Changes between Version 1 and Version 2 of FirstGenBrooks


Ignore:
Timestamp:
02/08/12 17:32:27 (7 years ago)
Author:
kccamer@clemson.edu
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • FirstGenBrooks

    v1 v2  
    1 Test
     1[[PageOutline]]
     2
     3= Network Security and Traffic Analysis =
     4
     5The GENI network infrastructure enables security research that has not been possible before due to potential disruption to production networks. This project includes a number of security and privacy experiments that include:
     6        -WiMAX DDoS analysis with analysis of variance finding vulnerable control parameter settings;
     7        -Privacy/Anonymity side-channel Hidden Markov Models (HMMs) will be inferred to break anonymity systems;
     8        -DDoS traffic measurement to map attack severity vs. network topology;
     9        -Side-channel vulnerability removal protocol tested at scale; and
     10        -DDoS countermeasure testing to neutralize DDoS attacks
     11
     12== Institution(s) ==
     13
     14 Clemson University
     15
     16== Team Members ==
     17
     18 * Prof. Richard R Brooks <rrb@acm.org>, principal investigator            [[Image(Brooks.jpeg)]]
     19 * Prof. Kuang-Ching Wang <kwang@clemson.edu>, co-principal investigator
     20 * Ilker Ozcelik <iozceli@g.clemson.edu>, PhD candidate
     21 * Katherine Cameron, <kccamer@g.clemson.edu>, Master's student
     22 * Lu Yu, <lyu@clemson.edu>,  PhD candidate
     23
     24= Project Team =
     25
     26[[Image(ResearhGroup.jpeg)]]
     27
     28= Experiments =
     29
     30== WiMAX Bandwidth Contention Process and DDoS==
     31
     32Our WiMAX research involves analyzing the cross-layer affects of the system parameters used for the Bandwidth Contention Process. We are specifically looking at how these parameters affect a subscriber station's (SS) throughput, packet loss rates, and vulnerability to Distributed Denial of Service (DDoS) attacks. Software simulations using the NS-2 simulator manipulated three system parameters for a set of SS that included client and attacker SS's. The parameters, request retires, backoff start, and frame duration, were set to a low, medium, and high value within their respective range. All attacker SS's parameters were set to the same value and all client SS's parameters were set to same value, but the attacker and clients stations could differ. Seven replications of each combination of parameter settings were conducted and ANOVA analysis indicates that frame duration and request retries plays a significant role in SS's throughput. For software simulation results please see: [link]
     33
     34We are now using ORBIT, hosted by Rutgers University's WINLAB and part of the GENI network, to conduct hardware experiments using real WiMAX equipment. We are replicating the above software experiments to verify software simulation results, analyze the validity of the NS-2 WiMAX simulator, and gain further information about the cross layer affects of the system parameters used in the Bandwidth Contention Process. Currently our hardware experiments are configured with eight SS nodes, a sink node, and 1 base station (BS). In the future we hope to extend the number of SS used in our experiments. We are using the resource of sandbox 4 and the outdoor sandbox. The indoor sandbox creates a controlled environment for wireless experiments and outdoor consists of an outdoor BS and nodes that vary in geographical location. Are hardware experiments manipulate two system parameters, backoff start and backoff end. Frame duration is not considered, because all WiMAX equipment currently manufactured supports only 5ms frame duration. Data will be collected for two replications of each combination of parameter settings. When the data collection is complete, analysis will be carried out to determine the affect of system parameters on real Wihttp://groups.geni.net/geni/wikiMAX hardware.
     35
     36== Publications ==
     37
     38 *
     39
     40== Previous Students and Degrees ==
     41
     42 * Deng, Juan, Ph. D., 2011, Thesis: ''''
     43
     44
     45= Acknowledgements =
     46
     47We would like to express gratitude to the National Science Foundation (NSF) for supporting this research. The research is supported by NSF under Grant No. 1049765. Any opinions, findings, and conclusions or recommendations expressed by this research or related material are those of the author(s) and do not necessarily reflect the views of the National Science Foundation.