Specific IP Address Research Articles

HoDiNT: Distributed architecture for collection and analysis of Internet Background Radiation

Attacks on the Internet are constant, with different typologies and processes. The initial stages usually involve an enumeration of targets and available services, generating what is known as Internet Background Radiation (IBR). Capturing and analysing this traffic has proven to be crucial for the early identification and detection of attacks.Commonly used architectures for the acquisition of background traffic are based on “black holes”, which are systems that collect this traffic by advertising large blocks of unused IP addresses to the Internet, identifying the traffic received as IBR. These systems have a number of inherent drawbacks, such as the requirement to process large volumes of data, and deal with the existence of a large amount of repetitive data, the fact that they are easily identifiable by the IP addresses used and, finally, that they are expensive to maintain.With the aim of improving the above undesired characteristics, this paper proposes “HoDiNT” (HOme DIstributed Network Telescope), a distributed architecture for the acquisition of Internet Background Radiation. HoDiNT is implemented with low-cost advanced acquisition techniques and without the need to use specific IP address ranges, making it easier to hide the sensors. An initial scan of the traffic received for one month is performed on the probes deployed, and a subsequent analysis is performed on the collected data to draw conclusions.

Cyber Honeypot

In an era of escalating cyber threats, the need for robust defenses against malicious activities is paramount. In this project, we propose a novel approach to leverage honeypots in conju nction with Canary Tokens to accurately pinpoint the geographical locations of attackers. By strategically deploying these decoy resources across diverse network environments, we capture valuable data on unauthorized access attempts and malicious behavior. Through the analysis of Canary Tokens, which act as unique identifiers triggered upon interaction, we can trace the origin of these attacks to specific IP addresses. Utilizing this information, security professionals gain insights into the geographical distribution of attackers, aiding in threat intelligence, incident response, and the implementation of targeted security measures. This integration of project honeypots and Canary Tokens enhances network defense strategies, providing organizations with a proactive stance against cyber threats.

Network security and computer program

In this era of rapid development of network and computer technology, the potential dangers become more and more numerous. There are many security issues that are hidden and unobtrusive. Creating a computer firewall to defend against network security leaks is a necessity. Firewalls can be personal and make a match that is more in line with what is in mind. Firewalls must allow any necessary connections from application business and technical expertise through the firewall to ensure the integrity of the data network. For firewall pairings, Border network, Perimeter Network, and Internal Network are also necessary for impact. The firewall construction can also be made more secure by implementing it through WIFI IP address. Dynamic NAT, Static NAT and PAT are essential in firewall building, and they all aim at network address translation. When building a firewall, changing a specific IP address can monitor the own network and control the message delivery in terms of security.

Effective intrusion detection system using concept drifting data stream and support vector machine

SummaryDue to the widespread distribution of network connectivity, the demand for network security and protection against cyber‐attacks is increasing rapidly. Intrusion detection system (IDS) plays a vital role in the network security. Previously, the concept‐drift based IDS is performed, in which the suspicious activity at specific IP address is detected on the real time network. However, in that research the intrusion detection is performed on single attribute. In this work, an efficient adaptive window with support vector machine (ADWIN‐SVM) is developed to detect the intrusions on large datasets with multiple attributes. The initial process in the proposed system is data cleaning. To clean the input data, the data normalization technique is utilized. Then, the data are streamed as online data by including the timestamp attribute to the dataset. This process assists to extract the patterns and detect the changes in the data. ADWIN algorithm identifies the sudden generation of drift and separates the window based on the split point. The data can be classified as normal and attack by the SVM classifier. For the performance evaluation of the proposed IDS, two datasets such as KDD Cup 1999 and CICIDS 2017 are utilized. Python is the implementation tool and the performance metrics considered for the proposed approach are precision, recall, F1 score, accuracy, and false positive rate. The proposed ADWIN‐SVM performance is compared with various existing techniques such as random forest, decision tree, naive Bayes, logistic regression, AdaBoost, K‐nearest neighbor, and SVM‐rbf. From the comparative analysis, the proposed ADWIN‐SVM is outperformed in intrusion detection.

Review Paper on Networking Issue of Internet of Things (IOT)

The Internet was initially used to transfer data packets between users and data sources with a specific IP address. Due to advancements, the Internet is being used to share data among different small, resource constrained devices connected in billions to constitute the (IOT) Internet of things .In addition, the paper discusses about wireless LAN Wi-Fi technology i.e. wireless local area network protocol and on a larger scale, mobile communication technology, that is used to provide connectivity to the internet, the wide area network. The paper draws an attention towards the background of IOT and its distinction with other technologies, discussion on network optimization in IOT. This paper not only reviews, compares and consolidates the recent related works, but also admires the author’s findings, solutions and discusses its usefulness towards network optimization in IOT. The uniqueness of this paper lies in the review of network optimization issues and challenges in IOT. In this paper, a comprehensive survey on the network optimization in IOT is presented.

A Novel Smart Energy Management as a Service over a Cloud Computing Platform for Nanogrid Appliances

There will be a dearth of electrical energy in the world in the future due to exponential increase in electrical energy demand of rapidly growing world population. With the development of Internet of Things (IoT), more smart appliances will be integrated into homes in smart cities that actively participate in the electricity market by demand response programs to efficiently manage energy in order to meet this increasing energy demand. Thus, with this incitement, the energy management strategy using a price-based demand response program is developed for IoT-enabled residential buildings. We propose a new EMS for smart homes for IoT-enabled residential building smart devices by scheduling to minimize cost of electricity, alleviate peak-to-average ratio, correct power factor, automatic protective appliances, and maximize user comfort. In this method, every home appliance is interfaced with an IoT entity (a data acquisition module) with a specific IP address, which results in a wide wireless system of devices. There are two components of the proposed system: software and hardware. The hardware is composed of a base station unit (BSU) and many terminal units (TUs). The software comprises Wi-Fi network programming as well as system protocol. In this study, a message queue telemetry transportation (MQTT) broker was installed on the boards of BSU and TU. In this paper, we present a low-cost platform for the monitoring and helping decision making about different areas in a neighboring community for efficient management and maintenance, using information and communication technologies. The findings of the experiments demonstrated the feasibility and viability of the proposed method for energy management in various modes. The proposed method increases effective energy utilization, which in turn increases the sustainability of IoT-enabled homes in smart cities. The proposed strategy automatically responds to power factor correction, to protective home appliances, and to price-based demand response programs to combat the major problem of the demand response programs, which is the limitation of consumer’s knowledge to respond upon receiving demand response signals. The schedule controller proposed in this paper achieved an energy saving of 6.347 kWh real power per day, this paper achieved saving 7.282 kWh apparent power per day, and the proposed algorithm in our paper saved $2.3228388 per day.

Deployment of Web Application in LAN based 3 Tier Architecture

In the Client-Server architecture, any of web and desktop application that can be deployed with the help of 3-tier application architecture. It is consist of a presentation layer, an application layer and a data layer. All there layers does play vital role in the 3-tier architecture for performing variety of operations including business logic, storage of data and handling request. In this paper, we presented deployment process of any web application in the local area network where database and application is located on the remote or web server. Other clients only access the application via specific IP address and valid credentials. The entire request transmitted through the client application and send to the web server. Web server does provide resulted data to the requested client via the web application. We identified several loopholes from the 3-tier architecture adoption perspective and we highlighted the web application deployment interoperability issue that deserves substantial further research and development. In this paper, we investigate several tools and techniques including web server, database server and front-end tools for the successful deployment of the web application in the LAN based 3-tier architecture.

Securing Communication in IoT Ecosystem Using Cryptographic Algorithms

Internet of Things (IoTs) is defined as an ever-growing network, which comprises of numerous physical objects with a specific IP address along with wireless internet communication, which enables the process of information sharing between two objects. Due to the frequent transfer and exchange of high confidential data between two devices through internet, there arise some susceptible attacks in IoT such as denial of service, eavesdropping attack and so on. A high-level authentication protocol and cryptographic techniques are required to resolve the issue of vulnerable attack and data loss. The current study presents a review of various IoT models and applications. Furthermore, the concerns related to security with respect to data sharing and numerous attacks have been featured in this paper. In order to avoid and minimize these attacks, numerous security measures and cryptographic algorithms have been developed by different authors. The study on several existing protocols has been carried out in this research along with the study on authentication algorithm developed by the authors. The result section contrasts a brief idea about the key requirements for the data security and authentication for the future aspects along with necessity of memory and power utilization. Additionally, some examination has been carried out briefing the future directions in which additionally work would be possible on the development of lightweight cryptography protocols.

Concept-Drift Based Identification of Suspicious Activity at Specific IP Addresses using Machine Learning

Network Intrusion detection systems(IDS), especially those that monitor Denial of Service(DoS) attack, aim at monitoring the network traffic continuously in order to identify suspicious activity possibly initiated at one or more nodes at specific IP addresses. Traditional anomaly detection based IDS methods rely on preset bounds on the magnitude of network traffic based on statistical measures and hence are not programmable based on the changes in the network traffic dynamics. The authors proposed a methodology for monitoring the changes in the network traffic received from individual source nodes based on concept drift in order to identify suspicious activity at specific nodes. The framework applies machine learning techniques to capture the normal traffic patterns of various source nodes and accordingly defines lower and upper bounds dynamically for each node. Based on the temporal analysis in successive time windows, it is able to discriminate an abrupt change from a gradual change in the magnitude of traffic received in a time window from a node to identify suspicious activity at the corresponding IP address. The effectiveness of the methodology is tested on real world data.

A flow-based approach for Trickbot banking trojan detection

Nowadays, online banking is an attractive way of carrying out financial operations such as ecommerce, e-banking, and e-payments without much effort or the need of any physical presence. This increasing popularity in online banking services and payment systems has created motivation for financial attackers to steal customer`s credentials and money. Banking trojans have been a way of committing attacks on these financial institutions for more than a decade, and they have become one of the primary drivers of botnet traffic. However, the stealthy nature of financial botnets requires new techniques and novel systems for detection and analysis in order to prevent losses and to ultimately take the botnets down. TrickBot, which specifically threatens businesses in the financial sector and their customers, has been behind man-in-the-browser attacks since 2016. Its main goal is to steal online banking information from victims when they visit their banking websites.In this study, we utilize machine learning techniques to detect TrickBot malware infections and to identify TrickBot related traffic flows without having to analyze network packet payloads, the IP addresses, port numbers and protocol information. Since command and control server IPs are updated almost daily, identification of TrickBot related traffic flows without looking at specific IP addresses is significant. We adopt behavior-based classification that uses artifacts created by the malware during the dynamic analysis of TrickBot malware samples. We compare the performance results of four different state-of-the-art machine learning algorithms, Random Forest, Sequential Minimal Optimization, Multilayer Perceptron, and Logistic Model to identify TrickBot related flows and detect a TrickBot infection. Then, we optimize the proposed classifier via exploring the best hyperparameter and feature set selection. Looking at network packet identifiers such as packet length, packet and flag counts, and inter-arrival times, the Random Forest classifier identifies TrickBot related flows with 99.9534% accuracy, 91.7% true positive rate.

Designing and Implementing Applications of Smart Home Appliances

Smart house or automation house and security system has been developed in the recent years because its importance to provides the energy saving, comfort for the elderly and security to the house owners. This paper proposed to design a low cost and flexible home prototype system for controlling and monitoring. The proposed design based on two parts; first part, automation system was building by using Arduino UNO microcontroller which responsible on reading and processing the different types of sensor values that's used in the design such as gas leak, flame and temperature as well as the remote control used in automatic garage door. The second part is security system and outdoor lighting the NodeMCU will be used to monitor the state of the house security from anywhere through a special GUI was programming by HTML language that allows the user to monitor the house security as well as extinguishing and operating the outdoor light via specific IP address granted by the NodeMCU.

데이터베이스에서 지정된 IP 주소 접근 금지를 위한 기능 설계

This paper proposes how to prevent of vulnerability from IP add ress attack of Oracle DB by C program environments. An attacker may try to login DB by connectng remote IP address. Recently an attacker use foreign IP address and try to connect to DB using known DB account. Therefore, DB data is frequently disclosed. I propose a new idea that develops specific IP address blocking module in C program in the Oracle DB. By this module, we can use the Oracle DB safely.

Using geometrical routing for overlay networking in MMOGs

At a first glance, transmitting update information to a geographic region in the virtual space seems to be an attractive primitive in Massively Multiplayer Online Gaming (MMOG) applications where players are constantly moving and need to send updates to their neighbors who are in the same region of the virtual space. The system would become more scalable if entities did not need to keep track of each other or send messages directly to one another. Rather, an entity could just send a message to a specific region in the virtual space (its area of effect), as opposed to sending packets to specific IP addresses, significantly reducing tracking and routing overhead. Fundamentally speaking, update message exchange is mostly based on users' visibility range, which is mainly affected by proximity; i.e., avatars are interested in nodes within a specific distance around them. Therefore MMOG applications require a routing scheme that can deliver messages to specified locations in the virtual space. Such location based routing motivates the use of geographical routing, which has been introduced and successfully used in the context of wireless networks; however, in its current form it is not well suited for MMOGs which run on wired networks. In this article, we propose a scalable MMOG networking architecture based on hierarchical multi-grid geographical routing that is well suited for MMOG networks. We present our concept and design of hierarchical geometrical routing based on locality sensitive hashing, demonstrate its performance, and discuss both the strengths and shortcomings of our approach.

A framework for distributed digital object services

The following paper was written by the authors over a period of approximately 16 months during the period November 1993 to May 1995 in an attempt to explore a set of open research issues and to integrate them with certain ideas of a small group of researchers who had been briefed on the notions inherent in the Digital Object Architecture that one of the authors (Kahn) had been developing at the Corporation for National Research Initiatives (CNRI). This research group had been organized by CNRI as part of its "Computer Science Technical Reports" (CSTR) project that was funded by the Defense Advanced Research Projects Agency (DARPA). The CSTR project had several objectives, of which one was to digitize existing collections of technical reports from five leading computer science departments at universities in the U.S and make the reports available on the Internet. A second objective was to fund research at these institutions on digital libraries, especially research that made good use of their local collections. A third objective was to link heterogeneous electronic libraries, such as were being developed in the program. The difficulties inherent in this third objective ultimately led to this paper. In particular, the motivation arose from a set of concerns first expressed by these researchers at a meeting at CNRI on October 25, 1993 when the Digital Object Architecture was first presented to the research group by Kahn. In the discussion that resulted, many issues emerged, some of which we ultimately decided must be resolved in any architecture, and some of which-perhaps just as crucially-could be deferred for the time being. For example, questions arose about the role of semantics in identifiers; we decided to address them early on. Another issue that proved controversial was how to deal with situations in which the digital objects were actually mobile programs in the network. Since a digital object could contain other digital objects, this led directly to the notion of a mobile repository. The basic question was how best to describe this kind of situation and explain how to access information that was not at a known specific location or IP address on the net. We decided not to cover this aspect of the architecture in the interest of getting closure on the paper. A critical part of this effort was dealing with various intellectual property issues; and the architecture was designed to take this important aspect into account. We were fortunate to have the help of Ms. Patrice Lyons, an experienced intellectual property lawyer, in the formulation of certain key elements of the architecture dealing with terms and conditions for access to information, and in the drafting of the paper. Although her name does not appear on the paper, her insights and contributions played an important role in the preparation of the paper. One key component of the architecture is a general-purpose resolution system, known as the Handle System®, an implementation of which has been operational on the Internet since 1994. At present, close to 50 million identifiers are assigned to digital objects and resolvable by the system, which has been available 7x24 for many years. It is anticipated that the number of resolvable identifiers in the system will grow rapidly and could easily exceed a billion in the not too distant future.