206504813
Effective Filtering Scheme against RREQ Flooding Attack in Mobile Ad Hoc Networks
In Mobile Ad hoc Networks (MANET), various types of Denial of Service Attacks (DoS) are possible because of the inherent limitations of its routing protocols. The attack of initiating / forwarding fake Route Requests (RREQs) can lead to hogging of network resources and hence denial of service to genuine nodes. This type of attack is hard to detect since malicious nodes mimic normal nodes in all aspects except that they do route discoveries much more frequently than the other nodes. A distrusted filtering mechanism is proposed to mitigate such situations and reduce the loss of throughput. The proposed mechanism could prevent this specific kind of DoS attack and does not use any additional network bandwidth.
9713230
A Direction to Avoid Re-encryption in Cryptographic File Sharing
Almost all cryptographic file sharing systems need reencryption when the sharing was revoked. These systems differ from each other only in the timing of re-encryption. As re-encryption is an expensive operation, it is significant to avoid re-encryption. The purpose of this paper is to advise a direction to avoid re-encryption and facilitate file sharing in cryptographic file sharing system. A Black-box model is set up to achieve this objective. In the model, FPGA or ASIC chips are used to act as the black-box as they have been extensively researched and applied in cryptography. Some applications of FPGA and ASIC in cryptography are detailed in this paper. Their feasibility to be functioned as the black-box is discussed. Also a software implementation on FPGA is attached with tested and effective performance.
17199895
An Active Storage System for High Performance Computing
Traditionally, active storage devices execute custom application code on large amounts of data by utilizing the unused processing power of the storage nodes. For computation-intensive applications, the performance might be quite low due to insufficient processing power on the storage devices. In this paper we present a reconfigurable computing solution that can provide flexible, high-performance processing capabilities for the storage nodes. We have made a change over the existing active storage framework for object-based storage device by off loading computation-intensive request-driven services to a reconfigurable hardware accelerator. In the experiment, we use two applications (AES encryption and FFT) as the case studies, and the results show that the reconfigurable computing-based system can dramatically increase the performance comparing with the traditional software-based active storage systems.
8751830
Power-Modulated Challenge-Response Schemes for Verifying Location Claims
Location information should be verifiable in order to support new computing and information services. In this paper, we adapt the classical challenge-response method for authentication to the task of verifying an entity's location. Our scheme utilizes a collection of transmitters, and adapts their power allocations to verify a user's claimed location. This strategy, which we call power-modulated challenge response, is able to be used with existing wireless sensor networks, and we present three variations. First, we propose a direct method, where some transmitters are selected to send "challenges" that the claimant node should be able to witness based on its claimed location, and for which the claimant node must correctly respond in order to prove its location. Second, we reverse the strategy by presenting an indirect method, where some transmitters send challenges that the claimant node should not be able to witness. Finally, we present a signal strength based method, where the node responds with its received signal strength and thereby provides improved location verification. To evaluate our schemes, we examine different adversarial models for the claimant, and characterize the performance of our power-modulated challenge response schemes under these adversarial models.
16765186
Insider DoS Attacks on Epidemic Propagation Strategies of Network Reprogramming in Wireless Sensor Networks
Network reprogramming is a crucial service in wireless sensor networks (WSNs) that relies on epidemic strategy for spreading software updates by just having a local view of the networks. Securing the process of network reprogramming is essential in some certain WSNs applications, state-of-the-art secure network reprogramming protocols for WSNs aim for the efficient source authentication and integrity verification of code image, however, due to the resource constrains of WSNs, existing secure network reprogramming protocols are vulnerable to Denial of Service (DoS) attacks when sensor nodes can be compromised (insider DoS attacks). In this paper, we identify different types of DoS attacks exploiting the epidemic propagation strategies used by Deluge and propose corresponding analysis models to attempt to quantify the cost of these attacks damage. Simulation further shows the impact of insider DoS attacks on network reprogramming in WSNs.
15564677
Handover Latency of MIPv6 Implementation in Linux
Mobile IPv6 (MIPv6) is proposed to enable network applications to continuously operate at the required quality of service in the wire or wireless IP network. Handover latency of MIPv6 is the main cause of packet loss and performance degradation and is too long for real-time and throughput-sensitive applications. Enhancement of basic MIPv6 with respect to handover latency has been studied widely. A L3 handover procedure can be divided into four phases: Movement Detection, CoA Configuration, Home agent Registration and Route Optimization. The latencies in different handover phases have been measured in an operated wireless LAN (WLAN) in order to determine the performance bottleneck of handover. The effect of handover latency on the sliding window of TCP and application layer protocol is also parsed with experiment. Further more, we modify the MIPv6 implementations of Linux on mobile node and home agent to verify the potential of performance improvement for MIPv6 protocol. The experiment result can help the enhancement of MIPv6 and application development.
17429523
A Novel Trust-based Cooperative Node Selection Scheme in Wireless Sensor Networks
For communication between the cluster head node (CHN) and the distant data fusion center (DFC) with the cooperation of intra-cluster nodes in wireless sensor networks (WSNs), reliable handling of packets by the cooperative node (CN) is difficult to ensure. In this paper, we propose a novel CN selection scheme based on trust for WSNs. This scheme can choose one of high trust nodes to assist in the transmission of CHN, which aims to improve the transmission performance over cooperative communication in the presence of potential malicious nodes. First, we establish a trust model to improve the reliability of transmission by CN in WSNs, which is based on both the direct trust and the indirect trust of nodes. Then the CHN selects a node based on the proposed trust model to aid the CHN in transmission. Simulation results show that the proposed scheme can mitigate the impact of the potential malicious nodes on transmission performance and the simulation results also demonstrate the efficiency of the proposed scheme.
17620967
Research on AI Planning Based Modeling Method for Area Traffic Signal Control
In this paper an area signal control model based on temporal planning is presented. Every activity of area signal control is modeled using planning domain definition language, and then the domain model of area signal control is established. Aiming at the representation problem of resource and time in the area signal control model, we extended the basic activity model by adding resource constraint and temporal constraint, and temporal planning based domain model for area signal control is established finally.