The proliferation of cloud-enabled services has caused an exponential growth in the traffic volume of modern data centres (DCs). An important aspect for the optimal operation of DCs related to the real-time detection of anomalies within the measured traffic volume in order to identify possible threats or challenges that are caused by either malicious or legitimate intent. Therefore in this paper we present SDN-PANDA, a 'pluggable' software platform that aims to provide centralised administration and experimentation for anomaly detection techniques in Software Defined Data Centres (SDDCs). We present the overall design of the proposed scheme, and illustrate some initial results related to the performance of the current prototype with respect to scalability and basic traffic visualisation. We argue that the introduced platform may facilitate the underlying functional basis for a number of real-time anomaly detection applications and provide the necessary foundations for such algorithms to be easily deployed.

One of the commonest threats that mobile ad hoc networks are vulnerable to is data packet dropping, which is caused either by malicious or selfish nodes. Most of the existing solutions to solve such misbehaviour rely on the watchdog technique, which suffers from many drawbacks, particularly when using the power control technique. To overcome this problem with a moderate communication overhead, this paper introduces a new approach for detecting misbehaving nodes that drop data packets in MANET. It consists of two stages the monitoring stage in which each node monitors its direct neighbours with respect to forwarding data packets of a traffic session in the network, and the decision stage, in which direct neighbouring nodes decide whether the monitored node misbehave or not. Our new approach is able to detect the misbehaviour in case of power control employment, with a low communication overhead compared to the existing approaches.

The plethora of networked multimedia services and ubiquitous devices has ultimately changed the objective of networking to one that strives in enabling the provision and interaction of networked services. It is therefore necessary especially in the home environment to consider the enhancement of the way services are provided to the end user. To be able to realise such a vision, a common interworking layer needs to be adopted. This allows all the devices to use the same IP addressing domain and therefore be considered as operating on one network. That would ultimately provide a common networking layer for the applications. In doing so, the authors would enable services to interact seamlessly without the needs of provision for roaming and handover functionalities. This paper presents BlueBridge, a solution that provides seamless wireless interworking in the lower layers. The detail of the design and implementation and provide results that prove the enhanced capabilities of its functionality.

Sensors combined with latest technologies can facilitate the dream of connecting everything in our daily lives to a network of devices easily. There is need for a middleware which can interconnect wireless sensors seamlessly with minimum software and hardware requirements. Previous work is restricted because it has only concentrated on one aspect which is application specific middleware. We propose a novel framework that allows the user to register events as well as query the system directly or through storage service. In this paper we are introducing a novel idea of storing data with in the sensor network for the life time of ad hoc wireless sensor networks (WSN). Previous works have used temporary storage but we implement persistent storage that provides increased functionality. This would help in saving precious resources like battery life by only extracting processed data which means less data would be sent to the users. Storing the data with in the network serves two purposes. First, it would help in further processing of the data for example to create implicit relationships between data and second it saves energy because transmission consumes more energy. The persistent storage will not only provide data consistency at all times by having multiple synchronised copies but also the facility to add context. The copies will be synchronised by sending data at the same time to all copies within the network after adding application required context through the data adaptation service.

Current networked appliance technologies enable devices to communicate seamlessly with one another; for example, the refrigerator at your home might communicate with your mobile phone when you are visiting the supermarket to prompt you about a shortage of food. The devices can communicate with each other irrespective of their location. A great deal of work has been done in networked appliances, but most of this has been undertaken in the field of multimedia. In this paper we used networked appliance technology in a home automation system, to avoid the problems associated with the delivery of packages while the homeowner is away. We use a peer-to-peer distributed gateway service to allow networked appliances to reach beyond the household boundary, thereby providing location independence. The use of the ad hoc gateway allows the utilisation of existing networked appliance services, which would not otherwise be possible. Users can interact with the postman and allow him access while they themselves are absent; functionality that would not otherwise be possible. We demonstrate the viability of our package delivery framework using case studies and a prototype implementation.

Buffer overrun vulnerabilities cause significant security problems, and have proven to be difficult to prevent. In this paper we present a novel approach to tackling the problem. Rather than concentrate on how to prevent the use of code containing buffer overrun vulnerabilities, we look at component composition techniques that can allow vulnerable code to be executed in a safe way within a composed application. We establish how this can be determined in an automated way using formal code analysis techniques and present results from the prototype system that we have developed for this purpose.

We introduce a method for harnessing the emergent behaviour of networked devices in a ubiquitous computing setting, with the aim of reducing malicious code propagation. It is not intended as a means of identifying malicious code, but rather reducing the opportunity for it to propagate once identified. At the heart of the method is a correlation between the nodes of a ubiquitous computing network and cells of a cellular automaton using the propagation of trust between devices. The use of cellular automata produces a system that is scalable, requires limited network capacity, allows for reduced resource usage and localises the security threat posed by malicious code; all essential in a ubiquitous computing environment, where we find many devices, but with restricted resources and capabilities.

The vision of ubiquitous computing presents us with unique difficulties in terms of maintaining security. Many of these relate to privacy or quality of service issues, but underpinning these is the requirement for secure execution of code. We present a novel framework for utilising a hybrid method of code analysis combined with component composition techniques. The aim has been to allow sandboxing techniques to maintain security dynamically in a ubiquitous computing environment. We argue that whilst security issues for ubiquitous computing are particularly acute, characteristics of the environment can also be harnessed advantageously to fulfil these security requirements.

Mobile ad-hoc networks are infrastructure-free highly dynamic wireless networks, where central administration or configuration by the user is impractical. This paper highlights the questions of allowing all the wireless ad hoc devices to use the same network address in a global wireless framework. It presents the paradigm of using auto-assigned, private non-internet-routable IP addresses as the basis to provide anytime, anywhere services to nomadic end users in the information space. It follows on from our work on integrating personal mobility services architectures and interoperating wireless networked appliances. Providing a multi-hop communication over a series of user's devices each acting as a multi-port MAC bridge constructs an interoperable, interworking domain allowing applications to run seamlessly in the upper layers. We discuss the case of the IEEE 802.11 protocol specification where we present working scenarios and protocols used to initialise and maintain the operation of its multi-hop communications. It is an attempt to provide a better range of services in an interoperable heterogeneous domain to offering the services from both the network side and the local environment by means of multi-hop ad-hoc MAC bridges.

Forthcoming network computing systems are expected to provide a wide variety of services to personal mobility users anywhere anytime in the world. Personal mobility services require an advanced architecture that integrates support protocols, mechanisms and special functionality for the dynamic reconfiguration of applications and services available in new environments when users change from one terminal to another. This paper introduces an architecture, integrated personal mobility services architecture (IPMSA), that enhances personal mobility by providing access to integrated structured and unstructured services wherever they are available in a seamless manner.

Third generation mobile networks aim to offer 'any service, anywhere, at any time'. Users require privacy within these systems in order to feel confident of their use. Privacy requirements (in mobile networks) are: content, location and identification privacy, and authentication. Differing from previous approaches to privacy, the network itself is considered to be an untrusted party. The paper proposes a scheme that allows the user to register with the network and remain anonymous (both location and identification). Digital mixes are used to create anonymity and authentication is achieved through a token based scheme. Finally the aspect of information leaking to authorised third parties is discussed and billing requirements are detailed which involve the use of 'coin' like tokens traded for services.