The Experts below are selected from a list of 231 Experts worldwide ranked by ideXlab platform

Shaneel Narayan - One of the best experts on this subject based on the ideXlab platform.

  • TCP/UDP Network performance analysis of windows Operating Systems with IPv4 and IPv6
    2010 2nd International Conference on Signal Processing Systems, 2010
    Co-Authors: Shaneel Narayan, Yhi Shi
    Abstract:

    TCP/IP is the suit of protocols that is designed for Networks consisting of segments connected with routers. It also provides communication on smaller Networks. Internet Protocol (IP) version 4 is the standard for the design and interconnection of Networks today; however it has limitations that hinder its growth. The newer version of the protocol, IPv6, addresses issue that inherently are of concern in the older version, and also offers new opportunities that enrich communication experiences of users. But like any new technology, IPv6 has its associated limitations. It has 128bit packet structure and thus there are associated increased overheads. This increased overhead and its impact on host and Network Operating Systems may lead to Network performance issues. In this paper, five Windows Operating Systems are configured with the two versions of IP and empirically evaluated for performance difference. Performance related metrics like throughput, latency and round trip time are measured on a test-bed implementation. The results show that Network performance depends not only on IP version and traffic type, but also on the choice of the Operating system.

  • tcp udp Network performance analysis of windows Operating Systems with ipv4 and ipv6
    International Conference Signal Processing Systems, 2010
    Co-Authors: Shaneel Narayan
    Abstract:

    TCP/IP is the suit of protocols that is designed for Networks consisting of segments connected with routers. It also provides communication on smaller Networks. Internet Protocol (IP) version 4 is the standard for the design and interconnection of Networks today; however it has limitations that hinder its growth. The newer version of the protocol, IPv6, addresses issue that inherently are of concern in the older version, and also offers new opportunities that enrich communication experiences of users. But like any new technology, IPv6 has its associated limitations. It has 128bit packet structure and thus there are associated increased overheads. This increased overhead and its impact on host and Network Operating Systems may lead to Network performance issues. In this paper, five Windows Operating Systems are configured with the two versions of IP and empirically evaluated for performance difference. Performance related metrics like throughput, latency and round trip time are measured on a test-bed implementation. The results show that Network performance depends not only on IP version and traffic type, but also on the choice of the Operating system.

  • performance analysis of Network Operating Systems in local area Networks
    International Conference on Computer Engineering and Applications, 2008
    Co-Authors: Shaneel Narayan, Samad S Kolahi, Rick Waiariki, Madeleine Reid
    Abstract:

    In this paper, in a laboratory environment the performance of four different Operating Systems (Windows NT4, Windows 2000, Windows 2003, and Linux Fedora) are compared. The performance parameters measured are bandwidth and Network delay. Linux Fedora provided the highest bandwidth for a file server at 17.1Mbps, Windows 2000 was fastest for a FTP (83.2Mbps), and Windows 2003 and Windows 2000 gave the highest bandwidth for a web server (4.3Mbps and 4.5Mbps respectively).

Thorsten Holz - One of the best experts on this subject based on the ideXlab platform.

  • RAID - SDN Rootkits: Subverting Network Operating Systems of Software-Defined Networks
    Research in Attacks Intrusions and Defenses, 2015
    Co-Authors: Christian Ropke, Thorsten Holz
    Abstract:

    The new paradigm of Software-Defined Networking SDN enables exciting new functionality for building Networks. Its core component is the so called SDN controller also termed Network Operating system. An SDN controller is logically centralized and crucially important, thus, exploiting it can significantly harm SDN-based Networks. As recent work considers only flaws and rudimentary malicious logic inside SDN applications, we focus on rootkit techniques which enable attackers to subvert Network Operating Systems. We present two prototype implementations: a SDN rootkit for the industry's leading open source controller OpenDaylight as well as a version with basic rootkit functions for the commercial and non-OpenDaylight-based HP controller. Our SDN rootkit is capable of actively hiding itself and malicious Network programming as well as providing remote access. Since OpenDaylight intends to establish a reference framework for Network Operating Systems both open source and commercial, our work demonstrates potential threats for a wide range of Network Operating Systems.

  • sdn rootkits subverting Network Operating Systems of software defined Networks
    Recent Advances in Intrusion Detection, 2015
    Co-Authors: Christian Ropke, Thorsten Holz
    Abstract:

    The new paradigm of Software-Defined Networking SDN enables exciting new functionality for building Networks. Its core component is the so called SDN controller also termed Network Operating system. An SDN controller is logically centralized and crucially important, thus, exploiting it can significantly harm SDN-based Networks. As recent work considers only flaws and rudimentary malicious logic inside SDN applications, we focus on rootkit techniques which enable attackers to subvert Network Operating Systems. We present two prototype implementations: a SDN rootkit for the industry's leading open source controller OpenDaylight as well as a version with basic rootkit functions for the commercial and non-OpenDaylight-based HP controller. Our SDN rootkit is capable of actively hiding itself and malicious Network programming as well as providing remote access. Since OpenDaylight intends to establish a reference framework for Network Operating Systems both open source and commercial, our work demonstrates potential threats for a wide range of Network Operating Systems.

Mohamed Ali Kaafar - One of the best experts on this subject based on the ideXlab platform.

  • NCA - Gwardar: Towards Protecting a Software-Defined Network from Malicious Network Operating Systems
    2018 IEEE 17th International Symposium on Network Computing and Applications (NCA), 2019
    Co-Authors: Arash Shaghaghi, Salil S. Kanhere, Mohamed Ali Kaafar
    Abstract:

    A Software-Defined Network (SDN) controller (aka. Network Operating System or NOS) is regarded as the brain of the Network and is the single most critical element responsible to manage an SDN. Complimentary to existing solutions that aim to protect a NOS, we propose an intrusion protection system designed to protect an SDN against a controller that has been successfully compromised. Gwardar maintains a virtual replica of the data plane by intercepting the OpenFlow messages exchanged between the control and data plane. By observing the long-term flow of the packets, Gwardar learns the normal set of trajectories in the data plane for distinct packet headers. Upon detecting an unexpected packet trajectory, it starts by verifying the data plane forwarding devices by comparing the actual packet trajectories with the expected ones computed over the virtual replica. If the anomalous trajectories match the NOS instructions, Gwardar inspects the NOS itself. For this, it submits policies matching the normal set of trajectories and verifies whether the controller submits matching flow rules to the data plane and whether the Network view provided to the application plane reflects the changes. Our evaluation results prove the practicality of Gwardar with a high detection accuracy in a reasonable time-frame.

  • Gwardar: Towards Protecting a Software-Defined Network from Malicious Network Operating Systems
    2018 IEEE 17th International Symposium on Network Computing and Applications (NCA), 2018
    Co-Authors: Arash Shaghaghi, Salil S. Kanhere, Mohamed Ali Kaafar
    Abstract:

    A Software-Defined Network (SDN) controller (aka. Network Operating System or NOS) is regarded as the brain of the Network and is the single most critical element responsible to manage an SDN. Complimentary to existing solutions that aim to protect a NOS, we propose an intrusion protection system designed to protect an SDN against a controller that has been successfully compromised. Gwardar maintains a virtual replica of the data plane by intercepting the OpenFlow messages exchanged between the control and data plane. By observing the long-term flow of the packets, Gwardar learns the normal set of trajectories in the data plane for distinct packet headers. Upon detecting an unexpected packet trajectory, it starts by verifying the data plane forwarding devices by comparing the actual packet trajectories with the expected ones computed over the virtual replica. If the anomalous trajectories match the NOS instructions, Gwardar inspects the NOS itself. For this, it submits policies matching the normal set of trajectories and verifies whether the controller submits matching flow rules to the data plane and whether the Network view provided to the application plane reflects the changes. Our evaluation results prove the practicality of Gwardar with a high detection accuracy in a reasonable time-frame.

Arne Schwabe - One of the best experts on this subject based on the ideXlab platform.

  • Empowering Network Operating Systems with memory management techniques
    NOMS 2016 - 2016 IEEE IFIP Network Operations and Management Symposium, 2016
    Co-Authors: Roberto Doriguzzi-corin, Domenico Siracusa, Elio Salvador, Arne Schwabe
    Abstract:

    Similarly to computer Operating Systems which guarantee safe access to memory resources, Network Operating Systems shall grant SDN applications a reliable access to neatly organized flow table resources. This paper presents the architecture for a controller-agnostic Memory Management System and some of its functionalities that aim at improving flow table usage and preventing Network misconfigurations. From the implementation perspective, this work discusses the applicability of the proposed system, a strategy to evaluate it and current open challenges.

  • NOMS - Empowering Network Operating Systems with memory management techniques
    NOMS 2016 - 2016 IEEE IFIP Network Operations and Management Symposium, 2016
    Co-Authors: Roberto Doriguzzi-corin, Domenico Siracusa, Elio Salvador, Arne Schwabe
    Abstract:

    Similarly to computer Operating Systems which guarantee safe access to memory resources, Network Operating Systems shall grant SDN applications a reliable access to neatly organized flow table resources. This paper presents the architecture for a controller-agnostic Memory Management System and some of its functionalities that aim at improving flow table usage and preventing Network misconfigurations. From the implementation perspective, this work discusses the applicability of the proposed system, a strategy to evaluate it and current open challenges.

Seungwon Shin - One of the best experts on this subject based on the ideXlab platform.

  • Operator-Defined Reconfigurable Network OS for Software-Defined Networks
    IEEE ACM Transactions on Networking, 2019
    Co-Authors: Hyeonseong Jo, Phillip Porras, Vinod Yegneswaran, Seungwon Shin
    Abstract:

    Barista is a novel architecture that seeks to enable flexible and customizable instantiations of Network Operating Systems (NOSs) for software-defined Networks (SDNs). As the NOS is the strategic control center of an SDN, implementing logic for management of Network switches as well as higher-level applications, its design is critical to the welfare of the Network. In this paper, we focus on three aspects of composable controller design: component synthesis, dynamic event control, and predictive NOS assessment. First, the modular design of the Barista enables flexible composition of functionalities prevalent in contemporary SDN controllers. Second, its event handling mechanism enables dynamic customization of control flows in a NOS. Third, its predictive NOS assessment helps to discover the optimal composition for the requirements specified by operators. These capabilities allow Barista operators to optimally select functionalities and dynamically handle events for their Operating requirements while maximizing the resource utilization of the given system. Our results demonstrate that Barista can synthesize NOSs with many functionalities found in commodity controllers with competitive performance profiles.

  • Barista: An Event-centric NOS Composition Framework for Software-Defined Networks
    IEEE INFOCOM 2018 - IEEE Conference on Computer Communications, 2018
    Co-Authors: Hyeonseong Jo, Phillip Porras, Vinod Yegneswaran, Seungwon Shin
    Abstract:

    As the Network Operating system (NOS) is the strategic control center of a software-defined Network (SDN), its design is critical to the welfare of the Network. Contemporary research has largely focused on specialized NOSs that seek to optimize controller design across one or a few dimensions (e.g., scalability, performance, or security) due to fundamental differences in architectural trade-offs needed to support competing demands. We thus designed Barista, as a new framework that enables flexible and customizable instantiations of Network Operating Systems (NOSs) supporting diverse design choices. The Barista framework incorporates two mechanisms to harmonize architectural differences across design choices: component synthesis and dynamic event control. First, the modular design of the Barista framework enables flexible composition of functionalities prevalent in contemporary SDN controllers. Second, its event-handling mechanism enables dynamic adjustment of control flows in a NOS. These capabilities allow operators to easily enable functionalities and dynamically handle associated events, thereby satisfying Network Operating requirements. Our results demonstrate that Barista can synthesize NOSs with many functionalities found in commodity NOSs with competitive performance profiles.