. Furthermore, comparisons with similar work illustrate the high accuracy and low resource consumption of RT-CBCH. Experimental results show that our method can stably implement real-time VPN traffic service identification from sampled data in high-speed networks.

The Implementation Of Network Management And Security Using Mikrotik And Proxy Server At SMK N 3 Seluma

The aim of this research is to carry out computer network management and security at SMK Negeri 3 Seluma by using a proxy device and a sequid proxy server as an external proxy server. The research method used in this research is PPDIO method consisting of Prepare, Plan, Design, Implement, Operate and Optimize. The hardware used to configure network management is Mikrotik Roadboard, while the software used to configure network management and security is Winbox and Squid proxy server. The results of research on the implementation of network management were the formation of a network using a proxy configuration at SMKN 3 Seluma. toward network security, filtering of social media websites and websites suspected of containing viruses can be carried out according to the design and the blocking is successful.

Performance analysis: Securing SIP on multi-threaded/multi-core proxy server using public keys on Diffie-Hellman (DH) in single and multi-server queuing scenarios.

The rapid replacement of PSTN with VOIP networks indicates the definitive phase-out of the PBX/PABX with smartphone-based VOIP technology that uses WLAN connectivity for local communication; however, security remains a key issue, regardless of the communication coverage area. Session initiation protocol (SIP) is one of the most widely adopted VOIP connection establishment protocols but requires added security. On the Internet, different security protocols, such as HTTPS (SSL/TLS), IPSec, and S/MIME, are used to protect SIP communication. These protocols require sophisticated infrastructure and some pose a significant overhead that may deteriorate SIP performance. In this article, we propose the following: i) avoid using Internet bandwidth and complex Internet protocols for local communication within an organization, but harness WLAN connectivity, ii) use multi-threaded or multicore computer systems to handle concurrent calls instead of installing hardware-based SIP servers, and iii) run each thread in a separate core. Cryptography is a key tool for securely transmitting confidential data for long- and short-range communication, and the Diffie-Hellman (DH) protocol has consistently been a popular choice for secret key exchanges. Primarily, used for symmetric key sharing, it has been proven effective in generating public/private key pairs, sharing public keys securely over public channels, and subsequently deriving shared secret keys from private/public keys. This key exchange scheme was proposed to safeguard VOIP communication within WLANs, which rely on the SIP for messaging and multimedia communication. For ensuring an efficient implementation of SIP, the system was rigorously analyzed using the M/M/1 and M/M/c queuing models. We analyze the behavior of SIP servers with queuing models with and without end-to-end security and increase users' trust in SIP security by providing a transparent sense of end-to-end security as they create and manage their private and public keys instead of relying on the underlying SIP technology. This research implements instant messaging, voice conversation, and secret key generation over DH while implementing and observing the role of multi-threading in multiqueue systems that serve incoming calls. By increasing the number of threads from one to two, the SIP response time improved from 20.23809 to 0.08070 min at an arrival rate of 4250 calls/day and a service rate of three calls/min. Similarly, by adding one to seven threads, the queue length was reduced by four calls/min. Implementing secure media streaming and reliable AES-based signaling for session confidentiality and integrity introduces a minor 8-ms tradeoff in SIP service performance. However, the advantages of implementing added security outweigh this limitation.

Integration of an Autonomous system for AI Infusion, Mailing with Raspberry Pi and Python Using Proxy Server Configuration

Integration of an Autonomous system for AI Infusion, Mailing with Raspberry Pi and Python Using Proxy Server Configuration

Design, Implementation, and Evaluation of an Embedded CoAP Proxy Server for 6LoWPAN

Design, Implementation, and Evaluation of an Embedded CoAP Proxy Server for 6LoWPAN