DOCSDN: Dynamic and Optimal Configuration of Software-Defined Networks

DOCSDN: Dynamic and Optimal Configuration of Software-Defined Networks
复制标题

DOCSDN:软件定义网络的动态优化配置

DOI:
10.1007/978-3-030-21548-4_25
复制
发表时间:
2019
期刊:
Information Security and Privacy. ACISP 2019
影响因子:
--
通讯作者:
Michel, Laurent
Michel, Laurent
中科院分区:
--
文献类型:
--
作者:
Curry, Timothy;Callahan, Devon;Fuller, Benjamin;Michel, Laurent

文献摘要

参考文献

被引文献

相似文献

网络的设计考虑了功能、安全性、性能和成本。存在用于检查或优化网络的各个属性的工具。这些属性可能会发生冲突,因此不可能总是连续运行这些工具来找到满足所有要求的配置。这将导致网络管理员手动搜索配置。在本文中,我们介绍了一个分层的框架,优化网络配置的功能和安全要求。我们的框架能够输出满足可达性、带宽和风险要求的配置。我们的框架的每一层都优化了一个属性。一个较低的层可以约束搜索问题的一个较高的层,使框架收敛到一个联合solution. We的方法有最大的承诺,软件定义的网络,可以很容易地重新配置其逻辑配置。我们的方法进行了验证与实验上的胖树拓扑结构,这是常用的数据中心网络。在实验中,搜索在1-5分钟之间终止。因此,我们的解决方案可以为短期事件提出新的配置,例如防御集中的网络攻击。
Networks are designed with functionality, security, performance, and cost in mind. Tools exist to check or optimize individual properties of a network. These properties may conflict, so it is not always possible to run these tools in series to find a configuration that meets all requirements. This leads to network administrators manually searching for a configuration.This need not be the case. In this paper, we introduce a layered framework for optimizing network configuration for functional and security requirements. Our framework is able to output configurations that meet reachability, bandwidth, and risk requirements. Each layer of our framework optimizes over a single property. A lower layer can constrain the search problem of a higher layer allowing the framework to converge on a joint solution.Our approach has the most promise for software-defined networks which can easily reconfigure their logical configuration. Our approach is validated with experiments over the fat tree topology, which is commonly used in data center networks. Search terminates in between 1–5 min in experiments. Thus, our solution can propose new configurations for short term events such as defending against a focused network attack.
通过约束编程进行配置管理
DOI: --
发表时间: 1992
期刊: International Workshop on Configurable Distributed Systems
影响因子: --
作者:
Terry Coatta;G. Neufeld
通讯作者: G. Neufeld
企业网络基于威胁的风险评估
DOI: --
发表时间: 2016
期刊:
影响因子: --
作者:
J. Riordan;R. Lippmann
通讯作者: R. Lippmann
最佳弹性传输网格设计
DOI: --
发表时间: 2016
期刊: Power Systems Computation Conference
影响因子: --
作者:
Harsha Nagarajan;Emre Yamangil;R. Bent;Pascal Van Hentenryck;S. Backhaus
通讯作者: S. Backhaus
衡量安全性
DOI: --
发表时间: 2011
影响因子: 1.9
作者:
S. Stolfo;S. Bellovin;David Evans
通讯作者: David Evans
DOI: 10.1109/cns.2018.8433219
发表时间: 2018-08
期刊: 2018 IEEE Conference on Communications and Network Security (CNS)
影响因子: --
作者:
Ruozhou Yu;G. Xue;Vishnu Teja Kilari;Xiang Zhang
通讯作者: Ruozhou Yu;G. Xue;Vishnu Teja Kilari;Xiang Zhang