Community structure is an important element in distributed network analysis. It helps in the detection of connectivity structure, the identification of undesired centralization, and the identification of crucial nodes. Most of the existing approaches use only topological information and neglect the rich information obtainable from the content data. In this paper, we propose a method that combines both topological data and content data to detect communities within blockchain public networks mainly the Bitcoin network. the proposed method is based on Feedforward Autoencoders and deep feature representations algorithm. Our results show that the community structure and most of the network properties are x4 higher than expected from a distributed network. In the Bitcoin network, nodes prefer to connect to other nodes that share the same characteristics.

The Cosmos uses an Inter-Blockchain Communication protocol (IBC), which achieves interoperability among heterogeneous blockchains, and horizontal scaling. In Cosmos, inter-chain transactions show lower performance than intra-chain transactions. As the inter-chain transaction rate increases, the entire network's transaction processing speed per second (TPS) decreases. Detail performance evaluations on Cosmos are essential for improving interoperability and designing with the trade-offs between scalability and compatibility. Therefore, this paper proposes a new approach to measure and analyze the inter-chain message relay time in Cosmos. Our results focus on the performance of inter-chain in terms of communication between different chains.

This paper presents the development results for the Wireshark dissector of the Ethereum Node Discovery Protocol for monitoring and analyzing Ethereum P2P networks. The new version v5 of the Ethereum Node Discovery Protocol applied encryption to the traffic. Therefore, the Wireshark Node Discovery Protocol based on previous versions, such as the v4 dissector, can no longer be used to analyze the network. This paper develops a dissector that interprets encrypted packets of the Node Discovery Protocol based on Ethereum Node Discovery Protocol v5. Node Discovery Protocol analysis can be used to research network properties and improve network performance.

Bitcoin is a blockchain-based network where thousands of nodes are directly connected and communicate through a gossip-based flooding protocol. Mined blocks are propagated to all participating nodes in the network through compact block relay (CBR) protocol. Therefore, reducing the block relay time between nodes can reduce the block propagation time to all nodes and ultimately improve the performance of Bitcoin. In order to reduce the block relay time, the delivery time between nodes must be measured and analyzed to find the cause of the delay and provide ways to resolve it. Therefore, in this paper, we measure the CBR time between directly connected Bitcoin nodes and analyze the cause of the relay delay. Our results show that the delivery time delay is affected by whether or not a transaction is requested when assembling the compact block. In addition, the reason for requesting a transaction is due to the transaction propagation method and the characteristics of the transaction itself.

The Ethereum network uses Kademlia, a well-known P2P network, which allows the search for new nodes, and the change of connection with neighboring nodes. The Ethereum network must cope with security attacks such as DDoS attacks, 51% attacks, and Sybil attacks, and scalability issues, which slows down the transaction processing speed per second (TPS) as the network expands. A deep analysis of the dynamically changing topology and the connection between the nodes constituting the topology is needed to solve these problems. Therefore, in this paper, we measure the topology in the Ethereum network using a passive probing data collection to search for active nodes in the network and an active probing method to check the activity of nodes participating in the Ethereum network. Our results give a clear insight into the topology properties and topology visualization.

Bitcoin is the most representative UTXO-based blockchain platform, and many studies have been conducted related to it. However, account-based blockchains such as Ethereum are not yet profoundly analyzed. There is an urgent need to track all cryptocurrency transactions involved with illegal activities to deanonymize and identify malicious users. To link users' accounts to real identities in both networks, we first need to examine the differences between Ethereum and Bitcoin to propose an efficient deanonymizing method. Therefore, this paper compares and analyzes the wallet address clustering method of Bitcoin and Ethereum.

In Bitcoin, memory pool is a space of unconfirmed transactions. when a node receives newly generated transactions, the node verifies it and appends it into the local mempool. The transactions are stored in the mempool until they get included in a newly mined block. Since each node has a different capacity for storing unconfirmed transactions; thus, each node has different transactions stored in mempool. In this paper, we examine the mempool similarity using the Jaccard Index among four Bitcoin full nodes.

Distribution of medicine in the public health community centers has been regulated and monitored in an official distribution channel. However, counterfeit medications still circulate in the community. Circulation of counterfeit medicines is caused by factors from businesses, consumers, and medicine distribution supervision. The use of blockchain technology in supply-chain has shown new breakthroughs to overcome these problems since it ensures immutability, transparency, and decentralization of data. In this paper, we proposed a new blockchain-based Medicine Supply Chain Management (MSCM) system. The proposed system has been applied to medicine distribution channels between public community health centers in Indonesia. To evaluate the proposed system, we used JMeter as a benchmarking tool to measure the system performance in terms of transactions per second, latency, and the utilization of resources.

Ethereum is arguably the second most popular cryptocurrency-based network after Bitcoin, both make use of the distributed ledger technology known as blockchain. The blockchain-based networks are considered to be secure, but the level of provided security is proportional to the number of connected nodes, the number of influential nodes and the supported amount of hash power. Thus, the knowledge of the network properties and nodes behavior is useful to protect the network from the possible attacks such as double spending attacks, DDoS attacks, 51% attacks, and Sybil attacks. In this paper, we propose nodes discovery mechanism, which performs a P2P links discovery on Ethereum main-network. For that, we developed the Search-node, a modified version of Ethereum Client that search for all participating nodes in the network, store the nodes identification in the Bucket, and then process the peer discovery method. We analyze the collected data to discover the relationship between nodes, heavily-connected nodes, nodes geo-distribution and provide network snapshots, as well as some data related to security issues and possible attacks over the influential nodes. Our results show that approximately 300,000 nodes are connected over Ethereum network, and among these roughly 139 nodes show a high-degree.

Bitcoin is designed to allow its users to send and receive payments under a pseudonym. In Bitcoin, A pseudonym is an address from/to which a user sends/receives coins. Owing to users anonymity, one-half of the transactions in Bitcoin are associated with illegal trading or money laundering. Hence, it is necessary to develop an approach that estimates the number of coins owned by Bitcoin users and identifies transactions which deal with illegal activities. Considering that every address involved in the Bitcoin transaction is stored permanently in the ledger. If an address is ever mapped to a user identity, every transaction wrote by that user will be linked. In this study, we proposed a new method to identify the number of coins owned by users, in particular, we estimate the number of bitcoins held by the Bitcoin creator Satoshi Nakamoto, by analyzing the mining hash rate, mining reward and transactions data.

Indonesian National Institute of Aeronautics and Space (LAPAN) concerns to develop a system that provides actual information and prediction related to space weather activities called Space Weather Information and Forecast Services (SWIFtS). SWIFtS is supported by a data storage system that serves data near real-time. Because the data is collected on one single server and is served by a centralized model, problems emerge when the researchers need the server for data processing and making forecasts to update the content on the SWIFtS website. The system is incapable of providing the latest data when the server is down. Therefore, we propose a new system that utilizes the decentralized model for storing data using the Inter Planetary File System (IPFS). Our proposed method focuses on the background process, and its scheme will increase the data availability and throughput by spreading it into nodes through a peer-to-peer connection. Other unused resources would be useful and no single point of failure. For monitoring, we develop a real-time data flow from each node and information of status nodes. As our expected, performance shown that our proposed system has better throughput than the existing system.

Recently Distributed Denial-of-Service (DDoS) are becoming more and more sophisticated, which makes the existing defence systems not capable of tolerating by themselves against wide-ranging attacks. Thus, collaborative protection mitigation has become a needed alternative to extend defence mechanisms. However, the existing coordinated DDoS mitigation approaches either they require a complex configuration or are highly-priced. Blockchain technology offers a solution that reduces the complexity of signalling DDoS system, as well as a platform where many autonomous systems (Ass) can share hardware resources and defence capabilities for an effective DDoS defence. In this work, we also used a Deep learning DDoS detection system; we identify individual DDoS attack class and also define whether the incoming traffic is legitimate or attack. By classifying the attack traffic flow separately, our proposed mitigation technique could deny only the specific traffic causing the attack, instead of blocking all the traffic coming towards the victim(s).

Most of the existing platform for Bitcoin data analysis or visualization, they perform data collection from one node in the main-net. Thus we can notice some differences in their provided data. In this research, and in order to provide global data visualization, we collect both the historical and realtime Bitcoin data. Our monitoring system is comprised of three main components; multiple full Bitcoin nodes were used to collect data, the analysis of data was done by the Analytic Engine, while the webserver was used to visualize both row-data and analyzed data.

In this paper, we propose a proactive security method that estimates distributed denial of service (DDoS) attack volume in order to overcome the limitation of the response time of reactive security systems based on intrusion detection. To that end, we define and discuss network intrusion forecasting and intrusion factors in comparison to intrusion detection. Intrusion factors for a DDoS attack are also analyzed and collected from the Honeynet system. Based on the data from the Honeynet system, we conduct correlation and regression analysis, both statistical approaches, to predict the potential DDoS attack volume for the network security of our university. By combining network intrusion detection with intrusion forecasting, network operators can take active countermeasures based on the forecasting results and strengthen the network security.

The hierarchical network structure is proposed as a solution to the problem of decreased network performance for large-scale multimedia delivery in a single wireless LAN environment. However, the network structure on the Android OS is used for media streaming service; the role of the source device is important because a group owner delay causes a performance problem in which streaming data transmission to all Wi-Fi direct network groups creates a bottleneck. For a solution to these problems, we propose the media stream relay engine architecture and describe sequence diagrams for the development of a relay engine on the Android OS.

In this paper, we propose a Media Distribution Tree (MDT) construction method to provide efficient multimedia streaming service between mobile smart devices in mobile ad hoc networks. An MDT for efficient media streaming is constructed based on a maximum spanning tree, which considers device hardware performance, energy and wireless network state to determine media stream relay nodes. The MDT represents the media streaming paths among mobile smart devices and connects a group owner device and group member devices. Finally, we measure network bandwidth and round-trip time on the media streaming network, which follows the constructed MDT using the proposed method, and analyze the experiment results.

We developed a robust approach that can be synchronized with accuracy to a media streaming group in a network congestion situation. This approach consists of a server-side and client-side algorithm. The server-side algorithm is used to transmit the playback information using a synchronization control packet to clients. The synchronization control packet is transmitted in an event-driven manner. The clientside algorithm synchronizes the playback position by using the information received from the server. The detailed algorithm is used to accurately synchronize the playback position on the client. Finally, we measured the synchronization accuracy according to the network congestion. The performance results of this experiment can improve the completion time and the synchronization accuracy in network congestion.

We report performance measurements and analyses of a variety of wireless networks to arrive at an appropriate network structure configuration for smooth multimedia streaming service with a variety of smart devices in a single wireless network environment. Unlike the usual infrastructure network, configurations such as the IEEE 802.11 ad hoc network and the Wi-Fi direct network use direct connections between devices without going through a wireless AP. Therefore, these configurations prevent concentrating traffic at the wireless AP. We generated three types of wireless network performance measurements and arrived at a suitable network for multimedia streaming service using a variety of smart devices. The wireless network was configured in a structure for efficient multimedia streaming service in a single wireless LAN environment, and subsequently, the network performance was measured.

The method of inferring firewall policy, using Active Probing repeats the process of transmitting TCP/UDP/ICMP packets and receiving ICMP response packets. However, if ICMP response packets cannot be received normally, the accuracy of inferring the firewall policy decreases, and it is necessary to verify the feasibility in real conditions. In this paper, we collect Autonomous System (AS) information to investigate the tolerance of ICMP intended for all AS across the world in addition to DNS server information, which is operational within AS. We confirm whether ICMP response packets are received or not by transmitting probing packets to the DNS server. Finally, we propose the AS information that received ICMP packets as the result of the test.

This paper proposes a proactive security system to forecast Distributed Denial of Service (DDoS) attacks. A reactive system focused on detection after network attacks occur has difficulties responding rapidly to massive distributed attacks, such as DDoS. By forecasting the attack, we can take active countermeasures such as strengthening the power of the security devices and it would also enable us to plan a recovery procedure and countermeasures beforehand, providing a more rapid response. In this paper, we discuss previous studies related to intrusion forecasting, define the concept of intrusion forecasting and propose the Internet Intrusion Forecasting System Architecture. To obtain intrusion factors for DDoS attack forecasts, Honeynet was deployed and we analyze Hflow data gathered from Honeynet.

IP prefix hijacking is a well-known security threat that corrupts Internet routing tables and has some common characteristics such as MOAS conflicts and invalid routes in BGP messages. We propose a simple but effective IP prefix hijacking detection method which is based on reachability monitoring. Network reachability means a characteristic that a packet must reach the destination network although the network path is changed due to routing instability. However, when IP prefix hijacking occurs, the traffic sent to victim network does not reach the intended destination but is delivered to attacker network. By identifying the characteristics of the destination network such as network fingerprints, we can know whether the traffic reach the correct destination. In this paper, we present the method of collecting network fingerprints for verifying destination reachability and also propose an IP prefix hijacking detection method using the collected fingerprints. The IP prefix hijacking detection method based on network reachability is effective and useful, which uses a simple active probing and denotes a present network condition.

In this paper we propose effective DNS server fingerprinting method. DNS server fingerprinting is created using characteristics of DNS protocol, domain name information, DNS server configuration. More than 100,000 DNS server fingerprinting is created using a proposed method and is presented in the experimental results.

We propose a framework which infers the policy of firewall deployed in the Internet access point and computer system. The proposed methodology shows how to infer a firewall policy from restricted probing packets, using consecutive characteristics of the IP address and TCP/UDP port number. We also show the experimental results and the performance of the proposed method.

To reduce frequent changes and upgrades of management systems, we need a guideline of OSS's architecture and development methods of the OSSs. TMF has proposed NGOSS technology-neutral architecture (TNA) which describes major concepts and architectural details of the NGOSS architecture in a technologically neutral manner. The NGOSS TNA can be mapped onto appropriate technology-specific architectures (TSAs) using specific technologies such as XML, Java and CORBA Web services, which is a distributed and services-oriented computing technology, can be applied to NGOSS TSA. In this paper, we examine the architectural requirements of TNA, and provide a design of Web services- based TSA in accordance with the TNA requirements.

Embedded Web servers are widely used today for IP-based element management. We present a new management architecture that combines this technology with XML, DOM, and XPath to unify element management and network management. XML is used for both management information modeling and manager-agent communication. By taking advantage of modern Web technologies, the proposed architecture provides a method to develop management applications efficiently and to manage network devices effectively. We also explain how legacy SNMP agents are integrated into our proposed architecture.

An embedded Web server (EWS) is a Web server that runs on an embedded system with limited computing resources and serves embedded Web documents to a Web browser. By embedding a Web server into a network device, it is possible for an EWS to provide a powerful Web-based management user interface constructed using HTML, graphics and other features common to Web browsers. When applied to embedded systems, Web technologies offer graphical user interfaces which are user-friendly, inexpensive, cross-platform, and network-ready. This paper explores the topic of an efficient and lightweight embedded Web server for Web-based network element management. We present the architecture of an embedded Web server that can provide a simple but powerful API. We also present the design and implementation of POS-EWS, which is an embedded Web server that we have developed for Web-based network element management. As well, we present the results of POS-EWS's performance evaluation and EWS optimization methods in a commercial Internet router.

In this paper we introduce interface mechanisms for use between embedded management applications and embedded Web servers, and provide a guideline for choosing an efficient interface mechanism. Also we provide effective integration mechanisms for each interface mechanism for the sake of cost-effective development of Web-based network element management.