Network traffic prediction for small flow aggregations is crucial in automating future network management and optimization. However, fine-grained traffic prediction is challenging because some flows reveal anomalous behavior influenced by various factors. In this study, we present a contextual approach to improve the prediction of these flows. We leverage time and location context in IP flows to aggregate them into country traffic time series, then cluster the countries' traffic time series based on their spike patterns. For the cluster dominated by spikes, we investigate real events correlated to the spikes, model the impact of these events as weights, and use the weights to improve prediction performance on the traffic cluster. We evaluate our method on network traffic traces from a campus network and our dataset of university events. Our method improves the predictability of anomalous traffic flows by 6%. Our work showcases the potential of improving anomalous flow prediction by augmenting contextual data.

With the rise of the internet many new data sources have emerged that can be used to help us gain insights into the cyber threat landscape and can allow us to better prepare for cyber attacks before they happen. With this in mind, we present an end to end real time cyber situational awareness system which aims to efficiently retrieve security relevant information from the social networking site Twitter.com. This system classifies and aggregates the data retrieved and provides real time cyber situational awareness information based on sentiment analysis and data analytics techniques. This research will assist security analysts to evaluate the level of cyber risk in their organization and proactively take actions to plan and prepare for potential attacks before they happen as well as contribute to the field through a cybersecurity tweet dataset.

Traditional antivirus software is using virus definition to identify malware infection. In addition, antivirus needs to update the new virus definitions to guarantee its detection accuracy. However, due to the number of malware variants and new types of them are increase, it is very difficult to detect and respond them all. Moreover, there will be a serious incident if an unknown malware that did not correspond to the data definition had installed and expanded the infection without any notification. Therefore, in this paper we proposed a method to detect malware infection focus on registry accesses and malware execution processes based on Windows OS host pc. By using URSNIF banking spyware in experiments, we calculated its high failure rate of registry accesses as well as checked on specific access to confirmed the detection result.

Presents the introductory welcome message from the conference proceedings. May include the conference officers' congratulations to all involved with the conference event and publication of the proceedings record.

Cooperation among nodes plays an important role in the commercial development of wireless networks. Efficient cooperation should include not only encouraging selfish nodes to forward packets for one another but also selecting optimal transmission methods. Therefore, in this paper, in order to improve network performance, we propose a social-oriented adaptive transmission scheme for wireless ad hoc networks. Firstly, next-hop node for each transmission is decided by a double auction-based social awareness mechanism. Then in the case of relay-aided transmissions, optimal relaying method is selected by jointly considering network coding and spectrum spatial reuse. Simulation results demonstrate that the proposed scheme has significant advantages in social welfare and throughput improvement.

This paper shows our design of a hybrid control model for flow-based networks. There are many research efforts related to the flow-based networks, however, our work was inspired by OpenFlow technology. Specially that OpenFlow was counted as a key enabler technology for Software Defined Networks (SDN). Thus, it has a great potential to improve the current Internet by providing new functionalities and a new control scheme and thus enabling new smarter applications to be created. However, there have been some debates regarding the scalability of the OpenFlow's controller, due to its dependency on a centralized controller. Our study aims to provide flow-based networks with a hybrid control model that combines both central control and distributed control, in order to provide a more relaxed control. This is done by designing two new features, network equipment to equipment flow installation, and a new type of proactive flows. Through which we aim to relieve some of the load off the central controller, make flow-based networks more self-aware, and provide a method to support flows with strict timing requirements. This hybrid control model is proposed as a step forward towards encouraging a wider adoption of flow-based networks as an easily programmed network that holds a great potential as a future Internet technology.

In future mobile systems, various access networks will be used and the usability of a mobile node (MN) with the access networks will be higher. When a MN is connected to several access networks simultaneously, it may hand over from one access network to the other according to the connectivity to the access network. In order to keep communications even during handover, the mobility of MNs and the continuous communications have to be supported. In addition, IP mobility has to be supported as well. With the increase usage and mobility of MNs, it is highly required to control the traffic incurred by the communication of MNs. In the prospects of Network Service Provider (NSP) or Internet Service Provider (ISP), the overall aspect of traffic would be more dynamic due to the mobility of MNs. It is also more likely for the traffic to be concentrated. Therefore, it is necessary for Service Provider (SP) to have how to control the communication service provided to each MN in order to provide smooth communication. In this paper, we propose a method to support the continuous communications in Proxy Mobile IPv6 (PMIPv6) that provides IP mobility. In case that a MN is connected to a PMIPv6 domain through multiple interfaces, this method makes it possible to keep all the communications as long as some connecting interfaces remain supported when other interfaces are disconnected because of some problems such as the movement of the MN. And we propose a method for the SP to control the communication provided to MN. This paper suggests a new signaling procedure to provide more stable continuous communications and to control the communications efficiently. The new MN protocol stack model is designed to maximize the use of MN as well.

Tele-conference technology is an essential component of the tele-medical service. Especially the high quality tele-conference technology is actively adapted for the medical applications today. We will look at various tele-conference technical issues from the point of view of the medical application.

Tele-conference system is used for audio and video communication among people located far apart. Tele-conference system provides the users with a virtual conference space to give the users the impression that they are in the same place, even though in reality they are in different places. Tele-conference system makes use of the network technology to make this happen. The bandwidth feasibility test is a method to figure out if the tele-conference is possible given a network configuration and bandwidth requirements for the users. The feasibility test can ultimately used to find out the optimal configuration for a tele-conference system to give best audio and video quality. In this paper we review the bandwidth feasibility test method for a single mixer tele-conference system and extend the idea to cover the multiple mixer tele-conference system. A multiple mixer tele-conference system will be necessary in the future ubiquitous network, where the users will be accessing the tele-conference from various network environments.

Remote surgery is one of the most desired applications in the context of recent advanced medical technologies. For a future expansion of remote surgery, it is important to use conventional network infrastructures such as Internet. However, using such conventional network infrastructures, we are confronting time-delay problems of data transmission. In this paper, a remote surgery experiment between Japan and Thailand using a research and development Internet is presented. In the experiment, the image and audio information was transmitted by a newly developed low latency CODEC system to shorten the time-delay. By introducing the low latency CODEC system, the time-delay was shortened compared with the past remote surgery experiments despite the longer distance. We also conducted several network measurements such as a comparison between TCP/IP and UDP/IP about the control signal transmission.

Several robotic surgical systems have been developed for MIS (minimally invasive surgery) including commercialized products such as da Vinci and ZEUS. We have developed a minimally invasive surgical system, which have carried out remote surgery experiments for five times at the writing time. In this paper, a remote surgery experiment, which was conducted between Japan and Korea by using the developed minimally invasive surgical system is described. Research & Development (R & D) Internet testbet, APII (Asia-Pacific Information Infrastructure), which consists of an optical submarine cable network KJCN (Korea-Japan Cable Network), was used. In the experiment, a laparoscopic cholecystectomy was successfully carried out on a pig. The network time-delays of control signal and images were 6.5 msec and 435.5 msec respectively. A comparison of remote surgery experiments using ISDN and the Internet was studied

The recent relationship between Japan and Korea has become close aspects of politics, culture, and so on. There are many research activities cooperated with Korean researchers in Kyushu University. This is because Kyushu University is one of core stations about gigabit network between Japan and Korea. Many experiments of the advanced applications were performed using this network. However most of them were demonstration held by professional and we thought the consideration for demonstration by amateur was very interesting. So we made an opportunity that freshmen, what is called absolute end user, performed demonstration experiment in lecture form. We focus on actual remote communication with Korean researchers using DVTS system in this paper, as a part of curriculum for freshmen in Kyushu University as a consideration of demonstration. Especially we focus on way to preparation of system and configuration of the remote class.

We have established a medical network in Asia-Pacific area with high-quality moving image on a super broad-banded Internet line since February 2003. Broadcasting real-time surgery and teleconference with medical-quality videos with digital video transport system (DVTS) were so useful to learn surgical techniques and other medical procedures beyond borders. We have conducted 20 events in categories of teleconference (8 times), live transmission of medical procedure (6 times), and remote attendance to scientific medical meetings (6 times) until September 2004. We had teleconferences among 3 countries in APAN-Hawaii in January 2004 (Japan, Korea and USA), and in APAN-Cairns in July 2004 (Japan, Korea and Australia). There have been no serious transmission/ethical problems so far. With these experiences and current achievements, we hope to extend this advanced network system to whole Asia-Pacific countries to share medical skills and knowledge.

In this paper, we have focused on the problem about overload of MCU (multipoint control unit) on H.323 multipoint conference systems. Conference system uses the MCU to support multipoint conference. When the number of participants increases, the MCU may become overload and it is difficult to support large scale conference by one MCU. Then if we want to have a large scale conference, we must avoid this bottle neck about load on MCU. Therefore we propose the new method called ORIO to distribute the load of MCU. ORIO doesn't use MCU for the copy of messages but each host copy the messages and play a role of MCU. Furthermore each host can find and connect to suitable one by the request routing using DNS on ORIO. We evaluated the scalability of the conference system using ORIO by measuring network load. From the result of evaluation by simulation, we find out that the conference system using ORIO has scalability for the number of hosts.

Requirements for broadband mobile communications suggest the importance of the metropolitan area network (MAN) in beyond 3G integration. Beyond 3G accommodates radio systems including 3G, 4G and wireless LANs, and operates all-IP networks. Ethernet technology has become a suitable solution to cover all access points of various radio systems because of its simplicity and flexibility. A MAN by Ethernet, however, still has issues of scalability. The spanning tree protocol requires so much time to rebuild the tree in a change of topology, especially in a large MAN, and eventually causes much packet loss, which is intolerable to real time applications, such as voice and video, during reconfiguration. We propose a scalable spanning tree protocol (SSTP) to realize fast rebuilding of a spanning tree by applying a concept of regions and configure its parameters automatically. Our evaluation shows that SSTP is a solution for future mobile communication networks consisting of thousands of bridges.