Collaborative Research: NeTS-FIND: Model Based Diagnosis in the Knowledge Plane

知识平面（KP）体系结构使下一代计算机网络能够自我描述、自我分析，并最终更加自我管理。这个为期一年的项目为KP制定了初步的高层设计，并将其应用于重点测试问题，目的是确定全面开发和部署KP网络的关键步骤。一个完全支持kp的网络将能够检测和诊断自己的故障和故障，并经常建议自己的修复。该项目将首先定义一个由三部分组成的KP体系结构，包括：(1)分解分布式和可分割学习和分析的代理系统，(2)知识表示框架和(3)知识路由和管理。关键的设计标准是不完整或不正确的知识的缩放、分布和协调。KP假设跨多个问题领域共享知识将增强每个领域的解决方案性能。为了激励体系结构设计并验证这一假设，研究首先集中在基于模型的硬故障诊断应用程序上，然后扩展到安全故障的发现。在麻省理工学院进行初步故障诊断工作后，pi将重点放在ISI的DETER网络安全测试台上，作为诊断硬故障和安全相关配置故障的测试环境。DETER提供了一种可控和受限的方法来简化初始研究，同时它足够大和复杂，可以激发商业Internet所需的许多KP机制。这个项目的预期产出是(1)一个架构，包括原则、目标和初始设计，(2)将这些具体应用于硬故障和安全故障的独立但重叠的问题，以及(3)确定在接下来的研究步骤中要解决的关键问题。结果将通过将其纳入可操作的DETER测试平台、发表论文和相关代码以及PI参与net - find社区来传播。

The Knowledge Plane (KP) architecture enables next-generation computer networks to be self-describing, self-analyzing, and ultimately more self-managing. This one-year project is laying out an initial high-level design for the KP and applying it to focused test problems, with the aim of identifying key steps towards full development and deployment of a KP-enabled network. A fully KP-enabled network will be able to detect and diagnose its own failures and faults, and often advise on its own repair.The project would first define a three-part KP architecture consisting of (1) an agent system to decompose distributed and partitionable learning and analysis, (2) a knowledge representation framework and (3) knowledge routing and management. Key design criteria are scaling, distribution, and reconciliation of incomplete or incorrect knowledge.The KP postulates that sharing knowledge across multiple problem domains will strengthen solution performance in each domain. To motivate the architecture design and validate this postulate, the research focuses initially on a model-based hard fault diagnosis application, which is then extended to discovery of security failures. Following preliminary fault diagnosis work at MIT, the PIs focus on ISI's DETER network security testbed as a test environment for diagnosing hard fault and security-related configuration failures. DETER offers a controllable and constrained to simplify initial research, while being sufficiently large and complex to motivate many of the KP mechanisms required for a commercial Internet. The intended outputs of this project are (1) an architecture, including principles, goals, and an initial design, (2) a specific application of these to the separate yet overlapping problems of hard fault and security failures, and (3) identification of key questions to be addressed in the next steps of the research. Results will be disseminated through incorporation in the operational DETER testbed, publication of papers and related code, and PI participation in NETS-FIND community.