Beware: NAT Traversal is a Simple and Efficient Approach to Open Firewall Holes

NAT traversal techniques allow processes with private, non-routable IP addresses to communicate with other processes outside the network secured limits. Techniques such as UDP Hole Punching have been standardized by the IETF, and using tunnels based on those techniques it is easy to allow application processes on top of any transport protocol, including TCP, to both start and receive packets from the Internet across NAT devices. However, as a side effect those techniques also freely proceed through firewalls. In this work we describe how it is possible to configure any server running on any port (no firewall configuration required) to establish connections initiated at arbitrary Internet clients, making unauthorized services easily available. We also show that the process is lightweight, in particular after the initial setup is concluded, thus virtually supporting any type of unauthorized applications.

Download Full-text

Clean-Slate Information-Centric Publish Subscribe Networks

Streaming Media with Peer-to-Peer Networks ◽

10.4018/978-1-4666-1613-4.ch013 ◽

2012 ◽

pp. 322-349

Author(s):

Laura Carrea ◽

Raul Almeida

Keyword(s):

Internet Usage ◽

The Internet ◽

Application Layer ◽

Internet Architecture ◽

Network Layer ◽

Ip Addresses ◽

And Topology ◽

The Eu ◽

The Way

The Internet architecture of today does not seem suited to the current Internet usage, as the application layer is more and more content-centric, while the network layer is ossified around the IP concept. In this chapter, the authors explore a redefinition of the whole Internet architecture where nothing is taken for granted, especially IP addresses. The review focuses on the forwarding and topology components of the EU FP7 PSIRP architecture and on a few of the problematic issues and the ongoing discussions around a pioneering clean-slate design of the way to organize networks.

Download Full-text

The Transport-Level Requirements of the Internet-Based Streaming

Encyclopedia of Information Communication Technology ◽

10.4018/978-1-59904-845-1.ch102 ◽

2009 ◽

pp. 775-781

Author(s):

Dávid Tegze ◽

Gábor Hosszú

Keyword(s):

Congestion Control ◽

Traffic Analysis ◽

The Internet ◽

Transport Protocol ◽

Control Schemes ◽

One To One ◽

Uniform Manner

This article presents the comparison of different transport level congestion control schemes, including variants of the TCP (Postel, 1981). The protocol mechanisms, implemented in various protocols are hard to investigate in a uniform manner (Hosszú, 2005); therefore, the simulator SimCast (Simulator for multicast) is developed for traffic analysis of the unicast (one-to-one communication) and multicast (one-to-many communication) streams. In this article, the TCP and other transport protocol mechanisms will be compared using the SimCast simulator (Orosz & Tegze, 2001). The simulated results are presented through examples.

Download Full-text

Pricing and Efficiency in the Market for IP Addresses

American Economic Journal Microeconomics ◽

10.1257/mic.20130168 ◽

2015 ◽

Vol 7 (3) ◽

pp. 1-23 ◽

Cited By ~ 1

Author(s):

Benjamin Edelman ◽

Michael Schwarz

Keyword(s):

Allocative Efficiency ◽

The Internet ◽

Social Efficiency ◽

Ip Address ◽

Ip Addresses ◽

Routing Table ◽

Market Rules ◽

Market Rule

We consider market rules for transferring IP addresses, numeric identifiers required by all computers connected to the Internet. Transfers usefully move resources from lowest- to highest-valuation networks, but transfers tend to cause socially costly growth in the Internet's routing table. We propose a market rule that avoids excessive trading and comes close to achieving social efficiency. We argue that this rule is feasible despite the limited powers of central authorities. We also offer a framework for reasoning about future prices of IP addresses, then explore the role of rentals in sharing information about the value of IP address and assuring allocative efficiency. (JEL D47, D82, D85, L86)

Download Full-text

An image transport protocol for the Internet

Proceedings 2000 International Conference on Network Protocols ◽

10.1109/icnp.2000.896305 ◽

2002 ◽

Cited By ~ 7

Author(s):

S. Raman ◽

H. Balakrishnan ◽

M. Srinivasan

Keyword(s):

The Internet ◽

Transport Protocol

Download Full-text

Packet Filtering Based On Differentiated Services Code Point For DHCP Starvation Attacks Prevention

Journal Pekommas ◽

10.30818/jpkm.2019.2040204 ◽

2019 ◽

Vol 4 (2) ◽

pp. 137 ◽

Cited By ~ 1

Author(s):

Nfn Sarip ◽

Arief Setyanto

Keyword(s):

Wireless Lan ◽

Easy Access ◽

Small Scale ◽

The Internet ◽

Security Threat ◽

Ip Address ◽

Packet Filtering ◽

Ip Addresses ◽

Effectiveness And Efficiency ◽

Use Of The Internet

The use of the internet today has become a necessity, the most commonly used media to connect to the internet is a Wireless LAN network. For easy access to the network, DHCP service become a standard feature that must exist, because ordinary users no longer need to think about procedures for configuring IP addresses, all of which have been done automatically by the DHCP service. But it turns out that there is a security threat to DHCP service, namely DHCP Starvation attacks that can be exhausting the availability of IP addresses in DHCP service so that the configuration of IP address automatically can no longer be done on the client. Various methods such as authentication, cryptography, and machine learning are used by researchers in preventing DHCP Starvation attacks, but the issue of effectiveness and efficiency still opens up further research opportunities. In this research, packet filtering methods based on DSCP code applied to the Netfilter system are used to do prevention of DHCP Starvation attacks, this method has proven to be very effective in making prevention and more efficient when applied on small scale wireless networks such as at office networks and internet cafe.

Download Full-text

R̶e̶s̶i̶s̶t̶a̶n̶c̶e̶ censorship is futile

First Monday ◽

10.5210/fm.v19i11.5525 ◽

2014 ◽

Cited By ~ 6

Author(s):

Zubair Nabi

Keyword(s):

Social Media ◽

Side Effect ◽

State Level ◽

Authoritarian Regimes ◽

The Internet ◽

Citizen Journalism ◽

Access To Information ◽

The World ◽

Online Activism ◽

Using Data

The Internet has become the new battle ground between authoritarian regimes and ordinary individuals who want unimpeded access to information. The immense popularity of online activism and citizen journalism enabled by social media has instigated state level players to partially or completely block access to the Internet. In return, individuals and organizations have been employing various anti-censorship tools to circumvent these restrictions. In this paper, we claim that censorship is futile as not only has it been ineffective in restricting access, it has also had the side effect of popularising blocked content. Using data from Alexa Web rankings, Google Trends, and YouTube Statistics, we quantify the ineffectiveness of state level censorship in Pakistan and Turkey and highlight the emergence of the Streisand Effect. We hope that our findings will, a) prove to governments and other players the futility of their actions, and b) aid citizens around the world in using legal measures to counteract censorship by showing its ineffectiveness.

Download Full-text

Providing Information Centricity in Today’s Internet via Software-Defined Networking and In-Network Processing

PIK - Praxis der Informationsverarbeitung und Kommunikation ◽

10.1515/pik-2017-0002 ◽

2016 ◽

Vol 39 (3-4) ◽

Author(s):

Tim Gerhard ◽

Dennis Schwerdel ◽

Paul Müller

Keyword(s):

Service Providers ◽

Content Delivery ◽

Global Network ◽

The Internet ◽

Transport Protocol ◽

Content Delivery Networks ◽

Underlying Network ◽

Delivery Networks ◽

Application Developers ◽

Or Applications

AbstractThe Internet is a successful network that connects people all over the world. However, it has some fundamental architectural problems which require application developers and service providers to spend a tremendous effort in combating these. Examples for these efforts are content delivery networks or mobile TCP. Thus, it can be said that the Internet is currently not fulfilling the requirements on the global network anymore. The Internet of the future, or its replacement, must solve these problems.There are multiple clean-slate approaches for information-centric networking. However, they are inherently incompatible to the Internet or applications building on it.This work presents a novel resource transport protocol that is optimized for detection by software-defined networks and may be re-routed to in-network processors. Furthermore, it is shown how this protocol can be used to support concepts of ICN even in today’s Internet. Moreover, the resource format that is used in this work is independent from the underlying network, resulting in possible reuse in other networks as well. Applications and protocols building on this resource format can thus easily be re-used in clean-slate networks like NDN.

Download Full-text

An IoT based Weather Monitor System for Drying Clothes

International Journal for Research in Applied Science and Engineering Technology ◽

10.22214/ijraset.2021.34666 ◽

2021 ◽

Vol 9 (VI) ◽

pp. 2473-2478

Author(s):

Saranya K S

Keyword(s):

The Internet ◽

Transport Protocol ◽

Monitor System ◽

Time Data ◽

Software Application ◽

Real Time Data ◽

Weather Parameters ◽

The Right ◽

Dry Out ◽

The Internet Of Things

A growing demand for integrated smarter and faster techniques to make work easier and productive leads to the advancement of technologies. This paper entitled “AN IOT BASED WEATHER MONITOR SYSTEM FOR DRYING CLOTHES” proposes a smart way of monitoring the area where we dry out our clothes and upload the data over IoT. This proposed module consists of an IoT based framework that effectively observes the change in weather using sensors, Application that displays weather parameters such as temperature, humidity and clothes moisture obtained from the sensors to cloud by implementing message queuing telemetry transport protocol. The proposed system is portable, affordable and the data can be accessed at any instant. The Internet of Things is implemented to make informed decisions and to optimize the experience of the residents by providing them with real time data and sending customized alert notifications via software application to the right person. The clients can subscribe to the application and get the updates from the implemented system in their smartphone.

Download Full-text