Author

Robin Doss

135 papers · 2004–2026

2004peak 18 in 20242026

Frequent co-authors

Papers

showing 1–25 of 135 RSS

Zero Trust Architecture (ZTA): A Comprehensive Survey

Naeem Syed, Syed Wajid Ali Shah, Arash Shaghaghi +3 more

Computer Networks and Communications · IEEE Access · 2022 · cited 310× · DOI ↗ · more like this ·

We present a detailed survey of the Zero Trust (ZT) security paradigm which has a growing number of advocates in the critical infrastructure risk management space. The article employs a descriptive approach to present the fundamental tenets of ZT and provides a review of numerous potential options available for successful realization of this paradigm. We describe the role of authentication and access control in Zero Trust Architectures (ZTA) and present an in-depth discussion of state-of-the-art techniques for authentication and access control in different scenarios. Furthermore, we comprehensively discuss the conventional approaches to encryption, micro-segmentation, and security automation available for instantiating a ZTA. The article also details various challenges associated with contemporary authentication mechanisms, access control schemes, trust and risk computation techniques…

Traceback of DDoS Attacks Using Entropy Variations

Shui Yu, Wanlei Zhou, Robin Doss +1 more

Computer Networks and Communications · IEEE Transactions on Parallel and Distributed Systems · 27 May 2010 · cited 199× · DOI ↗ · more like this ·

Distributed Denial-of-Service (DDoS) attacks are a critical threat to the Internet. However, the memoryless feature of the Internet routing mechanisms makes it extremely hard to trace back to the source of these attacks. As a result, there is no effective and efficient method to deal with this issue so far. In this paper, we propose a novel traceback method for DDoS attacks that is based on entropy variations between normal and DDoS attack traffic, which is fundamentally different from commonly used packet marking techniques. In comparison to the existing DDoS traceback methods, the proposed strategy possesses a number of advantages - it is memory nonintensive, efficiently scalable, robust against packet pollution, and independent of attack traffic patterns. The results of extensive experimental and simulation studies are presented to demonstrate the effectiveness and efficiency of the…

Security Analysis Methods on Ethereum Smart Contract Vulnerabilities: A Survey

Purathani Praitheeshan, Lei Pan, Jiangshan Yu +2 more

cs.CR · August 2019 · cited 171× · arXiv ↗ · more like this ·

Smart contracts are software programs featuring both traditional applications and distributed data storage on blockchains. Ethereum is a prominent blockchain platform with the support of smart contracts. The smart contracts act as autonomous agents in critical decentralized applications and hold a significant amount of cryptocurrency to perform trusted transactions and agreements. Millions of dollars as part of the assets held by the smart contracts were stolen or frozen through the notorious attacks just between 2016 and 2018, such as the DAO attack, Parity Multi-Sig Wallet attack, and the integer underflow/overflow attacks. These attacks were caused by a combination of technical flaws in designing and implementing software codes. However, many more vulnerabilities of less severity are to be discovered because of the scripting natures of the Solidity language and the non-updateable…

An Improved Authentication Scheme for Internet of Vehicles Based on Blockchain Technology

Xiaoliang Wang, Pengjie Zeng, Nick Patterson +2 more

Information Systems · IEEE Access · 2019 · cited 143× · DOI ↗ · more like this ·

Thanks to the rapid development in mobile vehicles and wireless technologies, the Internet of Vehicles (IoV) has become an attractive application that can provide a large number of mobile services for drivers. Vehicles can be informed of the mobile position, direction, speed, and other real-time information of nearby vehicles to avoid traffic jams and accidents. However, the environments of IoV could be dangerous in the absence of security protections. Due to the openness and self-organization of IoV, there are enormous malicious attackers. To guarantee the safety of mobile services, we propose an effective decentralized authentication mechanism for IoV on the basis of the consensus algorithm of blockchain technology. The simulation under the veins framework is carried out to verify the feasibility of the scheme in reducing the selfish behavior and malicious attacks in IoV.

Information theory based detection against network behavior mimicking DDoS attacks

Shui Yu, Wanlei Zhou, Robin Doss

Computer Networks and Communications · IEEE Communications Letters · April 2008 · cited 85× · DOI ↗ · more like this ·

DDoS is a spy-on-spy game between attackers and detectors. Attackers are mimicking network traffic patterns to disable the detection algorithms which are based on these features. It is an open problem of discriminating the mimicking DDoS attacks from massive legitimate network accessing. We observed that the zombies use controlled function(s) to pump attack packages to the victim, therefore, the attack flows to the victim are always share some properties, e.g. packages distribution behaviors, which are not possessed by legitimate flows in a short time period. Based on this observation, once there appear suspicious flows to a server, we start to calculate the distance of the package distribution behavior among the suspicious flows. If the distance is less than a given threshold, then it is a DDoS attack, otherwise, it is a legitimate accessing. Our analysis and the preliminary…

Ransomware early detection: A survey

Mingcan Cen, Frank Jiang, Xingsheng Qin +2 more

Signal Processing · Computer Networks · 7 Dec 2023 · cited 75× · DOI ↗ · more like this ·

In recent years, ransomware attacks have exploded globally, and it has become one of the most significant cyber threats to digital infrastructure. Such attacks have been targeting ranging from individuals to critical infrastructure or large organizations such as large commercial companies, energy facilities, medical centers and government departments. Ransomware attackers use sophisticated encryption techniques to hijack victims’ files in exchange for a large ransom to release encrypted data. Sophisticated encryption techniques make it almost impossible for victims to recover data without the secret key in the event of such an attack. To protect systems from ransomware threats, malicious activities had better be detected earlier, preferably before they engage in the harmful behavior. Numerous studies have focused on ransomware threats and attempted to provide detection and prevention…

Intrusion Detection Scheme With Dimensionality Reduction in Next Generation Networks

Keshav Sood, Mohammad Reza Nosouhi, Dinh Duc Nha Nguyen +3 more

Computer Networks and Communications · IEEE Transactions on Information Forensics and Security · 2023 · cited 72× · DOI ↗ · more like this ·

Due to millions of heterogeneous physical nodes, multiple-vendor and multi-tenant domains, and technologies etc., 5G has greatly expanded the threat landscape. Particularly from the high rate of traffic and ultra-low latency requirement of applications in 5G networks, the detection of the network traffic anomalies in real-time is critical. The conventional security approaches lack compatibility with modern network designs and are not much effective in 5G settings. We propose a two-stage network traffic anomaly detection system compatible with ETSI-NFV standard 5G architecture. Our architecture consists of two modules, i.e., (a) Dimensionality Reduction to compress the sample size at the edge of 5G networks and (b) Deep Neural Network classifier (DNN) that detects traffic anomalies. We have conducted our experiments using OMNET++ and ETSI-NFV (OSM MANO) 5G orchestration real platform…

Differential Privacy for IoT-Enabled Critical Infrastructure: A Comprehensive Survey

Muhammad Akbar Husnoo, Adnan Anwar, Ripon K. Chakrabortty +2 more

Artificial Intelligence · IEEE Access · 2021 · cited 65× · DOI ↗ · more like this ·

The rapid evolution of the Internet of Things (IoT) paradigm during the last decade has lead to its adoption in critical infrastructure. However, the multitude of benefits that are derived from the IoT paradigm are short-lived due to the exponential rise in the associated security and privacy threats. Adversaries carry out privacy-oriented attacks to gain access to the sensitive and confidential data of critical infrastructure for various self-centered, political and commercial gains. In the past, researchers have employed several privacy preservation approaches including cryptographic encryption and k-anonymity to secure IoT-enabled critical infrastructure. However, for various reasons, those proposed solutions are not well suited for modern IoT-enabled critical infrastructure. Therefore, Dwork’s differential privacy has emerged as the most viable privacy preservation strategy for…

SEPN: A Sequential Engagement Based Academic Performance Prediction Model

Xiangyu Song, Jianxin Li, Shijie Sun +3 more

Computer Science Applications · IEEE Intelligent Systems · 8 Jul 2020 · cited 49× · DOI ↗ · more like this ·

Students' performance prediction is a crucial task in today's online education. By predicting a student's final grade in an academic examination, intervene can be applied in advance. Recently, many machine learning models have been designed to couple students' online activity with their academic performance. However, it is difficult for these models to effectively make prediction due to the excessive difference in feature selection. While in most cases, too many parameters and heterogeneous features can also be one of the main sticking points. To this end, we propose a sequential engagement based academic performance prediction network. It consists of two main components: an engagement detector and a sequential predictor. The engagement detector leverages the advantages of a convolutional neural network to detect students' engagement patterns through their daily activities. The…

Routing Protocols in Opportunistic Networks – A Survey

Majeed Alajeely, Robin Doss, Asma’a Ahmad

Computer Networks and Communications · IETE Technical Review · 19 Apr 2017 · cited 46× · DOI ↗ · more like this ·

Opportunistic networks (OppNets) refer to a number of wireless nodes opportunistically communicating with each other in a form of “Store–Carry–Forward”. This occurs when they come into contact with each other without a proper network infrastructure. OppNets are designed to operate in an environment characterized by high delay, high error rate, intermittent connectivity, and non-availability of end-to-end route between the source and destination. OppNets use wireless technologies, such as IEEE 802.11, WiMAX, Bluetooth, and other short-range radio communication, and grow from a single node (seed) to become large networks by inviting new nodes (helpers) to join the network. Nodes have the ability to store and carry data and also forward it to other nodes in order to achieve different tasks. In OppNets, there is no end-to-end connection between the source and the destination nodes. Further…

Automation and Orchestration of Zero Trust Architecture:Potential Solutions and Challenges

Yang Cao, Shiva Raj Pokhrel, Ye Zhu +2 more

Computer Networks and Communications · Figshare · 27 Oct 2022 · cited 45× · DOI ↗ · more like this ·

Zero Trust Architecture (ZTA) is a paradigm shift in how we protect data, stay connected, and access resources. ZTA is non-perimeter based defense, which has been emerging as a promising revolution in the cybersecurity field. It can be used to continuously maintain security by safeguarding against attacks both from inside and outside of the network system. However, automation and orchestration ZTA, an essential direction towards its seamless deployments over real-word networks, have been poorly understood in literature. In this paper, we first identify the bottlenecks, discuss the background of ZTA and compare it with traditional perimeter-based security architectures. More importantly, we present a comprehensive direction towards the automation and orchestration of ZTA by employing AI techniques. In other words, the key potential and roles of celebrates AI techniques for the automation…

Protean Authentication Scheme – A Time-Bound Dynamic KeyGen Authentication Technique for IoT Edge Nodes in Outdoor Deployments

Shiju Sathyadevan, Krishnashree Achuthan, Robin Doss +1 more

Information Systems · IEEE Access · 2019 · cited 42× · DOI ↗ · more like this ·

The IoT edge/sensor nodes are exposed to large attack surface and could easily succumb to several well-known attacks in the wireless sensor network (WSN) domain. Authenticating edge nodes before they join a network, especially after a sleep state, is a critical step to maintain the overall trust of any given IoT local area network (IoT LAN). The low resources and computational constraints of such IoT nodes make this a challenging and non-trivial problem. As many IoT deployments are in uncontrolled environments, the IoT devices are often placed in the open so that physical access to them is inevitable. Due to easy physical access of the devices, common attacks, including cloning of devices or stealing secret keys stored in an edge node, are some of the most common attacks on the IoT deployments. This paper focuses on developing an extremely lightweight authentication scheme for…

Zero-Ran Sniff: A zero-day ransomware early detection method based on zero-shot learning

Mingcan Cen, XiZhen Deng, Frank Jiang +1 more

Signal Processing · Computers & Security · 17 Apr 2024 · cited 40× · DOI ↗ · more like this ·

Ransomware attacks, which blackmail victims into paying a ransom by locking their devices or encrypting their files, have become one of the major threats to network security. Conventional anti-ransomware tools often fail to detect zero-day ransomware attacks due to the inability to obtain zero-day ransomware signatures in advance to train detection models. In addition, zero-day ransomware attacks often use sophisticated encryption techniques to launch attacks on new vulnerabilities, and these encryption attacks cause irreversible damage to victims' digital files even if they choose to pay a ransom. It is therefore urgent and important to identify unknown ransomware attacks as early as possible, i.e. before the stage of encryption. To this end, this paper proposes Zero-Ran Sniff (ZRS), an early zero-day ransomware detection method based on zero-shot learning, which can detect zero-day…

Towards Spoofing Resistant Next Generation IoT Networks

Mohammad Reza Nosouhi, Keshav Sood, Marthie Grobler +1 more

Artificial Intelligence · IEEE Transactions on Information Forensics and Security · 2022 · cited 40× · DOI ↗ · more like this ·

The potential vulnerability to wireless spoofing attacks is still a critical concern for Next Generation Internet of Things (NGIoT) networks which may result in catastrophic consequences in mission–critical applications. Conventional solutions may impose additional signal processing, protocol, and latency overheads which are inappropriate for NGIoT networks designed to provide high–speed and low–latency connections for a large number of resource–constrained IoT devices. In this paper, we utilize the uniqueness of beam pattern features in mmWave–enabled devices and propose a scalable security mechanism for the detection of wireless spoofing attacks in NGIoT networks. This uniqueness is proven to exist due to the non–ideal manufacturing of antenna arrays used in mmWave–enabled devices. In our approach, when legitimate mmWave–enabled…

Multipath TCP Meets Transfer Learning: A Novel Edge-Based Learning for Industrial IoT

Shiva Raj Pokhrel, Lei Pan, Neeraj Kumar +2 more

Computer Networks and Communications · IEEE Internet of Things Journal · 3 Feb 2021 · cited 35× · DOI ↗ · more like this ·

We consider a fifth-generation (5G)-empowered future Industrial IoT (IIoT) networking problem where IIoT machines are capable of communicating and sharing their data networking knowledge gained (and experiences) with other neighboring devices/tools. For such an IIoT setting, deep-learning (DL)-based communication protocols are known to be highly efficient but having a computationally complex training procedure in terms of both time/space and volume of data sets. One solution for such training is to be completed offline for each equipment and machines of IIoT before deployment. A better approach would be to replicate the model from the expert existing machine and implant it into new machines. Such training for the transfer of knowledge can be done by manufacturers using high computational power, even for large-scale DL models. After sufficient training and the desired level of accuracy…

A general cloud firewall framework with dynamic resource allocation

Shui Yu, Robin Doss, Wanlei Zhou +1 more

Hardware and Architecture · Rare & Special e-Zone (The Hong Kong University of Science and Technology) · June 2013 · cited 27× · DOI ↗ · more like this ·

Cloud is becoming a dominant computing platform. However, we see few work on how to protect cloud data centers. As a cloud usually hosts many different type of applications, the traditional packet level firewall mechanism is not suitable for cloud platforms in case of complex attacks. It is necessary to perform anomaly detection at the event level. Moreover, protecting objects are more diverse than the traditional firewall. Motivated by this, we propose a general framework of cloud firewall, which features event level detection chain with dynamic resource allocation. We establish a mathematical model for the proposed framework. Moreover, a linear resource investment function is proposed for economical dynamical resource allocation for cloud firewalls. A few conclusions have been extracted for the reference of cloud service providers and designers.

Detecting Internet of Things Bots: A Comparative Study

Ben Stephens, Arash Shaghaghi, Robin Doss +1 more

Computer Networks and Communications · IEEE Access · 2021 · cited 26× · DOI ↗ · more like this ·

Since the Mirai botnet attacks in 2016 research into the Internet of Things (IoT) botnet malware has increased substantially. IoT botnet relevant threats continue to rise, impacting businesses and users. This paper aims to contribute to the problem space by compiling and synthesizing the relevant literature over the last five years to provide an overview of the most recent advances in IoT botnets, their detection and prevention, and laying down the future research directions required to better address this ever growing threat.

Service Engineering Based on Service Oriented Architecture Methodology

Suhardi Suhardi, Robin Doss, Purnomo Yustianto

Information Systems · TELKOMNIKA (Telecommunication Computing Electronics and Control) · December 2015 · cited 26× · DOI ↗ · more like this ·

Service Engineering (SE) and Service Oriented Architecture (SOA) originally reside on different plateaus of discipline. SE is defined as a set of activity introducing a new business service, while SOA is a technical approach to redefine an enterprise business processes as a set of IT enabled services. This paper proposes a SOA embedded SE framework as a comprehensive approach in re-defining business service and its IT implementation. After an introduction, a review of existing SE frameworks and SOA methodologies is presented in the paper. Afterward, a complete SE framework is proposed with several results on early case studies. A survey results are then presented to prove the usability and benefit of the proposed framework. The framework is designed and proposed to help practitioners and researchers to conduct service engineering by employing principles and methodology offered by SOA…

Geographic Routing with Cooperative Relaying and Leapfrogging in Wireless Sensor Networks

Pedro Coronel, Robin Doss, W. Schott

Computer Networks and Communications · Deakin Research Online (Deakin University) · November 2007 · cited 24× · DOI ↗ · more like this ·

A novel geographic routing protocol for multi-hop wireless sensor networks is presented. It exploits the broadcast nature of the wireless channel to enable on-demand cooperative relaying and leapfrogging for circumventing weak radio links. In order to achieve energy efficiency, a metric is introduced for next-hop selection that takes into account information on the residual battery energy, the geographical position of the sensor nodes, and the channel quality of the involved radio links when available. Performance results show that the completely decentralized protocol offers significant benefits by reducing the number of (re)transmissions required to reach the destination. This translates into network-wide energy savings that extend the network lifetime.

A Scheme of Intelligent Traffic Light System Based on Distributed Security Architecture of Blockchain Technology

Pengjie Zeng, Xiaoliang Wang, Hao Li +2 more

Information Systems · IEEE Access · 2020 · cited 22× · DOI ↗ · more like this ·

In recent years, under the background that the rapid development of traffic volume makes the current traffic lights far from meeting the urban traffic demand, intelligent traffic lights based on the centralized architecture began to appear. However, in the traffic network with complex structure and private data flow, there are many malicious attacks against the centralized architecture, such as Sybil and ghost car attacks, which undoubtedly brings great security risks to the traditional intelligent traffic lights. Blockchain technology is a popular security framework nowadays. Based on its outstanding characteristics in the distributed architecture and the development of Edge Intelligence (EI) technology, this paper proposes a distributed security architecture scheme based on blockchain technology for the existing intelligent traffic light system. At the same time, based on the model…

Security and Trust in Opportunistic Networks – A Survey

Majeed Alajeely, Robin Doss, Asma’a Ahmad

Computer Networks and Communications · IETE Technical Review · 19 Oct 2015 · cited 21× · DOI ↗ · more like this ·

Opportunistic networks or OppNets refer to a number of wireless nodes opportunistically communicating with each other in a form of “Store–Carry–Forward”. This occurs when they come into contact with each other without proper network infrastructure. OppNets use wireless technologies, such as IEEE 802.11, WiMAX, Bluetooth, and other short-range radio communication. In OppNets, there is no end-to-end connection between the source and the destination nodes, and the nodes usually have high mobility, low density, limited power, short radio range, and often subject to different kinds of attacks by malicious nodes. Due to these characteristics and features, OppNets are subject to serious security challenges. OppNets strongly depend on human interaction; therefore, the success of securing such networks is based on trust between people. This survey includes the security approaches in OppNets and…

Route maintenance using mobility prediction for mobile ad hoc networks

B.H. Sathyaraj, Robin Doss

Computer Networks and Communications · Deakin Research Online (Deakin University) · 13 Dec 2005 · cited 21× · DOI ↗ · more like this ·

Next generation networks (3G & beyond) will support real-time multimedia applications through traditional wide-area networking concepts as well as hot-spot (WLAN) and ad hoc networking concepts. In order to fulfill the vision of next generation networks a method of maintaining a real-time flow despite frequent topology changes and irregularity in user movement is required. Mobility prediction has been identified as having applications in the areas of link availability estimation and pro-active routing in ad hoc networks. In this work we present the mobility prediction based algorithm for route maintenance in mobile ad hoc networks. Simulation study of the algorithm proves it to offer significant benefits to dynamic source routing (DSR).

RansoGuard: A RNN-based framework leveraging pre-attack sensitive APIs for early ransomware detection

Mingcan Cen, Frank Jiang, Robin Doss

Signal Processing · Computers & Security · 26 Dec 2024 · cited 19× · DOI ↗ · more like this ·

Ransomware has emerged as a significant security threat in cyberspace, inflicting severe economic losses and privacy breaches on individual users and organizations. Ransomware typically encrypts critical user files and demands a ransom for decryption. Traditional signature-based defense methods effectively identify known ransomware but perform poorly when confronting unknown zero-day attacks. Addressing this challenge, a ransomware detection framework called ‘RansoGuard’ is proposed. This framework aims to achieve timely identification and defense against ransomware by capturing and analyzing the sensitive Application Programming Interface (API) call behavior exhibited before the encryption attack is launched. A real-world ransomware sample dataset was constructed. The dynamic behavioral data during the pre-attack stage was analyzed, and natural language processing techniques were used…

A hybrid cyber defense framework for reconnaissance attack in industrial control systems

Xingsheng Qin, Frank Jiang, Chengzu Dong +1 more

Computer Networks and Communications · Computers & Security · 29 Sep 2023 · cited 18× · DOI ↗ · more like this ·

The convergence of information technology (IT) and operation technology (OT) has made Industrial Control Systems (ICS) a popular target for cyberattacks in recent years. Unlike traditional networks, enhancing availability is the ICS network's top priority rather than confidentiality in the CIA scheme. We propose a bio-inspired adaptive defense framework based on dissimilar redundancy, diversity, and adaptive defense strategies to achieve this aim. The proposed mechanism mixed optimal network shuffling and cyber deception techniques to maximise the time attackers spend on the decoys. Besides, to provide an extra layer of protection for system availability, we introduce dual heterogeneous subnets in the proposed framework that could be regenerated once compromised. We evaluate the performance of the proposed defense framework in a typical industrial manufacturing network using an…

Weak-Key Analysis for BIKE Post-Quantum Key Encapsulation Mechanism

Mohammad Reza Nosouhi, Syed W. Shah, Lei Pan +4 more

cs.CR · April 2022 · cited 16× · arXiv ↗ · more like this ·

The evolution of quantum computers poses a serious threat to contemporary public-key encryption (PKE) schemes. To address this impending issue, the National Institute of Standards and Technology (NIST) is currently undertaking the Post-Quantum Cryptography (PQC) standardization project intending to evaluate and subsequently standardize the suitable PQC scheme(s). One such attractive approach, called Bit Flipping Key Encapsulation (BIKE), has made to the final round of the competition. Despite having some attractive features, the IND-CCA security of the BIKE depends on the average decoder failure rate (DFR), a higher value of which can facilitate a particular type of side-channel attack. Although the BIKE adopts a Black-Grey-Flip (BGF) decoder that offers a negligible DFR, the effect of weak-keys on the average DFR has not been fully investigated. Therefore, in this paper, we first…