An Internet access device (100) uses an automatic configuration process (600) to handle the task of configuring the Internet access device at a customer site for communication with the Internet (10). Once configured, the customer has electronic mail and other access to the Internet from his local area network. A not yet configured Internet access device is shipped directly to a customer without having to be manually configured first. The customer enters a registration identification number (326) and a telephone number onto the Internet access device. The Internet access device then automatically connects to the Internet, downloads configuration data from a configuration server (410) containing customer site specific configuration data, and then automatically configures itself for communication with the Internet. The Internet access device is simple to install for a customer and provides valuable features such as a router (240), firewall, e-mail gateway (212), web server (220), and other servers (222). The Internet access device initially connects to the Internet through an Internet service provider (14) over a standard analog telephone line using a standard modem (52) and using a dynamic IP address. Once automatically configured, the Internet access device may then communicate with the Internet using any suitable connection including an analog telephone line, or a higher-speed line such as an ISDN line or a frame relay circuit and is assigned a static IP address and a range of IP addresses for other devices on its local area network.

Automatic configuration for internet access device

Distributed denial of service (DDoS) attacks in cloud computing environments are growing due to the essential characteristics of cloud computing. With recent advances in software-defined networking (SDN), SDN-based cloud brings us new chances to defeat DDoS attacks in cloud computing environments. Nevertheless, there is a contradictory relationship between SDN and DDoS attacks. On one hand, the capabilities of SDN, including software-based traffic analysis, centralized control, global view of the network, dynamic updating of forwarding rules, make it easier to detect and react to DDoS attacks. On the other hand, the security of SDN itself remains to be addressed, and potential DDoS vulnerabilities exist across SDN platforms. In this paper, we discuss the new trends and characteristics of DDoS attacks in cloud computing, and provide a comprehensive survey of defense mechanisms against DDoS attacks using SDN. In addition, we review the studies about launching DDoS attacks on SDN, as well as the methods against DDoS attacks in SDN. To the best of our knowledge, the contradictory relationship between SDN and DDoS attacks has not been well addressed in previous works. This work can help to understand how to make full use of SDN's advantages to defeat DDoS attacks in cloud computing environments and how to prevent SDN itself from becoming a victim of DDoS attacks, which are important for the smooth evolution of SDN-based cloud without the distraction of DDoS attacks.

Software-Defined Networking (SDN) and Distributed Denial of Service (DDoS) Attacks in Cloud Computing Environments: A Survey, Some Research Issues, and Challenges

A device for providing wireless Internet access has been described. The device includes an antenna. The antenna is for receiving wireless queries and transmitting wireless responses. The device includes a program. The program is for converting the wireless queries into Internet compatible protocols. The program is for receiving the Internet protocol formatted responses. These responses are then converted in to the wireless responses.

Method and apparatus for wireless internet access

In recent years, with the rapid development of current Internet and mobile communication technologies, the infrastructure, devices and resources in networking systems are becoming more complex and heterogeneous. In order to efficiently organize, manage, maintain and optimize networking systems, more intelligence needs to be deployed. However, due to the inherently distributed feature of traditional networks, machine learning techniques are hard to be applied and deployed to control and operate networks. Software defined networking (SDN) brings us new chances to provide intelligence inside the networks. The capabilities of SDN (e.g., logically centralized control, global view of the network, software-based traffic analysis, and dynamic updating of forwarding rules) make it easier to apply machine learning techniques. In this paper, we provide a comprehensive survey on the literature involving machine learning algorithms applied to SDN. First, the related works and background knowledge are introduced. Then, we present an overview of machine learning algorithms. In addition, we review how machine learning algorithms are applied in the realm of SDN, from the perspective of traffic classification, routing optimization, quality of service/quality of experience prediction, resource management and security. Finally, challenges and broader perspectives are discussed.

A Survey of Machine Learning Techniques Applied to Software Defined Networking (SDN): Research Issues and Challenges

A wireless communications system, apparatus and methods provide packet minimized communications between a wireless client and a proxy server. The methods use novel data compression techniques to enable wireless communications devices to complete transactions by exchanging a minimum number of data packets. In many circumstances a transaction comprises a single request packet from the wireless client to the proxy server and a single response packet from the proxy server to the wireless client. The methods use a compact markup language, a compact transport protocol, a reliable message layer, hyperlink indices, server dependent forms, and a compressed user datagram protocol header. A compressed request message comprises a base document uniform resource locator followed by compressed data. The compressed data comprises field values and field indices corresponding to fields in a hyperlink document, and an indication of use of a hyperlink document. A packet of data is formatted so that a compressed user datagram protocol header comprises a first bit set to indicate that the packet destination is a proxy server, bit flags indicating inclusion of optional delivery and internet protocol fields, and a source port number identifying the requesting wireless client.

Method, system and apparatus for packet minimized communications

In a local area network (LAN) test instrument, a method for detecting duplicate internet protocol (IP) addresses without disrupting the LAN is provided. The LAN test instrument provides a method of choosing an IP address for itself without disrupting the ARP caches of devices connected to the LAN. Duplicate IP addresses between devices on the LAN may then be tested using a series of network broadcasts chosen to elicit responses from as many nodes on the network as possible because some nodes respond to some types of broadcasts and not others. A data base of the various nodes is collected and the newly arriving responses are dynamically compared with the responses already in the data base to detect duplicate IP addresses. Separate entries in the data base for devices having duplicate IP addresses are maintained and then displayed to the user of the LAN test instrument to selectably and reliably communicate with the devices having duplicate IP addresses for further diagnosis and correction.

Method of configuring a valid IP address and detecting duplicate IP addresses in a local area network

We present a framework, Atlas, which incorporates application-awareness into Software-Defined Networking (SDN), which is currently capable of L2/3/4-based policy enforcement but agnostic to higher layers. Atlas enables fine-grained, accurate and scalable application classification in SDN. It employs a machine learning (ML) based traffic classification technique, a crowd-sourcing approach to obtain ground truth data and leverages SDN's data reporting mechanism and centralized control. We prototype Atlas on HP Labs wireless networks and observe 94% accuracy on average, for top 40 Android applications.

/pdf/application-awareness-in-sdn-55elx4ctoc.pdf

Application-awareness in SDN

A method in a LAN test instrument for detecting proxy ARP agents and misconfigured routers in a TCP/IP LAN is provided. The method first allows for detection of routers running proxy ARP for the default route by issuing a single ARP command for a unique remote host. Because the target IP address chosen as a unique, non-existent device, the router will respond to the ARP request with a proxy ARP reply for its default route if this function is enabled. The method further allows for distinguishing between responses from actual devices having duplicate IP addresses and responses from misconfigured routers replying in proxy ARP for local hosts. The false duplicate IP addresses due to proxy ARP replies may be identified as phantom entries in a data base that can then be appropriately tagged or eliminated to display only the entries that correspond to actual physical devices to the user of the LAN test instrument.

Method for detecting proxy ARP replies from devices in a local area network

Mobile devices interact wirelessly with a growing proliferation of cloud-based applications. Due to significant traffic growth and a wide variety of multimedia solutions, enterprise IT departments are demanding more fine-grained visibility and control of mobile traffic. They want to deliver optimal performance and a high quality of experience to a variety of users and applications. In the wired world, Software-Defined Networking (SDN) is a technology being embraced to deliver performance guarantees to end users by dynamically orchestrating quality of service (QoS) policies on edge switches and routers. Guaranteeing performance in a wired access network does not require any network control on clients, because the last hop between the network edge and wired device is a dedicated point-to-point link (e.g. Ethernet). However, this is not the case with wireless LANs (WLAN), since the last hop is a shared half-duplex medium and the WiFi MAC protocol does not allow access points to coordinate client uplink transmissions or 802.11 QoS settings. Hence, we argue that the SDN paradigm needs to be extended to mobile clients to provide optimal network performance between the cloud and wirelessly-connected clients. In this paper, we propose a framework called meSDN and demonstrate that it enables WLAN virtualization, application-aware QoS and improves power-efficiency from our prototype on Android phones.

meSDN: mobile extension of SDN

A test instrument and method for testing switched LANs using a set of available MIBs in a switch is provided. The test instrument is designed for the characterization, diagnosis, and testing of a LAN having at least one switch which divides the network traffic into segments. A network device such as a switch will have a set of available MIBs, usually determined by the vendor, which may be accessed via an SNMP agent in the switch. Using the information selectively gathered from this set of available MIBs, various reports may be generated and displayed as reports which allow for a detailed analysis of switch parameters and traffic patterns. For any given report, optimal data items are chosen according to a predetermined hierarchy which provide the most pertinent, detailed information for each given report.

Manfred R. Arndt

Papers

Method of configuring a valid IP address and detecting duplicate IP addresses in a local area network

Application-awareness in SDN

Method for detecting proxy ARP replies from devices in a local area network

meSDN: mobile extension of SDN

Method of testing a switched local area network