The NetSys 2015 Communication Software Awards were chosen on-site after the demonstration session. The following prices were awarded this year:
1st Place Master Student Demonstrations:
- PDFUnveiling SSHCure 3.0: Flow-based SSH Compromise DetectionNetwork-based intrusion detection systems have always been designed to report on the presence of attacks. Due to the sheer and ever-increasing number of attacks on the Internet, Computer Security Incident Response Teams (CSIRTs) are overwhelmed with attack reports. For that reason, there is a need for the detection of compromises rather than compromise attempts, since those incidents are the ones that have to be taken care of. In previous works, we have demonstrated and validated our state-of-the-art compromise detection algorithm that works on exported flow data, i.e, data exported using NetFlow or IPFIX. The detection algorithm has been implemented as part of our open-source intrusion detection system SSHCure.
In this demonstration, we showcase the latest release of SSHCure, which includes many new features, such as an overhauled user interface design based on user surveys, integration with incident reporting tools, blacklist integration and IPv6 support. Attendees will be able to explore SSHCure in a semi-live fashion by means of practical examples of situations that CSIRT members encounter in their daily activities.
Rick Hofstede (University of Twente), Luuk Hendriks (University of Twente)
1st Place Regular Demonstrations:
- PDFA Multi-Platform Library for a Software Sender for the (proposed) ILDA Digital NetworkThis software demonstration presents work of the Laser and Light Lab at the Institute of Computer Science 4 of the University of Bonn on proposed standardization work of the International Laser Display Association (ILDA, ). The Laser and Light Lab (as a nonprofit ILDA member) got involved into a proof-of-concept implementation of a software-based sending side of the (proposed) IDN – ILDA Digital Network, implementing this as a multi-platform (Linux, Windows) library that can be attached to existing laser show control software.
The demonstration presents a setup with professional/commercial laser show software, as well as software coming from own student/research projects, both supplemented with our software library for IDN. The demonstration will highlight two modes of operation of IDN and will focus on illustrating conceptual differences of both modes with a discussion of pros and cons.
Matthias Frank (University of Bonn)
2nd Place Regular Demonstrations:
- PDFEchoRing - Meeting Hard Real-Time Constraints with Decentralized Wireless NetworksGiven the rising demand for wireless solutions in the area of machine-to-machine communication, we present the novel EchoRing protocol. It is designed to serve the communication needs of industrial applications, while being optimized for the wireless channel specifically. Directly taking known principles of tethered communication to the wireless domain is likely to yield degraded performance results. Additional techniques have to be added to make known principles be able to master the challenges of wireless channel dynamics. On the other hand, the majority of currently existing wireless communication standards are developed to allow mobility on the last hop of a transmission path that originates in the Internet or a local home network. Hence, the focus is on supporting the best-effort paradigm of the data streams. However, in industrial environments this best-effort paradigm gets replaced by the need to steadily achieve very high reliabilities at very short deadlines.
In this demonstration, we will show how industrial applications can be interconnected wirelessly despite the drawbacks of the wireless channel. The experimental setup allows to compare different medium access control protocols under varying conditions.
Christian Dombrowski (RWTH Aachen University), James Gross (KTH Royal Institute of Technology)
3rd Place Regular Demonstrations:
- PDFEfficient Video Streaming through Seamless Transitions between Unicast and BroadcastThis work describes the prototype of the DFG Collaborative Research Center 1053 on ’Multi Mechanism Adaptation for the Future Internet’ (MAKI) on switching between network mechanisms during runtime. The replacement of whole network mechanisms of a system is called a transition. Transitions are necessary when environmental conditions change significantly. In this demonstration we show the advantages of transitions for a live video streaming. Starting from a client/server based delivery the live video streaming system is proposed which seamlessly adapts to a P2P-based delivery, when the number of concurrent clients significantly increases. As P2P-based unicast-based delivery is inefficient when concurrent accesses come from the same geographic spot, the transition to local dissemination of the live video is investigated. The system identifies a local client which relays the live stream via broadcast to interested local clients. Both the transition from client/server to P2P as well as the replacement of IP Unicast with Broadcast is executed seamlessly for the video player.
Stefan Wilk (TU Darmstadt), Julius Rückert (TU Darmstadt), Denny Stohr (TU Darmstadt), Björn Richerzhagen (TU Darmstadt), Wolfgang Effelsberg (TU Darmstadt)