2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM)最新文献

Honeypot testbed for network defence strategy evaluation 网络防御策略评估蜜罐试验台

2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM) Pub Date : 2017-08-05 DOI: 10.23919/INM.2017.7987397

Jana Medková, M. Husák, Martin Vizváry, Pavel Čeleda

引用次数: 3

Exchanging security events: Which and how many alerts can we aggregate? 交换安全事件:我们可以聚合哪些和多少个警报?

2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM) Pub Date : 2017-08-05 DOI: 10.23919/INM.2017.7987340

M. Husák, Milan Cermák, Martin Laštovička, Jan Vykopal

引用次数: 19

Network defence strategy evaluation: Simulation vs. live network 网络防御策略评估:模拟与实时网络

2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM) Pub Date : 2017-08-05 DOI: 10.23919/INM.2017.7987267

Jana Medková, M. Husák, Martin Drasar

{"title":"Network defence strategy evaluation: Simulation vs. live network","authors":"Jana Medková, M. Husák, Martin Drasar","doi":"10.23919/INM.2017.7987267","DOIUrl":"https://doi.org/10.23919/INM.2017.7987267","url":null,"abstract":"A lot of research has been dedicated to finding an optimal strategy to defend network infrastructure. The proposed methods are usually evaluated using simulations, replayed attacks or testbed environments. However, these evaluation methods may give biased results, because in real life, attackers can follow a suboptimal strategy or react to a defence in an unexpected way. In this paper, we use a network of honeypots as a testing environment for evaluating network defence strategies. The honeypot network provides the opportunity to test a defence strategy against real attackers and is not as time and resource consuming as using white hat hackers. In our experiment, we use two different strategies to defend a group of honeypots in a live network and we compare these results to the results of a simulation with replayed attacks. We show that the results of the strategies in the simulation significantly differ from the results on the honeypot network which implies simulations are not sufficient for strategy evaluation. We also investigate how the attacker adapts to the responses taken by a defence strategy and how this change in behaviour affects the evaluation results.","PeriodicalId":119633,"journal":{"name":"2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM)","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-08-05","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129818253","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

A graph-based representation of relations in network security alert sharing platforms 基于图的网络安全警报共享平台关系表示

2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM) Pub Date : 2017-08-05 DOI: 10.23919/INM.2017.7987399

M. Husák, Milan Cermák

引用次数: 8

SDQ: Enabling rapid QoE experimentation using Software Defined Networking SDQ:使用软件定义网络实现快速QoE实验

2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM) Pub Date : 2017-07-24 DOI: 10.23919/INM.2017.7987353

L. Fawcett, Mu Mu, M. Broadbent, Nicholas Hart, N. Race

引用次数: 2

Locality based approach to improve propagation delay on the Bitcoin peer-to-peer network 基于局部性的比特币点对点网络传播延迟改进方法

2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM) Pub Date : 2017-07-20 DOI: 10.23919/INM.2017.7987328

M. Sallal, Gareth Owenson, M. Adda

引用次数: 22

Distributed spatial indexing for the Internet of Things data management 面向物联网数据管理的分布式空间索引

2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM) Pub Date : 2017-06-24 DOI: 10.23919/INM.2017.7987467

Yasmin Fathy, P. Barnaghi, R. Tafazolli

{"title":"Distributed spatial indexing for the Internet of Things data management","authors":"Yasmin Fathy, P. Barnaghi, R. Tafazolli","doi":"10.23919/INM.2017.7987467","DOIUrl":"https://doi.org/10.23919/INM.2017.7987467","url":null,"abstract":"The Internet of Things (IoT) has become a new enabler for collecting real-world observation and measurement data from the physical world. The IoT allows objects with sensing and network capabilities (i.e. Things and devices) to communicate with one another and with other resources (e.g. services) on the digital world. The heterogeneity, dynamicity and ad-hoc nature of underlying data, and services published by most of IoT resources make accessing and processing the data and services a challenging task. The IoT demands distributed, scalable, and efficient indexing solutions for large-scale distributed IoT networks. We describe a novel distributed indexing approach for IoT resources and their published data. The index structure is constructed by encoding the locations of IoT resources into geohashes and then building a quadtree on the minimum bounding box of the geohash representations. This allows to aggregate resources with similar geohashes and reduce the size of the index. We have evaluated our proposed solution on a large-scale dataset and our results show that the proposed approach can efficiently index and enable discovery of the IoT resources with 65% better response time than a centralised approach and with a high success rate (around 90% in the first few attempts).","PeriodicalId":119633,"journal":{"name":"2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM)","volume":"90 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-06-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134114691","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 12

Energy-efficient peer-to-peer networking for constrained-capacity mobile environments 有限容量移动环境的节能点对点网络

2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM) Pub Date : 2017-05-08 DOI: 10.23919/INM.2017.7987385

E. Harjula, T. Ojala, M. Ylianttila

引用次数: 12

A cost-effective security management for clouds: A game-theoretic deception mechanism 一种经济有效的云安全管理:博弈论欺骗机制

2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM) Pub Date : 2017-05-08 DOI: 10.23919/INM.2017.7987269

Mohammad Taghi Adili, Amin Mohammadi, M. Manshaei, M. Rahman

{"title":"A cost-effective security management for clouds: A game-theoretic deception mechanism","authors":"Mohammad Taghi Adili, Amin Mohammadi, M. Manshaei, M. Rahman","doi":"10.23919/INM.2017.7987269","DOIUrl":"https://doi.org/10.23919/INM.2017.7987269","url":null,"abstract":"The Information Technology (IT) is observing a rising shift toward cloud computing due to its attractive on-demand storage and computing capabilities that allow moving the computing and storage load from the owner's side to the service provider's place and enjoying the data or computed results efficiently anywhere anytime. This growing use of clouds also introduces significant security concerns, as sensitive data and critical applications are increasingly being moved to clouds. Recent work also reveals different security threats, e.g., side-channel attacks, against cloud services. In this work, we address the need of improved solutions for the security management of cloud computing. We propose a moving target-based deceptive defense mechanism where the moving target idea is centered on frequent migrations of the virtual machines (VMs). We make the moves cost-efficient by modeling the problem as a signaling game between the adversary and the VMs and introducing deceptions. We solve the game and obtain two Nash equilibria. These results illustrate the best possible moves by the adversary and the corresponding strategy for the VMs that should reduce the adversary's chance of being successful at most.","PeriodicalId":119633,"journal":{"name":"2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM)","volume":"10 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-05-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123540372","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 11

Lightweight virtualization as enabling technology for future smart cars 轻量级虚拟化作为未来智能汽车的支持技术

2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM) Pub Date : 2017-05-08 DOI: 10.23919/INM.2017.7987466

Roberto Morabito, Riccardo Petrolo, V. Loscrí, N. Mitton, G. Ruggeri, A. Molinaro

引用次数: 24