The Experts below are selected from a list of 1650 Experts worldwide ranked by ideXlab platform
Li Xiao - One of the best experts on this subject based on the ideXlab platform.
-
ILBO: Balance Inbound Traffic Dynamically in Multihomed Stub Networks
IEEE Transactions on Parallel and Distributed Systems, 2010Co-Authors: Xiaomei Liu, Li XiaoAbstract:Multihoming load balancing improves network performance and makes better use of network resource by leveraging the Traffic among the access links in a multihomed network. Currently, no effective load balancing system is available to handle the Inbound Traffic in a multihomed stub network, where the Traffic volume is unknown to the network and the route of the Traffic is hard to control. In this paper, we propose ILBO, an Inbound Traffic load balancing mechanism to effectively balance the Inbound Traffic in a multihomed stub network. ILBO predicts and schedules the Inbound Traffic based on outbound Traffic. It adopts a two-step Traffic predictor to increase the prediction accuracy and also provides an Inbound Traffic control scheme that can guarantee the successful execution of the Traffic scheduling. We have evaluated the effectiveness of ILBO in a trace driven simulation with real world Traffic traces collected from multihomed stub networks.
-
Inbound Traffic load balancing in bgp multi homed stub networks
International Conference on Distributed Computing Systems, 2008Co-Authors: Xiaomei Liu, Li XiaoAbstract:Multihoming load balancing improves network performance by leveraging the Traffic among the access links in a multi-homed network. Currently, no effective load balancing system is available to handle the Inbound Traffic in a BGP multi-homed stub network, where the Traffic volume is unknown to the network and the route of the Traffic is hard to control. In this paper, we propose ILBO, an Inbound Traffic load balancing mechanism to effectively balance the Inbound Traffic in a BGP multi-homed stub network. ILBO predicts and schedules the Inbound Traffic based on outbound Traffic. It also provides an Inbound Traffic control scheme that can guarantee the successful execution of the Traffic scheduling.
-
ICDCS - Inbound Traffic Load Balancing in BGP Multi-homed Stub Networks
2008 The 28th International Conference on Distributed Computing Systems, 2008Co-Authors: Xiaomei Liu, Li XiaoAbstract:Multihoming load balancing improves network performance by leveraging the Traffic among the access links in a multi-homed network. Currently, no effective load balancing system is available to handle the Inbound Traffic in a BGP multi-homed stub network, where the Traffic volume is unknown to the network and the route of the Traffic is hard to control. In this paper, we propose ILBO, an Inbound Traffic load balancing mechanism to effectively balance the Inbound Traffic in a BGP multi-homed stub network. ILBO predicts and schedules the Inbound Traffic based on outbound Traffic. It also provides an Inbound Traffic control scheme that can guarantee the successful execution of the Traffic scheduling.
Xiaomei Liu - One of the best experts on this subject based on the ideXlab platform.
-
ILBO: Balance Inbound Traffic Dynamically in Multihomed Stub Networks
IEEE Transactions on Parallel and Distributed Systems, 2010Co-Authors: Xiaomei Liu, Li XiaoAbstract:Multihoming load balancing improves network performance and makes better use of network resource by leveraging the Traffic among the access links in a multihomed network. Currently, no effective load balancing system is available to handle the Inbound Traffic in a multihomed stub network, where the Traffic volume is unknown to the network and the route of the Traffic is hard to control. In this paper, we propose ILBO, an Inbound Traffic load balancing mechanism to effectively balance the Inbound Traffic in a multihomed stub network. ILBO predicts and schedules the Inbound Traffic based on outbound Traffic. It adopts a two-step Traffic predictor to increase the prediction accuracy and also provides an Inbound Traffic control scheme that can guarantee the successful execution of the Traffic scheduling. We have evaluated the effectiveness of ILBO in a trace driven simulation with real world Traffic traces collected from multihomed stub networks.
-
Inbound Traffic load balancing in bgp multi homed stub networks
International Conference on Distributed Computing Systems, 2008Co-Authors: Xiaomei Liu, Li XiaoAbstract:Multihoming load balancing improves network performance by leveraging the Traffic among the access links in a multi-homed network. Currently, no effective load balancing system is available to handle the Inbound Traffic in a BGP multi-homed stub network, where the Traffic volume is unknown to the network and the route of the Traffic is hard to control. In this paper, we propose ILBO, an Inbound Traffic load balancing mechanism to effectively balance the Inbound Traffic in a BGP multi-homed stub network. ILBO predicts and schedules the Inbound Traffic based on outbound Traffic. It also provides an Inbound Traffic control scheme that can guarantee the successful execution of the Traffic scheduling.
-
ICDCS - Inbound Traffic Load Balancing in BGP Multi-homed Stub Networks
2008 The 28th International Conference on Distributed Computing Systems, 2008Co-Authors: Xiaomei Liu, Li XiaoAbstract:Multihoming load balancing improves network performance by leveraging the Traffic among the access links in a multi-homed network. Currently, no effective load balancing system is available to handle the Inbound Traffic in a BGP multi-homed stub network, where the Traffic volume is unknown to the network and the route of the Traffic is hard to control. In this paper, we propose ILBO, an Inbound Traffic load balancing mechanism to effectively balance the Inbound Traffic in a BGP multi-homed stub network. ILBO predicts and schedules the Inbound Traffic based on outbound Traffic. It also provides an Inbound Traffic control scheme that can guarantee the successful execution of the Traffic scheduling.
Andrzej Duda - One of the best experts on this subject based on the ideXlab platform.
-
Inferring the Deployment of Inbound Source Address Validation Using DNS Resolvers
2020Co-Authors: Maciej Korczynski, Yevheniya Nosyk, Qasim Lone, Marcin Skwarek, Baptiste Jonglez, Andrzej DudaAbstract:This paper reports on the first Internet-wide active measurement study to enumerate networks not filtering incoming packets based on their source address. Our method identifies closed and open DNS resolvers handling requests from the outside of the network with the source address in the prefix of the tested network. The study gives the most complete picture of the Inbound Source Address Validation deployment at network providers: 32,673 IPv4 ASes and 197,641 IPv4 BGP prefixes are vulnerable to spoofing of Inbound Traffic.
-
ANRW - Inferring the Deployment of Inbound Source Address Validation Using DNS Resolvers
Proceedings of the Applied Networking Research Workshop on ZZZ, 2020Co-Authors: Maciej Korczynski, Yevheniya Nosyk, Qasim Lone, Marcin Skwarek, Baptiste Jonglez, Andrzej DudaAbstract:This paper reports on the first Internet-wide active measurement study to enumerate networks not filtering incoming packets based on their source address. Our method identifies closed and open DNS resolvers handling requests from the outside of the network with the source address in the prefix of the tested network. The study gives the most complete picture of the Inbound Source Address Validation deployment at network providers: 32,673 IPv4 ASes and 197,641 IPv4 BGP prefixes are vulnerable to spoofing of Inbound Traffic.
-
The Closed Resolver Project: Measuring the Deployment of Source Address Validation of Inbound Traffic.
arXiv: Networking and Internet Architecture, 2020Co-Authors: Maciej Korczynski, Yevheniya Nosyk, Qasim Lone, Marcin Skwarek, Baptiste Jonglez, Andrzej DudaAbstract:Source Address Validation (SAV) is a standard aimed at discarding packets with spoofed source IP addresses. The absence of SAV for outgoing Traffic has been known as a root cause of Distributed Denial-of-Service (DDoS) attacks and received widespread attention. While less obvious, the absence of Inbound filtering enables an attacker to appear as an internal host of a network and may reveal valuable information about the network infrastructure. Inbound IP spoofing may amplify other attack vectors such as DNS cache poisoning or the recently discovered NXNSAttack. In this paper, we present the preliminary results of the Closed Resolver Project that aims at mitigating the problem of Inbound IP spoofing. We perform the first Internet-wide active measurement study to enumerate networks that filter or do not filter incoming packets by their source address, for both the IPv4 and IPv6 address spaces. To achieve this, we identify closed and open DNS resolvers that accept spoofed requests coming from the outside of their network. The proposed method provides the most complete picture of Inbound SAV deployment by network providers. Our measurements cover over 55 % IPv4 and 27 % IPv6 Autonomous Systems (AS) and reveal that the great majority of them are fully or partially vulnerable to Inbound spoofing. By identifying dual-stacked DNS resolvers, we additionally show that Inbound filtering is less often deployed for IPv6 than it is for IPv4. Overall, we discover 13.9 K IPv6 open resolvers that can be exploited for amplification DDoS attacks - 13 times more than previous work. Furthermore, we enumerate uncover 4.25 M IPv4 and 103 K IPv6 vulnerable closed resolvers that could only be detected thanks to our spoofing technique, and that pose a significant threat when combined with the NXNSAttack.
-
PAM - Don't Forget to Lock the Front Door! Inferring the Deployment of Source Address Validation of Inbound Traffic
Passive and Active Measurement, 2020Co-Authors: Maciej Korczynski, Yevheniya Nosyk, Qasim Lone, Marcin Skwarek, Baptiste Jonglez, Andrzej DudaAbstract:This paper concerns the problem of the absence of ingress filtering at the network edge, one of the main causes of important network security issues. Numerous network operators do not deploy the best current practice—Source Address Validation (SAV) that aims at mitigating these issues. We perform the first Internet-wide active measurement study to enumerate networks not filtering incoming packets by their source address. The measurement method consists of identifying closed and open DNS resolvers handling requests coming from the outside of the network with the source address from the range assigned inside the network under the test. The proposed method provides the most complete picture of the Inbound SAV deployment state at network providers. We reveal that 32 673 Autonomous Systems (ASes) and 197 641 Border Gateway Protocol (BGP) prefixes are vulnerable to spoofing of Inbound Traffic. Finally, using the data from the Spoofer project and performing an open resolver scan, we compare the filtering policies in both directions.
Lazaros Merakos - One of the best experts on this subject based on the ideXlab platform.
-
Implications of proactive datagram caching on TCP performance in wireless/mobile communications
Computer Communications, 2003Co-Authors: S. Papayiannis, Stathes Hadjiefthymiades, Lazaros MerakosAbstract:The operation of TCP in wireless-mobile environments is discussed in this paper. After briefly presenting previous efforts to ameliorate TCP performance in the considered environments, we propose a new mechanism for tackling the slow-down problems caused by handovers. Our mechanism is based on stochastic datagram relocation. Traffic destined to the mobile terminal is tunneled to and cached into adjacent cells according to the output of a path prediction algorithm. To reduce the associated overhead, only percentages of Inbound Traffic are copied to the cell's neighborhood on the basis of estimated probabilities. The time scheduling for datagram relocation is also taken into account. Simulations of the proposed architecture show substantial performance improvements for TCP Traffic.
-
Using path prediction to improve TCP performance in wireless/mobile communications
IEEE Communications Magazine, 2002Co-Authors: Stathes Hadjiefthymiades, S. Papayiannis, Lazaros MerakosAbstract:The operation of TCP in wireless mobile environments is discussed. After presenting previous efforts to ameliorate TCP performance in the considered environments, we propose a new mechanism for tackling the transmission slowdown problems caused by handovers. Our proposal is based on stochastic datagram relocation. Traffic destined to the mobile terminal is tunneled to and cached into adjacent cells according to the output of a path prediction algorithm. To reduce the associated overhead, only percentages of Inbound Traffic are copied to the cell's neighborhood on the basis of estimated probabilities. The time scheduling for datagram relocation is also taken into account. Simulations of the proposed architecture show substantial performance improvements for TCP Traffic.
-
LCN - TCP performance enhancement in wireless/mobile communications
Proceedings LCN 2001. 26th Annual IEEE Conference on Local Computer Networks, 1Co-Authors: Stathes Hadjiefthymiades, S. Papayiannis, Lazaros MerakosAbstract:The operation of TCP in wireless/mobile environments is considered. After briefly presenting previous efforts to ameliorate TCP performance in the considered environments, we propose a new mechanism for tackling the problems caused by handovers. Our mechanism is based on stochastic datagram relocation. Traffic destined to the mobile terminal is tunneled to adjacent cells according to the output of a path prediction algorithm. To reduce the associated overhead, only percentages of Inbound Traffic are copied to the cell's neighborhood on the basis of estimated probabilities. Through simulations, we have measured the effects that stochastic datagram relocation has on TCP dynamics.
-
ICC - Handover support for TCP connections through path prediction
2002 IEEE International Conference on Communications. Conference Proceedings. ICC 2002 (Cat. No.02CH37333), 1Co-Authors: S. Papayiannis, Stathes Hadjiefthymiades, Lazaros MerakosAbstract:The operation of TCP in wireless-mobile environments is discussed. After briefly presenting previous efforts to ameliorate TCP performance in the considered environments, we propose a new mechanism for tackling the slowdown problems caused by handovers. Our mechanism is based on stochastic datagram relocation. Traffic destined to the mobile terminal is tunneled to and cached into adjacent cells according to the output of a path prediction algorithm. To reduce the associated overhead, only percentages of Inbound Traffic are copied to the cell's neighborhood on the basis of estimated probabilities. The time scheduling for datagram relocation is also taken into account. Simulations of the proposed architecture show substantial performance improvements for TCP Traffic.
Stefano Pio Zingaro - One of the best experts on this subject based on the ideXlab platform.
-
COORDINATION - No More, No Less - A Formal Model for Serverless Computing
Lecture Notes in Computer Science, 2019Co-Authors: Maurizio Gabbrielli, Saverio Giallorenzo, Ivan Lanese, Fabrizio Montesi, Marco Peressotti, Stefano Pio ZingaroAbstract:Serverless computing, also known as Functions-as-a-Service, is a recent paradigm aimed at simplifying the programming of cloud applications. The idea is that developers design applications in terms of functions, which are then deployed on a cloud infrastructure. The infrastructure takes care of executing the functions whenever requested by remote clients, dealing automatically with distribution and scaling with respect to Inbound Traffic.
-
No more, no less - A formal model for serverless computing
arXiv: Programming Languages, 2019Co-Authors: Maurizio Gabbrielli, Saverio Giallorenzo, Ivan Lanese, Fabrizio Montesi, Marco Peressotti, Stefano Pio ZingaroAbstract:Serverless computing, also known as Functions-as-a-Service, is a recent paradigm aimed at simplifying the programming of cloud applications. The idea is that developers design applications in terms of functions, which are then deployed on a cloud infrastructure. The infrastructure takes care of executing the functions whenever requested by remote clients, dealing automatically with distribution and scaling with respect to Inbound Traffic. While vendors already support a variety of programming languages for serverless computing (e.g. Go, Java, Javascript, Python), as far as we know there is no reference model yet to formally reason on this paradigm. In this paper, we propose the first formal programming model for serverless computing, which combines ideas from both the $\lambda$-calculus (for functions) and the $\pi$-calculus (for communication). To illustrate our proposal, we model a real-world serverless system. Thanks to our model, we are also able to capture and pinpoint the limitations of current vendor technologies, proposing possible amendments.
