International Journal of Communication Networks and Information Security (IJCNIS)
Not a member yet
1021 research outputs found
Sort by
Early Identification of Abused Domains in TLD through Passive DNS Applying Machine Learning Techniques
Get PDFDNS is vital for the proper functioning of the Internet. However, users use this structure for domain registration and abuse. These domains are used as tools for these users to carry out the most varied attacks. Thus, early detection of abused domains prevents more people from falling into scams. In this work, an approach for identifying abused domains was developed using passive DNS collected from an authoritative DNS server TLD along with the data enriched through geolocation, thus enabling a global view of the domains. Therefore, the system monitors the domain’s first seven days of life after its first DNS query, in which two behavior checks are performed, the first with three days and the second with seven days. The generated models apply the machine learning algorithm LightGBM, and because of the unbalanced data, the combination of Cluster Centroids and K-Means SMOTE techniques were used. As a result, it obtained an average AUC of 0.9673 for the three-day model and an average AUC of 0.9674 for the seven-day model. Finally, the validation of three and seven days in a test environment reached a TPR of 0.8656 and 0.8682, respectively. It was noted that the system has a satisfactory performance for the early identification of abused domains and the importance of a TLD to identify these domains
A High-Throughput Hardware Implementation of NAT Traversal For IPSEC VPN
Get PDFIn this paper, we present a high-throughput FPGA implementation of IPSec core. The core supports both NAT and non-NAT mode and can be used in high speed security gateway devices. Although IPSec ESP is very computing intensive for its cryptography process, our implementation shows that it can achieve high throughput and low lantency. The system is realized on the Zynq XC7Z045 from Xilinx and was verified and tested in practice. Results show that the design can gives a peak throughput of 5.721 Gbps for the IPSec ESP tunnel mode in NAT mode and 7.753 Gbps in non-NAT mode using one single AES encrypt core. We also compare the performance of the core when running in other mode of encryption
Neurological Disorders Detection Based on Computer Brain Interface Using Centralized Blockchain with Intrusion System
Get PDFA brain-computer interface (BCI) would afford real-time communication, pointedly refining the standard of lifespan, brain-to-internet (B2I) connection, and interaction between the external digital devices and the brain. This assistive technology invents information and transmission advancement patterns, like directly linking the brain and multimedia gadgets to the cyber world. This system will convert brain data to signals which is understandable by multimedia gadgets without physical intervention and exchanges human-related languages with external atmosphere control protocols. These progressive difficulties would limit security severely. Hence, the rate of ransomware, attacks, malware, and other types of vulnerabilities will be rising radically. On the other hand, the necessity to enhance conventional processes for investigating cyberenvironment security facets. This article presents a Neurological Disorders Detection based on Computer Brain Interface Using Centralized Blockchain with Intrusion System (NDDCBI-CBIS). The projected NDDCBI-CBIS technique focuses on the identification of neurological disorders and epileptic seizure detection. To attain this, the presented NDDCBI-CBIS technique pre-processes the biomedical signals. Next, to detect epileptic seizures, long short-term memory (LSTM) model is applied. The experimental evaluation of the NDDCBI-CBIS approach can be tested by making use of the medical dataset and the outcomes inferred from the enhanced outcomes of the NDDCBI-CBIS technique
Untraceable Authentication Protocol for IEEE802.11s Standard
Get PDFIn the current paper, a new handover authentication protocol for IEEE802.11s Wireless mesh networks is presented. The new protocol divides the network into a number of cells, each cell contains a number of access points and based on the concept of ticket authentication, the mesh user takes a new ticket when enters the region of a new cell which decreases the handover latency. Moreover, in the current paper, a new idea for ticket generation is proposed, called Chain Ticket Derivation Function (CTDF), which uses the concept of a chain. Using CTDF in our proposed protocol raises the level of privacy for the users. The security analysis presented in the paper showed more strengths in our proposed scheme. Two formal verification tools, AVISPA and BAN logic are used to test the proposed protocol
Design and Development of Novel Hybrid Precoder for Millimeter-Wave MIMO System
Get PDFPower consumption and hardware cost reduction with the use of hybrid beamforming in large-scale millimeter wave MIMO systems. The large dimensional analog precoding integrates with the hybrid beamforming based on the phase shifters including digital precoding with lower dimensionality. The reduction of Euclidean distance between the hybrid precoder and fully digital is the major problem to overcome the minimization of resultant spectral efficiency. The issue formulates as a fully digital precoder’s matrix factorization problem based on the analog RF precoder matrix and the digital baseband precoder matrix. An additional element-wise unit modulus constraint is imposed by the phase shifters on the analog RF precoder matrix. The traditional methods have a problem of performance loss in spectral efficiency. In the processing time and iteration, high complexities result in optimization algorithms. In this paper, a novel low complexity algorithm proposes which maximizes the spectral efficiency and reduces the computational processing time.
Improved Technique for Preserving Privacy while Mining Real Time Big Data
Get PDFWith the evolution of Big data, data owners require the assistance of a third party (e.g.,cloud) to store, analyse the data and obtain information at a lower cost. However, maintaining privacy is a challenge in such scenarios. It may reveal sensitive information. The existing research discusses different techniques to implement privacy in original data using anonymization, randomization, and suppression techniques. But those techniques are not scalable, suffers from information loss, does not support real time data and hence not suitable for privacy preserving big data mining. In this research, a novel approach of two level privacy is proposed using pseudonymization and homomorphic encryption in spark framework. Several simulations are carried out on the collected dataset. Through the results obtained, we observed that execution time is reduced by 50%, privacy is enhanced by 10%. This scheme is suitable for both privacy preserving Big Data publishing and mining
Enhanced Clustering Routing Protocol for Power-Efficient Gathering in Wireless Sensor Network
Get PDFWireless sensor network (WSN) is a new and fast advancing technology, which is opening up many opportunities in the field of remote sensing and data monitoring. In spite of the numerous applications of WSN, issues related to determining a suitable and accurate radio model that will foster energy conservation in the network limit the performance of WSN routing protocols. A number of radio models have been proposed to address this issue. However, the underlying assumptions and inaccurate configuration of these radio models make them impractical and often lead to mismanagement of scarce energy and computational resources. This paper addresses this problem by proposing an enhanced radio model that adapts to the frequent changes in the location of the sensor nodes and is robust enough to report reliable data to the base station despite fluctuations due to interference. The impact of incorporating stepwise energy level and specialized data transmission schemes in the proposed radio model is also investigated in this paper. The performance of the proposed radio model is evaluated using OMNET++ and MATLAB and the results obtained is benchmarked against PEGASIS. It is shown by simulation that the novel LEACH-IMP performs better with respect to energy consumption, number of links faults, number of packets received, signal attenuation, and network lifetime
A Secure and User Privacy-Preserving Searching Protocol for Peer-to-Peer Networks
Get PDFFile sharing peer-to-peer networks have become quite popular of late as a new paradigm for information exchange among large number of users in the Internet. However, these networks suffer from several problems such as fake content distribution, free riding, whitewashing, poor search scalability, lack of a robust trust model and absence of user privacy protection mechanism. In this paper, a secure and efficient searching scheme for peer-to-peer networks has been proposed that utilizes topology adaptation by constructing an overlay of trusted peers where the neighbors are selected based on their trust ratings and content similarities. While increasing the search efficiency by intelligently exploiting the formation of semantic community structures among the trustworthy peers, the scheme provides a highly reliable module for protecting the privacy of the users and data in the network. Simulation results have demonstrated that the proposed scheme provides efficient searching to good peers while penalizing the malicious peers by increasing their search times
Performance Analysis of IPv6 Transition Mechanisms over MPLS
Get PDF Exhaustion of current version of Internet Protocol version 4 (IPv4) addresses initiated development of next-generation Internet Protocol version 6 (IPv6). IPv6 is acknowledged to provide more address space, better address design, and greater security; however, IPv6 and IPv4 are not fully compatible. For the two protocols to coexist, various IPv6 transition mechanisms have been developed. This research will analyze a series of IPv6 transition mechanisms over the Multiprotocol Label Switching (MPLS) backbone using a simulation tool (OPNET) and will evaluate and compare their performances. The analysis will include comparing the end-to-end delay, jitter, and throughput performance metrics using tunneling mechanisms, specifically Manual Tunnel, Generic Routing Encapsulation (GRE) Tunnel, Automatic IPv4-Compatible Tunnel, and 6to4 Tunnel between Customer Edge (CE)-to-CE routers and between Provider Edge (PE)-to-PE routers. The results are then compared against 6PE, Native IPv6, and Dual Stack, all using the MPLS backbone. The traffic generated for this comparison are database access, email, File Transfer, File Print, Telnet, Video Conferencing over IP, Voice over IP, Web Browsing, and Remote Login. A statistical analysis is performed to compare the performance metrics of these mechanisms to evaluate any statistically-significant differences among them. The main objective of this research is to rank the aforementioned IPv6 transition mechanism and identify the superior mechanism(s) that offer lowest delay, lowest jitter, and highest throughput
A Comparative Study of Power Line Communication Networks With and Without Buffer
Get PDFPower line communication (PLC) has recently been receiving widespread attention due to its applications in the smart grid. We present a comparative study on the call-level performance of PLC networks with and without buffer through queueing theory. The PLC network model consists of a base station (BS) and a number of subscriber stations that are interconnected with each other and with the BS via power lines. The power line transmission channels are subject to failure during service due to disturbance. A two-dimensional Markov process is used for the modeling. Performance comparison is presented through theoretic analysis and numerical results