This paper proposes a novel online coordination method for the charging of plug-in electric vehicles (PEVs) in smart distribution networks. The goal of the proposed method is to optimally charge the PEVs in order to maximize the PEV owners' satisfaction and to minimize system operating costs without violating power system constraints. Unlike the solutions reported in the literature, the proposed charging architecture guarantees the feasibility of the charging decisions by means of a novel prediction unit that can forecast future PEVs power demand and through an innovative two-stage optimization unit that ensures effective charging coordination. Coordinated PEV discharging also enables improved utilization of power system resources. Simulation results for a typical distribution network are provided as a demonstration of the effectiveness of the proposed architecture.

/pdf/real-time-pev-charging-discharging-coordination-in-smart-4rp8bli0og.pdf

Real-Time PEV Charging/Discharging Coordination in Smart Distribution Systems

Information centric networking (ICN) and software-defined networking (SDN) are two emerging networking paradigms that promise to solve different aspects of networking problems. ICN is a clean-slate design for accommodating the ever increasing growth of the Internet traffic by regarding content as the network primitive, adopting in-network caching, and name-based routing, while SDN focuses on agile and flexible network management by decoupling network control logic from data forwarding. ICN and SDN have gained significant research attention separately in the most of the previous work. However, the features of ICN have profound impacts on the design and operation of SDN, such as in-network caching and data-centric security. Conversely, SDN provides a powerful tool for experimenting and deploying ICN architectures and can greatly facilitate ICN functionality and management. In this paper, we point out the necessity of surveying the scattered works on integrating SDN and ICN (SD-ICN) for improving operational networks. Specifically, we analyze the points of SD-ICN strengths and opportunities, and discuss the SDN enablers for deploying ICN architectures. In addition, we review and classify the recent work on improving the network management by SD-ICN and discuss the potential security benefits of SD-ICN. Finally, a number of open issues and future trends are highlighted.

Software Defined Networking Meets Information Centric Networking: A Survey

In this paper, radio resource allocation in a heterogeneous wireless access medium is investigated. Mobile terminals (MTs) are equipped with multiple radio interfaces and are assumed to have multi-homing capabilities. A novel algorithm, namely prediction based resource allocation algorithm, is proposed for the resource allocation. Unlike the existing solutions in literature, the proposed algorithm does not require a central resource manager to perform the radio resource allocation. The MT plays an active role in the resource allocation operation by requesting a bandwidth share from each available network based on the available resources at the network, such that the total allocated bandwidth from different networks satisfies the MT service requirement. The proposed algorithm is suitable for implementation in a dynamic environment with call arrivals and departures, and relies on network cooperation to perform the decentralized radio resource allocation in an efficient manner. Simulation results are presented to investigate the performance tradeoffs of the proposed algorithm.

/pdf/cooperative-decentralized-resource-allocation-in-4n44pdj4cp.pdf

Cooperative Decentralized Resource Allocation in Heterogeneous Wireless Access Medium

DNS tunnels allow circumventing access and security policies in firewalled networks. Such a security breach can be misused for activities like free web browsing, but also for command & control traffic or cyber espionage, thus motivating the search for effective automated DNS tunnel detection techniques. In this paper we develop such a technique, based on the monitoring and analysis of network flows. Our methodology combines flow information with statistical methods for anomaly detection. The contribution of our paper is twofold. Firstly, based on flow-derived variables that we identified as indicative of DNS tunnelling activities, we identify and evaluate a set of non-parametrical statistical tests that are particularly useful in this context. Secondly, the efficacy of the resulting tests is demonstrated by extensive validation experiments in an operational environment, covering many different usage scenarios.

/pdf/flow-based-detection-of-dns-tunnels-pm1mbqk5ie.pdf

Flow-Based detection of DNS tunnels

In this work, we present P4-IPsec, a concept for IPsec in software-defined networks (SDN) using P4 programmable data planes. The prototype implementation features ESP in tunnel mode and supports different cipher suites. P4-capable switches are programmed to serve as IPsec tunnel endpoints. We also provide a client agent to configure tunnel endpoints on Linux hosts so that site-to-site and host-to-site application scenarios can be supported which are the base for virtual private networks (VPNs). While traditional VPNs require complex key exchange protocols like IKE to set up and renew tunnel endpoints, P4-IPsec benefits from an SDN controller to accomplish these tasks. One goal of this experimental work is to investigate how well P4-IPsec can be implemented on existing P4 switches. We present a prototype for the BMv2 P4 software switch, evaluate its performance, and publish its source code on GitHub [1] . We explain why we could not provide a useful implementation with the NetFPGA SUME board. For the Edgecore Wedge 100BF-32X Tofino-based switch, we presented two prototype implementations to cope with a missing crypto unit. As another contribution of this paper, we provide technological background of P4 and IPsec and give a comprehensive review of security applications in P4, IPsec in SDN, and IPsec data plane implementations. According to our knowledge, P4-IPsec is the first implementation of IPsec for P4-based SDN.

/pdf/p4-ipsec-site-to-site-and-host-to-site-vpn-with-ipsec-in-p4-4ivt272iyi.pdf

P4-IPsec: Site-to-Site and Host-to-Site VPN With IPsec in P4-Based SDN

Named-Data Networking (NDN) is proposed as an approach to evolve the Internet infrastructure from a host- to an information-centric (ICN) approach, which is better suited to the current usage of the Internet. However, the deployment of a global NDN-based Internet is still a long way out of reach. The most likely scenario for a global NDN network will be the one based on NDN 'islands' or domains, where interior forwarding and routing of packets is based on NDN principles. The interconnection of NDN domains involves human configuration to set up IP tunnels, implying an unscalable, tedious and error-prone process resulting in static configuration incapable of reacting to ad-hoc requirements or network changes. Leveraging the flexibility of Software-Defined Networking (SDN) can solve aforementioned problems. Due to its dynamic nature, SDN can automatically recognize an NDN service and instruct switches to set up the configuration for actual service deployment. Such a solution significantly eases the deployment of NDN networks. In this paper, we propose a hybrid solution where we combine Software-Defined Networking, more specifically OpenFlow, and eBPF to perform control plane configuration and data plane programmability respectively, to realize connectivity within and across NDN domains. To do so, we have designed eBPF filters that match on NDN traffic, extended the OpenFlow protocol to configure switch data planes with these match filters and enhanced an OpenFlow switch to act accordingly. Our OpenFlow controller written for Ryu performs routing on NDN names and configures switches correspondingly. Additionally, our controller detects NDN domains and sets up IP tunnels between them. Our evaluation shows that our proof-of-concept on, among others, the SciNet testbed autoconfigures an NDN network, successfully providing end-to-end NDN network functionality across multiple domains.

https://dl.acm.org/doi/pdf/10.1145/3125719.3125729

Facilitating ICN deployment with an extended openflow protocol

Assessment of SDN technology for an easy-to-use VPN service

When controlling communication networks, it is of crucial importance to have procedures that are capable of checking whether there are unanticipated load changes. In this paper we develop techniques for detecting such load changes, in a setting in which each connection consumes roughly the same amount of bandwidth (with VoIP as a leading example). For the situation of exponential holding times an explicit analysis can be performed in a large-deviations regime, leading to approximations of the test statistic of interest (and, in addition, to results for the transient of the M/M/1 queue, which are of independent interest). This procedure being applicable to exponential holding times only, and also being numerically rather involved, we then develop an approximate procedure for general holding times. In this procedure we record the number of trunks occupied at equidistant points in time delta, 2 delta, . . ., where delta is chosen sufficiently large to safely assume that the samples are independent; this procedure is backed by results on the transient of the M/G/infinity queue, thus complementing earlier results on relaxation times. The validity of the testing procedures is demonstrated through an extensive set of numerical experiments.

M/G/infinity transience, and its applications to overload detection

Network traffic is known to present fractal characteristics such as LRD, which can be efficiently measured with wavelet transforms. Current methods of estimation of fractal parameters, such as the LogScale diagram, are not able to track the changes of the parameters. This paper proposes and studies the combined use of wavelet transforms (DWT, MODWT, DTWT) and change-point detection algorithms (ICSS, SIC) in order to detect the instants when fractality changes noticeably. The different approaches are contrasted and statistical assessment is provided, together with the results of the procedure when applied to synthetic traces.

Wavelet transforms and change-point detection algorithms for tracking network traffic fractality

In this paper we present methodological advances in anomaly detection, which, among other purposes, can be used to discover abnormal traffic patterns under the presence of deterministic trends in data, given that specific assumptions about the traffic type and nature are met. A performance study of the proposed methods, both if these assumptions are fulfilled and violated, shows good results in great generality. Our study features VoIP call counts, but the methodology can be applied to any data following, at least roughly, a non-homogeneous Poisson process (think of highly aggregated traffic flows).

Piotr Zuraniewski

Papers

Facilitating ICN deployment with an extended openflow protocol

Assessment of SDN technology for an easy-to-use VPN service

M/G/infinity transience, and its applications to overload detection

Wavelet transforms and change-point detection algorithms for tracking network traffic fractality

Anomaly detection in VoIP traffic with trends