Reputation-based solutions for trustworthy next-generation networks

A Lightweight Forwarding Strategy for Named Data Networking in Low-end IoT

O Livro de Minicursos do XXXIX Simpósio Brasileiro de Redes de Computadores e Sistemas Distribuídos (SBRC 2021) contém os minicursos selecionados para apresentação na edição do evento realizada online, no período de 16 a 20 de agosto de 2021, na cidade de Uberlândia/MG. O Livro dos Minicursos do SBRC tem sido tradicionalmente utilizado como material de estudo de alta qualidade por alunos de graduação e pós-graduação, bem como por profissionais da área. O principal objetivo dos Minicursos do SBRC é oferecer treinamento e atualização de curto prazo em temas normalmente não cobertos nas estruturas curriculares e que possuem grande interesse entre acadêmicos e profissionais. No livro são abordados temas atuais e de interesse da comunidade, como sistemas de software emergentes, mobilidade e segurança em redes centradas em informação, virtualização de funções de rede na Internet das Coisas (IoT), redes vestíveis e sistemas ciber-humanos e ainda aprendizado federado aplicado à IoT. No primeiro capítulo, intitulado “Emergent Software Systems: Theory and Practice”, os autores apresentam o conceito de Sistemas de Software Emergentes. A abordagem do Software Emergente visa reduzir o esforço inicial para criar soluções autônomas; suporta a criação de sistemas totalmente adaptáveis capazes de aprender autonomamente sobre a estrutura do sistema e seu ambiente operacional sem nenhum conhecimento pré-definido. No segundo capítulo, “Revisitando as ICNs: Mobilidade, Segurança e Aplicações Distribuídas através das Redes de Dados Nomeados”, os autores apresentam uma introdução e revisão dos fundamentos das Information-Centric Networks (ICN) e em seguida a arquitetura Named Data Networking (NDN). Os autores apresentam as principais questões relacionadas à mobilidade, segurança e aplicações distribuídas através por demonstrações e atividades práticas com ambientes previamente configurados. No terceiro capítulo, “Virtualização de Funções de Rede na IoT: Um Panorama do Gerenciamento de Desempenho x Segurança”, trata do uso de Network Function Virtualization (NFV) em IoT do ponto de vista de gerenciamento, desempenho e segurança da rede. O texto apresenta questões e o estado da arte relacionados ao desempenho do uso de NFV na detecção e mitigação de ameaças em redes específicas de IoT. O quarto capítulo, “Das Redes Vestíveis aos Sistemas Ciber-Humanos: Uma Perspectiva na Comunicação e Privacidade dos Dados”, aborda a rápida evolução que vem ocorrendo desde os primórdios das redes vestíveis até a pesquisa de ponta em nanorredes. Essa evolução rápida fundamenta a construção dos sistemas ciberfísicos e ciber-humanos que possuem aplicações em diversas áreas. Os autores descrevem a necessidade de explorar as vulnerabilidades e desafios que essas redes possuem em relação à privacidade dos dados e resiliência de seus serviços e apresentam uma discussão, demonstrando através de exemplos práticos essas fragilidades e um levantamento do estado da arte de propostas acadêmicas para a proteção da privacidade e resiliência de seus serviços. No quinto e último capítulo, “Aprendizado Federado aplicado à Internet das Coisas”, os autores apresentar os principais fundamentos do Aprendizado Federado (Federated Learning – FL) abrangendo as ferramentas e passos necessários para o desenvolvimento de aplicações e serviços voltadas à IoT. Os conceitos abordados incluem uma introdução à Aprendizagem de Máquina (centralizada e distribuída), o estado-da-arte em FL, uma visão geral dos trabalhos existentes, os desafios e as perspectivas futuras para o avanço da área. Os cinco capítulos abordam de forma ampla temas atuais da comunidade, sendo uma obra útil para pesquisadores e profissionais da área de redes de computadores e sistemas distribuídos.

The Short Courses Book of 39th Brazilian Symposium on Computer Networks and Distributed Systems (SBRC 2021) contains the short courses selected for presentation in the online edition of the event, from August 16 to 20, 2021, in the city of Uberlândia/MG. The main objective of the SBRC Short Courses is to offer short-term training and updating on topics not typically covered in curricular structures and which are of great interest among academics and professionals. The Book has traditionally been used as high-quality study material by undergraduate and graduate students and professionals in the field. The Short Courses covers current topics of interest to the community, such as emerging software systems; mobility, security in information-centric networks; virtualization of network functions in the Internet of Things (IoT); wearable networks, and cyber-human systems; and federated learning applied to IoT. In the first chapter, entitled “Emergent Software Systems: Theory and Practice,” the authors present the concept of Emerging Software Systems. The Emerging Software approach aims to reduce the initial effort to create standalone solutions; it supports fully adaptable systems capable of autonomously learning about the system structure and its operating environment without any pre-defined knowledge. In the second chapter, “Revisitando as ICNs: Mobilidade, Segurança e Aplicações Distribuídas através das Redes de Dados Nomeados”, the authors present an introduction and review of the fundamentals of Information-Centric Networks (ICN) and then the Named Data Networking (NDN) architecture. The authors present the main issues related to mobility, security, and distributed applications through demonstrations and practical activities with previously configured environments. The third chapter, “Virtualização de Funções de Rede na IoT: Um Panorama do Gerenciamento de Desempenho x Segurança”, deals with the use of Network Function Virtualization (NFV) in IoT from the point of view of network management, performance, and security. The text presents issues and state-of-the-art related to the performance of NFV in the detection and mitigation of threats in specific IoT networks. The fourth chapter, “Das Redes Vestíveis aos Sistemas Ciber-Humanos: Uma Perspectiva na Comunicação e Privacidade dos Dados”, addresses the rapid evolution that has been taking place from the beginnings of wearable networks to cutting-edge research in nanonetworks. This rapid evolution underlies the construction of cyber-physical and cyber-human systems that have applications in several areas. The authors describe the need to explore the vulnerabilities and challenges that these networks have concerning data privacy and the resilience of their services and present a discussion, demonstrating these weaknesses through practical examples and a survey of the state of the art of academic proposals for privacy protection and resiliency of your services. In the fifth and final chapter, “Aprendizado Federado aplicado à Internet das Coisas”, the authors present the main foundations of Federated Learning (FL), covering the tools and steps necessary for the development of IoT applications and services. The concepts covered include an introduction to Machine Learning (centralized and distributed), the state-of-the-art in FL, an overview of current work, challenges, and future perspectives for advancing the field. The five chapters broadly address current community issues, making them practical work for researchers and professionals in computer networks and distributed systems.

International audience

Information-Centric Networking (ICN) is a paradigm shift from host-to-host Internet Protocol (IP)-based communication to content-based communication. In ICN, the content-retrieval process employs names that are given through different naming schemes such as hierarchical, flat, attribute, and hybrid. Among different ICN architectures, Named-Data Networking (NDN) has gained much interest in the research community and is actively being explored for the Internet of Things (IoT) and sensor networks, and follows a hierarchical naming format. NDN protocol follows a pull-based communication model where the content consumer gets content irrespective of the location of the content provider. The content provider in NDN and sensor networks can be considered to be a distributed database that monitors or controls the environment and caches the sensed data or controls information into their memory. The proposed Name-INtegrated Query (NINQ) framework for NDN-based IoT provides a flexible, expressive, and secure query mechanism that supports content retrieval as well as control and configuration command exchange among various nodes in a smart building. Different use cases are presented in this paper that expand on the behavior of proposed query framework in different scenarios. Simulation results of data collection and exchange of control commands show that proposed query framework significantly improves Interest Satisfaction Rate (ISR), Command Satisfaction Rate (CSR), energy efficiency, and average delay. Moreover, it is evident from the simulation results that proposed query framework significantly reduces the number of transmissions in the network in both data collection and exchange of control command scenarios, which improves the network performance.

Named data networking (NDN) and edge cloud computing (ECC) are emerging technologies that are considered as the most representative technologies for the future Internet. Both technologies are the promising enabler for the future Internet such as fifth generation (5G) and beyond which requires fast information response time. We believe that clear benefits can be achieved from the interplay of NDN and ECC and enables future network technology to be much more flexible, secure and efficient. In this paper, therefore, we integrate NDN with ECC in order to achieve fast information response time. Our framework is based on N-Tier architecture and comprises of three main Tiers. The NDN is located at the Tier1 (Things/end devices) and comprises of all the basic functionalities that connect Internet of Things (IoT) devices with Tier 2 (Edge Computing), where we have deployed our Edge node application. The Tier 2 is then further connected with Tier 3 (Cloud Computing), where our Cloud node application is deployed at multiple hops on the Microsoft Azure Cloud machine located in Virginia, WA, USA. We implement an NDN-based ECC framework and the outcomes are evaluated through testbed and simulations in terms of interest aggregation, round trip time (RTT), service lookup time with single query lookup time and with various traffic loads (load-based lookup time) from the IoT devices. Our measurements show that enabling NDN with edge computing is a promising approach to reduce latency and the backbone network traffic and capable of processing large amounts of data quickly and delivering the results to the users in real time.

Named Data Networking (NDN) presents strong bandwidth benefits on edge networks because its in-network caching design is probably fit for popularity and locality. However, separate NDN edge regions cannot be efficiently connected over IP backbone world, slowing down the deployment of NDN edges. Due to the difference of stateful NDN and stateless IP in forwarding principles, the coexistence of two protocols is difficult and challenging in the network layer. In this paper, we propose iGate, an NDN gateway design for tunneling over IP world, to bridge two kinds of protocols in the same layer. iGate translates protocols between stateful NDN and stateless IP by two temporary tables. It considers many factors about gateway efficiency, like table tunning, minimal NDN integration, TCP/UDP alternatives. We evaluate the performance of iGate with a real implementation on Linux and the results show that it can achieve more than 85.03% translation efficiency and less than 29% protocol conversion delay compared with IP VPN which uses the typical tunneling technology over IP network. Our work presents a practical and highly-efficient solution to assemble NDN edges into IP world, and can be applied to other similar Information-Centric Networking (ICN) designs.

This article describes how the named data networking (NDN) has recently received a lot of attention as a potential information-centric networking (ICN) architecture for the future Internet. The NDN paradigm has a great potential to efficiently address and solve the current seminal IP-based IoT architecture issues and requirements. NDN can be used with different sets of caching algorithms and caching replacement policies. The authors investigate the most suitable combination of these two features to be implemented in an IoT environment. For this purpose, the authors first reviewed the current research and development progress in ICN, then they conduct a qualitative comparative study of the relevant ICN proposals and discuss the suitability of the NDN as a promising architecture for IoT. Finally, they evaluate the performance of NDN in an IoT environment with different caching algorithms and replacement policies. The obtained results show that the consumer-cache caching algorithm used with the Random Replacement (RR) policy significantly improve NDN content validity in an IoT environment.

Information Centric Networking (ICN) has been proposed as an encouraging remedy for solving complications of traditional IP based architecture. In this work, we present the design and implementation of an ICN framework in Contiki NG OS, a prominent operating system (OS) for constrained IoT devices that have limited computing and communication capabilities. Elementary end-to-end communication paradigms of Named Data Networking (NDN), inspired from ICN concepts and proposed as one of Future Internet Architectures (FIA), is integrated to Contiki NG OS developed for low-power and constrained Internet of Things (IoT) devices. Our results demonstrate the expediency of using the NDN concept for constrained IoT devices in Contiki NG OS.

Named data networking (NDN) is an emerging information-centric networking paradigm, in which the Internet of Things (IoT) achieves excellent scalability. Recent literature proposes the concept of NDN-IoT, which maximizes the expansion of IoT applications by deploying NDN in the IoT. In the NDN, the security is built into the network by embedding a public signature in each data package to verify the authenticity and integrity of the content. However, signature schemes in the NDN-IoT environment are facing several challenges, such as signing security challenge for resource-constrained IoT end devices (EDs) and verification efficiency challenge for NDN routers. This article mainly studies the data package authentication scheme in the package-level security mechanism. Based on mobile edge computing (MEC), an efficient certificateless group signature scheme featured with anonymity, unforgeability, traceability, and key escrow resilience is proposed. The regional and edge architecture is utilized to solve the device management problem of IoT, reducing the risks of content pollution attacks from the data source. By offloading signature pressure to MEC servers, the contradiction between heavy overhead and shortage of ED resources is avoided. Moreover, the verification efficiency in NDN router is much improved via batch verification in the proposed scheme. Both security analysis and experimental simulations show that the proposed MEC-based certificateless group signature scheme is provably secure and practical.

Research in Information-Centric Networking (ICN) and Named Data Networking (NDN) has produced many protocol designs and software prototypes, but they need to be validated and evaluated by real usage on the Internet, which is also critical to the realization of the ICN/NDN vision in the long run. This article presents the first Internet-scale adaptive video streaming service over NDN, which allows regular users to watch videos using NDN technology with no software installation or manual configuration. Since mid-2019, the official NDN website [1] has started using our service to deliver its videos to Internet users over the global NDN testbed, showcasing the feasibility of NDN. We conduct real-world experiments on the NDN testbed to validate the proper implementation of the client, network, and server sides of the proposed system and also evaluate the performance of our video streaming service.

Named Data Networking (NDN) is an implementation of Information-Centric Networking (ICN) that has emerged as a promising candidate for the Future Internet Architecture (FIA). In contrast to traditional networking protocols, NDN’s focus is on content, rather than the source of the content. NDN enables name-based routing and location-independent data retrieval, which gives NDN the ability to support the highly dynamic nature of mobile networks. Among other important features, NDN integrates security mechanisms and prioritizes protecting content over communication channels through cryptographic signatures. However, the data verification process that NDN employs may cause significant delays, especially in mobile networks and vehicular networks. This aspect makes it unsuitable for time-critical and sensitive applications such as the sharing of safety messages. Therefore, in this work, we propose NDN-BDA, a blockchain-based decentralized mechanism that provides a faster and more efficient data authenticity mechanism for NDN-based vehicular networks.

In recent years, the Internet of Things (IoT) has become a standard facet of modern communications, and information-centric networks have been pointed as an alternative to bypass the restrictions imposed by the traditional Internet protocol networks regarding the mobility of its network elements. However, the improvements imposed by this new paradigm fall short in large scale mobile wireless distributed environments inherent to IoT, due to high node mobility, dynamic topologies and intermittent connectivity. To tackle these issues, we present a named data network (NDN)-based publish–subscribe mechanism with support for both Consumer and Producer mobility. This approach handles the Producer mobility by combining the Data packets with infrastructure specific information, fixing the broken paths between the Producer and the Consumer; and the Consumer mobility by monitoring and anticipating mobile node trajectories while compelling the infrastructure to adjust to new paths. Simulation results, assuming a smart city use case and using real traces of vehicular mobility, have shown that the proposed solution far surpasses the native NDN workflow and traditional publish–subscribe solutions. With respect to the Producer mobility, the proposed solution delivers 79% of Data packets against 14% with the Native implementation, when using 25 mobile Producers; regarding the Consumer mobility, results have shown that our solution achieves almost the same Consumer satisfaction ratio as previous implementations but reducing substantially the network overhead related with the transmission of Interest packets.

LoRaWAN is a long-range, low-power wireless transmission medium, typically used in Internet of Things(IoT) deployments for long range transmission of sensor data and commands for actuator devices. Named Data Networking (NDN) is an emerging information-centric networking architecture with a design suited for handling communication in wireless environments. This work leverages both technologies to create an ad hoc wireless network by creating an application that is able to send and receive NDN packets between LoRaWAN devices without using any IP address. Experimental results gathered in a real environment show that this newly created ad hoc network is capable of transmitting data over distances of at least one kilometer per hop, using NDN features for handling routing and security of data packets. This ad hoc network is suitable for fetching IoT sensor data, sending commands to IoT devices, and for sending small messages between distant nodes in a low-resource, wireless IoT environment with minimal network infrastructure. Furthermore, this system has been used and evaluated while developing an NDN-based IoT sensing platform with built-in security features, such as data signature verification and certificate deployment.

A trust management scheme to secure mobile information centric networks