會議論文;;Conferences Paper

Permanent URI for this collectionhdl:11536/14

Browse

Now showing 1 - 4 of 4

ARNAB: Transparent Service Continuity across Orchestrated Edge Networks
(2018-01-01)
Abdullaziz, Osamah Ibrahiem
;
Wang, Li-Chun
;
Chundrigar, Shahzoob Bilal
;
Huang, Kuei-Li
;
電機工程學系
In this paper, we present an architecture for transparent service continuity for cloud-enabled WiFi networks called ARNAB: ARchitecture for traNsparent service continuity viA douBle-tier migration. The term arnab means rabbit in Arabic. It is dubbed for the proposed service architecture because a mobileuser service with ARNAB behaves like a rabbit hopping through the WiFi infrastructure. To deliver continuous services, deploying edge clouds is not sufficient. Users may travel far from the initial serving edge and also perform multiple WiFi handoffs during mobility. To solve this, ARNAB employs a double-tier migration scheme. One migration tier is for user connectivity, and the other one is for edge applications. Our experimental results show that ARNAB can not only enable continuous service delivery but also outperform the existing work in the area of container live migration across edge clouds.
Lightweight Authentication Mechanism for Software Defined Network using Information Hiding
(2016-01-01)
Abdullaziz, Osamah Ibrahiem
;
Chen, Yu-Jia
;
Wang, Li-Chun
;
電機工程學系
;
Department of Electrical and Computer Engineering
Software defined network (SDN) is an emerging network architecture which offloads the control logic of the network from the underlying forwarding devices to a centralized controller. This centralized control intelligence software defines the behavior of the network. However, the programmability and centralization of the SDN architecture introduce potential security concerns. In this paper, we first investigate the threats of denial of service (DoS) attacks on the SDN control channel. Then, we evaluate the impact of DoS by simulating a DoS attack against the network controller. Our results show that it is possible to exhaust the controller resources in the absence of an authentication mechanism. Finally, we propose a lightweight information hiding authentication mechanism to prevent DoS attacks in the SDN control channel.
Mitigating DoS Attacks against SDN Controller Using Information Hiding
(2019-01-01)
Abdullaziz, Osamah Ibrahiem
;
Wang, Li-Chun
;
電機工程學系
;
Department of Electrical and Computer Engineering
Because of SDN centralization nature, denial of service (DoS) attacks have become a prominent concern. In the OpenFlow (OF) protocol, the transport layer security (TLS) protocol is recommended to secure the control channel. Unfortunately, the tasks involved in the proper configuration of a secured TLS are very challenging. Even worse, TLS is made an optional mode of communication in OF. As a consequence, some OF-enabled switches and controllers do not adopt TLS. In this paper, we develop a lightweight authentication mechanism, called Hidden Authentication (HiAuth), to protect SDN controller against DoS attacks. HiAuth legitimizes SDN forwarding devices by hiding authentication information into the header of control channel packets. Our experimental results prove that HiAuth is lightweight and can not only mitigate DoS attacks, but also provide high undetectability to the attacker.
Opportunities and Challenges of Joint Edge and Fog Orchestration
(2018-01-01)
Cominardi, Luca
;
Abdullaziz, Osamah Ibrahiem
;
Antevski, Kiril
;
Chundrigar, Shahzoob Bilal
;
Gdowski, Robert
Pushing contents, applications, and network functions closer to end users is necessary to cope with the huge data volume and low latency required in future 5G networks. Edge and fog frameworks have emerged recently to address this challenge. Whilst the edge framework was more infrastructure-focused and more mobile operator-oriented, the fog was more pervasive and included any node (stationary or mobile), including terminal devices. This article analyzes the opportunities and challenges to integrate, federate, and jointly orchestrate the edge and fog resources into a unified framework.