User Datagram Protocol Research Articles

MKIPS: MKI‐based protocol steganography method in SRTP

This paper presents master key identifier based protocol steganography (MKIPS), a new approach toward creating a covert channel within the Secure Real-time Transfer Protocol, also known as SRTP. This can be achieved using the ability of the sender of Voice-over-Internet Protocol packets to select a master key from a pre-shared list of available cryptographic keys. This list is handed to the SRTP sender and receiver by an external key management protocol during session initiation. In this work, by intelligent utilization of the master key identifier field in the SRTP packet creation process, a covert channel is created. The proposed covert channel can reach a relatively high transfer rate, and its capacity may vary based on the underlying SRTP channel properties. In comparison to existing data embedding methods in SRTP, MKIPS can convey a secret message without adding to the traffic overhead of the channel and packet loss in the destination. Additionally, the proposed covert channel is as robust as its underlying user datagram protocol channel.

Machine Learning Approach Equipped with Neighbourhood Component Analysis for DDoS Attack Detection in Software-Defined Networking

The Software-Defined Network (SDN) is a new network paradigm that promises more dynamic and efficiently manageable network architecture for new-generation networks. With its programmable central controller approach, network operators can easily manage and control the whole network. However, at the same time, due to its centralized structure, it is the target of many attack vectors. Distributed Denial of Service (DDoS) attacks are the most effective attack vector to the SDN. The purpose of this study is to classify the SDN traffic as normal or attack traffic using machine learning algorithms equipped with Neighbourhood Component Analysis (NCA). We handle a public “DDoS attack SDN Dataset” including a total of 23 features. The dataset consists of Transmission Control Protocol (TCP), User Datagram Protocol (UDP), and Internet Control Message Protocol (ICMP) normal and attack traffics. The dataset, including more than 100 thousand recordings, has statistical features such as byte_count, duration_sec, packet rate, and packet per flow, except for features that define source and target machines. We use the NCA algorithm to reveal the most relevant features by feature selection and perform an effective classification. After preprocessing and feature selection stages, the obtained dataset was classified by k-Nearest Neighbor (kNN), Decision Tree (DT), Artificial Neural Network (ANN), and Support Vector Machine (SVM) algorithms. The experimental results show that DT has a better accuracy rate than the other algorithms with 100% classification achievement.

Low-Latency Network-Adaptive Error Control for Interactive Streaming

We introduce a novel network-adaptive algorithm that is suitable for alleviating network packet losses for low-latency interactive communications between a source and a destination. Our network-adaptive algorithm estimates in real-time the best parameters of a recently proposed streaming code that uses forward error correction (FEC) to correct both arbitrary and burst losses, which cause a crackling noise and undesirable jitters, respectively in audio. In particular, the destination estimates appropriate coding parameters based on its observed packet loss pattern and sends them back to the source for updating the underlying code. Besides, a new explicit construction of practical low-latency streaming codes that achieve the optimal tradeoff between the capability of correcting arbitrary losses and the capability of correcting burst losses is used. Simulation evaluations based on statistical losses and real-world packet loss traces reveal the following: (i) Our proposed network-adaptive algorithm combined with our optimal streaming codes can achieve significantly higher performance compared to uncoded and non-adaptive FEC schemes over UDP (User Datagram Protocol); (ii) Our explicit streaming codes can significantly outperform traditional MDS (maximum-distance separable) streaming schemes when they are used along with our network-adaptive algorithm. In addition, we study different factors that can affect the performance of our network-adaptive algorithm.

Generation and collection of data for normal and conflicting flows in software defined network flow table

<a name="_Hlk31039004"></a><span lang="EN-US">In terms of network simplification and regulation, Software Defined Networking (SDN) is a new form of infrastructure that offers greater adaptability and flexibility. SDN, however, is an invention that is logically centralized. </span><span>In addition, the optimization of the control plane and data plane in SDN has become an area deserving of more attention. The flow in OpenFlow has been one of the essential parameters in the SDN standards, in which every individual flow includes packet matching fields, flow priority, separate counters, instructions for packet forwarding, flow timeouts and a cookie. This research work is conducted in order to produce and collect flows from the OpenFlow switch in two scenarios; in normal flows and when conflict policy rules are enforced in the network. In this article, the throughput is required to review and evaluate the conflict impact on two protocols as a performance metric; the Transmission Control Protocol (TCP) and the User Datagram Protocol (UDP) that flows via a forwarded plane. During the simulation of the SDN OpenFlow network, the metrics are tested using MININET. The results demonstrate that the existence of SDN conflict rules allows TCP and UDP to have a significant average change in bandwidth that eventually affects the network and operations performance.</span>

Farklı Türde Dağıtık Hizmet Dışı Bırakma Saldırılarının Tespiti

Distributed Denial of Service Attacks (DDoS) are threaten every device connected to the Internet. The fast progress and wide spreading DDoS attacks are among the most well-known features of them. Many studies have been conducted to reduce the impact of these fast-progressing and widespread attacks. However, because of the continuous development of attack types and the implementation of different techniques, the prevention of attacks has not been fully achieved. Therefore, within the scope of this study, a DDoS attack was examined first and applications for detecting it were investigated. A system has been proposed to detect DDoS attacks using data mining methods. For the proposed system, experiment mechanisms for Transmission Control Protocol (TCP) Flooding, Spoofing Internet Protocol (IP), SYN Flood with Spoofed IP, and User Datagram Protocol (UDP) Flooding, which are among the DDoS attack types, were established and the attacks were performed to obtain network flow data. The classification was made with appropriate data mining methods according to the specified features and ZeroR, OneR, Naive Bayes, Bayes Net, Decision Stump, and J48 algorithms were used. According to these algorithms, the best classification rate has been reached with J48 algorithm. The results have shown that the proposed system plays an important role in determining the DDoS attack type. The proposed system will ensure that appropriate detection mechanisms are applied more quickly, effectively and efficiently in real attacks.

Comprehensive practical evaluation of wired and wireless internet base smart grid communication

Internet-based communications is a key solution for enabling low-cost and scalable communication infrastructure for different applications of the smart grid. However, the performance of this network needs to be evaluated practically in the context of smart grid applications based on key metrics such as latency and reliability. This article is a comprehensive evaluation of the United Kingdom Internet network characteristics which will allow the smart grid systems designer to consider the essential parameters for communication applications. This article will focus not only on three smart grid applications, but also the outcome of this research which is relevant to a wider range of Internet of Things (IoT) applications. Different combinations of off-the-shelf wired and wireless last-mile communication technologies are evaluated using real-world transport protocols such as the Transport Control Protocol (TCP)and the User Datagram Protocol (UDP). The performance of TCP/UDP has been tested in a realistic client-server communication test-bed. The results from extensive evaluations show that typical latency values are between 200 and 600 ms for data packets and 50 bytes and kbytes for short control packets. Moreover by applying data compression techniques ,the results can be improved about 5%–20% for different last mile communications.

Design and Application of Energy Management Integrated Monitoring System for Energy Storage Power Station

According to the characteristics of huge data, high control precision and fast response speed of the energy storage station, the conventional monitoring technology can not meet the practical application requirements. In this paper, an integrated monitoring system for energy management of energy storage station is designed. The key technologies, such as multi-module integration technology, centralized energy management control technology, high concurrency group control technology based on IEC61850 and internal interaction mechanism based on User Datagram Protocol, are described in detail. Relying on the project site of Langli energy storage station, the secondary system architecture of the energy storage station is simplified, the stability of control operation and the fast response ability of power conversion system group are improved, and the reliability of output power of the energy storage station is guaranteed.

A New QoS Adaptive Multi-path Routing for Video Streaming in Urban VANETs Integrating Ant Colony Optimization Algorithm and Fuzzy Logic

The multi-path transmission is an appropriate transmission method for high data rate packets like video streaming. To provide video streaming with high quality, the video packets are divided into different frames for transmitting through various paths. Nevertheless, regarding the results of numerous inherent features of vehicular ad hoc networks (VANETs), designing a stable and efficient routing protocol is difficult for various applications of VANETs. In particular, the dynamic nature of topology and intermittent connectivity make maintaining the quality of service (QoS) task very difficult. To provide QoS to entertainment applications and traffic safety in VANET, we offer a routing protocol based on the adaptive junction with QoS support regarding packet delivery ratio (PDR), connectivity probability, and delay. To establish the best QoS routes, we considered the equivalent routing problem as the optimization problem and then proposed an algorithm based on ant colony optimization for solving it. Moreover, a fuzzy logic-based algorithm was employed to select the best next-hop vehicle by incorporating multiple metrics associated with the vehicle’s position, link quality, and vehicle mobility. The transmission control protocol (TCP) and user datagram protocol (UDP) are the two most known transference layer protocols. In this study, we provide an adaptation of TCP and UDP protocols for video streaming in VANET. To indicate the behavior of our suggested method, the network simulator NS-2 is used for the simulation. The simulation findings show the efficiency of our proposed approach in comparison with the existing research works in terms of the average packet delivery ratio, end-to-end delay, overhead, and peak signal to noise ratio.

Approaching OPC UA Publish-Subscribe in the Context of UDP-Based Multi-Channel Communication and Image Transmission.

The Open Platform Communication Unified Architecture (OPC UA) protocol is a key enabler of Industry 4.0 and Industrial Internet of Things (IIoT). OPC UA is already accepted by the industry and its presence is expected to reach more and more fields, applications, and hierarchical levels. Advances within the latest specifications are providing the opportunity to extend the capabilities and the applicability of the protocol, targeting better performances in terms of data volumes, speed, availability, footprint, and security. Continuing previous researches focusing on the publish–subscribe (pub/sub) mechanism and real-time constraints, the current study aims to consider higher data-volumes, approach the multi-channel User Datagram Protocol (UDP)-based communication, and analyze the robustness of the developed mechanism in the context of long-term data transmission. Consequently, the research proposes to extend the applicability of the OPC UA in the context of image transmission. Although highly needed, the image transmission after processing is currently beyond the reach of OPC UA or other legacy industrial protocols, being considered as a separate fraction in the industrial environment. The concept and developments are applied considering both the end-of-line industrial manufacturing process in the automotive sector and the car-to-infrastructure communication. Without special hardware constraints, the obtained results are proven to be appreciable, opening various future perspectives for image transmission using OPC UA.

Research on Distributed Feeder Automation Communication Based on XMPP and GOOSE

In the application process of distributed feeder automation (FA) that is based on peer-to-peer exchange of measurement and control data between smart terminal units (STUs), there is an urgent need for standardized communication interaction and necessary security protection. This paper proposes an IEC 61850 communication mapping scheme using built-in secure extensible messaging and presence protocol (XMPP) and the generic object oriented substation event based on the user datagram protocol (GOOSE over UDP) and a security protection scheme based on hash to obtain random subsets (HORS); one-time signature algorithm is used to ensure the communication safety of GOOSE messages. The agent-based distributed FA test system is developed with the STUs. The test results show the scheme can meet the requirements of the quick distributed feeder automation.

MONITORING AND CONTROL SYSTEM WITH A CLIENT-SERVER MODEL BASED ON INTERNET OF THINGS (IOT)

Safety and comfort are needs for all human beings. Meanwhile, the crime rate is increasing. Therefore, a remote monitoring and control system is needed. This research offers a home monitoring and control system with a client-server model using NodeMCUESP-12E. The equipment design can be used to monitor the condition of the house through sensors installed in each room. Home monitoring includes motion detection using a motion sensor, detection of the condition of the house door using a magnetic sensor, and remote door locking using a solenoid. The system can be operated offline or online using an Android smart phone. The communication model used for client-server over the transport layer protocol is User Datagram Protocol (UDP), so the server can communicate simultaneously on two clients. The fastest average response time is 0.653 seconds. The communication model between a server and a cloud uses Transmission Control Protocol (TCP) so that the data sent or received by the server through the internet is more reliable. The cloud used is Firebase which has real-time database facilities and historical data. When online, sensor response time average is the fastest on an android at 3.898 seconds, response time control is the fastest average on a client at 7.157 seconds and the control response time average is the fastest on an android at 9.495 seconds. ABSTRAK: Keselamatan dan keselesaan merupakan keperluan penting untuk manusia. Sementara itu kadar jenayah pula kian meningkat. Oleh itu, kita perlu pemantauan jarak jauh dan sistem kawalan. Kajian ini merupakan sistem kawalan dan pemantauan rumah dengan model pelanggan-pelayan menggunakan NodeMCUESP-12E. Peralatan yang dibina boleh digunakan bagi mengawasi keadaan rumah melalui sensor yang dipasang dalam setiap bilik. Pemantauan rumah adalah termasuk pengesan gerakan menggunakan sensor gerakan, pengesan keadaan pintu rumah menggunakan sensor magnet, dan pengunci pintu jarak jauh menggunakan solenoid. Sistem ini boleh digunakan secara luar atau dalam talian menggunakan telefon pintar Android. Model komunikasi yang digunakan pada pelanggan-pelayan menggunakan protokol lapisan pengangkutan adalah Protokol Datagram Pengguna (UDP), oleh itu pelayan dapat berkomunikasi secara terus dengan dua pelanggan pada purata masa respon terlaju sebanyak 0.653 saat. Model komunikasi antara pelayan dan awan adalah menggunakan Protokol Kawalan Penghantaran (TCP), dengan harapan data dapat dihantar dan diterima oleh pelayan melalui internet dengan lebih kebolehpercayaan. Awan yang digunakan adalah Firebase yang mempunyai kelengkapan pengkalan data waktu nyata dan data sejarah. Melalui keadaan dalam talian, purata masa sensor bertindak balas adalah paling laju pada Android sebanyak 3.898 saat, purata kelajuan kawalan masa bertindak balas pada pelanggan adalah 7.157 saat dan purata masa kawalan tindak balas adalah paling laju pada Android sebanyak 9.495 saat.

Detection and Classification of DDoS Flooding Attacks on Software-Defined Networks: A Case Study for the Application of Machine Learning

Software-defined networks (SDNs) offer robust network architectures for current and future Internet of Things (IoT) applications. At the same time, SDNs constitute an attractive target for cyber attackers due to their global network view and programmability. One of the major vulnerabilities of typical SDN architectures is their susceptibility to Distributed Denial of Service (DDoS) flooding attacks. DDoS flooding attacks can render SDN controllers unavailable to their underlying infrastructure, causing service disruption or a complete outage in many cases. In this paper, machine learning-based detection and classification of DDoS flooding attacks on SDNs is investigated using popular machine learning (ML) algorithms. The ML algorithms, classifiers and methods investigated are quadratic discriminant analysis (QDA), Gaussian Naïve Bayes (GNB), k-nearest neighbor (k-NN), and classification and regression tree (CART). The general principle is illustrated through a case study, in which, experimental data (i.e. jitter, throughput, and response time metrics) from a representative SDN architecture suitable for typical mid-sized enterprise-wide networks is used to build classification models that accurately identify and classify DDoS flooding attacks. The SDN model used was emulated in Mininet and the DDoS flooding attacks (i.e. hypertext transfer protocol (HTTP), transmission control protocol (TCP), and user datagram protocol (UDP) attacks) have been launched on the SDN model using low orbit ion cannon (LOIC). Although all the ML methods investigated show very good efficacy in detecting and classifying DDoS flooding attacks, CART demonstrated the best performance on average in terms of prediction accuracy (98%), prediction speed (5.3 ×105 observations per second), training time (12.4 ms), and robustness.

UDP Checksum Field Usage for Sensor Data

User datagram protocol (UDP) is widely used to send real time data which is not sensitive to packet loss such as short period sensor data. Since UDP header provides checksum field, this field can be used for increasing the UDP performance, for instance, providing partial error check service such as in UDP-Lite. The checksum field can also be used for encryption key transfer for dynamic encryption system to provide more secured datagram. This paper examines UDP checksum usage for either error check or security key exchange. UDP-Lite works well for erroneous environment by suppressing packet loss up to 4%. But encryption key distribution may be a good option as it provides more secure data, mainly in lossless environment, where packet loss is less than 1%. For losses traffic tolerant, UDP is a good choice if low delay is desired.

QoE evaluation of dynamic adaptive streaming over HTTP (DASH) with promising transport layer protocols

Recently, dynamic adaptive streaming over HTTP (DASH) has become an increasingly popular way to view video over the Internet. In particular compared to other video streaming services these DASH approaches deliver superior QoE to viewers. This is due to improved video segment selection. Generally, Transmission Control Protocol (TCP) CUBIC is the defacto transport layer protocol use by DASH. To improve the robustness of the transport layer to network congestion many other TCP variants were implemented such as Compound TCP and BBR. Nevertheless some were made to work specifically in LAN environments for example Agile-SD. However, recently another transport layer protocol User Datagram Protocol (UDP) has been used in Google’s QUIC implementation. To date no work has be found giving the performance of these transport layer protocols with DASH. In this paper we test the performance of Agile-SD, CUBIC, Compound TCP, BBR and QUIC using the BBA, MPC, Pensieve and Oboe DASH approaches. Experiments simulate congested bottleneck link conditions common at household routers where families view multiple videos at the same time. We observe Oboe and Agile-SD is the most promising combination with CUBIC and Pensieve next. However, even though QUIC was touted to have superior transport layer performance by Google it was the worst performing.

The impact of firewall on TCP and UDP throughput in an openflow software defined network

Software Defined Networking (SDN) is an emerging networking paradigm that provides more flexibility and adaptability in terms of network definition and control. However, SDN is a logically centralized technology. Therefor the control plane (i.e. controller) scalability in SDN in particular, is also one of the problems that needs further focus. OpenFlow is one of the protocol standards in SDN, which allow the separation of the controller from the forwarding plane. The control plane has an SDN embedded firewall and is able to enforce and monitor the network activity. This firewall can be used to control the throughput. However, it may affect SDN performance. In this paper, throughput will be used as a performance metric to evaluate and assess the firewall impact on two protocols; Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) that passes through the forwarding planes. The evaluations have been verified through simulating the SDN OpenFlow network using MININET. The results show that an implementation of firewall module in SDN creates a significant 36% average drop for TCP and 87% average drop for UDP in the bandwidth which eventually affect the quality of the network and applications.

Improving OPC UA Publish-Subscribe Mechanism over UDP with Synchronization Algorithm and Multithreading Broker Application.

Communication protocols are evolving continuously as the interfacing and interoperability requirements are the foundation of Industry 4.0 and Industrial Internet of Things (IIoT), and the Open Platform Communication Unified Architecture (OPC UA) protocol is a major enabling technology. OPC UA was adopted by the industry, and research is continuously carried out to extend and to improve its capabilities, to fulfil the growing requirements of specific industries and hierarchical levels. Consistent issues that have to be approached are related to the latest specifications and the real-time context that could extend the applicability of the protocol and bring significant benefits in terms of speed, data volumes, footprint, security. The real-time context is essential in the automotive sector and it is highly developed within some specific protocols. The current work approaches first the conceptual analysis to improve the OPC UA interfacing using the Publish-Subscribe mechanism, focusing on real-time constraints and role distribution between entities, and considering some well-founded interfacing strategies from the automotive sector. The conceptual analysis is materialized into a solution that takes OPC UA Publish-Subscribe over User Datagram Protocol (UDP) mechanism to the next level by developing a synchronization algorithm and a multithreading broker application to obtain real time responsiveness and increased efficiency by lowering the publisher and the subscriber footprint and computational effort, reducing the difficulty of sending larger volumes of data for various subscribers and the charge on the network and services in terms of polling and filtering. The proof of concept is evaluated and the results prove the efficiency of the approach and the solution.

ECC-CoAP: Elliptic Curve Cryptography Based Constraint Application Protocol for Internet of Things

Constraint Application Protocol (CoAP), an application layer based protocol, is a compressed version of HTTP protocol that is used for communication between lightweight resource constraint devices in Internet of Things (IoT) network. The CoAP protocol is generally associated with connectionless User Datagram Protocol (UDP) and works based on Representational State Transfer architecture. The CoAP is associated with Datagram Transport Layer Security (DTLS) protocol for establishing a secure session using the existing algorithms like Lightweight Establishment of Secure Session for communication between various IoT devices and remote server. However, several limitations regarding the key management, session establishment and multi-cast message communication within the DTLS layer are present in CoAP. Hence, development of an efficient protocol for secure session establishment of CoAP is required for IoT communication. Thus, to overcome the existing limitations related to key management and multicast security in CoAP, we have proposed an efficient and secure communication scheme to establish secure session key between IoT devices and remote server using lightweight elliptic curve cryptography (ECC). The proposed ECC-based CoAP is referred to as ECC-CoAP that provides a CoAP implementation for authentication in IoT network. A number of well-known cryptographic attacks are analyzed for validating the security strength of the ECC-CoAP and found that all these attacks are well defended. The performance analysis of the ECC-CoAP shows that our scheme is lightweight and secure.

ASSURE: A Hardware-Based Security Protocol for Resource-Constrained IoT Systems

The Internet of Things technology is expected to generate tremendous economic benefits; this promise is undermined by major security threats. This is mainly due to the ubiquitous nature of this technology, which makes it easy for potential adversities to have access to IoT devices and carry well-established attacks. The development of defence mechanisms, in this case, is a challenging task; this is due to the fact that most IoT devices have limited computing and energy resources, which makes it hard to implement classic cryptographic algorithms. This paper addresses this challenge by proposing a lightweight mutual authentication and key agreement protocol named ASSURE based on Rivest Cipher (RC5) and physically unclonable functions (PUFs). To understand the effectiveness of this protocol, a rigorous security analysis under various cyber-attack scenarios is performed. In order to evaluate the overheads of the proposed solution, a wireless sensor network using typical IoT devices called Zolertia Zoul re-mote is constructed. The functionality of the proposed scheme is verified using a server-client configuration. Then, energy consumption and memory utilization are estimated and compared with the existing solutions, namely, the DTLS (datagram transport layer security) handshake protocol in pre-shared secret (key) mode and UDP (user datagram protocol). Experimental analysis results indicate that the proposed protocol can save up to 39.5% energy and uses 14% less memory compared with the DTLS handshake protocol.

Achieving reliable UDP transmission at 10 Gb/s using BSD socket for data acquisition systems

User Datagram Protocol (UDP) is a commonly used protocol for data transmission in small embedded systems. UDP as such is unreliable and packet losses can occur. The achievable data rates can suffer if optimal packet sizes are not used. The alternative, Transmission Control Protocol (TCP) guarantees the ordered delivery of data and automatically adjusts transmission to match the capability of the transmission link. Nevertheless UDP is often favored over TCP due to its simplicity, small memory and instruction footprints. Both UDP and TCP are implemented in all larger operating systems and commercial embedded frameworks. In addition UDP also supported on a variety of small hardware platforms such as Digital Signal Processors (DSP) Field Programmable Gate Arrays (FPGA). This is not so common for TCP. This paper describes how high speed UDP based data transmission with very low packet error ratios was achieved. The near-reliable communications link is used in a data acquisition (DAQ) system for the next generation of extremely intense neutron source, European Spallation Source. This paper presents measurements of UDP performance and reliability as achieved by employing several optimizations. The measurements were performed on Xeon E5 based CentOS (Linux) servers. The measured data rates are very close to the 10 Gb/s line rate, and zero packet loss was achieved. The performance was obtained utilizing a single processor core as transmitter and a single core as receiver. The results show that support for transmitting large data packets is a key parameter for good performance. Optimizations for throughput are: MTU, packet sizes, tuning Linux kernel parameters, thread affinity, core locality and efficient timers.

CoAP-Based Streaming Control for IoT Applications

The Constrained Application Protocol (CoAP) is a representative messaging protocol for Internet of Things (IoT) applications. It is noted that a lot of IoT-based streaming applications have been recently deployed. Typically, CoAP uses User Datagram Protocol (UDP) as its underlying protocol for lightweight messaging. However, it cannot provide reliability, since it is based on UDP. Thus, the CoAP over Transmission Control Protocol (TCP) was recently proposed so as to provide reliability. However, the existing schemes do not provide the error handling and flow controls suitably for IoT-based streaming applications. This tends to induce throughput degradation in wireless lossy networks. In this paper, we propose a CoAP-based streaming control (CoAP-SC) scheme, which is an extension of CoAP over UDP with error handling and flow control for throughput enhancement. The proposed CoAP-SC scheme is designed by considering the sequence number of data message, the use of ACK messages, and the buffer size of sending buffer. To do this, a new CoAP option is defined. For performance analysis, the proposed scheme is implemented and compared with the existing schemes. From the testbed experimentations in various network environments, we see that the proposed CoAP-SC scheme can provide better throughput than the existing CoAP-based schemes by performing the error handling and flow control operations effectively.