首页 > 最新文献

2018 IEEE/ACM 26th International Symposium on Quality of Service (IWQoS)最新文献

英文 中文
Online Demand Response of GPU Cloud Computing with DVFS 基于DVFS的GPU云计算在线需求响应
Pub Date : 2018-06-01 DOI: 10.1109/IWQoS.2018.8624136
Yu He, Lin Ma, Chuanhe Huang
GPU cloud computing is emerging as a new type of cloud service that drives computation-extensive jobs, such as big data analytics and distributed machine learning. The introduction of GPU brings parallel processing power at the cost of excessive energy consumption. Dynamic Voltage and Frequency Scaling (DVFS) is a promising method to control energy consumption of GPU VMs. This work focuses on using DVFS to reduce energy of cloud computing in datacenter demand response. We first consider an online demand response scenario where users arrive stochastically, aiming at maximizing social welfare and meeting energy reduction goals by employing DVFS. We address the challenge posed by DVFS through a new technique of compact infinite optimization. A more practical scenario where both energy and resource limitations present is further studied. We design a primal-dual approximation algorithm that can compute a feasible solution in polynomial time with guaranteed approximation ratio, and a payment scheme that works in concert to form a truthful cloud job auction.
GPU云计算作为一种新型的云服务正在兴起,它驱动着大数据分析和分布式机器学习等需要大量计算的工作。GPU的引入带来了并行处理能力,代价是消耗了过多的能量。动态电压和频率缩放(DVFS)是一种很有前途的GPU虚拟机能耗控制方法。本研究的重点是利用DVFS降低云计算在数据中心需求响应中的能耗。我们首先考虑一个用户随机到达的在线需求响应场景,旨在通过采用DVFS实现社会福利最大化和节能目标。我们通过一种新的紧凑无限优化技术来解决DVFS带来的挑战。进一步研究了能源和资源都存在限制的更实际的情景。我们设计了一个原对偶近似算法,可以在多项式时间内计算出具有保证近似比的可行解,并设计了一个协同工作的支付方案,以形成真实的云工作拍卖。
{"title":"Online Demand Response of GPU Cloud Computing with DVFS","authors":"Yu He, Lin Ma, Chuanhe Huang","doi":"10.1109/IWQoS.2018.8624136","DOIUrl":"https://doi.org/10.1109/IWQoS.2018.8624136","url":null,"abstract":"GPU cloud computing is emerging as a new type of cloud service that drives computation-extensive jobs, such as big data analytics and distributed machine learning. The introduction of GPU brings parallel processing power at the cost of excessive energy consumption. Dynamic Voltage and Frequency Scaling (DVFS) is a promising method to control energy consumption of GPU VMs. This work focuses on using DVFS to reduce energy of cloud computing in datacenter demand response. We first consider an online demand response scenario where users arrive stochastically, aiming at maximizing social welfare and meeting energy reduction goals by employing DVFS. We address the challenge posed by DVFS through a new technique of compact infinite optimization. A more practical scenario where both energy and resource limitations present is further studied. We design a primal-dual approximation algorithm that can compute a feasible solution in polynomial time with guaranteed approximation ratio, and a payment scheme that works in concert to form a truthful cloud job auction.","PeriodicalId":222290,"journal":{"name":"2018 IEEE/ACM 26th International Symposium on Quality of Service (IWQoS)","volume":"36 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-06-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126796597","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
NetCP: Consistent, Non-Interruptive and Efficient Checkpointing and Rollback of SDN NetCP:一致的、不间断的、高效的SDN检查点和回滚
Pub Date : 2018-06-01 DOI: 10.1109/IWQoS.2018.8624142
Ye Yu, Chen Qian, Wenfei Wu, Ying Zhang
Network failures are inevitable due to its increasing complexity, which significantly hampers system availability and performance. While adopting checkpointing and rollback recovery protocols (C/R for abbreviation) from distributed systems into computer networks is promising, several specific challenges appear as we design a C/R system for Software-Defined Networks (SDN). The C/R should be coordinated with other applications in the SDN controller, each individual switch C/R should not interrupt traffic traversing it, and SDN controller C/R faces the challenge of time and space overhead. We propose a C/R framework for SDN, named NetCP. NetCP coordinates C/R and other applications to get consistent global checkpoints, it leverages redundant forwarding tables in SDN switches for C/R so as to avoid interrupting traversing traffic, and it analyzes the dependencies between controller applications to make minimal C/R decision. We have implemented NetCP in a prototype system using the current standard SDN tools and demonstrate that it achieves consistency, non-interruption, and efficiency with negligible overhead.
由于网络复杂性的增加,网络故障不可避免,严重影响了系统的可用性和性能。虽然将检查点和回滚恢复协议(简称C/R)从分布式系统引入计算机网络是有希望的,但在我们为软件定义网络(SDN)设计C/R系统时,出现了几个具体的挑战。C/R需要与SDN控制器中的其他应用协调,每个单独的交换机C/R不应该中断经过它的流量,SDN控制器C/R面临时间和空间开销的挑战。我们提出了一个SDN的C/R框架,命名为NetCP。NetCP协调C/R和其他应用程序以获得一致的全局检查点,利用SDN交换机中的冗余转发表进行C/R,以避免中断穿越流量,并分析控制器应用程序之间的依赖关系以做出最小的C/R决策。我们已经使用当前标准的SDN工具在原型系统中实现了NetCP,并证明了它在可以忽略开销的情况下实现了一致性、不中断和效率。
{"title":"NetCP: Consistent, Non-Interruptive and Efficient Checkpointing and Rollback of SDN","authors":"Ye Yu, Chen Qian, Wenfei Wu, Ying Zhang","doi":"10.1109/IWQoS.2018.8624142","DOIUrl":"https://doi.org/10.1109/IWQoS.2018.8624142","url":null,"abstract":"Network failures are inevitable due to its increasing complexity, which significantly hampers system availability and performance. While adopting checkpointing and rollback recovery protocols (C/R for abbreviation) from distributed systems into computer networks is promising, several specific challenges appear as we design a C/R system for Software-Defined Networks (SDN). The C/R should be coordinated with other applications in the SDN controller, each individual switch C/R should not interrupt traffic traversing it, and SDN controller C/R faces the challenge of time and space overhead. We propose a C/R framework for SDN, named NetCP. NetCP coordinates C/R and other applications to get consistent global checkpoints, it leverages redundant forwarding tables in SDN switches for C/R so as to avoid interrupting traversing traffic, and it analyzes the dependencies between controller applications to make minimal C/R decision. We have implemented NetCP in a prototype system using the current standard SDN tools and demonstrate that it achieves consistency, non-interruption, and efficiency with negligible overhead.","PeriodicalId":222290,"journal":{"name":"2018 IEEE/ACM 26th International Symposium on Quality of Service (IWQoS)","volume":"50 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-06-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125956079","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 5
Improving TRILL Mesh Network's Throughput Using Smart NICs 利用智能网卡提高TRILL Mesh网络的吞吐量
Pub Date : 2018-06-01 DOI: 10.1109/IWQoS.2018.8624163
Danilo Cerović, Valentin Del Piccolo, Ahmed Amamou, K. Haddadou
TRILL is a Layer 2 protocol which allows the establishment of a layer 2 mesh network while improving infrastructure utilization in comparison with Ethernet. Indeed, TRILL does not use STP and keeps all links active. It always uses the shortest path between any two nodes and can dispatch the flows following ECMP. However, the problem is that throughput wise the performances of TRILL are not on par with Ethernet. This is the consequence of the fact that Linux does not have a fast path solution for TRILL and, moreover, the fact that CPU and memory resources have to be used in order to process the frames. The goal of this paper is to propose a fast path solution for TRILL that is based on a smart NIC. We experimented with our solution and the results show that we successfully increased the throughput of TRILL by 100%, thus reaching the network interface limit of 10Gbps while reducing latency.
TRILL是一个第2层协议,它允许建立第2层网状网络,同时与以太网相比提高基础设施利用率。实际上,TRILL不使用STP,并保持所有链路处于活动状态。它总是使用任意两个节点之间的最短路径,并且可以按照ECMP调度流。然而,问题是在吞吐量方面,TRILL的性能不能与以太网相提并论。这是因为Linux没有TRILL的快速路径解决方案,而且必须使用CPU和内存资源来处理帧。本文的目标是提出一种基于智能网卡的TRILL快速路径解决方案。我们对我们的解决方案进行了实验,结果表明我们成功地将TRILL的吞吐量提高了100%,从而在减少延迟的同时达到了10Gbps的网络接口限制。
{"title":"Improving TRILL Mesh Network's Throughput Using Smart NICs","authors":"Danilo Cerović, Valentin Del Piccolo, Ahmed Amamou, K. Haddadou","doi":"10.1109/IWQoS.2018.8624163","DOIUrl":"https://doi.org/10.1109/IWQoS.2018.8624163","url":null,"abstract":"TRILL is a Layer 2 protocol which allows the establishment of a layer 2 mesh network while improving infrastructure utilization in comparison with Ethernet. Indeed, TRILL does not use STP and keeps all links active. It always uses the shortest path between any two nodes and can dispatch the flows following ECMP. However, the problem is that throughput wise the performances of TRILL are not on par with Ethernet. This is the consequence of the fact that Linux does not have a fast path solution for TRILL and, moreover, the fact that CPU and memory resources have to be used in order to process the frames. The goal of this paper is to propose a fast path solution for TRILL that is based on a smart NIC. We experimented with our solution and the results show that we successfully increased the throughput of TRILL by 100%, thus reaching the network interface limit of 10Gbps while reducing latency.","PeriodicalId":222290,"journal":{"name":"2018 IEEE/ACM 26th International Symposium on Quality of Service (IWQoS)","volume":"13 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-06-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129984580","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
OBMA: Minimizing Bitmap Data Structure with Fast and Uninterrupted Update Processing 最小化位图数据结构与快速和不间断的更新处理
Pub Date : 2018-06-01 DOI: 10.1109/IWQoS.2018.8624188
Chuwen Zhang, Yong Feng, Haoyu Song, Ying Wan, Wenquan Xu, Yilun Wang, Huichen Dai, Y. Li, B. Lin
Software-based IP route lookup is one of the key components in Software Defined Networks. To address challenges on density, power and cost, Commodity CPU is preferred over other platforms to run lookup algorithms. As network functions become richer and more dynamic, route updates are more frequent. Unfortunately, previous works put less effort on fast incremental updates. On the other hand, The cache in CPU could be a performance limiter due to its small size, which requires algorithm designers to give high priority on storage efficiency in addition to time complexity. In this paper, we propose a new route lookup algorithm, OBMA, which improves update performance and storage efficiency while maintaining high lookup speed. The extensive experiments over real-word traces show that OBMA reduces the memory footprint to just 4.52 bytes/prefix, supports update speed up to 7.2 M/s which is 12.5 times faster than the state-of-the-art algorithm Poptrie. Besides, OBMA achieves up to 195.87 Mpps lookup speed with a single thread. Tests on comprehensive performance of lookup and update show that OBMA can sustain high lookup speed with update speed increasing.
基于软件的IP路由查找是软件定义网络的关键组成部分之一。为了解决密度、功耗和成本方面的挑战,商用CPU比其他平台更适合运行查找算法。随着网络功能的不断丰富和动态,路由更新也越来越频繁。不幸的是,以前的作品在快速增量更新上投入的精力较少。另一方面,由于CPU中的缓存体积小,可能会成为性能限制因素,这就要求算法设计者除了考虑时间复杂度外,还要优先考虑存储效率。本文提出了一种新的路由查找算法OBMA,在保持高速查找的同时提高了更新性能和存储效率。在实际跟踪的大量实验表明,OBMA将内存占用减少到仅4.52字节/前缀,支持高达7.2 M/s的更新速度,比最先进的算法Poptrie快12.5倍。此外,OBMA在单个线程中实现了高达195.87 Mpps的查找速度。对查找和更新综合性能的测试表明,随着更新速度的增加,OBMA可以保持较高的查找速度。
{"title":"OBMA: Minimizing Bitmap Data Structure with Fast and Uninterrupted Update Processing","authors":"Chuwen Zhang, Yong Feng, Haoyu Song, Ying Wan, Wenquan Xu, Yilun Wang, Huichen Dai, Y. Li, B. Lin","doi":"10.1109/IWQoS.2018.8624188","DOIUrl":"https://doi.org/10.1109/IWQoS.2018.8624188","url":null,"abstract":"Software-based IP route lookup is one of the key components in Software Defined Networks. To address challenges on density, power and cost, Commodity CPU is preferred over other platforms to run lookup algorithms. As network functions become richer and more dynamic, route updates are more frequent. Unfortunately, previous works put less effort on fast incremental updates. On the other hand, The cache in CPU could be a performance limiter due to its small size, which requires algorithm designers to give high priority on storage efficiency in addition to time complexity. In this paper, we propose a new route lookup algorithm, OBMA, which improves update performance and storage efficiency while maintaining high lookup speed. The extensive experiments over real-word traces show that OBMA reduces the memory footprint to just 4.52 bytes/prefix, supports update speed up to 7.2 M/s which is 12.5 times faster than the state-of-the-art algorithm Poptrie. Besides, OBMA achieves up to 195.87 Mpps lookup speed with a single thread. Tests on comprehensive performance of lookup and update show that OBMA can sustain high lookup speed with update speed increasing.","PeriodicalId":222290,"journal":{"name":"2018 IEEE/ACM 26th International Symposium on Quality of Service (IWQoS)","volume":"11 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-06-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130046133","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 5
A Hybrid Approach to Scalable Name Prefix Lookup 可扩展名称前缀查找的混合方法
Pub Date : 2018-06-01 DOI: 10.1109/IWQoS.2018.8624182
Kun Huang, Zhaohua Wang
Name prefix lookup is a core function in Named Data Networking (NDN). It is challenging to perform high-speed name-based longest prefix match lookups against a large amount of variable-length, hierarchical name prefixes in NDN. However, prior work concentrates on software-based name prefix lookup, and can't satisfy the scalability demands of high-speed lookups, low memory cost, and fast incremental updates. In this paper, we propose a hybrid approach to scalable name prefix lookup with hardware and software. We propose SACS, a shape and content search framework with ternary content addressable memories (TCAMs) and static random memory access memories (SRAMs). SACS aims to achieve high-speed lookups and low memory cost, while sustaining fast incremental updates. In SACS, a TCAM-based shape search module is first used to determine a subset of possible matching prefixes, and then a SRM-based content search module is used on the subset to find the longest matching prefix. For SACS, we propose a first shrinking least load algorithm to pack large amounts of shapes of name prefixes in a small TCAM. A shape of a name prefix is a sequence of its component lengths. We also propose a dual fingerprint-based hash table to improve the content search performance in SRAMs. Experimental results demonstrate that SACS outperforms state-of-the-art schemes by achieving up to 2.4X higher lookup throughput, up to 53% lower memory cost, and up to 96% higher insert throughput.
名称前缀查找是NDN (Named Data Networking)的核心功能。在NDN中,针对大量变长、分层的名称前缀执行高速的基于名称的最长前缀匹配查找是一项挑战。然而,先前的工作主要集中在基于软件的名称前缀查找上,不能满足高速查找、低内存成本和快速增量更新的可伸缩性需求。在本文中,我们提出了一种基于硬件和软件的可扩展名称前缀查找的混合方法。我们提出了SACS,一个具有三元内容可寻址存储器(TCAMs)和静态随机存储器访问存储器(sram)的形状和内容搜索框架。SACS旨在实现高速查找和低内存成本,同时保持快速增量更新。在SACS中,首先使用基于tcam的形状搜索模块来确定可能匹配前缀的子集,然后在该子集上使用基于srm的内容搜索模块来查找最长匹配前缀。对于SACS,我们提出了一种压缩最小负载算法,在一个小的TCAM中封装大量形状的名称前缀。名称前缀的形状是其组件长度的序列。我们还提出了一种基于双指纹的哈希表来提高ram的内容搜索性能。实验结果表明,SACS通过实现高达2.4倍的查找吞吐量,高达53%的内存成本和高达96%的插入吞吐量,优于最先进的方案。
{"title":"A Hybrid Approach to Scalable Name Prefix Lookup","authors":"Kun Huang, Zhaohua Wang","doi":"10.1109/IWQoS.2018.8624182","DOIUrl":"https://doi.org/10.1109/IWQoS.2018.8624182","url":null,"abstract":"Name prefix lookup is a core function in Named Data Networking (NDN). It is challenging to perform high-speed name-based longest prefix match lookups against a large amount of variable-length, hierarchical name prefixes in NDN. However, prior work concentrates on software-based name prefix lookup, and can't satisfy the scalability demands of high-speed lookups, low memory cost, and fast incremental updates. In this paper, we propose a hybrid approach to scalable name prefix lookup with hardware and software. We propose SACS, a shape and content search framework with ternary content addressable memories (TCAMs) and static random memory access memories (SRAMs). SACS aims to achieve high-speed lookups and low memory cost, while sustaining fast incremental updates. In SACS, a TCAM-based shape search module is first used to determine a subset of possible matching prefixes, and then a SRM-based content search module is used on the subset to find the longest matching prefix. For SACS, we propose a first shrinking least load algorithm to pack large amounts of shapes of name prefixes in a small TCAM. A shape of a name prefix is a sequence of its component lengths. We also propose a dual fingerprint-based hash table to improve the content search performance in SRAMs. Experimental results demonstrate that SACS outperforms state-of-the-art schemes by achieving up to 2.4X higher lookup throughput, up to 53% lower memory cost, and up to 96% higher insert throughput.","PeriodicalId":222290,"journal":{"name":"2018 IEEE/ACM 26th International Symposium on Quality of Service (IWQoS)","volume":"204 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-06-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121170299","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
Providing VNF Services with Pipe&Hose Model Based Nonblocking SDN Networks 基于管道和软管模型的非阻塞SDN网络提供VNF服务
Pub Date : 2018-06-01 DOI: 10.1109/IWQoS.2018.8624164
Yangming Zhao, Jingyuan Fan, Huang Chen, C. Qiao
Combining Virtual Network Functions (VNF) and Software Defined Networking (SDN) enables fine-grained traffic steering to provide required network services to flows. However, online routing calculation and flow table enforcement incurs an non-negligible overhead. In this work, we propose to design a nonblocking network with fixed routing and VNF provisioning schemes to improve the network performance (e.g. the flow completion time). We first formulate this problem as a linear programming (LP) problem with infinite number of constraints, and leverage primal-dual technology to reformulate the problem as a polynomial size LP. The LP formulation is also extended to reconfigure the network when some components become unavailable, in order to keep the network nonblocking. Since solving the LP formulation is time consuming or even impossible in large scale networks, an efficient algorithm based on optimization decomposition and column generation is proposed to find a near optimal solution quickly. Simulation results show that nonblocking networks can speed up 60% of the flows by 2x, with a small increase in the required network capacity, compared with approaches that do not use the nonblocking networks.
VNF (Virtual Network Functions)和SDN (Software Defined Networking)的结合,可以实现细粒度的流量引导,为流提供所需的网络服务。然而,在线路由计算和流表强制执行会导致不可忽略的开销。在这项工作中,我们建议设计一个具有固定路由和VNF提供方案的非阻塞网络,以提高网络性能(例如流完成时间)。我们首先将该问题表述为具有无限数量约束的线性规划(LP)问题,并利用原始对偶技术将该问题重新表述为多项式大小的LP。LP公式还扩展到当某些组件不可用时重新配置网络,以保持网络的非阻塞。针对求解LP公式在大规模网络中耗时甚至不可能求解的问题,提出了一种基于优化分解和列生成的高效算法,以快速找到近最优解。仿真结果表明,与不使用非阻塞网络的方法相比,非阻塞网络可以使60%的流量加快2倍,所需的网络容量略有增加。
{"title":"Providing VNF Services with Pipe&Hose Model Based Nonblocking SDN Networks","authors":"Yangming Zhao, Jingyuan Fan, Huang Chen, C. Qiao","doi":"10.1109/IWQoS.2018.8624164","DOIUrl":"https://doi.org/10.1109/IWQoS.2018.8624164","url":null,"abstract":"Combining Virtual Network Functions (VNF) and Software Defined Networking (SDN) enables fine-grained traffic steering to provide required network services to flows. However, online routing calculation and flow table enforcement incurs an non-negligible overhead. In this work, we propose to design a nonblocking network with fixed routing and VNF provisioning schemes to improve the network performance (e.g. the flow completion time). We first formulate this problem as a linear programming (LP) problem with infinite number of constraints, and leverage primal-dual technology to reformulate the problem as a polynomial size LP. The LP formulation is also extended to reconfigure the network when some components become unavailable, in order to keep the network nonblocking. Since solving the LP formulation is time consuming or even impossible in large scale networks, an efficient algorithm based on optimization decomposition and column generation is proposed to find a near optimal solution quickly. Simulation results show that nonblocking networks can speed up 60% of the flows by 2x, with a small increase in the required network capacity, compared with approaches that do not use the nonblocking networks.","PeriodicalId":222290,"journal":{"name":"2018 IEEE/ACM 26th International Symposium on Quality of Service (IWQoS)","volume":"74 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-06-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131602174","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
MaMPF: Encrypted Traffic Classification Based on Multi-Attribute Markov Probability Fingerprints 基于多属性马尔可夫概率指纹的加密流量分类
Pub Date : 2018-06-01 DOI: 10.1109/IWQoS.2018.8624124
Chang Liu, Zigang Cao, G. Xiong, Gaopeng Gou, S. Yiu, Longtao He
With the explosion of network applications, network anomaly detection and security management face a big challenge, of which the first and a fundamental step is traffic classification. However, for the sake of user privacy, encrypted communication protocols, e.g. the SSL/TLS protocol, are extensively used, which results in the ineffectiveness of traditional rule-based classification methods. Existing methods cannot have a satisfactory accuracy of encrypted traffic classification because of insufficient distinguishable characteristics. In this paper, we propose the Multi-attribute Markov Probability Fingerprints (MaMPF), for encrypted traffic classification. The key idea behind MaMPF is to consider multi-attributes, which includes a critical feature, namely “length block sequence” that captures the time-series packet lengths effectively using power-law distributions and relative occurrence probabilities of all considered applications. Based on the message type and length block sequences, Markov models are trained and the probabilities of all the applications are concatenated as the fingerprints for classification. MaMPF achieves 96.4% TPR and 0.2% FPR performance on a real-world dataset from campus network (including 950,000+ encrypted traffic flows and covering 18 applications), and outperforms the state-of-the-art methods.
随着网络应用的爆炸式增长,网络异常检测和安全管理面临着巨大的挑战,而流量分类是异常检测和安全管理的第一步也是最基本的一步。然而,为了保护用户的隐私,大量使用加密通信协议,如SSL/TLS协议,这导致传统的基于规则的分类方法效果不佳。现有的加密流分类方法由于可区分性不足,不能达到令人满意的加密流分类精度。本文提出了用于加密流量分类的多属性马尔可夫概率指纹(MaMPF)。MaMPF背后的关键思想是考虑多属性,其中包括一个关键特性,即“长度块序列”,它使用幂律分布和所有考虑的应用程序的相对出现概率有效地捕获时间序列数据包长度。基于消息类型和长度块序列,训练马尔可夫模型,并将所有应用程序的概率连接为指纹进行分类。MaMPF在来自校园网的真实数据集(包括950,000多个加密流量,覆盖18个应用程序)上实现了96.4%的TPR和0.2%的FPR性能,并且优于最先进的方法。
{"title":"MaMPF: Encrypted Traffic Classification Based on Multi-Attribute Markov Probability Fingerprints","authors":"Chang Liu, Zigang Cao, G. Xiong, Gaopeng Gou, S. Yiu, Longtao He","doi":"10.1109/IWQoS.2018.8624124","DOIUrl":"https://doi.org/10.1109/IWQoS.2018.8624124","url":null,"abstract":"With the explosion of network applications, network anomaly detection and security management face a big challenge, of which the first and a fundamental step is traffic classification. However, for the sake of user privacy, encrypted communication protocols, e.g. the SSL/TLS protocol, are extensively used, which results in the ineffectiveness of traditional rule-based classification methods. Existing methods cannot have a satisfactory accuracy of encrypted traffic classification because of insufficient distinguishable characteristics. In this paper, we propose the Multi-attribute Markov Probability Fingerprints (MaMPF), for encrypted traffic classification. The key idea behind MaMPF is to consider multi-attributes, which includes a critical feature, namely “length block sequence” that captures the time-series packet lengths effectively using power-law distributions and relative occurrence probabilities of all considered applications. Based on the message type and length block sequences, Markov models are trained and the probabilities of all the applications are concatenated as the fingerprints for classification. MaMPF achieves 96.4% TPR and 0.2% FPR performance on a real-world dataset from campus network (including 950,000+ encrypted traffic flows and covering 18 applications), and outperforms the state-of-the-art methods.","PeriodicalId":222290,"journal":{"name":"2018 IEEE/ACM 26th International Symposium on Quality of Service (IWQoS)","volume":"52 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-06-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127669228","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 52
Completion Time Minimization in Multi-User Task Scheduling with Heterogeneous Processors and Budget Constraints 具有异构处理器和预算约束的多用户任务调度的完成时间最小化
Pub Date : 2018-06-01 DOI: 10.1109/IWQoS.2018.8624150
S. Sundar, J. Champati, B. Liang
We study task scheduling and offloading in a cloud computing system with multiple users, where tasks have different processing times, release times, communication times, and weights. Each user may schedule a task locally or offload it to a finite-capacity shared cloud with heterogeneous processors by paying a price for the resource usage. Our work aims at identifying a task scheduling decision that minimizes the weighted sum completion time of all tasks, while satisfying the users' budget constraints. We propose an efficient solution framework for this NP-hard problem. As a first step, we solve an integer-relaxed problem and use a rounding technique to obtain an integer solution that is a constant factor approximation to the minimum weighted sum completion time. This solution violates the budget constraints, but the average budget violation decreases as the number of users increases. Thus, we develop a scalable Single-Task Unload for Budget Resolution (STUBR) algorithm, which resolves budget violations and orders the tasks to reduce the weighted sum completion time. Our trace-driven simulation shows that STUBR exhibits robust performance under practical scenarios and outperforms several alternatives.
我们研究了一个多用户云计算系统中的任务调度和卸载,其中任务具有不同的处理时间、释放时间、通信时间和权重。每个用户可以在本地调度任务,也可以通过为资源使用付费,将任务卸载到具有异构处理器的有限容量共享云中。我们的工作旨在确定一种任务调度决策,使所有任务的加权完成时间总和最小,同时满足用户的预算约束。我们提出了一个有效的NP-hard问题的解决框架。作为第一步,我们解决了一个整数松弛问题,并使用舍入技术得到一个整数解,该解是最小加权和完成时间的常数因子近似值。这种解决方案违反了预算约束,但平均违反预算的情况会随着用户数量的增加而减少。因此,我们开发了一种可扩展的单任务卸载预算解决(STUBR)算法,该算法解决预算违规并对任务进行排序以减少加权和完成时间。我们的跟踪驱动仿真表明,STUBR在实际场景下表现出强大的性能,并且优于几种替代方案。
{"title":"Completion Time Minimization in Multi-User Task Scheduling with Heterogeneous Processors and Budget Constraints","authors":"S. Sundar, J. Champati, B. Liang","doi":"10.1109/IWQoS.2018.8624150","DOIUrl":"https://doi.org/10.1109/IWQoS.2018.8624150","url":null,"abstract":"We study task scheduling and offloading in a cloud computing system with multiple users, where tasks have different processing times, release times, communication times, and weights. Each user may schedule a task locally or offload it to a finite-capacity shared cloud with heterogeneous processors by paying a price for the resource usage. Our work aims at identifying a task scheduling decision that minimizes the weighted sum completion time of all tasks, while satisfying the users' budget constraints. We propose an efficient solution framework for this NP-hard problem. As a first step, we solve an integer-relaxed problem and use a rounding technique to obtain an integer solution that is a constant factor approximation to the minimum weighted sum completion time. This solution violates the budget constraints, but the average budget violation decreases as the number of users increases. Thus, we develop a scalable Single-Task Unload for Budget Resolution (STUBR) algorithm, which resolves budget violations and orders the tasks to reduce the weighted sum completion time. Our trace-driven simulation shows that STUBR exhibits robust performance under practical scenarios and outperforms several alternatives.","PeriodicalId":222290,"journal":{"name":"2018 IEEE/ACM 26th International Symposium on Quality of Service (IWQoS)","volume":"100 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-06-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132387259","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
SWAM: SDN-Based Wi-Fi Small Cells with Joint Access-Backhaul and Multi-Tenant Capabilities SWAM:基于sdn的Wi-Fi小型蜂窝,具有联合访问回程和多租户功能
Pub Date : 2018-04-19 DOI: 10.1109/IWQoS.2018.8624129
Matteo Grandi, D. Camps-Mur, A. Betzler, Joan Josep Aleixendri, Miguel Catalan-Cid
In this paper we present SWAM, a system that builds on commodity Wi-Fi routers with multiple wireless interfaces to provide a wireless access infrastructure supporting multi-tenancy, mobility, and integrated wireless access and backhaul. An infrastructure provider can deploy inexpensive SWAM nodes to cover a given geographical area providing on-demand connectivity for Mobile Network Operators. Our main contribution is the design of the SWAM datapath and control plane, which are inspired by the overlay techniques used to enable multi-tenancy in data-center networks. We prototype SWAM in an office wireless testbed and validate experimentally its functionality.
在本文中,我们介绍了SWAM,一个建立在具有多个无线接口的商品Wi-Fi路由器上的系统,以提供支持多租户、移动性和集成无线访问和回程的无线访问基础设施。基础设施提供商可以部署廉价的SWAM节点,覆盖给定的地理区域,为移动网络运营商提供按需连接。我们的主要贡献是设计了SWAM数据路径和控制平面,其灵感来自于用于在数据中心网络中启用多租户的覆盖技术。我们在办公室无线测试台上对SWAM进行了原型设计,并对其功能进行了实验验证。
{"title":"SWAM: SDN-Based Wi-Fi Small Cells with Joint Access-Backhaul and Multi-Tenant Capabilities","authors":"Matteo Grandi, D. Camps-Mur, A. Betzler, Joan Josep Aleixendri, Miguel Catalan-Cid","doi":"10.1109/IWQoS.2018.8624129","DOIUrl":"https://doi.org/10.1109/IWQoS.2018.8624129","url":null,"abstract":"In this paper we present SWAM, a system that builds on commodity Wi-Fi routers with multiple wireless interfaces to provide a wireless access infrastructure supporting multi-tenancy, mobility, and integrated wireless access and backhaul. An infrastructure provider can deploy inexpensive SWAM nodes to cover a given geographical area providing on-demand connectivity for Mobile Network Operators. Our main contribution is the design of the SWAM datapath and control plane, which are inspired by the overlay techniques used to enable multi-tenancy in data-center networks. We prototype SWAM in an office wireless testbed and validate experimentally its functionality.","PeriodicalId":222290,"journal":{"name":"2018 IEEE/ACM 26th International Symposium on Quality of Service (IWQoS)","volume":"112 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-04-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131677805","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 5
期刊
2018 IEEE/ACM 26th International Symposium on Quality of Service (IWQoS)
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1