Collaborative Research: NeTS-FIND: Model Based Diagnosis in the Knowledge Plane

知识平面（KP）体系结构使下一代计算机网络能够自我描述，自我分析，并最终实现更多的自我管理。 这个为期一年的项目为金伯利进程制定了初步的高级设计，并将其应用于重点测试问题，目的是确定全面开发和部署启用金伯利进程的网络的关键步骤。 一个完全支持KP的网络将能够检测和诊断自己的故障和错误，并经常建议自己的repair.The项目将首先定义一个由三部分组成的KP架构（1）代理系统分解分布式和分区学习和分析，（2）知识表示框架和（3）知识路由和管理。 关键的设计标准是不完整或不正确的知识的缩放、分布和协调。KP假设在多个问题域之间共享知识将增强每个域的解决方案性能。为了激励架构设计和验证这一假设，研究的重点首先是基于模型的硬故障诊断应用程序，然后扩展到发现的安全故障。 在MIT进行初步故障诊断工作之后，PI将重点放在ISI的DETER网络安全测试平台上，作为诊断硬故障和安全相关配置故障的测试环境。DETER提供了一个可控和约束，以简化初始研究，同时足够大和复杂，以激励商业互联网所需的许多KP机制。该项目的预期输出是（1）一个体系结构，包括原则、目标和初始设计，（2）这些体系结构在硬故障和安全故障等独立但重叠的问题上的具体应用，以及（3）识别关键问题将在研究的下一步中解决。 结果将通过纳入DETER运行测试平台、发表论文和相关代码以及PI参与NETS-FIND社区来传播。

The Knowledge Plane (KP) architecture enables next-generation computer networks to be self-describing, self-analyzing, and ultimately more self-managing. This one-year project is laying out an initial high-level design for the KP and applying it to focused test problems, with the aim of identifying key steps towards full development and deployment of a KP-enabled network. A fully KP-enabled network will be able to detect and diagnose its own failures and faults, and often advise on its own repair.The project would first define a three-part KP architecture consisting of (1) an agent system to decompose distributed and partitionable learning and analysis, (2) a knowledge representation framework and (3) knowledge routing and management. Key design criteria are scaling, distribution, and reconciliation of incomplete or incorrect knowledge.The KP postulates that sharing knowledge across multiple problem domains will strengthen solution performance in each domain. To motivate the architecture design and validate this postulate, the research focuses initially on a model-based hard fault diagnosis application, which is then extended to discovery of security failures. Following preliminary fault diagnosis work at MIT, the PIs focus on ISI's DETER network security testbed as a test environment for diagnosing hard fault and security-related configuration failures. DETER offers a controllable and constrained to simplify initial research, while being sufficiently large and complex to motivate many of the KP mechanisms required for a commercial Internet. The intended outputs of this project are (1) an architecture, including principles, goals, and an initial design, (2) a specific application of these to the separate yet overlapping problems of hard fault and security failures, and (3) identification of key questions to be addressed in the next steps of the research. Results will be disseminated through incorporation in the operational DETER testbed, publication of papers and related code, and PI participation in NETS-FIND community.