Wired Network Environment Research Articles

A Comparison Experiment of Binary Classification for Detecting the GTP Encapsulated IoT DDoS Traffics in 5G Network

<p>5G is characterized by ultra-low latency and the deployment of large-scale IoT environments. IoT devices with weak security can cause security problems such as network failures in 5G. To solve this problem, automated intrusion detection research using ML was being conducted. In previous studies, detection research using ML in the wired network environment was active, but it was relatively insufficient in the 5G network. In addition, the vast amount of traffic in IoT devices can create latency problems for intrusion detection with ML, making it difficult to achieve ultra-low latency 5G service objectives. Therefore, this study analyzed the meaning of the performance and required time of an optimized single ML model and ensemble learning experiment to detect in real time while ensuring high detection performance of large-capacity DDoS in 5G network. When the 5G GTP encapsulated traffic was collected and binary classification was performed, the optimized single ML model performed more than 99%. Especially, compared with ensemble learning, the experimental results showed similar performance and reduced detection time by at least 34 times. As a result of the experiment, it was shown that a single ML model optimized for detecting IoT DDoS in 5G with ultra-low latency is significant.</p> <p> </p>

An Improved Network Time Protocol for Industrial Internet of Things.

In the industrial Internet of Things, the network time protocol (NTP) can be used for time synchronization, allowing machines to run in sync so that machines can take critical actions within 1 ms. However, the commonly used NTP mechanism does not take into account that the network packet travel time over a link is time-varying, which causes the NTP to make incorrect synchronization decisions. Therefore, this paper proposed a low-cost modification to NTP with clock skew compensation and adaptive clock adjustment, so that the clock difference between the NTP client and NTP server can be controlled within 1 ms in the wired network environment. The adaptive clock adjustment skips the clock offset calculation when the NTP packet run trip time (RTT) exceeds a certain threshold. The clock skew compensation addresses the inherent issue that different clocks (or oscillators) naturally drift away from each other. Both adaptive clock adjustment and clock skew compensation are environment dependent and device dependent. The measurement result in our experimental environment shows that the when the RTT threshold is set at 1.7 ms, the best synchronization accuracy is achieved.

Detecting IoT Botnet in 5G Core Network Using Machine Learning

As Internet of Things (IoT) devices with security issues are connected to 5G mobile networks, the importance of IoT Botnet detection research in mobile network environments is increasing. However, the existing research focused on AI-based IoT Botnet detection research in wired network environments. In addition, the existing research related to IoT Botnet detection in ML-based mobile network environments have been conducted up to 4G. Therefore, this paper conducts a study on ML-based IoT Botnet traffic detection in the 5G core network. The binary and multiclass classification was performed to compare simple normal/malicious detection and normal/three-type IoT Botnet malware detection. In both classification methods, the IoT Botnet detection performance using only 5GC’s GTP-U packets decreased by at least 22.99% of accuracy compared to detection in wired network environment. In addition, by conducting a feature importance experiment, the importance of feature study for IoT Botnet detection considering 5GC network characteristics was confirmed. Since this paper analyzed IoT botnet traffic passing through the 5GC network using ML and presented detection results, think it will be meaningful as a reference for research to link AI-based security to the 5GC network.

Intrusion Detection Systems in Internet of Things and Mobile Ad-Hoc Networks

Internet of Things (IoT) devices work mainly in wireless mediums; requiring different Intrusion Detection System (IDS) kind of solutions to leverage 802.11 header information for intrusion detection. Wireless-specific traffic features with high information gain are primarily found in data link layers rather than application layers in wired networks. This survey investigates some of the complexities and challenges in deploying wireless IDS in terms of data collection methods, IDS techniques, IDS placement strategies, and traffic data analysis techniques. This paper’s main finding highlights the lack of available network traces for training modern machine-learning models against IoT specific intrusions. Specifically, the Knowledge Discovery in Databases (KDD) Cup dataset is reviewed to highlight the design challenges of wireless intrusion detection based on current data attributes and proposed several guidelines to future-proof following traffic capture methods in the wireless network (WN). The paper starts with a review of various intrusion detection techniques, data collection methods and placement methods. The main goal of this paper is to study the design challenges of deploying intrusion detection system in a wireless environment. Intrusion detection system deployment in a wireless environment is not as straightforward as in the wired network environment due to the architectural complexities. So this paper reviews the traditional wired intrusion detection deployment methods and discusses how these techniques could be adopted into the wireless environment and also highlights the design challenges in the wireless environment. The main wireless environments to look into would be Wireless Sensor Networks (WSN), Mobile Ad Hoc Networks (MANET) and IoT as this are the future trends and a lot of attacks have been targeted into these networks. So it is very crucial to design an IDS specifically to target on the wireless networks.

A comparative analysis on traditional wired datasets and the need for wireless datasets for IoT wireless intrusion detection

<span>IoT networks mostly rely on wireless mediums for communication, and due to that, they are very susceptible to intrusions. And due to the tiny nature, processing complexity, and limited storage capacities, IoT networks require very reliable intrusion detection systems (IDS). Although there are many IDS types of research available in the literature, most of these systems are suitable for wired network environments, and the benchmark datasets used for these research works are mostly relying on wired datasets such as KDD Cup’99 and NSL-KDD. IoT and wireless networks are distinct in nature as wireless networks give more emphasis on the data link layer and physical layer. These concerns are not given much attention in traditional wired datasets in the body of knowledge. Therefore, in this research, an IDS system is developed using a newly available IoT wireless dataset (NaBIoT) in the literature with the datasets focusing much on the common IoT related attacks, and related layers are taken into consideration. The IDS system developed is evaluated by comparing with various machine learning algorithms in terms of evaluation metrics such as accuracy, F1 score, false positive, and false negative. Moreover, the IoT wireless dataset is compared against the traditional NSL-KDD datasets to evaluate the need for IoT wireless datasets. The NaBIoT datasets show its effectiveness in detecting wireless intrusions. Besides that, the simulation is performed with different combinations of features to conclude that certain features are primary in detecting attacks, and IDS does not require all the features to perform detection. This can reduce the detection time mainly for machine learning and creating the models. This research results have proposed some of the critically important features to be used and eliminating not such important features. </span>

An empirical study on the influential factors affecting continuous usage of mobile cloud service

Diffusion of smart devices, explosive growth of SNSs, increased speed of mobile network, alongside with the rapid development of ICT, all allow provision and use of many services on smart (mobile) devices, which have been provided in the wired network environment. Particularly, the use of a cloud service that allows users to access it in any place and at any time has increased on mobile devices, as well as on PCs. However, as compared to wired services, wireless services are likely to be exposed to the risk of security breach. This may inhibit the penetration of technologies. The purpose of the present study is to identify the factors that affect the intention of a continuous use (continuous intention) of mobile cloud services. For that purpose, the present study analyzes the effects of security breach risk on trust and the intention of a continuous use. The results of our analysis indicate the risks relevant to service authentication. Specifically, fault recovery and compliance exerted significant effects on trust and the continuous use intention. However, we also found that the service interruption risk and the personal information leakage risk have a significant influence on trust only. On the other hand, our findings demonstrate that trust also significantly affects the intention of a continuous use. Therefore, when a strategic decision making is considered a requisite to induce a continuous use, it is advisable to opt for and control the technologies relevant to service authentication, fault recovery, and compliance risks instead of those related to the disruption of services or leakage of personal information. Therefore, it appears to be imperative to adopt an integrated management and support process for developing a service equipped with security information technologies facilitating the continuity of businesses.

Application of wireless networks-peer–to-peer information sharing

Peer to Peer communications and its applications have gotten to be ordinary construction modelling in the wired network environment. But then, they have not been successfully adjusted with the wireless environment. Unlike the traditional client-server framework, in a P2P framework, each node can play the role of client as well as server simultaneously and exchange data or information with others. We aim to design an application which can adapt to the wireless ad-hoc networks. Peer to Peer communication can help people to share their files (information, image, audio, video and so on) and communicate with each other without relying on a particular network infrastructure or limited data usage. Here there is a central server with the help of which, the peers will have the capability to get the information about the other peers in the network. Indeed, even without the Internet, devices have the potential to allow users to connect and communicate in a special way through short range remote protocols such Wi-Fi.

Comparative Analysis Study on Network Performance of VoIP and Data Traffic Pattern using Queuing Algorithms in Wired Network Environment: An Implementation using OMNeT++ Simulator

Objectives: To improve the performance of network traffic using different queuing techniques in wired network environment. Methods/Statistical Analysis: We have simulated Quality of Service and Queuing algorithms to test the performance evaluation of VoIP data traffic in wired networks. The network features are taken as the input and applied in simulation to test the data traffic in wired network environment. We have used OMNET simulator to run the designed scenarios. The simulator is scalable to real time simulation, network emulation, database support and integration. One router was implemented in with queuing techniques to determine how the packets are buffered during waiting time of transmission and results were analysed and explained in detail. Findings: The experimental results show that QoS is a better technique to control and manage reliable communication in wired networks. It is very important that network administrator to apply appropriate queuing and policing techniques to improve the performance of the network. One of the observations made is that Priority Queuing is better than First in First Out technique to manage the traffic load and performance of the network. In another set of results, First in First Out technique is good for normal network not for traffic network. FIFO performance is better compared with PQ in normal networks. Application/Improvements: Experiments were performed through implementing scenarios in OMNet++. Performance evaluations were carried out and explained based on measuring queue length, queuing time, and packets received an end to end delays with examples. OMNET++ have several limitations due to it open source; therefore, in future we are planning to implement the scenarios on real hardware to compare the results difference between simulations and real hardware. Keywords: Quality of Service (QoS), Queuing, VoIP, Wired Network

Heterogeneous Wireless-Wired Sensor Network Communication Based on Mobile IP

This paper proposes a communication scheme for heterogeneous wireless and wired sensor networks. In the scheme, through a common protocol to shield the differences of different types of wireless-wired networks, to realize the mobility management for heterogeneous wireless and wired network environment. In addition, access technology of the second layer can be shielded, and provided a unified interface for upper protocol layers. From the theoretical and simulative perspectives, the paper analyzes the performance parameters, including the mobile function, throughput capacity, energy consumption and network lifetime, and the analytical results show that the performance of the scheme is better than other mobility management scheme.

Peer To Peer Content Sharing On Wi-Fi Network For Smart Phones

Peer-to-Peer (P2P) communications and its applications have become conventional architecture in the wired network environment. However, they have not been effectively adapted to the ensemble mobile environment which composed of various devices such as smart mobiles devices, laptops, and device with embedded software. In P2P systems, each node can act as a client and as a server at the same time and shares with others its own data. Our contribution consists in designing, implementing and testing a BitTorrent like application adapted to wireless ad-hoc networks of Android Mobile Phones. The employment of P2P protocols and applications in the platform of the ensemble mobile environment is becoming a promising solution which permits a wide number of users to share their own contents (data, audio, video, etc.) and communicate with each other without using costly and centralized network infrastructure. By using a central server, the peers will be able to get the information about the contents of other peers. Even in the absence of the Internet, the mobile devices provide users with the potential opportunity to connect in ad-hoc manner via short range wireless protocol such as Wi-Fi. Keywords- Peer to peer computing, mobile ad hoc networks, wireless communication, Wi-Fi, multimedia communication.

A survey of performance enhancement of transmission control protocol (TCP) in wireless ad hoc networks

Transmission control protocol (TCP), which provides reliable end-to-end data delivery, performs well in traditional wired network environments, while in wireless ad hoc networks, it does not perform well. Compared to wired networks, wireless ad hoc networks have some specific characteristics such as node mobility and a shared medium. Owing to these specific characteristics of wireless ad hoc networks, TCP faces particular problems with, for example, route failure, channel contention and high bit error rates. These factors are responsible for the performance degradation of TCP in wireless ad hoc networks. The research community has produced a wide range of proposals to improve the performance of TCP in wireless ad hoc networks. This article presents a survey of these proposals (approaches). A classification of TCP improvement proposals for wireless ad hoc networks is presented, which makes it easy to compare the proposals falling under the same category. Tables which summarize the approaches for quick overview are provided. Possible directions for further improvements in this area are suggested in the conclusions. The aim of the article is to enable the reader to quickly acquire an overview of the state of TCP in wireless ad hoc networks.

Reliable Data Broadcast for Zigbee Wireless Sensor Networks

Abstract As we know, the data transmission in the wireless networks is more unreliable than it is in the wired network environment. Although the virtual carrier sensing scheme can be used in the wireless unicast transmission, the multicast and broadcast still not utilize the acknowledgement mechanism for reliable transmission. This is due to the acknowledgement packets of broadcast transmission will cause much higher communication traffic and overhead. Since reliable data broadcast is critical and required in many applications in the wireless sensor networks, our study focuses on the ZigBee network which is a new industrial standard for sensor networks. Some previous related papers improved the broadcast reliability by introducing redundant transmission and increasing coverage ratio of every receiver node, but there still exists probability of packet loss and extra communication cost due to redundant broadcast. This paper proposes an efficient acknowledgement-based approach for reliable data broadcast in wireless sensor networks. Hierarchical acknowledgement mechanism, reduction of rebroadcast packets and ACK packets, degree-based ACK/rebroadcast Jitter, and parent-oriented retransmission are the key schemes to achieve the efficient data broadcast. Simulation results show that the proposed schemes can efficiently reduce the acknowledgement traffic as well as communication overhead and provide the high reliable data broadcast transmission in ZigBee networks..

IAD 기반 패킷 마킹과 유무선 트래픽 분류를 통한 무선 DDoS 공격 탐지 및 차단 기법

무선 네트워크 환경에서 DDoS 공격이 수행될 경우 기존 유선 네트워크 환경보다 공격 패턴에 대한 탐지 및 공격지 역추적이 어렵다는 문제점을 보인다. 특히 무선 네트워크 환경에서는 사용자 인증 공격 및 패킷 스니핑 공격에 취약점을 보이고 있어 이에 대한 대응 기술이 연구되어야 한다. 최근 유무선 라우팅 기능과 함께 VoIP 통신 기능 등을 통합하여 지원하는 Integrated Access Device(IAD)가 개발되어 널리 배포되며 기존의 AP 기능을 대체하고 있다. 따라서 IAD 기반 무선 네트워크 환경에서도 유무선 트래픽에 대한 분류와 실시간 공격 탐지 기능이 제공되어야 한다. 본 연구에서는 AirSensor를 이용하여 IAD에 접속한 무선 네트워크 클라이언트 정보를 수집하며 무선 클라이언트의 공격 패킷에 대해 사전 차단 기능을 수행하도록 하였다. 또한 IAD에 수신된 패킷에 대해 W-TMS 시스템과 연동하여 DDoS 공격 트래픽을 판단하도록 하였고 이를 직접 차단하여 안정적으로 IAD 기반 무선 네트워크 서비스를 이용할 수 있도록 하였다. When DDoS attack is achieved, malicious host discovering is more difficult on wireless network than existing wired network environment. Specially, because wireless network is weak on wireless user authentication attack and packet spoofing attack, advanced technology should be studied in reply. Integrated Access Device (IAD) that support VoIP communication facility etc with wireless routing function recently is developed and is distributed widely. IAD is alternating facility that is offered in existent AP. Therefore, advanced traffic classification function and real time attack detection function should be offered in IAD on wireless network environment. System that is presented in this research collects client information of wireless network that connect to IAD using AirSensor. And proposed mechanism also offers function that collects the wireless client's attack packet to monitoring its legality. Also the proposed mechanism classifies and detect the attack packet with W-TMS system that was received to IAD. As a result, it was possible for us to use IAD on wireless network service stably.

Efficient group key management for multi-privileged groups

Multi-privileged group communications containing multiple data streams have been studied in the traditional wired network environment and the Internet. With the rapid development of mobile and wireless networks and in particular mobile ad-hoc networks (MANETs), the traditional Internet has been integrated with mobile and wireless networks to form the mobile Internet. The multi-privileged group communications can be applied to the mobile Internet. Group users can subscribe to different data streams according to their interest and have multiple access privileges with the support of multi-privileged group communications. Security is relatively easy to be guaranteed in traditional groups where all group members have the same privilege. On the other hand, security has been a challenging issue and is very difficult to handle in multi-privileged groups. In this paper, we first introduce some existing rekeying schemes for secure multi-privileged group communications and analyze their advantages and disadvantages. Then, we propose an efficient group key management scheme called ID-based Hierarchical Key Graph Scheme (IDHKGS) for secure multi-privileged group communications. The proposed scheme employs a key graph, on which each node is assigned a unique ID according to access relations between nodes. When a user joins/leaves the group or changes its access privileges, other users in the group can deduce the new keys using one-way function by themselves according to the ID of joining/leaving/changing node on the graph, and thus the proposed scheme can greatly reduce the rekeying overhead.

A Fault-Tolerant Group Communication Protocol in Large Scale and Highly Dynamic Mobile Next-Generation Networks

In recent years, the integration of mobile and wireless networks with wired ones has gained in popularity. Many new applications have been brought up and there is increasing demand for enhanced services supporting mobile collaborations. However, many challenging issues, such as scalability and reliability, are very difficult to tackle in such an integrated network environment rather than in the wired network environment. In this paper, we address these issues by proposing a RingNet hierarchy of proxies. This hierarchy is a combination of logical rings and logical trees. Therefore, it takes advantages of the simplicity of logical rings and the scalability of logical trees. More importantly, such a combination makes this hierarchy more reliable than the tree-based hierarchy. Based on this hierarchy, we propose a fault-tolerant group communication protocol in large scale and highly dynamic groups. Both theoretical analysis and simulation studies show that this protocol scales very well when the size of the network becomes large and that it is highly resilient to failures when the node failure probability becomes large. This protocol is especially suitable for those service providers and network operators who have deployed their machines in a hierarchical setting, where each machine can be locally configured to know the information about its sibling and parent machines

A Fault-Tolerant Group Communication Protocol in Large Scale and Highly Dynamic Mobile Next-Generation Networks

In recent years, the integration of mobile and wireless networks with wired ones has gained in popularity. Many new applications have been brought up and there is increasing demand for enhanced services supporting mobile collaborations. However, many challenging issues, such as scalability and reliability, are very difficult to tackle in such an integrated network environment rather than in the wired network environment. In this paper, we address these issues by proposing a RingNet hierarchy of proxies. This hierarchy is a combination of logical rings and logical trees. Therefore, it takes advantages of the simplicity of logical rings and the scalability of logical trees. More importantly, such a combination makes this hierarchy more reliable than the tree-based hierarchy. Based on this hierarchy, we propose a fault-tolerant group communication protocol in large scale and highly dynamic groups. Both theoretical analysis and simulation studies show that this protocol scales very well when the size of the network becomes large and that it is highly resilient to failures when the node failure probability becomes large. This protocol is especially suitable for those service providers and network operators who have deployed their machines in a hierarchical setting, where each machine can be locally configured to know the information about its sibling and parent machines

A localized certificate revocation scheme for mobile ad hoc networks

The issue of certificate revocation in mobile ad hoc networks (MANETs) where there are no on-line access to trusted authorities, is a challenging problem. In wired network environments, when certificates are to be revoked, certificate authorities (CAs) add the information regarding the certificates in question to certificate revocation lists (CRLs) and post the CRLs on accessible repositories or distribute them to relevant entities. In purely ad hoc networks, there are typically no access to centralized repositories or trusted authorities; therefore the conventional method of certificate revocation is not applicable. In this paper, we present a decentralized certificate revocation scheme that allows the nodes within a MANET to revoke the certificates of malicious entities. The scheme is fully contained and it does not rely on inputs from centralized or external entities.

An adaptive transmission mechanism for parallel applications in wireless environments

Parallel computing is a common technique for reducing execution time in distributed systems. An application is divided into several subtasks that can be executed simultaneously on a set of computers. Numerous parallel computing protocols and experiments have been measured on wired network environments, but little attention has been devoted to wireless networks. Wireless environments own characteristics that are unusual in wired networks, such as limited bandwidth, frequent disconnection, low power, and mobility. Due to the unique characteristics, the performance of parallel computing in wireless networks is degraded. This paper implements an adaptive transmission mechanism to cope with network contention and frequent disconnection. Experimental results show that the mechanism reduced total execution time effectively.

Dynamic parameter adjustment for available-bandwidth estimation of TCP in wired–wireless networks

With the extensive spread of the Internet and mobile terminals, Internet access from a mobile terminal becomes more important than ever before. In the Internet, the transmission control protocol (TCP) is used as a standard data transport protocol; however, it is well known that TCP performance degrades in wired–wireless network environments. This is because TCP was designed originally for an exclusively wired network environment. In this paper, we propose a simple TCP algorithm for wired–wireless network environments by focusing on small-sized file document transmission. In the proposed algorithm, the available bandwidth of a network is well estimated with time intervals between consecutive ACKs. With these estimates, the congestion control in the proposed method adapts to the state of a wireless link and prevents throughput degradation. A simple filter is used for available bandwidth estimation and dynamic adjusting of a filter parameter according to the state of the wireless link, thus improving the throughput of small-sized file transmission. We compare the proposed algorithm with the existing TCP Reno and TCP Westwood by simulation and show that the proposed algorithm achieves better performance than these two TCP algorithms in wired–wireless network environments.

Mobile virtual private dial-up services

Virtual private dial-up networking (VPDN) allows mobile users to access their corporate networks through the same infrastructure they use to access the Internet. The data networking industry has produced various protocols — for example, Layer 2 forwarding (L2F) and point-to-point tunneling protocol (PPTP) — to provide VPDN services. Based on these protocols, a new integrated VPDN protocol, Layer 2 tunneling protocol (L2TP), is currently being designed by the Internet Engineering Task Force (IETF). However, this solution is only meant to deal with a wired network environment. In this paper, we describe and compare different solutions that extend the wired VPDN service model over the various wireless access network technologies. The first set of solutions uses network-layer protocols such as IETF's mobile Internet protocol (IP) to perform macromobility management. In addition, IETF's secure IP (IPSEC) protocols may be used when security features are desired. The first set of solutions differs from the wired VPDN model only in terms of the location of the home agent (whether it resides in the access provider's network or the corporate network) and the availability of a hierarchical architecture to minimize hand-off latency. The second set of solutions uses both link-layer (for example, L2TP) and network-layer (for example, mobile IP) protocols to perform macromobility management. Some alternatives require the mobile hosts to play a more proactive role — for example, the voluntary tunneling approach. We briefly describe and compare the two sets of alternatives in terms of their flexibility, hand-off latency, and bandwidth overhead.