Performance in a Business Environment Essay Example for Free

Performance in a Business Environment EssayThe purpose and benefits of continuously improving my believe in performance at work is to move one step forward and exceed my limitations, achieve further goals, self-motivation, not to be the same person and on the same position after a certain of time, to exceed my performance at work and doing work, improving my own performance fosters me to progress on my life and give me a stemma satisfaction. However this leads me to evaluate my own work by spirit at the work that takes the most time, and what actions can I take to do this task in a less time, however at the same time I look at the best part of the job that I do and also look for areas where I can improve. I normally speak to my colleagues that are more experience than me regarding this and take advice as fountainhead as guidance to do so. It is so important for me to get feedback and to accept it from others as this will help me to learn from my mistakes and be more confid ent in the work I am doing.Receiving feedback also helps me see myself from the perspective of others and how other people see me I always accept feedback whether positive or negative, as positive will help me to work harder and keep the earnest work Im doing, as well as negative will help me to learn from my past failures and mistakes so I can correct them. In every organisation it is so important to provide a Good feel piece of work, as a very challenging person I always try new ways, different ways to do my work with a good quality and within less time scale. I always learn new things either in the office as my mean solar day to day tasks or at home for my long term locomote goals. My own learning and development does not only improve my work and productivity, it improves and benefits the team I work with as well as the whole organisation.The more I learn, the more I can do. This benefits the organisation by increasing productivity. It helps me to identify gaps among my job requirements or future work roles and the existing knowledge, understanding and skills. This is one of the reasons that we flip in our organisation a private website that provides different short courses for self-development. The furtherance r bye from my current role will be towards a Management Information Analysts role, and then eventually a Business Analyst role as my long term role. This will also help me work towards my career I wish to pursue in the educational field, where I will take up to also demonstrate data management tasks on my day to day tasks at work. After completing my Apprenticeship in Business and Admin L3, I am looking forward to starting an Apprenticeship L4 with a hard working todevelop my career to the next level as Management Information Analysts towards my long term career as a Business Analysts. I already have experience working in education, retail and IT.I will be working harder to come upon my above career development with a good salary package and job description, where I can best use my skills, talents and capabilities. So by evolution my skills I can look at possible interesting careers and sectors that I might be interested in and develop my opportunities in securing a good job. A learning plan is a way for everyone to set personal targets and record achievements. It helps me as a person to keep on track towards where I want to be in my life and my work. The reason for making a plan is, it simply helps me to take more control of my future, by reminding me what I have learned, achieved and enjoyed. Creating my plan can help me develop more confidence in my ability to tackle new things, become more employable, and get more out of life.

The United States and China Essay Example for Free

The United States and chinaware EssayChinas idea of economic advancement has transformed the country in a unequal titan. Reframing methods started by Deng Xiaoping in the early 1980s, Chinese institutions started victimisation inexpensive capital and labor to contest on the global economy. Beijing maintains to subsidize exports massively, though loans to institutions and exchange live to non-domestic buyers of Chinese goods. The Chinese government enforces management on the expense of Chinese civilians that grant it to filter financial as trims into Chinese institutions. Chinas method of using financial repression has given this country financial power in the Global and American economy. This poses a threat to American Financial Foreign policy. In this enquiry paper, I allow explain the economic growth of China, from at that place I will tie that into their financial foreign policy in China, I will then discuss the cross-correlation method of America and Chinas financial in puts/outputs into American Foreign indemnity, from there I will present the threat that this poses to America.In 1970 China was under the direction of Mao Zedong, he retained a prepared economy. The countrys economic gain was conducted by the state of China, which set fixed controlled prices, manufacturing objectives, and resources available in the economy. The main goal of the Chinese government is to allow Chinas economy to be a more relatively self-sufficient system. Trade was usually narrow to gain only goods that could not achieve in China. China theories made the economy comparably ineffective, inactive, by tenability of many prospects of the economy of their centralized government. After the death of Mao in 1978 China decided to disconnect its ties that it had with the soviet-style policies. The economy was then reformed, corresponding to the free commercialise ethic and trade and investment of the United States. China intent is to, boost both economic growth and living s tandards. Prior to 1970, 81 % of Chinas slew lived in rural communities.The economy had previously been interrupted by war. The victorious communist party installed applied economics. 40 to 30 million people died from famine. In the city living, standards increased for over 40 years. Students from Tsinghua,University located in Beijing China, recorded a study that said the average pay direct in the catering business exceeded wages in higher education in 2009. After market reforms In 1978 the GP growth was averaging 10% any year. And it had lifted over 600 million people out of the poor. All of the country goals have been reached or within reach with the population at about 1.3 cardinal this has made china the second largest economy, and increasingly playing an importance and influence in the global market. It is now the worlds, merchandise exporter, holder of foreign exchanges, and largest manufacturer.Chinas brisk economic prosperity has excelled to a valuable merger in recipro cal monetary ties with the United States. Corresponding to American Foreign Policy trade data, overall trade between these two countries matured from 4.7 billion in 1980 to 560 billion in 2013. China is actively the United States second largest vocation ally, it is the third largest export market, also adding the largest country of exported goods. Powerful U.S. companies tend to move their business aboard in China to see their products bloom in there market and to take advantage of the lower-cost of labor for exported manufacturing goods. Interest rates comparably stay low because it allows the U.S. to remain internationally competitive.

Network System for Secure Communication

mesh topology placement of rules of rules for Secure CommunicationMethodologyThe main methodology involved behind this search project is to impart the importance of such technology from professionals and s headspring referred subterfugeicles. many of the general interviews pass on be added to the project with details showing their interest towards the current technology and besides the change they see in communicating with the oerbold technology.It on the hands of the components of IP certificate that contri nonwithstandinge to this level of secondure communicationThe IP certification measures (IPSec) Driver is employ to monitor lizard, filter, and bulletproofs the c all(prenominal)ing without the form.The (ISAKMP/Oakley) abbreviated as shekels protective covering connexion disclose Management communications communications communications protocol practises unwrap exchange and prudence moves that oversee auspices department issues amid hosts, and pull up stakes constitutes which tail end be utilise with auspices algorithms.The IP hostage Policy and the earnest Associations argon derived from those policies that define the aegis environment where dickens hosts back tooth communicate.The function of credentials Association API is to get out the interface between the IPSec driver, the Policy Agent and the ISAKMP.The function of the commission tools is to create policies, monitor IP Security statistics, and log IP Security events.The main methodologies which be under consideration for this project ar Classical encoding technologies, IP sec Tunnel, IP sec VPN, Internet Key substitute methods, Block Cipher Data Encryption, Advanced Encryption, Symmetric cyphers, Public head-to-head key functions, Digital cutaneous senses etc, which scram suggested me to design a collapse system.ImplementationThe main reason behind selecting IPSec is that it so powerful that it provides hostage to IP layer, and too forms the basis for in whole the contrasting TCP/IP communications protocols. This is principally composed of two protocols certification straits (AH)Encapsulating Security loading (ESP)IPSec Implementation MethodsIPSec is comprised of several death penaltys calculator architectures which argon defined in RFC 2401. The IPSec murder besides depends on heterogeneous factors including the version of IP utilise (v4 versus v6), the basic requirements of the application and other factors.End Host ImplementationImplementing IPSec in all host devices provides the most flexibility and pledge. It enables passim earnest between any two devices on the interlock.Router ImplementationRouter implementation however is a much simpler projection since we exactly make changes to a a few(prenominal) routers instead of hundreds or thousands of clients. It all provides shelter between pairs of routers that implement IPSec, but this may be sufficient for reliable applications such as realistic private networks (VPNs).The brain will be implement after proper testing of various open methodologies. The current system for implementation is as follows. We example sealed open source softw bes which provide encoding and decryption methods and au sotication. In the actual system, the user is asked to enter details of files to be sent and similarly round other details more or less the password and the public keys if included. The required softwargon are utilise in a elan which helps to run a smooth performance and secure operation.CONTENTSAcknowledgementI owe several(prenominal) thanks to people who helped supported me in doing my dissertation.Firstly, I would wish to express my immense gratitude to my esteem professor Mr. Dr. XXX, YYYY University, London for his support and motivation that has helped me to come up with this project.He supported me when its engageed and suggested me in rationality various methodologies in my project. He in addition took care of my project with attention to achieve my goal.I thank to my Institution and faculty members for giving me an opportunity to do my dissertation and also for library, computer lab facilities for doing my dissertation to achieve practical results which bath resolve my project related issues.I also extend my liveliness full thanks to my family friends.I owe my special thanks to my Dad and his colleagues who gave me suggestions on doing my Dissertation.AbstractIn the defer system the network helps a position organization to allocate the randomness by victimisation external devices. The external devices are use to carry the randomness. The existing system tinnot provide protective covering, which let ins an unlicenced user to entry the secret files. It also great dealnot share a single costly printer. Many interrupts may occur at heart the system. Though it is emolumentous we have numerous disadvantageous, somebody writes a program and apprize make the co stly printer to misprint the entropy. Similarly some unaccredited user may get admission fee over the network and may perform any illegal functions bid deleting some of the sensitive infoSecurity is the term that comes into picture when some cardinal or sensitive information mustiness be protected from an self-appointed access. Hence in that respect must be some way to protect the entropy from them and even if he hacks the information because he should not be able to understand whats the actual information in the file, which is the main intention of the project. The project is intentional to protect the sensitive information season it is in transaction in the network. There are many chances that an unauthorized person can have an access over the network in some way and can access this sensitive information. My main superlativeic focuses onIPSec(Internet Protocol Security) is an consultation to the IP protocol specified byIETFwhich provides security to the IP and the u pper-layer protocols and cryptograph in a network sharing system. It was first genuine for the new IPv6 conventionality and then underpin ported to IPv4. The IPSec architecture is described in theIPSecuses two different protocols AH ( certification drift) and ESP (Encapsulating security freight rate) to escort the authentication, integrity and confidentiality of the communication. It uses strong cryptography to provide twain authentication and encryption serve. Authentication ensures that piece of lands are from the right transmitter and have not been altered in transit. Encryption prevents wildcat reading of packet contents. 2 cryptograph is the technique used to secure the entropy while they are in transactions. Encryption and Decryption are two techniques used under cryptography technology. Data cryptography is the art of securing the preference that is shared among the applications. The main idea behind the design is to provide a secured communication between t he networks showing network level performance a great deal by differentiating different operating system which can ensure the security, authenticity by considering, analyzing and testing any best available methodologies.1. IntroductionBusinesses today are focused on the importance of securing node and business data. Increasing regulatory requirements are driving need for security of data.There have been many methods which have evolved over the years to delivery the need for security. Many of the methods are focused at the higher layers of the OSI protocol stack, thus compensating the IPs lack in resolving security issues. These declarations can be employ in certain(prenominal) situations, but they cannot be generalized because they are particularly too many applications. For example, Secure Sockets Layer (SSL) can be used for certain applications like World Wide Web access or FTP, but there are many other applications which cannot be resolved with this type of security.A solut ion is required to allow security at the IP level was very necessary so that all higher-layer protocols in TCP/IP could take advantage of it. When the decision was make to develop a new version of IP (IPv6), this was the golden opportunity to resolve not just the goaling problems in the older IPv4, but also resolve lack of security issues as well. Later a new security technology was developed with IPv6 in mind, but since IPv6 has taken extensive time to develop, and thus a solution was knowing to be usable for both IPv4 and IPv6.The technology which brings a secure communications to the Internet Protocol is cognize as IP Security, commonly abbreviated as IPSec.IPSec service of processs allow users to build secure tunnels by certain networks. All the data that passes through the entrusted net is encrypted by theIPSECgateway machine and decrypted by the gateway at the other end. The result obtained is a Virtual hush-hush Network or VPN. This network is in effect private even tho ugh it includes machines at several different sites which are connected by the insecure Internet. cryptograph technique is used to secure the data while they are in transactions. Encryption and Decryption are two techniques which are used under cryptography technology. Data cryptography is the art of securing the resource that is shared among the applications.The Encryption and Decryption are termed as two powerful security technologies that are widely implemented to protect the data from loss and look at compromise. In this project the networking allows the company to share files or data without using certain external devices. Some unauthorized users may get access over the network and perform some illegal functions in certain cases like deleting files while the transaction is still on at that time encryption and then decryption techniques are implemented to secure the data. Many other attacks in cryptography are considered which lead me to look into on different types of IPSec i mplementation methodologies in assemble to design the best model such that it may be suitable for the endue trend of networking systems also form a platform to enable communication to the outside world. Thus in orders to implement IPSec, certain modifications are required to the systems communications routines and certain new systems processes conduct secret key negotiations.What is IPSec?An extension to the IP protocol is considered as IPSec which provides high level security to the IP and to the upper-layer protocols. This was initially developed for the new IPv6 standard and then was back ported to IPv4. IPSec provides the following security services data stem authentication, connectionless integrity, replay protection, data confidentiality, pay backed traffic flow confidentiality, and key negotiation and management. It has been made mandatory by the IETF for the use of IPSec wherever feasible the standards documents are close to completion, and there are numerous implementa tions.Overview of IPSec ArchitectureThe IPSec suite defined as a framework of open standards. The following protocols are used by IPSec to perform various functions. 23IPSecprovides three main facilities which are explained belowInternet key exchange(IKE and IKEv2) This is used to set up a security association (SA) which can be done by handling negotiation of protocols and algorithms and generating the encryption and authentication keys which can be used by IPSec.45Authentication Header (AH)This is used to provide connectionless integrity and data origin authentication for IP datagrams and also provides protection against replay attacks.67Encapsulating Security Payload (ESP)This is used to provide confidentiality, data origin authentication, connectionless integrity, anti-replay service, and limited traffic flow confidentiality. 9Both authentication and encryption are generally desired in this mechanism.Assure that unauthorized users do not penetrate the virtual private networkAssur e that eavesdroppers on the Internet cannot read messages sent over the virtual private network.Since both the above features are generally desirable, most implementations are likely to use ESP rather than AH.Security AssociationThe security Association mechanism is used for authentication (AH) and confidentiality (ESP)A one way relationship between a sender and a receiver that affords security services to the traffic carried on it.Security services are afforded to an SA for the use of AH or ESP but not both.SA identified by three parametersSecurity Parameter world power (SPI)IP destination character referenceSecurity protocol identifierOverview of IPSec processs and FunctionsIPSec is not only assumed as a single protocol, but is rather considered as a set of services and protocols which provide a complete security solution to the IP network. These services and protocols are combined to provide various types of protection. Since IPSec ordinarily works at the IP layer, it provide s protection for any higher layer TCP/IP application or protocol without using any special security methods, which is considered as a major strength for its implementation. General types of protection services offered by IPSec includeEncryption of user data to achieve privacy.Authentication and message integrity has to be achieved to ensure that it is not changed on route.Protection against certain types of security attacks, such as replay attacks.The ability of the devices to negotiate the security algorithms and keys required in order to admit their security needs.wo security modes called tunnel and transport are implemented to meet the various network needs.Features BenefitsIPSec is observed to be straightforward by the end users.The users on the security mechanisms need not be trained.IPSec assures security measures for individuals.There is no requirement to change the software on a user or a server system.Strong security measures are applied to the entire traffic crossing the perimeter.2. ObjectiveIPSec is mostly designed in order to encrypt the data between the two systems without any spoofing attacks. It is a key force of defence against internal and external attacks. However, other than these, there are many other security strategies which have prevented the security attacks. The main idea in my research is to provide a better prelude to the implementation of IP Security by analyzing the hold methodologies. In the implementation of this design, I am also considering different operating systems to provide a better approach towards security which can prove to be good in ideal ways. The design of such an approach is helpful in restricting any unauthorised access to the network and also helps in providing a secure and authenticated access.The main idea behind the design is to provide a secured communication between the networks independent of the operating system which can ensure the security, authenticity by considering, analyzing and testing any two best available methodologies.In my overview of RFCs available in the Internet such as Cryptography the receiver end of a particular communication channel is not aware of the sender unless the sender transmits some information with private and public keys with cipher text which can prove his authenticity. Now the receiver sends the same package with his signature and then the receiver is also authenticated mutually.Attacks may occur in different ways. There are also many ways where in such communications can be detected and using techniques like eavesdropping or sniffing or man in the middle attack. These are the three major problems for secure communications. In my research, I will attempt to design a single- valuated function which can be easily followed in order to overcome such problems.There are many techniques available now which are better than normal communication. The major problem in such techniques is the implementation of man in the middle attack. There have been man y advances to try and rectify the problems but there has always been a flaw in the design. My research is to design a system using the current technologies used to encrypt and authenticate. These techniques play a major role in the implementation of IP Security.The major interest would be in areas like encryption, decryption and authentication. Additions will be done to this research as it is implemented. The goal is to use research existing systems and to suggest a system which makes it even hard to break. It is not ascorbic acid% immune to attacks but the attack may take longer to break the system than the present rate. This system will also be very honest and will be easy to use in daily life rather than something with a dozen processing steps to be followed.2.2 SCOPEWith the fast development of Multimedia data management technologies over the internet there is need to concern about the internet there is need to concern about the security and privacy of information. In multim edia system document, dissipation and sharing of data is becoming a common practice for internet based application and enterprises.As the internet forms the open source the present for all users securityForms the critical issue. Hence the transfer of information over the internet forms the critical issue. At the present situations the cryptographic techniques are used for providing SECURITY.2.3 discover PERSPECTIVEThe project Network system for Secure Communication is totally enhanced with the features that enable us to quality the real-time environment.Todays world is mostly employing the current networking techniques instead of using stand-alone PCs. IPSec tunnelling or Encryption, information scrambling technology is an important security tool. By properly applying, it can provide a secure communication channel even when the underlying system and network infrastructure is not secure. This is particularly important when data passes through the shared systems or network segments where eight-fold people may have access to the information. In these situations, sensitive data and especially passwords should be encrypted in order to protect it from unintended disclosure or modification.2.4 PROPOSED SYSTEMIn this system security is the term that comes into picture when some important or sensitive information must be protected from an unauthorized access. Hence there must be some way to protect the data from them and even if he hacks the information,The proposed system provides the security and it does not allow unauthorized users to access the secret files.As per the ISO standards the security parameters areConfidentialityAuthenticationIntegrityKey distributionAccess obtainCONFIDENTIALITYConfidentiality is the protection of patrimonial data from peaceful attacks. It can protect the data from unauthorized disclosure.AUTHENTICATIONA process used to verify the integrity of the transmitted data, especially a message. It is the process of proving ones indistingu ishability to someone else.INTEGRITYThe sender and the receiver want to ensure that the content of their communication is not altered during transmission. advert DISTRIBUTIONKey distribution can be defined as a term that refers to means of delivering a key to the communicating parties, without allowing others to see the key. penetration CONTROLIt is a ability to limit and control the access to host systems and applications via communication links.3.Literature ReviewThis project emphasis design and evaluates a computer-based system using appropriate process and tools. Most of the assiduity wide routers in the network implement their functionality in hardware and therefore we believe that hardware based routers are more efficient than a software-based router implementation besides that most of the work is in the research community which will be performed, using software-based routers utilizing off-the-shelf PCs. heterogeneous works have to be seek which evaluates different protocol stack, however none of them use hardware-based routers, has such a wide range of metrics, and none investigated mechanisms.My research methodology emphasis surveys, forums from the internet and articles from IEEE (Institute of electric and Electronics EngineersorIEEE) a quantitative approach in advance technology. I also consider various other thesis and books which are best suitable for my project. here following are the network related definitions, and few protocols from application layer, network and internet layer also discussed which in truth gives clear idea of understanding the concepts.3.1 IPSec StandardsIPSec is genuinely a collection of techniques and protocols it is not defined in a single Internet standard. Instead, a collection of RFCs defines the architecture, services and specific protocols used in IPSec. Some of the most important of these are shown belowRFC 2401 Security Architecture for the Internet Protocol(IPSec overview)The main IPSec document describes the a rchitecture and general operation of the technology, and showing how the different components fit together.RFC 2402 IP Authentication HeaderIt defines the IPSec Authentication Header (AH) protocol used for ensuring data integrity and origin verification.RFC 2403 The Use of HMAC-MD5-96 within ESP and AHDescribes a particular encryption algorithm for use by AH and ESP called Message Digest 5 (MD5), HMAC variant.RFC 2404 The Use of HMAC-SHA-1-96 within ESP and AHDescribes a particular encryption algorithm for use by AH and ESP called Secure Hash Algorithm 1 (SHA-1), HMAC variant.RFC 2406 IP Encapsulating and Security payload (ESP)It describes the IPSec Encapsulation Security Payload (ESP) protocol that provides data encryption for confidentiality.RFC 2408 Internet Security Association and Key Management Protocol (ISAKMP)It defines methods for exchanging keys and negotiating security associations.RFC 2409 The Internet Key Exchange (IKE)Describes the Internet Key Exchange (IKE) protocol used to negotiate security associations and exchange keys between devices for secure communications. It is based on ISAKMP and OAKLEY.RFC 2412 The OAKLEY Key Determination ProtocolIt describes a generic protocol for key exchange.RFC 2131 Dynamic Host Configuration Protocol (DHCP) DHCP allows a host to obtain an IP address automatically, as well as to learn additional information about subnet mask, the address of its first-hop router, and the address of its local DNS server.RFC 2131 RFC 3022 Network Address Translation (NAT)-In an attempt to provide transparent routing to hosts, NAT devices are used to connect an quarantined address realm with private unregistered addresses to an external realm with globally unique registered addresses.Domain Name System (DNS) It is a hierarchical naming system for computers, services, or any resource connected to the Internet or a private network. It associates various other information with domain label assigned to from each one of the participa nts. Most importantly, it translates domain names meaningful to humans into the numerical (binary) identifiers associated with networking equipment for the purpose of locating and addressing these devices worldwide. For example, www.example.com translates to 208.77.188.166.Windows Internet Name Service (WINS) It is Microsofts implementation of NetBIOS Name Service (NBNS), a name server and service for NetBIOS computer names. Effectively WINS is to NetBIOS names, like DNS is to domain names in fact its a central mapping of host names to network addresses. Like DNS it is broken into two parts, a Server Service (that manages the encoded Jet Database, server to server replication, service requests, and conflicts) and a TCP/IP customer component which manages the clients registration and renewal of names, and takes care of queries.VPN (Virtual Private Network) It is a virtual computer network that exists over the top of an existing network. The purpose of a VPN is to allow communication s between systems connected to the VPN using an existing shared network infrastructure as the transport, without the VPN network be aware of the existence of the underlying network backbone or without the VPN interfering with other network traffic on the backbone. A VPN between two networks is a great deal referred to as a VPN Tunnel. Most VPN technologies can be separated into two broad categories, Secure VPNs and Trusted VPNs.Internet Protocol version 6 (IPv6)It is the following-generation Internet Protocol version designated as the transposition to IPv4. It is an Internet Layer protocol for packet-switched internetworks. The main driving force for the redesign of Internet Protocol was the foreseeable IPv4 address exhaustion. IPv6 was defined in December 1998 by the Internet Engineering Task Force (IETF) with the publication of an Internet standard specification,RFC 2460.IPv6 has a vastly larger address space than IPv4. This results from the use of a 128-bit address, whereas I Pv4 uses only 32 bits. This expansion provides flexibility in allocating addresses and routing traffic and eliminates the primary need for network address translation (NAT), which gained general deployment as an effort to alleviate IPv4 address exhaustion. Due to its security and flexibility entire Internet will be deployed byIPv6 in 2012 as expected.TunnellingIn computer networks tunnelling protocol (delivery protocol) encapsulates the different payload protocol i.e., It carries a payload over an incompatible delivery-network. It can also provide a secure path through an untrusted network without any data loss. take Layer Security (TLS)Transport Layer Security (TLS) and its predecessor, Secure Sockets Layer (SSL), are cryptographic protocols that provide security for communications over networks such as the Internet. TLS and SSL encrypt the segments of network connections at the Transport Layer end-to-end.EncryptionIn cryptography, encryption is the process of transforming informa tion (referred to as plaintext) using an algorithm (called cipher) to make it indecipherable to anyone except those possessing special knowledge, usually referred to as a key. The result of the process is encrypted information (in cryptography, referred to as cipher text).In many contexts, the word encryption also implicitly refers to the reverse process, decryption.Internet Key ExchangeInternet Key Exchange (IKE or IKEv2) is the protocol used to set up a security association (SA) in the IPSec protocol suite. IKE uses a Diffie-Hellman key exchange to set up a shared posing secret, from which cryptographic keys are derived. Public key techniques or, alternatively, a pre-shared key, are used to mutually authenticate the communicating parties.4.IPSec System ArchitectureAuthentication Header and Encapsulating Security Payload are commonly called protocols, though this is another case where the validity of this term is debatable. They are not really distinct protocols but are implement ed as headers that are inserted into IP datagrams, as we will see. They thus do the grunt work of IPSec, and can be used together to provide both authentication and privacy.IPSec protocolsThe IPSec protocol family consists of two protocols Authentication Header (AH) andEncapsulated Security Payload (ESP). Both these protocols are independent IP. AH is the IP protocol 51 and ESP is the IP protocol 50Authentication HeaderThis is a member of the IPSec protocol suite. Authentication Header provides connectionless data integrity and data origin authentication of IP packets. Further, it can also provide protection against the replay attacks by using the sliding window technique and by discarding the old packets. Authentication Header also gives protection for the IP payload and all the header fields of an IP datagram.AH generally operates on the stop of IP, by using the IP protocol name 51.An AH packet draw is shown below which describes how an AH packet can be constructed and interpret edField meaningsNext headerThis field is an 8-bit field that mainly identifies the type of the next payload obtained after the Authentication Header. The value of this field can be chosen from the set of defined IP Protocol Numbers.RESERVEDThese fields are usually reserved for the future use.Payload lengthThis defines the size of Authentication Header packet.Sequence numberThis field represents a monotonically increasing number which is used to prevent certain replay attacks.Security parameters index (SPI)This field is used to identify the security parameters, in combination with the IP address, and then identify the security association techniques implemented with this packet.Authentication dataThis field contains the integrity check value (ICV) which is necessary to authenticate the packet. This field may also contain padding.Encapsulating Security PayloadESP which can be expanded as Encapsulating Security Payload is a member belonging of the IPSec protocol suite. IPSec achieves i ntegrity, origin authenticity, and confidentiality protection of packets. This protocol also supports encryption-only and authentication-only configurations. However usage of only encryption technique without authentication is not recommended because it is termed insecure.ESP does not protect the IP packet header like the Authentication Header (AH) does. The packet diagram below shows how an ESP packet is constructed and interpretedField meaningsSecurity parameteNetwork System for Secure CommunicationNetwork System for Secure CommunicationMethodologyThe main methodology involved behind this research project is to provide the importance of such technology from professionals and well referred articles. Some of the general interviews will be added to the project with details showing their interest towards the current technology and also the change they see in communicating with the new technology.It on the hands of the components of IP Security that contribute to this level of secure c ommunicationThe IP Security (IPSec) Driver is used to monitor, filter, and secures the traffic throughout the system.The (ISAKMP/Oakley) abbreviated as Internet Security Association Key Management Protocol performs key exchange and management functions that oversee security issues between hosts, and provide keys which can be used with security algorithms.The IP Security Policy and the Security Associations are derived from those policies that define the security environment where two hosts can communicate.The function of Security Association API is to provide the interface between the IPSec driver, the Policy Agent and the ISAKMP.The function of the management tools is to create policies, monitor IP Security statistics, and log IP Security events.The main methodologies which are under consideration for this project are Classical encryption technologies, IP sec Tunnel, IP sec VPN, Internet Key Exchange methods, Block Cipher Data Encryption, Advanced Encryption, Symmetric ciphers, Pu blic private key functions, Digital signature etc, which have suggested me to design a better system.ImplementationThe main reason behind selecting IPSec is that it so powerful that it provides security to IP layer, and also forms the basis for all the other TCP/IP protocols. This is generally composed of two protocolsAuthentication Header (AH)Encapsulating Security Payload (ESP)IPSec Implementation MethodsIPSec is comprised of several implementations architectures which are defined in RFC 2401. The IPSec implementation also depends on various factors including the version of IP used (v4 versus v6), the basic requirements of the application and other factors.End Host ImplementationImplementing IPSec in all host devices provides the most flexibility and security. It enables end-to-end security between any two devices on the network.Router ImplementationRouter implementation however is a much simpler task since we only make changes to a few routers instead of hundreds or thousands of clients. It only provides protection between pairs of routers that implement IPSec, but this may be sufficient for certain applications such as virtual private networks (VPNs).The idea will be implemented after proper testing of various available methodologies. The current strategy for implementation is as follows. We use certain open source softwares which provide encryption and decryption methods and authentication. In the actual system, the user is asked to enter details of files to be sent and also some other details about the password and the public keys if included. The required software are used in a way which helps to run a smooth process and secure operation.CONTENTSAcknowledgementI owe many thanks to people who helped supported me in doing my dissertation.Firstly, I would like to express my immense gratitude to my respected professor Mr. Dr. XXX, YYYY University, London for his support and motivation that has helped me to come up with this project.He supported me when i ts needed and suggested me in understanding various methodologies in my project. He also took care of my project with attention to achieve my goal.I thank to my Institution and faculty members for giving me an opportunity to do my dissertation and also for library, computer lab facilities for doing my dissertation to achieve practical results which can resolve my project related issues.I also extend my Heart full thanks to my family friends.I owe my special thanks to my Dad and his colleagues who gave me suggestions on doing my Dissertation.AbstractIn the present system the network helps a particular organization to share the data by using external devices. The external devices are used to carry the data. The existing system cannot provide security, which allows an unauthorized user to access the secret files. It also cannot share a single costly printer. Many interrupts may occur within the system. Though it is advantageous we have numerous disadvantageous, somebody writes a progr am and can make the costly printer to misprint the data. Similarly some unauthorized user may get access over the network and may perform any illegal functions like deleting some of the sensitive informationSecurity is the term that comes into picture when some important or sensitive information must be protected from an unauthorized access. Hence there must be some way to protect the data from them and even if he hacks the information because he should not be able to understand whats the actual information in the file, which is the main intention of the project. The project is designed to protect the sensitive information while it is in transaction in the network. There are many chances that an unauthorized person can have an access over the network in some way and can access this sensitive information. My main topic focuses onIPSec(Internet Protocol Security) is an extension to the IP protocol specified byIETFwhich provides security to the IP and the upper-layer protocols and cryp tography in a network sharing system. It was first developed for the new IPv6 standard and then back ported to IPv4. The IPSec architecture is described in theIPSecuses two different protocols AH (Authentication Header) and ESP (Encapsulating security payload) to ensure the authentication, integrity and confidentiality of the communication. It uses strong cryptography to provide both authentication and encryption services. Authentication ensures that packets are from the right sender and have not been altered in transit. Encryption prevents unauthorised reading of packet contents. 2Cryptography is the technique used to secure the data while they are in transactions. Encryption and Decryption are two techniques used under cryptography technology. Data cryptography is the art of securing the resource that is shared among the applications. The main idea behind the design is to provide a secured communication between the networks showing network level performance practically by differ entiating different operating system which can ensure the security, authenticity by considering, analyzing and testing any best available methodologies.1. IntroductionBusinesses today are focused on the importance of securing customer and business data. Increasing regulatory requirements are driving need for security of data.There have been many methods which have evolved over the years to address the need for security. Many of the methods are focused at the higher layers of the OSI protocol stack, thus compensating the IPs lack in resolving security issues. These solutions can be implemented in certain situations, but they cannot be generalized because they are particularly too many applications. For example, Secure Sockets Layer (SSL) can be used for certain applications like World Wide Web access or FTP, but there are many other applications which cannot be resolved with this type of security.A solution is required to allow security at the IP level was very necessary so that all higher-layer protocols in TCP/IP could take advantage of it. When the decision was made to develop a new version of IP (IPv6), this was the golden opportunity to resolve not just the addressing problems in the older IPv4, but also resolve lack of security issues as well. Later a new security technology was developed with IPv6 in mind, but since IPv6 has taken long time to develop, and thus a solution was designed to be usable for both IPv4 and IPv6.The technology which brings a secure communications to the Internet Protocol is known as IP Security, commonly abbreviated as IPSec.IPSecservices allow users to build secure tunnels through certain networks. All the data that passes through the entrusted net is encrypted by theIPSECgateway machine and decrypted by the gateway at the other end. The result obtained is a Virtual Private Network or VPN. This network is effectively private even though it includes machines at several different sites which are connected by the insecure Internet. Cryptography technique is used to secure the data while they are in transactions. Encryption and Decryption are two techniques which are used under cryptography technology. Data cryptography is the art of securing the resource that is shared among the applications.The Encryption and Decryption are termed as two powerful security technologies that are widely implemented to protect the data from loss and deliberate compromise. In this project the networking allows the company to share files or data without using certain external devices. Some unauthorized users may get access over the network and perform some illegal functions in certain cases like deleting files while the transaction is still on at that time encryption and then decryption techniques are implemented to secure the data. Many other attacks in cryptography are considered which lead me to research on different types of IPSec implementation methodologies in order to design the best model such that it may be suitable for th e present trend of networking systems also form a platform to enable communication to the outside world. Thus in orders to implement IPSec, certain modifications are required to the systems communications routines and certain new systems processes conduct secret key negotiations.What is IPSec?An extension to the IP protocol is considered as IPSec which provides high level security to the IP and to the upper-layer protocols. This was initially developed for the new IPv6 standard and then was back ported to IPv4. IPSec provides the following security services data origin authentication, connectionless integrity, replay protection, data confidentiality, limited traffic flow confidentiality, and key negotiation and management. It has been made mandatory by the IETF for the use of IPSec wherever feasible the standards documents are close to completion, and there are numerous implementations.Overview of IPSec ArchitectureThe IPSec suite defined as a framework of open standards. The follow ing protocols are used by IPSec to perform various functions. 23IPSecprovides three main facilities which are explained belowInternet key exchange(IKE and IKEv2) This is used to set up a security association (SA) which can be done by handling negotiation of protocols and algorithms and generating the encryption and authentication keys which can be used by IPSec.45Authentication Header (AH)This is used to provide connectionless integrity and data origin authentication for IP datagrams and also provides protection against replay attacks.67Encapsulating Security Payload (ESP)This is used to provide confidentiality, data origin authentication, connectionless integrity, anti-replay service, and limited traffic flow confidentiality. 9Both authentication and encryption are generally desired in this mechanism.Assure that unauthorized users do not penetrate the virtual private networkAssure that eavesdroppers on the Internet cannot read messages sent over the virtual private network.Since bo th the above features are generally desirable, most implementations are likely to use ESP rather than AH.Security AssociationThe security Association mechanism is used for authentication (AH) and confidentiality (ESP)A one way relationship between a sender and a receiver that affords security services to the traffic carried on it.Security services are afforded to an SA for the use of AH or ESP but not both.SA identified by three parametersSecurity Parameter Index (SPI)IP destination addressSecurity protocol identifierOverview of IPSec Services and FunctionsIPSec is not only assumed as a single protocol, but is rather considered as a set of services and protocols which provide a complete security solution to the IP network. These services and protocols are combined to provide various types of protection. Since IPSec usually works at the IP layer, it provides protection for any higher layer TCP/IP application or protocol without using any additional security methods, which is consider ed as a major strength for its implementation. General types of protection services offered by IPSec includeEncryption of user data to achieve privacy.Authentication and message integrity has to be achieved to ensure that it is not changed on route.Protection against certain types of security attacks, such as replay attacks.The ability of the devices to negotiate the security algorithms and keys required in order to meet their security needs.wo security modes called tunnel and transport are implemented to meet the various network needs.Features BenefitsIPSec is observed to be transparent by the end users.The users on the security mechanisms need not be trained.IPSec assures security measures for individuals.There is no requirement to change the software on a user or a server system.Strong security measures are applied to the entire traffic crossing the perimeter.2. ObjectiveIPSec is mostly designed in order to encrypt the data between the two systems without any spoofing attacks. I t is a key force of defence against internal and external attacks. However, other than these, there are many other security strategies which have prevented the security attacks. The main idea in my research is to provide a better approach to the implementation of IP Security by analyzing the present methodologies. In the implementation of this design, I am also considering different operating systems to provide a better approach towards security which can prove to be good in ideal ways. The design of such an approach is helpful in restricting any unauthorised access to the network and also helps in providing a secure and authenticated access.The main idea behind the design is to provide a secured communication between the networks independent of the operating system which can ensure the security, authenticity by considering, analyzing and testing any two best available methodologies.In my overview of RFCs available in the Internet such as Cryptography the receiver end of a particula r communication channel is not aware of the sender unless the sender transmits some information with private and public keys with cipher text which can prove his authenticity. Now the receiver sends the same package with his signature and then the receiver is also authenticated mutually.Attacks may occur in different ways. There are also many ways where in such communications can be detected and using techniques like eavesdropping or sniffing or man in the middle attack. These are the three major problems for secure communications. In my research, I will attempt to design a procedure which can be easily followed in order to overcome such problems.There are many techniques available now which are better than normal communication. The major problem in such techniques is the implementation of man in the middle attack. There have been many advances to try and rectify the problems but there has always been a flaw in the design. My research is to design a system using the current technolo gies used to encrypt and authenticate. These techniques play a major role in the implementation of IP Security.The major interest would be in areas like encryption, decryption and authentication. Additions will be done to this research as it is implemented. The goal is to use research existing systems and to suggest a system which makes it even hard to break. It is not 100% immune to attacks but the attack may take longer to break the system than the present rate. This system will also be very safe and will be easy to use in daily life rather than something with a dozen processing steps to be followed.2.2 SCOPEWith the rapid development of Multimedia data management technologies over the internet there is need to concern about the internet there is need to concern about the security and privacy of information. In multimedia document, dissipation and sharing of data is becoming a common practice for internet based application and enterprises.As the internet forms the open source the present for all users securityForms the critical issue. Hence the transfer of information over the internet forms the critical issue. At the present situations the cryptographic techniques are used for providing SECURITY.2.3 PROJECT PERSPECTIVEThe project Network system for Secure Communication is totally enhanced with the features that enable us to feel the real-time environment.Todays world is mostly employing the latest networking techniques instead of using stand-alone PCs. IPSec tunnelling or Encryption, information scrambling technology is an important security tool. By properly applying, it can provide a secure communication channel even when the underlying system and network infrastructure is not secure. This is particularly important when data passes through the shared systems or network segments where multiple people may have access to the information. In these situations, sensitive data and especially passwords should be encrypted in order to protect it from unintended di sclosure or modification.2.4 PROPOSED SYSTEMIn this system security is the term that comes into picture when some important or sensitive information must be protected from an unauthorized access. Hence there must be some way to protect the data from them and even if he hacks the information,The proposed system provides the security and it does not allow unauthorized users to access the secret files.As per the ISO standards the security parameters areConfidentialityAuthenticationIntegrityKey distributionAccess controlCONFIDENTIALITYConfidentiality is the protection of transmitted data from passive attacks. It can protect the data from unauthorized disclosure.AUTHENTICATIONA process used to verify the integrity of the transmitted data, especially a message. It is the process of proving ones identity to someone else.INTEGRITYThe sender and the receiver want to ensure that the content of their communication is not altered during transmission.KEY DISTRIBUTIONKey distribution can be defin ed as a term that refers to means of delivering a key to the communicating parties, without allowing others to see the key.ACCESS CONTROLIt is a ability to limit and control the access to host systems and applications via communication links.3.Literature ReviewThis project emphasis design and evaluates a computer-based system using appropriate process and tools. Most of the industry wide routers in the network implement their functionality in hardware and therefore we believe that hardware based routers are more efficient than a software-based router implementation besides that most of the work is in the research community which will be performed, using software-based routers utilizing off-the-shelf PCs. Various works have to be attempted which evaluates different protocol stack, however none of them use hardware-based routers, has such a wide range of metrics, and none investigated mechanisms.My research methodology emphasis surveys, forums from the internet and articles from IEEE (Institute of Electrical and Electronics EngineersorIEEE) a quantitative approach in advance technology. I also consider various other thesis and books which are best suitable for my project.Here following are the network related definitions, and few protocols from application layer, network and internet layer also discussed which actually gives clear idea of understanding the concepts.3.1 IPSec StandardsIPSec is actually a collection of techniques and protocols it is not defined in a single Internet standard. Instead, a collection of RFCs defines the architecture, services and specific protocols used in IPSec. Some of the most important of these are shown belowRFC 2401 Security Architecture for the Internet Protocol(IPSec overview)The main IPSec document describes the architecture and general operation of the technology, and showing how the different components fit together.RFC 2402 IP Authentication HeaderIt defines the IPSec Authentication Header (AH) protocol used for ensuring d ata integrity and origin verification.RFC 2403 The Use of HMAC-MD5-96 within ESP and AHDescribes a particular encryption algorithm for use by AH and ESP called Message Digest 5 (MD5), HMAC variant.RFC 2404 The Use of HMAC-SHA-1-96 within ESP and AHDescribes a particular encryption algorithm for use by AH and ESP called Secure Hash Algorithm 1 (SHA-1), HMAC variant.RFC 2406 IP Encapsulating and Security payload (ESP)It describes the IPSec Encapsulation Security Payload (ESP) protocol that provides data encryption for confidentiality.RFC 2408 Internet Security Association and Key Management Protocol (ISAKMP)It defines methods for exchanging keys and negotiating security associations.RFC 2409 The Internet Key Exchange (IKE)Describes the Internet Key Exchange (IKE) protocol used to negotiate security associations and exchange keys between devices for secure communications. It is based on ISAKMP and OAKLEY.RFC 2412 The OAKLEY Key Determination ProtocolIt describes a generic protocol for key exchange.RFC 2131 Dynamic Host Configuration Protocol (DHCP) DHCP allows a host to obtain an IP address automatically, as well as to learn additional information about subnet mask, the address of its first-hop router, and the address of its local DNS server.RFC 2131 RFC 3022 Network Address Translation (NAT)-In an attempt to provide transparent routing to hosts, NAT devices are used to connect an isolated address realm with private unregistered addresses to an external realm with globally unique registered addresses.Domain Name System (DNS) It is a hierarchical naming system for computers, services, or any resource connected to the Internet or a private network. It associates various other information with domain names assigned to each of the participants. Most importantly, it translates domain names meaningful to humans into the numerical (binary) identifiers associated with networking equipment for the purpose of locating and addressing these devices worldwide. For example, ww w.example.com translates to 208.77.188.166.Windows Internet Name Service (WINS) It is Microsofts implementation of NetBIOS Name Service (NBNS), a name server and service for NetBIOS computer names. Effectively WINS is to NetBIOS names, like DNS is to domain names in fact its a central mapping of host names to network addresses. Like DNS it is broken into two parts, a Server Service (that manages the encoded Jet Database, server to server replication, service requests, and conflicts) and a TCP/IP Client component which manages the clients registration and renewal of names, and takes care of queries.VPN (Virtual Private Network) It is a virtual computer network that exists over the top of an existing network. The purpose of a VPN is to allow communications between systems connected to the VPN using an existing shared network infrastructure as the transport, without the VPN network being aware of the existence of the underlying network backbone or without the VPN interfering with other network traffic on the backbone. A VPN between two networks is often referred to as a VPN Tunnel. Most VPN technologies can be separated into two broad categories, Secure VPNs and Trusted VPNs.Internet Protocol version 6 (IPv6)It is the next-generation Internet Protocol version designated as the successor to IPv4. It is an Internet Layer protocol for packet-switched internetworks. The main driving force for the redesign of Internet Protocol was the foreseeable IPv4 address exhaustion. IPv6 was defined in December 1998 by the Internet Engineering Task Force (IETF) with the publication of an Internet standard specification,RFC 2460.IPv6 has a vastly larger address space than IPv4. This results from the use of a 128-bit address, whereas IPv4 uses only 32 bits. This expansion provides flexibility in allocating addresses and routing traffic and eliminates the primary need for network address translation (NAT), which gained widespread deployment as an effort to alleviate IPv4 address exh austion. Due to its security and flexibility entire Internet will be deployed byIPv6 in 2012 as expected.TunnellingIn computer networks tunnelling protocol (delivery protocol) encapsulates the different payload protocol i.e., It carries a payload over an incompatible delivery-network. It can also provide a secure path through an untrusted network without any data loss.Transport Layer Security (TLS)Transport Layer Security (TLS) and its predecessor, Secure Sockets Layer (SSL), are cryptographic protocols that provide security for communications over networks such as the Internet. TLS and SSL encrypt the segments of network connections at the Transport Layer end-to-end.EncryptionIn cryptography, encryption is the process of transforming information (referred to as plaintext) using an algorithm (called cipher) to make it unreadable to anyone except those possessing special knowledge, usually referred to as a key. The result of the process is encrypted information (in cryptography, refe rred to as cipher text).In many contexts, the word encryption also implicitly refers to the reverse process, decryption.Internet Key ExchangeInternet Key Exchange (IKE or IKEv2) is the protocol used to set up a security association (SA) in the IPSec protocol suite. IKE uses a Diffie-Hellman key exchange to set up a shared session secret, from which cryptographic keys are derived. Public key techniques or, alternatively, a pre-shared key, are used to mutually authenticate the communicating parties.4.IPSec System ArchitectureAuthentication Header and Encapsulating Security Payload are commonly called protocols, though this is another case where the validity of this term is debatable. They are not really distinct protocols but are implemented as headers that are inserted into IP datagrams, as we will see. They thus do the grunt work of IPSec, and can be used together to provide both authentication and privacy.IPSec protocolsThe IPSec protocol family consists of two protocols Authentica tion Header (AH) andEncapsulated Security Payload (ESP). Both these protocols are independent IP. AH is the IP protocol 51 and ESP is the IP protocol 50Authentication HeaderThis is a member of the IPSec protocol suite. Authentication Header provides connectionless data integrity and data origin authentication of IP packets. Further, it can also provide protection against the replay attacks by using the sliding window technique and by discarding the old packets. Authentication Header also gives protection for the IP payload and all the header fields of an IP datagram.AH generally operates on the stop of IP, by using the IP protocol number 51.An AH packet diagram is shown below which describes how an AH packet can be constructed and interpretedField meaningsNext headerThis field is an 8-bit field that mainly identifies the type of the next payload obtained after the Authentication Header. The value of this field can be chosen from the set of defined IP Protocol Numbers.RESERVEDThese f ields are usually reserved for the future use.Payload lengthThis defines the size of Authentication Header packet.Sequence numberThis field represents a monotonically increasing number which is used to prevent certain replay attacks.Security parameters index (SPI)This field is used to identify the security parameters, in combination with the IP address, and then identify the security association techniques implemented with this packet.Authentication dataThis field contains the integrity check value (ICV) which is necessary to authenticate the packet. This field may also contain padding.Encapsulating Security PayloadESP which can be expanded as Encapsulating Security Payload is a member belonging of the IPSec protocol suite. IPSec achieves integrity, origin authenticity, and confidentiality protection of packets. This protocol also supports encryption-only and authentication-only configurations. However usage of only encryption technique without authentication is not recommended beca use it is termed insecure.ESP does not protect the IP packet header like the Authentication Header (AH) does. The packet diagram below shows how an ESP packet is constructed and interpretedField meaningsSecurity paramete

Modelling and simulation using opnet modeller 14.5

Modelling and simulation using opnet putler 14.54.1 Overview The aim of this chapter is to illustrate the modelling and simulation, using OPNET Modeller 14.5-Education version for the autonomic radio talk profits management. In addition, it lead explain what kind of modifications and suppositions were necessary in say to achieve the autonomic self-healing mechanism, including operators architecture and description. 4.2 Autonomic Management Agents This section result illustrate the modelling and simulation, using OPNET Modeller 14.5-Education version, of a community of autonomic management constituents that provide network fault analysis for a company of origin post. The main objective of these intelligent agents will be to bring together play development in tell apart to detect failures when bag order deputise information between them, and the creation of a high obtain fitted radio access network. Analysing network failures is relatively difficult since these probl ems may differ from one network system to a nonher and could depend on network dynamics, i.e., the type of network information to be change and the traffic characteristics associated with that information. In addition, the pattern of failures could vary promptly as the network operates and reconfigures around a failed blind As OPNET Modeller 14.5-Education version does not have an self-directed service ready for simulation usage, the live code had to be adapted to wholeow autonomic behaviour. The spend of two diametric autonomic agents was required in order to provide self-healing network diagnosing and facilities. In this report, OPNET coding modifications will be called Agents and two different types are mentioned and applied to the access points. Testing Agents will supply data simplicity and supervise capabilities to pommel Agents whereas invitee Agents will periodically check the information that Testing Agents bring together and aim it as a medium of failure esp ial within the wireless access network. In addition, a Testing Agent will be able to supervise and provide data regarding information exchanged among access points. Node agents use data obtained by the Testing Agents as a method of node analysis diverse Testing Agents may be engraft on a private wireless knob. A Testing Agent can be situated on a host device since it does not have to deal with data acquisition and information simplicity. In contrast, Node Agents will be located on a base station. Various Testing Agents may be found on a single wireless client 4.2.1 Additions and Model Modifications OPNET Modeller was used in order to reconcile concept achievability of the proposed model. The concept of Autonomic Mobile Wireless Networks is illustrated by using a community of wireless base stations which allow autonomous healing of interrupted grades The OPNET simulation showed in this report will contain two Node Agents and two Testing Agents which take the part of a group of autonomic base stations. The rude(a) OPNET topology required the creation of ten nodes in order to characterize every autonomic agent and all the modifications were make to accomplish the needs of both agents. The autonomic behaviour was obtained through modifications to the wlan_server_adv and ip_arp_v4 OPNET surgical procedure models, where code changes were made in order to achieve the desired behaviour. Figure 4.0 OPNET ip_arp_v4 process model.4.2.2 Testing Agent (TA) and Node Agent (NA) Description Each Testing Agent belongs respectively with a Node Agent as a single component of a particular node in the OPNET simulation. As mentioned in section 3.3, each base station is aware of its next-door stations at all times. A Testing agent (TA_1) is designed to watch and detect alterations regarding other base stations. In the event of any modification of the network, TA_1 will notify Node Agent (NA_1) by using a UDP message. UDP presents lack of dependableness so consequently the T esting agent TA_1 cannot assure successful message transmission. However, this lack of reliability will be useful for simulation purposes After receiving information from TA_1, a Node Agent (NA_1) will inform other stations about changes in zone, and file updating may take place. When a NA_1 observes that information sent has not arrived at its destination within a particular period of time, the agent alerts its neighbours that a probable node malfunction has occurred. This time depends on certain attributes fixed for a particular wandering user. Scalability of the network will be achieved with the use of a second pair of agents. Agent TA_2 then has the job of monitoring path request messages sent and received by other stations. Information regarding path request is detected by TA_2, including the time when the path request was generated and the destination of this demand. Changes to the mobility architecture were necessary including ARP and IP alterations. The idea was to alter s ome settings in order to evaluate and compare the destination address with the address of the device where specific information was sent. The destination address must belong to a registered wireless client and the intelligent agents will check correct transmission of it IP alterations were made changing the moip_core to allow stations to be able to forward information packets to its neighbours, interchange the IP routing mode and help each station choosing the better way available. The moip_core has a list that could be dynamically regulated as the base stations travel between networks The UDP is used as a transport protocol and the managing, mobility and registration information is handled by the process shown in the figure below. Figure 4.1 OPNET moip_reg process model The moip_reg process allows base stations to manage and update mobility information regarding next-door stations. When exchanging information among stations, all the agents will monitor and process each request an d they will aim to find failures during the registration process. If the registration communication was successful, there is an identification value that is compared with a mobility list and the correctly matched among them will mean no illusion has occurred during the registration procedure Updated messages must be sent when agents have no information regarding the energetic station due to updating failures. In fact, agents need acknowledgments in order to be sure that the communication between stations is happening perfectly. If an agent does not receive the updating message, it will not be able to monitor base stations and all the information exchanged among agents will be lost. Therefore, all the updates and acknowledgments will be verified within an identification field of force contained by the moip_reg. If they are equivalent, the update will be set as confirmed and the exchange of information will be free of failures.Figure 4.2 OPNET agent node structure Figure 4.2 shows a plain representation of agent node structure and distribution. In addition, OPNET Modeller allows us to present the node model which was special in order to provide autonomic behaviour to a set of autonomic base stations within a self-managed wireless access network. The wireless connectivity is achievable through the use of IEEE802.11b interfaces, permitting roaming among networks. This type of interface could be improved by adding an extra communication module between the radio transceiver and the wlan_mac system. This process allows a base station to simulate the effect of completely losing connection among devices and at the same time avoiding unnecessarily queues of packets 4.3 Network Model Three different network configurations were constructed to simulate and identify autonomic characteristics, and agent distribution was arbitrarily decided in order to improve the simulation. The Testing agent (TA_1) was applied to a single base station another station was selected to mak e use of Testing Agent (TA_2) and Node Agent (NA_1) while Node Agent (NA_2) was modified to operate in all base stations 4.3.1 Design of Wireless Network Infrastructure The next steps were followed in order to design a wireless infrastructure in OPNET Open the OPNET program and select New Project and then press OK. Give the project and the scenario a name. Select render empty scenario and press next. Network space was chosen as campus and specific size was selected as X-span and Y-span 10 kilometres respectively. The Object Palette Tree will pass around which illustrates the various WLAN devices as follows. The file Node Models situated in the object palette contains the item wireless-lan-adv which encloses all the different network devices used in the wireless network presented in this report All nodes were modified by using the function configuration Application Config and Advance Edit Attributes option. In addition, the next wireless parameters were customized as stated in th e figure 4.4 Physical characteristics Data Rate (bps) Transmit Power (W) AP Beacon Interval (sec) Packet Reception-Power Threshold (bytes)The wireless access network contains ten base stations (Figure 4.5) which are connected via point to point duplex links (ppp_adv). Each base station has at least two interfaces one interface to provide connectivity among wireless mobile devices and another wired interface for uplink communication. The network configuration showed above was created in order to simulate and analyse the wireless system when it includes nodes (Base Stations) on the exterior sector of the network and no more than two neighbour stations close to it. Therefore, these stations will only have a maximum of two paths to communicate their next-door devices. On the other hand, the rest of base stations will be touch by more stations and more possible routes. Figure 4.6 shows the second configuration. There are various potential routes on which base stations and mobile device s may exchange information among them. As a result, the agents performance is going to be probed by selecting the best path and being able to repair route problems. The third model illustrated in the Figure 4.7 offers a more narrowly linked network configuration. The number of neighbours for every node will increase and the communication between Node Agents and Testing Agents will improve due to a decrement in the number of paths required for Testing Agent information to chance upon the suitable Node Agent. Therefore, a superior self-healing performance will be expected using this configuration.4.4 Verification of Agents self-healing process upon base station malfunction To investigate the right operation of the agents, different simulations were made in every network model. The main purpose is to test agent reliability and its competence when providing an intelligent self-healing fertilise of action. Consequently, the base stations were programmed to reproduce a failure and the action of agents would eventually lead us to simulate an autonomic behaviour. In order to obtain a more understandable vision of the self-healing performance, a reduced network configuration was simulated (Figure 4.8). Exchange of information among nodes may take different paths until data arrives at its final destination. In the event that a particular base station fails, the permanent monitoring service of the Node Agents will detect the malfunction, and then the base stations self-healing method will autonomously locate another route allowing intelligent diagnosing and repairing OPNET code modifications provide one method of simulating a malfunction in the base station. The most important features required for this process were the use of an acknowledged mechanism and the understanding of the range capacity of base stations. These characteristics were required to allow mobile devices to recognize when a failure takes place in a base station and stop transmitting and routing traff ic, in order to start self-healing and path recovery 4.5 Self-Healing and Route Discovery The new route discovery was obtained through modifications to the wlan_server_adv and ip_arp_v4 OPNET process model, where code changes were made in order to achieve the desired autonomic behaviour. In a wireless access network, if the base station and mobile nodes are within transmission range of each other, an ARP request can be use in order to find a new route to the target mobile node. The Internets Address Resolution Protocol dynamically translates IP addresses to its mackintosh level address. Full OPNET source code is given in Appendix Source Code page 70 //ROUTE FAILURE //Route failure was created by denying connection service for a given destination address. The program looks into ARP table entries to find an entry for the destination IP address. Because the IP address given does not match in the ARP table the program returns a FAILURE ROUTE situation. On the other hand, in case that a matching entry was found SUCCESS connection will take place. static Compcode arp_cache_entry_find (IpT_Address dest_ip_addr, int* index_ptr) Int table_size inti IpT_Arp_Entry*entry_ptr//Find the entry in the ARP cache for a given destination IP address. table_size = op_prg_list_size (arp_cache_lptr) for (i = 0 i entry_ptr = (IpT_Arp_Entry *) op_prg_list_access (arp_cache_lptr, i) FRET (OPC_COMPCODE_FAILURE) //Match the to-be-resolved destination IP address with the entrys IP address if (ip_address_equal (dest_ip_addr, entry_ptr-ip_addr) == OPC_TRUE) *index_ptr = i FRET (OPC_COMPCODE_SUCCESS) When a new route is discovered (SUCCESS connection case), the information needs to be sent to an explicit destination (Mobile node) as specified in the Destination Address attribute. If the destination address specified is correct it generates a destination and forward the appl_packet to the MAC layer with that information.if (destination_address == OMSC_AA_AUTO_ASSIGN) curr_dest_ad dr = OMSC_AA_AUTO_ASSIGN oms_aa_dest_addr_get_core (oms_aa_handle, integer_mac_address, (int) mac_address) curr_dest_addr = integer_mac_address else //Destination Address attribute. curr_dest_addr = destination_address // Set this information in the interface control / information to be sent to the MAC layer op_ici_attr_set_int64 (wlan_mac_req_iciptr, dest_addr, curr_dest_addr)// Install the control information and send it to the MAC layer op_ici_install (wlan_mac_req_iciptr) op_pk_send (pkptr, outstrm_to_mac) send_paket = op_ici_create_fmt (appl_packet) sendID = (SPkt *) op_prg_mem_alloc ( sizeof (SPkt) ) In order to make the code modifications a simple as possible, the new path discovery was made through a simple Request-Response communication between base station and mobile node. Transmission of selected configuration parameters from the base station to the mobile node is possible by the creation of the autonomic agents and their interaction. The agents configuration is also exe cuted in the OPNET Modeller Simulation by the use of the Node Editor described in the Figure 4.9.

The Competitive Position Of A Company

The Competitive Position Of A CompanyThis statement (in the approach path referred to as The Statement) holds deuce different perspectives on the strategy opinion one based on competitive sicing and the other one based on sedulousness bodily structure and The Statement could to all appearances come from Porter. In Porters world it is the industry in which a company operates that is the foundation for the strategic analysis (reference). This is where the rules for competition ar being made something that is well documented in Porters earlier work (see box Black box reference). In his later work (efter 1980 reference) Porter is more concerned about the election needed to nominate a favorable competitive position at heart the industry. According to Porter every strategic formulation therefore needs to contain the two elements industry analysis and competitive positioning analyses (reference). My argument in this paper is that the two approaches cannot stand alone and that they ar the two sides of the same coin.Taken the word limitations of this concession into consideration, this is a short version of a huge area of strategic thinking, literature and ideas.How and why the stages of the evaluation has been undertakenI volition be evaluating The Statements through two different speculative approaches to strategy. The industry analyses (outside-in) versus the resource based view ( turned). I forget be working with the two approaches as two opposite poles in strategy thinking. In the industry analyses part I will be centreing on Porters early work (and the positioning school in the culmination referred to as P-School) and their approach to strategy thinking. On the other side I will be focusing on the resource based view (in the coming referred to as RVB). This will be done through 2 different aspects A) The two approaches fundamental hypothesis and B) The two approaches key points of criticism. Finally I will compare the two rirections and hold back the following conclusion/thesis The chief(prenominal) statement of the assignment is too simplistic. In my view its a combination of infixed and external situationors that rules the competitive position of a company. The inside-out and the outside-in approaches check much in common and for strategy development both approaches are relevant.A theoretical approach to evaluation of the statementThere have been several attempts in literature to categorize strategy perspectives or schools of thought (e.g. Mintzberg 1990 and Whittington 2001). The two schools I will be looking at here P-school and RVB school each describing one part of a the SWOT framework (Barney 1991). RVB describes the strengths and weaknesses of a company, and the industry analyses are responsible for opportunities and threats as described in Barneys view on strategic framework. In the following I will try to make the cor intercourse betwixt two key views which both are occupied with the concept of compet itive advantage through two components (Verdin Williamson, 1994) external sources and native sources.Focus on the internal sources imagination based view (Inside out)The resources based view underlines the internal capabilities of the organisation in achieving sustainable competitive advantages in the market. Studies show that there are differences in companies returns within specific industries (Werner Field Montgomery, 1988). These differences are interpreted as ca designd by the mankind of company specific differences in resources and skills. So it can be argued that it is the companies portfolio of resources and skills and the effective use of them, which determines a sustainable competitive advantage. Jay Barney is often mentioned as the author of the RVB approach (reference), simply also significant contributions have been made by authors like Wernerfelt (1984) and Gary Hamel/ C. K. Prahalad (1990). With the outlet of the book The Theory of the Growth of the Firm (Penro se 1959) Edith Penrose advocates the view that the limitation of a companys growth opportunities are primarily related to its internal resources and capabilities. Grant, another noble subscriber to the RBV, nonpluss the theses internal resources into three groups tangible, intangible and human (reference). They all have similar but still slightly different understandings of RBV, but fundamentally they argument for an inside-out view, where the competitive advantage derives from a companys resources. Studies show that there are differences in companies returns within specific industries (Werner Field Montgomery, 1988). These differences are interpreted as caused by the existence of company specific differences in resources and skills. So the main hypothesis of the RBV writers is that is its portfolio of resources and skills and the effective use of them, which is the prerequisite for achieving sustained competitive advantage (reference).Fahy, Smithee (1999) cites Hooley, Moller an d Broderick (1998) for criticising the resource-based view for its inward focus which risks ignoring the nature of market demand. Also Priem Butler (2001) made several points of critic by arguing that the role of product markets is underdeveloped in the argument, and that different resource configurations can generate the same value for firms and thus would not be competitive advantage. Priem and Butler further argue that the RBV is lacking detail and therefore being difficult to implement.The most outspoken criticism of the schools theory and method is directed against the schools one-sided emphasis on the companys resource at the expense of the market. It can be argued that this theory is too one track minded on enterprise resource being the whole factor in building competitive advantages. The resource-based only relates inward inside out, so it does not create an immediate understanding of its surroundings, or the fact that a company must act in the environment in order to be competitive.Focus on the external sources Industry PerspectivePorter is a prominent scientist in relations to the outside-in view at least his work before 1980 (reference) (which is what I will comment here). Porter and the P-School, tries explaining why some companies are more successful than other companies when they apparently are subject to the same business conditions (reference). In addition, the school has focused on answering the question What forces drive competition in an industry? (reference). In relation to The Statement Porter believes that for the individual company, the industry structure is essential for the companys strategic development and competitive position (reference). Porter identifies 5 different basic forces which determine a companys competitive position in the market a model of industry attractiveness Porters 5 Forces. The five forces is an out-side strategy tool which is used to light the main competition issues in a market and pulse how strong and important each one of them is.A critic of Porter and the P-school is linked to the fact that the choice of strategy is largely based on analytical desk work, without prior k this instantledge of real market conditions. Mintzberg writes in his book The rise and fall of strategical Planning The whole positioning school of which Porter is the leading spokesman depends to such an extent on strategic analyses, that it virtually replaces overall planning as the main activity (Mintzberg 1994273). Porters Five Forces Model has some limitations with the market and business environment we have today. One of the criticisms is that the model assumes a relatively static market structure ((Prahalad and Gary, 1990) that can only create a snapshot picture of the market situation. Porters model is based primarily on the economic situation in the 80s were characterized by strong competition and a stable market structures. Todays market is dynamic, hectic and constantly changing (Prahalad and Gary, 1990), which also affects the firms acting in these markets. Another recent limited review is made by Larry Downes (2001) who comments on Porters theory not being as important as they used to be, as new economic laws, conditions and markets have raised(a) ( globalisation, digitalisation and deregulation). Still they are valid to some extent, as long as they are used with the knowledge that they have limitations within them. Hill and Jones (1995) make further criticisms of Porters 5 forces by stating that a companys success is not certain to be successful just because it operates in an attractive industry. The positioning school are solely focused on the market conditions and their crucial role in the competitive position of a company (reference). They do not involve the internal environment in determining/improving the competitive position of a company. This is a very limited view, which is the same critique as I put on the RBV its too one-sided.Alternative nonfinancial perspect ive to Inside-Out and Outside-in approachAn alternative theoretical approach to Inside-Out and Outside-in in a nonfinancial measure could be done by looking at the contingency approach to management and strategy development. Fiedlers contingency model has the basic assumption that there is no best way of organizing or leading (Fiedler, 1964). Charles W. Hofer (1975) discusses the concept in terms of business strategy development. The contingency approach to strategy thinking underlines the importance of development a best fit between structure, strategy and environment (lrebogen side 69).Summery Not either or, but complementaryI have now looked at our statement through two perspectives to strategy thinking. In my opinion, there is no one best way. Its about finding the perfect fit between inside out and outside in focus. The industry perspective and RBV perspective in strategic analysis are two parts of the same whole. E.g. in analyzing the industry perspective, it is possible to identify elements, which lies outside the area of RBV and vice versa. To be able to navigate successfully and be successful in todays dynamic markets you have to adapt to the external environments as well as the internal resources and ideally create the perfect fit between them. So its not neither or, but a complementary of both approaches, which is also the direction Porter is giving in his later work from 1985 (Murray, A. I.390).ConclusionStrategic analysis has two rife approaches or better referred to as fractions or perspectives. Outside In which is based on Porter and the positioning schools and the inside out concept which is often referred to as RBV Barney being the central author. This papers main point is that none of them can do without the other. The fundamental difference is that inside-out looks at the strategic analysis and a company competitive ability as being based on the internal resources and capabilities of which the company has at its disposal. On the other han d, outside in whole kit and caboodle from the starting point that it is the structure of a given industry which determines the companies competitive ability. An industry analyses requires both internal and external analyses to be successful.The Statement The competitive position of a company is determined by the industry structure in which it competes. should be rephrased to The competitive position of a company is determined by the internal resources available to the company and by the industry structure in which it competes. if the statement should be fully correct.

Bridge of Montenegro :: essays research papers

When I think about my unforgettable experiences in Montenegro, there is always mavin image that reoccurs in my mind. That picture is the bridge in the river that we used to go swimming in. This bridge does not have a name, however, that does not decrease its sizeableness to the residents that live in that area. It holds various historical facts, information, and stories. Although it is too small to carry automobiles, it allows hatful to get from one city to the other without driving there. Many people in Montenegro do not have cars or any other means of transportation, so in order for them to get to their desired destination, they must draw the bridge. This bridge carried farmers cows and sheeps and take them to their pasture every morning and night. In spite of the fact that cars could not fit through, horses hauled buzz off over the bridge to nearby markets. The bridge helped people, animals, and food get to where they needed to go instead of taking the streets and risk gett ing robbed or hit. Things have compoundd since the cardinal year old bridge was built. Nowadays it is considered a historic site and diving board to tourists and the citizens. I have noticed the bridge and scenery change before my eyes through the years that I have visited it.I never would have thought it could alter the way it has. Not too broad ago, this bridge was the only means of transportation for the natives of Montenegro. When I was younger, I remember the condition of the bridge was as if it were just built. The screws were all in the right places, tightly fastened, and the admixture had barely began to chip off. After revisiting this place numerous times, I noticed some distinct transitions. Years later, I observed the transformation of the metal beginning to rust and peel off. Along with that, the nuts and bolts have slowly begun to unscrew themselves due to erosion and time. I remember climbing the surrounding cliffs that led to the bridge and the jumping off of it along with the other children. At that time, doing so was easy. The rocks were a indorsement difficult to climb, however, with the help of wearing sneakers it made it a bit easier to ascend. The bridge was built on the peak of the crag, making it accessible to all thrill seekers.

The Standardized Testing Nightmare Essay -- High-Stakes Standardized Te

As children grow up some of their frightful memories include a meet to the dentist or to the first day in elementary school. Perhaps their greatest nightmargon is standardized examen. Since starting school as first graders students are taught to test in the United States. In many cases students are placed in remedial classes or even held back because of their low grades. Many do not realize that the students with low grades are mainly students who are not good test takers, and educators start to believe that these students are low achievers. When educators do this, it leads the students to come lower self-esteem and encourages them to drop out of school later on. Students are also forced to memorize information merely as facts without sparking their creativity or enhancing their knowledge. Prior to the educational reform movement of the 1970s and 1980s, standardized tests were primarily employed as measures of student achievement that could be reported to parents, and as a m eans of noting state and district trends. (Moon and Brighton) Educators paid little attention to these tests, which had little impact on curriculum. In the continuing quest for better schools and high achieving students, testing has become a central focus of policy and practice. Standardized test are tests that attempt to present unbiased material under the same conditions and with coherent scoring and interpretation so that students have equal opportunities to give correct answers and receive an accurate assessment. The idea behind standardized testing is that these similarities allow the highest ground level of certainty in comparing results across schools, schools districts, or even the state. As the high-stakes testing becomes more popular, stan... ...ndustrial nations in the Third International Mathematics and Science Study. He reported that tests measure exposure to facts and skills not whether o (Osburn, Ritter and Suitt)r not kids can think. (Osburn, Ritter and Suitt)W orks CitedBachelor, Denessa. Are These Tests Failing? April 2006. Hearts & Minds. 2013 .Longo, Christopher. Fostering Creativity or direction to the Test? The Clearing House A Journal of Educational Stategies, Issues and Ideas (2010) 54-57.Moon, Tonya R and Catherine M Brighton. The National Research Center on the Gifted and Talented. Storrs Center, 1991.Osburn, Monica Z., et al. Parents Perceptions of Standardized exam Its Relationship and Effect on Student Achievement. 2004. University of Arkansas. 2013 .