Secure Mobile IP Communication in Residential Networks

Mobile IP provides a framework for transparent host mobility in the Internet. This paper identifies the most important security related issues coupled to Mobile IP, mirroring the current and past development process in related IETF working groups. A short introduction on how Mobile IP works leads to a brief discussion of the integrated security mechanisms of Mobile IP. As special focus the integration of Mobile IP and IP Security (IPSec) is described and the related state-of-the-art architecture is presented and classified. Thereafter several outstanding security issues in the area of Mobile IP and the problems concerning Mobile IP and IPSec will be clarified. Summarizing, and to introduce ideas to make Mobile IP applicable for the future, I describe ongoing approaches in the field of authentication, authorization and accounting (AAA).

This paper addresses the implementation of an eye detection mobile application for unlocking mobile devices using its built camera as an eye tracker. The implementation allows a real-time face and eye detection of a mobile phone user. The idea behind our development was the creation of a preventive model for the benefit and safety of mobile users, including disabled users (e.g., users with arthritis). The product is a visual application that detects the pupils and can simulate the mouse cursor on the screen to unlock the device. Although some screen lock methods have been already developed, our project aims to complement the security in mobile devices. Moreover, with a new mechanism to unlock mobile devices it would offer a more robust alternative in terms of safety of such devices. Evaluation results suggest our implementation is a promising alternative for security in these devices.

This paper presents an overview of the Internet Protocol Security (IPSec) protocol [13, 14] implemented in a Dynamic Multipoint Virtual Private Network (DMVPN) to implement security features at the network layer to provide authenticated and confidential communication using various authentication and encryption protocols operating between devices located at a far away distance from one another on the Internet. In order to provide secure communication between various branches of a company located at distant locations across the Internet and to protect the data from unauthorized access, we create a virtual tunnel connecting the branches and send data across the branches in encrypted packets encapsulated within Internet Protocol (IP) datagram which are hidden from the Internet. The packets pass across to the other branch as if they are in one private network which overlays the Internet. We use the IPSec protocol for providing authentication and encryption to the IP packets. We create a Generic Routing Encapsulation (GRE) tunnel to create a DMVPN connecting the branch offices to one another. We have used GNS3 for the simulation of the scenario which is an emulator software for routers, computers, switches and various other network devices. With the help of GNS3, we were able to access the configuration terminal of various network devices and configure appropriate commands for implementing the DMVPN solution. We also used Wireshark which is a packet analyzer software that is used for tracking the IP packets which pass through the network and analyze their header, protocol information and the data that is encapsulated within it.

Mobile phone touch screen devices are equipped with high processing power and high memory. This led to users not only storing photos or videos but stored sensitive application such as banking applications. As a result of that the security system of the mobile phone touch screen devices becomes sacrosanct. The application of machine learning algorithms in enhancing security on mobile phone touch screen devices is gaining a tremendous popularity in both academia and the industry. However, notwithstanding the growing popularity, up to date no comprehensive survey has been conducted on machine learning algorithms solutions to improve the security of mobile phone touch screen devices. This survey aims to connect this gap by conducting a comprehensive survey on the solutions of machine learning algorithms to improve the security of mobile phone touch screen devices including the analysis and synthesis of the algorithms and methodologies provided for those solutions. This article presents a comprehensive survey and a new taxonomy of the state-of-the-art literature on machine learning algorithms in improving the security of mobile phone touch screen devices. The limitation of the methodology in each article reviewed is pointed out. Challenges of the existing approaches and new perspective of future research directions for developing more accurate and robust solutions to mobile phone touch screen security are discussed. In particular, the survey found that exploring of different aspects of deep learning solutions to improve the security of mobile phone touch screen devices is under-explored.

A secure and efficient mobile IP (MIP) registration protocol using certificateless signature scheme is proposed. The protocol minimises the registration time through minimal usage of an efficient certificateless signature scheme between a foreign agent (FA) and a home agent (HA). Protocol parameters can be kept resynchronised by reusing the initial values in the MIP registration in case the synchronisation between a mobile node (MN) and HA is lost. User anonymity is achieved via a temporary identity transmitted by a mobile user, instead of its true identity. Additional replay protection from the FA is included in the registration messages to prevent a possible replay attack. Numerical results and performance analyses demonstrate that the proposed protocol outperforms the existing ones in terms of the registration time, registration signalling traffic and computational load on an MN while providing improved security. For example, the proposed protocol reduces the registration time up to ∼83% compared with the protocol from Yang.

In Mobile IP, the signaling traffic overhead will be too high since the new Care-of-Address (CoA) of the mobile node (MN) is registered all the way with the home agent (HA) whenever the MN has moved into a new foreign network. To complement Mobile IP in better handling local movement, several IP micro protocols have been proposed. These protocols introduce a hierarchical mobility management scheme, which divides the mobility into micro mobility and macro mobility according to whether the host's movement is intra-domain or inter-domain. Thus, the requirements on performance and flexibility are achieved, especially for frequently moving hosts. This paper introduces a routing protocol for multicast source mobility on the basis of the hierarchical mobile management scheme, which provides a unified global architecture for both uni- and multicast routing in mobile networks. The implementation of multicast services adopts an improved SSM (Source Specific Multicast) model, which combines the advantages of the existing protocols in scalability and mobility transparency. Simulation results show that the proposed protocol has better performance than the existing routing protocols for SSM source mobility.

A key problem in the mobile IP registration with authentication, authorization and accounting (AAA) is how to minimize the registration delay while improve the security. This paper solves this problem by the non-interactive authentication from pairings in the identity-based cryptography. The main idea behind our scheme is to minimize both the on-line pairing operation time and the inter-domain communication round trip time based on the dynamic one-way authentication key and the challenge generated in the foreign network. Analysis shows that the registration delay is reduced from 420.201ms of the basic pairing-based registration scheme to the current 23.766ms while the improved security attributes including mutual tri-partite authentication, local key generation, anti-replay attack and user privacy are provided in our scheme

This article investigates the problem of classifying network devices based on their security parameters using machine learning. Due to the constant growth of threats in cyberspace and the need to ensure a high level of network security, the relevance of using machine learning technologies to identify and classify secure devices is exceptionally high. Therefore, the article considers the specifics of applying machine learning algorithms for classification and regression tasks in network environments. Particular attention is paid to a short review of the algorithms most commonly used for classification tasks. The work describes in detail the process of developing a machine-learning model aimed at classifying network devices according to their security indicators. It considers the selection of appropriate parameters for model training, the process of data preprocessing, and the selection and adjustment of the classification algorithm. The results of model training on actual data are also presented. The process of training and evaluating the accuracy and efficiency of the model is described. The results are analyzed, and the choice of optimal hyperparameters is justified. As a result of the study, an effective machine learning model has been developed that can accurately classify network devices by security level, improving network security when selecting potentially secure devices. The study found that the Random Forest and Decision Tree models showed the highest accuracy in predicting the security state of network devices compared to other models, such as Logistic Regression, k-NN, and Gradient Boosting. The performance of the trained model was tested on a validation dataset. The Decision Tree model correctly predicted the security level of approximately 78% of network devices.

The competency to use mobile devices for work-related tasks gives advantages to the company productiveness and expedites business processes. Thus Bring Your Own Device (BYOD) setting emerge to enable work flexibility and technological compatibility. For management, employees’ productivity is important, but they could not jeopardise the security of information and data stored in the corporate network. Securing data and network becomes more complex tasks as it deals with foreign devices, i.e., devices that do not belong to the organisation. With much research focused on pre-implementation and the technical aspects of mobile device usage, post-implementation advancement is receiving less attention. IS audit as one of the post-implementation mechanisms provides performance evaluation of existing IS assets, business operations and process implementation, thus helping management formulating the best strategies in optimising IS practices. This paper discusses the feasibility of IS audit in assessing mobile device security by exploring the risks and vulnerabilities of mobile devices for organisational IS security as well as the perception of Information system management in mobile device security. By analysing related literature, authors pointed out how the references used in the current IS audit research address the mobile device security. This work serves a significant foundation in the future development in mobile device audit.

Network security polices are essential elements in Internet security devices that provide traffic filtering, integrity, confidentiality, and authentication. Network security perimeter devices such as firewalls, IPSec, and IDS/IPS devices operate based on locally configured policies. However, configuring network security policies remains a complex and error-prone task due to rule dependency semantics and the interaction between policies in the network. This complexity is likely to increase as the network size increases. A successful deployment of a network security system requires global analysis of policy configurations of all network security devices in order to avoid policy conflicts and inconsistency. Policy conflicts may cause serious security breaches and network vulnerability such as blocking legitimate traffic, permitting unwanted traffic, and insecure data transmission. This article presents a comprehensive classification of security policy conflicts that might potentially exist in a single security device (intrapolicy conflicts) or between different network devices (interpolicy conflicts) in enterprise networks. We also show the high probability of creating such conflicts even by expert system administrators and network practitioners.

In recent years, there has been a noticeable trend toward targeted threats to information security, where companies are now leveraging vulnerabilities and risks associated with widely used services in order to generate financial gain. Additionally, they implement numerous precautions and consistently carry out their tasks. One item that requires precautionary measures is the network devices utilized. Network devices in computer networks possess the capability to log events. These logs enable the identification of security events on the network and facilitate the implementation of precautionary measures. Various security measures can be implemented to handle such data. One of these measures is Security Information and Event Management (SIEM). It is a system that gathers and analyzes data from networks and security devices. SIEM is a technique employed to consolidate critical information within a cohesive structure. It allows for the correlation of events from different security devices, thereby improving the monitoring capabilities of cybersecurity operations centers. This study extensively covers the critical infrastructure-SIEM relationship, current studies, critical infrastructure, cyber security policies, and SIEM. Our system design was developed using the UNSW\_NB15 dataset, a widely recognized dataset in cybersecurity due to its comprehensive and realistic representation of cyber threats. This dataset consists of data obtained from network traffic, various attack activities, and real-life modern normal scenarios, making it particularly relevant to our study. With the studies, a total of 10 different categories were analyzed, with the category consisting of nine types of attacks, namely Analysis, Backdoor, DoS, Exploits, Fuzzers, Generic, Reconnaissance, Shellcode, and Worms and Normal activities. The study is divided into two as the basic structure. The first step was carried out on Google Collaboratory, and then some experimental studies were carried out in Weka. Classifications were made using several methods, including Logistic Regression (LR), Extra Trees (XT), Support Vector Machines (SVM), Random Forest (RF), and Decision Trees (DT). These methods were chosen for their proven effectiveness in similar studies. In the application developed with Google Colabratory, we achieved 98.62\% in Random Forest, 99.10\% in Decision Trees, 98.87\% in Logistic Regression, 95.13\% success in Extra Trees and 99.12\% success in Support Vector Machines. As a result of the studies and experiments carried out in Weka, we achieved 92.05\% in Random Forest, 100\% in Decision Trees, 100\% in k-Nearest Neighbours, 100\% in J48, 99.19\% in Naive-Bayes and 99.35\% in BayesNet achievements.

The need of scaleable key management support for Mobile IP, especially the route‐optimized Mobile IP, is well known. In this paper, we present the design and the implementation of a public key management system that can be used with IETF basic and route optimized Mobile IP. The system, known as the Mobile IP Security (MoIPS) system, was built upon a DNS based X.509 Public Key Infrastructure and the innovation in cross certification and zero‐message key generation. The system can supply cryptographic keys for authenticating Mobile IPv.4 location management messages and establishing IPSec tunnels for Mobile IP redirected packets. It can also be used to augment firewall traversal of Mobile IP datagrams. A FreeBSD UNIX implementation of the MoIPS prototype is available for non‐commercial uses.

In recent year, rapid advancement of UPnP technology cause development of a variety of UPnP devices. In addition, various UPnP services developed for the devices. In home network environment, user needs continual UPnP service. However, the services based on UPnP are not provided continually, because of imperfect matching among the heterogeneous devices. To solve these problems, this paper proposes an automated method of matching for UPnP devices for user mobility and continual UPnP service in home network and cloud computing environments. The proposed method of automated device matching uses a mobile agent for providing reliable QoS in real-time. The mobile agent regularly searches for UPnP devices in the home network. In addition, the searched device information is registered in control system by mobile agent that monitors state of the searched device. Users use the service that is allocated from mobile agent in real-time when users access home network. To provide QoS to interdevice, mobile agent analyses relationship between user device and service device. Then, the mobile agent connect user device with service device which has high priority. Thus, user can use continual service in different environments.

With linear photo polymerization (LPP) ROLIC has developed a new photo-patternable technology which enables to align not only conventional liquid crystals bu also LCP. ROLICs optical security device technology derives from its LPP/LCP technology. LPP/LCP security devices are crated by structured photo-alignment of an LPP layer through photo- masks, thus generating a high resolution, photo-patterned aligning layer which carries the aligning information of the image to be created and which is machine readable. The subsequent LCP layer transforms the aligning information into an optical phase image. Among a large number of possible LPP/LCP optical effects that lead to LPP/LCP security devices - all of them with distinct optical appearance - we will concentrate on the following LPP/LCP security elements: Reflective and transmissive LPP/LCP security devices for 2nd level inspection applications. LPP/LCP images are invisible when viewed with the naked eye but becomes visible when viewed through a polarizer. Rotation of the polarizer leads to contrast inversion: i.e. the image changes from 'positive' to 'negative' which is an additional unique security feature. Other types of LPP/LCP security devices are based on cholesteric films. We will present 2nd level cholesteric LPP/LCP devices which can be sued as overlays and superimposed on printed information which remains visible through the overlay.

Seamless mobility and security are two of the main issues interesting those users, who need to keep working while travelling. Making a careful use of existing standard layer 3 protocols IPsec and mobile IP (MoIP), this paper provides a solution to integrate mobility at IP layer and virtual private network (VPN) services. The solution applies to a wide range of possible situations. We give an overview of all facing problems and we mention both advices and architectural requirements, needed to deploy the proposed solution in a real scenario. In the end we demonstrate the validity of the proposed solution by presenting an implementation on a Linux-based testbed. The deployment of the testbed allows also to show some performances of the combination of MoIP and IPsec, in terms of average added overhead.