首页 > 最新文献

Proceedings of the 16th ACM Workshop on Hot Topics in Networks最新文献

英文 中文
Wi-Fly: Widespread Opportunistic Connectivity via Commercial Air Transport Wi-Fly:通过商业航空运输广泛的机会性连接
Pub Date : 2017-11-30 DOI: 10.1145/3152434.3152458
Talal Ahmad, Ranveer Chandra, Ashish Kapoor, Michael Daum, E. Horvitz
More than half of the world's population face barriers in accessing the Internet. A recent ITU study estimates that 2.6 billion people cannot afford connectivity and that 3.8 billion do not have access. Recent proposals for providing low-cost connectivity include fielding of drones and long-lasting balloons in the stratosphere. We propose a more economical alternative, which we refer to as Wi-Fly, that leverages existing commercial planes to provide Internet connectivity to remote regions. In Wi-Fly we enable communication between a lightweight Wi-Fi device on commercial planes and ground stations, resulting in connectivity in regions that do not otherwise have low-cost Internet connectivity. Wi-Fly leverages existing ADS-B signals from planes as a control channel to ensure that there is a strong link from the plane to the ground, and that the stations intelligently wake up and associate to the appropriate AP. For our experimentation, we have customized two airplanes to conduct measurements. Through empirical experiments with test flights and simulations, we show that Wi-Fly and its extensions have the potential to provide connectivity to the most remote regions of the world at a significantly lower cost than existing alternatives.
世界上一半以上的人口在上网方面面临障碍。国际电联最近的一项研究估计,26亿人负担不起网络连接费用,38亿人无法接入网络。最近提出的提供低成本网络连接的建议包括在平流层部署无人机和长效气球。我们提出了一种更经济的替代方案,我们称之为Wi-Fly,它利用现有的商用飞机为偏远地区提供互联网连接。在Wi-Fly中,我们可以在商用飞机上的轻型Wi-Fi设备和地面站之间进行通信,从而在没有低成本互联网连接的地区实现连接。Wi-Fly利用飞机上现有的ADS-B信号作为控制通道,以确保飞机与地面之间有很强的联系,并且电台可以智能唤醒并关联到适当的AP。在我们的实验中,我们定制了两架飞机来进行测量。通过试飞和模拟的实证实验,我们表明Wi-Fly及其扩展具有以比现有替代方案低得多的成本为世界上最偏远地区提供连接的潜力。
{"title":"Wi-Fly: Widespread Opportunistic Connectivity via Commercial Air Transport","authors":"Talal Ahmad, Ranveer Chandra, Ashish Kapoor, Michael Daum, E. Horvitz","doi":"10.1145/3152434.3152458","DOIUrl":"https://doi.org/10.1145/3152434.3152458","url":null,"abstract":"More than half of the world's population face barriers in accessing the Internet. A recent ITU study estimates that 2.6 billion people cannot afford connectivity and that 3.8 billion do not have access. Recent proposals for providing low-cost connectivity include fielding of drones and long-lasting balloons in the stratosphere. We propose a more economical alternative, which we refer to as Wi-Fly, that leverages existing commercial planes to provide Internet connectivity to remote regions. In Wi-Fly we enable communication between a lightweight Wi-Fi device on commercial planes and ground stations, resulting in connectivity in regions that do not otherwise have low-cost Internet connectivity. Wi-Fly leverages existing ADS-B signals from planes as a control channel to ensure that there is a strong link from the plane to the ground, and that the stations intelligently wake up and associate to the appropriate AP. For our experimentation, we have customized two airplanes to conduct measurements. Through empirical experiments with test flights and simulations, we show that Wi-Fly and its extensions have the potential to provide connectivity to the most remote regions of the world at a significantly lower cost than existing alternatives.","PeriodicalId":120886,"journal":{"name":"Proceedings of the 16th ACM Workshop on Hot Topics in Networks","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-11-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130929486","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 10
Granular Computing and Network Intensive Applications: Friends or Foes? 颗粒计算和网络密集型应用:是敌是友?
Pub Date : 2017-11-30 DOI: 10.1145/3152434.3152450
Arjun Singhvi, S. Banerjee, Yotam Harchol, Aditya Akella, M. Peek, Pontus Rydin
Computing/infrastructure as a service continues to evolve with bare metal, virtual machines, containers and now serverless granular computing service offerings. Granular computing enables developers to decompose their applications into smaller logical units or functions, and run them on small, low cost and short lived computation containers without having to worry about setting up servers - hence the term serverless computing. While serverless environments can be used very cost effectively for large scale parallel processing data analytics applications, it is less clear if network intensive packet processing applications can also benefit from these new computing services as they do not share the same characteristics. This paper examines the architectural constraints as well as current serverless implementations to develop a position on this topic and influence the next generation of computing services. We support our position through measurement and experimentation on Amazon's AWS Lambda service with a few popular network functions.
计算/基础设施即服务随着裸机、虚拟机、容器和现在的无服务器粒度计算服务产品不断发展。颗粒计算使开发人员能够将其应用程序分解为更小的逻辑单元或功能,并在小型、低成本和短寿命的计算容器上运行它们,而不必担心设置服务器——因此有了术语无服务器计算。虽然无服务器环境可以非常经济有效地用于大规模并行处理数据分析应用程序,但不太清楚网络密集型数据包处理应用程序是否也可以从这些新的计算服务中受益,因为它们不具有相同的特征。本文研究了架构约束以及当前的无服务器实现,以确定该主题的位置并影响下一代计算服务。我们通过对亚马逊AWS Lambda服务的一些流行的网络功能进行测量和实验来支持我们的地位。
{"title":"Granular Computing and Network Intensive Applications: Friends or Foes?","authors":"Arjun Singhvi, S. Banerjee, Yotam Harchol, Aditya Akella, M. Peek, Pontus Rydin","doi":"10.1145/3152434.3152450","DOIUrl":"https://doi.org/10.1145/3152434.3152450","url":null,"abstract":"Computing/infrastructure as a service continues to evolve with bare metal, virtual machines, containers and now serverless granular computing service offerings. Granular computing enables developers to decompose their applications into smaller logical units or functions, and run them on small, low cost and short lived computation containers without having to worry about setting up servers - hence the term serverless computing. While serverless environments can be used very cost effectively for large scale parallel processing data analytics applications, it is less clear if network intensive packet processing applications can also benefit from these new computing services as they do not share the same characteristics. This paper examines the architectural constraints as well as current serverless implementations to develop a position on this topic and influence the next generation of computing services. We support our position through measurement and experimentation on Amazon's AWS Lambda service with a few popular network functions.","PeriodicalId":120886,"journal":{"name":"Proceedings of the 16th ACM Workshop on Hot Topics in Networks","volume":"64 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-11-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129670040","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 27
Congestion-Control Throwdown 拥塞控制的围墙
Pub Date : 2017-11-30 DOI: 10.1145/3152434.3152446
Michael Schapira, Keith Winstein
Congestion control is a perennial topic of networking research. In making decisions about who sends data when, congestion-control schemes prevent collapses and ultimately determine the allocation of scarce communications resources among contending users and applications. The field has seen considerable recent activity. Even after three decades of research, basic principles and techniques remain up for debate. In this throwdown-as-paper, the authors find themselves at loggerheads over the fundamental tenets of congestion control.
拥塞控制是网络研究的一个长期课题。在决定谁在何时发送数据时,拥塞控制方案防止崩溃,并最终确定在竞争用户和应用程序之间分配稀缺的通信资源。该领域最近出现了相当大的活动。即使经过三十年的研究,基本原理和技术仍然存在争议。在这篇论文中,作者发现他们在拥塞控制的基本原则上存在分歧。
{"title":"Congestion-Control Throwdown","authors":"Michael Schapira, Keith Winstein","doi":"10.1145/3152434.3152446","DOIUrl":"https://doi.org/10.1145/3152434.3152446","url":null,"abstract":"Congestion control is a perennial topic of networking research. In making decisions about who sends data when, congestion-control schemes prevent collapses and ultimately determine the allocation of scarce communications resources among contending users and applications. The field has seen considerable recent activity. Even after three decades of research, basic principles and techniques remain up for debate. In this throwdown-as-paper, the authors find themselves at loggerheads over the fundamental tenets of congestion control.","PeriodicalId":120886,"journal":{"name":"Proceedings of the 16th ACM Workshop on Hot Topics in Networks","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-11-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121504539","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 28
Low-Latency Routing on Mesh-Like Backbones 类网状骨干网的低延迟路由
Pub Date : 2017-11-30 DOI: 10.1145/3152434.3152453
Nikola Gvozdiev, Stefano Vissicchio, B. Karp, M. Handley
Early in in the Internet's history, routing within a single provider's WAN centered on placing traffic on the shortest path. More recent traffic engineering efforts aim to reduce congestion and/or increase utilization within the status quo of greedy shortest-path first routing on a sparse topology. In this paper, we argue that this status quo of routing and topology is fundamentally at odds with placing traffic so as to minimize latency for users while avoiding congestion. We advocate instead provider backbone topologies that are more mesh-like, and hence better at providing multiple low-latency paths, and a routing system that directly considers latency minimization and congestion avoidance while dynamically placing traffic on multiple unequal-cost paths. We offer a research agenda for achieving this new low-latency approach to WAN topology design and routing.
在互联网历史的早期,单一提供商的广域网内的路由集中在将流量放在最短路径上。最近的交通工程努力旨在减少拥塞和/或提高在稀疏拓扑上贪婪的最短路径优先路由的现状下的利用率。在本文中,我们认为这种路由和拓扑的现状从根本上与放置流量不一致,以便在避免拥塞的同时最小化用户的延迟。相反,我们提倡提供更像网格的主干拓扑,从而更好地提供多条低延迟路径,以及直接考虑延迟最小化和拥塞避免的路由系统,同时动态地将流量放置在多条非等成本路径上。我们为实现这种新的低延迟广域网拓扑设计和路由方法提供了一个研究议程。
{"title":"Low-Latency Routing on Mesh-Like Backbones","authors":"Nikola Gvozdiev, Stefano Vissicchio, B. Karp, M. Handley","doi":"10.1145/3152434.3152453","DOIUrl":"https://doi.org/10.1145/3152434.3152453","url":null,"abstract":"Early in in the Internet's history, routing within a single provider's WAN centered on placing traffic on the shortest path. More recent traffic engineering efforts aim to reduce congestion and/or increase utilization within the status quo of greedy shortest-path first routing on a sparse topology. In this paper, we argue that this status quo of routing and topology is fundamentally at odds with placing traffic so as to minimize latency for users while avoiding congestion. We advocate instead provider backbone topologies that are more mesh-like, and hence better at providing multiple low-latency paths, and a routing system that directly considers latency minimization and congestion avoidance while dynamically placing traffic on multiple unequal-cost paths. We offer a research agenda for achieving this new low-latency approach to WAN topology design and routing.","PeriodicalId":120886,"journal":{"name":"Proceedings of the 16th ACM Workshop on Hot Topics in Networks","volume":"95 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-11-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115064285","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 8
Opportunities and Challenges of Ad-based Measurements from the Edge of the Network 基于网络边缘的广告测量的机遇与挑战
Pub Date : 2017-11-30 DOI: 10.1145/3152434.3152895
Patricia Callejo, Conor Kelton, N. Vallina-Rodriguez, R. C. Rumín, Oliver Gasser, C. Kreibich, F. Wohlfart, Ángel Cuevas
For many years, the research community, practitioners, and regulators have used myriad methods and tools to understand the complex structure and behavior of ISPs from the edge of the network. Unfortunately, the nature of these techniques forces the researcher to find a balance between ISP-coverage, user scale, and accuracy. In this paper we present AdTag, a network measurement paradigm that leverages the opportunistic nature of online targeted advertising to measure the Internet from the edge of the network. We discuss and formalize AdTag's design space---including technical, ethical, deployability and economic factors---and its potential to analyze a wide spectrum of Internet connectivity aspects from the browser. We run several experiments to demonstrate that AdTag can be tailored towards geographic and device-based user groups, finding also several challenges to be faced in order to maximize the number of samples. In a 7-day campaign, AdTag could access more than 20K ISPs at a global scale (185 countries) using millions of edge nodes.
多年来,研究团体、从业人员和监管机构已经使用了无数的方法和工具来理解网络边缘的isp的复杂结构和行为。不幸的是,这些技术的本质迫使研究人员在isp覆盖范围、用户规模和准确性之间找到平衡。在本文中,我们提出了AdTag,这是一种网络测量范式,利用在线定向广告的机会主义性质,从网络边缘测量互联网。我们讨论并形式化了AdTag的设计空间——包括技术、道德、可部署性和经济因素——以及它从浏览器分析广泛的互联网连接方面的潜力。我们进行了几个实验来证明AdTag可以针对地理和基于设备的用户群体进行定制,同时也发现了为了最大化样本数量需要面临的几个挑战。在为期7天的活动中,AdTag可以使用数百万个边缘节点访问全球范围内(185个国家)的20K多个isp。
{"title":"Opportunities and Challenges of Ad-based Measurements from the Edge of the Network","authors":"Patricia Callejo, Conor Kelton, N. Vallina-Rodriguez, R. C. Rumín, Oliver Gasser, C. Kreibich, F. Wohlfart, Ángel Cuevas","doi":"10.1145/3152434.3152895","DOIUrl":"https://doi.org/10.1145/3152434.3152895","url":null,"abstract":"For many years, the research community, practitioners, and regulators have used myriad methods and tools to understand the complex structure and behavior of ISPs from the edge of the network. Unfortunately, the nature of these techniques forces the researcher to find a balance between ISP-coverage, user scale, and accuracy. In this paper we present AdTag, a network measurement paradigm that leverages the opportunistic nature of online targeted advertising to measure the Internet from the edge of the network. We discuss and formalize AdTag's design space---including technical, ethical, deployability and economic factors---and its potential to analyze a wide spectrum of Internet connectivity aspects from the browser. We run several experiments to demonstrate that AdTag can be tailored towards geographic and device-based user groups, finding also several challenges to be faced in order to maximize the number of samples. In a 7-day campaign, AdTag could access more than 20K ISPs at a global scale (185 countries) using millions of edge nodes.","PeriodicalId":120886,"journal":{"name":"Proceedings of the 16th ACM Workshop on Hot Topics in Networks","volume":"93 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-11-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115312353","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 10
Programmable Radio Environments for Smart Spaces 智能空间的可编程无线电环境
Pub Date : 2017-11-30 DOI: 10.1145/3152434.3152456
Allen Welkie, Longfei Shangguan, Jeremy Gummeson, Wenjun Hu, K. Jamieson
Smart spaces, such as smart homes and smart offices, are common Internet of Things (IoT) scenarios for building automation with networked sensors. In this paper, we suggest a different notion of smart spaces, where the radio environment is programmable to achieve desirable link quality within the space. We envision deploying low-cost devices embedded in the walls of a building to passively reflect or actively transmit radio signals. This is a significant departure from typical approaches to optimizing endpoint radios and individual links to improve performance. In contrast to previous work combating or leveraging per-link multipath fading, we actively reconfigure the multipath propagation. We sketch design and implementation directions for such a programmable radio environment, highlighting the computational and operational challenges our architecture faces. Preliminary experiments demonstrate the efficacy of using passive elements to change the wireless channel, shifting frequency "nulls" by nine Wi-Fi subcarriers, changing the 2 x 2 MIMO channel condition number by 1.5 dB, and attenuating or enhancing signal strength by up to 26 dB.
智能空间,如智能家居和智能办公室,是具有联网传感器的楼宇自动化的常见物联网(IoT)场景。在本文中,我们提出了一种不同的智能空间概念,其中无线电环境是可编程的,以在空间内实现理想的链路质量。我们设想将低成本的设备嵌入建筑物的墙壁中,被动反射或主动传输无线电信号。这与优化端点无线电和单个链接以提高性能的典型方法有很大的不同。与以前对抗或利用每链路多径衰落的工作相反,我们积极地重新配置多径传播。我们概述了这种可编程无线电环境的设计和实现方向,突出了我们的架构面临的计算和操作挑战。初步实验证明了使用无源元件改变无线信道的有效性,通过9个Wi-Fi子载波移动频率“零”,将2 x 2 MIMO信道条件数改变1.5 dB,并衰减或增强信号强度高达26 dB。
{"title":"Programmable Radio Environments for Smart Spaces","authors":"Allen Welkie, Longfei Shangguan, Jeremy Gummeson, Wenjun Hu, K. Jamieson","doi":"10.1145/3152434.3152456","DOIUrl":"https://doi.org/10.1145/3152434.3152456","url":null,"abstract":"Smart spaces, such as smart homes and smart offices, are common Internet of Things (IoT) scenarios for building automation with networked sensors. In this paper, we suggest a different notion of smart spaces, where the radio environment is programmable to achieve desirable link quality within the space. We envision deploying low-cost devices embedded in the walls of a building to passively reflect or actively transmit radio signals. This is a significant departure from typical approaches to optimizing endpoint radios and individual links to improve performance. In contrast to previous work combating or leveraging per-link multipath fading, we actively reconfigure the multipath propagation. We sketch design and implementation directions for such a programmable radio environment, highlighting the computational and operational challenges our architecture faces. Preliminary experiments demonstrate the efficacy of using passive elements to change the wireless channel, shifting frequency \"nulls\" by nine Wi-Fi subcarriers, changing the 2 x 2 MIMO channel condition number by 1.5 dB, and attenuating or enhancing signal strength by up to 26 dB.","PeriodicalId":120886,"journal":{"name":"Proceedings of the 16th ACM Workshop on Hot Topics in Networks","volume":"83 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-11-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114175856","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 55
Securing Ultra-High-Bandwidth Science DMZ Networks with Coordinated Situational Awareness 利用协调态势感知保护超高带宽科学DMZ网络
Pub Date : 2017-11-30 DOI: 10.1145/3152434.3152460
Vasudevan Nagendra, V. Yegneswaran, Phillip A. Porras
The Science DMZ (SDMZ) is a special purpose network infrastructure that is engineered to cater to the ultra-high bandwidth needs of the scientific and high performance computing (HPC) communities. These networks are isolated from stateful security devices such as firewalls and deep packet inspection (DPI) engines to allow HPC data transfer nodes (DTNs) to efficiently transfer petabytes of data without associated bandwidth and performance bottlenecks. This paper presents our ongoing effort toward the development of more fine-grained data flow access control policies to manage SDMZ networks that service large-scale experiments with varying data sensitivity levels and privacy constraints. We present a novel system, called CoordiNetZ (CNZ), that provides coordinated security monitoring and policy enforcement for sites participating in SDMZ projects by using an intent-based policy framework for effectively capturing the high-level policy intents of non-admin SDMZ project users (e.g., scientists, researchers, students). Central to our solution is the notion of coordinated situational awareness that is extracted from the synthesis of context derived from SDMZ host DTN applications and the network substrate. To realize this vision, we present a specialized process-monitoring system and flow-monitoring tool that facilitate context-aware data-flow intervention and policy enforcement in ultra-highspeed data transfer environments. We evaluate our prototype implementation using case studies that highlight the utility of our framework and demonstrate how security policy could be effectively specified and implemented within and across SDMZ networks.
Science DMZ (SDMZ)是一种特殊用途的网络基础设施,旨在满足科学和高性能计算(HPC)社区的超高带宽需求。这些网络与有状态安全设备(如防火墙和深度数据包检测(DPI)引擎)隔离,允许HPC数据传输节点(dtn)有效地传输pb级数据,而不会出现相关的带宽和性能瓶颈。本文介绍了我们正在努力开发更细粒度的数据流访问控制策略,以管理具有不同数据敏感性级别和隐私约束的大规模实验服务的SDMZ网络。我们提出了一个新的系统,称为CoordiNetZ (CNZ),它通过使用基于意图的策略框架来有效地捕获非管理SDMZ项目用户(例如,科学家、研究人员、学生)的高级策略意图,为参与SDMZ项目的站点提供协调的安全监控和策略实施。我们的解决方案的核心是从SDMZ主机DTN应用程序和网络基板派生的上下文综合中提取的协调态势感知概念。为了实现这一愿景,我们提出了一个专门的过程监控系统和流量监控工具,以促进超高速数据传输环境中上下文感知的数据流干预和策略执行。我们使用案例研究来评估我们的原型实现,这些案例研究突出了我们框架的实用性,并演示了如何在SDMZ网络内部和跨SDMZ网络有效地指定和实现安全策略。
{"title":"Securing Ultra-High-Bandwidth Science DMZ Networks with Coordinated Situational Awareness","authors":"Vasudevan Nagendra, V. Yegneswaran, Phillip A. Porras","doi":"10.1145/3152434.3152460","DOIUrl":"https://doi.org/10.1145/3152434.3152460","url":null,"abstract":"The Science DMZ (SDMZ) is a special purpose network infrastructure that is engineered to cater to the ultra-high bandwidth needs of the scientific and high performance computing (HPC) communities. These networks are isolated from stateful security devices such as firewalls and deep packet inspection (DPI) engines to allow HPC data transfer nodes (DTNs) to efficiently transfer petabytes of data without associated bandwidth and performance bottlenecks. This paper presents our ongoing effort toward the development of more fine-grained data flow access control policies to manage SDMZ networks that service large-scale experiments with varying data sensitivity levels and privacy constraints. We present a novel system, called CoordiNetZ (CNZ), that provides coordinated security monitoring and policy enforcement for sites participating in SDMZ projects by using an intent-based policy framework for effectively capturing the high-level policy intents of non-admin SDMZ project users (e.g., scientists, researchers, students). Central to our solution is the notion of coordinated situational awareness that is extracted from the synthesis of context derived from SDMZ host DTN applications and the network substrate. To realize this vision, we present a specialized process-monitoring system and flow-monitoring tool that facilitate context-aware data-flow intervention and policy enforcement in ultra-highspeed data transfer environments. We evaluate our prototype implementation using case studies that highlight the utility of our framework and demonstrate how security policy could be effectively specified and implemented within and across SDMZ networks.","PeriodicalId":120886,"journal":{"name":"Proceedings of the 16th ACM Workshop on Hot Topics in Networks","volume":"31 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-11-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121484355","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 8
Proceedings of the 16th ACM Workshop on Hot Topics in Networks 第16届ACM网络热点研讨会论文集
Pub Date : 1900-01-01 DOI: 10.1145/3152434
{"title":"Proceedings of the 16th ACM Workshop on Hot Topics in Networks","authors":"","doi":"10.1145/3152434","DOIUrl":"https://doi.org/10.1145/3152434","url":null,"abstract":"","PeriodicalId":120886,"journal":{"name":"Proceedings of the 16th ACM Workshop on Hot Topics in Networks","volume":"12 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128787620","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 4
期刊
Proceedings of the 16th ACM Workshop on Hot Topics in Networks
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1