Sharif Digital Repository

Due to the rise of Internet of Things networks, targeting vulnerabilities related to the limitation of resources in devices has increased. Therefore, it is necessary to delegate encryption services to cloud and fog platforms. Encryption as a Service (EaaS) provides all cryptographic services to end-users to help them cope with their limited resources and processing capabilities. This paper reviews the existing research on EaaS platforms and categorizes them based on their underlying encryption algorithm types. We also introduce different EaaS architectures based on the location of the main components. To our knowledge, none of the existing surveys in this field have covered the... 

As a way of obtaining useful information about the adversaries behavior with a low rate of false detection, honeypots have made significant advancements in the field of cybersecurity. They are also powerful in wasting the adversaries resources and attracting their attention from other critical assets in the network. A deceptive network with multiple honeypots is called a honeynet. The honeypots in a honeynet aim to cooperate in order to increase their deception power. Professional adversaries utilize strong detection mechanisms to discover the existence of the honeypots in a network. When an adversary finds that a deception mechanism is deployed, it may change their behavior and cause... 

Network slicing in 5G networks can be modeled as a Virtual Network Embedding (VNE) problem, wherein the slice requests must be efficiently mapped on the core network. This process faces two major challenges: covering the maximum number of requests and providing slice isolation. Slice isolation is a mechanism for protecting the slices against Distributed Denial of Service (DDoS) attacks. To overcome these two challenges, we have proposed a novel actor-critic Reinforcement Learning (RL) model, called Slice Isolation-based Reinforcement Learning (SIRL), using five optimal graph features to create the problem environment, the form of which is changed based on a ranking scheme. The ranking... 

Network slicing within 5G networks encounters two significant challenges: catering to a maximum number of requests while ensuring slice isolation. To address these challenges, we present an innovative actor-critic Reinforcement Learning (RL) model named 'Slice Isolation based on RL' (SIRL). This model employs five optimal graph features to construct the problem environment, the structure of which is adapted using a ranking scheme. This scheme effectively reduces feature dimensionality and enhances learning performance. SIRL was assessed through a comparative analysis with nine state-of-the-art RL models, utilizing four evaluation metrics. The average results demonstrate that SIRL outperforms... 

5G slices are susceptible to indirect Distributed Denial of Service (DDoS) attacks, where overwhelming traffic directed to one slice can also disrupt other slices sharing the same infrastructure Many current mitigation methods rely on a detection phase, which may not be effective against unknown or sophisticated attacks. Moving Target Defense (MTD) is a security mechanism that invalidates the adversary's collected information, and it can be deployed without the detection phase. In this paper, we propose a Slice Mutation technique based on Reinforcement Learning (SMRL) that reduces the impact of DDoS attacks on 5G slices while keeping the number of allocated slices acceptable. SMRL proposes a... 

Protecting large-scale networks, especially Software-Defined Networks (SDNs), against distributed attacks in a cost-effective manner plays a prominent role in cybersecurity. One of the pervasive approaches to plug security holes and prevent vulnerabilities from being exploited is Moving Target Defense (MTD), which can be efficiently implemented in SDN as it needs comprehensive and proactive network monitoring. The critical key in MTD is to shuffle the least number of hosts with an acceptable security impact and keep the shuffling frequency low. In this paper, we have proposed an SDN-oriented Cost-effective Edge-based MTD Approach (SCEMA) to mitigate Distributed Denial of Service (DDoS)... 

Mafia, also known as Werewolf, is a game of uncertainty between two teams, which aims to eliminate the other team's players from the game. The similarities between detecting the Mafia members in this game and botnet detection in a computer network motivate us to solve the botnet detection problem using this game's winning strategies. None of the state-of-the-art researches have used the Mafia game strategies to detect the network's malicious nodes. In this paper, we first propose the Mafia detection strategies, which are applied using linear relation and reinforcement learning techniques. We then use the suggested strategies in a network infected by the Mirai botnet, using Mininet, to... 

The main goal of Encryption as a Service (EaaS) is to deliver cryptography services to limited-resource devices. However, due to the massive number of devices connecting EaaS platforms, they face challenging issues, such as high service delays and uncovered requests. The existing EaaS architectures lack in adequately taking advantage of both cloud and fog layers, by which the performance can be improved. Therefore, this article proposes a novel EaaS architecture called full-cloud-fog that focuses on increasing the EaaS throughput by locating the frequently accessed components on the fog layer and resolving resource allocations utilizing the cloud nodes. We have analyzed the security aspects... 

The scalability of today's networking infrastructures, such as Kubernetes, has increased the demand for everything-as-a-service concepts, including encryption services. This paper details deploying an Encryption as a Service (EaaS) framework on Kubernetes. In our current implementation, a web platform is dedicated to the subscription processes and managing the requested services. Service providers subscribe to receive encryption and decryption services for their clients, and a token is assigned to them. The client, or better to say, the devices covered by that service provider, can use encryption/decryption to specify that token. As our implemented web platform is written in Django, through... 

In this paper, we consider a dual-sourcing model with constant demand and stochastic lead times. Two suppliers may be different in terms of purchasing prices and lead-time parameters. The ordering takes place when the inventory level depletes to a reorder level, and the order is split among two suppliers. Unlike previous works in the order splitting literature, the supply lead time between vendor and buyer as well as unit purchasing prices is considered to be order quantity dependent. The proposed model finds out the optimal reorder point, order quantity and splitting proportion, using a solution procedure. Numerical results show that neglecting the relationship between ordering batch size... 

Adsorption of human serum proteins (Albumin and total protein) onto high purity synthesis nano-hydroxyapatite (HA), Ca 10(PO 4) 6(OH) 2, has been studied in a wide temperature range by UV-visible spectrophotometer. Adsorption isotherm is basically important to describe how solutes interact with adsorbent, andiscriticalinoptimizing the use of adsorbent. Inthe present study, the experimental results werefitted tothe Langmuir, Freundlich, Temkin and Dubinin-Radushkevich (DR) models to obtain the characteristic parameters of each model and square of the correlation coefficients (R 2). According to the results, the DR isotherm model had the best agreement with the experimental data. The effect of...