CAREER: Towards Automated and Assurable Enterprise Network Migration

职业：实现自动化、可靠的企业网络迁移

• 批准号: 0953622
• 负责人: Sanjay Rao
• 金额: $ 32万
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-02-01 至 2016-01-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0953622&HistoricalAwards=false
• 关键词: CAREER; Towards; Automated; Assurable; Enterprise

Enterprise network operators must frequently change the design of their networks to reflect new organizational needs (e.g., company mergers). Redesigning enterprise networks is challenging given the need to change hundreds of interdependent low-level configurations. Configuration errors can have catastrophic consequences (e.g., large-scale network outages). The project is investigating systematic frameworks to help operators redesign their networks to meet desired high-level objectives. Optimization problems are formulated that trade-off the benefits of a redesign task with the reconfiguration costs involved. Algorithms for the redesign tasks are derived by exploring synergies with theoretical work in the operations research community. The project is devising hybrid methodologies for validating configuration changes that combine static configuration analysis with information obtained from monitoring network behavior. Novel techniques based on data-mining are being developed that can capture configuration dependencies across network devices. The techniques are being applied to important and unexplored problem domains such as migrating security policies from enterprise data centers to a cloud computing model, reorganizing routing designs on mergers, and service differentiation policies. The research if successful will change how operators manage their networks, leading to large cost-savings for IT organizations, and the creation of more reliable and secure networks. The research will foster innovation by lowering the risks in migration to new enterprise network architectures such as cloud computing and clean-slate architectures. The PI is creating a network configuration data repository available to academic researchers, introducing new lecture material on enterprise management in the networking curriculum, and participating in summer camps for K-12 students.

企业网络运营商必须频繁地改变其网络的设计以反映新的组织需求（例如，公司合并）。重新设计企业网络具有挑战性，因为需要更改数百个相互依赖的低级别配置。配置错误可能会造成灾难性后果（例如，大规模网络中断）。 该项目正在调查系统框架，以帮助运营商重新设计其网络，以满足预期的高层次目标。优化问题的制定，权衡利益的重新设计任务与重新配置的成本。算法的重新设计任务，通过探索协同作用与理论工作在运筹学界。该项目正在设计验证配置更改的混合方法，该方法将联合收割机静态配置分析与从监视网络行为中获得的信息相结合。基于数据挖掘的新技术正在开发中，可以跨网络设备捕获配置依赖关系。这些技术正被应用于重要的和未开发的问题领域，如从企业数据中心迁移到云计算模型的安全策略，重组合并的路由设计，以及服务差异化策略。 这项研究如果成功，将改变运营商管理网络的方式，为IT组织节省大量成本，并创建更可靠和安全的网络。该研究将通过降低迁移到新的企业网络架构（如云计算和白板架构）的风险来促进创新。 PI正在创建一个可供学术研究人员使用的网络配置数据存储库，在网络课程中引入有关企业管理的新讲座材料，并参加K-12学生的夏令营。