NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium最新文献_第5页

An SDN-based approach to enhance the end-to-end security: SSL/TLS case study 基于sdn的增强端到端安全性的方法:SSL/TLS案例研究

NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium Pub Date : 2016-04-25 DOI: 10.1109/NOMS.2016.7502823

Alireza Ranjbar, M. Komu, P. Salmela, T. Aura

{"title":"An SDN-based approach to enhance the end-to-end security: SSL/TLS case study","authors":"Alireza Ranjbar, M. Komu, P. Salmela, T. Aura","doi":"10.1109/NOMS.2016.7502823","DOIUrl":"https://doi.org/10.1109/NOMS.2016.7502823","url":null,"abstract":"End-to-end encryption is becoming the norm for many applications and services. While this improves privacy of individuals and organizations, the phenomenon also raises new kinds of challenges. For instance, with the increase of devices using encryption, the volumes of outdated, exploitable encryption software also increases. This may create some distrust amongst the users against security unless its quality is enforced in some ways. Unfortunately, deploying new mechanisms at the end-points of the communication is challenging due to the sheer volume of devices, and modifying the existing services may not be feasible either. Hence, we propose a novel method for improving the quality of the secure sessions in a centralized way based on the SDN architecture. Instead of inspecting the encrypted traffic, our approach enhances the quality of secure sessions by analyzing the plaintext handshake messages exchanged between a client and server. We exploit the fact that many of today's security protocols negotiate the security parameters such as the protocol version, encryption algorithms or certificates in plaintext in a protocol handshake before establishing a secure session. By verifying the negotiated information in the handshake, our solution can improve the security level of SSL/TLS sessions. While the approach can be extended to many other protocols, we focus on the SSL/TLS protocol in this paper because of its wide-spread use. We present our implementation for the OpenDaylight controller and evaluate its overhead to SSL/TLS session establishment in terms of latency.","PeriodicalId":344879,"journal":{"name":"NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-04-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123314857","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 23

AppShell: Making data protection practical for lost or stolen Android devices AppShell:为丢失或被盗的Android设备提供数据保护

NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium Pub Date : 2016-04-25 DOI: 10.1109/NOMS.2016.7502850

Xuxian Jiang, Kapil Singh, Yajin Zhou

{"title":"AppShell: Making data protection practical for lost or stolen Android devices","authors":"Xuxian Jiang, Kapil Singh, Yajin Zhou","doi":"10.1109/NOMS.2016.7502850","DOIUrl":"https://doi.org/10.1109/NOMS.2016.7502850","url":null,"abstract":"Mobile apps continue to consume increasing amounts of sensitive data, such as banking credentials and classified documents. At the same time, the number of smartphone thefts is increasing at a rapid speed. As a result, there is an imperative need to protect sensitive data on lost or stolen mobile devices. In this work, we develop a practical solution to protect sensitive data on mobile devices. Our solution enables adaptive protection by pro-actively stepping up or stepping down data security based on perceived contextual risk of the device. We realize our solution for the Android platform in the form of a system called AppShell. AppShell does not require root privilege, nor need any modification to the underlying framework, and hence is a ready-to-deploy solution. It supports both in-memory and on-disk data protection by transparently encrypting the data, and discarding the encryption key, when required, for enhanced protection. We implement a working prototype of AppShell and evaluate it against several popular Android apps. Our results show that AppShell can successfully protect sensitive data in the lost devices with a reasonable performance overhead.","PeriodicalId":344879,"journal":{"name":"NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium","volume":"298 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-04-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124241496","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

Practical accounting in content-centric networking 以内容为中心的网络中的实用会计

NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium Pub Date : 2016-04-25 DOI: 10.1109/NOMS.2016.7502841

Cesar Ghali, G. Tsudik, Christopher A. Wood, E. Yeh

引用次数: 6

Maximizing lifetime of multiple data aggregation trees in wireless sensor networks 无线传感器网络中多数据聚合树的生存期最大化

NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium Pub Date : 2016-04-25 DOI: 10.1109/NOMS.2016.7502865

H. Matsuura

引用次数: 6

Towards a taxonomy for security threats on the web ecosystem 对网络生态系统的安全威胁进行分类

NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium Pub Date : 2016-04-25 DOI: 10.1109/NOMS.2016.7502862

Carlo Marcelo Revoredo da Silva, Ricardo Batista Rodrigues, R. D. Queiroz, V. Garcia, Jose Silva, Daniel Gatti, R. Assad, L. Nascimento, K. Brito, P. Miranda

引用次数: 6

Energy efficient SDN commodity switch based practical flow forwarding method 基于高效节能SDN商品交换机的实用流量转发方法

NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium Pub Date : 2016-04-25 DOI: 10.1109/NOMS.2016.7502899

A. AlGhadhban, B. Shihada

引用次数: 4

Online feature selected semi-supervised decision trees for network intrusion detection 在线特征选择半监督决策树用于网络入侵检测

NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium Pub Date : 2016-04-25 DOI: 10.1109/NOMS.2016.7502965

Z. Cataltepe, Ümit Ekmekçi, T. Cataltepe, Ismail Kelebek

引用次数: 8

Towards two-dimensional measurement of highly active IP prefixes in BGP 探讨BGP中高活跃IP前缀的二维测量方法

NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium Pub Date : 2016-04-25 DOI: 10.1109/NOMS.2016.7502915

Yuan Yang, Mingwei Xu, Meng Chen

{"title":"Towards two-dimensional measurement of highly active IP prefixes in BGP","authors":"Yuan Yang, Mingwei Xu, Meng Chen","doi":"10.1109/NOMS.2016.7502915","DOIUrl":"https://doi.org/10.1109/NOMS.2016.7502915","url":null,"abstract":"Measuring the instability of IP prefixes in BGP is critical for network operation and management. In particular, identifying and investigating the most active prefixes assist in detecting, analyzing, and understanding network problems. The traditional metric to assess the activeness of a prefix is the quantity of BGP update. However, this metric may be strongly affected by monitor-local events: the large amount of updates for a highly active prefix may be caused by an event with rather limited impact area. To cope with the issue, we propose a two-dimensional method: in addition to the traditional metric, Update Quantity (UQ), we introduce Update Visibility (UV). The key idea is that we mark a prefix as a `Highly Active Prefix' only when the large number of updates for it are widely observable. We define five types of active prefixes and propose a measurement method. We apply the method to 947 GB updates; the measurement results show that the two-dimensional method provides a more comprehensive picture of the highly active prefixes in the Internet than traditional single-metric schemes, and provides insights into network operations.","PeriodicalId":344879,"journal":{"name":"NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-04-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129593081","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

A GRASP-based heuristic for allocating the roadside infrastructure maximizing the number of distinct vehicles experiencing contact opportunities 一种基于grasp的启发式方法，用于分配路边基础设施，最大限度地增加不同车辆的接触机会

NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium Pub Date : 2016-04-25 DOI: 10.1109/NOMS.2016.7502985

J. Sarubbi, D. Vieira, E. Wanner, C. M. Silva

引用次数: 5

Coordinated scheduling via frequency and power allocation optimization in LTE cellular networks LTE蜂窝网络中基于频率和功率分配优化的协调调度

NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium Pub Date : 2016-04-25 DOI: 10.1109/NOMS.2016.7502795

Nessrine Trabelsi, Chung Shue Chen, L. Roullet, E. Altman, R. E. Azouzi

{"title":"Coordinated scheduling via frequency and power allocation optimization in LTE cellular networks","authors":"Nessrine Trabelsi, Chung Shue Chen, L. Roullet, E. Altman, R. E. Azouzi","doi":"10.1109/NOMS.2016.7502795","DOIUrl":"https://doi.org/10.1109/NOMS.2016.7502795","url":null,"abstract":"Due to Orthogonal Frequency Division Multiple Access (OFDMA) mechanism adopted in LTE cellular networks, intra-cell interference is nearly absent. Yet, as these networks are designed for a frequency reuse factor of 1 to maximize the utilization of the licensed bandwidth, inter-cell interference coordination remains an important challenge. In both homogeneous and heterogeneous cellular networks, there is a need for scheduling coordination techniques to efficiently distribute the resources and mitigate inter-cell interference. In this paper, we propose a dynamic solution of inter-cell interference coordination performing an optimization of frequency sub-band reuse and transmission power in order to maximize the overall network utility. The proposed framework, based on game theory, permits to dynamically define frequency and transmission power patterns for each cell in the coordinated cluster. Simulation results show significant benefits in average throughput and also cell edge user throughput of 40% and 55% gains when performing the frequency sub-band muting and power control. Furthermore, we also obtain a meaningful improvement in energy efficiency.","PeriodicalId":344879,"journal":{"name":"NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium","volume":"107 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-04-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125607498","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6