<link rel="stylesheet" href="styles.cf390c6bfbe7555f.css"> Skip to main content

學術出版;;Publications

Permanent URI for this communityhdl:11536/1

收集所有交通大學研究人員與學生個人或團體所發表之各項學術著作,涵蓋期刊論文、教師專書、學位論文等項。;;Collections of Publications of NCTU Researchers and Students Like Journal Papers and Thesis.

Browse

🏛️國立陽明交通大學機構典藏

Search Results

Now showing 1 - 10 of 56
  • Item type:Item,
    PIM-Compliant SDN-Enabled IP Multicast Service
    (2018-01-01)
    Yen, Li-Hsing
    ;
    Wang, Ming-Hung
    ;
    Wu, Song-Yu
    ;
    Tseng, Chien-Chao
    ;
    資訊工程學系
    Software-defined networking (SDN) has been a promising solution to multicast streaming data due to its scalability and manageability. However, offering a multicast service that spans a large geographical area is still challenging because we still lack a unified multicast scheme that interconnects independent SDN-managed networks and bridges the service between SDN-based networks and the rest of the Internet. This paper proposes a solution that integrates SDN, CORD, and PIM technologies. We provides preliminary performance evaluation results. This work serves as a stepping stone to the ultimate goal of multicast as a service.
  • Item type:Item,
    P4MT: Multi-Tenant Support Prototype for International P4 Testbed
    (2019-01-01)
    Chung, Buck
    ;
    Tseng, Chien-Chao
    ;
    Chen, Jim Hao
    ;
    Mambretti, Joe
    ;
    資訊工程學系
    To realize P4 language benefits: "Protocol Independent, Target Independent, Field Reconfigurable" [1] in a network research and development environment, a few P4 research institutions around the world formed a partnership to design and implement the international P4 Experimental Networks (Figure 1). The participating institutions can share distributed P4 resources over international research and education networks, as well as initiate international P4 research collaboration projects. Initial network scenarios in this research testbed are Software-Defined Network Exchanges (SDXs), Network and Cloud Testbed Networks, Science Networks, and Campus Research Networks. These four network scenarios require multi-tenant support. Current P4Runtime specifications include a Multi-Controller design for twofold: Control Plane Partition and Redundancy [2]. However, the current P4Runtime does not implement Control Plane partition to support multi-tenant service on a switch. This project modified the current design to support a provider and multiple tenant model for the four international P4 Experimental Networks (i-P4EN) scenarios and other applications.
  • Item type:Item,
    A User Authentication Scheme Using Physiological and Behavioral Biometrics for Multitouch Devices
    (2014-01-01)
    Koong, Chorng-Shiuh
    ;
    Yang, Tzu-I
    ;
    Tseng, Chien-Chao
    ;
    資訊工程學系
    ;
    Department of Computer Science
    With the rapid growth of mobile network, tablets and smart phones have become sorts of keys to access personal secured services in our daily life. People use these devices to manage personal finances, shop on the Internet, and even pay at vending machines. Besides, it also helps us get connected with friends and business partners through social network applications, which were widely used as personal identifications in both real and virtual societies. However, these devices use inherently weak authentication mechanism, based upon passwords and PINs that is not changed all the time. Although forcing users to change password periodically can enhance the security level, it may also be considered annoyances for users. Biometric technologies are straightforward because of the simple authentication process. However, most of the traditional biometrics methodologies require diverse equipment to acquire biometric information, which may be expensive and not portable. This paper proposes a multibiometric user authentication scheme with both physiological and behavioral biometrics. Only simple rotations with fingers on multitouch devices are required to enhance the security level without annoyances for users. In addition, the user credential is replaceable to prevent from the privacy leakage.
  • Item type:Item,
    A Bandwidth-sharing Reservation Scheme to Support QoS for Network Mobility
    (2006-01-01)
    Wang, Jui-Tang
    ;
    Hsu, Yuan-Ying
    ;
    Tseng, Chien-Chao
    ;
    資訊工程學系
    ;
    Department of Computer Science
    A NEtwork that is MObile (NEMO) usually consists of at least one Mobile Router (MR) attached to the infrastructure to manage all external communication for this moving network. Users inside a NEMO might also require quality of services (QoS) guarantee while accessing the Internet via a mobile device. In this paper, we propose a Bandwidth-sharing Reservation (BSR) scheme so that a NEMO can support QoS services. The proposed BSR scheme establishes a bandwidth sharing reservation tunnel for all NEMO nodes to efficiently utilize external bandwidth of MR, and it makes advance reservations at neighboring networks to solve the mobility problem. Three reservation adjustment policies are designed to further improve bandwidth utilization. Both mathematical analysis and simulation results show that the proposed BSR scheme can significantly increase bandwidth utilization and decrease handoff blocking rate while providing QoS services to NEMO nodes in movement.
  • Item type:Item,
    An Autoblocking Mechanism for Firewall Service
    (2017-01-01)
    Fu, Shan-Jung
    ;
    Hsu, Huai-Wen
    ;
    Kao, Yi-Chih
    ;
    Tsai, Shi-Chun
    ;
    Tseng, Chien-Chao
    A distributed denial-of-service (DDoS) attack could cause the incoming connections per second exceeding the capacity of the firewall device and the network system might be paralyzed. By analyzing the syslog of firewall, we design an effective mechanism to block malicious source IPs automatically from the router. We have undergone a field trial on campus for two years. The collected data shows that our approach significantly reduces suspicious traffic and improve the stability of overall network service.
  • Item type:Item,
    SDN-enabled Session Continuity for Wireless Networks
    (2017-01-01)
    Chen, Wei-Wen
    ;
    Yen, Li-Hsing
    ;
    Chuo, Chia-Lin
    ;
    Heish, Ting-Hsuan
    ;
    Tseng, Chien-Chao
    All active sessions of an ordinary host will be broken if the host changes its IP address as a result of migrating to a new subnet. Traditional solutions toward this problem either need modifying mobile hosts or create tunnels that cause inefficient triangle routing. SDN-based mobility schemes, on the other hand, focus on handover latency reduction or fast packet redirection after handover. There is no SDN-based approach that handles autonomous IP address changes by mobile hosts. As a remedy, we propose SDN-enabled Session Continuity (SDN-SC), as an SDN-based mobility management mechanism that retains session for hosts roaming across subnets in an SDN network. Particularly, SDN-SC suppresses possible address re-configurations with techniques such as gateway spoofing and DHCP lease renewal for mobile hosts away from home. We studied the performance of SDN-SC and compared it with that of MIPv4 and PMIPv6. The results show that SDN-SC outperforms both MIPv4 and PMIPv6 in terms of handover latency.
  • Item type:Item,
    Role-based Campus Network Slicing
    (2016-01-01)
    Chen, Chien-Hsin
    ;
    Chen, Chien
    ;
    Lu, Ssu-Hsuan
    ;
    Tseng, Chien-Chao
    ;
    資訊工程學系
    The Internet has evolved greatly in this decade. For economic benefits, the management of Internet networks needs to adapt to mass changes without huge modifications in hardware and software. Especially in campus networks, there are a variety of users and devices with different Quality of Service (QoS) requirements and management policies. Software-defined networking (SDN) decouples the data and control planes. The separated control plan resides on a centralized controller to make networks easier to manage. In this paper, a role-based SDN campus network slicing is proposed by utilizing an authentication controller and the virtualization technology of FlowVisor to divide the campus network into several virtual networks according to the types of users. However, the mapping between the devices' MAC addresses and the users' roles results in a heavy loading problem on FlowVisor. Therefore, a VLAN-based slicing is introduced in this framework to offload the workload of FlowVisor for classifying packets into corresponding slices. Packets are appended with VLAN tags for recognizing types of users to lower the overhead of FlowVisor. Analyses of experimental results show that compared with MAC-based slicing, VLAN-based slicing can reduce the flow setup latency by 14% to 60% depending on the number of devices.
  • Item type:Item,
    Adaptive RSU re-routing under delay constraint in multi-hop vehicular networks
    (2016)
    Wang, Kuo-Lung
    ;
    Wang, Tsan-Pin
    ;
    Tseng, Chien-Chao
    ;
    資訊工程學系
    ;
    Department of Computer Science
    Vehicular wireless networks (VWNs) offer wireless multi-hop communications between vehicles and roadside units (RSUs). A multi-hop wireless network with carry-and-forward routing may suffer from longer delay in packet delivery. However, the applications may demand stringent delay requirement in multi-hop VWNs. Therefore, this paper proposes an adaptive RSU re-routing strategy to alter the current associated RSU to the best RSU under delay or throughput constrains for applications in multi-hop VWNs. Performance results show that the proposed strategy is able to adaptively select a suitable packet size for the trade-off between delay and throughput to satisfy the diverse requirements of applications in multi-hop VWNs.
  • Item type:Item,
    RAKA: Revocable Authenticated Key Agreement System for Mobile Social Networks
    (2016-05)
    Ho, Tzu-Hsin
    ;
    Shieh, Shiuhpyng Winston
    ;
    Tseng, Chien-Chao
    ;
    資訊工程學系
    ;
    Department of Computer Science
    Mobile social networks (MSNs) provide users with potential indirect relationships such as friends of friends and similar transitive relationships. However, adversaries may be involved in potential relationships, the trustworthiness of the relationships must be ensured. Thus, the disclosure of private information must be well controlled, and users have to be authenticated. In this paper, we propose a revocable authenticated key agreement system (RAKA), which does not require intensive computation for authentication in MSNs. RAKA not only provides a simple rekeying process but also aggregates multiple successive private key update operations into a single rekeying process. The proposed revocation method incurs low communication overhead on mobile devices using a single message broadcast. RAKA is proved to be resilient against malicious attacks.
  • Item type:Item,
    OpenNet: A Simulator for Software-Defined Wireless Local Area Network
    (2014)
    Chan, Min-Cheng
    ;
    Chen, Chien
    ;
    Huang, Jun-Xian
    ;
    Kuo, Ted
    ;
    Yen, Li-Hsing
    This study is motivated by a plan to install a software-defined wireless local area network (SDWLAN) on campus, which possesses a desired property that both data flow and device behaviors can be software-definable. Because the installation involves hundreds of access points, we must conduct simulations beforehand to verify the design and scalability of the target system. However, existing SDN simulator like Mininet does not support modeling of wireless channel and mobility. On the other hand, common network simulator like ns-3 only has limited support for software-defined controllers and does not fully implement handover process. We thus develop OpenNet, which connects Mininet to ns3 to enjoy both Mininet\'s advantage of controller compatibility and ns-3\'s ability in the wireless/mobility modeling. OpenNet also complements ns-3 by adding probe mechanism, which is missing in the current ns-3 implementation. Our simulation result demonstrates the effectiveness of OpenNet.