Nowadays mobility is a field of great importance. The fact of travelling or moving should not mean the rupture of the connection to the Internet. And the current objective is not only to be world-wide connected, it is also to be it always through the best available connection (ABC). It means the need to perform vertical handover to switch between different networks, while maintaining the same Internet connection. All this has to be done in a transparent way to the user. In order provide the highest Quality of Experience some tools are needed to enable checking the status and performance of the different available networks, measuring and collecting statistics, in order to take advantage of each one of them. This thesis presents the theoretical base for a measurement module by describing and analysing different metrics, with special emphasis on delay jitter, collecting and comparing different methods, and discussing their main characteristics and suitability for this goal.

Available Bandwidth Estimation Techniques and Tools (ABETTs) have recently been envisioned as a supporting mechanism in areas such as compliance of service level agreements, network management, traffic engineering and real-time resource provisioning, flow and congestion control, construction of overlay networks, fast detection of failures and network attacks, and admission control. However, it is unknown whether current ABETTs can run efficiently in any type of network, under different network conditions, and whether they can provide accurate available bandwidth estimates at the timescales needed by these applications. This dissertation investigates techniques and tools able to provide accurate, low overhead, reliable, and fast available bandwidth estimations. First, it shows how it is that the network can be sampled to get information about the available bandwidth. All current estimation tools use either the probe gap model or the probe rate model sampling techniques. Since the last technique introduces high additional traffic to the network, the probe gap model is the sampling method used in this work. Then, both an analytical and experimental approach are used to perform an extensive performance evaluation of current available bandwidth estimation tools over a flexible and controlled testbed. The results of the evaluation highlight accuracy, overhead, convergence time, and reliability performance issues of current tools that limit their use by some of the envisioned applications. Single estimations are affected by the bursty nature of the cross traffic and by errors generated by the network infrastructure. A hidden Markov model approach to end-to-end available bandwidth estimation and monitoring is investigated to address these issues. This approach builds a model that incorporates the dynamics of the available bandwidth. Every sample that generates an estimation is adjusted by the model. This adjustment makes it possible to obtain acceptable estimation accuracy with a small number of samples and in a short period of time. Finally, the new approach is implemented in a tool called Traceband. The tool, written in ANSI C, is evaluated and compared with Pathload and Spruce, the best estimation tools belonging to the probe rate model and the probe gap model, respectively. The evaluation is performed using Poisson, bursty, and self-similar synthetic cross traffic and real traffic from a network path at University of South Florida. Results show that Traceband provides more estimations per unit time with comparable accuracy to Pathload and Spruce and introduces minimum probing traffic. Traceband also includes an optional moving average technique that smooths out the estimations and improves its accuracy even further.

No description available.

Networks not employing destination-side source address validation (DSAV) expose themselves to a class of pernicious attacks which could be prevented by filtering inbound traffic purporting to originate from within the network. In this work, we survey the pervasiveness of networks vulnerable to infiltration using spoofed addresses internal to the network. We issue recursive Domain Name System (DNS) queries to a large set of known DNS servers world-wide using various spoofed-source addresses. In late 2019, we found that 49% of the autonomous systems we tested lacked DSAV. After a large-scale notification campaign run in late 2020, we repeated our measurements in early 2021 and found that 44% of ASes lacked DSAV--though importantly, as this is an observational study, we cannot conclude causality. As case studies illustrating the dangers of a lack of DSAV, we measure susceptibility of DNS resolvers to cache poisoning attacks and the NXNS attack, two attacks whose attack surface is significantly reduced when DSAV in place. We discover 309K resolvers vulnerable to the NXNS attack and 4K resolvers vulnerable to cache poisoning attacks, 70% and 59% of which would have been protected had DSAV been in place.

No description available.

No description available.

This thesis deals with designing the probe used for measuring network flows. It contains theoretical analysis of network measurment topic, description of algorithms and principles used for network flow measurement. Emphasis on the probe architecture lies on efficient indexing algorithm and flow record flexibility, such that user is able to define format of flow record.

Wireless and Mobile (WAM) networks have been evolving and extending their reach to more aspects of human activity for years. As such, networks have been deployed in wider and broader physical range and circumstances, so that end-to-end contemporaneous connectivity is no longer guaranteed. To address this connectivity challenge, recent research work on Disruption Tolerant Network (DTN) paradigm uses intermediate nodes to store data while waiting for transfer opportunities towards the destination. However, this work differs from conventional research work in WAM, e.g., Mobile Ad hoc Network (MANET) routing, since the connectivity assumptions are so different. In this thesis, we present the WAM Continuum framework which aims to provide a unified treatment of wireless and mobile networks. The framework is based on the construction of a WAM continuum that defines the space of networks and a corresponding formalism by which one can group related WAMs into classes that map into design and operational regimes. We show a specific instantiation of this framework that classifies networks according to their path properties and apply it to networks described by traces from both real platforms and synthesized mobility models. Effect of introducing controllable node mobility, e.g., message ferrying, is quantitatively evaluated in our study. We extend this framework in a manner that enables the classification of a WAM's energy "sufficiency" depending on a combination of the network connectivity properties, available energy, and power management scheme. As another extension under the same WAM continuum framework, this thesis studies the interaction of mobile computation collaboration and underlying network connectivity characteristics. Classification results from our framework indicate that heterogeneous connectivity may exist in WAM networks. In such cases, protocols from different routing paradigms need to work together to provide effective data communication. We focus on integration of MANET routing and message ferrying in clustered DTNs. A hybrid routing approach is developed in which both MANET routing and message ferrying are used to explore available connectivity in clusters via gateway nodes. Different data aggregation as well as transmission scheduling algorithms are proposed. To achieve better performance, we also study the ferry route design problem in the clustered DTNs and develop three route design algorithms. This thesis work also includes our experience to address challenges associated with new data communication requirements in oil field operations at remote areas. Backed up by a comprehensive measurement study of long range data links provided by satellite and cellular services, we develop a WAM network where multiple data links are jointly used to achieve an effective data communication solution in the challenged environment.

This thesis deals with an optimization of Triple play services and security in optical access networks. The first chapter provides theory basics which are necessary for results evaluation. The second chapter describes optical access networks with their parameters such as transmission speed, split ratio, line code, bit error rate etc. defined by ITU. Next chapter summaries the current state in optical networks construction field according to the European Union developing plan. The practical part of this thesis is divided into several subchapters. The significant part of the thesis is dedicated to the security of passive optical networks and design of proper security model for current networks. For this purpose, the unique parameter time propagation Tprop, with the novel security model was developed. Next part of the thesis provides an analysis of control traffic and data traffic in the gigabit passive optical networks. For a novel algorithm in activation process in gigabit passive optical networks the measurement results were used. The novel algorithm decreases the total time needed for this process. The last but one subchapter deals with an ILP model for Triple Play services. The last subchapter contains the own implementation of the transmission converge layer in VPIphotonics simulation tool.

As the Internet continues to evolve, without providing any performance guarantees or explicit feedback to applications, the only way to infer the state of the network and to dynamically react to congestion is through end-to-end measurements. The emph{available bandwidth} (avail-bw) is an important metric that characterizes the dynamic state of a network path. Its measurement has been the focus of significant research during the last 15 years. However, its estimation remained elusive for several reasons. The main contribution of this thesis is the development of the first estimation methodology for the avail-bw in a network path using end-to-end measurements. In more detail, our first contribution is an end-to-end methodology, called SLoPS, to determine whether the avail-bw is larger than a given rate based on the sequence of one-way delays experienced by a periodic packet stream. The second contribution is the design of two algorithms, based on SLoPS, to estimate the mean and the variation range, respectively, of the avail-bw process. These algorithms have been implemented in two measurement tools, referred to as PathLoad and PathVar. We have validated the accuracy of the tools using analysis, simulation, and extensive experimentation. Pathload has been downloaded by more than 6000 users since 2003. We have also used PathVar to study the variability of the avail-bw process as a function of various important factors, including traffic load and degree of multiplexing. Finally, we present an application of avail-bw estimation in video streaming. Specifically, we show that avail-bw measurements can be used in the dynamic selection of the best possible overlay path. The proposed scheme results in better perceived video quality than path selection algorithms that rely on jitter or loss-rate measurements.