2017 Ninth International Conference on Ubiquitous and Future Networks (ICUFN)最新文献_第2页

Abnormal Behavior-Based Detection of Shodan and Censys-Like Scanning 基于异常行为的Shodan和Censys-Like扫描检测

2017 Ninth International Conference on Ubiquitous and Future Networks (ICUFN) Pub Date : 2017-07-04 DOI: 10.1109/ICUFN.2017.7993960

Seungwoon Lee, Seung-Hun Shin, B. Roh

{"title":"Abnormal Behavior-Based Detection of Shodan and Censys-Like Scanning","authors":"Seungwoon Lee, Seung-Hun Shin, B. Roh","doi":"10.1109/ICUFN.2017.7993960","DOIUrl":"https://doi.org/10.1109/ICUFN.2017.7993960","url":null,"abstract":"Shodan and Censys, also known as IP Device search engines, build searchable databases of internet devices and networks. Even these tools are useful for security, those also can provide the vulnerabilities to malicious users. To prevent the information disclosure of own IP devices on those search engines, a fundamental solution is blocking the access from the scanners of them. Therefore, it is needed to understand and consider their scanning mechanism. Therefore, we propose an abnormal behavior based scan detection of Shodan and Censys. To do this, several traditional scan detection approaches are combined and applied to satisfy their specification. Proposed idea is monitoring packets whether it is abnormal or not and adding on the suspicious list if it is. This is based on traditional threshold approaches. To figure out it is abnormal, stateful TCP stateful packet inspection is used. The response behavior during the connection can be identified with TCP flag and abnormal behavior can be classified with SYN Scan, Banner Grabbing, and Combined SYN and Banner Grabbing. Demonstration is simulated in a Censys-like environment and detected time variation per variance of distributed detectors and Threshold value is analyzed.","PeriodicalId":284480,"journal":{"name":"2017 Ninth International Conference on Ubiquitous and Future Networks (ICUFN)","volume":"31 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-07-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131334980","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 19

A novel mobility aware downlink scheduling algorithm for LTE-A networks 一种新的LTE-A网络移动感知下行调度算法

2017 Ninth International Conference on Ubiquitous and Future Networks (ICUFN) Pub Date : 2017-07-04 DOI: 10.1109/ICUFN.2017.7993798

Önem Yildiz, R. Sokullu

引用次数: 15

Impact of security on bandwidth and latency in IEEE 802.11ac client-to-server WLAN IEEE 802.11ac客户端到服务器WLAN中安全性对带宽和延迟的影响

2017 Ninth International Conference on Ubiquitous and Future Networks (ICUFN) Pub Date : 2017-07-04 DOI: 10.1109/ICUFN.2017.7993928

S. S. Kolahi, A. Almatrook

引用次数: 10

A robust and lightweight name resolution approach for IoT data in ICN ICN中物联网数据的强大且轻量级的名称解析方法

2017 Ninth International Conference on Ubiquitous and Future Networks (ICUFN) Pub Date : 2017-07-04 DOI: 10.1109/ICUFN.2017.7993748

Lijun Dong, Guoqiang Wang

引用次数: 4

BlockNDN: A bitcoin blockchain decentralized system over named data networking blockkndn:一个比特币区块链去中心化的数据网络系统

2017 Ninth International Conference on Ubiquitous and Future Networks (ICUFN) Pub Date : 2017-07-04 DOI: 10.1109/ICUFN.2017.7993751

Tong Jin, Xiang Zhang, Yirui Liu, Kai Lei

引用次数: 55

Industrial control system security framework for ethiopia 埃塞俄比亚工业控制系统安全框架

2017 Ninth International Conference on Ubiquitous and Future Networks (ICUFN) Pub Date : 2017-07-04 DOI: 10.1109/ICUFN.2017.7993912

A. Berhe, Ki-Hyung Kim, Gebere Akele Tizazu

引用次数: 7

An automated testing method for AUTOSAR software components based on SiL simulation 基于SiL仿真的AUTOSAR软件组件自动化测试方法

2017 Ninth International Conference on Ubiquitous and Future Networks (ICUFN) Pub Date : 2017-07-04 DOI: 10.1109/ICUFN.2017.7993793

Sooyong Jeong, W. Lee

引用次数: 4

Impact of IPSec security on VoIP in different environments 不同环境下IPSec安全对VoIP的影响

2017 Ninth International Conference on Ubiquitous and Future Networks (ICUFN) Pub Date : 2017-07-04 DOI: 10.1109/ICUFN.2017.7993945

S. S. Kolahi, Keysha Mudaliar, Cheng Zhang, Zhizhong Gu

引用次数: 3

The virtualized MPTCP proxy performance in cellular network 蜂窝网络中虚拟化MPTCP代理性能研究

2017 Ninth International Conference on Ubiquitous and Future Networks (ICUFN) Pub Date : 2017-07-04 DOI: 10.1109/ICUFN.2017.7993881

Sunyoung Chung, Seonghoon Moon, Songkuk Kim

{"title":"The virtualized MPTCP proxy performance in cellular network","authors":"Sunyoung Chung, Seonghoon Moon, Songkuk Kim","doi":"10.1109/ICUFN.2017.7993881","DOIUrl":"https://doi.org/10.1109/ICUFN.2017.7993881","url":null,"abstract":"For massive traffic handling in the cellular network, network function virtualization (NFV) is considered to be the most cost-efficient solution in the 5G networks. Since NFV decouples the network function from the underlying hardware, the purpose-built machines can be replaced by the commodity hardware. However, NFV might suffer from the very fact that it is a solely software-based solution. The objective of this paper is to find out the NFV performance issue in cellular network. Also, we want to investigate whether NFV is comparable with MPTCP connections. Since not many servers are MPTCP-enabled, a SOCKS proxy is usually deployed in between to enable MPTCP connections. We regarded a virtualized proxy as an NFV instance and set up two types of virtualized SOCKS proxies, one as KVM and the other as docker. We also tried to find out if there is a performance difference between hypervisor-based and container-based virtualization in our setting. As the results show, the docker proxy performs better than the KVM proxy. In terms of resource consumption, for example, the docker utilized 31.9% of host CPU, whereas the KVM consumed 36.9% when both of them handling 2,000 concurrent requests. The throughput comparison of different TCP connections reflects the characteristics of MPTCP flow that performs best in a long and large flow. The latency between the server and the proxy determined the throughput of MPTCP with a virtualized proxy. If the latency between the server and the proxy gets larger (RTT 100ms), the MPTCP proxy throughput of all three different flow got worse than the single TCP connections, whether it is a short flow (1KB) or a long flow (164MB). However, if the latency is in the middle range (RTT 50ms), the MPTCP proxy throughput of a short (1KB) and medium (900KB) flow works poorly, but a long flow (164MB) still works better than the single TCP connections.","PeriodicalId":284480,"journal":{"name":"2017 Ninth International Conference on Ubiquitous and Future Networks (ICUFN)","volume":"5 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-07-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116818971","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

An evaluation of quality metrics for 360 videos 对360度视频质量指标的评估

2017 Ninth International Conference on Ubiquitous and Future Networks (ICUFN) Pub Date : 2017-07-04 DOI: 10.1109/ICUFN.2017.7993736

Huyen T. T. Tran, N. P. Ngoc, Cuong Manh Bui, Minh Hong Pham, T. Thang

引用次数: 43