Journal of Computer Networks and Communications, 2019
Internet of things (IoT) is realized by the idea of free flow of information amongst various low-... more Internet of things (IoT) is realized by the idea of free flow of information amongst various low-power embedded devices that use the Internet to communicate with one another. It is predicted that the IoT will be widely deployed and will find applicability in various domains of life. Demands of IoT have lately attracted huge attention, and organizations are excited about the business value of the data that will be generated by deploying such networks. On the contrary, IoT has various security and privacy concerns for the end users that limit its proliferation. In this paper, we have identified, categorized, and discussed various security challenges and state-of-the-art efforts to resolve these challenges.
Prospecting means 'finding new customers ". It demands effort and resources. Traditional prospect... more Prospecting means 'finding new customers ". It demands effort and resources. Traditional prospecting techniques involved surveying. During surveys raw data is generated which must be cleaned before usage. This cleaning is an overhead. Other techniques require customer demographics. Unfortunately supermarket databases lack customer demographics and acquiring these demographics by any mean is very expensive. So these traditional techniques cannot be used to perform prospecting for supermarkets. Hence our aim is to devise a way that will assist supermarket analysts in identifying future prospects by analyzing the semantics hidden in the customer's past transactional records without using any customer demographics and without conducting any surveys. We will classify the customers on the basis of date and time and then identify the prospective customer classes.
—Programmable management framework have paved the way for managing devices in the network. Lately... more —Programmable management framework have paved the way for managing devices in the network. Lately, emerging paradigm of Software Defined Networking (SDN) have revolutionized programmable networks. Designers of networking applications i.e. Internet of things (IoT) have started investigating potentials of SDN paradigm in improving network management. IoT envision interconnecting various embedded devices surrounding our environment with IP to enable internet connectivity. Unlike traditional network architectures, IoT are characterized by constraint in resources and heterogeneous inter connectivity of wireless and wired medium. Therefore, unique challenges for managing IoT are raised which are discussed in this paper. Ubiquity of IoT have raised unique security challenges in IoT which is one of the aspect of management framework for IoT. In this paper, security threats and requirements are summarized in IoT extracted from the state of the art efforts in investigating security challenges of IoT. Also, SDN based security service provisioning framework for IoT is proposed.
Software Defined Networking (SDN) currently lacks a solid security infrastructure which has been ... more Software Defined Networking (SDN) currently lacks a solid security infrastructure which has been a hindrance in its deployment on the open web. A prudent inspection of the architecture, its physical and cerebral components reveal that Software Defined Networks security can be polished via the application of pre-existing network security solutions. These solutions include; public key cryptography, secured sessions (single sign-on services), firewalls, honeypots, mitigation of DDoS attacks via the use of various algorithmic methodologies etc. The implementation of a centrally authoritative controller (network orchestrator), independent with exceeding administrative authority over a cluster of slave controllers can exhume threats and block a hazardous slave controller. Most of these methodologies have been rigorously tested on the existing network technologies and are error proof. With the implementation of these policies and protocols SDNs will have a strong security suite to play with in the open web.
The next era is foreseen to revolutionize the utility application with the technological advancem... more The next era is foreseen to revolutionize the utility application with the technological advancements in IT and telecommunication. Intelligence will be seen in industrial machines equipped with embedded technologies enabling communication using low power wireless technology. Smart meter has recently gained lot of attention from the research community as this has raised unique challenges especially w.r.t security. Privacy preservation in such an environment is discussed to be critical as it may lead to devastating effects or even blackout which has been witnessed before. In this paper, we propose a privacy preserving algorithm which ensures resiliency against credentials theft with cryptographic operations where they are transported in a secure manner. We evaluated different encryption algorithms RC5, MD5, SHA1 in terms of computational and communication resources consumed by them in the proposed privacy preserving algorithm. In future, extensive evaluations and proofs of cryptographic algorithms will be included.
Mobile communications and wireless networks are developing at a fast pace. The increasing number ... more Mobile communications and wireless networks are developing at a fast pace. The increasing number of mobile subscribers and terminals are the real life evidence of the fast growing development in the area of wireless communication. Wireless communication technology is now pursuing 4G (fourth generation) and seeking a scheme to provide quality of service (QoS) to the various applications continuously even moving to another network. In this paper, we proposed a dynamic resource management architecture which considers vertical handoff situation with minimal disruption of service to the users considering seamless provision of QoS. The proposed scheme efficiently manages resources and provides stable services to the mobile terminal. The simulation results show that resource management enabled mobile terminals utilize system resources, CPU and memory, efficiently improved by 40% and 65%, respectively, rather than mobile terminals without resource tuning.
— Smart metering application has received a lot of attention from the research community lately. ... more — Smart metering application has received a lot of attention from the research community lately. Usually, LLN based network runs on RPL protocol which constructs a DAG structure for its normal operation. In this paper, we devise a wormhole attack scenario in such a network. Furthermore, we propose a Merkle tree based authentication protocol which runs on the notion of constructing a tree of hashed security information. We evaluated the approach by formulating the wormhole problem as graph theoretic problem and have shown the effectiveness of the proposed Merkle tree based approach for authenticating communications. Furthermore, we perform simulations in NS 2 to observe the network performance by adopting Merkle tree based to prevent from disrupting the links and observed boost in throughput, reduction in jitter and end to end delay. In the end, we have taken the step towards optimizing the performance of the algorithm by proposing an effective tree traversal algorithm which works on the notion of electing nodes as root in a large scale network from where a Merkle tree will be originated this will assist in managing the authentication in a huge sized network broken down into many trees avoiding wormhole attacks in the network. Keywords— Wormhole Attack; Routing protocol for low power and lossy network; Merkle Tree based authentication; Tree based protocols.
Smart metering application has received a lot of attention from the research community lately. Us... more Smart metering application has received a lot of attention from the research community lately. Usually, low power and lossy network runs on routing protocol for low power and lossy networks protocol, which constructs a directed acyclic graph structure for its normal operation. In this paper, we devise a wormhole attack scenario in such a network. Furthermore, we propose a Merkle tree-based authentication mechanism, which runs on the notion of constructing a tree of hashed security information. We analyze the approach by formulating the wormhole attack scenario as a graph theoretic problem and show the effectiveness of the proposed Merkle tree-based approach for authenticating communications. Furthermore, we perform simulations in network simulator 2 to observe the network performance by adopting a Merkle tree-based approach to prevent from disrupting the links, and we observe better throughput, reduction in jitter, and end-to-end delay as compared with scenarios with wormhole attacks and no avoidance mechanism. In the end, we take a step toward optimizing the performance of the mechanism by proposing an effective tree traversal algorithm, which works on the notion of electing nodes as a root in a large scale network from where a Merkle tree will be originated. The mechanism with the traversal algorithm assists in managing the authentication in a huge network, which is broken down into many trees avoiding wormhole attacks in the network. KEYWORDS wormhole attack; routing protocol for low power and lossy network; Merkle tree-based authentication; tree-based protocols
Next Generation Network envisions convergence of different wireless networks to provide ubiquitou... more Next Generation Network envisions convergence of different wireless networks to provide ubiquitous communication environment to the mobile user. The ubiquity is achieved by enabling a mobile user to switch to a network with better QoS (Quality of Service), by a mechanism called vertical handoff. We propose a vertical handoff management architecture which handles TCP adaptation and ensure efficient utilization of mobile terminal resource i.e. memory. The adaptation is achieved by configuring TCP socket buffer according to the available network resource i.e. bandwidth. The simulation results show that TCP utilizes the bandwidth and memory efficiently by employing our TCP adaptation strategy.
Wireless sensor networks (WSN) are susceptible to node capture and many network levels attacks. I... more Wireless sensor networks (WSN) are susceptible to node capture and many network levels attacks. In order to provide protection against such threats, WSNs require lightweight and scalable key management schemes because the nodes are resource-constrained and high in number. Also, the effect of node compromise should be minimized and node capture should not hamper the normal working of a network. In this paper, we present an exclusion basis system-based key management scheme called MUQAMI+ for large-scale clustered sensor networks. We have distributed the responsibility of key management to multiple nodes within clusters, avoiding single points of failure and getting rid of costly inter-cluster communication. Our scheme is scalable and highly efficient in terms of re-keying and compromised node revocation.
In recent years, wireless sensor networks have many potential applications for both civil and mil... more In recent years, wireless sensor networks have many potential applications for both civil and military tasks. However, sensor networks are susceptible to many types of attacks because they are deployed in open and unprotected environment. So it is necessary to use effective mechanisms to protect sensor networks against many types of attacks on routing protocols. Intrusion detection is one of the major and efficient defense methods against attacks in a computer network and system. Because of different characteristics of sensor networks, security solutions have to be designed with limited usage of computation and resources. In this paper, we proposed a hybrid, lightweight intrusion detection system integrated for sensor networks. Our intrusion detection scheme take advantage of cluster-based protocol to build a hierarchical network and provide an intrusion framework based both on anomaly and misuse techniques. Our scheme can prevent most of routing attacks on sensor networks.
The 4G mobile system is a collection of radio networks providing access to IP based services. It ... more The 4G mobile system is a collection of radio networks providing access to IP based services. It ensures seamless roaming and users are always connected to the best network providing QoS (Quality of Service) to the end user. The mechanism of switching to a different network is termed as vertical handoff. In this paper we propose a vertical handoff management architecture which ensures efficient utilization of a mobile terminal resource i.e. CPU. This is achieved by employing feedback mechanism which allocates CPU resource according to the network load by adapting the CPU scheduler. In the end the simulation results are presented which are in accord with our idea.
Journal of Computer Networks and Communications, 2019
Internet of things (IoT) is realized by the idea of free flow of information amongst various low-... more Internet of things (IoT) is realized by the idea of free flow of information amongst various low-power embedded devices that use the Internet to communicate with one another. It is predicted that the IoT will be widely deployed and will find applicability in various domains of life. Demands of IoT have lately attracted huge attention, and organizations are excited about the business value of the data that will be generated by deploying such networks. On the contrary, IoT has various security and privacy concerns for the end users that limit its proliferation. In this paper, we have identified, categorized, and discussed various security challenges and state-of-the-art efforts to resolve these challenges.
Prospecting means 'finding new customers ". It demands effort and resources. Traditional prospect... more Prospecting means 'finding new customers ". It demands effort and resources. Traditional prospecting techniques involved surveying. During surveys raw data is generated which must be cleaned before usage. This cleaning is an overhead. Other techniques require customer demographics. Unfortunately supermarket databases lack customer demographics and acquiring these demographics by any mean is very expensive. So these traditional techniques cannot be used to perform prospecting for supermarkets. Hence our aim is to devise a way that will assist supermarket analysts in identifying future prospects by analyzing the semantics hidden in the customer's past transactional records without using any customer demographics and without conducting any surveys. We will classify the customers on the basis of date and time and then identify the prospective customer classes.
—Programmable management framework have paved the way for managing devices in the network. Lately... more —Programmable management framework have paved the way for managing devices in the network. Lately, emerging paradigm of Software Defined Networking (SDN) have revolutionized programmable networks. Designers of networking applications i.e. Internet of things (IoT) have started investigating potentials of SDN paradigm in improving network management. IoT envision interconnecting various embedded devices surrounding our environment with IP to enable internet connectivity. Unlike traditional network architectures, IoT are characterized by constraint in resources and heterogeneous inter connectivity of wireless and wired medium. Therefore, unique challenges for managing IoT are raised which are discussed in this paper. Ubiquity of IoT have raised unique security challenges in IoT which is one of the aspect of management framework for IoT. In this paper, security threats and requirements are summarized in IoT extracted from the state of the art efforts in investigating security challenges of IoT. Also, SDN based security service provisioning framework for IoT is proposed.
Software Defined Networking (SDN) currently lacks a solid security infrastructure which has been ... more Software Defined Networking (SDN) currently lacks a solid security infrastructure which has been a hindrance in its deployment on the open web. A prudent inspection of the architecture, its physical and cerebral components reveal that Software Defined Networks security can be polished via the application of pre-existing network security solutions. These solutions include; public key cryptography, secured sessions (single sign-on services), firewalls, honeypots, mitigation of DDoS attacks via the use of various algorithmic methodologies etc. The implementation of a centrally authoritative controller (network orchestrator), independent with exceeding administrative authority over a cluster of slave controllers can exhume threats and block a hazardous slave controller. Most of these methodologies have been rigorously tested on the existing network technologies and are error proof. With the implementation of these policies and protocols SDNs will have a strong security suite to play with in the open web.
The next era is foreseen to revolutionize the utility application with the technological advancem... more The next era is foreseen to revolutionize the utility application with the technological advancements in IT and telecommunication. Intelligence will be seen in industrial machines equipped with embedded technologies enabling communication using low power wireless technology. Smart meter has recently gained lot of attention from the research community as this has raised unique challenges especially w.r.t security. Privacy preservation in such an environment is discussed to be critical as it may lead to devastating effects or even blackout which has been witnessed before. In this paper, we propose a privacy preserving algorithm which ensures resiliency against credentials theft with cryptographic operations where they are transported in a secure manner. We evaluated different encryption algorithms RC5, MD5, SHA1 in terms of computational and communication resources consumed by them in the proposed privacy preserving algorithm. In future, extensive evaluations and proofs of cryptographic algorithms will be included.
Mobile communications and wireless networks are developing at a fast pace. The increasing number ... more Mobile communications and wireless networks are developing at a fast pace. The increasing number of mobile subscribers and terminals are the real life evidence of the fast growing development in the area of wireless communication. Wireless communication technology is now pursuing 4G (fourth generation) and seeking a scheme to provide quality of service (QoS) to the various applications continuously even moving to another network. In this paper, we proposed a dynamic resource management architecture which considers vertical handoff situation with minimal disruption of service to the users considering seamless provision of QoS. The proposed scheme efficiently manages resources and provides stable services to the mobile terminal. The simulation results show that resource management enabled mobile terminals utilize system resources, CPU and memory, efficiently improved by 40% and 65%, respectively, rather than mobile terminals without resource tuning.
— Smart metering application has received a lot of attention from the research community lately. ... more — Smart metering application has received a lot of attention from the research community lately. Usually, LLN based network runs on RPL protocol which constructs a DAG structure for its normal operation. In this paper, we devise a wormhole attack scenario in such a network. Furthermore, we propose a Merkle tree based authentication protocol which runs on the notion of constructing a tree of hashed security information. We evaluated the approach by formulating the wormhole problem as graph theoretic problem and have shown the effectiveness of the proposed Merkle tree based approach for authenticating communications. Furthermore, we perform simulations in NS 2 to observe the network performance by adopting Merkle tree based to prevent from disrupting the links and observed boost in throughput, reduction in jitter and end to end delay. In the end, we have taken the step towards optimizing the performance of the algorithm by proposing an effective tree traversal algorithm which works on the notion of electing nodes as root in a large scale network from where a Merkle tree will be originated this will assist in managing the authentication in a huge sized network broken down into many trees avoiding wormhole attacks in the network. Keywords— Wormhole Attack; Routing protocol for low power and lossy network; Merkle Tree based authentication; Tree based protocols.
Smart metering application has received a lot of attention from the research community lately. Us... more Smart metering application has received a lot of attention from the research community lately. Usually, low power and lossy network runs on routing protocol for low power and lossy networks protocol, which constructs a directed acyclic graph structure for its normal operation. In this paper, we devise a wormhole attack scenario in such a network. Furthermore, we propose a Merkle tree-based authentication mechanism, which runs on the notion of constructing a tree of hashed security information. We analyze the approach by formulating the wormhole attack scenario as a graph theoretic problem and show the effectiveness of the proposed Merkle tree-based approach for authenticating communications. Furthermore, we perform simulations in network simulator 2 to observe the network performance by adopting a Merkle tree-based approach to prevent from disrupting the links, and we observe better throughput, reduction in jitter, and end-to-end delay as compared with scenarios with wormhole attacks and no avoidance mechanism. In the end, we take a step toward optimizing the performance of the mechanism by proposing an effective tree traversal algorithm, which works on the notion of electing nodes as a root in a large scale network from where a Merkle tree will be originated. The mechanism with the traversal algorithm assists in managing the authentication in a huge network, which is broken down into many trees avoiding wormhole attacks in the network. KEYWORDS wormhole attack; routing protocol for low power and lossy network; Merkle tree-based authentication; tree-based protocols
Next Generation Network envisions convergence of different wireless networks to provide ubiquitou... more Next Generation Network envisions convergence of different wireless networks to provide ubiquitous communication environment to the mobile user. The ubiquity is achieved by enabling a mobile user to switch to a network with better QoS (Quality of Service), by a mechanism called vertical handoff. We propose a vertical handoff management architecture which handles TCP adaptation and ensure efficient utilization of mobile terminal resource i.e. memory. The adaptation is achieved by configuring TCP socket buffer according to the available network resource i.e. bandwidth. The simulation results show that TCP utilizes the bandwidth and memory efficiently by employing our TCP adaptation strategy.
Wireless sensor networks (WSN) are susceptible to node capture and many network levels attacks. I... more Wireless sensor networks (WSN) are susceptible to node capture and many network levels attacks. In order to provide protection against such threats, WSNs require lightweight and scalable key management schemes because the nodes are resource-constrained and high in number. Also, the effect of node compromise should be minimized and node capture should not hamper the normal working of a network. In this paper, we present an exclusion basis system-based key management scheme called MUQAMI+ for large-scale clustered sensor networks. We have distributed the responsibility of key management to multiple nodes within clusters, avoiding single points of failure and getting rid of costly inter-cluster communication. Our scheme is scalable and highly efficient in terms of re-keying and compromised node revocation.
In recent years, wireless sensor networks have many potential applications for both civil and mil... more In recent years, wireless sensor networks have many potential applications for both civil and military tasks. However, sensor networks are susceptible to many types of attacks because they are deployed in open and unprotected environment. So it is necessary to use effective mechanisms to protect sensor networks against many types of attacks on routing protocols. Intrusion detection is one of the major and efficient defense methods against attacks in a computer network and system. Because of different characteristics of sensor networks, security solutions have to be designed with limited usage of computation and resources. In this paper, we proposed a hybrid, lightweight intrusion detection system integrated for sensor networks. Our intrusion detection scheme take advantage of cluster-based protocol to build a hierarchical network and provide an intrusion framework based both on anomaly and misuse techniques. Our scheme can prevent most of routing attacks on sensor networks.
The 4G mobile system is a collection of radio networks providing access to IP based services. It ... more The 4G mobile system is a collection of radio networks providing access to IP based services. It ensures seamless roaming and users are always connected to the best network providing QoS (Quality of Service) to the end user. The mechanism of switching to a different network is termed as vertical handoff. In this paper we propose a vertical handoff management architecture which ensures efficient utilization of a mobile terminal resource i.e. CPU. This is achieved by employing feedback mechanism which allocates CPU resource according to the network load by adapting the CPU scheduler. In the end the simulation results are presented which are in accord with our idea.
Uploads