Sharif Digital Repository

In this project we have designed & implemented a hardware accelerator for domain name service. This hardware accelerator is compatible with existing designs and it could be used standalone as an authoritative DNS server or a hardware accelerator in series of an existing DNS server facility. Two goals, are achieved in this thesis: increasing total DNS throughput and decreasing its response time.In this project, we have surveyed about domain name service, its scientific measurements, theory of caching and its effectiveness, name lookup methods and finally some of the similar designs. Domain name lookup in memory is one of the most challenging operations in every DNS server. We have researched... 

By using an encoding scheme based on Algebraic Integers (AIs), we study in this thesis how to map the real numbers needed in the computation of the FFT to integer numbers, in order to prevent error production and propagation throughout the intermediate stages of the FFT computation. To reconstruct encoded data, a decoding stage is to be used at the end of the FFT computation. AI-encoding poses two challenges; how to determine suitable AI bases and an unwanted growth in the number of data passes. This research work, firstly, determines an appropriate FFT architecture, and then, proposes a dedicated architecture based on AI-encoding. The basic and also the proposed dedicated architecture are... 

Intrusion detection systems’ test and evaluation is an active research area on which many researchers have been working for years. A complete and comprehensive test methodology that can be applied in reasonable time and cost is important and useful both to evaluate a newly designed system and to compare two or more existing systems to select an appropriate system for a particular network. In this research, we first determine the critical features of an IDS and then inspect methods and effective parameters that may influence the test process and propose a method for testing intrusion detection systems. In the proposed test methodology we only examine critical features which lake of them cause... 

Flash Crowd traffic generation can be used as a metrics for measuring the resiliency and performance of a server. Also, it can provide a framework for verification and test of Intrusion detection systems (IDS) and Intrusion protection systems (IPS). Common traffic generation methods mimic timing and content of input traffic or regenerate input traffic by extracting its statistic distribution. So all of them need input traffic, while properties of Flash Crowd are different in the various servers and situations and there is no guaranty in existence of such samples of traffic for all servers. In this thesis, we introduce and use a new method for traffic generation without the need for input... 

Ultra-fine and fine-grained aluminum matrix nano-composites were fabricated by friction stir processing (FSP) of 1050 Al alloy sheets containing 6 vol% volume fractions of pre-inserted MMO nanoparticles. Annealed sheets were processed at different rotational (w=800-2000 rpm) and traverse speeds (v-50-200 mm/min). A special design tool (concave shoulder and cylindrical pin with regular threads) without changing the rotation and traveling directions was utilized. It is shown that the best and highest desired mechanical properties of the base metal is attained at w=1600 rpm and v =100 mm/min through one single pass. The structure of grains are changed due to the applied severe plastic... 

In this research, Reliability-Based Multidisciplinary Design Optimization has been addressed. For this purpose, the main concepts in reliability-based design are investigated and the design methods based on reliability are explained. Providing a unified formulation to implement the optimal design structure based on the reliability, is the second part of this research. It has been intended to present a suitable structure for the design process considering the existing formulas and considering the numerical solutions. An aeroelastic projectile has been chosen as the target system for implementing the proposed process in the present study. The third section of this document has been dedicated... 

A novel internetworking paradigm, software-defined exchange (SDX), allows multiple independent administrative domains to share computing, storage, and networking resources. Although the term SDX is very recent, the concept has already been used by many distinct disciplines.We argue that the advent of Software Defined Networking (SDN) provides a unique opportunity to effectively detect and contain network security problems such as DDoS attacks. DDoS attacks can easily exhaust the controller's or the switches' computing and communication resources and hence, breakdown the network within a short time. In this thesis we extend these functionalities with an efficient, scalable and light weight... 

Due to the growing need of users to establish voice over IP (VoIP) communications, the low quality of voice transmission that do not meet their needs leads to their dissatisfaction. For this reason, the VoIP quality improvement has become one of the most important challenges facing the current domain of network communications. The analysis of the quality of network services in the VoIP traffics is an integral part of the quality assurance and improvement process of the multimedia networks. Hence, "user satisfaction" monitoring and evaluation of voice communications (also known as "Quality of Experience"), in addition to adaptive improvement of the speech quality in such communications, are... 

Software Defined Networking (SDN) is an emerging paradigm which makes the network programmable by separating the control plane from data plane and makes both planes to work independently. There is a centralized controller and a programmable data plane in these networks architecture and forwarding data packets is realized by programming the data plane via an open interface called OpenFlow. OpenFlow is a communication protocol between control and data planes. The centralized architecture of these networks provides a global view of the underlying network to upper applications and brings numerous advantages such as routing, traffic engineering and QoS control. Despite these advantages there are... 

Payload Attribution Systems (PAS) are one of the most important tools of network forensics for detecting offenders and victims after the occurrence of a cybercrime. A PAS stores the network traffic history in order to detect the source and destination pair of a certain data stream in case a malicious activity occurs on the network. The huge volume of information that is daily transferred in the network means that the data stored by a PAS must be as compact and concise as possible. Moreover, the investigation of this large volume of data for a malicious data stream must be handled within a reasonable time. For this purpose, several techniques based on storing a digest of traffic using Bloom... 

In recent years, due to the drawback of rule-based firewalls in detecting unknown attacks, using neural networks has got more attention to be used in firewalls. As the computation load of neural networks are so much there is a need to decrease the processing time and power consumption as they are under load 24/7. Although there have been huge achievements in the usage of graphics processing units (which contain numerous processing cores) in neural networks, their high power consumption has made the scientists think about an alternative to implement neural networks. Field Programmable Gate Array (FPGA) is one of the most serious candidates to be used for implementing neural networks. The goal... 

Today, users can easily access network and Internet services from anywhere, anytime, using mobile computing devices, such as laptops, tablets, smartphones, and so forth This trend has diversified users and their need for network protocol-based services, including VoIP. VoIP is an Internet protocol for voice transmission and reception, which has become one of the biggest challenges in today's world of communications and telecommunications. Analyzing and evaluating the quality of network service (QoS) in VoIP traffic is an essential part of the process of ensuring and improving the quality of multimedia networks. Therefore, monitoring and measuring "users’ satisfaction" toward voice... 

Software defined network (SDN) is an emerging network architecture in which the network control is directly programmed and separated from the forwarding plane. The SDN is a suitable and adaptable infrastructure for the requirements of new networks such as the Internet of Things and the fifth generation of mobile phones. In real time systems, tasks that miss their deadline are considered worthless or useless. Nowadays, real time applications in the SDN platform have diversified and will continue to expand in the future. SDN should be able to support real time communications like traditional networks, and even better. Therefore, from a designer’s or analyst’s point of view of such networks, it... 

Intrusion Detection System (IDS) is an equipment destined to provide computer networks security. In recent years, Machine Learning and Deep Neural Network (DNN) methods have been considered as a way to detect new network attacks. Due to the huge amounts of calculations needed for these methods, there is a need for high performance and parallel or specific processors, such as Application Specific Integrated Circuit (ASIC), Graphical Processor Unit (GPU) and Field-Programmable Gate Array (FPGA). The latter seems more suitable than others due to its higher configurability and lesser power consumption. The goal of this study is the acceleration of a DNN-based IDS on FPGA. In this study, which is... 

Software defined networks are developed to provide programmability and a centralized view in networks by decoupling control plane from data plane. Software defined networks are now well received,and these networks are evolving every day. This is while more attention has been paid to widen the application of these networks and eliminating the shortcomings in their performance. On the other hand, in very large networks, the issue of efficiency and processing speed is of great importance. However, performance in these networks is not satisfactory, especially in single controller based SDN due to the complex processing of packets in a unique controller. Security needs are also of great... 

In this research, aluminum matrix composites (AMCs) reinforced by different contents of zirconium dioxide nanoparticles, graphite microparticles, and a mixture of both with various hybrid ratios, into a cold-rolled Aluminum1050 as base metal, fabricated by 4-passes friction stir processing. Observations show that the processing of composites reinforced by Gr particles is significantly hard due to the low friction coefficient of graphite resulting in the decline in the maximum temperature during the process and the type of base metal. The mixtures of graphite and zirconia resulted in more homogenous dispersion of particles in the matrix due to deterring a drastic drop in friction coefficient... 

Gas detection systems are now recognized as an essential component of safety in process units.but their successful performance depends strongly on the number and location of the detectors.As for the limited resources available (detectors), the placement of gas detectors can be considered as an optimization problem with different objective functions. In this research, an attempt was made to provide models and methods that quantitatively and from a practical point of view to optimum locate the detectors. Initially, a risk-based method was presented that defines the necessary steps for the arrangement of fire gas detectors with the aim of covering the maximum risk of leakage scenarios (risk:... 

Today, with the increasing expansion and development of computer networks and information technology, network security has become an important concern for experts and researchers in this field. One of the main elements in the field of information and network security are intrusion detection systems. To maintain the accuracy and quality of these systems, we need to test and evaluate them frequently. The datasets of intrusion detection systems are one of the main tools for evaluating these systems. The quality and accuracy of these systems in detecting anomalies and attacks in the network largely rely on rich and complete data. Also, the main component of this datasets is the traffic data,... 

Nowadays, power systems and substations are the most important components of the vital infrastructure of a country, which handle the production, transmission and distribution of the electrical energy. Automation systems increase the efficiency of the power industry while making remote control possible, but the use of computer-based control systems is a potential field for cyberattacks which may cause equipment destruction and electricity network destabilization. One of the main requirements for the utilization of digital substations is the synchronization between different equipment used in it. Several algorithms and protocols have been proposed so far for time synchronization in distributed... 

Joining of yttria-stabilized zirconia (YSZ) to stainless steel (SS) is considered for various applications such as solid oxide fuel cells, thermal barrier coatings, and medical implants. In the present work, a series of brazing pastes utilizing silver and nickel nanoparticles (~80 nm) mixed with carboxymethyl cellulose as the organic phase were developed to join 5YSZ to 420 SS. The effects of processing parameters such as time and temperature of brazing and the composition of the paste on the microstructure of the joint and its mechanical strength were studied. The mechanism of interface formation was elaborated by scanning electron microscopy (SEM) and electron probe micro analyzer (EPMA)....