The Ninja architecture for robust Internet-scale systems and services

Gribble, Steven D.; Welsh, Matt; Behren, Rob von; Brewer, Eric; Culler, David; Borisov, Nikita; Czerwinski, Steven E.; Gummadi, Ramakrishna; Hill, Jason; Joseph, Anthony D.; Katz, Randy H.; Mao, Z. Morley; Ross, Steven J.; Zhao, Ben Y.; Holte, Robert C.

doi:10.1016/s1389-1286(00)00179-1

Cited by 224 publications

(92 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…End-hosts employ other forms of adaptations to ensure scalability [8], [9], [10], [11], [12], [13], [14], [15]. Load balancing is just another form of an adaptation policy that could be exploited using RoQ attacks.…”

Section: Load Balancing and Profiling As Targets Of Roq Exploitsmentioning

confidence: 99%

Reduction of quality (RoQ) attacks on internet end-systems

Guirguis

Bestavros

Matta

et al.

Proceedings IEEE 24th Annual Joint Conference of the IEEE Computer and Communications Societies.

View full text Add to dashboard Cite

Abstract-Current computing systems depend on adaptation mechanisms to ensure that they remain in quiescent operating regions. These regions are often defined using efficiency, fairness, and stability properties. To that end, traditional research works in scalable server architectures and protocols have focused on promoting these properties by proposing even more sophisticated adaptation mechanisms, without the proper attention to security implications. In this paper, we exemplify such security implications by exposing the vulnerabilities of admission control mechanisms that are widely deployed in Internet end systems to Reduction of Quality (RoQ) attacks. RoQ attacks target the transients of a system's adaptive behavior as opposed to its limited steady-state capacity. We show that a well orchestrated RoQ attack on an end-system admission control policy could introduce significant inefficiencies that could potentially deprive an Internet end-system from much of its capacity, or significantly reduce its service quality, while evading detection by consuming an unsuspicious, small fraction of that system's hijacked capacity. We develop a control theoretic model for assessing the impact of RoQ attacks on an end-system's admission controller. We quantify the damage inflicted by an attacker through deriving appropriate metrics. We validate our findings through real Internet experiments performed in our lab.

show abstract

Section: Load Balancing and Profiling As Targets Of Roq Exploitsmentioning

confidence: 99%

Reduction of quality (RoQ) attacks on internet end-systems

Guirguis

Bestavros

Matta

et al.

Proceedings IEEE 24th Annual Joint Conference of the IEEE Computer and Communications Societies.

View full text Add to dashboard Cite

show abstract

“…Scout OS [8] defines a path abstraction to navigate through the layers of the network stack and the Ninja project [7] utilizes a path abstraction as a way to compose multiple services distributed on the Internet into a single logical unit. Our work is inspired by the use of paths in these various contexts.…”

Section: Related Workmentioning

confidence: 99%

RF2ID: A Reliable Middleware Framework for RFID Deployment

Ahmed

Kumar

French

et al. 2007

2007 IEEE International Parallel and Distributed Processing Symposium

View full text Add to dashboard Cite

show abstract

“…Finally, a Ninja [21] "base" provides an execution environment that automatically scales service functionality for both performance and fault tolerance. The base requires services to be programmed to a specialized event-based model, and distributes services across a cluster of workstations.…”

Section: Isolated Execution Environmentsmentioning

confidence: 99%

Java active extensions: Scalable middleware for performance-isolated remote execution

Newhouse

Pasquale

2005

Computer Communications

View full text Add to dashboard Cite

We present the design and implementation of a highly scalable and easily deployed middleware system that provides performance-isolated execution environments for client and server application functionality. The Java Active Extensions system allows clients or servers to "extend" their operation by hosting portions of their codes, called extensions, at network vantage points for improved performance and reliability, and by providing them with qualities of service in the form of rate-based resource reservations. This is especially useful for wireless resource-limited clients, which can remotely locate filters, caches, monitors, buffers, etc., to act on their behalf and improve interactions with servers. Servers also benefit by moving some of their services close to their clients (e.g., those near a common base station) to reduce latency and improve bandwidth. In both cases, the client's or server's extended functionality executes with a specified fraction of the (remote) system's processor. The system design is based on a scalable distributed architecture that allows for incremental hardware growth, and is highly deployable as it runs entirely at user level, including its rate-based scheduling system.

show abstract

The Ninja architecture for robust Internet-scale systems and services

Cited by 224 publications

References 18 publications

Reduction of quality (RoQ) attacks on internet end-systems

Reduction of quality (RoQ) attacks on internet end-systems

RF2ID: A Reliable Middleware Framework for RFID Deployment

Java active extensions: Scalable middleware for performance-isolated remote execution

Contact Info

Product

Resources

About