A Situation-Aware Information Infrastructure

态势感知信息基础设施

• 批准号: EP/L026015/1
• 负责人: David Hutchison
• 金额: $ 96.62万
• 依托单位: Lancaster University
• 依托单位国家: 英国
• 项目类别: Research Grant
• 财政年份: 2015
• 资助国家: 英国
• 起止时间: 2015 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=EP%2FL026015%2F1
• 关键词: Situation; Aware; Information; Infrastructure

Resilience is a vital property of communications systems and unified ICT environments, and is achieved mainly by infrastructural redundancy, and static security and network control (e.g., through multipath routing protocols, signature-based intrusion detection systems). This results in mostly monolithic solutions that are service and location-specific, and they protect the infrastructure against a static and well-defined set of threats. However, current approaches do not incorporate, nor do they take advantage of, the wealth of spatio-temporal information available in today's ICT environments, such as sensing, logs, packet data, or external global media feeds. Such diverse data and information sources from heterogeneous environments unified over ICT infrastructures can be exploited to create situation awareness, and can help protect the infrastructure from a range of dynamic and emerging adversarial events (e.g., from new types of failures due to complexity and centralisation, to denial of service attacks and natural disasters) that current static approaches fail to provide [1][2][3].At the same time, today's ICT environments are evolving as crucial, mission-critical socio-economic systems, and their optimal performance depends on adaptive and intelligent schemes to ensure resilient operation at the onset of legitimate or malicious adversarial events. In order to realise this aim, there needs to be a suitable instrumentation, measurement, analysis, and control infrastructure that will operate natively with, and add intelligence to, the unified networked environment. In this project, we propose to design and develop a generic, resilient and adaptive situation-aware information infrastructure that would predict and confront the broad range of challenges faced by the network. We aim to provide novel and practical mechanisms that will enable a deeper understanding of the dynamic and non-stationary evolution of mission-critical systems through harnessing 'big data' sets of relevant internal (monitored) and external (global media feeds) spatio-temporal information - what we call 'context'. Our mechanisms will be incorporated as a protocol suite within a Software-Defined architecture, integrated as a native component in (future) computer networks design. This project is not simply aiming at integrating off-the-shelf solutions into a unified scheme, but rather to revisit the resilience challenge in mission-critical ICT environments and contribute new solutions to the information processing, algorithmic, networking and systems aspects of such undertakings. The research will be carried out over two years jointly at the Universities of Lancaster and Glasgow, involving investigators with a wide range of expertise (from resilient and autonomic communications, through network instrumentation and management, to information retrieval) and in collaboration with a number of leading industrial partners in the areas of safety-critical systems (NATS), industrial control networks (EADS-IW), and hardware-accelerated custom computation products (Solarflare). This consortium will ensure delivery of excellent research results with direct industrial applicability and transformative effects on future intelligent mission-critical infrastructures. [1]. Windows Azure service interruption: http://blogs.msdn.com/b/windowsazure/archive/2012/08/02/root-cause-analysis-for-recent-windows-azure-service-interruption-in-western-europe.aspx[2]. Air Traffic Management system malfunction at Dublin Airport:http://www.computerworld.com/s/article/9110319/Dublin_Airport_radar_system_brought_down_by_faulty_network_card[3]. Power outage hits London Data Centre:http://www.theregister.co.uk/2012/07/10/data_centre_power_cut/

弹性是通信系统和统一ICT环境的重要属性，主要通过基础设施冗余、静态安全和网络控制（例如，通过多路径路由协议、基于签名的入侵检测系统）来实现。这导致了大多数单一的解决方案是特定于服务和位置的，它们保护基础设施免受静态和定义良好的一组威胁。然而，目前的方法既没有纳入也没有利用当今ICT环境中丰富的时空信息，如传感、日志、分组数据或外部全球媒体馈电。来自统一于ICT基础设施的异构环境的这种多样化数据和信息源可用于创建态势感知，并有助于保护基础设施免受一系列动态和新出现的对抗性事件的影响（例如，由于复杂性和集中化造成的新型故障，以及拒绝服务攻击和自然灾害），而目前的静态方法无法提供[1][2][3]。与此同时，当今的ICT环境正在演变为关键的、关键任务的社会经济系统，其最佳性能取决于自适应和智能方案，以确保在合法或恶意对抗事件发生时能够灵活运行。为了实现这一目标，需要有一个合适的仪器、测量、分析和控制基础设施，它将与统一的网络环境一起本地运行，并为其添加智能。在这个项目中，我们建议设计和开发一个通用的、有弹性的和自适应的态势感知信息基础设施，以预测和应对网络面临的广泛挑战。我们的目标是提供新颖和实用的机制，通过利用相关的内部（监测）和外部（全球媒体馈流）时空信息的“大数据”集，我们称之为“上下文”，从而能够更深入地了解关键任务系统的动态和非平稳演变。我们的机制将作为软件定义体系结构中的协议套件，作为（未来）计算机网络设计中的本地组件集成。该项目的目的不仅仅是将现成的解决方案整合到一个统一的方案中，而是重新审视关键任务ICT环境中的弹性挑战，并为此类任务的信息处理、算法、网络和系统方面提供新的解决方案。该研究将在兰开斯特大学和格拉斯哥大学联合进行两年多的时间，涉及具有广泛专业知识的研究人员（从弹性和自主通信，通过网络仪器和管理，到信息检索），并与安全关键系统（NATS），工业控制网络（EADS-IW）和硬件加速定制计算产品（Solarflare）领域的一些领先工业伙伴合作。该联盟将确保交付具有直接工业适用性的优秀研究成果，并对未来智能关键任务基础设施产生变革性影响。[1]。Windows Azure服务中断：http://blogs.msdn.com/b/windowsazure/archive/2012/08/02/root-cause-analysis-for-recent-windows-azure-service-interruption-in-western-europe.aspx[2]。都柏林机场空中交通管理系统故障：http://www.computerworld.com/s/article/9110319/Dublin_Airport_radar_system_brought_down_by_faulty_network_card[3]。伦敦数据中心停电：http://www.theregister.co.uk/2012/07/10/data_centre_power_cut/

项目成果

Evaluation of RPL's Single Metric Objective Functions

RPL 单一度量目标函数的评估

• DOI: 10.1109/ithings-greencom-cpscom-smartdata.2017.98
• 发表时间: 2017
• 作者: Alayed W

On the Optimality of Virtualized Security Function Placement in Multi-Tenant Data Centers

多租户数据中心虚拟化安全功能配置的优化

• 发表时间: 2018
• 作者: Ali, A. F.

HARMLESS: Cost-Effective Transitioning to SDN for Small Enterprises

• DOI: 10.23919/ifipnetworking.2018.8696504
• 发表时间: 2018-05
• 期刊: 2018 IFIP Networking Conference (IFIP Networking) and Workshops
• 作者: Levente Csikor;László Toka;Márk Szalay;Gergely Pongrácz;D. Pezaros;G. Rétvári

PLAN: Joint Policy- and Network-Aware VM Management for Cloud Data Centers

PLAN：云数据中心的联合策略和网络感知虚拟机管理

• DOI: 10.1109/tpds.2016.2604811
• 发表时间: 2017-04
• 期刊: IEEE Transactions on Parallel and Distributed Systems
• 影响因子: 5.3
• 作者: Cui Lin;Tso Fung Po;Pezaros Dimitrios;Jia Weijia;Zhao Wei
• 通讯作者: Zhao Wei

Synergistic policy and virtual machine consolidation in cloud data centers

• DOI: 10.1109/infocom.2016.7524354
• 发表时间: 2016-04
• 期刊: IEEE INFOCOM 2016 - The 35th Annual IEEE International Conference on Computer Communications
• 作者: Lin Cui;Richard Cziva;Fung Po Tso;D. Pezaros