Content Delivery Optimization for Hybrid Satellite Networks

The thesis aims to investigate a hybrid network in which a Satellite overlay cooperates with a pre-existing CDN terrestial network. A new method of popularity generation along with a hybrid placement algorithm are presented in order to optimize QoE perceived by users ans bandwidth consumption. Performance is evaluated in terms of hit ratio and time placement. The hybrid approach shows significant improvements compared to the single terrestrial or satellite network

Measuring and Disrupting Malware Distribution Networks: An Interdisciplinary Approach

Malware Delivery Networks (MDNs) are networks of webpages, servers, computers, and computer files that are used by cybercriminals to proliferate malicious software (or malware) onto victim machines. The business of malware delivery is a complex and multifaceted one that has become increasingly profitable over the last few years. Due to the ongoing arms race between cybercriminals and the security community, cybercriminals are constantly evolving and streamlining their techniques to beat security countermeasures and avoid disruption to their operations, such as by security researchers infiltrating their botnet operations, or law enforcement taking down their infrastructures and arresting those involved. So far, the research community has conducted insightful but isolated studies into the different facets of malicious file distribution. Hence, only a limited picture of the malicious file delivery ecosystem has been provided thus far, leaving many questions unanswered. Using a data-driven and interdisciplinary approach, the purpose of this research is twofold. One, to study and measure the malicious file delivery ecosystem, bringing prior research into context, and to understand precisely how these malware operations respond to security and law enforcement intervention. And two, taking into account the overlapping research efforts of the information security and crime science communities towards preventing cybercrime, this research aims to identify mitigation strategies and intervention points to disrupt this criminal economy more effectively

A framework for the dynamic management of Peer-to-Peer overlays

Peer-to-Peer (P2P) applications have been associated with inefficient operation, interference with other network services and large operational costs for network providers. This thesis presents a framework which can help ISPs address these issues by means of intelligent management of peer behaviour. The proposed approach involves limited control of P2P overlays without interfering with the fundamental characteristics of peer autonomy and decentralised operation. At the core of the management framework lays the Active Virtual Peer (AVP). Essentially intelligent peers operated by the network providers, the AVPs interact with the overlay from within, minimising redundant or inefficient traffic, enhancing overlay stability and facilitating the efficient and balanced use of available peer and network resources. They offer an “insider‟s” view of the overlay and permit the management of P2P functions in a compatible and non-intrusive manner. AVPs can support multiple P2P protocols and coordinate to perform functions collectively. To account for the multi-faceted nature of P2P applications and allow the incorporation of modern techniques and protocols as they appear, the framework is based on a modular architecture. Core modules for overlay control and transit traffic minimisation are presented. Towards the latter, a number of suitable P2P content caching strategies are proposed. Using a purpose-built P2P network simulator and small-scale experiments, it is demonstrated that the introduction of AVPs inside the network can significantly reduce inter-AS traffic, minimise costly multi-hop flows, increase overlay stability and load-balancing and offer improved peer transfer performance

Journal of Telecommunications and Information Technology, 2004, nr 2

kwartalni

Design of Overlay Networks for Internet Multicast - Doctoral Dissertation, August 2002

Multicast is an efficient transmission scheme for supporting group communication in networks. Contrasted with unicast, where multiple point-to-point connections must be used to support communications among a group of users, multicast is more efficient because each data packet is replicated in the network – at the branching points leading to distinguished destinations, thus reducing the transmission load on the data sources and traffic load on the network links. To implement multicast, networks need to incorporate new routing and forwarding mechanisms in addition to the existing are not adequately supported in the current networks. The IP multicast are not adequately supported in the current networks. The IP multicast solution has serious scaling and deployment limitations, and cannot be easily extended to provide more enhanced data services. Furthermore, and perhaps most importantly, IP multicast has ignored the economic nature of the problem, lacking incentives for service providers to deploy the service in wide area networks. Overlay multicast holds promise for the realization of large scale Internet multicast services. An overlay network is a virtual topology constructed on top of the Internet infrastructure. The concept of overlay networks enables multicast to be deployed as a service network rather than a network primitive mechanism, allowing deployment over heterogeneous networks without the need of universal network support. This dissertation addresses the network design aspects of overlay networks to provide scalable multicast services in the Internet. The resources and the network cost in the context of overlay networks are different from that in conventional networks, presenting new challenges and new problems to solve. Our design goal are the maximization of network utility and improved service quality. As the overall network design problem is extremely complex, we divide the problem into three components: the efficient management of session traffic (multicast routing), the provisioning of overlay network resources (bandwidth dimensioning) and overlay topology optimization (service placement). The combined solution provides a comprehensive procedure for planning and managing an overlay multicast network. We also consider a complementary form of overlay multicast called application-level multicast (ALMI). ALMI allows end systems to directly create an overlay multicast session among themselves. This gives applications the flexibility to communicate without relying on service provides. The tradeoff is that users do not have direct control on the topology and data paths taken by the session flows and will typically get lower quality of service due to the best effort nature of the Internet environment. ALMI is therefore suitable for sessions of small size or sessions where all members are well connected to the network. Furthermore, the ALMI framework allows us to experiment with application specific components such as data reliability, in order to identify a useful set of communication semantic for enhanced data services

Physical Layer Aware Optical Networks

This thesis describes novel contributions in the field of physical layer aware optical networks. IP traffic increase and revenue compression in the Telecom industry is putting a lot of pressure on the optical community to develop novel solutions that must both increase total capacity while being cost effective. This requirement is pushing operators towards network disaggregation, where optical network infrastructure is built by mix and match different physical layer technologies from different vendors. In such a novel context, every equipment and transmission technique at the physical layer impacts the overall network behavior. Hence, methods giving quantitative evaluations of individual merit of physical layer equipment at network level are a firm request during network design phases as well as during network lifetime. Therefore, physical layer awareness in network design and operation is fundamental to fairly assess the potentialities, and exploit the capabilities of different technologies. From this perspective, propagation impairments modeling is essential. In this work propagation impairments in transparent optical networks are summarized, with a special focus on nonlinear effects. The Gaussian Noise model is reviewed, then extended for wideband scenarios. To do so, the impact of polarization mode dispersion on nonlinear interference (NLI) generation is assessed for the first time through simulation, showing its negligible impact on NLI generation. Thanks to this result, the Gaussian Noise model is generalized to assess the impact of space and frequency amplitude variations along the fiber, mainly due to stimulated Raman scattering, on NLI generation. The proposed Generalized GN (GGN) model is experimentally validated on a setup with commercial linecards, compared with other modeling options, and an example of application is shown. Then, network-level power optimization strategies are discussed, and the Locally Optimization Global Optimization (LOGO) approach reviewed. After that, a novel framework of analysis for optical networks that leverages detailed propagation impairment modeling called the Statistical Network Assessment Process (SNAP) is presented. SNAP is motivated by the need of having a general framework to assess the impact of different physical layer technologies on network performance, without relying on rigid optimization approaches, that are not well-suited for technology comparison. Several examples of applications of SNAP are given, including comparisons of transceivers, amplifiers and node technologies. SNAP is also used to highlight topological bottlenecks in progressively loaded network scenarios and to derive possible solutions for them. The final work presented in this thesis is related to the implementation of a vendor agnostic quality of transmission estimator for multi-vendor optical networks developed in the context of the Physical Simulation Environment group of the Telecom Infra Project. The implementation of a module based on the GN model is briefly described, then results of a multi-vendor experimental validation performed in collaboration with Microsoft are shown