Source Address Research Articles

Communication Network Discovery through Correlation Matrix

Communication network discovery is a herculean task for IDC operators, who usually been lacking of the knowledge of business architecture. The traditional method, by analyzing the source address and the destination address inside of the communication packet, to explore the network connection graph is extremely inefficient, especially when dealing with the hybrid network. This paper presented a novel approach to discover the communication network through the correlation matrix of the cpu utilization dataset.

SIMULASI NDN MENGGUNAKAN NDNSIM PADA JARINGAN INTRANET KAMPUS TEKNOLOGI INFORMASI FAKULTAS TEKNIK UNIVERSITAS UDAYANA

NDN (Named Data Networking) is one of today's internet technologies with identifier of the packet is given in the form of a content name, not a source or destination address. Such properties make NDN have a new forwarding mechanism and different from host to host (IP-based) network architecture. Utilization of this new technology is usually incomplete or there is a need for simulations for initial testing and testing. This paper will discuss about NDN simulation. The simulation will be done using ndnSIM, an open source simulator and testing was performed at Information Technology Campus, Faculty of Engineering, Udayana University’s intranet.

Network Transparency for Better Internet Security

The lack of transparency for Internet communication prevents effective mitigation of today's security threats: i) Source addresses cannot be trusted and enable untraceable reflection attacks. ii) Malicious communication is opaque to all network entities, except for the receiver; and although ISPs are control points that can stop such attacks, effective detection and mitigation requires information that is available only at the end hosts. We propose TRIS, an architecture that bootstraps transparency for Internet communication. TRIS enables the definition of misbehavior according to the unique requirements of hosts, and then it constructs verifiable evidence of misbehavior. First, hosts express desired traffic properties for incoming traffic; a deviation from these properties signifies misbehavior. Second, ISPs construct verifiable evidence of misbehavior for the traffic they forward. If misbehavior is detected, it can then be proven to the ISPs of the communicating hosts. We implement our architecture on commodity hardware and demonstrate that verifiable proof of misbehavior introduces little overhead with respect to bandwidth and packet processing in the network: our prototype achieves line-rate performance for common packet sizes, saturating a 10 Gbps link with a single CPU core. In addition, we tackle incremental deployment issues and describe interoperability with today's Internet architecture.

Raspberry Pi Based Battle Field Robot using Dijkstra’s Algorithm

The robot is intended to follow protests by turning left and ideal to keep the article in sight and driving forward and in reverse to keep up a consistent separation between the robot and the item. Pictures are obtained through the camera of a Raspberry-pi gadget which is appended to the robot. The camera is appended to servos on the robot which enable the camera to skillet and tilt. A few picture handling methods are utilized to distinguish the area of the article being followed in the pictures. The vehicle route utilizing the information transmission time is expanded with the convention standard. Correspondences between two hubs (equipment and application) are practiced through IEEE 802.15.4. The client can give the source and goal hub address to the server segment. Utilizing QR code by executing DIJSKTRA calculation the most brief way can be effectively decided. Metal discovery should be possible by utilizing inductive closeness sensor. Ultrasonic sensor is utilized for finding the separation between the robot and article to be picked.

Analisa dan Perbandingan Kinerja Routing Protocol OSPF dan EIGRP dalam Simulasi GNS3

Router is the network equipment for route the packet from one network segment to another in a bigscale network. Router can route packet because there is a routing table in router configuration. Routing table is anaddress list of source and destination address where the packet will be routed. There are two methods of routing tableconfiguration, static routing and dynamic routing. Static routing is a routing table configuration method where all ofrouting table content is configured manually, usually for a small scale of network. Dynamic network is a routing tableconfiguration method by the router automatically, usually for a big scale of network. A dynamic routing is built fromthe routing information collected by the routing algorithm. There are two routing algorithm, link-state and distancevector algorithm. This simulation will be built in GNS3 simulation software. Goal of this research is to compare theperformance between that two algorithm from two routing protocol that using each of those two algorithm. Thecomparison will be running between OSPF routing protocol on the link state routing protocol and EIGRP on thedistance vector routing protocol side. The result of this analysis and comparison of those two routing protocol isexpected to be a reference of choosing better routing protocol in building a network

Software Defined Based Pure VPN Protocol for Preventing IP Spoofing Attacks in IOT

The Internet of things (IoT) is the network of devices, vehicles, and home appliances that contain electronics, software, actuators, and connectivity which allows these things to connect, interact and exchange data. IoT involves extending Internet connectivity beyond standard devices, such as desktops, laptops, smart phones and tablets, to any range of traditionally dumb or non-internet-enabled physical devices and everyday objects. Embedded with technology, these devices can communicate and interact over the Internet, and they can be remotely monitored and controlled. Traditionally, current internet packet delivery only depends on packet destination IP address and forward devices neglect the validation of packet’s IP source address. It makes attacks can leverage this flow to launch attacks with forge IP source address so as to meet their violent purpose and avoid to be tracked. In order to reduce this threat and enhance internet accountability, many solution proposed in the inter domain and intra domain aspects. Furthermore, most of them faced with some issues hard to cope, i.e., data security, data privacy. And most importantly code cover PureVPN protocol for both inter and intra domain areas. The novel network architecture of SDN possess whole network PureVPN protocol rule instead of traditional SDN switches, which brings good opportunity to solve IP spoofing problems. However, use authentication based on key exchange between the machines on your network; something like IP Security protocol will significantly cut down on the risk of spoofing. This paper proposes a SDN based PureVPN protocol architecture, which can cover both inter and intra domain areas with encrypted format effectively than SDN devices. The PureVPN protocol scheme is significant in improving the security and privacy in SDN for IoT.

Data Logging Implementation on Web-Based Communication on Arduino Devices

Arduino is one of the microcontroller devices commonly used on the Internet of Things. This research designed and objectified web-based data logging system that aimed to record communication and sensir data in iot devices, so it could monitor log data in iot. Devices from this data logging system was created using arduino uno r3 with adding ethernet shield modul and temperature sensor DHT 11. in iot devices, there is an important parameter, that is date time as a history in data logging sistem using an actual time. Website was functioned as system for showing data from log data and could be monitored realtime. This system could record communication brtween arduino device and NTP server using internet network. Beside that?this system could record important parameters in the system such as IP source address, ip destination address, ip address in each node, device time, and room temperature information. Parameters that had been recorded would be stored to database, then would be showed in web data logging.

Replay Attack and Defense of Electric Vehicle Charging on GB/T 27930-2015 Communication Protocol

The GB/T 27930-2015 protocol is the communication protocol between the non-vehicle-mounted charger and the battery management system (BMS) stipulated by the state. However, as the protocol adopts the way of broadcast communication and plaintext to transmit data, the data frame does not contain the source address and the destination address, making the Electric Vehicle (EV) vulnerable to replay attack in the charging process. In order to verify the security problems of the protocol, this paper uses 27,655 message data in the complete charging process provided by Shanghai Thaisen electric company, and analyzes these actual data frames one by one with the program written by C++. In order to enhance the security of the protocol, Rivest-Shamir-Adleman (RSA) digital signature and adding random numbers are proposed to resist replay attack. Under the experimental environment of Eclipse, the normal charging of electric vehicles, RSA digital signature and random number defense are simulated. Experimental results show that RSA digital signature cannot resist replay attack, and adding random numbers can effectively enhance the ability of EV to resist replay attack during charging.

Secure Neighbor Discovery Protocol

The neighbor discovery protocol (NDP) is a stateless protocol facilitating link local communication in IPv6 networks. The nodes employ IPv6 NDP to locate other hosts/routers on the link, cover resolution of link layer addresses, duplicate address detections and track reachability status about paths to active nodes. However, link local communication using NDP is susceptible to some severe attacks, which if neglected leave the network vulnerable. Attackers can spoof source addresses of legitimate nodes by forging NDP messages and propel attacks like Denial of Service (DoS) and Man-in-the-Middle (MITM) leading to failure of IPv6 host initialization. To avert this, RFC 3971 advocates employing Secure Neighbor Discovery (SeND) to make the process inviolable. SeND fortifies message tampering, prevents IPv6 address theft, including protection against replay attacks and enable validation of routers on the link. Although SeND is a robust link layer security mechanism, its practical implementation is reported to have serious shortcomings like cryptographic algorithms which impact computational complexity including bandwidth utilization, as such negate their implementation and adoption. Moreover, the protocol itself fails to provide the confidentiality factor in the network. SeND also falls short of mature unabridged implementations in commercial operating systems and network devices. This paper revisits the protocol implementation and reviews its deployment challenges. This article also discusses some feasible proposals and recommendations for facilitating practical deployment of SeND in IPv6 networks including resource constrained devices like mobile phones.

Loan-Address Terms to Enhance Atmosphere of Source Novel in Target Novel

The objective of this research was to analyze how English address terms in “The Princess Diaries” were translated into Indonesian in “Buku Harian Sang Putri”, which published eight times that might indicate its popularity among Indonesian enthusiasts. This research applied content analysis method, particularly the theory of address terms postulated by Braun and Kridalaksana also the theory of translation strategies proposed by Baker, Newmark, and Vinay and Darbelnet. The data were both target and source address terms in dialogs. The address terms were grouped into subsets of the unit for analysis. The result shows English address terms are translated into 11 Indonesian address terms and ’konstruksi kepemilikan’ by using ten translation strategies. The research also shows that loan-address terms (full-loan and scattered-address terms) are chosen as a strategy to enhance the novel’s source atmosphere though they distort the target culture to some extent. To conclude, address terms aren’t always translated into address terms and pragmatic meaning’s distortion happens though various translation strategies are applied. It is necessary to conduct research on how to minimize loan address terms to maintain the source novel’s atmosphere without distorting the pragmatic meaning of Indonesian culture.

GeoZone: An interest-packet forwarding mechanism based on dissemination zone for content-centric vehicular networks

In Vehicular Ad hoc Networks (VANETs), applications like road traffic reports and free parking lots distribute the same content for a large number of nodes. To distribute those contents, VANET applications need to discover the content source address and establish an end-to-end route before the content retrieval begins. Highly dynamic topologies and the need to forward several flows requesting the same content towards the source in a broadcast medium turn these applications very challenging. In this work, we propose GeoZone, a content-centric framework that forwards requests using a geo-referenced naming scheme. GeoZone builds a dissemination zone with the requesting node GPS coordinates and the GPS coordinates of the content. The dissemination zone avoids requests flooding in the wireless medium. Simulation results show that GeoZone is able to reduce 66% the number of requests in the evaluated scenarios compared to another literature proposal without sacrificing delivery rate and delay.

PrivICN: Privacy-preserving content retrieval in information-centric networking

Information-Centric Networking (ICN) has emerged as a paradigm to cope with the increasing demand for content delivery on the Internet. In contrast to the Internet Protocol (IP), the underlying architecture of ICN enables users to request contents based on their name rather than their hosting location (IP address). On the one hand, this preserves users’ anonymity since packet routing does not require source and destination addresses of the communication parties. On the other hand, semantically-rich names reveal information about users’ interests, which poses serious threats to their privacy. A curious ICN node can monitor the traffic to profile users’ or censor specific contents for instance. In this paper, we present PrivICN: a system that enhances users privacy in ICN by protecting the confidentiality of content names and content data. PrivICN relies on a proxy encryption scheme and has several features that distinguish it from existing solutions: it preserves full in-network caching benefits, it does not require end-to-end communication between consumers and providers and it provides flexible user management (addition/removal of users). We evaluate PrivICN in a real ICN network (CCNx implementation) showing that it introduces an acceptable overhead and little delay. PrivICN is publicly available as an open-source library.

Network traffic fusion and analysis against DDoS flooding attacks with a novel reversible sketch

Distributed Denial of Service (DDoS) flooding attacks are one of the typical attacks over the Internet. They aim to prevent normal users from accessing specific network resources. How to detect DDoS flooding attacks arises a significant and timely research topic. However, with the continuous increase of network scale, the continuous growth of network traffic brings great challenges to the detection of DDoS flooding attacks. Incomplete network traffic collection or non-real-time processing of big-volume network traffic will seriously affect the accuracy and efficiency of attack detection. Recently, sketch data structures are widely applied in high-speed networks to compress and fuse network traffic. But sketches suffer from a reversibility problem that it is difficult to reconstruct a set of keys that exhibit abnormal behavior due to the irreversibility of hash functions. In order to address the above challenges, in this paper, we first design a novel Chinese Remainder Theorem based Reversible Sketch (CRT-RS). CRT-RS is not only capable of compressing and fusing big-volume network traffic but also has the ability of reversely discovering the anomalous keys (e.g., the sources of malicious or unwanted traffic). Then, based on traffic records generated by CRT-RS, we propose a Modified Multi-chart Cumulative Sum (MM-CUSUM) algorithm that supports self-adaptive and protocol independent detection to detect DDoS flooding attacks. The performance of the proposed detection method is experimentally examined by two open source datasets. The experimental results show that the method can detect DDoS flooding attacks with efficiency, accuracy, adaptability, and protocol independability. Moreover, by comparing with other attack detection methods using sketch techniques, our method has quantifiable lower computation complexity when recovering the anomalous source addresses, which is the most important merit of the developed method.

DoS vulnerabilities and mitigation strategies in software-defined networks

Software defined networking (SDN) significantly simplifies the management of network resources and the deployment of networking applications by decoupling the control logic from forwarding devices, as well as using a logically centralized control. While SDN brings huge success, the characteristics of SDN architecture also raise new security concerns. The software control agents on the switches, the bandwidth between switches, and the controller have limited processing capacity. These resources can be exhausted by SDN-aimed DoS attacks easily. In this paper, we investigate the DoS attack methods and mitigation strategies in SDN. We launch DoS attacks by injecting malicious packets with random source addresses. We find that these packets can overload the software control agents, the secure channel, and the controller. To defend against such attacks, we present DosDefender, an extension module for SDN controller to filter the malicious packets from the data plane in an online manner. We implement a prototype of DosDefender in the floodlight controller and evaluate the effectiveness of the defense mechanism. The results show that DosDefender can mitigate the DoS attacks and protect the software control agents, secure channel and controller resources simultaneously.

Integrated Intrusion Detection Model Using Chi-Square Feature Selection and Ensemble of Classifiers

Intrusion detection system is a device or software application that monitors a network of systems to identify any malicious activity or policy violations. In order to identify intrusions or normal activity, IDS would consider different network-related features such as source address, protocol and flag. The major challenge for any intrusion detection model is to achieve maximum accuracy with minimal false alarms. The aim of this paper is to identify the critical features required in the construction of intrusion detection model, thereby achieving the maximum accuracy. The model utilizes an ensemble approach of classifiers with minimum complexity to overcome the issues in the existing ensemble-based intrusion detection models. In this paper, Chi-square feature selection and the ensemble of classifiers such as support vector machine (SVM), modified Naive Bayes (MNB) and LPBoost are utilized to develop an intrusion detection model. The motivation for selecting Chi-square feature selection is that they rank the features based on the statistical significance test and consider only those features that are dependent on the class label. Supervised classifiers are highly consistent and produce precise results as the use of training data improves the ability to distinguish between classes with similar features. Experimental results indicate high accuracy in comparison with base classifiers by the ensemble of LPBoost. As there is a huge class imbalance present in the network traffic, the prediction of the class label by a majority voting of SVM, MNB and LPBoost is an optimal solution in preference to reliance on a single classifier.

Cisco Secured Virtual Private Networks: A Review

Now-a-days the significance of security has been greater than before because of the fact that data has been accessed and transferred through public network. The data which has been transferred could be sniffed which may be a loss for us. When data is transferred in to public network we need confidentiality, integration and authentication. In this review paper we will discuss all these factors that keep our data safe enough. In order to provide this factor a site-to-site virtual private network has been designed which provide more security to data and made the public network into private network. The virtual private network hides the source and destination address as well as it also hides the internal network so that our network would be safe enough.

Analisa dan Perbandingan Kinerja Routing Protocol OSPF dan EIGRP dalam Simulasi GNS3

Router is the network equipment for route the packet from one network segment to another in a bigscale network. Router can route packet because there is a routing table in router configuration. Routing table is anaddress list of source and destination address where the packet will be routed. There are two methods of routing tableconfiguration, static routing and dynamic routing. Static routing is a routing table configuration method where all ofrouting table content is configured manually, usually for a small scale of network. Dynamic network is a routing tableconfiguration method by the router automatically, usually for a big scale of network. A dynamic routing is built fromthe routing information collected by the routing algorithm. There are two routing algorithm, link-state and distancevector algorithm. This simulation will be built in GNS3 simulation software. Goal of this research is to compare theperformance between that two algorithm from two routing protocol that using each of those two algorithm. Thecomparison will be running between OSPF routing protocol on the link state routing protocol and EIGRP on thedistance vector routing protocol side. The result of this analysis and comparison of those two routing protocol isexpected to be a reference of choosing better routing protocol in building a network.

A fine-grained rule partition algorithm in cloud data centers

To better control the individual data flow in the cloud, traffic management policies are in need of increasing fine-grained rules, causing a dramatic increase in rules. The limited CPU or memory resources at the servers become the bottleneck when those policies are employed in large-scale data centers. To overcome these resource constraints, the rule partition algorithm is indispensable to decompose the rule set so that some rules can be migrated away. This paper shows that the current rule partition algorithm of vCRIB may lead to a high traffic overhead and high rule inflation in certain cases. Motivated by this observation, we propose a Fine-grained Rule Partition (FRP) algorithm. Different from vCRIB which divides the rule set based on the unit of rules within the same source address, FRP treats the individual rule as a unit, and thus reduce the traffic overhead by retaining more deny rules. In addition, FRP controls the rule inflation by optimizing the number of redirection rules as well. The simulation results confirm that FRP outperforms vCRIB, especially when the resources are severely constrained.

Detection of DDOS attacks in distributed peer to peer networks

Peer to Peer (P2P) network in the real world is a class of systems that are made up of thousands of nodes in distributed environments. The nodes are decentralized in nature. P2P networks are widely used for sharing resources and information with ease. Gnutella is one of the well known examples for such network. Since these networks spread across the globe with large scale deployment of nodes, adversaries use them as a vehicle to launch DDoS attacks. P2P networks are exploited to make attacks over hosts that provide critical services to large number of clients across the globe. As the attacker does not make a direct attack it is hard to detect such attacks and considered to be high risk threat to Internet based applications. Many techniques came into existence to defeat such attacks. Still, it is an open problem to be addressed as the flooding-based DDoS is difficult to handle as huge number of nodes are compromised to make attack and source address spoofing is employed. In this paper, we proposed a framework to identify and secure P2P communications from a DDoS attacks in distributed environment. Time-to-Live value and distance between source and victim are considered in the proposed framework. A special agent is used to handle information about nodes, their capacity, and bandwidth for efficient trace back. A Simulation study has been made using NS2 and the experimental results reveal the significance of the proposed framework in defending P2P network and target hosts from high risk DDoS attacks.

A survey on existing IP trace back mechanisms and their comparisons

Security is the one of the main point of focus in recent trends of computer science, as it has to determine the right people accessing the system and ones who are trying the bypassing it. IP spoofing is one of the prevalent attacks, where the attackers launch the attack by spoofing the source address, once this happens they can attack without revealing their exact location. The attacker uses a fraudulent IP address to conceal their identity. To reveal the attackers real locations many IP trace back mechanisms have been proposed but the attacker immediately gets away with the information. There is another problem which is to detect DDoS traffic and the precarious packets set up by the attacker, which are a threat to the victim as well as the whole network, here lies another hurdle which is to differentiate between the attacker’s data traffic from the normal data traffic. There are many solutions given for this but one among them is IP trace back which already has researched upon in the past and implemented then, but what is lacking in the solution such that the attacks are even now taking place. IP trace back if modified, strengthened would analyze the traffic faster and trace out the attacker with a faster pace, which is why a hybrid IP tracing and tracking mechanism if introduced could ease the current problem.