2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN)最新文献

A Deployable Containerized 5G Core Solution for Time Critical Communication in Smart Grid 面向智能电网时间关键通信的可部署容器化5G核心解决方案

2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN) Pub Date : 2020-02-01 DOI: 10.1109/ICIN48450.2020.9059397

Van-Giang Nguyen, Karl-Johan Grinnemo, J. Taheri, A. Brunström

引用次数: 8

Hurdles for a DRAM-based Match-Action Table 基于内存的匹配-动作表的障碍

2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN) Pub Date : 2020-02-01 DOI: 10.1109/ICIN48450.2020.9059360

C. Beckmann, Ramkumar Krishnamoorthy, Han Wang, A. Lam, Changhoon Kim

引用次数: 3

Towards a performance management architecture for large-scale distributed systems using RINA 基于RINA的大规模分布式系统性能管理体系结构研究

2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN) Pub Date : 2020-02-01 DOI: 10.1109/ICIN48450.2020.9059516

P. Thompson, N. Davies

引用次数: 1

RINA 2020 Program

2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN) Pub Date : 2020-02-01 DOI: 10.1109/icin48450.2020.9059393

引用次数: 0

Double Mask: An Efficient Rule Encoding for Software Defined Networking 双掩码:一种有效的软件定义网络规则编码

2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN) Pub Date : 2020-02-01 DOI: 10.1109/ICIN48450.2020.9059433

Ahmad Abboud, Abdelkader Lahmadi, M. Rusinowitch, Miguel Couceiro, Adel Bouhoulal, Mondher Avadi

{"title":"Double Mask: An Efficient Rule Encoding for Software Defined Networking","authors":"Ahmad Abboud, Abdelkader Lahmadi, M. Rusinowitch, Miguel Couceiro, Adel Bouhoulal, Mondher Avadi","doi":"10.1109/ICIN48450.2020.9059433","DOIUrl":"https://doi.org/10.1109/ICIN48450.2020.9059433","url":null,"abstract":"Packet filtering is widely used in multiple networking appliances and applications, in particular, to block malicious traffic (protect network infrastructures through firewalls and intrusion detection systems) and to be deployed on routers, switches and load balancers for packet classification. This mechanism relies on the packet's header fields to filter such traffic by using range rules of IP addresses or ports. However, the set of packet filters has to handle a growing number of connected nodes and many of them are compromised and used as sources of attacks. For instance, IP filter sets available in blacklists may reach several millions of entries, and may require large memory space for their storage in filtering appliances. In this paper, we propose a new method based on a double mask IP prefix representation together with a linear transformation algorithm to build a minimized set of range rules. This representation makes the network more secure, reliable and easy to maintain and configure. We define formally the double mask representation over range rules. We show empirically that the proposed method achieves an average compression ratio of 18% on a real-life dataset and up to 74% on synthetic range rule sets. Finally, we evaluate the performance of our double masks representation through an OpenFlow based implementation with an SDN testbed using real hardware. Our results show that our technique is capable of significantly reducing the matching time in the controller when compression ratios are higher than 15% leading to a faster response time, and a good balance between matching time and memory space in the switch.","PeriodicalId":433278,"journal":{"name":"2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN)","volume":"50 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124337581","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

Cache-Property-Aware Features for DNS Tunneling Detection 用于DNS隧道检测的缓存属性感知特性

2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN) Pub Date : 2020-02-01 DOI: 10.1109/ICIN48450.2020.9059472

Naotake Ishikura, Daishi Kondo, I. Iordanov, Vassilis Vassiliades, H. Tode

引用次数: 7

P4Knocking: Offloading host-based firewall functionalities to the network p4knocks:将基于主机的防火墙功能卸载到网络中

2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN) Pub Date : 2020-02-01 DOI: 10.1109/ICIN48450.2020.9059298

Eder Ollora Zaballa, David Franco, Zifan Zhou, M. Berger

{"title":"P4Knocking: Offloading host-based firewall functionalities to the network","authors":"Eder Ollora Zaballa, David Franco, Zifan Zhou, M. Berger","doi":"10.1109/ICIN48450.2020.9059298","DOIUrl":"https://doi.org/10.1109/ICIN48450.2020.9059298","url":null,"abstract":"The introduction of Software-Defined Networks (SDN) and the evolution towards programmable data planes bring the opportunity to offload several functions to the data plane. In this context, the P4 programming language opens the door to the customization of data planes. It can provide packet processing functionalities that can be applied to improve network security among other areas. This paper presents P4Knocking, a P4-based port knocking implementation that can externally open ports that appear to be closed. The goal of bringing port knocking capabilities to the network is to seamlessly deploy firewall functions in the data plane, reliving hosts from dealing with unintended traffic. Our work presents a total of four implementations that involve data and control planes in different degrees. In this case, P4Knocking can provide a more transparent and efficient way to deploy the port knocking service compared to a host-based port knocking implementation. In fact, it requires no specific purpose externs apart from registers, hence its higher portability and flexibility with local or remote control planes.","PeriodicalId":433278,"journal":{"name":"2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN)","volume":"104 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124828688","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 20

A Lightweight Policy-aware Broker for Multi-domain Network Slice Composition 面向多域网络片组合的轻量级策略感知代理

2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN) Pub Date : 2020-02-01 DOI: 10.1109/ICIN48450.2020.9059366

Xuan-Thuy Dang, F. Sivrikaya

{"title":"A Lightweight Policy-aware Broker for Multi-domain Network Slice Composition","authors":"Xuan-Thuy Dang, F. Sivrikaya","doi":"10.1109/ICIN48450.2020.9059366","DOIUrl":"https://doi.org/10.1109/ICIN48450.2020.9059366","url":null,"abstract":"Network virtualization technologies allow 5G and beyond mobile networks to support new vertical applications of various service types. Network slicing (NS) further provides a concept for multi-tenant access to common network infrastructure spreading from core and transport to radio access networks. Nevertheless, the management and orchestration of network slices across multiple infrastructure and administrative domains have only recently gained attention. In this work, we first present a reference architecture for NS management and its brokering layer that enables NS discovery and dynamic composition. We detail the designs of the main NS brokering components, i.e., NS information model and NS request handling, which address some unique challenges of multi-domain NS brokering. Our approach combines machine learning and logic reasoning for the selection of NSs based on their functional, non-functional attributes and other policy constraints. Finally, we validate the NS request matching approach and observe a high prediction accuracy. We conclude the work with a discussion on possible improvement to the NS matching approach and its extension for cross-domain NS management.","PeriodicalId":433278,"journal":{"name":"2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN)","volume":"1996 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127322237","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Cloud2HDD: Large-Scale HDD Data Analysis on Cloud for Cloud Datacenters Cloud2HDD:面向云数据中心的大规模云硬盘数据分析

2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN) Pub Date : 2020-02-01 DOI: 10.1109/ICIN48450.2020.9059482

E. Zeydan, Suayb S. Arslan

{"title":"Cloud2HDD: Large-Scale HDD Data Analysis on Cloud for Cloud Datacenters","authors":"E. Zeydan, Suayb S. Arslan","doi":"10.1109/ICIN48450.2020.9059482","DOIUrl":"https://doi.org/10.1109/ICIN48450.2020.9059482","url":null,"abstract":"The main focus of this paper is to develop a distributed large scale data analysis platform for the open-source data of Backblaze cloud datacenter which consists of operational hard disk drive (HDD) information collected over an observable period of 2272 days (over 74 months). To carefully analyze the intrinsic characteristics of the hard disk behavior, we have exploited a large bolume of data and the benefits of Hadoop ecosystem as our big data processing engine. In other words, we have utilized a special distributed scheme on cloud for cloud HDD data, which is termed as Cloud2HDD. To classify the remaining lifetime of hard disk drives based on health indicators such as in-built S.M.A.R.T (Self-Monitoring, Analysis, and Reporting Technology) features, we used some of the state-of-the-art classification algorithms and compared their accuracy, precision, and recall rates simultaneously. In addition, importance of various S.M.A.R.T. features in predicting the true remaining lifetime of HDDs are identified. For instance, our analysis results indicate that Random Forest Classifier (RFC) can yield up to 94% accuracy with the highest precision and recall at a reasonable time by classifying the remaining lifetime of drives into one of three different classes, namely critical, high and low ideal states in comparison to other classification approaches based on a specific subset of S.M.A.R.T. features.","PeriodicalId":433278,"journal":{"name":"2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN)","volume":"5 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130969312","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

Data Consistency in the 5G Specification 5G规范中的数据一致性

2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN) Pub Date : 2020-02-01 DOI: 10.1109/ICIN48450.2020.9059408

Jonathan Sid-Otmane, Sofiane Imadali, F. Martelli, M. Shapiro

引用次数: 0