{"id":4796,"date":"2016-12-15T13:23:00","date_gmt":"2016-12-15T13:23:00","guid":{"rendered":"https:\/\/eunis.org\/erai\/?p=4796"},"modified":"2023-10-05T07:30:21","modified_gmt":"2023-10-05T07:30:21","slug":"2016-2","status":"publish","type":"post","link":"https:\/\/eunis.org\/erai\/2016-2\/","title":{"rendered":"European Journal of Higher Education IT 2016-2"},"content":{"rendered":"\n
\n
\n

Reference\u00a0to articles in this issue should be made as follows:
name of\u00a0author(s).\u00a0title,\u00a0European\u00a0Journal of Higher Education IT\u00a02016\/2<\/em><\/p>\n\n\n\n

\"\"<\/figure>\n<\/div>\n\n\n\n
\n

European\u00a0Journal of Higher Education IT \u2013 EJHEIT<\/h3>\n\n\n\n

This issue of the European Journal of Higher Education IT (2016\/2) consists of the full papers from the TNC16 congress. TNC is hosted by GEANT and this is the first publication by GEANT through EJHEIT.  The theme of the conference was Building the Internet of People<\/strong><\/p>\n\n\n\n

TNC16, its 32nd edition, was hosted by the Czech National Research and Education Network (CESNET) and held in Prague in Czechia between 12-16 June 2016. The conference provided an opportunity for researchers, operators and suppliers of research and education networks in Europe and beyond to meet, present and discuss their latest results and requirements in an ideal environment for promoting collaboration<\/p>\n\n\n\n

nine papers presented in parallel sessions were selected for this publication. These papers cover both research and practical approaches to some of the challenges faced by today\u2019s research and education networks. In keeping with the conference theme, one thing they have in common looking at the people connecting with monitoring, management, analysis and use of the network and human factor on top of those services.<\/p>\n\n\n\n

\n\n\n\n

European\u00a0Journal of Higher Education IT\u00a0\u00a0is a \u00a0journal created to support and disseminate International research, case studies, interviews and more\u00a0within the field of higher education IT.\u00a0Editorial Committee<\/mark><\/a><\/p>\n\n\n\n

ISSN 2519-1764<\/strong><\/p>\n<\/div>\n<\/div>\n\n\n\n

\n

Editorial Introduction<\/h4>\n\n\n\n

Johan Bergstr\u00f6m, Gy\u00f6ngyi H\u00f3rvath, Brook Schofield<\/em><\/em><\/em><\/p>\n\n\n\n

Abstract<\/summary>\n

TNC16 – Building the Internet of People<\/h3>\n\n\n\n

TNC16, its 32nd edition, was hosted by the Czech National Research and Education Network (CESNET) and held in Prague in Czechia between 12-16 June 2016. The conference provided an opportunity for researchers, operators and suppliers of research and education networks in Europe and beyond to meet, present and discuss their latest results and requirements in an ideal environment for promoting collaboration This year\u2019s conference theme was \u201cBuilding the Internet of People\u201d. Without the relationships between research teams, individual researchers at higher education institutions there would be no succesful research done. At the center of this collaboration and as an enabler stands the NRENS. From the start NRENs have been in the business of connecting, not only campuses to each other and to the rest of the Internet but also people belonging to many different communities.<\/p>\n<\/details>\n\n\n\n

Full paper<\/mark><\/a><\/p>\n<\/div>\n\n\n\n

\n\n\n\n

Monitoring and management<\/h3>\n\n\n\n
\n

Research paper<\/p>\n\n\n\n

Simplifying multi-layer network management with RINA: Analysis of a multi-tenant data center network<\/h4>\n\n\n\n

Eduard Grasa, Bernat Gast\u00f3n, Sven van der Meer, Michael Crotty, Miguel Angel Puente<\/em><\/p>\n\n\n\n

Abstract<\/summary>\n

Simplifying multi-layer network management with RINA: Analysis of a multi-tenant data center network<\/h3>\n\n\n\n

Computer networks are made of multiple co-operating layers that perform different functions implemented by a diverse set of protocols. The current approach of one function per layer implemented via one or more protocols contributes to increasing the complexity of multi-layer network management systems, causing them to be more expensive, error-prone and less automated that they could be. RINA is a network architecture featuring a single type of layer that recurses as many times as needed by the network designer. This layer, called a DIF, provides Inter Process Communication (IPC) services over a certain scope and ranges of bandwidth, QoS and scale. This paper performs a comparative analysis in the complexity of managing an IP-based and a RINA-based large-scale multi-tenant data centre networks. Configuration management is the main target of the analysis although some hints on performance and security management are also provided. The analysis shows that the commonality built into the RINA architecture and the single type of recursive layer with a uniform API greatly reduces the complexity of the models the Network Management System (NMS) uses to understand the state of the managed network. RINA opens the door not to an unprecedented degree of automation in Network Management, enabling the NMS to perform sophisticated configuration changes in multiple layers of the network at once while minimizing the risk of causing service downtime.<\/p>\n<\/details>\n\n\n\n

Full paper<\/mark><\/a><\/p>\n\n\n\n

Watch the presentation<\/mark><\/a><\/p>\n<\/div>\n\n\n\n

\n\n\n\n
\n

Technical paper<\/p>\n\n\n\n

6MoNPlus:Geographically distributed Dual Stack network monitoring<\/h4>\n\n\n\n

Filippo Lauria, Claudio Porta, Andrea De Vita, Abraham Gebrehiwot, Alessandro Mancini<\/em><\/p>\n\n\n\n

Abstract<\/summary>\n

Geographically distributed Dual Stack network monitoring<\/h3>\n\n\n\n

Monitoring and controlling geographically distributed Dual Stack networks on the present Internet architecture is a complex task. The diffused use of Network Address Translation (NAT) and issues caused by border firewalls make remote network monitoring difficult. It is also necessary to physically be connected to the remote networks to sniff packets. There are several situations in which it is convenient to have an easy to use tool, accessible from every location, for monitoring and managing various networks, distributed in different locations, using a single management interface. This article is proposing a geographically distributed, scalable and extensible open tool for monitoring and controlling geographically distributed Dual Stack (IPv4\/Ipv6) networks using a single management interface by solving the NAT traversal and firewall issues.<\/p>\n<\/details>\n\n\n\n

Full paper<\/mark><\/a><\/p>\n\n\n\n

Watch the presentation<\/mark><\/a><\/p>\n<\/div>\n\n\n\n

\n\n\n\n
\n

Technical paper<\/p>\n\n\n\n

NetSage: Open privacy-aware network measurement, analysis and\u00a0visualisation service<\/h4>\n\n\n\n

Alberto Gonzalez, Jason Leigh, Sean Peisert, Brian Tierney, Andrew Lee, Jennifer M. Schopf<\/em><\/p>\n\n\n\n

Abstract<\/summary>\n

NetSage: Open privacy-aware network measurement, analysis and visualisation service<\/h3>\n\n\n\n

NetSage is a project to develop a unified open, privacy-aware network measurement, and visualization service to address the needs of today\u2019s international networks. Modern science is increasingly data-driven and collaborative in nature, producing petabytes of data that can be shared by tens to thousands of scientists all over the world. The National Science, Foundation-supported International Research Network Connections (IRNC) links, have been essential to performing these science experiments. Recent deployment of Science DMZs [\u00adDart, E. et al., 2013], both in the US and other countries, is starting to raise expectations for data throughput performance for wide-area data transfers. New capabilities to measure and analyze the capacity of international wide-area networks are essential to ensure end-users are able to take full advantage of such infrastructure.<\/p>\n\n\n\n

NetSage will provide the network engineering community, both US domestic and international, with a suite of tools and services to more deeply understand: 1) the current traffic patterns across IRNC links, and anticipate growth trends for capacity-planning purposes;2) the main sources and sinks of large, elephant flows to know where to focus outreach and training opportunities; and3) the cause of packet losses in the links and how they impact end-to-end performance.<\/p>\n<\/details>\n\n\n\n

Full paper<\/mark><\/a><\/p>\n\n\n\n

Watch the presentation<\/mark><\/a><\/p>\n<\/div>\n\n\n\n

\n\n\n\n

SDN data plane<\/h3>\n\n\n\n
\n

Research paper<\/p>\n\n\n\n

Distributed cloud services based on programmable agile networks<\/h4>\n\n\n\n

Sonja Filiposka,\u00a0Yuri Demchenko,\u00a0Tasos Karaliotas,\u00a0Migiel de Vos,\u00a0Damir Regvart<\/em><\/p>\n\n\n\n

Abstract<\/summary>\n

Distributed cloud services based on programmable agile networks<\/h3>\n\n\n\n

In order to allow researchers to focus on their work, all newly designed applications and services must not only offer features needed to tackle Big Data problems, but need to work seamlessly and intuitively, while efficiently hiding all non-necessary technical and networking details from the end user. Thus, today\u2019s requirements of the research and education community demand a holistic converged approach in the design of new generation intelligent cloud aware networks that need to work in concert with the distributed application components. The goal of this paper is to contribute toward setting up the building blocks of an open multi-cloud ecosystem based on a programmable cloud service delivery infrastructure. For these purposes we examine the possibility of introducing a third-party multi-cloud marketplace placed on top of a cloud aware agile network that can be reconfigured based on the defined multi-cloud application workflow. We discuss the overall architecture of the ecosystem and define the requirements for the underlying network infrastructure. The described proof of concept demonstrates the benefits of the proposed solution providing an example of how the concepts of network function virtualization and software defined networks can be leveraged in order to obtain an agile programmable network that will respond to the changes in the application traffic flow. With self-provisioning being acknowledged as a crucial component among service providers, we discuss all steps needed in order to translate user requests in a fully automated end-to-end service delivery and monitoring especially in a multi-domain environment.<\/p>\n<\/details>\n\n\n\n

Full paper<\/mark><\/a><\/p>\n\n\n\n

Watch the presentation<\/mark><\/a><\/p>\n<\/div>\n\n\n\n

\n\n\n\n

Ludo – Kids playing Distributed Denial of Service<\/h3>\n\n\n\n
\n

Research paper<\/p>\n\n\n\n

“LUDO” – Kids playing distributed denial of service<\/h4>\n\n\n\n

Jessica Steinberger, Jos\u00e9 Jair Santanna, Evangelos Spatharas, Hendrik Amler, Niklas Breuer, Kristian Graul, Benjamin Kuhnert, Ulrike Piontek, Anna Sperotto, Harald Baier, Aiko Pras<\/em><\/p>\n\n\n\n

Abstract<\/summary>\n

\u201cLUDO\u201d \u2013 Kids playing distributed denial of service<\/h3>\n\n\n\n

Distributed denial of service attacks pose a serious threat to the availability of the network infrastructures and services. G\u00c9ANT, the pan-European network with terabit capacities witnesses close to hundreds of DDoS attacks on a daily basis. The reason is that DDoS attacks are getting larger, more sophisticated and frequent. At the same time, it has never been easier to execute DDoS attacks, e.g., Booter services offer paying customers without any technical knowledge the possibility to perform DDoS attacks as a service. Given the increasing size, frequency and complexity of DDoS attacks, there is a need to perform a collaborative mitigation. Therefore, we developed (i) a DDoSDB to share real attack data and allow collaborators to query, compare, and download attacks, (ii) the Security attack experimentation framework to test mitigation and response capabilities and (iii) a collaborative mitigation and response process among trusted partners to disseminate security event information. In addition to these developments, we present and would like to discuss our latest research results with experienced networking operators and bridging the gap between academic research and operational business<\/p>\n<\/details>\n\n\n\n

Full paper<\/mark><\/a><\/p>\n\n\n\n

Watch the presentation<\/mark><\/a><\/p>\n<\/div>\n\n\n\n

\n\n\n\n

Security: hardening the attack surface<\/h3>\n\n\n\n
\n

Research paper<\/p>\n\n\n\n

State-of-the-Art in Biometrics for Multi-Factor Authentication in a Federative Context<\/h4>\n\n\n\n

Martijn Oostdijk, Arnout van Velzen, Joost van Dijk, Arnout Terpstra<\/em><\/p>\n\n\n\n

Abstract<\/summary>\n

State-of-the-Art in Biometrics for Multi-Factor Authentication in a Federative Context<\/h3>\n\n\n\n

Despite having been a promising technology for authentication for quite a long time, biometric authentication has not seen large scale adoption in federations for higher education and research. Lately, however, in the consumer domain there appears to be increased interest in stronger forms of authentication (e.g., one-time-password apps for smartphones) and biometric applications (e.g., embedded finger print readers in smartphones). It may be the right time for the higher education and research community to evaluate the current state-of-the-art in biometric authentication. This paper investigates the state-of-the-art in biometric technology (anno 2016), establishes a set of evaluation criteria and compares the different biometric modes according to these criteria.<\/p>\n<\/details>\n\n\n\n

Full paper<\/mark><\/a><\/p>\n\n\n\n

Watch the presentation<\/mark><\/a><\/p>\n<\/div>\n\n\n\n

\n\n\n\n

Advanced video applications<\/h3>\n\n\n\n
\n

Technical paper<\/p>\n\n\n\n

Multipresence: towards videoconference and collaboration in multi-use environments<\/h4>\n\n\n\n

Valter Roesler, Luiz Eduardo de Souza Coelho, Guilherme Longoni, Andr\u00e9 Marins, Leonardo Crauss Daronco, Leandro Ciuffo, Renato Duarte<\/em><\/p>\n\n\n\n

Abstract<\/summary>\n

Multipresence: towards videoconference and collaboration in multi-use environments<\/h3>\n\n\n\n

The objective of this paper is to present an architectural and technological view of a new video conference and collaboration system called \u201cMultipresence\u201d, which adapts to various physical environment settings and enables the interoperability of various technologies.<\/p>\n\n\n\n

The Multipresence system allow interoperation of many technologies to comply with a multitude of devices and communication standards, such as the following:<\/p>\n\n\n\n