Trustworthy internet

This book collects a selection of the papers presented at the 21st International Tyrrhenian Workshop on Digital Communications, organized by CNIT and dedicated this year to the theme "Trustworthy Internet." The workshop provided a lively discussion on the challenges involved in reshaping the Internet into a trustworthy reality, articulated around the Internet by and for People, the Internet of Contents, the Internet of Services and the Internet of Things, supported by the Network Infrastructure foundation. The papers have been revised after the workshop to take account of feedbacks received by the audience. The book also includes: i) an introduction by the Editors, setting the scene and presenting evolution scenarios; ii) five papers written by the session chairmen, reputed scientists, and each dedicated to a facet of the trustworthy Internet vision; iii) a concluding paper, reporting the outcomes of a panel held at the conclusion of the workshop, written by the two keynote speakers. 26.2.1 Overview and System Architecture......Page 2 27.2.1 Content-Naming......Page 4 27.2.2 Content-Routing......Page 6 References......Page 14 Cover......Page 1 Trustworthy Internet......Page 3 27.2.4 Content-Distribution......Page 8 27.3...Conclusions......Page 9 References......Page 11 References......Page 12 Foreword......Page 5 Introduction......Page 7 References......Page 13 Contents......Page 15 25.4.5 Content Registration, Protection, Search, Licensing and Access Control for Limited Capabilities Devices......Page 10 References......Page 16 Part INew Visions for a Trustworthy Internet......Page 19 Abstract......Page 20 1.1...Introduction......Page 21 1.2...Security and Privacy Challenges in Publish--Subscribe Architectures......Page 22 1.3...Publish--Subscribe Security Features......Page 23 1.4...The \Uppsi Architecture......Page 25 1.4.1 \Uppsi-Specific Security Mechanisms......Page 27 1.5...Security Aspects of Comparable Internetworking Architectures......Page 28 1.6...Conclusions and Future Work......Page 30 References......Page 31 Abstract......Page 33 2.1...Introduction......Page 34 2.2...Network Programmability: Past, Present and Future......Page 35 2.3...Multi-Service Programmable Router Architecture......Page 37 2.4...Security Aspects in Programmable Routers......Page 39 2.5...Enforcing Secure Multi-Service Provisioning......Page 41 2.6...Experimental Validation......Page 43 2.7...Conclusions......Page 45 Abstract......Page 47 3.1...Introduction......Page 48 3.2...SPA Concept and Motivation......Page 49 3.3...SPA Procedures......Page 51 3.3.1 Register Procedure......Page 52 3.3.2 Find Procedure......Page 53 3.4...Test Bed Description......Page 54 Acknowledgements......Page 57 Abstract......Page 58 4.1...Introduction......Page 59 4.2.1 Identity and Profile......Page 60 4.3...Web-Based Profile and Identity Management......Page 61 4.3.1 Identity Management Systems......Page 62 4.3.2 Profile Management Systems......Page 63 4.3.3 Use of Identities and Profiles in Contexts......Page 64 4.4...InterDataNet Middleware Infrastructure......Page 65 4.5...InterDataNet Overlay Network......Page 68 4.5.1 Usage Scenario of the IDN Overlay for the e-Profile Management......Page 70 4.6...Conclusions......Page 71 References......Page 72 Part II Security, Energy Efficiency, Resilienceand Privacy......Page 74 Abstract......Page 75 5.1...Introduction......Page 76 5.2...Taxonomy......Page 77 5.3.1 Application Privacy......Page 78 5.3.2 Correspondent Privacy......Page 80 5.3.3 Location Privacy......Page 82 5.4...Conclusions......Page 85 References......Page 86 Abstract......Page 88 6.1...Introduction......Page 89 6.2...Security Requirements......Page 90 6.4...Layered Security......Page 91 6.5...Physical Layer Security......Page 92 6.5.1 Quantum Cryptography......Page 93 6.5.3 MIMO......Page 94 6.5.4 The Noise Loop Modulation: How It Works......Page 95 6.6.2 System Model......Page 96 6.7...Performance Analysis......Page 97 6.8...Probability of Detection of a Third Unwanted Listener......Page 98 6.9...Probability of Denial of Service by a Third Unwanted User......Page 99 6.10...FPGA Implementation......Page 101 References......Page 103 Abstract......Page 105 7.2...Signal Processing in the Encrypted Domain......Page 106 7.3...Notation and Preliminaries......Page 107 7.4.1 eMul......Page 108 7.4.2 eInv......Page 109 7.4.3 eDot......Page 110 7.5.1 Gram-Schmidt Orthogonalization in the Plain Domain......Page 111 7.5.2.0 Security Discussion......Page 112 7.5.2.0 Complexities......Page 113 References......Page 114 Abstract......Page 116 8.1...Introduction......Page 117 8.2...Current VoIP Architectures and Protocols......Page 118 8.3.1 Distributed Location Service......Page 120 8.3.2 P2P VoIP Security......Page 121 8.4...Implementation......Page 123 References......Page 125 Abstract......Page 127 9.1...Introduction......Page 128 9.2...Regulatory Aspects......Page 129 9.4...Scenarios Description......Page 131 9.5...Performance Results......Page 133 9.6...Conclusions......Page 137 References......Page 138 Abstract......Page 139 10.2...Network Set-Up in IEEE 802.15.4 and Impact of PAN Coordinator Position on Energy Consumption......Page 140 10.3.1 Step 1: Initialization of Data Structures at FFDs......Page 142 10.3.2 Step 2: Choice of the PAN Coordinator......Page 143 10.3.3 Step 3: Election of the Network’s PAN Coordinator......Page 145 10.4.1 Comparison in Terms of Resulting Topology......Page 146 10.4.2 Comparison in Terms of Energy Efficiency......Page 147 Acknowledgments......Page 148 Part IIISecurity in Online Social Networks......Page 150 Abstract......Page 151 11.1...Introduction......Page 152 11.2...Background......Page 153 11.3...State-of-the-Art......Page 156 11.4...Security Perception and Use of OSNs......Page 159 11.5...User Interactions and Their Implications......Page 161 11.6...Conclusions and Future Work......Page 163 References......Page 164 12.1...Introduction......Page 166 12.1.1 Problem Statement and Chapter Organization......Page 168 12.2...Social Factors for Participation and Accountability......Page 169 12.4...The Tension Between Privacy and Social Translucence......Page 170 12.4.1 System Architecture......Page 171 12.4.2 Revocation of Misbehaving Users......Page 173 12.4.3 Anonymous Reputation......Page 174 12.5...Conclusions......Page 175 Abstract......Page 178 13.1...Introduction......Page 179 13.2.1 Profile Cloning......Page 182 13.2.2 Cross-site Profile Cloning......Page 183 13.3...Abusing Social Networks for Automated User Profiling......Page 184 13.3.1 Implementation of the Attack......Page 186 13.4...Related Work......Page 187 13.5...Conclusions......Page 190 Abstract......Page 193 14.2.1 Networking Functions......Page 195 14.2.2 Data Functions......Page 196 14.3.1 Web-based Decentralized Online Social Networks......Page 197 14.3.2 P2P Online Social Networks......Page 198 14.4...Classifying Decentralized Social Networking Services......Page 199 14.4.2 Granularity of Storage......Page 200 14.4.4 Resource Sharing Incentives......Page 201 14.5...Alternatives to Decentralization......Page 202 14.6...Conclusions......Page 203 References......Page 204 Part IVSecure Collaborative Systems......Page 206 15.1...Introduction......Page 207 15.2...State of the Art......Page 208 15.3...Research Challenges......Page 210 15.3.1 Privacy-Aware Topology-Based Access Control......Page 211 15.3.2 Trust-Based Information Sharing......Page 212 15.3.3 Risk Analysis Tools on Support of Access Control Policy and Privacy Preference Specification and Monitoring......Page 213 15.4...Conclusions......Page 214 References......Page 215 Abstract......Page 217 16.1...Introduction......Page 218 16.2...State of the Art......Page 219 16.3...The Drug Reimbursement Process......Page 220 16.4...An Approach to Dynamic Resiliency......Page 221 16.5...Conclusions......Page 224 Abstract......Page 225 17.1...Introduction......Page 226 17.2...A Trust Model for Certification......Page 227 17.3...Common Criteria......Page 229 17.4...A Closer Look to Service Security Certification......Page 230 17.5...Service-Aware Certification Architecture......Page 231 17.6...Certifying Composite Services......Page 233 17.7...Related Work......Page 235 Acknowledgements......Page 236 References......Page 237 Abstract......Page 239 18.1...Introduction......Page 240 18.2...Usage Control......Page 241 18.3...UCON Authorization: Building Blocks and Workflow......Page 242 18.4...Usage Policy Example......Page 245 18.5...Usage Control Advantages and Challenges......Page 246 18.6...Conclusions......Page 248 Part VNetwork Monitoring......Page 250 Abstract......Page 251 19.1...Introduction......Page 252 19.2...Towards Service-Oriented Network Monitoring......Page 253 19.3...A Programmable Network Monitoring Framework......Page 255 19.4...Using PF_RING for Network Service Monitoring......Page 258 19.5...Conclusions......Page 259 References......Page 260 Abstract......Page 262 20.2...Related Work......Page 263 20.3...NEC’s System for Telemarketer and Anomaly Detection......Page 264 20.4...Data Description......Page 265 20.6...Detection of Anomalous Behavior......Page 266 20.7...Analysis of Anomalous Traffic......Page 268 Acknowledgements......Page 271 21.1...Introduction and Motivation......Page 273 21.2...Overload Control in the SIP Specifications......Page 274 21.3.1 Overload Monitoring......Page 278 21.3.2 Overload Control Algorithms......Page 281 21.3.3 Reaction to Overload......Page 282 21.3.4 Standalone or Cooperative Control Model......Page 284 21.4...Conclusions......Page 286 References......Page 287 Abstract......Page 288 22.1.1 Why Smart Probes?......Page 289 22.1.2 The Analyze While Capturing Paradigm......Page 291 22.2...The Probe Architecture at-a-Glance......Page 293 22.3.1 Capturing Unit......Page 294 22.3.3 Data Plane Performance......Page 295 22.4...Probe Control Plane......Page 296 22.5...On-the-Probe Advanced Processing Techniques......Page 297 22.6...Actual Monitoring Applications: A Practical Use Case......Page 298 References......Page 299 Abstract......Page 301 23.1...Introduction......Page 302 23.2...Description of Snort Rules......Page 304 23.3...Review of FPGA Based IDS Systems......Page 305 23.4...Snort Pre-filter Hardware Architecture......Page 306 23.5...Rule Adaptation......Page 309 23.6...Experimental Result......Page 311 23.7...Conclusions......Page 313 References......Page 314 Abstract......Page 315 24.1...Network Monitoring and Personal Data Protection......Page 316 24.2.1 The MOMENT Perspective......Page 318 24.2.2 The PRISM Perspective......Page 320 24.3...Requirements for a Unified Model......Page 322 24.4...Combining Semantic Models......Page 324 24.5...Conclusions......Page 326 References......Page 327 Part VIContent......Page 330 Abstract......Page 331 25.2...The DMAG’s MIPAMS Architecture......Page 333 25.3...Standard Architectures: MXM and AIT Towards MSPT......Page 336 25.4...Digital Rights Management Integration......Page 337 25.4.3 Content Registration, Licensing and Access Control without Protection......Page 338 25.4.4 Content Registration, Search, Licensing and Access Control without Content Management......Page 339 25.4.5 Content Registration, Protection, Search, Licensing and Access Control for Limited Capabilities Devices......Page 340 25.4.6 Content Registration and Licensing Through External Services......Page 341 Acknowledgements......Page 342 Abstract......Page 344 26.2.1 Overview and System Architecture......Page 345 26.2.2 Scalable Video Coding and Content-Aware Networks......Page 347 26.3...Use Cases......Page 348 26.3.1 Multicast/Broadcast......Page 349 26.3.4 Peer-to-Peer Media Streaming......Page 350 26.4...Research Challenges and Open Issues......Page 351 26.5...Conclusions and Future Work......Page 352 Abstract......Page 354 27.2...Principles of a Content-Centric Network Layer......Page 356 27.2.1 Content-Naming......Page 357 27.2.2 Content-Routing......Page 359 27.2.3 Content-Delivery......Page 360 27.2.4 Content-Distribution......Page 361 27.3...Conclusions......Page 362 Acknowledgements......Page 364 The term "trustworthy" has a very precise connotation in the European Community's FP7 research program. For a network to be qualified as trustworthy, it needs to be secure, reliable and resilient to attacks and operational failures. Furthermore, quality of service must be guaranteed, while protecting user data, ensuring privacy and providing usable and trusted tools to support users in their security management. As such, the Trustworthy Internet not only has to include mechanisms, architectures and networking infrastructures that intrinsically provide basic security guarantees, but it also has to ensure users, service providers and application providers alike that their requirements in terms of Quality of Experience, manageability and efficiency are fully met. Providing such combined guarantees in a rapidly evolving, complex infrastructure such as the Internet requires solving challenging issues that encompass many fields of theoretical and applied information engineering. These issues span all levels of the protocol stack, ranging from finding new intrinsically secure transmission systems, to radically novel routing models, to new architectures for data dissemination and for interconnecting an unprecedented number of devices and appliances. This book aims at representing a view of the state of the "Trustworthy Internet" as we enter the second decade of our century. The material included in this book originated from the 21st International Tyrrhenian Workshop on Digital Communications, an event traditionally organized by CNIT, the Italian inter-university consortium for telecommunication research. The workshop comprised either invited contributions from renowned researchers with complementary expertise, as well as independent, peer-reviewed contributions stimulated through an open call for papers. This volume includes a selected subset of the workshop papers. Each contribution has been edited and extended after the workshop, taking into account the discussions carried out during the event, incorporating when appropriate additional technical material. Furthermore, the authors have strived to complement the specific technical aspects they present with background material devised to more comprehensively introduce the reader to the specific topic of trustworthiness tackled