Public Network Infrastructure Research Articles

Development of the transport network considering the specifics of Lviv’s planning structure (compared to Leipzig and Krakow)

The relevance of this study is determined by the need to adapt the transport network of Lviv to the requirements of modern urban traffic. The planning structure of Lviv was formed based on radial roads, later developing ring connections, which is typical for most European cities, but eventually acquired its own characteristics. The purpose of this study was to analyse the specific features of the current planning structure of Lviv, which affect the development of urban transport infrastructure and mobility of each mode of transport. The methodology of this study involves analysing the modern street and road network as the formative basis of the planning structure of the city of Lviv and assessing transport mobility based on geospatial data from open sources. Comparison with similar European cities, such as Leipzig and Krakow, helps to highlight the specific features and rational ways of developing Lviv’s transport network. The results of the study point to the main feature of Lviv’s planning structure, which is its compactness and high population density – twice as high as in comparable cities. This makes it impossible to adapt the transport infrastructure for car travel and highlights the need to improve public transport networks and cycling infrastructure as more efficient and environmentally friendly ways of urban transport. However, the study of urban transport mobility found that the means of limiting the use of private cars in Lviv are inferior to those implemented in comparable cities, and the public transport network and bicycle infrastructure are underdeveloped and do not provide a quality alternative to car travel as of 2023. The practical value of the study lies in highlighting the most problematic aspects of Lviv’s transport infrastructure that require urgent decisions to function in the context of the specific planning structure of the city

Survey of NGN migration profiles deployed by selected carriers in Europe, North America and Asia

The paper presents the alternative migration profiles to next generation carrier network architecture. It describes the paths of development of fixed public network infrastructure for five selected service providers. The carri- ers are selected as being in advanced stage of migration towards NGN. Moreover, examples of varying strategies ranging from full PSTN replacement and NGN overlay to constructing an NGN network from the ground up as well as examples of various migration strategies, especially based on IMS and softswitch solutions are presented.

Randomized MILP framework for Securing Virtual Machines from Malware Attacks

Cloud computing involves remote server deployments with public network infrastructures that allow clients to access computational resources. Virtual Machines (VMs) are supplied on requests and launched without interactions from service providers. Intruders can target these servers and establish malicious connections on VMs for carrying out attacks on other clustered VMs. The existing system has issues with execution time and false-positive rates. Hence, the overall system performance is degraded considerably. The proposed approach is designed to eliminate Cross-VM side attacks and VM escape and hide the server’s position so that the opponent cannot track the target server beyond a certain point. Every request is passed from source to destination via one broadcast domain to confuse the opponent and avoid them from tracking the server’s position. Allocation of SECURITY Resources accepts a safety game in a simple format as input and finds the best coverage vector for the opponent using a Stackelberg Equilibrium (SSE) technique. A Mixed Integer Linear Programming (MILP) framework is used in the algorithm. The VM challenge is reduced by a firewall-based controlling mechanism combining behavior-based detection and signature-based virus detection. The proposed method is focused on detecting malware attacks effectively and providing better security for the VMs. Finally, the experimental results indicate that the proposed security method is efficient. It consumes minimum execution time, better false positive rate, accuracy, and memory usage than the conventional approach.

Сравнение производительности алгоритмов классификации в рамках сетевой инфраструктуры

User authentication is now a standard procedure for access to corporate or public network infrastructure. The advantage of biometric authentication is the unique and unambiguous identification of an individual in the system. Supervised machine learning techniques were used to monitor user behavior to identify legitimate users. After testing all users using the classifiers, the verification rate was achieved at 98%. The results can be used in corporate projects and organizing contests. The work is conducted within the RemoteTopology platform. On the open web page, the user opens several RDP protocol sessions. VNC, Telnet, SSH. Session data is collected by the browser extension and transmitted to the database. In the second stage, an experiment was conducted to train and test each user using the classifiers defined above. If the characteristics that the user exhibits at the current time match those identified by the model training, the user continues to work, otherwise the system locks the user and requires re-authentication. The model must provide constant detection of user characteristics based on mouse dynamics. Characteristics are collected and packaged on the client side in a browser extension, then transmitted to the server and stored in a database. Each reliable action is then assigned a value, and a single block of work is not a single user. A single block is not an illegal or illegal user to block work. It can also be noted that for scenarios 1, 2 and 3 using the FAR, FRR, EER and ROC curve: scenario 1 had the lowest EER values: RF EER: 0.010%.

Reducing Parking Space Search Time and Environmental Impacts: A Technology Driven Smart Parking Case Study

Over the last half century, the proportion of humans living in cities has dramatically risen from around a third to just over half. As cities continue to rise in popularity, demand for basic services such as transportation increases. The automobile has been the dominant method of inner city transportation for many cities across the globe, resulting in increased congestion and air pollution. As the demand for transportation rises, so does the number of vehicles, which leads to greater competition for publicly available parking spaces. Use of land for parking can be an inefficient use of space, and it is expensive, both in terms of real and opportunity costs. Addressing these issues requires cities to more effectively manage their public on-street parking spaces and road network infrastructure. The ParkUs solution discussed here provides one parking and infrastructure management approach, with potential benefits for citizens, businesses, and cities.

UAV communication system integrated into network traversal with mobility

In this paper, a secured unmanned aerial vehicle (UAV)-assisted heterogeneous network environment, and seamless IP prototype is proposed. UAV is controlled over the Internet to resolve a long-range communication barrier and to improve remote sensing. In the new technology, a pilot can control UAV via an end device (ED)-secured communication without any information about the network architectures, network address translation types, Internet protocol version. Network traversal with mobility (NTMobile) offers a secured communication for UAV through a public network infrastructure. NTMobile enhances the security and maintain mobility by generating keys and building tunnel using virtual IPs for two nodes inside the network. In the prototype the UAV flight controller can install a ground control station application on the UAV board. An ED can be any smart device connected to the Internet with the ability to run the remote protocols, which allows the pilot to send commands and receives data from UAV. Moreover, the pilot transmits commands through the remote desktop protocol or secure shell protocol. Experimentally, an autopilot mission is designed and uploaded to the flight controller where UAV and ED are forced to switch access network between cellular network LTE and 802.11a IEEE wireless local area network in specific waypoints. The novelty of this study is proposing secure continuous connectivity of the UAV communication and control system even during the occurrence of a network switch, which is one of the important factor in the heterogeneous network environment. The results revealed that NTMobile maintains continuous communication by re-establishing the created tunnel between UAV and ED in the proposed prototype while both are travelling in a heterogeneous network.

Evaluación de Parámetros de QoS en una Red VPN-MPLS Diffserv bajo un Entorno Completo de Emulación de Software Libre

El uso de redes de redes privadas virtuales (VPN-MPLS) se ha vuelto muy común dentro de las empresas gracias a sus múltiples ventajas tales como, la comunicación privada a través de una infraestructura de red pública entre sitios geográficamente diversos. Esto lleva a la necesidad de una red eficiente en términos de calidad de servicio (QoS) para garantizar la fiabilidad y la seguridad de la información. Sin embargo, la implementación de una red VPN-MPLS no es fácil ni económica para las pequeñas y medianas empresas; por lo tanto, en la mayoría de los casos, se requiere usar emuladores que tampoco son gratis. La presente investigación analizó una red VPN-MPLS en términos de métricas QoS: delay, jitter y packet loss. Esta evaluación se realizó en un entorno virtual utilizando sólo herramientas de software libre bajo dos escenarios de prueba, con y sin Servicios Diferenciados (DiffServ). Los resultados mostraron que una red VPN-MPLS DiffServ reduce el delay en aproximadamente 96.78% en VoIP, 39.21% en Datos y 66.83% en Streaming; Además, el jitter se redujo en aproximadamente 27,88% en VoIP y 41,09% en datos.

Open source system OpenVPN in a function of Virtual Private Network

Using of Virtual Private Networks (VPN) can establish high security level in network communication. VPN technology enables high security networking using distributed or public network infrastructure. VPN uses different security and managing rules inside networks. It can be set up using different communication channels like Internet or separate ISP communication infrastructure. VPN private network makes security communication channel over public network between two endpoints (computers). OpenVPN is an open source software product under GNU General Public License (GPL) that can be used to establish VPN communication between two computers inside business local network over public communication infrastructure. It uses special security protocols and 256-bit Encryption and it is capable of traversing network address translators (NATs) and firewalls. It allows computers to authenticate each other using a pre-shared secret key, certificates or username and password. This work gives review of VPN technology with a special accent on OpenVPN. This paper will also give comparison and financial benefits of using open source VPN software in business environment.

Integrated Nationwide Electronic Health Records system: Semi-distributed architecture approach.

The integration of heterogeneous electronic health records systems by building an interoperable nationwide electronic health record system provides undisputable benefits in health care, like superior health information quality, medical errors prevention and cost saving. This paper proposes a semi-distributed system architecture approach for an integrated national electronic health record system incorporating the advantages of the two dominant approaches, the centralized architecture and the distributed architecture. The high level design of the main elements for the proposed architecture is provided along with diagrams of execution and operation and data synchronization architecture for the proposed solution. The proposed approach effectively handles issues related to redundancy, consistency, security, privacy, availability, load balancing, maintainability, complexity and interoperability of citizen's health data. The proposed semi-distributed architecture offers a robust interoperability framework without healthcare providers to change their local EHR systems. It is a pragmatic approach taking into account the characteristics of the Greek national healthcare system along with the national public administration data communication network infrastructure, for achieving EHR integration with acceptable implementation cost.

XS: a FASTQ read simulator

BackgroundThe emerging next-generation sequencing (NGS) is bringing, besides the natural huge amounts of data, an avalanche of new specialized tools (for analysis, compression, alignment, among others) and large public and private network infrastructures. Therefore, a direct necessity of specific simulation tools for testing and benchmarking is rising, such as a flexible and portable FASTQ read simulator, without the need of a reference sequence, yet correctly prepared for producing approximately the same characteristics as real data.FindingsWe present XS, a skilled FASTQ read simulation tool, flexible, portable (does not need a reference sequence) and tunable in terms of sequence complexity. It has several running modes, depending on the time and memory available, and is aimed at testing computing infrastructures, namely cloud computing of large-scale projects, and testing FASTQ compression algorithms. Moreover, XS offers the possibility of simulating the three main FASTQ components individually (headers, DNA sequences and quality-scores).ConclusionsXS provides an efficient and convenient method for fast simulation of FASTQ files, such as those from Ion Torrent (currently uncovered by other simulators), Roche-454, Illumina and ABI-SOLiD sequencing machines. This tool is publicly available at http://bioinformatics.ua.pt/software/xs/.

Internal & External Virtualization Private Network Using Enhanced DES

A IEVPN is a private network constructed with in a public network infrastructure such as a global internet. IEVPN’s may exist between an individual machine and a private network or a remote LAN and a private network (server-to-server). IEVPN’s can also be incorporated within the internet and this is the region where it is prominent as the internet is more vulnerable to hacking and hence security plays a major role here. A IEVPN can be used to carry information at a small fraction of the cost of long distance calls or private leased-lines. The major feature of IEVPN includes encryption, decryption, economy, authentication and encabsulation.

Stochastic Design of Enhanced Network Management Architecture and Algorithmic Implementations

The paper is focused on available server management in Internet connected network environments. The local backup servers are hooked up by LAN and replace broken main server immediately and several different types of backup servers are also considered. The remote backup servers are hooked up by VPN (Virtual Private Network) with high-speed optical network. A Virtual Private Network (VPN) is a way to use a public network infrastructure and hooks up long-distance servers within a single network infrastructure. The remote backup servers also replace broken main severs immediately under the different conditions with local backups. When the system performs a mandatory routine maintenance of main and local backup servers, auxiliary servers from other location are being used for backups during idle periods. Analytically tractable results are obtained by using several mathematical techniques and the results are demonstrated in the framework of optimized networked server allocation problems. The operational workflow give the guidelines for the actual implementations.

Ageing in an ultra-dense metropolis: perceived neighbourhood characteristics and utilitarian walking in Hong Kong elders.

The neighbourhood built environment may affect walking behaviour of elders. However, such effects remain underexplored, especially in an Asian context. We examined associations of perceived environmental attributes with overall and neighbourhood-specific walking for transport in a sample of Chinese elders residing in Hong Kong, an ultra-dense Chinese metropolis. Cross-sectional observational study using a two-stage stratified sampling strategy. Hong Kong, China. Chinese-speaking elders (n 484), with no cognitive impairment and able to walk without assistance, residing in thirty-two selected communities stratified by socio-economic status and walkability, were interviewer-administered validated measures of perceived neighbourhood environment and walking for transport. Much higher levels of transport-related walking (mean 569 (sd 452) min/week) than found in Western samples were reported. The degree of perceived access to shops, crowdedness, presence of sitting facilities and easy access of residential entrance were independently positively related to both frequency of overall and within-neighbourhood walking for transportation. Infrastructure for walking and access to public transport were predictive of higher frequency of transport-related walking irrespective of location, while the perceived degree of land-use mix was predictive of higher levels of within-neighbourhood walking. The provision of easy access to shops, residential entrances and sitting facilities in the neighbourhood may promote overall transport-related walking, while a good public transport network and pedestrian infrastructure linking destination-poor with destination-rich locations may compensate for the detrimental effects of living in less walkable neighbourhoods. Governmental investment in these micro- and macro-environmental features would help the promotion of an active lifestyle in elders.

Visible technologies, invisible organisations: An empirical study of public beliefs about electricity supply networks

Reducing carbon emissions in the energy system poses significant challenges to electricity transmission and distribution networks. Whilst these challenges are as much social as economic or technical, to date few research studies have investigated public beliefs about electricity supply networks. This research aimed to address this gap by means of a nationally representative study of UK adults ( n=1041), probing beliefs about how electricity reaches the home, responsibility for electricity supply, associations with the words ‘National Grid’, as well as beliefs about the planning of new infrastructure. Findings suggest that electricity networks are represented predominantly in terms of technologies rather than organisations, specifically in terms of familiar, visible components such as cables or wires, rather than more systemic concepts such as networks. Transmission and distribution network operators were largely invisible to members of the public. In terms of planning new lines, most respondents assumed that government ministers were involved in decision-making, while local residents were widely perceived to have little influence; moreover, there was strong public support for placing new power lines underground, regardless of the cost. In conclusion, organisational invisibility, coupled with low expectations of participatory involvement, could provoke public opposition and delay siting new network infrastructure.

Security and performance enhancements to OGSA‐DAI for Grid data virtualization

AbstractIn this paper we describe our work on enabling dynamic access control and secure management over federated data resources, such as relational or XML databases exposed to public network infrastructures via OGSA‐DAI middleware. We have proposed some extensions to the OGSA‐DAI architecture and successfully implemented new mechanisms enabling secure communication and distributed data integrity along with fine‐grain authorization and policy enforcement to minimize the complexity of the security right management. As a proof of concept some preliminary results of various performance tests of our solutions are also presented in this paper. We then analyze our achievements and describe future work and research. Copyright © 2007 John Wiley & Sons, Ltd.

On virtual private networks security design issues

The concept of virtual private networks (VPNs) provides an economical and efficient solution on communicating private information securely over public network infrastructure. In this paper, we discuss two issues on the design of VPN. We first propose the VPN services, the mandatory VPN operations for each VPN service and the design on VPN protocol stack. Afterwards, we propose a list of protocol modules to be used to support the VPN operations and co-relate the mandatory VPN operations to the appropriate VPN protocols. We then propose the design of VPN software that provides guarantees on security, connectivity and quality of service. We also discuss the message processing sequence by the VPN software.

Access control and session management in the HTTP environment

As the only ubiquitous public data network, the Internet offers business partners a communications channel that previously existed only in unique situations with private, special-purpose networks. Well-publicized security risks, however, have limited the deployment of business-to-business extranets, which typically use the Internet's public data network infrastructure. These risks extend behind firewalls to intranets, where any user gaining entry to a facility is often implicitly authenticated to access unprotected services by simply plugging a portable computer into an unused network port. The author describes an approach that uses role-based access controls (RBACs) and Web session management to protect against network security breaches in the HTTP environment. The RBAC and session management services augment network-level security, such as firewalls, inherent in the deployment of any Web based system with untrusted interfaces. The RBACs are implemented through the Internet Engineering Task Force's Lightweight Directory Access Protocol (LDAP). Session management is implemented through cryptographically secured, cookie-based ticket mechanisms.

On managing traffic over virtual private network links

A Virtual Private Network (VPN) provides corporate networking between geographically dispersed company sites. VPN sites consist of Local Area Networks (LANs) interconnected over a public network infrastructure, through virtual links. The goal of this work is to develop a control model able to manage traffic on these links. By maximizing bandwidth utilization on each link, an optimum balance for the allocation of bandwidth on the entire VPN can be found. The proposed model is called hierarchical bandwidth manager and is implemented in each LAN of the VPN. It is also able to cope with best-effort and guaranteed flows so that bandwidth left unused by guaranteed flows is dynamically distributed among best-effort ones. In each LAN, a tree representation is used to share the capacity of each virtual link between multiple flows in a hierarchical and distributed manner. Each node in the tree respects an inter-node bandwidth share protocol and/or is regulated through an intra-host regulation mechanism. This latter is implemented through a new technique which we call the fair shaper. An implementation of this technique in a Solaris 2.5 operating system and results of the implementation of the inter-node bandwidth share protocol in the ns network simulator are also described in this paper.

Transporting Production/Mastering-Quality Digital Video Signals through the Public Network Using SONET/SDH and ATM Technology

This paper describes a method for transporting a variety of high-quality, standards-based digital video signals through the global synchronous optical network/synchronous digital hierarchy (SONET/SDH) public network infrastructure by using cost-effective, flexible asynchronous transmission mode (ATM) technolog The difficulties of creating nonstandard SONET/SDH tributaries within concatenated synchronous transport signals are bypassed by using ATM-based multiplexing techniques. This approach greatly simplifies the design of SONET/SDH video terminal equipment, while permitting transmission of lower speed data channels along with the high-speed video signals along the SONET/SDH backbone With the use of the techniques described in this paper, any combination of digital video signals can be transported. Finally, due to the extensibility of ATM technology, these production-quality and mastering-quality video signals can be combined with lower speed, compressed video ignals in any feasible mix that does not exceed the maximum backbone bandwidth.

Top Secret Traffic and the Public ATM Network Infrastructure

The current network security paradigm, coupled with the desire to transport classified traffic securely, has caused the U.S. Department of Defense (DoD) to maintain its own isolated networks, distinct from the public ATM network infrastructure. Internally, the DoD maintains four types of completely separate and isolated networks to carry top secret, secret, confidential, and unclassified traffic, respectively. A public ATM network may be viewed as carrying unclassified or nonsecure traffic. Although the cost of maintaining four separate network types is becoming increasingly prohibitive to the DoD, the inability of the public and DoD to utilize each other's network resources runs counter to the current atmosphere of dual use and economies of scale. This article introduces the concept of a “mixed use” network, wherein the four DoD network types and the public ATM network are coalesced into a single, unified network that transports all four types of traffic, efficiently and without compromising their respective security. In a mixed use network, the ATM nodes and links that are common between the DoD and public networks are labeled “joint use” and fall under the jurisdiction of the military for obvious protection of the security assets. The concept of “mixed use” is the direct result of the user-level, security-on-demand principle that recently has been introduced in the literature and one that is enabled by the fundamental security framework and the basic characteristic of ATM networks. This article models a representative 32- node public ATM network, a 40-node DoD network, and the coalesced 50-node mixed use network, and executes accurate simulations on a testbed that, in turn, executes on a network of Linux workstations configured as a loosely coupled parallel processor. The simulation testbed closely resembles an operational ATM network, thereby implying realistic results. Performance data, obtained for representative input traffic stimulus, constitute a successful scientific demonstration of the concept of a “mixed use” network. Furthermore, the results reveal that because the unclassified DoD traffic encounters a richer connectivity in the mixed use network, the success rate of the DoD calls is significantly higher in the mixed use network than in the military network. The unclassified DoD traffic's demand for security resources decreases, thereby enabling a much higher chance for the secure calls to succeed. Unlike in the traditional DoD classified networks, in a mixed use network the security resources are not distributed uniformly throughout the network. In this paradigm, security is viewed as a distributed resource, and the underlying distributed resource allocation strategy aims at allocating it to each user efficiently, based on demand and dictated by need.