The European Telecommunications Standards Institute (ETSI) has introduced the paradigm of Multi-Access Edge Computing (MEC) to enable efficient and fast data processing in mobile networks. Among other technological requirements, security and privacy are significant factors in the realization of MEC deployments. In this paper, we analyse the security and privacy of the MEC system. We introduce a thorough investigation of the identification and the analysis of threat vectors in the ETSI standardized MEC architecture. Furthermore, we analyse the vulnerabilities leading to the identified threat vectors and propose potential security solutions to overcome these vulnerabilities. The privacy issues of MEC are also highlighted, and clear objectives for preserving privacy are defined. Finally, we present future directives to enhance the security and privacy of MEC services.

/pdf/survey-on-multi-access-edge-computing-security-and-privacy-5epo4z3o46.pdf

Survey on Multi-Access Edge Computing Security and Privacy

A performance analysis method of a computer system using a management computer. The management computer includes: a processor; and a memory device in which a program to be executed by the processor is stored. The computer system is constituted by a plurality of resources. The processor divides the plurality of resources into a plurality of resource groups based on a correlation of changes in performance data between the resources, and analyzes the performance data for each of the divided resource groups.

Performance analysis method and management computer

System, method, and apparatus of securing and managing Internet-connected devices and networks A wireless communication router is installed at a customer venue, and provides Internet access to multiple Internet-connected devices via a wireless communication network that is served by the router A monitoring and effecting unit of the router performs analysis of traffic that passes through the router; identifies which Internet-connected devices send or receive data; and selectively enforces traffic-related rules based on policies stored in the router Optionally, the monitoring and effecting unit is pre-installed in the router in a disabled mode; and is later activated after the router was deployed at a customer venue Optionally, the router notifies the Internet Service Provider the number and type of Internet-connected devices that are served by the router

System, method, and apparatus of securing and managing internet-connected devices and networks

A system and computer-implemented method are provided for host level detection of malicious Domain Name System (DNS) activities in a network environment having multiple end-hosts. The system includes a set of DNS resolver agents configured to (i) gather DNS activities from each of the multiple end-hosts by recording DNS queries and DNS responses corresponding to the DNS queries, and (ii) associate the DNS activities with Program Identifiers (PIDs) that identify programs that issued the DNS queries. The system further includes a backend server configured to detect one or more of the malicious DNS activities based on the gathered DNS activities and the PIDs.

Host level detect mechanism for malicious DNS activities

In one embodiment, a method implemented on a computing device includes: selecting a wireless access point (AP) to process from among a deployment of wireless access points (APs), defining a neighborhood based on the AP and neighboring APs, where the neighboring APs are within a one-hop radius of the AP, calculating a client distribution optimal received signal strength indicator (RSSI), where the client distribution optimal RSSI (CD optimal) is a minimum receiver start of packet detection threshold (RX-SOP) setting for maintaining existing client device coverage by the AP, calculating a neighbor relations optimal RSSI threshold (NR optimal), where the NR optimal is a function of at least a transmit power control threshold (TPC) for maintaining visibility between the AP and the neighboring APs, calculating an RX-SOP setting for the AP as a function of CD optimal and NR optimal, and applying the RX-SOP setting to the AP.

Receiver start of packet optimization for wireless networks

An example method is provided in one example embodiment and may include requesting, by a user equipment (UE), a profile associated with a subscriber that provides information to facilitate automatic association of the UE with one or more access points of a wireless network, wherein the requesting includes requesting the profile using a Generic Advertisement Service (GAS) Initial Request frame; and sending the profile to the UE using a GAS Initial Response frame. The method can include configuring a Vendor Specific Information Element (VSIE) within an Advertisement Protocol Identifier for the GAS Initial Request frame and configuring the VSIE to indicate an Access Network Query Protocol (ANQP) query for the profile. The method can also include configuring another VSIE within an Advertisement Protocol Identifier for the GAS Initial Response frame and configuring the VSIE to indicate an ANQP query response including the profile.

System and method to facilitate hotspot onboarding for user equipment in a network environment

In one embodiment, a supervisory device in a network forms a first virtual access point (VAP) for a first node in the network. A plurality of access points (APs) in the network are mapped to the first VAP as part of a VAP mapping and the first node treats the APs in the VAP mapping as a single AP for purposes of communicating with the network. The supervisory device determines a communication schedule for the first node based on a radio chain of at least one of the APs in the VAP mapping for the first VAP being shared by the first VAP and a second VAP for a second node in the network. The supervisory device, according to the communication schedule for the first node, causes one or more of the APs in the VAP mapping for the first VAP to instruct the first node to stop transmitting for a period of time.

Channel management in a virtual access point (VAP)

A method includes obtaining performance characterization values from endpoints managed by a first fog node at a first hierarchical level in a hierarchy of fog nodes. The method includes changing a first operating characteristic of the wireless network based on the performance characterization values. The first operating characteristic affects the operation of one or more of the endpoints. The method includes transmitting a portion of the performance characterization values to a second fog node at a second hierarchical level in the hierarchy of fog nodes. The method includes changing a second operating characteristic of the wireless network based on an instruction from the second fog node. The second operating characteristic affects the operation of the first fog node and/or other fog nodes at the first hierarchical level. Changing one or more of the first operating characteristic and the second operating characteristic satisfies an operating threshold for the wireless network.

Hierarchical fog nodes for controlling wireless networks

A method for providing enhanced visibility in heterogeneous network. The method comprises receiving, at a networking device housing a cellular base station and a WLAN access point, cellular network traffic from an electronic device. The method further comprises receiving, at the networking device, WLAN traffic from the electronic device and encapsulating, at the networking device, the cellular network traffic and the WLAN traffic using a common protocol. The method further comprises transmitting the encapsulated cellular traffic and the encapsulated WLAN traffic to a controller.

Enhancing visibility in a heterogeneous network

In one embodiment, a supervisory device in a network classifies mobility and traffic characteristics of a first node in the network. The supervisory device identifies wireless channels supported by access points (APs) in the network. The supervisory device selects one of the wireless channels for use by the first node based on the classified mobility and traffic characteristics of the first node. The supervisory device forms a first virtual access point (VAP) for the first node on the selected wireless channel. A plurality of the access points (APs) in the network that support the selected channel are mapped to the first VAP as part of a VAP mapping. The first node treats the APs in the VAP mapping as a single AP for purposes of communicating with the network.

Henry Jerome

Papers

System and method to facilitate hotspot onboarding for user equipment in a network environment

Channel management in a virtual access point (VAP)

Hierarchical fog nodes for controlling wireless networks

Enhancing visibility in a heterogeneous network

Traffic and mobility aware virtual access points