@conference {543, title = {Cyber-Physiotherapy: Rehabilitation to Training}, booktitle = {2021 IFIP/IEEE International Symposium on Integrated Network Management (IM)}, year = {2021}, publisher = {IEEE}, organization = {IEEE}, address = {Bordeaux, France}, abstract = {

Cutting-edge Human-Computer Interaction (HCI) technologies embedded with Machine Learning (ML) will cause a paradigm shift in various domains, including manufacturing and developing facilities and services for professional and personal use. ML implemented HCIs can help people overcome societal challenges brought about by the COVID-19 pandemic. We introduce a system for people to perform physical exercises at home. This system is intended to help a range of demographics, from non-critical physical therapy patients to experienced weightlifters. More specifically, we propose a method to assess the difficulty of an exercise for visual exercise tracking systems. Pose estimation tracks exercises and reinforcement learning provides autonomous feedback to the user (patient/athlete). This information is processed largely on the client side, allowing the application to run smoothly anywhere in the world.

}, keywords = {Fitts{\textquoteright}s law, Human-Computer Interaction, Index of Difficulty, Pose Estimation, Reinforcement Learning}, isbn = {978-3-903176-32-4}, url = {https://ieeexplore.ieee.org/abstract/document/9464036}, author = {Ranasinghe, Ishan and Dantu, Ram and Albert, Mark V. and Watts, Sam and Ocana, Ruben} } @conference {538, title = {Integrating DOTS With Blockchain Can Secure Massive IoT Sensors}, booktitle = {2020 IEEE International Parallel and Distributed Processing Symposium Workshops (IPDPSW)}, year = {2020}, publisher = {IEEE}, organization = {IEEE}, address = {New Orleans, LA, USA}, abstract = {

This paper presents a novel approach to securing IoT devices by leveraging DDoS Open Threat Signaling (DOTS) architecture on a Blockchain framework. Like many areas of the information technology domain, IoT sensors are also prone to attacks but on a larger scale. There are millions of devices being connected to a central domain to provide different types of services. Since these low-powered IoT devices have constrained technical requirements with less computational capabilities, they lack the capacity to judge their behavior as benign or malignant. IoT relies heavily on the higher level of intelligent nodes to decide on their status. An IoT Controller/Edge server handles the registration and the limited management of devices. Since traditional security is unable to protect the IoT environment sufficiently, we present a Blockchain-based DDoS detection approach to secure and mitigate such attacks in the IoT environment. Our test setup includes dataset from four sensors over two months. These values were tested using a threshold calculation against the variation of temperature, humidity, pressure, and wind direction on that day to find out whether an IoT sensor is under a DDoS attack. Our results show how DOTS can help in detection of attack when mapped on IoT edge computing.

}, keywords = {blockchain, Cybersecurity, DDOS Protection, distributed ledger, Edge Computing, IoT, Smart Contracts}, isbn = {978-1-7281-7445-7}, doi = {10.1109/IPDPSW50202.2020.00156}, url = {https://ieeexplore.ieee.org/abstract/document/9150345}, author = {Badruddoja, Syed and Dantu, Ram and Widick, Logan and Zaccagni, Zachary and Upadhyay, Kritagya} } @conference {403, title = {Blockchain Based Authentication and Authorization Framework for Remote Collaboration Systems}, booktitle = {2019 IEEE 20th International Symposium on "A World of Wireless, Mobile and Multimedia Networks" (WoWMoM)}, year = {2019}, month = {June}, abstract = {

Due to the advantages of blockchain technologies, including decentralization, immutability, transparency and security, people try to replace existing problematic architectures /frameworks with blockchain based ones. In this paper we propose a novel authentication and authorization framework based on blockchain technologies to control access to the resources of an IoT device. In this paper, we focus on devices such as the Cyber Handyman used in remote collaboration applications to develop our framework. We tested our smart contracts on the Ropsten test network. Our results showed that it can handle 25 service requests simultaneously.

}, keywords = {Access Control, authorization, blockchain, Digital Certificate, IoT, remote collaboration, Security}, doi = {10.1109/WoWMoM.2019.8792994}, author = {Widick, Logan and Ranasinghe, Ishan and Dantu, Ram and Jonnada, Srikanth} } @conference {310, title = {An OAuth-Based Authorization Framework for Access Control in Remote Collaboration Systems}, booktitle = {National Cyber Summit}, year = {2018}, month = {06/2018}, address = {Huntsville, Alabama, USA}, abstract = {

Advanced human computer interaction systems have made it possible for helpers (professionals) to remotely collaborate with workers (individuals seeking assistance from the professionals). For example, a professional can remotely help a worker fix automobiles or electronics, identify how much of what medication to take, or perform household repairs. We have presented a system, Collaborative Appliance for Remote-help (CARE) that allows for such collaborations. Our system allows a skilled professional or other helper to remotely access and control a worker{\textquoteright}s locally deployed resources over the Internet. These locally deployed resources may include cameras, microphones, speakers, processors, and memory. The remote helper then directs the worker to perform specific tasks to complete the job at hand. Like other Internet of Things (IoT) based systems, CARE is inputconstrained. That is, a worker cannot provide input via a touch screen or keyboard.

The resources are accessed over the Internet. Thus, security and privacy are big concerns. In this paper, we present the authorization and access control framework for the inputconstrained CARE system. This framework has been implemented using the OAuth 2.0 Authorization Framework and has been designed to meet the needs of resource owners who have no technical knowledge. We have shown that our proposed framework is very effective and consistent with the access control guidelines set by the National Institute of Standards and Technology (NIST).

}, author = {Jonnada, Srikanth and Ram Dantu and Shrestha, Pradhumna and Ranasinghe, Ishan and Widick, Logan} } @conference {88, title = {A framework for secured collaboration in mHealth}, booktitle = {Collaboration Technologies and Systems (CTS), 2015 International Conference on}, year = {2015}, month = {06/2015}, abstract = {

We have designed a novel framework of services, protocols and technologies to ensure the secure collaboration in M2M networks, specifically in mobile health. The promise of mobile health to reform preventive self-care opens new doors for remote monitoring to improve health care communication. With cardiopulmonary resuscitation (CPR) as an example, we classify our M2M elements into services, roles, human-computer protocols and technologies through which we require trust, anonymity, scalability, and active detachment. We simulate a scenario in which a patient needs CPR and through the use of widely available technologies (such as a smartphone and secure web sockets) we demonstrate a technological collaboration that facilitates secure emergency mobile health services.

}, keywords = {cardiology, cardiopulmonary resuscitation, Cardiopulmonary resuscitation(CPR), Collaboration, Computers, CPR, health care, health care communication, human computer interaction, human-computer protocol, M2M network, machine to machine(M2M), Medical services, mHealth, Mobile communication, mobile computing, mobile health, Protocols, remote monitoring, Scalability, secure collaboration, secure emergency mobile health services, secured collaboration, security of data, servers, smart phones, smartphone}, doi = {10.1109/CTS.2015.7210450}, author = {Widick, Logan and Talkington, Josh and Bajwa, Garima and Ram Dantu} } @article {226, title = {Security Issues in VoIP Telecommunication Networks}, journal = {Handbook on Securing Cyber-Physical Critical Infrastructure: Foundations and Challenges}, year = {2012}, pages = {763{\textendash}789}, abstract = {As VoIP telecommunication networks are becoming popular, more and more VoIP calls are being made to accomplish security critical activities, e.g., E911 services, phone banking. However, the security ramifications of using VoIP have not been fully recognized, and there exists a substantial gap in the understanding of the potential impact of VoIP exploits on the VoIP users. In this chapter, we describe the components and functionalities of non-P2P and P2P VoIP networks and discuss the potential attacks to them such as MITM, spoofing, wiretapping, pharming, etc. We also illustrate a mechanism of using small world network to improve call performance of a P2P VoIP system and evaluate it over the currently deployed OpenVoIP system.}, keywords = {P2P, Security, session initiation protocol, small world networks, telecommunications, voice over IP}, isbn = {978-0-12-415815-3}, doi = {https://doi.org/10.1016/B978-0-12-415815-3.00030-3}, url = {https://www.sciencedirect.com/science/article/pii/B9780124158153000303}, author = {Yang, Xiaohui and Ram Dantu and Wijesekera, Duminda} } @conference {68, title = {Efficiency of Social Connection-based Routing in P2P VoIP Networks}, booktitle = {Proceedings of the 2Nd International Conference on COMmunication Systems and NETworks}, year = {2010}, publisher = {IEEE Press}, organization = {IEEE Press}, address = {Piscataway, NJ, USA}, keywords = {P2P routing, P2P VoIP systems, Social networks, social-network based routing}, isbn = {978-1-4244-5487-7}, url = {http://dl.acm.org/citation.cfm?id=1831443.1831488}, author = {Chandrasekaran, Vikram and Ram Dantu and Gupta, Neeraj and Yang, Xiaohui and Wijesekera, Duminda} } @inbook {54, title = {Email Shape Analysis}, booktitle = {Distributed Computing and Networking: 11th International Conference, ICDCN 2010, Kolkata, India, January 3-6, 2010. Proceedings}, year = {2010}, pages = {18{\textendash}29}, publisher = {Springer Berlin Heidelberg}, organization = {Springer Berlin Heidelberg}, address = {Berlin, Heidelberg}, abstract = {

Email has become an integral part of everyday life. Without a second thought we receive bills, bank statements, and sales promotions all to our inbox. Each email has hidden features that can be extracted. In this paper, we present a new mechanism to characterize an email without using content or context called Email Shape Analysis. We explore the applications of the email shape by carrying out a case study; botnet detection and two possible applications: spam filtering, and social-context based finger printing. Our in-depth analysis of botnet detection leads to very high accuracy of tracing templates and spam campaigns. However, when it comes to spam filtering we do not propose new method but rather a complementing method to the already high accuracy Bayesian spam filter. We also look at its ability to classify individual senders in personal email inbox{\textquoteright}s.

}, isbn = {978-3-642-11322-2}, doi = {10.1007/978-3-642-11322-2_7}, url = {http://dx.doi.org/10.1007/978-3-642-11322-2_7}, author = {Sroufe, Paul and Phithakkitnukoon, Santi and Ram Dantu and Cangussu, Jo{\~a}o}, editor = {Kant, Krishna and Pemmaraju, Sriram V. and Sivalingam, Krishna M. and Wu, Jie} } @inbook {77, title = {Small World VoIP}, booktitle = {Mobile Computing, Applications, and Services: Second International ICST Conference, MobiCASE 2010, Santa Clara, CA, USA, October 25-28, 2010, Revised Selected Papers}, year = {2010}, pages = {137{\textendash}155}, publisher = {Springer Berlin Heidelberg}, organization = {Springer Berlin Heidelberg}, address = {Berlin, Heidelberg}, abstract = {

We present the analysis and design of a Small World VoIP system (SW-VoIP) which is geared towards customers that are communicating with their Small World of social contacts. We use the term Small World to refer to the Peer-to-Peer (P2P) network of a client and his contacts both incoming and outbound. We reconstruct the small world of a user by collecting calling patterns over a configurable period of time. We enable user mobility by using a stepwise social identity to an IP address binding propagation model. We propose an efficient algorithm to locate users by electing popular users and leveraging the users closeness. We also introduce a self-stabilized load balancing mechanism to optimize the system performance under heavy network traffic. We evaluate our SW-VoIP system performance by simulating the user{\textquoteright}s lookup process using real-world telephone logs. Our experimental results show that our SW-VoIP system offers a better performance in optimizing the required routing path and reducing the average lookup delay when compared to traditional, non small-world P2P VoIP systems.

}, keywords = {closeness, electing, mobility, optimize, Peer-to-peer, popular, small world, VoIP}, isbn = {978-3-642-29336-8}, doi = {10.1007/978-3-642-29336-8_8}, url = {http://dx.doi.org/10.1007/978-3-642-29336-8_8}, author = {Yang, Xiaohui and Stavrou, Angelos and Ram Dantu and Wijesekera, Duminda}, editor = {Gris, Martin and Yang, Guang} } @article {51, title = {A Testbed for Large Mobile Social Computing Experiments}, journal = {Int. J. Sen. Netw.}, volume = {8}, year = {2010}, pages = {89{\textendash}97}, abstract = {

We present a testbed for mobile social computing that can be used to perform research in security, privacy and context-awareness policies and mechanisms appropriate for a wide range of applications. We compare several mobile platforms and present the rational for our design choices and reasons we chose Android as the primary smartphone for the testbed. We also discuss some of the experiments that can be conducted using this testbed.

}, keywords = {context awareness, mobile communications, mobile computing, mobile devices, Privacy, Security, sensor information, sensors, smartphones, social computing, testbed, ubiquitous devices}, issn = {1748-1279}, doi = {10.1504/IJSNET.2010.034618}, url = {http://dx.doi.org/10.1504/IJSNET.2010.034618}, author = {Alazzawe, Ahmed and Alazzawe, Anis and Wijesekera, Duminda and Ram Dantu} } @conference {64, title = {Achieving Peer-to-peer Telecommunication Services Through Social Hashing}, booktitle = {Proceedings of the 6th IEEE Conference on Consumer Communications and Networking Conference}, year = {2009}, publisher = {IEEE Press}, organization = {IEEE Press}, address = {Piscataway, NJ, USA}, abstract = {

Although peer-to-peer (P2P) Internet Telephony gains more and more market share, supporting traditional telephony related use cases is an indispensable requirement. However, communication services designed for this purpose are usually traditional circuit-based, and the centralized structure makes it nearly impossible for their deployments in a distributed, unsecure telecommunication environment. This paper proposes an approach for achieving various kinds of communication services on P2P voice over IP (VoIP) systems by building trust and executing supervision through social networks. We present a system architecture design for network topology maintenance and security assurance. Social protocols and social computing are used to study how P2P entities can be efficiently mapped to social networks, and how social functionalities can benefit communication services implementation. To demonstrate the approach feasibility, we exemplify this architecture in P2P VoIP emergency services by using gossiping and membership management techniques. We believe that our proposed approach will be able to support diverse services on P2P VoIP systems with the performance and security guaranteed to compete with centralized telecommunication systems.

}, isbn = {978-1-4244-2308-8}, url = {http://dl.acm.org/citation.cfm?id=1700527.1700582}, author = {Yang, Xiaohui and Ram Dantu and Wijesekera, Duminda} } @conference {76, title = {A society-integrated testbed architecture for peer-to-peer telecommunications}, booktitle = {Testbeds and Research Infrastructures for the Development of Networks Communities and Workshops, 2009. TridentCom 2009. 5th International Conference on}, year = {2009}, month = {April}, abstract = {

Exploiting and deploying telecommunication services on Internet Telephony are imperative for a large market share. However, the distributed nature of peer-to-peer (P2P) network makes services implementation very difficult. In order to meet the research goals of achieving P2P telecommunication services through the union of social and computer networks, we present a society-integrated testbed architecture for P2P voice over IP (VoIP). By introducing an architecture that exploits and entailing social structure based connection establishment, the testbed presents an organic integration of social functionalities with good portability. The testbed also serves as a flexible tool suite that can be used to run experiments and obtain timely feedback based on the performance measurements.

}, keywords = {Computer architecture, computer network, computer networks, Computer science, Feedback, file organisation, Internet telephony, network traffic, P2P voice-over-IP, Peer to peer computing, peer-to-peer computing, peer-to-peer telecommunication service, portable social DHT function, Routing protocols, Social network services, society-integrated testbed architecture, software architecture, Telecommunication services, telecommunication traffic, Testing}, doi = {10.1109/TRIDENTCOM.2009.4976215}, author = {Yang, Xiaohui and Ram Dantu and Wijesekera, Duminda} } @conference {55, title = {A testbed for mobile social computing}, booktitle = {Testbeds and Research Infrastructures for the Development of Networks Communities and Workshops, 2009. TridentCom 2009. 5th International Conference on}, year = {2009}, month = {April}, abstract = {

We present a testbed for mobile social computing that can be used to perform research in security, privacy, and context-awareness policies and mechanisms appropriate for a wide range of applications. We compare several mobile platforms and present the rational for our design choices and reasons we chose Android as the primary smartphone for this testbed. We also discuss some of the possible experiments that can be conducted using the testbed.

}, keywords = {Acoustic sensors, Computer science, Computer security, context-awareness policy, data privacy, Feedback, Global Positioning System, mobile computing, mobile social computing, Performance evaluation, Privacy, privacy policy, security of data, security policy, Social network services, Testing}, doi = {10.1109/TRIDENTCOM.2009.4976250}, author = {Alazzawe, Ahmed and Alazzawe, Anis and Wijesekera, Duminda and Ram Dantu} } @conference {33, title = {Securing VoIP and PSTN from integrated signaling network vulnerabilities}, booktitle = {1st IEEE Workshop on VoIP Management and Security, 2006.}, year = {2006}, abstract = {

The liberalization of public switched telephone network (PSTN) and growing acceptance of SIGTRAN protocol suite have introduced new and yet to be trusted signaling entities. Thus security threats emerging from one network not only affects itself but other network also. We show how this integrated signaling environment can become a security threat to emerging VoIP and PSTN networks. We propose a security solution as a fix. Our proposal goes beyond "Gateway Screening" and "SS7 Gatekeeper" proposed by Telcordia and Verizon respectively to defend vulnerable SS7 network.

}, keywords = {Information security, Information systems, Internet telephony, IP networks, ISDN, National security, Protocols, Routing, Signal processing, Switching circuits}, doi = {10.1109/VOIPMS.2006.1638116}, author = {Sengar, Hemant and Ram Dantu and Wijesekera, Duminda} } @article {39, title = {SS7 over IP: signaling interworking vulnerabilities}, journal = {IEEE Network}, volume = {20}, year = {2006}, month = {Nov}, pages = {32-41}, abstract = {

Public telephony - the preferred choice for two-way voice communication over a long time - has enjoyed remarkable popularity for providing acceptable voice quality with negligible connection delays, perhaps due to its circuit-switched heritage. Recently, IP telephony, a packet-based telephone service that runs as an application over the IP protocol, has been gaining popularity. To provide seamless interconnectivity between these two competing services, the Internet Engineering Task Force (IETF) has designed a signaling interface commonly referred to as SIGTRAN. This seamless intersignaling provided by SIGTRAN facilitates any subscriber in one network to reach any other subscriber in the other network, passing through any heterogeneous maze of networks consisting of either of these. Unfortunately, the same intersignaling potentially can be exploited from either side to disrupt the services provided on the other side. We show how this can be done and propose a solution based on access control, signal screening, and detecting anomalous signaling. We argue that to be effective, the latter two should consider syntactic correctness, semantic validity of the signal content, and the appropriateness of a particular signal in the context of earlier exchanged messages

}, keywords = {anomalous signaling detection, circuit-switched heritage, Delay effects, Design engineering, IETF, Integrated circuit interconnections, Internet Engineering Task Force, Internet telephony, intersignaling, IP protocol, ISDN, packet-based telephone service, Protocols, public telephony, Routing, Signal detection, signal screening, signaling interworking, SIGTRAN, SS7 over IP, Switches, telecommunication signalling, two-way voice communication, Web and internet services}, issn = {0890-8044}, doi = {10.1109/MNET.2006.273119}, author = {Sengar, Hemant and Ram Dantu and Wijesekera, Duminda and Jajodia, Sushil} } @article {229, title = {Requirements for Separation of IP Control and Forwarding}, year = {2003}, month = {11/2003}, publisher = {RFC Editor}, abstract = {

This document introduces the Forwarding and Control Element\ Separation (ForCES) architecture and defines a set of associated\ terminology.\  This document also defines a set of architectural,\ modeling, and protocol\ requirements to logically separate the control\ and data forwarding planes of an IP (IPv4, IPv6, etc.) networking\ device.

}, author = {Anderson, Todd and Bowen, Ed and Ram Dantu and Doria, Avri and Gopal, Ram and Salim, Jamal and Khosravi, Hormuzd and Minhazuddin, Muneyb and Wasserman, Margaret} } @article {279, title = {Constraint-Based Label Switched Path Setup using Label Distribution Protocol}, year = {2002}, url = {https://tools.ietf.org/html/rfc3212}, author = {Andersson, Loa and Callon, Ross and Ram Dantu and Doolan, Paul and Feldman, Nancy and Fredette, Andre and Gray, Eric and Heinanen, Juha and Jamoussi, Bilel and Kilty, Timothy and Malis, Andrew and Girish, Muckai and Worster, Tom and Wu, Liwen} }