Dr Taimur Bakhshi MBCS MIEEE AFHEA
Brief biographical firstname.lastname@example.org
User-Centric Traffic engineering in Software Defined Networks
Software defined networking (SDN) is a relatively new paradigm that decouples individual network elements from the control logic, offering real-time network programmability, translating high level policy abstractions into low level device configurations. The framework comprises of the data (forwarding) plane incorporating network devices, while the control logic and network services reside in the control and application planes respectively. Operators can optimize the network fabric to yield performance gains for individual applications and services utilizing flow metering and application-awareness, the default traffic management method in SDN. Existing approaches to traffic optimization, however, do not explicitly consider user application trends. Recent SDN traffic engineering designs either offer improvements for typical time-critical applications or focus on devising monitoring solutions aimed at measuring performance metrics of the respective services. The performance caveats of isolated service differentiation on the end users may be substantial considering the growth in Internet and network applications on offer and the resulting diversity in user activities. Application-level flow metering schemes therefore, fall short of fully exploiting the real-time network provisioning capability offered by SDN instead relying on rather static traffic control primitives frequent in legacy networking.Dr Taimur Bakhshi
For individual users, SDN may lead to substantial improvements if the framework allows operators to allocate resources while accounting for a user-centric mix of applications. This project explored the user traffic application trends in different network environments and proposed a novel user traffic profiling framework to aid the SDN control plane (controller) in accurately configuring network elements for a broad spectrum of users without impeding specific application requirements. Predominant existing segregated application policy based controls in SDN do not consider the cost of isolated application gains on parallel SDN services and resulting consequence for users having varying application usage. Therefore, attention was given to investigating techniques which may capture the user behaviour for possible integration in SDN traffic controls. To this end, profiling of user application traffic trends was identified as a technique which may offer insight into the inherent diversity in user activities and offer possible incorporation in SDN based traffic engineering.
A series of subsequent user traffic profiling studies were carried out in this regard employing network flow statistics collected from residential and enterprise network environments. Utilizing machine learning techniques including the prominent unsupervised k-means cluster analysis, user generated traffic flows were cluster analysed and the derived profiles in each networking environment were benchmarked for stability before integration in SDN control solutions. In parallel, a novel flow-based traffic classifier was designed to yield high accuracy in identifying user application flows and the traffic profiling mechanism was automated.
The core functions of the novel user-centric traffic engineering solution were validated by the implementation of traffic profiling based SDN network control applications in residential, data center and campus based SDN environments. A series of simulations highlighting varying traffic conditions and profile based policy controls were designed and evaluated in each network setting using the traffic profiles derived from realistic environments to demonstrate the effectiveness of the traffic management solution. The overall network performance metrics per profile showed substantive gains, proportional to operator defined user profile prioritization policies despite high traffic load conditions. The proposed user-centric SDN traffic engineering framework therefore, dynamically provisions data plane resources among different user traffic classes (profiles), capturing user behaviour to define and implement network policy controls, going beyond isolated application management.
Director of studies: Dr Bogdan V Ghita
Other supervisors: Dr David Lancaster
On Internet Traffic Classification: A Two-Phased Machine Learning Approach
Social engineering: assessing vulnerabilities in practice
2 Journal papers
Traffic profiling: Evaluating stability in multi-device user environments
User-centric traffic optimization in residential software defined networks
User-Centric Network Provisioning in Software Defined Data Center Environment
A Practical Assessment of Social Engineering Vulnerabilities
4 Conference papers
Social Engineering Vulnerabilities
1 Internal publications
7 publication(s) - all categories.