Cloud Watching: Understanding Attacks Against Cloud-Hosted Services

Reducing transient data loss during a mobile's frequent subnet handoff depends upon several factors such as layer 2 handoff detection, faster IP address discovery, and registration and media re-direction. We present a new methodology that can provide faster IP address discovery using GPS coordinate of the mobile. This mechanism provides a suitable approach for high-speed vehicular users. It discusses several issues involved with this handoff process such as layer 2 detection, IP address assignment, and duplicate address detection. It also describes the experiment carried out in an external testbed.

Anonymity and specifically sender anonymity have become essential requirements for many privacy-related applications (e.g. net counselling and whistle blowing). On the other hand, anonymity may be abused for various malicious activities (e.g. redistribution of copy-righted contents and illegal drug trading). In this paper, we address both by proposing protocols for authenticated anonymous communications channels. In such channels, the client can authenticate the authentication server while the latter can only authenticate the fact that the client is one of the qualified members that are eligible to use the network (e.g. WLAN hot spots, WiMAX). Our protocols are based on an efficient anonymous password-based authenticated key exchange protocol and on an anonymous IP address assignment and have the following advantages: (1) they can restrict the usage of the established anonymous channels to certain fair purposes; (2) they do not involve rerouting of the packets through a chain of intermediate nodes; (3) they are available right after registration of a normal password to an authentication server as for a classical non-anonymous authentication (e.g. EAP-TTLS and PEAP) and do not require any special registration procedures that would reveal initially to the authentication server that the client belongs to a small list of users of anonymous services. Each protocol fits in a different authentication framework (IEEE802.1x and PANA) and is different with respect to providing controlled IP address assignment.

IP hosts and network infrastructure have historically been difficult to configure, requiring network services such as DHCP and DNS servers, and relying on highly trained network administrators. This need for administration has prevented IP networks from being used in many environments such as in homes, in small businesses, in impromptu networks established at conferences, construction sites, emergency relief stations, etc. With the proliferation of IP-enabled network-attached appliances and inexpensive computing devices, the demand to enable plug-and-play, easy-to-use IP networking has increased. This demand has initiated a new paradigm of IP networking called zero configuration, or zeroconf, networking. The goal is to develop a set of zeroconf configuration protocols to enable IP networking without manual configuration or administration. Such IP networks are called zeroconf networks. We examine IP address configuration in zeroconf networks involving two network topologies: (1) A routerless network, which consists of several hosts attached to a segment having no router, (2) A single-router network, which consists of a router joining several segments together into a star-shaped topology. We suggest the requirements for IP address configuration, review the existing solutions, and propose new algorithms to address their deficiencies. Finally, we present a comparison of our algorithms to existing solutions and describe when a particular configuration method should be used.

The arising opportunity exposed in this paper is leveraging the capabilities of network virtualization to provide a whole IP Network as a Service (NaaS). Users are offered the capability to customize the policies, the configuration and the management on their allocated virtual network to meet their own requirements. Following the NaaS paradigm, the European Community funded project Mantychore is developing and providing an IP NaaS framework to enhance the service portfolio of National Research and Education Networks (NRENs) and other e-Infrastructure providers. This paper, as a particular use case of the project, describes how NaaS could benefit Customer Premises Equipment (CPE) deployment. Two CPE scenarios discussed are: the Aggregated Virtual CPE and the Multiple Networks Virtual CPE. The benefits of these scenarios go from equipment purchasing cost to operations expenses and efficiencies.

In order to provide the same or better service quality in the Internet than traditional circuit-switched telephone network, a number of issues have to be solved which have hampered it in the Internet. Therefore, in this paper the VoIP (Voice over Internet Protocol) network design problems are modeled as nonlinear non convex combinatorial integer mathematical programming problems. The optimization problems have great practice value for the network service providers. This problem is a constrained multicast QoS routing and is proved to be a NP complete problem. The total link capacity augmented cost should be minimized when we design a new VoIP network or when the original network could not serve all of the traffic demands. It is also known as a complicated problem. Introduction Originally, the Internet was designed to provide best-effort services for the data generated by computers. The timeliness of data communication is generally delay tolerant. Quality-of-Service (QoS) constraints are not as important as routing flexibility and connectivity. Hence, using IP to transport voice data is contradictory to the basic requirement of the voice service: a timely delivery of voice samples. Although IP was not initially designed to provide services for real-time traffic, recent technical progress has made IP have the capabilities to provide real-time services in near future. In order to provide the same or better service quality in the Internet than traditional circuit-switched telephone network, we must deal with a number of issues that have hampered it in the Internet. Voice service requirements could be discussed from two perspectives: (1) application requirements such as end-to-end delay, jitter, packet loss and overdue probability; (2) user’s perspective such as reliability, availability, and supplementary services [1][2]. Telephony service providers must guarantee the quality of service they provide e.g. maximum one way delay does not exceed 150ms. Internet telephony requires a range of protocols, ranging from those needed for transporting real-time data across to the network e.g. Real-time Transport protocol (RTP) [3], to Quality-of-Service aware routing (QoS routing), signaling protocol, resource reservation, internetworking between IP networks and PSTN, QoS-aware network management and billing protocols. ITU-T defined H.323 to provide multimedia communication in packet networks. From the perspective of network service providers, they want to optimize the network performance such as minimizing the total bandwidth consumption, maximizing throughput or total revenue [4][5] subject to user and application constraints. In this paper, we want to develop the mathematical model for VoIP network. We minimize the total bandwidth consumption under users’ QoS requirements, the network topology and the network capacity. Performance Optimization Model It is generally accepted that Internet telephony and traditional circuit-switched telephony will coexist for quite some time. The VoIP architecture must deal with interworking between IP networks and PSTN, so we need gateways between the two worlds. There are four possible models of VoIP [6]. They are PC-to-PC, Gateway-to-Gateway, PC-to-Gateway, and Gateway-to-PC models. The architecture of VoIP is shown in Fig.1. The first model of VoIP is PC-to-PC architecture, which based 2nd International Conference on Electrical, Computer Engineering and Electronics (ICECEE 2015) © 2015. The authors Published by Atlantis Press 1144 on the assumption that two or more users have access to multimedia computers that are connected to the Internet. Fig.1 VoIP Architecture The VoIP system is modeled as a graph, where the hosts, VoIP gateways, and switches are represented by nodes and communication link sets are represented by links. Let N = {1, 2,..., n} be the set of nodes and L be the set of links in the graph (network). Let G be the set of all user groups. An user group g is a voice communication session requesting for transmission in the network. An user group g may be an unicast from the source to a destination or a multicast from the source to multiple destinations. For each user group g, the traffic is transmitted exactly over one tree. Dg represents the set of destinations of user group g. g λ is the required bandwidth of the voice transmission for each user group g. Below is a verbal description of the VoIP system design problem we considered. Given : Network topology Capacities of network links Equivalent bandwidth of each multicast/unicast group Time threshold and tolerable overdue probability for each multicast/unicast group To determine : The minimum overall bandwidth consumption Routing tree for each multicast/unicast group Overdue probability of each multicast/unicast group Objective : To minimize the total bandwidth consumption Subject to : End-to-end QoS (overdue probability) constraint Tree constraint Multi-commodity flow constraint Capacity constraint Integrality constraint Hop constraint Table 1 and 2 are the notations we use in this paper . Internet VoIP Gateway VoIPGatewa Central office switch or local hub Central office switch or local hub Multimedia PC IP Router Multimedia PC IP Router Gatekeepe r

Performance Analysis and Route Optimization: Redistribution between EIGRP, OSPF & BGP Routing Protocols

The Internet has caused the advent of a digital society; wherein almost everything is connected and available from any place. Thus, regardless of their extensive adoption, traditional IP networks are yet complicated and arduous to operate. Therefore, there is difficulty in configuring the network in line with the predefined procedures and responding to the load modifications and faults through network reconfiguring. The current networks are likewise vertically incorporated to make matters far more complicated: the control and data planes are bundled collectively. Software-Defined Networking (SDN) is an emerging concept which aims to change this situation by breaking vertical incorporation, promoting the logical centralization of the network control, separating the network control logic from the basic switches and routers, and enabling the network programming. The segregation of concerns identified between the policies concept of network, their implementation in hardware switching and data forwarding is essential to the flexibility required: SDN makes it less complicated and facilitates to make and introduce new concepts in networking through breaking the issue of the network control into tractable parts, simplifies the network management and facilitate the development of the network. In this paper, the SDN is reviewed; it introduces SDN, explaining its core concepts, how it varies from traditional networking, and its architecture principles. Furthermore, we presented the crucial advantages and challenges of SDN, focusing on scalability, security, flexibility, and performance. Finally, a brief conclusion of SDN is revised.

School dropout is a critical challenge for Brazilian education, having a multicausal nature and the potential to disrupt academic trajectories. This paper contributes to discussions on school dropout by covering primary and secondary educational levels. We conducted an extensive exploratory analysis of data provided by the National Institute of Educational Studies and Research Anísio Teixeira (Instituto Nacional de Estudos e Pesquisas Educacionais Anísio Teixeira - INEP) from 1996 to 2022, considering factors such as government transitions and unforeseen events (e.g., financial crises and the COVID-19 pandemic). Thus, we handled millions of instances from the INEP database to explore data using Google Colab. We focused on the relationship between student dropout rates and various other factors, including categorical variables such as school location, type of administrative management, geographical region, and year, as well as numerical variables such as the number of classes, number of teachers, number of approved students, and number of failed students. Our goal was to identify which combination of these characteristics contributed most to the increase in student dropout rates. Our findings evidence that schools in urban areas of theNortheast region, whether municipal or state-run, have the highest student dropout rates in basic education in Brazil. The state of Alagoas shows a more pronounced duality in its education networks than the rest of Brazil, as the highest rates in elementary education occur in municipal schools. In contrast, state schools are the major contributors to high numbers of dropouts. Alagoas faces the most concerning dropout rates in high school education. The results showed periods of growth and decline in student dropout rates, aligning with government transitions, certain financial crises,and the COVID-19 pandemic. There is also a correlation between dropouts and failures in both elementary and high school education, with the correlation being much stronger in elementary education.

With the development of big data and cloud computing technology, the traditional software-defined network is facing new challenges (e.i., ubiquitous accessibility, higher bandwidth, more flexible management and greater security). Using a proprietary protocol or encoding format is a way to improve information security. However, the flow, which carried by proprietary protocol or code, cannot go through the traditional IP network. In addition, ultra- high-definition video transmission service once again become a hot spot. Traditionally, in the IP network, the Serial Digital Interface (SDI) signal must be compressed. This approach offers additional advantages but also bring some disadvantages such as signal degradation and high latency. To some extent, HD-SDI can also be regard as a proprietary protocol, which need transparent transmission such as optical channel. However, traditional optical networks cannot support flexible traffics . In response to aforementioned challenges for future network, one immediate solution would be to use NFV technology to abstract the network infrastructure and provide an all-optical switching topology graph for the SDN control plane. This paper proposes a new service-based software defined optical network architecture, including an infrastructure layer, a virtualization layer, a service abstract layer and an application layer. We then dwell on the corresponding service providing method in order to implement the protocol-independent transport. Finally, we experimentally evaluate that proposed service providing method can be applied to transmit the HD-SDI signal in the software-defined optical network.

Software Defined Networking (SDN) introduces programmability and thus flexibility to the network. One can change the network as easily as changing the application. Traditional networks are vendor specific, and are quite difficult (and incur high costs) to make any changes in configuration. The current trends of mobility and Internet allow a multitude of devices to consume unimaginable data across the existing network architecture. One has the building need to modify the existing network architecture to cater to demands of increasing bandwidth, efficient usage of resources and quality of services. SDN provides what cloud provided when memory was in high demand, flexibility. SDN provides a single point of control, and a layer of abstraction between the applications and the network, thereby reducing the overhead of processing undertaken by the hardware networking components.

In order to extend the application scope of NDN and realize the transmission of different NDNs across IP networks, a method for interconnecting NDN networks distributed in different areas with IP networks is proposed. Firstly, the NDN data resource is located by means of the DNS mechanism, and the gateway IP address of the NDN network where the data resource is located is found. Then, the transmission between different NDNs across the IP network is implemented based on the tunnel technology. In addition, in order to achieve efficient and fast NDN data forwarding, we have added a small number of NDN service nodes in the IP network, and proposed an adaptive probabilistic forwarding strategy and a link cost function-based forwarding strategy to make NDN data obtaining the cache service provided by the NDN service node as much as possible. The results of analysis and simulation experiments show that, the interconnection method of NDN across IP network proposed is generally effective and feasible, and the link cost function forwarding strategy is better than the adaptive probability forwarding strategy.

With the fast development of IP telephony, there is a need to quickly provide more powerful and competitive multimedia services in the IP network. A natural choice is to integrate the intelligent network and IP network and exploit the mature capabilities of service creation and service deployment of the intelligent network in the IP network. This paper addresses a new call model between the intelligent network and the IP network for supporting the advanced multimedia service in the IP network using H.323. Firstly, the reason why the existing IN basic call state model is not suitable to model H.323 signaling are analyzed, then an enhanced call model based layered structure in order to fully exploit the advantages introduced by H.323 is proposed. Finally, we present an approach of the IP-SSP architecture based on the proposed model to fulfill the integration between the IN and IP.

Social relationship discovery of IP addresses in the managed IP networks by observing traffic at network boundary

In the public switched telephone network (PSTN), 911 (emergency) services are handled by a dedicated, point-to-point analog network infrastructure. In contrast, 911 in IP telephony is constrained by IP's flat addressing scheme and dynamic IP address assignment, best-effort service model and inherent dynamicity in network topology connectivity. To serve crucial E911 needs of accurate assistance dispatch with callback facility in IP telephony, the existing model from analog telephony is not applicable. We investigate ways of resolving location information of an IP telephony 911 caller and propose a novel approach to convey geographic location information parameters of connected hosts by extending the DHCP protocol. The case scenario of voice over IP (VoIP) in local area networks (LAN) is used as the basis for our approach and specifically, University of Missouri Kansas City's (UMKC) VoIP network has been considered for possible deployment of this approach.

Supported by some of the major revolutionary technologies, such as Internet of Vehicles (IoVs), Edge Computing, and Machine Learning (ML), the traditional Vehicular Networks (VNs) are changing drastically and converging rapidly into one of the most complex, highly intelligent, and advanced networking systems, mostly known as Intelligent Transportation System (ITS). Recently, distributed ML techniques, such as Federated Learning (FL) have gained huge popularity mainly for their advantages in terms of intelligence sharing and privacy concerns. VNs are a natural contender for exploiting FL for solving challenging problems; however, their limited resources, dynamic nature, high speed, and reduced latency requirements often become the bottleneck. V2X communication technologies allow vehicular terminals (VTs) to share their valuable local environment parameters and become aware of their surroundings. Such information can be utilized to build a more sustainable and affordable FL platform for serving VTs. Gaining from recently introduced 3D architectures, integrating terrestrial and aerial edge computing layers, we present here a distributed FL platform able to distribute the FL process on a 3D fashion while reducing the overall communication cost for providing vehicular services. The framework is defined as a constrained optimization problem for reducing the overall FL process cost through a proper network selection between various nodes. We have modeled the FL network selection problem as a sequential decision-making process through a Markov Decision Process (MDP) with time-dependent state transition probabilities. A computation-efficient value iteration algorithm is adapted for solving the MDP. Comparison with various benchmark methods shows the overall improvement in terms of latency, energy, and FL performance.