Detection algorithm for internet worms scanning that used user datagram protocol

Telemedicine is the use of Information and Communication Technology (ICT) in health ecosystem with a provision of visual communication, patient data transfer & collaborative learning. Government of India is actively taking initiatives for establishing digital high-speed internet connectivity though National Knowledge Network (NKN), State Wide Application Network (SWAN) & National Optical Fiber Network (NOFN) to super-specialist center, medical colleges, research organizations, Primary Health Center (PHC)/ Community Health Center (CHCs) up to block level and panchayat levels. Wellness centers and ‘DigiGaon’ bring digital inclusion and it enables people in rural areas to be able to access services like telemedicine and skill enhancement with the use of digital technologies. High-speed fiber-optic based internet bandwidth has deployed under NKN in as many as 250 medical colleges around the country. Many medical institutions have migrated to NKN to enhance their capacity of telemedicine activity using telemedicine platform funded by central and state government agencies. Majority of telemedicine in India funded by Ministry of Health & Family Welfare (MOH&FW) for interlinking Medical Colleges across the country with the purpose of education and National Rural Telemedicine Network (NRTN) for Healthcare delivery under National Health Mission (NHM), National Medical College Network (NMCN) and other public private partnership (PPP) models. Medical super-specialty institutes for the National Resource Centers (NRCs) and Regional Resource Centers (RRCs) for NMCN has defined and medical colleges will soon link to RRCs. India has diversified geographical region with availability of variable bandwidth in different part. Remote PHC/CHCs located outside city has bandwidth issue whereas majority of medical hospitals in the city has high-speed internet bandwidth. Video solutions given by hardware vendors and software vendors needs to be collaborate centrally which enables users to connect even with lower bandwidth or with the use of high-speed broadband (HSB) mobile dongle. It increases the reach to the remotest place in India through any of the available platform (Desktop, H.323 device, Android or IOS smart phone etc). Recording and streaming integration with video collaboration enhances the purpose of sharing the medical educational content during or after e-CME/ workshops/ seminars with remote doctors. Entire collaboration solution thus need direct content sharing, mobility, recording and reporting with support for multiple input sources from cameras, X-Ray, CT-SCAN, fundus camera, ultrasonography etc. Broadcast link needs to share simultaneously to multiple users and connectivity thus follow confidentiality, security and traceability with the usage of video firewall in data center. Traffic routed from outside the institute needs to convert in local IP pool through port address translation called Network Address Translation (NAT) for allowing traffic from known protocols like Internet Control Message Protocol (ICMP), Transmission Control Protocol/ Internet Protocol (TCP/IP) and User Datagram Protocol (UDP). The video collaboration telemedicine infrastructure were created at STBMI, SGPGIMS, Lucknow internetworking with Integrated Operation Theatre for live sharing, Medical Telepresence Room for sharing live surgical skill during workshop, e-Tumour Board for discussion between multiple specialties departments from different hospitals, 3D Lecture Theater for sharing medical CMEs created for sharing knowledge resources with networked institutions.

Learning platforms have become an integral part of the education system these days. Especially after the COVID era, education has become more allied with self-paced and remote learning and learning platforms have made it boom exponentially. Improper construction and implementation of such platforms can lead to huge risks for the users and the company. Data security is not taken much care of while building such platforms; instead, concentration is given to fancy front-end pages and attractive interfaces. This may not be good at all times. Data is one of the most powerful resources and can have a very big impact if misused. This paper proposes a networking-based approach to implementing such platform systems in a safe and organized way. Implementation using networking concepts gives a better hand in managing permissions, access rights, and security in all data-related transfers and communications. In terms of online gaming and real-time video communication, User Datagram Protocol (UDP) is often used because it is faster than Transmission Control Protocol (TCP) and is well-suited for real-time applications that cannot tolerate delays. UDP is a connectionless protocol, which means it doesn't retransmit lost data and therefore has lower overhead, making it a good choice for real-time applications like video conferencing and online gaming. Examples of such applications include Skype, Google Meet, Zoom, and Facetime. Based on these existing applications, this work introduces UDP in the field of Learning Platform Applications and builds a model on top of which real-time applications can be constructed. The proposed system makes use of UDP for all its requests, responses, and file transfers. The protocol itself is not very reliable, but the addition of provisions for acknowledgements in all requests and responses makes this system overcome transfer uncertainty. Implementation using networking concepts improves the speed, security, privacy, and customization abilities of the proposed system.

DDoS attacks impose serious threats to many large or small organizations; therefore DDoS attacks have to be detected as soon as possible. In this study, a methodology to detect DDoS attacks is proposed and implemented on online systems. In the scope of the proposed methodology, Multi Layer Perceptron (MLP), Random Forest (RF), K-Nearest Neighbor (KNN), C-Support Vector Machine (SVC) machine learning methods are used with scaling and feature reduction preprocessing methods and then effects of preprocesses on detection accuracy rates of HTTP (Hypertext Transfer Protocol) flood, TCP SYN (Transport Control Protocol Synchronize) flood, UDP (User Datagram Protocol) flood and ICMP (Internet Control Message Protocol) flood DDoS attacks are analyzed. Obtained results showed that DDoS attacks can be detected with high accuracy of 99.2%.

On the edge nodes of Azure Stack Edge, network interfaces often experience packet queuing during peak periods due to congestion and high load. To address this issue, MobileNet was used to analyze network traffic in real-time and detect congestion, aiming to balance node network load and reduce latency. Firstly, data was collected and key features were filtered during peak periods using Wireshark, including packet rate, bidirectional packet count, flag statistics, etc.; next, TensorFlow Lite was used to prune and lightweight the model, removing redundant network layers and reducing floating-point operation accuracy, making it suitable for edge devices; then, based on the optimized model, real-time classification of network traffic was performed using Apache Kafka to detect potential congestion situations; at the same time, the load balancing strategy was dynamically adjusted based on the detection results to optimize queue priority and traffic transfer, thereby alleviating congestion. The results showed that during peak hours, the average processing time for ICMP (Internet Control Message Protocol), TCP (Transmission Control Protocol), and UDP (User Datagram Protocol) traffic was reduced by 27.1%, 23.1%, and 20.7%, respectively. When the cache capacity was 16GB, the hit rate reached 94%. Under standard traffic conditions during peak hours, the packet loss rate dropped to 2.1%, which could significantly improve the performance of edge node networks.

This paper discusses the performance of traffic flow over Local Area Networks (LAN) utilizing buffers to avoid any irrelevant traffic that clusters the network using sniffer pro. The study applies buffer technology to filter out unnecessary information so the system captures only required information packets. Buffers that capture the protocols are identified. These are. Address Resolution Protocols (ARP), Internet Control Message Protocol (ICMP), Transmission Control Protocol (TCP), and User Datagram Protocol (UDP). The study identified to the user/analyzer of an Ethernet technology, how to isolate a cluster network problem, monitor network performance, and offer tips on how to correctly assess and fix network problems. The study provides detailed analysis of threshold gauges, errors, broadcasts, multicasts, packets, and many other facets of dashboard graph configurations thereby ensuring a successful network analysis. The study concludes by providing solutions to poor network performance affecting one user, several users, or an entire network.

Staying abreast with User Datagram Protocol (UDP) has become more crucial in modern digital networks, which are continuously expanding and becoming more intricate. Maintaining UDP mappings in a NAT-based environments, reliable and uninterrupted communication for various duties, such as expeditiously transmitting data and establishing secure connections via virtual private networks (VPNs) like WireGuard is of utmost importance. Network Address Translation (NAT) is an important part of protecting the limited number of global Internet Protocol (IP) addresses and making networks safer by hiding how private communication networks are set up on the inside. However, NAT presents a number of challenges, one of which is the dynamic assignment of port numbers, which has the potential to result in disruptions in connections. The objective of this article is to elaborate on the functioning of WireGuard, placing particular emphasis on the criticality of dependable UDP mappings in order to achieve peak performance. In addition, the paper examines VMware’s Network Address Translation solution to illustrate the challenges associated with maintaining UDP mappings. In this article, an investigation is conducted into the many methods and current solutions that have been developed in order to mitigate said issues. Some of the strategies that have been implemented include the utilization of static port mapping in order to establish a reliable route through NAT, the extension of the Time to Live (TTL) for port mappings in order to reduce the number of connection disruptions, and the approach of sending empty UDP packets in order to keep active mappings. In addition, a novel solution is suggested: a protocol for managing NAT mapping that makes an effort to simplify the process of modifying the frequency of UDP probes by requiring NAT devices to disclose their TTL settings. The purpose of this protocol is to make NAT mapping easier to manage and more efficient in terms of overall network traffic.

We discuss the primarily role of anonymity and identity manipulation in information warfare. We contend that those who engage in information warfare have very similar goals as those involved in cyber-crime and cyber-terrorism. Today Internet-based commerce has become global, representing a significant component of the world market. Network-based personal communications services are rapidly becoming the method of choice for many nations. In fact many critical infrastructure components are managed and controlled remotely. Yet these various capabilities are usurped by cyber-warriors, terrorists, or other criminals. A number of networking issues contribute to the current state of Information Warfare. Historically, security capabilities (e.g., authentication, authorization, and confidentiality services) had not been considered a high priority in the original design of the critical Internet protocols still in use. Further complicating the security problem is the lack of consistency in name scheme adopted for network-related objects (hosts, applications, interfaces). Mapping of object names continues to be a trial-by-error exercise, which is frequently misused by malicious actors, as in the case of Address Resolution Protocol (ARP). Moreover, the lack of authentication facilitates the use of ICMPv4 (internet control message protocol version 4) and UDP (user datagram protocol) as protocols of choice for distributed denial-of-service (DDoS) attacks. Dynamically used transport protocol port numbers are now common: negating the effectiveness of classic firewall type packet filtering. Regrettably, mapping of device domain names to IP (internet protocol) addresses via DNS (domain name system) continues with no major efforts to prevent invalid updates or query responses. Many of the aforementioned protocols rely on data-origin authentication via secret key and message digests, yet, secret key management is non-existent. IEEE 802.1X, used in newer wireless networks, is routinely avoided for wired infrastructures. Although internet protocol security (IPsec) is widely available, it is rarely deployed beyond secure virtual private networks (VPNs), especially given that its availability in IPv4 is optional and usage optional with IPv4 and IPv6. Domain name system security (DNSSEC) has existed for over 10 years, yet serious discussion for its deployment is only now occurring. The standards for public key infrastructures (PKIs) and digital certificates are extensive but the majority of organizations find excuses to avoid its use and most PKI-enabled applications cannot even check for revoked certificates. In conclusion, we contend that given the security threats associated with current and future information warfare activities, the inter-networked global community should focus on more rapid implementation and deployment of the existing security mechanisms. As such, mandatory, robust authentication as well as several key network security services should be adopted. The necessary mechanisms already exist, now is the time for network administrators to recognize the need for prompt deployment of these capabilities as a proactive defense/mitigation against malicious attacks at reasonable level.

<p>The demand for internet applications has increased rapidly. Providing quality of service (QoS) requirements for varied internet application is a challenging task. One important factor that is significantly affected on the QoS service is the transport layer. The transport layer provides end-to-end data transmission across a network. Currently, the most common transport protocols used by internet application are TCP (Transmission Control Protocol) and UDP (User Datagram Protocol). Also, there are recent transport protocols such as DCCP (data congestion control protocol), SCTP (stream congestion transmission protocol), and TFRC (TCP-friendly rate control), which are in the standardization process of Internet Engineering Task Force (IETF). In this paper, we evaluate the performance of UDP, DCCP, SCTP and TFRC protocols for different traffic flows: data transmission, video traffic, and VOIP in wired networks. The performance criteria used for this evaluation include throughput, end to end delay, and packet loss rate. Well-known network simulator NS-2 used to implement the UDP, DCCP, SCTP, and TFRC protocols performance comparison. Based on the simulation results, the performance throughput of SCTP and TFRC is better than UDP. Moreover, DCCP performance is superior SCTP and TFRC in term of end-to-end delay.</p>

This study addresses the Internet Control Message Protocol (ICMP) performance problems arising in Internet protocol (IP) over Ethernet networks. These problems arise because of the compatibility issue between two different compositional protocols: the IP and Ethernet protocol. The motivation behind addressing the compatibility problem is to improve the security and performance of networks by studying the link compatibility between the Ethernet and IP protocols. The findings of this study have given rise to proposals for modifications. A reduction in the current naming architecture design is advocated to improve the performance and security of IP over Ethernet networks. The use of the IP address, as one flat address for the naming architecture, is proposed instead of using both the IP and Media Access Control (MAC) addresses. The proposed architecture is evaluated through a simulated cancellation of the use of the Address Resolution Protocol (ARP) protocol.

Departing from the well-known problem of the excessive overhead and latency of connection oriented protocols, this paper describes a new almost reliable connectionless protocol that uses user datagram protocol (UDP) segment format and is UDP compatible. The problem is presented and described, the motivation, the possible areas of interest and the concept and base operation modes for the protocol named keyed UDP are presented (here called KUDP). Also, discussed are some of the possible manners in which the KUDP can be used, addressing potential problems related with current networking technologies. As UDP is a connectionless protocol, and KUDP allows for some degree of detection of loss and re-ordering of segments received out-of-sequence, we also present a proposal for a stream reconstruction algorithm. This paper ends by mentioning some of the research issues that still need to be addressed.

Along with the times, the computer network has undergone many changes from time to time. Eventually, internet network is known. To test the reachability of a host on an IP address (internet protocol) network and to measure the round-trip time for messages sent from the host to the destination, computer needs to perform ping process. Ping operates by sending ICMP (Internet Control Message Protocol) echo request packets to the target host and waiting for an ICMP response. internet connection lane determination automation uses three providers done by comparing the smallest average value of the result of the ping. The test results are printed in the form of a statistical summary of the response packets received, including the minimum, maximum and average round-trip time. The signal strength is not directly proportional to the value of average, because the signal strength is affected by the report the data RSCP, throughput and quality of services covering CSSR (Call Setup Success Ratio), CCSR (Call Completion Success Ratio), DCR (Dropped Call Ratio) and BCR (Blocked Call Ratio) which can be used to optimize the network.

Communication over Internet Protocol (IP) networks, has become crucial component of day everyday activities. They are utilized over the Internet to support a wide range of services. The flexibility of this kind of transmission relies on the IP User Datagram Protocol (UDP), IP/UDP/Real-time Transport Protocol (RTP) and IP/Transmission Control Protocol (TCP). Unfortunately, the weight of encapsulated protocol headers affects the transmission efficiency. This research aims at improving a technique that reduce the packets header size by compression. Performance analysis of the enhanced efficient techniques in both unidirectional and bidirectional optimistic modes applied to real-time video streaming traffic for UDP/IP and HTTP/TCP flows over free error channel has been conducted. The finding shows that the header compression ratio in each case is good and better than the previous studies. The technique achieved a reduction up to 90% for RTP/UDP/IP, 89% for UDP /IP and 77.5 to 86.5 % for TCP/IP profile. This research contribution is restricted to compression gain and saving for 0 × 0000, 0 × 0001, 0 × 0002 and 0 × 0006 profiles in the unidirectional and bidirectional optimistic modes.

To deal with congestion control in internet protocol (IP) networks, different active queue management schemes have been successfully proposed. However, many of these schemes do not take into consideration the particular Voice over Internet Protocol (VoIP) requirements, thereby potentially penalizing this traffic. In this paper, we propose and evaluate a dropping packet selection algorithm for queue management schemes. This algorithm, called Drop-SwD , protects VoIP traffic without affecting other User Datagram Protocol (UDP) and Transmission Control Protocol (TCP) traffic. Additionally, to preserve the quality of the VoIP service, the proposed algorithm selects the lowest quality packets (with less impact on the subjective quality) to be dropped. The application of the algorithm in different active queue management schemes is evaluated using objective and subjective quality metrics and intelligibility metrics as well. As a result, we show that Drop-SwD improves the final quality of the voice packets’ flow, without degrading the performance of other traffic class, with respect to the packet dropping schemes of reference.

A technical solution has been proposed in this paper to secure transport protocol communication in the case of DDoS (distributed denial of service) attacks. The recent papers about DDoS attacks, especially the amplification attack looks for abnormal transaction that signals and eventually reports them. These methods may generate false positives or negatives and in turn can be quite dismal in its performance, in the wake of a real DDoS attack. This paper suggests a symmetric key exchange and hiding of a secret code in the UDP (user datagram protocol) packets. Any packet that has the secret code missing would be rejected. At first, the secure UDP protocol will be discussed and later, a similar method for the TCP (transmission control protocol) will be discussed. Finally the performance analysis is done to compare the overhead incurred.

Unwitnessed out-of-hospital cardiac arrest is associated with low survival chances because of the delayed activation of the emergency medical system in most cases. Automated cardiac arrest detection and alarming using biosensor technology would offer a potential solution to provide early help. We developed and validated an algorithm for automated circulatory arrest detection using wrist-derived photoplethysmography from patients with induced circulatory arrests. In this prospective multicentre study in three university medical centres in the Netherlands, adult patients (aged 18 years or older) in whom short-lasting circulatory arrest was induced as part of routine practice (transcatheter aortic valve implantation, defibrillation testing, or ventricular tachycardia induction) were eligible for inclusion. Exclusion criteria were a known bilateral significant subclavian artery stenosis or medical issues interfering with the wearing of the wristband. After providing informed consent, patients were equipped with a photoplethysmography wristband during the procedure. Invasive arterial blood pressure and electrocardiography were continuously monitored as the reference standard. Development of the photoplethysmography algorithm was based on three consecutive training cohorts. For each cohort, patients were consecutively enrolled. When a total of 50 patients with at least one event of circulatory arrest were enrolled, that cohort was closed. Validation was performed on the fourth set of included patients. The primary outcome was sensitivity for the detection of circulatory arrest. Of 306 patients enrolled between March 14, 2022, and April 21, 2023, 291 patients were included in the data analysis. In the development phase (n=205), the first training set yielded a sensitivity for circulatory arrest detection of 100% (95% CI 94-100) and four false positive alarms; the second training set yielded a sensitivity of 100% (94-100), with six false positive alarms; and the third training set yielded a sensitivity of 100% (94-100), with two false positive alarms. In the validation phase (n=86), the sensitivity for circulatory arrest detection was 98% (92-100) and 11 false positive circulatory arrest alarms. The positive predictive value was 90% (95% CI 82-94). The automated detection of induced circulatory arrests using wrist-derived photoplethysmography is feasible with good sensitivity and low false positives. These promising findings warrant further development of this wearable technology to enable automated cardiac arrest detection and alarming in a home setting. Dutch Heart Foundation (Hartstichting).