Public IP Research Articles

Design and Implementation of LAN-Sensitive Information Interception and Analysis System

The LAN usually hides internal network structure by NAT to share a public IP address in the internal network, and thus it is hard to locate the source host precisely distributing sensitive information for a large-scale information monitoring system by analyzing the intercepted packets. So it is hard to fulfill monitoring work efficiently. This paper puts forward a scheme to intercept and analyze the sensitive information in the LAN environment. It studies the ARP spoofing principle and the sniffer technology based on WINPCAP. The scheme includes 7 modules named NIC capture module, packet filtering module and so on. And it achieves sensitive information filtering and matching by the configured rules, such as "keywords", "URL", "QQ number" and so on. The scheme provides a solution for tracking the source host leaking sensitive information within the LAN.

Review: The Trilateral Study on Health, Intellectual Property, and Trade: The Virtue in Paving a Cleared Roadway

This contribution reviews an important study--'Promoting Access to Medical Technologies and Innovation: Intersections between public health, intellectual property and trade' (the 'Trilateral Study') jointly prepared by the Secretariats of the World Health Organization, World Intellectual Property Organization and World Trade Organization, and released in February 2013. The study is an effort to present a consolidated perspective on significant issues involving the relationship between public health, IP and trade subject matter, including how international rules addressing this subject matter may be interpreted, and how national and regional approaches may be implemented. The Trilateral Study affirms and highlights the discretion or flexibility express and inherent in the rule-system that allows governments to develop approaches suitable to the conditions within countries and regions. In this regard, the Trilateral Study is a noteworthy development in that it provides multilateral institutional support for differentiated approaches to addressing public health concerns, and this may help to alleviate or forestall external pressures being brought to bear on countries adopting such approaches. The Author 2013. Published by Oxford University Press. All rights reserved., Oxford University Press.

Using Mussel-Inspired Self-Organization and Account Proxies to Obfuscate Workload Ownership and Placement in Clouds

Recent research has provided evidence indicating how a malicious user could perform coresidence profiling and public-to-private IP mapping to target and exploit customers which share physical resources. The attacks rely on two steps: resource placement on the target's physical machine and extraction. Our proposed solution, in part inspired by mussel self-organization, relies on user account and workload clustering to mitigate coresidence profiling. Users with similar preferences and workload characteristics are mapped to the same cluster. To obfuscate the public-to-private IP map, each cluster is managed and accessed by an account proxy. Each proxy uses one public IP address, which is shared by all clustered users when accessing their instances, and maintains the mapping to private IP addresses. We describe a set of capabilities and attack paths an attacker needs to execute for targeted coresidence, and present arguments to show how our approach disrupts the critical steps in the attack path for most cases. We then perform a risk assessment to determine the likelihood an individual user will be victimized, given that a successful nondirected exploit has occurred. Our results suggest that while possible, this event is highly unlikely.

ANALISIS TINGKAT PEMAHAMAN MAHASISWA AKUNTANSI TERHADAP KONSEP DASAR AKUNTANSI (Studi Empiris pada Mahasiswa Akuntansi di Universitas Bung Hatta Padang)

This study has several objectives first prove a significant difference in understanding of the assets, liabilities and capital between the students from SMK Accounting Department, High School and Madrasah Aliyah Department of Public IPS IPS majors. Prior to hypothesis testing performed prior sample collection is 68 students who have graduated from vocational secondary education level majoring in Accountancy, SMA study of majoring of IPS science Madrasah Aliyah common in college majoring in social studies at the Bung Hatta University of Padang. Type of data used are obtained through deployment of primary questionnaire. Variable study is a basic understanding of accounting concepts consisting of cash, liabilities and capital, while the distinguishing dimension is the level of formal education of students in the past. The process of hypothesis testing is done by using a statistical test that is using the Kruskal Walls. Based on the results of testing the first hypothesis of no difference in the understanding of accounting students from vocational education majoring in accounting, SMA students and Madrasah Aliyah major of IPS science. in understanding the basic concepts of accounting view of the assets. The second hypothesis found differences in the understanding of accounting students from vocational education majoring in accounting, high school social studies department, and public Madrasah Aliyah Department the major of IPS science of the basic concepts of accounting in view of the obligation. The third hypothesis found no differences in accounting students' understanding of vocational education majoring in accounting, SMA student, and Madrasah Aliyah general social studies department of the basic concepts of accounting view of capital.

Hardware / Software Co-design using LEON3 Processor: AES as Case Study

Nowadays many powerful public domain IP cores are available for complicated component like 32 bit processor i.e. LEON3. It needs considerable expertise and pain taking experimentation to implement a hardware/software co-design project. This paper presents step-by-step description for AES algorithm implementation on LEON3 processor. This will prove to be valuable to researchers working in this area and save their valuable time. The concept of GPIO (General Purpose I/O Port) is introduced; through which any custom hardware i.e. own designed hardware or IP core can be interfaced with the open source processor. AES encryption algorithm is selected as an IP core to be interfaced with LEON3 processor. AES is implemented in VHDL, while the control of the algorithm is in software. AES algorithm partitioned in hardware and software. The complete algorithm in hardware and control of algorithm in software. The part of algorithm in hardware is interfaced with the system designed using processor as a custom hardware and performance parameters studied. AES implemented using Codesign approach. AES is the latest encryption standard used to protect confidential information like financial data for government and commercial use. The LEON3 is a synthesizable VHDL model of a 32-bit processor available under the GNU GPL license. The design is implemented on Cyclone II FPGA from Altera Corporation.

A Protocol Review for IPTV and WebTV Multimedia Delivery Systems

This paper reviews the key protocols used for multimedia delivery both over privately owned managed IP Networks such as IPTV and public non-managed IP Networks such as WebTV. Within these two worlds, the choice between protocols is based on the characteristics of the multimedia service required, the media server and the client's receiver.Users have different expectations of these two delivery platforms and also of different output devices such as TV, PC, tablet or mobile phone. In an IPTV environment, which is a paid-service, users demand the Quality of Service (QoS) they pay for; different quotas provide different services to users. On the other hand, with WebTV, which is a free service, clients have lower quality expectations.There are multiple multimedia delivery systems used across both platforms, using different protocols to deliver multimedia from server to one or multiple clients. These include Real-Time Protocol (RTP), Real-Time Control Protocol (RTCP), Real-Time Streaming Protocol (RTSP), Real-Time Messaging Protocol (RTMP), Hypertext Transfer Protocol (HTTP), HTTP Live Streaming (HLS) and Microsoft Smooth Streaming Protocol (MS- SSTR).RTP, RTCP and RTSP are the main protocols used in IPTV while RTMP, HTTP, HLS and MS-SSTR are protocols used mainly for WebTV. This paper will explore the main differences and similarities between them and the reasons behind the choice of one or the other. This review paper also briefly outlines a testbed being developed by the authors to synchronise media streams using a subset of these protocols.

CDMA 모뎀을 이용한 원격 제어 및 계측 시스템 구현

본 논문에서는 CDMA 데이터 모뎀을 이용하여 원격에서 다양한 입출력 장치들의 상태를 계측하거나 이들을 제어하는 시스템을 설계하고 개발한다. 그리고 TCP/IP 패킷 통신과 단문자서비스(SMS) 통신방식을 이용하여 공인 IP 주소를 갖지 않는 CDMA 모뎀 장치들을 위한 양방항 데이터 통신 방식을 제안한다. 설계된 원격 제어 및 계측시스템은 DCE로 Telit WM-800 모뎀과 DTE로서 Atmel AT89C51 마이크로컨트롤러를 사용하여 구현되었다. 제어 및 계측 시스템 사용자를 위한 사용자 응용 프로그램, 그리고 디지틀 입출력 장치, AD/DAC, LCD, 및 온습도 센서 등의 펌웨어 구동장치 프로그램은 보다 다양한 종류의 응용을 위하여 각각 Microsoft C 및 Keil C 언어를 사용하여 작성되었다. 본 논문에서 구현된 제어 및 계측 시스템의 실험결과는 실제 실시간 실험을 통해, 설계된 바와 같이 사용자가 원하는 동작을 정확하게 수행하는 것을 확인하였다. This paper deals with the design and development of the remote control and measurement systems using CDMA(Code Division Multiple Access) data modem. We propose a bi-directional data communication link without the public IP address in CDMA modem device by the TCP/IP packet and SMS(Short Message Service) communication. The remote control and measurement systems are implemented by a Telit WM-800 modem as DCE(Data Communication Equipment), and Atmel AT89C51 microcontroller as DTE(Data Terminal Equipment). The user application software for the control and measurement system user, and the firmware software of device drivers for peripherals such as a digital input/output device, AD/DAC(Analog to Digital/Digital to Analog Converter), LCD, and temperature/humidity sensor are written in Microsoft C and Keil C language respectively for further various applications. The experimental result of the proposed control and measurement systems implemented in this paper is evaluated via real-time experiments, which works well as designed.

모바일 양방향 화상 교육시스템 개발에 관한 연구

최근, 초고속 인터넷망의 발전으로 실시간으로 화상회의 시스템 구축이 가능하게 되었다. 아직도 SD 급의 소프트웨어 코덱을 사용한 화상시스템이 존재하며 모바일 시스템을 이용한 양 방향 시스템이 있지만 대부분 화상시스템으로 영상만 주고받는 실정이다. 본 연구에서는 HD 웹-캠을 사용하여 양 방향 실시간 방송교육 시스템을 구축하고 모바일 시스템에서도 동시에 청취 가능한 시스템을 개발했다. 이를 위해 H.264 표준 영상 압축 기술을 이용한 고대역 압축 기술을 적용하였고, 스마트폰 방송을 위한 스트리밍 서버를 개발하여 적용했다. 영상공유, 문서, 웹-공유가 실시간으로 가능하게 되었다. 또한, WiFi 존에서 사용되는 사설 IP를 언제 어디서나 사용 가능하게 공인 IP로 변환 가능한 기술인 IP 터널링 기술을 적용했다. Recently, Development of high-speed internet networks can be a real-time video conference system. SD-quality still images using the software codec system exists, and two-way system with mobile systems, but in most video only send and receive video system. In this study, HD web-cam using the two-way live broadcasts simultaneously in the education system and the mobile system has developed an audible system. In the study using the H.264 standard video compression techniques were applied to high-bandwidth compression technology, smart phones, to develop a streaming server for broadcasting were applied. Video sharing, document, web-sharing was made possible in real time. In addition, the private IP for WiFi zone, available anytime, anywhere that can be converted to a public IP technology, IP tunneling technology applied.

ECC Based IKE Protocol Design for Internet Applications

The Internet Key Exchange (IKE) protocol is most widely used as a secure key exchange protocol to exchange key materials and negotiate security associations between two security gateways for any secure communications over Internet. However, the original IKE is too flexible, complex and weak to denial-of-service (DoS) attack; several enhanced IKE version have been proposed to replace the original one. In this paper, an elliptic curve cryptography (ECC) based and certificate less IKE protocol is proposed. It eliminates the use of certificates for authentication, replaces the RSA based Diffie-Hellman (DH) key exchange by Elliptic Curve Diffie-Hellman (ECDH) key exchange, and instead of cookies, hash value of initiator's public key, identity and IP address is used to prevent DoS attack. One advantage of the proposed scheme is that it provides same level of security as RSA with less key size, as well as it generates an ECC based common secret key, used for symmetric encryption, which requires less processing time, less computation cost and less storage space than the time required in the public key encryption-based techniques.

Remote monitoring for high-speed CNC processes over public IP networks using CyberOPC

Process analytical technology encourages the industry to adopt innovative technologies to increase quality. The key components of this approach are better understanding the product manufacturing process, data analysis, process analytical tools, process monitoring, and continuous feedback during the manufacturing process. Remote process analytical technology over public IP networks can significantly reduce the cost of maintenances and technical support, and simplify the classical OPC-like architecture based on multiple server gateways. The requirements for using remote process analytical technology for high-speed processes are mainly concerned with cyber security and high data refresh rate on the remote monitoring machine. This work intends to evaluate a new, open application protocol named CyberOPC dedicated to CNC machines. The CyberOPC version presented in this paper supersedes the first version presented in previous papers, which had no streaming features. The CyberOPC technology is not only an open alternative to other data exchange protocols, but it also introduces streaming capabilities to gain high refresh rate on remote control stations. It is based on the Client/Server Model, where a software layer is introduced between CNC and the remote monitoring station, on the Server side of CyberOPC. Even if the case study adopts a tunneling Schema that includes server gateways, the requirements to develop protocols in embedded devices and modern CNC are fulfilled by several devices that include a TCP/IP stack.

State Public Health Assistance to Hospitals for Meeting HAI Reporting Requirements via NHSN

A state mandate was issued requiring 400 general acute care hospitals to report HAI data via NHSN within 60 days. Less than 10% were using NHSN for mandated HAIs. Ten state public health IPs with varied NHSN experience were tasked to become content experts to assist hospitals with setup, rights conferral, data entry, and analysis. There was reluctance by some hospitals to accept help from “The State” due to concerns with information sharing.

Public IP network infrastructure evolutions to support emerging digital video services

Of all the services offered over a worldwide public network, digital video-based services, even at this early stage of development, are growing at such an astonishing rate that they will soon constitute the largest portion of Internet traffic. We are witnessing this today with the Internet television (TV) phenomenon, with YouTube, Netflix's online offering, and BBC's iPlayer serving as prominent examples. To optimize video-dominated networks with respect to the required transport capacity (and also to reduce the response time the end user experiences), these services need to be supported by new networking capabilities. Caching in conjunction with specific unicast and multicast techniques for ingress and egress traffic can achieve this goal. In this paper we discuss how, explicitly by using cache cooperation techniques, we can deal with heterogeneous content preferences among end users. The paper shows simulation results and discusses relevant parameters with respect to the Internet TV use cases mentioned. Finally, it provides an outlook on the longer term and demonstrates that investment in these new capabilities is future-safe.

A novel strategy for building interoperable MPI environment in heterogeneous high performance systems

Breakthrough advances in microprocessor technology and efficient power management have altered the course of development of processors with the emergence of multi-core processor technology, in order to bring higher level of processing. The utilization of many-core technology has boosted computing power provided by cluster of workstations or SMPs, providing large computational power at an affordable cost using solely commodity components. Different implementations of message-passing libraries and system softwares (including Operating Systems) are installed in such cluster and multi-cluster computing systems. In order to guarantee correct execution of message-passing parallel applications in a computing environment other than that originally the parallel application was developed, review of the application code is needed. In this paper, a hybrid communication interfacing strategy is proposed, to execute a parallel application in a group of computing nodes belonging to different clusters or multi-clusters (computing systems may be running different operating systems and MPI implementations), interconnected with public or private IP addresses, and responding interchangeably to user execution requests. Experimental results demonstrate the feasibility of this proposed strategy and its effectiveness, through the execution of benchmarking parallel applications.

NAT Traversing Solutions for SIP Applications

Session Initiation Protocol (SIP) has been proposed for multimedia services and wide-area connectivity in smart home environments (SHEs). An important issue for SIP deployment in SHEs is network address translator (NAT) traversing. SIP and Real-time Transport Protocol (RTP) packets are delivered between an SHE (i.e., private IP network) and Internet (i.e., a public IP network) through an NAT function of a home gateway, and the NAT translates the IP/transport layer address and port number but leaves the application layer content unchanged. This results in inconsistency between the IP addresses/port numbers in the IP/transport layers and those in the SIP layer. To resolve this issue, we describe six solutions including static route, UPnP, STUN, ICE, ALG, and SBC. Then we compare these solutions in terms of smart home appliance (SHA) modification, scope of NATs supported, multilayer NAT traversal, ease of configuration, security issue, and time complexities.

Design and Implementation of Secure Area Expansion Scheme for Public Wireless LAN Services

Recently, wireless LAN (WLAN) technology has become a major wireless communication method. The communication bandwidth is increasing and speeds have attained rates exceeding 100 Mbps. Therefore, WLAN technology is regarded as one of the promising communication methods for future networks. In addition, public WLAN connection services can be used in many locations. However, the number of the access points (AP) is insufficient for seamless communication and it cannot be said that users can use the service ubiquitously. An ad-hoc network style connection can be used to expand the coverage area of a public WLAN service. By relaying the user messages among the user nodes, a node can obtain an Internet connection via an AP, even though the node is located outside the AP's direct wireless connection area. Such a coverage area extending technology has many advantages thanks to the feature that no additional infrastructure is required. Therefore, there is a strong demand for this technology as it allows the cost-effective construction of future networks.When a secure ad-hoc routing protocol is used for message exchange in the WLAN service, the message routes are protected from malicious behavior such as route forging and can be maintained appropriately. To do this, however, a new node that wants to join the WLAN service has to obtain information such as the public key certificate and IP address in order to start secure ad-hoc routing. In other words, an initial setup is required for every network node to join the WLAN service properly. Ordinarily, such information should be assigned from the AP. However, new nodes cannot always contact an AP directly. Therefore, there are problems about information delivery in the initial setup of a network node. These problems originate in the multi hop connection based on the ad-hoc routing protocols.In order to realize an expanded area WLAN service, in this paper, the authors propose a secure public key certificate and address provision scheme during the initial setup phase on mobile nodes for the service. The proposed scheme also considers the protection of user privacy. Accordingly, none of the user nodes has to reveal their unique and persistent information to other nodes. Instead of using such information, temporary values are sent by an AP to mobile nodes and used for secure ad-hoc routing operations. Therefore, our proposed scheme prevents tracking by malicious parties by avoiding the use of unique information. Moreover, a test bed was also implemented based on the proposal and an evaluation was carried out in order to confirm performance. In addition, the authors describe a countermeasure against denial of service (DoS) attacks based on the approach to privacy protection described in our proposal.

Secure Client- Server Based Remote Process Control

Internet based process control has been in the focus in the past years due to the wide horizons it opens to
 the industry field, office and home automation. Simplicity (in hardware, software and the required resources)
 in any system is an asset to have. Especially, in our region in which we lack hardware and software company
 dealers and a lot of automation resources. It is best to depend on free software as far as is possible in
 addition to on simple easy repairable systems. In this research a hardware interface circuit and a software
 system has been designed to control the temperature and level of a liquid tank (water has been considered in
 our case study). The main advantage of the designed interface circuit is its simplicity and low cost. The same
 can be true for the software system in which we used Java servlet to accomplish the communication task. Java
 servlets have many advantages over the Common Gateway Interface (CGI) based methods used previously
 that has common problems of speed and data persistence. In security aspects a password has been added to
 all control action commands to secure our process control tasks. In addition to the security introduced by
 using Dynamic Domain Naming System (DYNDNS) servers that allows the use of dynamic Internet Protocols
 (IP) for accessing information on the Internet. The designed hardware and software systems could be used for
 remote or local control with no amendment and for both manual and automatic control. The system could be
 used with no need to have a public IP for both client and server.

Real time TCP/IP control of modular production systems with FPGAS

The Modular Production System (MPS) can be used to reproduce nearly any function in complex manufacturing processes. In this work a different way of real time TCP/IP control of three different MPS controlled by embedded processors inside a FPGA is proposed. The digital design with FPGA is particularly advantageous due to its parallel processing made possible by its flexible structure, high integration and velocity. The TCP/IP control is carried out with a Rabbit Core microprocessor. This device contains the functions required to implement a web server allowing the remote control of the MPS. A user enters a public IP direction on a designed web page to enable/disable each independent manufacturing process.

Implementation of the DLNA Proxy System for Sharing Home Media Contents

The paper proposes a methodology to provide services for accessing and sharing various media contents securely, those are distributed over consumer electronics (CEs) in the home network. To do so, we propose the DLNA proxy system (DPS) architecture which helps to gather various media information available from the distributed AV devices in the home and to share the media contents across the public IP network via established secure channels. The proxy system is implemented on the home server which acts as media server and the hardware accelerated IP security (IPSec) virtual private network (VPN) is configured on the home gateway which establishes and maintains secure connections between the home and public networks.

Design of an Extended Architecture for Sharing DLNA Compliant Home Media from Outside the Home

This paper proposes an extended DLNA media sharing architecture as a methodology to provide services for accessing and sharing various media contents distributed over DLNA-capable devices, via not only a home network but also the Internet. The proposed architecture helps users search and view media contents distributed in the DLNA-networked home from public IP networks. Our architecture uses the SIP in order to transmit messages of information exchange between DLNA-capable devices within and outside of the home and to support secure user-authentication. The proposed system was implemented on a home server that acts as a gateway for establishing connections between the home network and external networks.

MobileNAT: A New Technique for Mobility Across Heterogeneous Address Spaces

We propose a new network layer mobility architecture called MOBILENAT to efficiently support micro and macro-mobility in and across heterogeneous address spaces common in emerging public networks. The key ideas in this architecture are as follows: (1) Use of two IP addresses - an invariant virtual IP address for host identification at the application layer and an actual routable address at the network layer that changes due to mobility. Since physical address has routing significance only within a domain, it can be a private address and therefore, does not deplete the public IP address resource. (2) New DHCP enhancements to distribute the two addresses. (3) A new signaling element called Mobility Manager (MM) that uses Middlebox Communication (MIDCOM) framework to signal the changes in packet processing rules to the Network Address Translators (NATs) in the event of node mobility. Our proposal does not require any modifications to the access networks and can seamlessly co-exist with the existing Mobile IP mechanisms and therefore, can be used to provide seamless mobility across heterogeneous wireline and wireless networks. We report implementation details of a subset of our ideas in a testbed with Windows XP clients and Linux based NATs.