The Experts below are selected from a list of 56451 Experts worldwide ranked by ideXlab platform

F. Richard Yu - One of the best experts on this subject based on the ideXlab platform.

  • A Survey on Large-Scale Software Defined Networking (Sdn) Testbeds: Approaches and Challenges
    IEEE Communications Surveys and Tutorials, 2017
    Co-Authors: Tao Huang, Jiang Liu, Jiao Zhang, F. Richard Yu, Chen Zhang, Yunjie Liu
    Abstract:

    Recently, several large-scale Software Defined Net- working (Sdn) testbeds have been designed and developed. These Sdn testbeds have spurred numerous network researchers to run their prototypes and experiments, as well as to set up novel architectures for the future Internet. Based on these efforts, Sdn testbeds are actively contributing to future network research, bringing forth the attention of both academia and industry. In addition, researchers envisage these large-scale Sdn testbeds to be the future Internet. In this paper, we present a comprehensive survey and research challenges for large-scale Sdn testbeds. We first introduce the related work and background knowledge. Then, an overview of Sdn testbeds is presented. In addition, five typical implementations of large-scale Sdn testbeds around the world are described in detail, including design objectives, key technologies, deployment, and experiments. Moreover, an in- depth comparison of Sdn testbeds is given. Finally, challenges and future works of Sdn testbeds are discussed.

  • Software-defined networking (Sdn) and distributed denial of service (DDOS) attacks in cloud computing environments: A survey, some research issues, and challenges
    IEEE Communications Surveys and Tutorials, 2016
    Co-Authors: Qiao Yan, Qingxiang Gong, F. Richard Yu, Jianqiang Li
    Abstract:

    Distributed denial of service (DDoS) attacks in cloud computing environments are growing due to the essential characteristics of cloud computing. With recent advances in software-defined networking (Sdn), Sdn-based cloud brings us new chances to defeat DDoS attacks in cloud computing environments. Nevertheless, there is a contradictory relationship between Sdn and DDoS attacks. On one hand, the capabilities of Sdn, including software-based traffic analysis, centralized control, global view of the network, dynamic updating of forwarding rules, make it easier to detect and react to DDoS attacks. On the other hand, the security of Sdn itself remains to be addressed, and potential DDoS vulnerabilities exist across Sdn platforms. In this paper, we discuss the new trends and characteristics of DDoS attacks in cloud computing, and provide a comprehensive survey of defense mechanisms against DDoS attacks using Sdn. In addition, we review the studies about launching DDoS attacks on Sdn, as well as the methods against DDoS attacks in Sdn. To the best of our knowledge, the contradictory relationship between Sdn and DDoS attacks has not been well addressed in previous works. This work can help to understand how to make full use of Sdn's advantages to defeat DDoS attacks in cloud computing environments and how to prevent Sdn itself from becoming a victim of DDoS attacks, which are important for the smooth evolution of Sdn-based cloud without the distraction of DDoS attacks.

  • Distributed denial of service attacks in software-defined networking with cloud computing
    IEEE Communications Magazine, 2015
    Co-Authors: Qiao Yan, F. Richard Yu
    Abstract:

    Although software-defined networking (Sdn) brings numerous benefits by decoupling the control plane from the data plane, there is a contradictory relationship between Sdn and distributed denial-of-service (DDoS) attacks. On one hand, the capabilities of Sdn make it easy to detect and to react to DDoS attacks. On the other hand, the separation of the control plane from the data plane of Sdn introduces new attacks. Consequently, Sdn itself may be a target of DDoS attacks. In this paper, we first discuss the new trends and characteristics of DDoS attacks in cloud computing environments. We show that Sdn brings us a new chance to defeat DDoS attacks in cloud computing environments, and we summarize good features of Sdn in defeating DDoS attacks. Then we review the studies about launching DDoS attacks on Sdn and the methods against DDoS attacks in Sdn. In addition, we discuss a number of challenges that need to be addressed to mitigate DDoS attached in Sdn with cloud computing. This work can help understand how to make full use of Sdn's advantages to defeat DDoS attacks in cloud computing environments and how to prevent Sdn itself from becoming a victim of DDoS attacks.

Wolfgang Kellerer - One of the best experts on this subject based on the ideXlab platform.

  • A Compass Through Sdn Networks
    2020
    Co-Authors: Thomas Zinner, Michael Jarschel, Tobias Hossfeld, Phuoc Tran-gia, Wolfgang Kellerer
    Abstract:

    The term Software Defined Networking (Sdn) is prevalent in todays discussion about future communication networks. However, no consistent definition regarding this technology has formed, yet. The fragmented view on Sdn results in legacy products being passed off by equipment vendors as Sdn, academics mixing up the attributes of Sdn with those of network virtualization, and users not fully understanding the benefits. Therefore,establishing Sdn as a widely adopted technology beyond laboratories and insular deployments requires a compass to navigate the multitude of ideas and concepts that make up Sdn today. The contribution of this research report is twofold. First, it gives a thoroug definition of Sdn and its interfaces and a list of its key attributes. Second, it provides a mapping of interfaces and attributes to Sdn use cases and highlights their relevance on a per-scenario basis. Thus, this report guides a potential adopter of Sdn, whether Sdn is in fact the right technology for his arbitrary use case.

  • Control Plane Latency with Sdn Network Hypervisors: The Cost of Virtualization
    IEEE Transactions on Network and Service Management, 2016
    Co-Authors: Andreas Blenk, Johannes Zerwas, Arsany Basta, Martin Reisslein, Wolfgang Kellerer
    Abstract:

    Sdn network hypervisors provide the functionalities needed for virtualizing software-defined networks. Hypervisors sit logically between the multiple virtual Sdn networks (vSdns), which reside on the underlying physical Sdn network infrastruc- ture, and the corresponding tenant (vSdn) controllers. Different Sdn network hypervisor architectures have mainly been explored through proof-of-concept implementations. We fundamentally advance Sdn network hypervisor research by conducting a model-based analysis of Sdn hypervisor architectures. Specifi- cally, we introduce mixed integer programming formulations for four different Sdn network hypervisor architectures. Our model formulations can also optimize the placement of multi-controller switches in virtualized OpenFlow-enabled Sdn networks. We employ our models to quantitatively examine the optimal place- ment of the hypervisor instances. We compare the control plane latencies of the different Sdn hypervisor architectures and quantify the cost of virtualization, i.e., the latency overhead due to virtualizing Sdn networks via hypervisors. For generalization, we quantify how the hypervisor architectures behave for different network topologies. Our model formulations and the insights drawn from our evaluations inform network operators about the trade-offs of the different hypervisor architectures and help choosing an architecture according to operator demands. Index

  • Survey on network virtualization hypervisors for software defined networking
    IEEE Communications Surveys and Tutorials, 2016
    Co-Authors: Andreas Blenk, Arsany Basta, Martin Reisslein, Wolfgang Kellerer
    Abstract:

    Software defined networking (Sdn) has emerged as a promising paradigm for making the control of communication networks flexible. Sdn separates the data packet forwarding plane, i.e., the data plane, from the control plane and employs a central controller. Network virtualization allows the flexible sharing of physical networking resources by multiple users (tenants). Each tenant runs its own applications over its virtual network, i.e., its slice of the actual physical network. The virtualization of Sdn networks promises to allow networks to leverage the combined benefits of Sdn networking and network virtualization and has therefore attracted significant research attention in recent years. A critical component for virtualizing Sdn networks is an Sdn hypervisor that abstracts the underlying physical Sdn network into multiple logically isolated virtual Sdn networks (vSdns), each with its own controller. We comprehensively survey hypervisors for Sdn networks in this article. We categorize the Sdn hypervisors according to their architecture into centralized and distributed hypervisors. We furthermore sub-classify the hypervisors according to their execution platform into hypervisors running exclusively on general-purpose compute platforms, or on a combination of general-purpose compute platforms with general- or special-purpose network elements. We exhaustively compare the network attribute abstraction and isolation features of the existing Sdn hypervisors. As part of the future research agenda, we outline the development of a performance evaluation framework for Sdn hypervisors.

  • Interfaces, attributes, and use cases: A compass for Sdn
    IEEE Communications Magazine, 2014
    Co-Authors: Michael Jarschel, Phuoc Tran-gia, Tobias Hossfeld, Thomas Zinner, Wolfgang Kellerer
    Abstract:

    The term Software Defined Networking (Sdn) is prevalent in today's discussion about future communication networks. As with any new term or paradigm, however, no consistent definition regarding this technology has formed. The fragmented view on Sdn results in legacy products being passed off by equipment vendors as Sdn, academics mixing up the attributes of Sdn with those of network virtualization, and users not fully understanding the benefits. Therefore, establishing Sdn as a widely adopted technology beyond laboratories and insular deployments requires a compass to navigate the multitude of ideas and concepts that make up Sdn today. The contribution of this article represents an important step toward such an instrument. It gives a thorough definition of Sdn and its interfaces as well as a list of its key attributes. Furthermore, a mapping of interfaces and attributes to Sdn use cases is provided, highlighting the relevance of the interfaces and attributes for each scenario. This compass gives guidance to a potential adopter of Sdn on whether Sdn is in fact the right technology for a specific use case.

Qiao Yan - One of the best experts on this subject based on the ideXlab platform.

  • Software-defined networking (Sdn) and distributed denial of service (DDOS) attacks in cloud computing environments: A survey, some research issues, and challenges
    IEEE Communications Surveys and Tutorials, 2016
    Co-Authors: Qiao Yan, Qingxiang Gong, F. Richard Yu, Jianqiang Li
    Abstract:

    Distributed denial of service (DDoS) attacks in cloud computing environments are growing due to the essential characteristics of cloud computing. With recent advances in software-defined networking (Sdn), Sdn-based cloud brings us new chances to defeat DDoS attacks in cloud computing environments. Nevertheless, there is a contradictory relationship between Sdn and DDoS attacks. On one hand, the capabilities of Sdn, including software-based traffic analysis, centralized control, global view of the network, dynamic updating of forwarding rules, make it easier to detect and react to DDoS attacks. On the other hand, the security of Sdn itself remains to be addressed, and potential DDoS vulnerabilities exist across Sdn platforms. In this paper, we discuss the new trends and characteristics of DDoS attacks in cloud computing, and provide a comprehensive survey of defense mechanisms against DDoS attacks using Sdn. In addition, we review the studies about launching DDoS attacks on Sdn, as well as the methods against DDoS attacks in Sdn. To the best of our knowledge, the contradictory relationship between Sdn and DDoS attacks has not been well addressed in previous works. This work can help to understand how to make full use of Sdn's advantages to defeat DDoS attacks in cloud computing environments and how to prevent Sdn itself from becoming a victim of DDoS attacks, which are important for the smooth evolution of Sdn-based cloud without the distraction of DDoS attacks.

  • Distributed denial of service attacks in software-defined networking with cloud computing
    IEEE Communications Magazine, 2015
    Co-Authors: Qiao Yan, F. Richard Yu
    Abstract:

    Although software-defined networking (Sdn) brings numerous benefits by decoupling the control plane from the data plane, there is a contradictory relationship between Sdn and distributed denial-of-service (DDoS) attacks. On one hand, the capabilities of Sdn make it easy to detect and to react to DDoS attacks. On the other hand, the separation of the control plane from the data plane of Sdn introduces new attacks. Consequently, Sdn itself may be a target of DDoS attacks. In this paper, we first discuss the new trends and characteristics of DDoS attacks in cloud computing environments. We show that Sdn brings us a new chance to defeat DDoS attacks in cloud computing environments, and we summarize good features of Sdn in defeating DDoS attacks. Then we review the studies about launching DDoS attacks on Sdn and the methods against DDoS attacks in Sdn. In addition, we discuss a number of challenges that need to be addressed to mitigate DDoS attached in Sdn with cloud computing. This work can help understand how to make full use of Sdn's advantages to defeat DDoS attacks in cloud computing environments and how to prevent Sdn itself from becoming a victim of DDoS attacks.

Sergio Palazzo - One of the best experts on this subject based on the ideXlab platform.

  • INFOCOM - Sdn-WISE: Design, prototyping and experimentation of a stateful Sdn solution for WIreless SEnsor networks
    2015 IEEE Conference on Computer Communications (INFOCOM), 2015
    Co-Authors: Laura Galluccio, Sebastiano Milardo, Giacomo Morabito, Sergio Palazzo
    Abstract:

    In this paper Sdn-WISE, a Software Defined Networking (Sdn) solution for WIreless SEnsor networks, is introduced. Differently from the existing Sdn solutions for wireless sensor networks, Sdn-WISE is stateful and pursues two objectives: (i) to reduce the amount of information exchanged between sensor nodes and the Sdn network controller, and (ii) to make sensor nodes programmable as finite state machines so enabling them to run operations that cannot be supported by stateless solutions. A detailed description of Sdn-WISE is provided in this paper. Sdn-WISE offers APIs that allow software developers to implement the Sdn Controller using the programming language they prefer. This represents a major advantage of Sdn-WISE as compared to existing solutions because it increases flexibility and simplicity in network programming. A prototype of Sdn-WISE has been implemented and is described in this paper. Such implementation contains the modules that allow a real Sdn Controller to manage an OMNeT++ simulated network. Finally, the paper illustrates the results obtained through an experimental testbed which has been developed to evaluate the performance of Sdn-WISE in several operating conditions.

  • Sdn wise design prototyping and experimentation of a stateful Sdn solution for wireless sensor networks
    International Conference on Computer Communications, 2015
    Co-Authors: Laura Galluccio, Sebastiano Milardo, Giacomo Morabito, Sergio Palazzo
    Abstract:

    In this paper Sdn-WISE, a Software Defined Networking (Sdn) solution for WIreless SEnsor networks, is introduced. Differently from the existing Sdn solutions for wireless sensor networks, Sdn-WISE is stateful and pursues two objectives: (i) to reduce the amount of information exchanged between sensor nodes and the Sdn network controller, and (ii) to make sensor nodes programmable as finite state machines so enabling them to run operations that cannot be supported by stateless solutions. A detailed description of Sdn-WISE is provided in this paper. Sdn-WISE offers APIs that allow software developers to implement the Sdn Controller using the programming language they prefer. This represents a major advantage of Sdn-WISE as compared to existing solutions because it increases flexibility and simplicity in network programming. A prototype of Sdn-WISE has been implemented and is described in this paper. Such implementation contains the modules that allow a real Sdn Controller to manage an OMNeT++ simulated network. Finally, the paper illustrates the results obtained through an experimental testbed which has been developed to evaluate the performance of Sdn-WISE in several operating conditions.

  • Sdn-WISE: Design, prototyping and experimentation of a stateful Sdn solution for WIreless SEnsor networks
    2015 IEEE Conference on Computer Communications (INFOCOM), 2015
    Co-Authors: Laura Galluccio, Sebastiano Milardo, Giacomo Morabito, Sergio Palazzo
    Abstract:

    In this paper Sdn-WISE, a software defined networking (Sdn) solution for wireless sensor networks, is introduced. Differently from the existing Sdn solutions for wireless sensor networks, Sdn-WISE is stateful and pursues two objectives: (i) to reduce the amount of information exchanged between sensor nodes and the Sdn network controller, and (ii) to make sensor nodes programmable as finite state machines so enabling them to run operations that cannot be supported by stateless solutions. A detailed description of Sdn-WISE is provided in this paper. Sdn-WISE offers APIs that allow software developers to implement the Sdn Controller using the programming language they prefer. This represents a major advantage of Sdn-WISE as compared to existing solutions because it increases flexibility and simplicity in network programming. A prototype of Sdn-WISE has been implemented and is described in this paper. Such implementation contains the modules that allow a real Sdn Controller to manage an OMNeT++ simulated network. Finally, the paper illustrates the results obtained through an experimental testbed which has been developed to evaluate the performance of Sdn-WISE in several operating conditions.

Martin Reisslein - One of the best experts on this subject based on the ideXlab platform.

  • Transport Sdn at the dawn of the 5G era
    Optical Switching and Networking, 2019
    Co-Authors: Guido Maier, Martin Reisslein
    Abstract:

    Abstract This editorial introduces the topic area of this special issue, namely the area of Software Defined Networking (Sdn) controlled optical transport networks, i.e., so-called transport Sdn (T-Sdn) networks, that support emerging fifth generation (5G) wireless networks. We first outline the Sdn concept and the main challenges and potential benefits of Sdn control in optical transport networks. We then introduce the articles of this special issue, which we have categorized into articles addressing: (i) T-Sdn control plane architectures, (ii) T-Sdn provisioning and restoration, and (iii) control of specific transport technologies in T-Sdns. We conclude this editorial with a broad outline of future research directions related to T-Sdns supporting 5G networks.

  • Hybrid Sdn Networks: A Survey of Existing Approaches
    IEEE Communications Surveys & Tutorials, 2018
    Co-Authors: Rashid Amin, Martin Reisslein, Nadir Shah
    Abstract:

    Software defined networking (Sdn) decouples the control plane from the data plane of forwarding devices. This separation provides several benefits, including the simplification of network management and control. However, due to a variety of reasons, such as budget constraints and fear of downtime, many organizations are reluctant to fully deploy Sdn. Partially deploying Sdn through the placement of a limited number of Sdn devices among legacy (traditional) network devices, forms a so called hybrid Sdn network. While hybrid Sdn networks provide many of the benefits of Sdn and have a wide range of applications, they also pose several challenges. These challenges have recently been addressed in a growing body of literature on hybrid Sdn network structures and protocols. This paper presents a comprehensive up-to-date survey of the research and development in the field of hybrid Sdn networks. We have organized the survey into five main categories, namely hybrid Sdn network deployment strategies, controllers for hybrid Sdn networks, protocols for hybrid Sdn network management, traffic engineering mechanisms for hybrid Sdn networks, as well as testing, verification, and security mechanisms for hybrid Sdn networks. We thoroughly survey the existing hybrid Sdn network studies according to this taxonomy and identify gaps and limitations in the existing body of research. Based on the outcomes of the existing research studies as well as the identified gaps and limitations, we derive guidelines for future research on hybrid Sdn networks.

  • Survey on network virtualization hypervisors for software defined networking
    IEEE Communications Surveys and Tutorials, 2016
    Co-Authors: Andreas Blenk, Arsany Basta, Martin Reisslein, Wolfgang Kellerer
    Abstract:

    Software defined networking (Sdn) has emerged as a promising paradigm for making the control of communication networks flexible. Sdn separates the data packet forwarding plane, i.e., the data plane, from the control plane and employs a central controller. Network virtualization allows the flexible sharing of physical networking resources by multiple users (tenants). Each tenant runs its own applications over its virtual network, i.e., its slice of the actual physical network. The virtualization of Sdn networks promises to allow networks to leverage the combined benefits of Sdn networking and network virtualization and has therefore attracted significant research attention in recent years. A critical component for virtualizing Sdn networks is an Sdn hypervisor that abstracts the underlying physical Sdn network into multiple logically isolated virtual Sdn networks (vSdns), each with its own controller. We comprehensively survey hypervisors for Sdn networks in this article. We categorize the Sdn hypervisors according to their architecture into centralized and distributed hypervisors. We furthermore sub-classify the hypervisors according to their execution platform into hypervisors running exclusively on general-purpose compute platforms, or on a combination of general-purpose compute platforms with general- or special-purpose network elements. We exhaustively compare the network attribute abstraction and isolation features of the existing Sdn hypervisors. As part of the future research agenda, we outline the development of a performance evaluation framework for Sdn hypervisors.

  • Control Plane Latency with Sdn Network Hypervisors: The Cost of Virtualization
    IEEE Transactions on Network and Service Management, 2016
    Co-Authors: Andreas Blenk, Johannes Zerwas, Arsany Basta, Martin Reisslein, Wolfgang Kellerer
    Abstract:

    Sdn network hypervisors provide the functionalities needed for virtualizing software-defined networks. Hypervisors sit logically between the multiple virtual Sdn networks (vSdns), which reside on the underlying physical Sdn network infrastruc- ture, and the corresponding tenant (vSdn) controllers. Different Sdn network hypervisor architectures have mainly been explored through proof-of-concept implementations. We fundamentally advance Sdn network hypervisor research by conducting a model-based analysis of Sdn hypervisor architectures. Specifi- cally, we introduce mixed integer programming formulations for four different Sdn network hypervisor architectures. Our model formulations can also optimize the placement of multi-controller switches in virtualized OpenFlow-enabled Sdn networks. We employ our models to quantitatively examine the optimal place- ment of the hypervisor instances. We compare the control plane latencies of the different Sdn hypervisor architectures and quantify the cost of virtualization, i.e., the latency overhead due to virtualizing Sdn networks via hypervisors. For generalization, we quantify how the hypervisor architectures behave for different network topologies. Our model formulations and the insights drawn from our evaluations inform network operators about the trade-offs of the different hypervisor architectures and help choosing an architecture according to operator demands. Index