The identification and mitigation of DDos cyberattacks using technologies such as SDN and artificial intelligence has been studied in recent years, obtaining satisfactory and promising results by training machine learning or deep learning models that act as an IDS that is deployed on the controller. This research group has been working on it in recent years, creating a framework for security automation in an SDN network that allows the identification and mitigation of DDoS attacks. However, one of the big challenges that all AI-based IDS face is scalability, due to the overload experienced by the controller, when analyzing a large number of flows. The proposed solution for scalability in SDN attack detection is to avoid the controller having to capture the data streams, extract the features to send to the IDS, instead the switches will extract the features from the data streams directly using P4 and will send them directly to the IDS for validation, avoiding driver overload.
The objective of this research is to improve the scalability of the current framework, by mitigating DDoS attacks in the data plane through the use of IA and P4, in this way scalability could be improved for complex architectures with a high volume of traffic.
The use of software-defined networks is currently global, since they are present in the administration of large networks as well as in the creation of dynamic WANs with SD-WAN solutions, with which the benefit and impact of the research results they will be very large since their coverage is not only in our Latin American region but throughout the world, coupled with this the increase in cyberattacks globally makes a solution that helps reduce the number of DDoS attacks not only very useful but highly desirable because of the great impact it will have.
The project seeks the design, discussion and implementation of a digital literacy curriculum for young people from 13 to 20 years of age with an intercultural and gender approach.
It arises from the identification of needs and the evaluation of a critical context for education in Bolivia. According to a recent report prepared by UNICEF and the World Bank, due to the impacts of the pandemic, Latin America could go back 10 years in learning levels, with a 12% reduction in the future income of school-age generations, and the observation of greater difficulties in entering higher education and the labor market. The Bolivian educational system is among the most affected, with one of the highest rates of school closures in the region in the period of health measures due to COVID-19.
Likewise, it seeks to influence the design of an inclusion and digital talent program with an intercultural and gender approach for the population aged 13 to 35 that can be promoted and implemented by the Ministry of Education, municipalities, universities and civil society in Bolivia. . This program will be the result of joint work with these entities in three specific actions: The survey of quantitative and qualitative information on the levels of penetration and skills of digital technologies in urban, rural and indigenous municipalities; the elaboration of a standard for digital literacy and talent that can be applied by different state, educational and civil society entities. Lastly, the organization of multisectoral work groups and discussions for the socialization, validation and appropriation of the generated instruments.
The project seeks to develop a tool -online and automated- to guide and accompany the processes of appeal against censorship or content removal (takedown) by the large online platforms. This tool will provide step-by-step information for making the appeal on the main platforms, but fundamentally accompanying the steps with contextual information and strategic suggestions to increase the chances of success of the claims.
Throughout this process, the system records the characteristics of the appeal, and the user will be asked to share the claim number provided by the platform to monitor the process. This will allow monitoring and collection of data on complaints, including types, countries, etc. This monitoring extends to the results, through automated emails sent to users after specified periods, to request information on the results of the appeal.
Access to general data on complaints will allow research on them, but also identify significant issues and cases. This monitoring will also allow the selection of emblematic cases to which OBSERVACOM can provide personalized support with experts and lawyers, prioritizing those involving the media, journalists and their associations, as well as activists, social organizations and human rights defenders.
The main objective of the project is to use the advantages of the Internet to promote and enhance the development of productive activities carried out, mainly, by women and/or members of native peoples in rural areas with high vulnerability and limited or no access to electricity. in the Province of Mendoza, Argentina.
In the implementation of this project, towers, solar kits and Internet nodes will be installed at two strategic points in the rural area of Mendoza where there is currently no internet access and where there is a lack of electricity and/or it is unstable (Parajes de Lavalle, Malargüe and/or Santa Rosa), a situation that hinders, limits and/or deprives its use. From internet access, it is intended to automate different processes that facilitate daily productive work, have more information for decision making and make more efficient use of water resources (a scarce resource in the Province of Mendoza), in short ; improve the production process of small economic units, prioritizing those that involve women and/or members of native peoples in their process (both groups present in the areas identified for possible intervention).
This project faces the challenges of serving the digitally excluded population due to the precariousness or lack of connectivity supporting ISPs. It then considers the implementation of a broadband mobile network, with 4G LTE technology using free software, filling the accessibility gap in terms of the cost of accessing the connection. The main participants in this project are ISPs that already have a fiber optic backbone or high-speed radio communication to serve small villages, farms and remote areas with up to 1,000 (one thousand) users.
Internet access will be provided in the form of private networks. Access will be through an infrastructure (core and radio access network) and simcards for cell phone use, and also for the use of agricultural machinery on farms. The architecture considers elements of a 4G network with EPC (Evolved Packet Core), RAN (Radio Access Network) and is prepared for Edge Computing resources. The EPC solution consists of a network platform located at the ISP’s headquarters with local monitoring, high availability power supply and redundant connectivity. The software will be installed on a robust server operating in an air-conditioned environment with at least 8 GB of RAM, Intel celeron.
The Peru IX – Cusco and Chiclayo project seeks to decentralize the Internet in Peru, creating Neutral Interconnection Points in the cities of Cusco and Chiclayo, with which local and regional operators will be able to peer directly with each other, and with CDNs. The project consists of the development of the local infrastructure in said cities, as well as local personnel who provide support and spread knowledge in the local operators so that they begin to use BGP, obtain their own ASN and IP prefixes in LACNIC.
Currently, almost all ISPs in the cities of Cusco and Chiclayo face a paradigm of low bandwidth and high latency, since all content and traffic exchange with other networks takes place in Lima. Furthermore, bandwidth in these cities is priced at several dollars per Mbps, which causes these ISPs to offer very low speeds to the inhabitants of these areas, and in many cases users experience packet loss and high latency due to to the saturation of the WAN links of these providers.
The project seeks to change the paradigm by bringing abundance of bandwidth and low latency to content and access to other local networks by creating an ecosystem of local interconnection in these cities.
This also makes it possible to have an interconnection infrastructure with sub-millisecond latency for the new applications that are being developed and that will allow these cities to be on par with the capital in terms of access to interconnections.
This project seeks to achieve a systematic approach to internal BGP (iBGP) mesh design within an Autonomous System (AS). These meshes are an integral part of the operation of any large-scale network on the Internet. A good iBGP design within an AS is essential to take optimal advantage of the available paths.
The general objective of the project is to apply a systematic approach to the analysis of BGP traces to different reference cases, using the techniques previously developed, and incorporating other approaches, based on accessibility and distance to the different Autonomous Systems that make up the Internet, which today exceeds 70,000, and propose a methodology for Internet operators to optimize their networks. The project will seek a theoretical foundation for this behavior and connections with other existing lines of research.
The main impact of the proposal is to support the design of regional transit networks with methodological tools, derived from formal models.
Indeed, the methodology and set of tools developed makes available to operators optimized results that do not depend on acquiring infrastructure and/or additional and proprietary software, but on a methodologically assisted design to make the best use of standardized technology and ensure better access to the Internet by users in the region.
The general objective of the project is to analyze the properties of blockchain and its specific application in the assignment and delegation of resources of the Internet infrastructure, as well as in the security of external BGP routing against Route Hijacking or similar attacks.
To carry out a route hijacking attack, no vulnerability or protocol flaw is exploited, but rather the fact that the BGP architecture is based on mutual trust is exploited. For this reason, these attacks are as old as the protocol itself, and today these failures continue to occur and the best strategy to provide routing security on the Internet continues to be investigated.
Current solutions such as RPKI are generating risks due to the centralization of critical information in the RIRs promoted by current management models. This work seeks to implement a model with a tamper-proof decentralized infrastructure (based on blockchain), where thanks to the deployment of a decentralized application (intelligent contract) it is possible to provide security in the allocation of Internet resources, and the subsequent use of that stored information to provide security to the BGP protocol.
With the aim of providing a new approach to identity management, which gives device owners greater control over their assets and strengthens a zero-trust network, Instituto Atlântico proposes Janus, a project that consists of developing a framework that allows issuing and managing Blockchain decentralized identities (DIDs) for devices and users of Internet of Things [IoT] solutions in a universal and interoperable way on Zero Trust Network Access (ZTNA) architectures and easy to integrate with different IoT device management platforms such as AWS IoT Core, IBM Watson IoT, Fiware and others. Initially in this project, they will be integrated with the Brazilian open source platform for IoT solutions; the Dojot.
DIDs enable a standards-based, globally interoperable identity system that puts IoT device owners out of control. DIDs allow the creation of multiple identifiers to help manage anonymity, auditability, correlation between contexts, privacy, revocability, and traceability. A decentralized ID management system eliminates the need for any central government authority and paves the way for new models of trust between organizations and people, as it is based on the blockchain network, cryptography, and the Zero-Knowledge Proof Protocol ( ZKP). All this provides more transparency, improves communication and saves costs.
Janus intends to provide a framework that enables the development of a cracked access with authentication and authorization mechanism, allowing device donations to define access rules for users and devices, including data access and sharing, while ensuring confidentiality. of the data. users who can trade on IoT networks, in addition to protecting them from other types of attacks such as DDoS attacks.
The goal of the project is to reduce the digital divide in vulnerable areas of the city of Córdoba with little or no Internet access, using LTE base stations operating on unlicensed frequency bands for point-to-multipoint links. Thus, it seeks to enable access to the various services available online, including education, health, public services, and access to the Digital Neighbor (VeCi) and Digital Citizen (CIDI) platforms.
The project format allows its replication in different municipalities, as well as in other provinces. Its main focus is to reduce the digital divide. In this sense, any jurisdiction can develop a similar project adapted the characteristics of each city (example: by identifying its own citizen participation centers). The proposed technology only requires electricity for CPEs as it is uses LTE, can reach several places in just a few days, and can be adapted to different modalities and, therefore, to different geographical locations.