A framework for generating realistic traffic for distributed denial-of-service attacks and flash events

An intrinsic challenge associated with evaluating proposed techniques for detecting Distributed Denial-of-Service (DDoS) attacks and distinguishing them from Flash Events (FEs) is the extreme scarcity of publicly available real-word traffic traces. Those available are either heavily anonymised or too old to accurately reflect the current trends in DDoS attacks and FEs. This paper proposes a traffic generation and testbed framework for synthetically generating different types of realistic DDoS attacks, FEs and other benign traffic traces, and monitoring their effects on the target. Using only modest hardware resources, the proposed framework, consisting of a customised software traffic generator, ‘Botloader’, is capable of generating a configurable mix of two-way traffic, for emulating either large-scale DDoS attacks, FEs or benign traffic traces that are experimentally reproducible. Botloader uses IP-aliasing, a well-known technique available on most computing platforms, to create thousands of interactive UDP/TCP endpoints on a single computer, each bound to a unique IP-address, to emulate large numbers of simultaneous attackers or benign clients.

Experiences With WM: A Centralised Scheduling Approach for Performance Management of IEEE 802.11 Wireless LANs

In our earlier work ([1]) we proposed WLAN Manager (or WM) a centralised controller for QoS management of infrastructure WLANs based on the IEEE 802.11 DCF standards. The WM approach is based on queueing and scheduling packets in a device that sits between all traffic flowing between the APs and the wireline LAN, requires no changes to the AP or the STAs, and can be viewed as implementing a "Split-MAC" architecture. The objectives of WM were to manage various TCP performance related issues (such as the throughput "anomaly" when STAs associate with an AP with mixed PHY rates, and upload-download unfairness induced by finite AP buffers), and also to serve as the controller for VoIP admission control and handovers, and for other QoS management measures. In this paper we report our experiences in implementing the proposals in [1]: the insights gained, new control techniques developed, and the effectiveness of the WM approach in managing TCP performance in an infrastructure WLAN. We report results from a hybrid experiment where a physical WM manages actual TCP controlled packet flows between a server and clients, with the WLAN being simulated, and also from a small physical testbed with an actual AP.

The persistence of biofilm-associated antibiotic resistance of Staphylococcus aureus isolated from clinical bovine mastitis cases in Australia

The aim of this investigation was to determine the persistence of biofilm-associated antibiotic resistance developed by methicillin-sensitive Staphylococcus aureus (MSSA), of different capsular types, during biofilm formation. Because of superiority of the tissue culture plate (TCP) over the Congo Red Agar (CRA) method for measuring biofilm formation, it was used to determine the persistence of the antibiotic resistance developed by the isolates in biofilms. The antibiotic resistance was found to persist for 3-4 wk post-propagation as planktonic subcultures. Interestingly, some strains even developed resistance to vancomycin and/or teicoplanin. However, no association of either biofilm formation or persistent antibiotic resistance with the major capsular phenotype was observed. These observations highlight the potential significance of (a) determining the antibiograms of S. aureus subcultured from biofilms developed in vitro using the TCP method as well as from planktonic cultures for formulation of an optimal therapeutic strategy, and (b) continuing to identify predominant non-capsular antigens contributing to biofilm formation, regardless of the capsular phenotype for the development of an effective potentially broad-spectrum vaccine for prevention of bovine mastitis caused by S. aureus.

Porphyrins with multiple crown ether voids: novel systems for cation complexation studies

Porphyrins appended with crown ether, benzo-15-crown-5, at the methine positions have been synthesized and characterized. The fully and partially substituted porphyrins and their metallo (Co, Cu, and Zn) derivatives describe one or more ether cavities in the periphery that are capable of recognizing spherical cations. The ability of these macrocycles to complex cations (Na+, K+, Mg2+, Ca2+, Ba2', and NH4+) is investigated by use of visible, 'H NMR, ESR, and emission spectral studies. The tetrasubstituted crown porphyrin (TCP) exhibits very high selectivity for K+. The cations (K', Ba2+, and NH4+) that require two crown ether cavities for complexation promote dimerization of the porphyrins. The ESR study of the cation-induced porphyrin dimers reveals axial symmetry with the porphyrin planes separated by -4.2 A. This distance increases from the fully substituted to partially substituted porphyrins. The cations (K', Ba2+, and NH4') quench efficiently the fluorescence of the free base porphyrins and their metallo derivatives. The quenching process is attributed to the steric geometry of the dimers.

Analysis of Heterogeneous IP Traffic in Wireless Environment

Wireless access is expected to play a crucial role in the future of the Internet. The demands of the wireless environment are not always compatible with the assumptions that were made on the era of the wired links. At the same time, new services that take advantage of the advances in many areas of technology are invented. These services include delivery of mass media like television and radio, Internet phone calls, and video conferencing. The network must be able to deliver these services with acceptable performance and quality to the end user. This thesis presents an experimental study to measure the performance of bulk data TCP transfers, streaming audio flows, and HTTP transfers which compete the limited bandwidth of the GPRS/UMTS-like wireless link. The wireless link characteristics are modeled with a wireless network emulator. We analyze how different competing workload types behave with regular TPC and how the active queue management, the Differentiated services (DiffServ), and a combination of TCP enhancements affect the performance and the quality of service. We test on four link types including an error-free link and the links with different Automatic Repeat reQuest (ARQ) persistency. The analysis consists of comparing the resulting performance in different configurations based on defined metrics. We observed that DiffServ and Random Early Detection (RED) with Explicit Congestion Notification (ECN) are useful, and in some conditions necessary, for quality of service and fairness because a long queuing delay and congestion related packet losses cause problems without DiffServ and RED. However, we observed situations, where there is still room for significant improvements if the link-level is aware of the quality of service. Only very error-prone link diminishes the benefits to nil. The combination of TCP enhancements improves performance. These include initial window of four, Control Block Interdependence (CBI) and Forward RTO recovery (F-RTO). The initial window of four helps a later starting TCP flow to start faster but generates congestion under some conditions. CBI prevents slow-start overshoot and balances slow start in the presence of error drops, and F-RTO reduces unnecessary retransmissions successfully.

Microbial activities in boreal soils: Biodegradation of organic contaminants at low temperature and ammonia oxidation

This thesis deals with the response of biodegradation of selected anthropogenic organic contaminants and natural autochthonous organic matter to low temperature in boreal surface soils. Furthermore, the thesis describes activity, diversity and population size of autotrophic ammonia-oxidizing bacteria (AOB) in a boreal soil used for landfarming of oil-refinery wastes, and presents a new approach, in which the particular AOB were enriched and cultivated in situ from the landfarming soil onto cation exchange membranes. This thesis demonstrates that rhizosphere fraction of natural forest humus soil and agricultural clay loam soil from Helsinki Metropolitan area were capable of degrading of low to moderate concentrations (0.2 50 µg cm-3) of PCP, phenanthrene and 2,4,5-TCP at temperatures realistic to boreal climate (-2.5 to +15 °C). At the low temperatures, the biodegradation of PCP, phenanthrene and 2,4,5-TCP was more effective (Q10-values from 1.6 to 7.6) in the rhizosphere fraction of the forest soil than in the agricultural soil. Q10-values of endogenous soil respiration (carbon dioxide evolution) and selected hydrolytic enzyme activities (acetate-esterase, butyrate-esterase and β-glucosidase) in acid coniferous forest soil were 1.6 to 2.8 at temperatures from -3 to +30 °C. The results indicated that the temperature dependence of decomposition of natural autochthonous soil organic matter in the studied coniferous forest was only moderate. The numbers of AOB in the landfarming (sandy clay loam) soil were determined with quantitative polymerase chain reaction (real-time PCR) and with Most Probable Number (MPN) methods, and potential ammonium oxidation activity was measured with the chlorate inhibition technique. The results indicated presence of large and active AOB populations in the heavily oil-contaminated and urea-fertilised landfarming soil. Assessment of the populations of AOB with denaturing gradient gel electrophoresis (DGGE) profiling and sequence analysis of PCR-amplified 16S rRNA genes showed that Nitrosospira-like AOB in clusters 2 and 3 were predominant in the oily landfarming soil. This observation was supported by fluorescence in situ hybridization (FISH) analysis of the AOB grown on the soil-incubated cation-exchange membranes. The results of this thesis expand the suggested importance of Nitrosospira-like AOB in terrestrial environments to include chronically oil-contaminated soils.

Topological close packed mu phase formation and the determination of diffusion parameters in the Co-Mo system

The study on the formation and growth of topological close packed (TCP) compounds is important to understand the performance of turbine blades in jet engine applications. These deleterious phases grow mainly by diffusion process in the superalloy substrate. Significant volume change was found because of growth of the p phase in Co-Mo system. Growth kinetics of this phase and different diffusion parameters, like interdiffusion, intrinsic and tracer diffusion coefficients are calculated. Further the activation energy, which provides an idea about the mechanism, is determined. Moreover, the interdiffusion coefficient in Co(Mo) solid solution and impurity diffusion coefficient of Mo in Co are determined.

Polydimethylsiloxane (PDMS) modulates CD38 expression, absorbs retinoic acid and may perturb retinoid signalling

Polydimethylsiloxane (PDMS) is the most commonly used material in the manufacture of customized cell culture devices. While there is concern that uncured PDMS oligomers may leach into culture medium and/or hydrophobic molecules may be absorbed into PDMS structures, there is no consensus on how or if PDMS influences cell behaviour. We observed that human umbilical cord blood (CB)-derived CD34+ cells expanded in standard culture medium on PDMS exhibit reduced CD38 surface expression, relative to cells cultured on tissue culture polystyrene (TCP). All-trans retinoic acid (ATRA) induces CD38 expression, and we reasoned that this hydrophobic molecule might be absorbed by PDMS. Through a series of experiments we demonstrated that ATRA-mediated CD38 expression was attenuated when cultures were maintained on PDMS. Medium pre-incubated on PDMS for extended durations resulted in a time-dependant reduction of ATRA in the medium and increasingly attenuated CD38 expression. This indicated a time-dependent absorption of ATRA into the PDMS. To better understand how PDMS might generally influence cell behaviour, Ingenuity Pathway Analysis (IPA) was used to identify potential upstream regulators. This analysis was performed for differentially expressed genes in primary cells including CD34+ haematopoietic progenitor cells, mesenchymal stromal cells (MSC), and keratinocytes, and cell lines including prostate cancer epithelial cells (LNCaP), breast cancer epithelial cells (MCF-7), and myeloid leukaemia cells (KG1a). IPA predicted that the most likely common upstream regulator of perturbed pathways was ATRA. We demonstrate here that ATRA is absorbed by PDMS in a time-dependent manner and results in the concomitant reduced expression of CD38 on the cell surface of CB-derived CD34+ cells.

Evaluation of the Biocompatibility of Poly (ortho ester), Copolymer of ε-caprolactone/D,L-lactide and the Composite of Copolymer of ε-caprolactone/D,L-lactide and Tricalciumphosphate as Bone Filling Material

The purpose of this series of studies was to evaluate the biocompatibility of poly (ortho) ester (POE), copolymer of ε-caprolactone and D,L-lactide [P (ε-CL/DL-LA)] and the composite of P(ε-CL/DL-LA) and tricalciumphosphate (TCP) as bone filling material in bone defects. Tissue reactions and resorption times of two solid POE-implants (POE 140 and POE 46) with different methods of sterilization (gamma- and ethylene oxide sterilization), P(ε-CL/DL-LA)(40/60 w/w) in paste form and 50/50 w/w composite of 40/60 w/w P(ε-CL/DL-LA) and TCP and 27/73 w/w composite of 60/40 w/w P(ε-CL/DL-LA) and TCP were examined in experimental animals. The follow-up times were from one week to 52 weeks. The bone samples were evaluated histologically and the soft tissue samples histologically, immunohistochemically and electronmicroscopically. The results showed that the resorption time of gamma sterilized POE 140 was eight weeks and ethylene oxide sterilized POE 140 13 weeks in bone. The resorption time of POE 46 was more than 24 weeks. The gamma sterilized rods started to erode from the surface faster than ethylene oxide sterilized rods for both POEs. Inflammation in bone was from slight to moderate with POE 140 and moderate with POE 46. No highly fluorescent layer of tenascin or fibronectin was found in the soft tissue. Bone healing at the sites of implantation was slower than at control sites with the copolymer in small bone defects. The resorption time for the copolymer was over one year. Inflammation in bone was mostly moderate. Bone healing at the sites of implantation was also slower than at the control sites with the composite in small and large mandibular bone defects. Bone formation had ceased at both sites by the end of follow-up in large mandibular bone defects. The ultrastructure of the connective tissue was normal during the period of observation. It can be concluded that the method of sterilization influenced the resorption time of both POEs. Gamma sterilized POE 140 could have been suitable material for filling small bone defects, whereas the degradation times of solid EO-sterilized POE 140 and POE 46 were too slow to be considered as bone filling material. Solid material is difficult to contour, which can be considered as a disadvantage. The composites were excellent to handle, but the degradation time of the polymer and the composites were too slow. Therefore, the copolymer and the composite can not be recommended as bone filling material.

An analytical model for performance evaluation of multimedia applications over EDCA in an IEEE 802.11e WLAN

We extend the modeling heuristic of (Harsha et al. 2006. In IEEE IWQoS 06, pp 178 - 187) to evaluate the performance of an IEEE 802.11e infrastructure network carrying packet telephone calls, streaming video sessions and TCP controlled file downloads, using Enhanced Distributed Channel Access (EDCA). We identify the time boundaries of activities on the channel (called channel slot boundaries) and derive a Markov Renewal Process of the contending nodes on these epochs. This is achieved by the use of attempt probabilities of the contending nodes as those obtained from the saturation fixed point analysis of (Ramaiyan et al. 2005. In Proceedings ACM Sigmetrics, `05. Journal version accepted for publication in IEEE TON). Regenerative analysis on this MRP yields the desired steady state performance measures. We then use the MRP model to develop an effective bandwidth approach for obtaining a bound on the size of the buffer required at the video queue of the AP, such that the streaming video packet loss probability is kept to less than 1%. The results obtained match well with simulations using the network simulator, ns-2. We find that, with the default IEEE 802.11e EDCA parameters for access categories AC 1, AC 2 and AC 3, the voice call capacity decreases if even one streaming video session and one TCP file download are initiated by some wireless station. Subsequently, reducing the voice calls increases the video downlink stream throughput by 0.38 Mbps and file download capacity by 0.14 Mbps, for every voice call (for the 11 Mbps PHY). We find that a buffer size of 75KB is sufficient to ensure that the video packet loss probability at the QAP is within 1%.

An optimal weighted-average congestion based pricing scheme for enhanced QoS

Pricing is an effective tool to control congestion and achieve quality of service (QoS) provisioning for multiple differentiated levels of service. In this paper, we consider the problem of pricing for congestion control in the case of a network of nodes under a single service class and multiple queues, and present a multi-layered pricing scheme. We propose an algorithm for finding the optimal state dependent price levels for individual queues, at each node. The pricing policy used depends on a weighted average queue length at each node. This helps in reducing frequent price variations and is in the spirit of the random early detection (RED) mechanism used in TCP/IP networks. We observe in our numerical results a considerable improvement in performance using our scheme over that of a recently proposed related scheme in terms of both throughput and delay performance. In particular, our approach exhibits a throughput improvement in the range of 34 to 69 percent in all cases studied (over all routes) over the above scheme.

MAC design for heterogeneous application support in OFDM based wireless systems

With the increasing adoption of wireless technology, it is reasonable to expect an increase in file demand for supporting both real-time multimedia and high rate reliable data services. Next generation wireless systems employ Orthogonal Frequency Division Multiplexing (OFDM) physical layer owing, to the high data rate transmissions that are possible without increase in bandwidth. Towards improving file performance of these systems, we look at the design of resource allocation algorithms at medium-access layer, and their impact on higher layers. While TCP-based clastic traffic needs reliable transport, UDP-based real-time applications have stringent delay and rate requirements. The MAC algorithms while catering to the heterogeneous service needs of these higher layers, tradeoff between maximizing the system capacity and providing fairness among users. The novelly of this work is the proposal of various channel-aware resource allocation algorithms at the MAC layer. which call result in significant performance gains in an OFDM based wireless system.

Analytical models for capacity estimation of IEEE 802.11 WLANs using DCF for internet applications

We provide analytical models for capacity evaluation of an infrastructure IEEE 802.11 based network carrying TCP controlled file downloads or full-duplex packet telephone calls. In each case the analytical models utilize the attempt probabilities from a well known fixed-point based saturation analysis. For TCP controlled file downloads, following Bruno et al. (In Networking '04, LNCS 2042, pp. 626-637), we model the number of wireless stations (STAs) with ACKs as a Markov renewal process embedded at packet success instants. In our work, analysis of the evolution between the embedded instants is done by using saturation analysis to provide state dependent attempt probabilities. We show that in spite of its simplicity, our model works well, by comparing various simulated quantities, such as collision probability, with values predicted from our model. Next we consider N constant bit rate VoIP calls terminating at N STAs. We model the number of STAs that have an up-link voice packet as a Markov renewal process embedded at so called channel slot boundaries. Analysis of the evolution over a channel slot is done using saturation analysis as before. We find that again the AP is the bottleneck, and the system can support (in the sense of a bound on the probability of delay exceeding a given value) a number of calls less than that at which the arrival rate into the AP exceeds the average service rate applied to the AP. Finally, we extend the analytical model for VoIP calls to determine the call capacity of an 802.11b WLAN in a situation where VoIP calls originate from two different types of coders. We consider N-1 calls originating from Type 1 codecs and N-2 calls originating from Type 2 codecs. For G711 and G729 voice coders, we show that the analytical model again provides accurate results in comparison with simulations.

New insights from a fixed-point analysis of single cell IEEE 802.11 WLANs

We study a fixed-point formalization of the well-known analysis of Bianchi. We provide a significant simplification and generalization of the analysis. In this more general framework, the fixed-point solution and performance measures resulting from it are studied. Uniqueness of the fixed point is established. Simple and general throughput formulas are provided. It is shown that the throughput of any flow will be bounded by the one with the smallest transmission rate. The aggregate throughput is bounded by the reciprocal of the harmonic mean of the transmission rates. In an asymptotic regime with a large number of nodes, explicit formulas for the collision probability, the aggregate attempt rate, and the aggregate throughput are provided. The results from the analysis are compared with ns2 simulations and also with an exact Markov model of the backoff process. It is shown how the saturated network analysis can be used to obtain TCP transfer throughputs in some cases.

Synthesis, sintering and microstructural characterization of nanocrystalline Hydroxyapatite Composites

Nanocrystalline hydroxyapatite (HAp) exhibits better bioactivity and biocompatibility with enhanced mechanical properties compared to the microcrystalline counterpart. In the present work, nanocrystalline hydroxyapatite was synthesized by wet chemical method. Sintering was carried out with nanocrystalline alumina as additive, the content of alumina being varied from 10 to 30 wt% in the composite. For 20 and 30 wt % Al2O3, hydroxyapatite decomposed into tricalcium phosphate (TCP) above the sintering temperature of 1100 degrees C. The fracture toughness of nano HAp-nano Al2O3 composite is anisotropic in nature and reached a maximum value of 6.9 MPa m(1/2).