學術出版;;Publications

Permanent URI for this communityhdl:11536/1

收集所有交通大學研究人員與學生個人或團體所發表之各項學術著作，涵蓋期刊論文、教師專書、學位論文等項。;;Collections of Publications of NCTU Researchers and Students Like Journal Papers and Thesis.

Browse

🏛️國立陽明交通大學機構典藏

Search Results

Now showing 1 - 7 of 7

Enabling Mobile Service Continuity Across Orchestrated Edge Networks
(2020-07-01)
Abdullaziz, Osamah Ibrahiem
;
Wang, Li-Chun
;
Chundrigar, Shahzoob Bilal
;
Huang, Kuei-Li
;
電機工程學系
Edge networking has become an important technology for providing low-latency services to end users. However, deploying an edge network does not guarantee continuous service for mobile users. Mobility can cause frequent interruptions and network delays as users leave the initial serving edge. In this paper, we propose a solution to provide transparent service continuity for mobile users in large-scale WiFi networks. The contribution of this work has three parts. First, we propose ARNAB architecture to achieve mobile service continuity. The term ARNAB means rabbit in Arabic, which represents an Architecture for Transparent Service Continuity via Double-tier Migration. The first tier migrates user connectivity, while the second tier migrates user containerized applications. ARNAB provides mobile services just like rabbits hop through the WiFi infrastructure. Second, we identify the root-causes for prolonged container migration downtime. Finally, we enhance the container migration scheme by improving system response time. Our experimental results show that the downtime of ARNAB container migration solution is 50% shorter than that of the state-of-the-art migration.
Mitigating DoS Attacks against SDN Controller Using Information Hiding
(2019-01-01)
Abdullaziz, Osamah Ibrahiem
;
Wang, Li-Chun
;
電機工程學系
;
Department of Electrical and Computer Engineering
Because of SDN centralization nature, denial of service (DoS) attacks have become a prominent concern. In the OpenFlow (OF) protocol, the transport layer security (TLS) protocol is recommended to secure the control channel. Unfortunately, the tasks involved in the proper configuration of a secured TLS are very challenging. Even worse, TLS is made an optional mode of communication in OF. As a consequence, some OF-enabled switches and controllers do not adopt TLS. In this paper, we develop a lightweight authentication mechanism, called Hidden Authentication (HiAuth), to protect SDN controller against DoS attacks. HiAuth legitimizes SDN forwarding devices by hiding authentication information into the header of control channel packets. Our experimental results prove that HiAuth is lightweight and can not only mitigate DoS attacks, but also provide high undetectability to the attacker.
HiAuth: Hidden Authentication for Protecting Software Defined Networks
(2019-06-01)
Abdullaziz, Osamah Ibrahiem
;
Wang, Li-Chun
;
Chen, Yu-Jia
;
電機工程學系
;
Department of Electrical and Computer Engineering
Software defined networking (SDN) enables network function programmability for ease of configuration and maintenance, and also allows network administrators to change traffic rules on the fly. However, denial of service (DoS) attacks pose security challenges on the centralized control plane of SDN. Although the transport layer security (TLS) can help secure the control plane, it is computationally intensive, complex to configure, and not mandatory in OpenFlow protocol. In this paper, we present a lightweight authentication solution, called hidden authentication (HiAuth), to protect the SDN controller by hiding the identities of the forwarding devices into the control packets via efficient bitwise operations. HiAuth is the first to incorporate information hiding techniques into OpenFlow to provide security against DoS attacks. HiAuth exploits the IP identification field of IPv4 and the transaction identification field of OpenFlow in two authentication schemes. The experimental results show that HiAuth can effectively mitigate intruder DoS attacks and provide high undetectability to attackers.
ARNAB: Transparent Service Continuity across Orchestrated Edge Networks
(2018-01-01)
Abdullaziz, Osamah Ibrahiem
;
Wang, Li-Chun
;
Chundrigar, Shahzoob Bilal
;
Huang, Kuei-Li
;
電機工程學系
In this paper, we present an architecture for transparent service continuity for cloud-enabled WiFi networks called ARNAB: ARchitecture for traNsparent service continuity viA douBle-tier migration. The term arnab means rabbit in Arabic. It is dubbed for the proposed service architecture because a mobileuser service with ARNAB behaves like a rabbit hopping through the WiFi infrastructure. To deliver continuous services, deploying edge clouds is not sufficient. Users may travel far from the initial serving edge and also perform multiple WiFi handoffs during mobility. To solve this, ARNAB employs a double-tier migration scheme. One migration tier is for user connectivity, and the other one is for edge applications. Our experimental results show that ARNAB can not only enable continuous service delivery but also outperform the existing work in the area of container live migration across edge clouds.
Opportunities and Challenges of Joint Edge and Fog Orchestration
(2018-01-01)
Cominardi, Luca
;
Abdullaziz, Osamah Ibrahiem
;
Antevski, Kiril
;
Chundrigar, Shahzoob Bilal
;
Gdowski, Robert
Pushing contents, applications, and network functions closer to end users is necessary to cope with the huge data volume and low latency required in future 5G networks. Edge and fog frameworks have emerged recently to address this challenge. Whilst the edge framework was more infrastructure-focused and more mobile operator-oriented, the fog was more pervasive and included any node (stationary or mobile), including terminal devices. This article analyzes the opportunities and challenges to integrate, federate, and jointly orchestrate the edge and fog resources into a unified framework.
Lightweight Authentication Mechanism for Software Defined Network using Information Hiding
(2016-01-01)
Abdullaziz, Osamah Ibrahiem
;
Chen, Yu-Jia
;
Wang, Li-Chun
;
電機工程學系
;
Department of Electrical and Computer Engineering
Software defined network (SDN) is an emerging network architecture which offloads the control logic of the network from the underlying forwarding devices to a centralized controller. This centralized control intelligence software defines the behavior of the network. However, the programmability and centralization of the SDN architecture introduce potential security concerns. In this paper, we first investigate the threats of denial of service (DoS) attacks on the SDN control channel. Then, we evaluate the impact of DoS by simulating a DoS attack against the network controller. Our results show that it is possible to exhaust the controller resources in the absence of an authentication mechanism. Finally, we propose a lightweight information hiding authentication mechanism to prevent DoS attacks in the SDN control channel.
AIPISteg: An active IP identification based steganographic method
(2016-03)
Abdullaziz, Osamah Ibrahiem
;
Goh, Vik Tor
;
Ling, Huo-Chong
;
Wong, KokSheik
;
資訊工程學系
IP identification (IPID) is an IP header field which is designed to identify a packet in a communication session. The main purpose of IPID is to recover from IP fragmentation. To the best of our knowledge, most existing IPID based information hiding methods assume that the IPID number is a pseudo random number, which is found to be false. In this paper, we propose a steganographic method by exploiting the IPID field while considering the information from the user data field. First, we analyze the IPID distribution of various operating systems. Subsequently, we put forward a simple data embedding method, which is then refined to mimic the ordinary IPID traffic. Experiments are carried out and the results empirically prove that the proposed method is of high undetectability as compared to the existing IPID based steganographic methods. (C) 2016 Elsevier Ltd. All rights reserved.

學術出版;;Publications

Browse

Filters

Settings

Sort By

Results per page

🏛️國立陽明交通大學機構典藏

Search Results