面向移动网络环境的智能协同蜜网设计与性能分析

在移动网络环境下,因各移动蜜罐资源有限、攻击注入手段灵活多变,需要动态部署蜜网以协同地检测攻击行为特征。然而现有蜜网易遭受特征识别攻击、网内恶意流量肆意传播、不能跨蜜罐迁移连接。为此,基于软件定义网络（software defined networking,SDN）技术,设计了一种智能协同蜜网（intelligent and collaborative Honeynet,ic-Honeynet）系统。它由逆向连接代理模块和蜜网控制器组成,它的优势在于逐一克服了上述3个缺陷。最后,搭建了一个ic-Honeynet实验环境,并验证了该系统的有效性。实验结果表明：该系统吞吐量近乎线速,高达8.23 Gbit/s;响应时延额外增加很小,仅在0.5～1.2 ms区间变化;连接处理能力也很强,可高达1 473个连接/s。     

Exploiting the control power of SDN during the transition from IP to SDN networks

The emerging software‐defined networking (SDN) paradigm introduces new opportunities to improve network performance due to the flexibility and programmability provided by a logically centralized element named controller. However, a rapid adoption of the full SDN architecture is difficult in the short term due to economic and technical reasons. This paper faces the SDN nodes replacement problem during the transition from traditional IP networks to fully deployed SDN networks. Six different replacement methods are proposed to select the most appropriate set of traditional IP nodes to be upgraded to SDN‐enabled switches at a particular transition stage. To show the effectiveness of the proposed methods, they have been applied on an optimization problem currently studied by the research community: the power consumption problem. An integer linear programming formulation is presented to solve it and a genetic algorithm is evaluated through simulations on realistic network topologies. Results highlight that energy‐efficiency in hybrid IP/SDN networks can be significantly improved by only replacing a reduced number of IP nodes.     

An efficient in‐network caching decision algorithm for Internet of things

Recently, content‐centric networking (CCN) has become one of the important technologies for enabling the future networks. Along with its recognized potentialities as a content retrieval and dissemination solution, CCN has been also recently considered as a promising architecture for the Internet of things (IoT), because of 2 main features such as named‐based routing and in‐network caching. However, IoT is characterized by challenging features: small storage capacity of resource‐constrained devices due to cost and limitation of energy and especially transient data that impose stringent requirements on the information freshness. As a consequence, the intrinsic caching mechanisms existing in CCN approach do not well suit IoT domains; hence, providing a specific caching policy at intermediate nodes is a very challenging task. This paper proposes an effective multiattribute in‐network caching decision algorithm that performs a caching strategy in CCN‐IoT network by considering a set of crucial attributes including the content store size, hop count, particularly key temporal properties like data freshness, and the node energy level. Simulation results proved that our proposed approach outperforms 2 cache management schemes (probabilistic least recently used and AlwaysCache–first in first out in terms of improving total hit rate, reducing data retrieval delay, and enhancing content reusability in IoT environment).     

Joint server and network optimization toward load‐balanced service chaining

Prior service chaining systems address server and network load balancing issues individually, which may not ensure efficient system performance. To this end, in this paper, we study the design, implementation, complexity analysis, and evaluation of Nearest First and Local‐Global Transformation algorithm, which jointly supports server and network load balancing for chaining virtualized network functions (VNFs) in data center environment. The algorithm firstly constructs service chains by a greedy strategy, which both considers server and network latency. Then a searching technique, which replaces a selected VNF with another candidate and swaps the order of VNFs in service chains, is applied to improve the solutions. We have implemented the algorithm using Software‐defined networking and OpenFlow concepts. The numerical results indicate that, compared with a sequential approach, Nearest First and Local‐Global Transformation increases the system bandwidth utilization up to 45%. The results also show that it is worth applying the second phase of our algorithm since it considerably enhances the system performance by 20%.     

SDN/NFV发展中的关键:编排器的发展与挑战

网络功能虚拟化(NFV)和软件定义网络(SDN)已被业界普遍认定为下一代电信网络发展的主要方向,编排器作为未来网络的“大脑”,成为运营商灵活管理网络、最大化发挥新技术优势的关键.首先阐述了编排器在下一代网络中的核心地位,并对编排器的技术架构进行介绍.而后从标准化和开源的角度对编排器产业发展情况进行介绍和分析.最后阐述了编排器产业发展中标准与开源的关系,编排器与网管运营支撑系统(OSS)的融合、编排器对SDN的支持以及依托编排器实现网络自动化智能化运营的理念.     

面向SDN的数据中心网络更新研究综述

近年来,由于软件定义网络(SDN)的控制平面与数据平面分离、集中式控制的特点,被广泛应用于数据中心网络(DCN).分四个部分对DCN更新的相关研究进行了综述.首先,介绍了DCN和SDN的基本概念及研究现状;随后,详细说明了传统DCN在更新方面遇到的缺陷;其次,重点讨论了基于SDN的数据中心网络(SD-DCN)更新场景的研究现状与存在的不足,同时指出了一些方案存在的缺点;最后,对基于SDN的数据中心网络未来研究方向进行了展望,以期为SD-DCN的研究与应用提供一定的参考.     

Using SPDY to improve Web 2.0 over satellite links

During the last decade, the Web has grown in terms of complexity, while the evolution of the HTTP (Hypertext Transfer Protocol) has not experienced the same trend. Even if HTTP 1.1 adds improvements like persistent connections and request pipelining, they are not decisive, especially in modern mixed wireless/wired networks, often including satellites. The latter play a key role for accessing the Internet everywhere, and they are one of the preferred methods to provide connectivity in rural areas or for disaster relief operations. However, they suffer of high‐latency and packet losses, which degrade the browsing experience. Consequently, the investigation of protocols mitigating the limitations of HTTP, also in challenging scenarios, is crucial both for the industry and the academia. In this perspective, SPDY, which is a protocol optimized for the access to Web 2.0 contents over fixed and mobile devices, could be suitable also for satellite links. Therefore, this paper evaluates its performance when used both in real and emulated satellite scenarios. Results indicate the effectiveness of SPDY if compared with HTTP, but at the price of a more fragile behavior when in the presence of errors. Besides, SPDY can also reduce the transport overhead experienced by middleboxes typically deployed by service providers using satellite links. Copyright © 2016 John Wiley & Sons, Ltd.     

A tree‐based algorithm for virtual infrastructure allocation with joint virtual machine and network requirements

Cloud providers have introduced the on‐demand provisioning of virtual infrastructures (VIs) to deliver virtual networks of computing resources as a service. By combining network and computing virtualization, providers allow traffic isolation between hosted VIs. Taking advantage of this opportunity, tenants have deployed private VIs with application‐optimized network topologies to increase quality of experience of final users. One of the main open challenges in this scenario is the allocation of physical resources to host VIs in accordance with quality of service computing (eg, virtual CPUs and memory) and network requirements (guaranteed bandwidth and specific network topology). Moreover, a VI can be allocated anywhere atop a network datacenter, and because of its NP‐hard complexity, the search for optimal solutions has a limited applicability in cloud providers as requesting users seek an immediate response. The present work proposes an algorithm to accomplish the VI allocation by applying tree‐based heuristics to reduce the search space, performing a joint allocation of computing and network resources. So as to accomplish this goal, the mechanism includes a strategy to convert physical and virtual graphs to trees, which later are pruned by a grouped accounting algorithm. These innovations reduce the number of comparisons required to allocate a VI. Experimental results indicate that the proposed algorithm finds an allocation on feasible time for different cloud scenarios and VI topologies, while maintaining a high acceptance rate and a moderate physical infrastructure fragmentation.     

面向密集部署的超高吞吐率Wi-Fi融合应用技术

为了降低网络密集部署对超高吞吐率( VHT) Wi-Fi性能的影响,提出了VHT Wi-Fi基于软件定义网络( SDN)的网络架构、无线网络侧虚拟化和增强型认证与快速切换技术,以提高系统的共存性、抗干扰性和安全性。实验结果表明,VHT Wi-Fi与SDN、网络功能虚拟化、伽罗瓦/计数模式协议结合,吞吐率性能获得约10%的提升,在保证安全性同时平均切换时延降低至40 ms,可保障VHT Wi-Fi在密集部署网络中发挥重要作用。