Prototype implementation of fast and secure traceability service over public networks

Rajitha Tennekoon, Janaka Wijekoon, Erwin Harahap, Hiroaki Nishi

Research output: Contribution to journalArticle

3 Citations (Scopus)

Abstract

Internet communication message protocol (ICMP)-based traceability methods are widely used to trace packets over the Internet; however, in their attacks, adversaries likewise use ICMP packets. Furthermore, the lack of security in ICMP-based traceability results in failures for many current traceability methods. Moreover, current routers are unable to provide extended services to Internet users and applications. To address this need, our laboratory has introduced the service-oriented router (SoR). SoR is middleware that can be implemented on a Cisco AXP and Juniper JunosV App Engine. In this paper, we propose a secure method of providing packet traceability over public networks using SoR features. We implemented a secure packet traceability service prototype on the ns-3 simulator. The test results conclude that there is a maximum additional cost of 48.69 and 123.91 μs of processing overhead per packet in each hop when the proposed secured traceability service is used with a 128-bit key space in AES-GCM and AES-CTR modes, respectively. Moreover, for 256-bit key spaces, AES-GCM and AES-CTR modes consumed additional 47.18 and 123.25 μs, respectively, over the plain traceability. Yet, from the evaluations on the test bed topology, it clearly shown that the proposed method was 79% faster than the conventional trace route method in providing the secured end-to-end traceability.

Original languageEnglish
Pages (from-to)S122-S133
JournalIEEJ Transactions on Electrical and Electronic Engineering
Volume11
DOIs
Publication statusPublished - 2016 Jul 1

Fingerprint

Routers
Internet
Network protocols
Communication
Middleware
Application programs
Simulators
Topology
Engines
Processing
Costs

Keywords

  • encryption
  • ns-3
  • packet traceability
  • per-hop data encryption
  • service-oriented router

ASJC Scopus subject areas

  • Electrical and Electronic Engineering

Cite this

Prototype implementation of fast and secure traceability service over public networks. / Tennekoon, Rajitha; Wijekoon, Janaka; Harahap, Erwin; Nishi, Hiroaki.

In: IEEJ Transactions on Electrical and Electronic Engineering, Vol. 11, 01.07.2016, p. S122-S133.

Research output: Contribution to journalArticle

@article{eab964a8a76740da9594981a63deacd3,
title = "Prototype implementation of fast and secure traceability service over public networks",
abstract = "Internet communication message protocol (ICMP)-based traceability methods are widely used to trace packets over the Internet; however, in their attacks, adversaries likewise use ICMP packets. Furthermore, the lack of security in ICMP-based traceability results in failures for many current traceability methods. Moreover, current routers are unable to provide extended services to Internet users and applications. To address this need, our laboratory has introduced the service-oriented router (SoR). SoR is middleware that can be implemented on a Cisco AXP and Juniper JunosV App Engine. In this paper, we propose a secure method of providing packet traceability over public networks using SoR features. We implemented a secure packet traceability service prototype on the ns-3 simulator. The test results conclude that there is a maximum additional cost of 48.69 and 123.91 μs of processing overhead per packet in each hop when the proposed secured traceability service is used with a 128-bit key space in AES-GCM and AES-CTR modes, respectively. Moreover, for 256-bit key spaces, AES-GCM and AES-CTR modes consumed additional 47.18 and 123.25 μs, respectively, over the plain traceability. Yet, from the evaluations on the test bed topology, it clearly shown that the proposed method was 79{\%} faster than the conventional trace route method in providing the secured end-to-end traceability.",
keywords = "encryption, ns-3, packet traceability, per-hop data encryption, service-oriented router",
author = "Rajitha Tennekoon and Janaka Wijekoon and Erwin Harahap and Hiroaki Nishi",
year = "2016",
month = "7",
day = "1",
doi = "10.1002/tee.22245",
language = "English",
volume = "11",
pages = "S122--S133",
journal = "IEEJ Transactions on Electrical and Electronic Engineering",
issn = "1931-4973",
publisher = "John Wiley and Sons Inc.",

}

TY - JOUR

T1 - Prototype implementation of fast and secure traceability service over public networks

AU - Tennekoon, Rajitha

AU - Wijekoon, Janaka

AU - Harahap, Erwin

AU - Nishi, Hiroaki

PY - 2016/7/1

Y1 - 2016/7/1

N2 - Internet communication message protocol (ICMP)-based traceability methods are widely used to trace packets over the Internet; however, in their attacks, adversaries likewise use ICMP packets. Furthermore, the lack of security in ICMP-based traceability results in failures for many current traceability methods. Moreover, current routers are unable to provide extended services to Internet users and applications. To address this need, our laboratory has introduced the service-oriented router (SoR). SoR is middleware that can be implemented on a Cisco AXP and Juniper JunosV App Engine. In this paper, we propose a secure method of providing packet traceability over public networks using SoR features. We implemented a secure packet traceability service prototype on the ns-3 simulator. The test results conclude that there is a maximum additional cost of 48.69 and 123.91 μs of processing overhead per packet in each hop when the proposed secured traceability service is used with a 128-bit key space in AES-GCM and AES-CTR modes, respectively. Moreover, for 256-bit key spaces, AES-GCM and AES-CTR modes consumed additional 47.18 and 123.25 μs, respectively, over the plain traceability. Yet, from the evaluations on the test bed topology, it clearly shown that the proposed method was 79% faster than the conventional trace route method in providing the secured end-to-end traceability.

AB - Internet communication message protocol (ICMP)-based traceability methods are widely used to trace packets over the Internet; however, in their attacks, adversaries likewise use ICMP packets. Furthermore, the lack of security in ICMP-based traceability results in failures for many current traceability methods. Moreover, current routers are unable to provide extended services to Internet users and applications. To address this need, our laboratory has introduced the service-oriented router (SoR). SoR is middleware that can be implemented on a Cisco AXP and Juniper JunosV App Engine. In this paper, we propose a secure method of providing packet traceability over public networks using SoR features. We implemented a secure packet traceability service prototype on the ns-3 simulator. The test results conclude that there is a maximum additional cost of 48.69 and 123.91 μs of processing overhead per packet in each hop when the proposed secured traceability service is used with a 128-bit key space in AES-GCM and AES-CTR modes, respectively. Moreover, for 256-bit key spaces, AES-GCM and AES-CTR modes consumed additional 47.18 and 123.25 μs, respectively, over the plain traceability. Yet, from the evaluations on the test bed topology, it clearly shown that the proposed method was 79% faster than the conventional trace route method in providing the secured end-to-end traceability.

KW - encryption

KW - ns-3

KW - packet traceability

KW - per-hop data encryption

KW - service-oriented router

UR - http://www.scopus.com/inward/record.url?scp=84975302233&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84975302233&partnerID=8YFLogxK

U2 - 10.1002/tee.22245

DO - 10.1002/tee.22245

M3 - Article

AN - SCOPUS:84975302233

VL - 11

SP - S122-S133

JO - IEEJ Transactions on Electrical and Electronic Engineering

JF - IEEJ Transactions on Electrical and Electronic Engineering

SN - 1931-4973

ER -