Network Traffic Analysis and SCADA Security

Visual Information Management for Network Configuration

This work capitalizes on the concept of network function virtualization at the telco cloud, and presents a joint study between fault management and security management. Specifically, the commonalities of fault and security management are put forward, along with a resource allocation study in common slice deployments. In this regard, a security threat analysis is presented, which sheds light onto the impact of security threats on network fault management. The interdependence between security and fault management is highlighted via three use cases, where distinct levels of resource trade-offs are identified. Along with such use cases, the paper provides also an overview of the resulting resource allocation process, where the requirements of the corresponding slice are analyzed towards an overall efficient resource usage.

Network and Service analytics can harness the immense stream of operational data from clouds, to services, to social and communication networks. In the era of big data and connected devices of all varieties, analytics and machine learning have found ways to improve reliability, configuration, performance, fault and security management. In particular, we see a growing trend towards using machine learning, artificial intelligence and data analytics to improve operations and management of information technology services, systems and networks.

Management of today's optical transport networks typically includes some or all of fault, configuration, accounting, performance, and security (FCAPS) management. Carrying this management information across the network requires the presence of a management communications network (MCN), also referred to as the data communications network (DCN). The MCN itself needs FCAPS management. The availability of management for the MCN is very sparse in today's management systems, and this paper is a first step towards addressing the problem. We describe algorithms for planning, designing, and analyzing the MCN. Central to these algorithms is a graph representation of the entire network. Our treatment views the management of the MCN as an extension of the management of the transport network. We envision this work as the basis for a suite of applications that can improve the management of the communications infrastructure in optical transport networks.

The lack of current network dynamics studies that evaluate the effects of new application and protocol deployment or long-term studies that observe the effect of incremental changes on the Internet, and the change in the overall stability of the Internet under various conditions and threats has made network monitoring challenging. A good understanding of the nature and type of network traffic is the key to solving congestion problems. In this paper we describe the architecture and implementation of a scalable network traffic moni-toring and analysis system. The gigabit interface on the monitoring system was configured to capture network traffic and the Multi Router Traffic Grapher (MRTG) and Webalizer produces graphical and detailed traffic analysis. This system is in use at the Obafemi Awolowo University, IleIfe, Nigeria; we describe how this system can be replicated in another environment.

This chapter introduces the IoT Service Platform, which is considered to be the cornerstone of successful IoT solutions. It illustrates that the Service Platform is responsible for many of the most challenging and complex tasks of the solution. It automates the ability to deploy, configure, troubleshoot, secure, manage and monitor IoT entities, ranging from sensors to applications, in terms of firmware installation, patching, debugging and monitoring to name just a few. The Service Platform also provides the necessary functions for data management and analytics, temporary caching, permanent storage, data normalization, policy-based access control and exposure. Given the complexity of the Services Platform in IoT, the chapter groups the core capabilities into 11 main areas: Platform Manager, Discovery & Registration Manager, Communication (Delivery Handling) Manager, Data Management & Repository, Firmware Manager, Topology Management, Group Management, Billing and Accounting Manager, Cloud Service Integration Function / Manager, API Manager and finally Element Manager addressing Configuration Management, Fault Management, Performance Management and Security Management across all IoT entities.

Element Management System (EMS) is a system to manage network element (NE) for Ethernet Passive Optical Network (EPON). This allows the user to manage all the features of each network element (NE) individually. Network element (NE) exposes one or more management interfaces that the EMS uses to communicate with and to manage them. EMS has been design to fulfill FCAPS criteria which consist of fault management, configuration management, accounting management, performance management and security management. EPON is an emerging access network technology that provides a low-cost method of deploying optical access lines between a carrier’s central office and a customer site. EPON build on the International Telecommunications Union (ITU) standard G.983 for asynchronous transfer mode PON (APON) and seek to bring to life the dream of a full-services access network (FSAN) that delivers converged data, video, and voice over a single optical access system.

As the demand for LTE networks keeps on increasing day by day the necessity to improve the service with the current available infrastructure is one of the key measures to be taken into consideration. The initial configuration set up, the performance of the system once installed and the rectification of faults all play a major role in this process. This paper discusses the configuration, performance and fault management of eNodeBs in the current LTE environments and then a NetSim simulation based study is presented on the concept of coverage optimization considering relays. The throughput and delay is analyzed for various scenarios. Using relays is an option for overcoming coverage hole issue as proved in the paper.

The electric power transmission network management is changing from decentralized to province-centralized mode to adapt to the development trend of power grid. For the current hierarchical management situation of transmission system, the paper mainly studies the centralized mode. Considering the difficulty of transform, security, the demand of bandwidth and augmentability factors, the paper proposes a hierarchical province-centralized mode based on Resource pool and states its architecture, realization methods and deployment mode of Network Manager System in Cloud, realizing the unified management, configuration and data sharing of the whole province. Deploying the network management system in the Clout is taking full use of the resource sharing, efficient management and on-demand resource of the Cloud to realize the intensification, promoting the scheduling intensive management level of Information and transmission. Introduction For a long time, the layered, graded, zoned management mode of electric power communication networks makes the network management system built and maintained by the way of multi-level scheduling mechanism. In order to fulfill the development trend of power grid, power transmission network management should be developed from the provinces and cities separated pattern to the province-centralized mode to realize unified management, unified configuration and sharing of the communication network data within province and achieve the purpose of concentrate and highly active management, reasonable resource-configuration and optimizing the structure of the network resources. Deploying the communication network management centrally is an effective way to enhance the level of intensive management, which, whereas, will cause the load that systems deal with increase sharply. However, Cloud computing technology integrates resources into form Cloud in order to get higher utilization of computing and storage, having a strong computing power and storage capacity. With the development of Cloud construction, deploying communication network management in the pool can improve data reliability and security. This paper puts forward a hierarchical province-centralized mode based on Cloud by researching on concentrated-model of Transmission Network Management, and describes the model in detail. Discussed Problems Power system communication network is the important technology support and infrastructure platform of the grid. As an important guarantee of power grid security, stability and economic running, communication network management system is the important technology means of the communication network management and maintenance. International Power, Electronics and Materials Engineering Conference (IPEMEC 2015) © 2015. The authors Published by Atlantis Press 596 Communication network management system At present, the general transmission network management system is divided into Element Management System(EMS), Subnet Management System(SNMS) and Network Management (NMS) in terms of the management level. EMS is based on the device manager and realizes the management of safety, configuration, performance and alarm for specific equipment; SNMS can divide the network elements into various subnets, not only manage the elements equipments but also the topological relation between them. NMS is a higher level than the SNMS and manage multiple SNMS systems at the same time through network. It configures the router for each business level, and also shows the network elements’ circumstances of each time slot and the business relationships at all levels in details. The relationship of different level network management system is showed as the figure 1.

Radiofrequency identification (RFID) is an enabling technology that can provide organizations with unprecedented improved visibility and traceability of items throughout their journey in the value chain. As RFID deployments are scaling-up from pilot projects and proof-of-concept trials towards fully-fledged enterprise applications, RFID system management challenges will escalate. This paper takes an in-depth look at the management aspects of RFID systems. The current state-of-the art of RFID systems management is exposed, whereby various approaches are discussed under five functional areas, namely configuration, fault, performance, accounting and security management. The paper also highlights some future trends and open research areas that can potentially trigger further interests and investigations in this important topic.

Airborne network is one of the key technologies of aircraft avionics system. The real-time performance,fault tolerance and correctness of network behavior of it will affect the overall performance of aircraft,and a proper management of it will give an effective play to the performance of the avionics system.Based on research for avionics system network architecture,an avionics system architecture module with cascade double CPC was proposed,taking AFDX network as the backbone network. On the basis of which,as well as in combination with the characteristics of AFDX network and method of TCP / IP network management,research on AFDX network management technology was carried out. Methods of AFDX network management and its implementation were analyzed,such key requirements as its architecture management,fault management and configuration management were proposed,and the network management software was implemented in Vx Works653 operating system.

In this paper, we have made a comprehensive study about the key technologies including applying wireless sensor networks to the traffic monitoring network, its traffic flow forecast based on gray forecasting model and traffic congestion control. According to the features that wireless sensor networks have no space constraints, flexible distribution, mobile convenience and quick reaction, we present a scheme that uses wireless sensor networks to monitor city transport vehicles and have designed a traffic monitoring system based on wireless sensor network that is applicable to all types of city environment. With the system, we can monitor the important roads that are easily blocked and find out the time changing law of traffic congestion, and then put the focus on monitoring them in order to greatly reduce the investment and achieve high efficiency. As far as the traffic flow forecasting methods concerned, we use Adaptive GM (1, 1) Model which have a real-time rolling forecast for city traffic and have a better forecast results. Because of the fewer study about the traffic congestion control in the current academia, we make a deep study about the traffic congestion control issues in this article. Learn from mature congestion control algorithm in computer network, we have designed an algorithm of traffic flow congestion control and scheduling for traffic network, which is called TRED. We have used it for real-time traffic scheduling and have opened up a new way to study and solve traffic congestion control problems.

This chapter covers the foundations of Network Traffic Monitoring and Analysis (NTMA) by providing a thorough review of its fundamental ideas while highlighting the crucial part it plays in evaluating network activity and performance. Coupled with the massive influx of users onto our networks, activities such as web browsing and video streaming have gained increasing popularity, further necessitating measures and standards for maintaining the quality of service (QoS) of network environments. It is thus crucial to forecast network traffic parameters, such as upload and download rates, that have a direct influence on QoS. This is followed by exposure to cutting-edge NTMA approaches currently being used by worldwide organizations and major telecommunications operators. Moreover, an overview of NTMA approaches for categorizing and forecasting network traffic is also given. This chapter thus focuses on the theoretical aspects of the framework upon which the NTMA proceedings in this book are based.

Network Traffic Monitoring and Analysis

Wildcard rules are implemented in various important networking scenarios, including QoS, firewall, access control, and network traffic monitoring and analysis. However, there are cross-rule dependencies between wildcard rules, which both increase significant overhead and affect the semantic correctness of packet classification when caching rules. Considerable efforts have been made to mitigate the impacts of the dependency issue in rule caching, but it is still a bottleneck for cache systems. In this paper, we show how to give applications the flexibility of completely dependency-free wildcard rule caching by decoupling the cached rules and their dependent rules. Our FreeCache scheme has wide applicability to packet classification devices with wildcard rule caching. We validate the effectiveness of FreeCache through two respects: (1) Implementing various cache algorithms (e.g., LSTM) and cache replacement algorithms (e.g., ARC, LIRS) that are difficult to use in dependency-bound situations in the cache system with FreeCache. (2) Developing a prototype in a Software-Defined Network (SDN), where hybrid OpenFlow switches use TCAM as cache and RAM as auxiliary memory. Our experimental results reveal that FreeCache improves the cache performance by up to 60.88% in the offline scenario. FreeCache also offers the promise of applying any existing caching algorithms to wildcard rule caching while guaranteeing the properties of semantic correctness and equivalence.