— The growth rate of the internet exceeds than any other technology which is measured by users an... more — The growth rate of the internet exceeds than any other technology which is measured by users and bandwidth. Internet has been growing at a rapid rate since its conception, on a curve geometric and sometimes exponential. Today, the Internet is moving exponentially in three different directions such as size, processing power, and software sophistication making it the fastest growing technology humankind has ever created. With the rapid growth of internet, there is need to protect the sensitive data from unauthorized access. Cryptography plays a vital role in the field of network security. Currently many encryption algorithms are available to secure the data but these algorithms consume lot of computing resources such as battery and CPU time. This paper mainly focuses on two commonly used symmetric encryption algorithms such as Blowfish and Rejindael. These algorithms are compared and performance is evaluated. Experimental results are given to demonstrate the performance of these algorithms.
—The internet today is being used by millions of users for a large variety of commercial and non ... more —The internet today is being used by millions of users for a large variety of commercial and non commercial purposes. It is controlled by different entities. It is mainly used as an efficient means for communication, entertainment and education. With the rapid growth of internet, there is a need for protecting confidential data. The Internet was however originally designed for research and educational purpose, not for commercial applications.So internet was not designed with security in mind. As the internet grows the existing security framework was not adequate for modern day applications. Cryptography play a vital role in providing security.Lot of research is going on block cipher algorithms. In this paper we present a new 512 bit block cipher named SF Block cipher. The proposed cipher is developed based on design principle known as Substitution permutation network (SP Network). The algorithm is implemented in .NET Framework and MATLAB. Cryptanalysis is carried out in the encrypted file. It was found that the encrypted file with this algorithm is difficult to break.Simulation results shows that the proposed Block cipher has better performance over other algorithms such as AES and Blowfish
—the Internet has instantly evolved into a vast global network in the growing technology. TCP/IP ... more —the Internet has instantly evolved into a vast global network in the growing technology. TCP/IP Protocol Suite is the basic requirement for today's Internet. Internet usage continues to increase exponentially. So network security becomes a growing problem. Even though IPv6 comes with build mechanism IPsec for security, it lacks security in Application layer of TCP/IP protocol suite. IPv6 solves most of the security breaches for IPv4 with the use of IPsec. But IPsec doesn't have any security provision in the application layer. So there is a need for security mechanism. In this paper some of the security flaws of IPv6 are identified and we present a new architecture for TCP/IP protocol suite. Our proposed architecture includes a layer called security layer, which guarantees security to Application layer using a protocol Application layer security protocol (ALSP).
— Network and internet applications are growing rapidly in the recent past. These applications ar... more — Network and internet applications are growing rapidly in the recent past. These applications are used by thousands of users and controlled by different administrative entities. It is mainly used as an efficient means for communication, entertainment and education. With the rapid growth of internet, there is a need for protecting confidential data. The Internet was however originally designed for research and educational purpose, not for commercial applications. So internet was not designed with security in mind. As the internet grows the existing security framework was not adequate for modern day applications. The main reason was due to the lack of security services in the TCP/IP Protocol Suite. The lack of authentication mechanism of TCP/IP Protocol Suite is mainly due to the poor protection mechanism of packets and broadcast nature of the lower layer protocols. Moreover there is no protection for the application layer of the network model. This paper presents the proposed security architecture for the TCP/IP Protocol Suite. I. INTRODUCTION This work aims to investigate a large number of security approaches adopted in the TCP/IP Protocol Suite and to propose a new architecture for the existing model. The first contribution of this work was to provide the security for applications of the application layer protocols Second aspect of the work was to enhance the security for the internet control message protocol which is one of the main protocols that was used by the network managers for troubleshooting the networks. The third and very important aspect of this research was to provide the security for Real Time Applications. The Internet today is being used by billions of users for a large variety of commercial and non commercial purposes. It is controlled by different entities. [1] pointed out that Internet is mainly used as an efficient means for communication, entertainment and education. There is a need for protecting confidential data because of the rapid growth of Internet. The current version of IP Protocol namely IPv6 comes with built in security mechanism called IPSec [2]. IPSec provides security services at the IP layer by enabling a system to select required security protocols to determine the cryptographic algorithms to use for the services and put in place of any cryptographic keys required to provide the security services. But IPSec do not provide any security for applications in application layer. Internet Control Message Protocol attacks is still possible which a major setback of IPv6. The usage of current version of Internet and TCP/IP Suite results in many flaws such as: Spoofing is a situation in which one person or program successfully masquerades as another by falsifying data and thereby gaining an illegitimate advantage. Repudiation is the ability of users to deny that they performed specific actions
Internet Control Message Protocol is a protocol which is mainly used to provide information relat... more Internet Control Message Protocol is a protocol which is mainly used to provide information relating to errors on networked machines. Considering the few controls that IP protocol carries out, it not only allows errors to be corrected but also informs the protocols of neighboring layers of these errors. So, ICMP protocol is used by all routers, who use it to indicate an error (called a Delivery Problem). ICMP error messages are sent over the network in a datagram form, like any other data. So, the error messages themselves can be subject to errors. ICMP messages are used by the network administrators for troubleshooting the networks. Even though this protocol has many advantages, there are some of the flaws such as security,which is a major concern to be considered and to be eliminated. In this paper, we present an existing scenario and provide the authentication mechanism for ICMP messages. We also propose enhanced Packet format for ICMP message in such a way that authentication can be done. Kerberos algorithm is used for authentication mechanism which uses private key encryption method.
Research work provides efficient security which protects network resources from internal and exte... more Research work provides efficient security which protects network resources from internal and external threats. Network virtualization is used to provide users with well-organized, controlled, and safe sharing of the networking resources. It also ensures privacy of data and integrity in Software-defined data center (SDDC) whose infrastructures is virtualized and distributed as a service. SDDC helps to broaden the virtualization concept which makes it more secure. The complete infrastructure is distracted from hardware and implemented via software. One of the core components of SDDC is SDN (Software defined networking) that includes network virtualization. SDN requires the method named Open Flow for the Control plane to communicate with data plane (forwards those incoming packets to the destination). SDN and Open Flow with Virtual LAN are used to concentrate on security issues in data centers. An integration of Software Defined Networking and Open Flow (SDNOF) with VLAN Virtual Server Security (VVSS) architecture is presented to address distinct security issues in virtualized network. The Software defined networking and open flow with VVSS is introduced for more secured protection and to maintain compliance integrity of servers in DCN.
In layered networks, a single failure at a lower layer may cause multiple failures in the upper l... more In layered networks, a single failure at a lower layer may cause multiple failures in the upper layers. As a result, traditional schemes that protect against single failures may not be effective in cross-layer networks. A cross layer network with logical and physical topologies, the survivable logical topology routing problem is to route each link in the logical layer with a path in the physical topology between the end nodes of logical link such that the logical topology remains connected after a physical link fails. In this paper we introduce the problem of maximizing the connectivity of layered networks. We show that connectivity metrices in layered networks have significantly different meaning than these single-layer counter parts. Results that are fundamental to survivable single-layer network design, such as max-flow, min-cut theorem, are no longer applicable to the layered setting. We propose new metrices to measure connectivity in layered network's and analyze their properties. Using this formulation as a basic building block, we present unified MILP formulations to determine a survivable logical topology routing that also satisfies one of four cross-layer metrices: 1) Minimizing the number of logical links to be added to guarantee the existence of survivable logical topology routing; 2) Maximizing the capacity of the logical topology; 3) Maximizing the connectivity of the logical topology after a physical link failure and 4) Maximizing the minimum cross layer cut. After construction of physical and logical link we select number of optimal paths in the survivable network and also find maximum distance in the network layer using Ant colony Optimization (ACO). ACO is one of the bio-inspired mechanisms. ACO is a dynamic and reliable optimization. ACO algorithm reduces the energy consumption. ACO algorithm reduces the energy consumption. It optimizes the routing paths, providing an effective multi-path data transmission to obtain reliable communications in the case of no faults.
Network and internet applications are growing rapidly in the recent past. These applications are ... more Network and internet applications are growing rapidly in the recent past. These applications are used by thousands of users and controlled by different administrative entities. It is mainly used as an efficient means for communication, entertainment and education. With the rapid growth of internet, there is a need for protecting confidential data. The Internet was however originally designed for research and educational purpose, not for commercial applications. So internet was not designed with security in mind. As the internet grows the existing security framework was not adequate for modern day applications. Cryptography plays a vital role in network security. Though, many cryptographic algorithms are implemented by the research community all over the world. But all the algorithms had some limitations such as the algorithms are implemented for specific applications, key size or block size limited to 64,128 and 256 bits. This paper presents various evaluation techniques and performance metrics that can be used to test any cryptographic algorithms. This work will be base for further research work especially in implementing new encryption algorithms.
— The growth rate of the internet exceeds than any other technology which is measured by users an... more — The growth rate of the internet exceeds than any other technology which is measured by users and bandwidth. Internet has been growing at a rapid rate since its conception, on a curve geometric and sometimes exponential. Today, the Internet is moving exponentially in three different directions such as size, processing power, and software sophistication making it the fastest growing technology humankind has ever created. With the rapid growth of internet, there is need to protect the sensitive data from unauthorized access. Cryptography plays a vital role in the field of network security. Currently many encryption algorithms are available to secure the data but these algorithms consume lot of computing resources such as battery and CPU time. This paper mainly focuses on two commonly used symmetric encryption algorithms such as Blowfish and Rejindael. These algorithms are compared and performance is evaluated. Experimental results are given to demonstrate the performance of these algorithms.
—The internet today is being used by millions of users for a large variety of commercial and non ... more —The internet today is being used by millions of users for a large variety of commercial and non commercial purposes. It is controlled by different entities. It is mainly used as an efficient means for communication, entertainment and education. With the rapid growth of internet, there is a need for protecting confidential data. The Internet was however originally designed for research and educational purpose, not for commercial applications.So internet was not designed with security in mind. As the internet grows the existing security framework was not adequate for modern day applications. Cryptography play a vital role in providing security.Lot of research is going on block cipher algorithms. In this paper we present a new 512 bit block cipher named SF Block cipher. The proposed cipher is developed based on design principle known as Substitution permutation network (SP Network). The algorithm is implemented in .NET Framework and MATLAB. Cryptanalysis is carried out in the encrypted file. It was found that the encrypted file with this algorithm is difficult to break.Simulation results shows that the proposed Block cipher has better performance over other algorithms such as AES and Blowfish
—the Internet has instantly evolved into a vast global network in the growing technology. TCP/IP ... more —the Internet has instantly evolved into a vast global network in the growing technology. TCP/IP Protocol Suite is the basic requirement for today's Internet. Internet usage continues to increase exponentially. So network security becomes a growing problem. Even though IPv6 comes with build mechanism IPsec for security, it lacks security in Application layer of TCP/IP protocol suite. IPv6 solves most of the security breaches for IPv4 with the use of IPsec. But IPsec doesn't have any security provision in the application layer. So there is a need for security mechanism. In this paper some of the security flaws of IPv6 are identified and we present a new architecture for TCP/IP protocol suite. Our proposed architecture includes a layer called security layer, which guarantees security to Application layer using a protocol Application layer security protocol (ALSP).
— Network and internet applications are growing rapidly in the recent past. These applications ar... more — Network and internet applications are growing rapidly in the recent past. These applications are used by thousands of users and controlled by different administrative entities. It is mainly used as an efficient means for communication, entertainment and education. With the rapid growth of internet, there is a need for protecting confidential data. The Internet was however originally designed for research and educational purpose, not for commercial applications. So internet was not designed with security in mind. As the internet grows the existing security framework was not adequate for modern day applications. The main reason was due to the lack of security services in the TCP/IP Protocol Suite. The lack of authentication mechanism of TCP/IP Protocol Suite is mainly due to the poor protection mechanism of packets and broadcast nature of the lower layer protocols. Moreover there is no protection for the application layer of the network model. This paper presents the proposed security architecture for the TCP/IP Protocol Suite. I. INTRODUCTION This work aims to investigate a large number of security approaches adopted in the TCP/IP Protocol Suite and to propose a new architecture for the existing model. The first contribution of this work was to provide the security for applications of the application layer protocols Second aspect of the work was to enhance the security for the internet control message protocol which is one of the main protocols that was used by the network managers for troubleshooting the networks. The third and very important aspect of this research was to provide the security for Real Time Applications. The Internet today is being used by billions of users for a large variety of commercial and non commercial purposes. It is controlled by different entities. [1] pointed out that Internet is mainly used as an efficient means for communication, entertainment and education. There is a need for protecting confidential data because of the rapid growth of Internet. The current version of IP Protocol namely IPv6 comes with built in security mechanism called IPSec [2]. IPSec provides security services at the IP layer by enabling a system to select required security protocols to determine the cryptographic algorithms to use for the services and put in place of any cryptographic keys required to provide the security services. But IPSec do not provide any security for applications in application layer. Internet Control Message Protocol attacks is still possible which a major setback of IPv6. The usage of current version of Internet and TCP/IP Suite results in many flaws such as: Spoofing is a situation in which one person or program successfully masquerades as another by falsifying data and thereby gaining an illegitimate advantage. Repudiation is the ability of users to deny that they performed specific actions
Internet Control Message Protocol is a protocol which is mainly used to provide information relat... more Internet Control Message Protocol is a protocol which is mainly used to provide information relating to errors on networked machines. Considering the few controls that IP protocol carries out, it not only allows errors to be corrected but also informs the protocols of neighboring layers of these errors. So, ICMP protocol is used by all routers, who use it to indicate an error (called a Delivery Problem). ICMP error messages are sent over the network in a datagram form, like any other data. So, the error messages themselves can be subject to errors. ICMP messages are used by the network administrators for troubleshooting the networks. Even though this protocol has many advantages, there are some of the flaws such as security,which is a major concern to be considered and to be eliminated. In this paper, we present an existing scenario and provide the authentication mechanism for ICMP messages. We also propose enhanced Packet format for ICMP message in such a way that authentication can be done. Kerberos algorithm is used for authentication mechanism which uses private key encryption method.
Research work provides efficient security which protects network resources from internal and exte... more Research work provides efficient security which protects network resources from internal and external threats. Network virtualization is used to provide users with well-organized, controlled, and safe sharing of the networking resources. It also ensures privacy of data and integrity in Software-defined data center (SDDC) whose infrastructures is virtualized and distributed as a service. SDDC helps to broaden the virtualization concept which makes it more secure. The complete infrastructure is distracted from hardware and implemented via software. One of the core components of SDDC is SDN (Software defined networking) that includes network virtualization. SDN requires the method named Open Flow for the Control plane to communicate with data plane (forwards those incoming packets to the destination). SDN and Open Flow with Virtual LAN are used to concentrate on security issues in data centers. An integration of Software Defined Networking and Open Flow (SDNOF) with VLAN Virtual Server Security (VVSS) architecture is presented to address distinct security issues in virtualized network. The Software defined networking and open flow with VVSS is introduced for more secured protection and to maintain compliance integrity of servers in DCN.
In layered networks, a single failure at a lower layer may cause multiple failures in the upper l... more In layered networks, a single failure at a lower layer may cause multiple failures in the upper layers. As a result, traditional schemes that protect against single failures may not be effective in cross-layer networks. A cross layer network with logical and physical topologies, the survivable logical topology routing problem is to route each link in the logical layer with a path in the physical topology between the end nodes of logical link such that the logical topology remains connected after a physical link fails. In this paper we introduce the problem of maximizing the connectivity of layered networks. We show that connectivity metrices in layered networks have significantly different meaning than these single-layer counter parts. Results that are fundamental to survivable single-layer network design, such as max-flow, min-cut theorem, are no longer applicable to the layered setting. We propose new metrices to measure connectivity in layered network's and analyze their properties. Using this formulation as a basic building block, we present unified MILP formulations to determine a survivable logical topology routing that also satisfies one of four cross-layer metrices: 1) Minimizing the number of logical links to be added to guarantee the existence of survivable logical topology routing; 2) Maximizing the capacity of the logical topology; 3) Maximizing the connectivity of the logical topology after a physical link failure and 4) Maximizing the minimum cross layer cut. After construction of physical and logical link we select number of optimal paths in the survivable network and also find maximum distance in the network layer using Ant colony Optimization (ACO). ACO is one of the bio-inspired mechanisms. ACO is a dynamic and reliable optimization. ACO algorithm reduces the energy consumption. ACO algorithm reduces the energy consumption. It optimizes the routing paths, providing an effective multi-path data transmission to obtain reliable communications in the case of no faults.
Network and internet applications are growing rapidly in the recent past. These applications are ... more Network and internet applications are growing rapidly in the recent past. These applications are used by thousands of users and controlled by different administrative entities. It is mainly used as an efficient means for communication, entertainment and education. With the rapid growth of internet, there is a need for protecting confidential data. The Internet was however originally designed for research and educational purpose, not for commercial applications. So internet was not designed with security in mind. As the internet grows the existing security framework was not adequate for modern day applications. Cryptography plays a vital role in network security. Though, many cryptographic algorithms are implemented by the research community all over the world. But all the algorithms had some limitations such as the algorithms are implemented for specific applications, key size or block size limited to 64,128 and 256 bits. This paper presents various evaluation techniques and performance metrics that can be used to test any cryptographic algorithms. This work will be base for further research work especially in implementing new encryption algorithms.
![International Journal of Advance Research in Computer Science and Management Studies [IJARCSMS] ijarcsms.com related author profile picture](https://0.academia-photos.com/4738535/2006887/71427192/s200_international_journal_of_advance_research_in_computer_science_and_management_studies_ijarcsms_.ijarcsms.com.jpg)
Uploads
Papers by Anand Kumar