Data Mining - Concepts and Techniques.

The objective of this paper is to give a comprehensive introduction to applied cryptography with an engineer or computer scientist in mind. The emphasis is on the knowledge needed to create practical systems which supports integrity, confidentiality, or authenticity. Topics covered includes an introduction to the concepts in cryptography, attacks against cryptographic systems, key use and handling, random bit generation, encryption modes, and message authentication codes. Recommendations on algorithms and further reading is given in the end of the paper. This paper should make the reader able to build, understand and evaluate system descriptions and designs based on the cryptographic components described in the paper.

[서평]「Applied Cryptography」

The Transmission Control Protocol.

This paper expounds the main principles behind blockchain technology and some of its cutting-edge applications. Firstly, we present the core concepts at the heart of the blockchain, and we discuss the potential risks and drawbacks of public distributed ledgers, and the shift toward hybrid solutions. Secondly, we expose the main features of decentralized public ledger platforms. Thirdly, we show why the blockchain is a disruptive and foundational technology, and fourthly, we sketch out a list of important applications, bearing in mind the most recent evolutions.

Blockchain Technology: Principles and Applications

In Software Defined Networking (SDN) the control plane is physically separate from the forwarding plane. Control software programs the forwarding plane (e.g., switches and routers) using an open interface, such as OpenFlow. This paper aims to overcomes two limitations in current switching chips and the OpenFlow protocol: i) current hardware switches are quite rigid, allowing ``Match-Action'' processing on only a fixed set of fields, and ii) the OpenFlow specification only defines a limited repertoire of packet processing actions. We propose the RMT (reconfigurable match tables) model, a new RISC-inspired pipelined architecture for switching chips, and we identify the essential minimal set of action primitives to specify how headers are processed in hardware. RMT allows the forwarding plane to be changed in the field without modifying hardware. As in OpenFlow, the programmer can specify multiple match tables of arbitrary width and depth, subject only to an overall resource limit, with each table configurable for matching on arbitrary fields. However, RMT allows the programmer to modify all header fields much more comprehensively than in OpenFlow. Our paper describes the design of a 64 port by 10 Gb/s switch chip implementing the RMT model. Our concrete design demonstrates, contrary to concerns within the community, that flexible OpenFlow hardware switch implementations are feasible at almost no additional cost or power.

/pdf/forwarding-metamorphosis-fast-programmable-match-action-1dtzfidmon.pdf

Forwarding metamorphosis: fast programmable match-action processing in hardware for SDN

Shim6: Level 3 Multihoming Shim Protocol for IPv6.

This document defines the Shim6 protocol, a layer 3 shim for providing
locator agility below the transport protocols, so that multihoming can
be provided for IPv6 with failover and load sharing properties,
without assuming that a multihomed site will have a provider
independent IPv6 address prefix which is announced in the global IPv6
routing table. The hosts in a site which has multiple provider
allocated IPv6 address prefixes, will use the Shim6 protocol specified
in this document to setup state with peer hosts, so that the state can
later be used to failover to a different locator pair, should the
original one stop working.

Shim6: Level 3 Multihoming Shim Protocol for IPv6

NAT64 is a mechanism for translating IPv6 packets to IPv4 packets and
vice-versa. DNS64 is a mechanism for synthesizing AAAA records from A
records. These two mechanisms together enable client-server
communication between an IPv6-only client and an IPv4-only server,
without requiring any changes to either the IPv6 or the IPv4 node, for
the class of applications that work through NATs. They also enable
peer-to-peer communication between an IPv4 and an IPv6 node, where the
communication can be initiated by either end using existing, NAT-
traversing, peer-to-peer communication techniques. This document
specifies NAT64, and gives suggestions on how they should be deployed.

NAT64: Network Address and Protocol Translation from IPv6 Clients to IPv4 Servers

This document describes stateful NAT64 translation, which allows IPv6-only clients to contact IPv4 servers using unicast UDP, TCP, or ICMP. The public IPv4 address can be shared among several IPv6-only clients. When the stateful NAT64 is used in conjunction with DNS64 no changes are usually required in the IPv6 client or the IPv4 server.

/pdf/stateful-nat64-network-address-and-protocol-translation-from-2xo8lvh4mz.pdf

Stateful NAT64: Network Address and Protocol Translation from IPv6 Clients to IPv4 Servers

DNS64 is a mechanism for synthesizing AAAA records from A records.
DNS64 is used with an IPv6/IPv4 translator to enable client-server
communication between an IPv6-only client and an IPv4-only server,
without requiring any changes to either the IPv6 or the IPv4 node, for
the class of applications that work through NATs. This document
specifies DNS64, and provides suggestions on how it should be deployed
in conjunction with IPv6/IPv4 translators.

Marcelo Bagnulo

Papers

Shim6: Level 3 Multihoming Shim Protocol for IPv6.

Shim6: Level 3 Multihoming Shim Protocol for IPv6

NAT64: Network Address and Protocol Translation from IPv6 Clients to IPv4 Servers

Stateful NAT64: Network Address and Protocol Translation from IPv6 Clients to IPv4 Servers

DNS64: DNS Extensions for Network Address Translation from IPv6 Clients to IPv4 Servers