Design of a software-defined resilient virtualized networking environment

Li, Xuan; Edwards, Sarah; Riga, Niky; Medhi, Deep

doi:10.1109/drcn.2015.7148999

Cited by 3 publications

(2 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This will help potential users to decide which image to use. Experiments can also be conducted under different environments [5,16,[28][29][30]41,42,46,53,54,56,57] along with other approaches [14,15,32,[34][35][36][37][38][39][40]44,45,48,51,52]. Moreover, presentation tools like attack graph [10,12,17,47,49,50,55] can be used to visualize risks from software dependencies.…”

Section: Future Workmentioning

confidence: 99%

Assessing Attack Surface with Component-Based Package Dependency

Zhang

et al. 2015

Network and System Security

View full text Add to dashboard Cite

Package dependency has been considered in many vulnerability assessment systems. However, existing approaches are either coarse-grained and do not accurately reveal the influence and severity of vulnerabilities, or do not provide comprehensive (both incoming and outgoing) analysis of attack surface through package dependency. We propose a systematic approach of measuring attack surface exposed by individual vulnerabilities through component level dependency analysis. The metric could potentially extended to calculate attack surfaces at component, package, and system levels. It could also be used to calculate both incoming and outgoing attack surfaces, which enables system administrators to accurately evaluate how much risk that a vulnerability, a component or a package to the complete system, and the risk that is injected to a component or package by packages it depends on in a given system. To our best knowledge, our approach is the first to quantitatively assess attack surfaces of vulnerabilities, components, packages, and systems through component level dependency.

show abstract

Section: Future Workmentioning

confidence: 99%

Assessing Attack Surface with Component-Based Package Dependency

Zhang

et al. 2015

Network and System Security

View full text Add to dashboard Cite

show abstract

“…1.5.4 Design of a Software-Defined Resilient VNE on GENI [66] For this phase, by collaborating with Sarah Edwards and Niky Riga from GENI Project Office at Raytheon BBN Technologies, we designed a software-defined resilient VNE on the GENI testbed. As we introduced in Section 1.2.3, GENI provides a largescale distributed heterogenous VNE, and we are able to create a layer-3 virtual networks by creating tunnels and virtual routers.…”

Section: An Experimental Study On Gpeni-vinimentioning

confidence: 99%

Dynamic virtual network restoration with optimal standby virtual router selection

Medhi

2016

NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium

Self Cite

View full text Add to dashboard Cite

Network virtualization technologies allow service providers to request partitioned, QoS guaranteed and fault-tolerant virtual networks provisioned by the substrate network provider (i.e., physical infrastructure provider). A virtualized networking environment (VNE) has common features such as partition, flexibility, etc., but fault-tolerance requires additional efforts to provide survivability against failures on either virtual networks or the substrate network.Two common survivability paradigms are protection (proactive) and restoration (reactive). In the protection scheme, the substrate network provider (SNP) allocates redundant resources (e.g., nodes, paths, bandwidths, etc) to protect against potential failures in the VNE. In the restoration scheme, the SNP dynamically allocates resources to restore the networks, and it usually occurs after the failure is detected.iii In this dissertation, we design a restoration scheme that can be dynamically implemented in a centralized manner by an SNP to achieve survivability against node failures in the VNE. The proposed restoration scheme is designed to be integrated with a protection scheme, where the SNP allocates spare virtual routers (VRs) as standbys for the virtual networks (VN) and they are ready to serve in the restoration scheme after a node failure has been identified. These standby virtual routers (S-VR) are reserved as a sharedbackup for any single node failure, and during the restoration procedure, one of the S-VR will be selected to replace the failed VR. In this work, we present an optimal S-VR selection approach to simultaneously restore multiple VNs affected by failed VRs, where these VRs may be affected by failures within themselves or at their substrate host (i.e., power outage, hardware failures, maintenance, etc.). Furthermore, the restoration scheme is embedded into a dynamic reconfiguration scheme (DRS), so that the affected VNs can be dynamically restored by a centralized virtual network manager (VNM).We first introduce a dynamic reconfiguration scheme (DRS) against node failures in a VNE, and then present an experimental study by implementing this DRS over a realistic VNE using GpENI testbed. For this experimental study, we ran the DRS to restore one VN with a single-VR failure, and the results showed that with a proper S-VR selection, the performance of the affected VN could be well restored. Next, we proposed an Mixed-Integer Linear Programming (MILP) model with dual-goals to optimally select S-VRs to restore all VNs affected by VR failures while load balancing. We also present a iv heuristic algorithm based on the model. By considering a number of factors, we present numerical studies to show how the optimal selection is affected. The results show that the proposed heuristic's performance is close to the optimization model when there were sufficient standby virtual routers for each virtual network and the substrate nodes have the capability to support multiple standby virtual routers to be in service simultaneously.Finally, we presen...

show abstract

Optimally Selecting Standby Virtual Routers for Node Failures in a Virtual Network Environment

Liu

Medhi

2017

IEEE Trans. Netw. Serv. Manage.

View full text Add to dashboard Cite

Design of a software-defined resilient virtualized networking environment

Cited by 3 publications

References 11 publications

Assessing Attack Surface with Component-Based Package Dependency

Assessing Attack Surface with Component-Based Package Dependency

Dynamic virtual network restoration with optimal standby virtual router selection

Optimally Selecting Standby Virtual Routers for Node Failures in a Virtual Network Environment

Contact Info

Product

Resources

About