| Time / Zeit |
Room / Raum |
Type, Speaker, Topic /
Typ, Redner, Thema |
| 4th
quarter of 2006 |
|
20. Dec. 2006
16:00–18:00
|
Munich: FMI 01.08.035
Berlin: Spirit
|
PGT:
Marius
Thammer
Propagating Multiple Best Paths in the Border
Gateway Protocol
The Border Gateway Protocol (BGP) is the
most commonly used instrument to exchange reachability
information between networking nodes in the Internet. Currently
BPG operates by propagating only one best path
towards neighbouring routers in order to keep the Internet
scalable. However this single path propagation comes at the
cost of reducing the number of alternative paths available to
the autonomous systems (AS). Research attaches
great importance to being able to advance BGP to
propagate multiple paths towards neighbouring routers.
As there is currently no working implementation of
BGP propagating multiple best paths in existence,
we summarise requirements and propose a selection of metrics to
enable BGP to propagate multiple paths. We develop
a set of experiments to verify and validate implementations of
multiple path propagation within BGP via testing
the protocol against the following factors: topology; number
of paths to propagate; different decision processes; and the
impact of policies. Last, but not least, we analyse the existing
diversity of paths in networking nodes by examining the number
of paths; the disjointness of paths; the impact of a possible
multiple path propagation; and the influence of commonly used
policies on the diversity of paths.
[PDF] Presentation;
[PDF] Handout
|
|
13. Dec. 2006
16:00–18:00
|
Munich: FMI 01.08.035
Berlin: Spirit
|
PGT:
Hugh
Dollman
Secure web based control of a distributed
simulation system and dynamic resolution adaptation of simulation
experiments
For a high-resolution analysis of simulation models it is
often necessary to execute simulation experiments consisting of
a large amount of simulation runs. Such simulation experiments
may consume substantial computational time, even when a simple
model is used, and therefore can often only be successfully
computed using a super-computer or by distributing the
computation of the simulation experiment on a network of PCs,
often referred to as a cluster or a grid.
As part of my thesis, a web based system has been developed
to interact with a simulation system, enabling users to start
simulations and retrieve simulation results securely through the
internet. Users with administrative permission are able to see
all simulation activity and to perform administrative tasks.
Furthermore an analysis method will be conceptualised to
detect "interesting" regions within the model parameter space,
with the goal of increasing the experiment resolution in these
regions. In this final presentation, I will describe and present
the concepts developed for the application to manage and
control simulation experiments and explain the method which was
conceptualised to detect interesting regions within the model
parameter space.
[PDF] Presentation
|
|
29. Nov. 2006
16:00–18:00 |
Munich: FMI 01.08.035
Berlin: Spirit
|
PGT:
Nils
Kammenhuber
REPLEX—Dynamic Traffic
Engineering Based on Wardrop Routing Policies
One major challenge in communication networks is the
problem of dynamically distributing load in the presence of
bursty and hard to predict changes in traffic demands. Current
traffic engineering operates on time scales of several hours
which is too slow to react to phenomena like flash crowds or
BGP reroutes.
One possible solution is to use load sensitive routing. Yet,
interacting routing decisions at short time scales can lead to
oscillations, which has prevented load sensitive routing from
being deployed since the early experiences in Arpanet.
However, recent theoretical results have devised a game
theoretical re-routing policy that provably avoids such
oscillation and in addition can be shown to converge quickly.
In this paper we present ReplEx, a distributed dynamic traffic
engineering algorithm based on this policy. Exploiting the
fact that most underlying routing protocols support multiple
equal-cost routes to a destination, it dynamically changes the
proportion of traffic that is routed along each path. These
proportions are carefully adapted utilising information from
periodic measurements and, optionally, information exchanged
between the routers about the traffic condition along the
path.
We evaluate the algorithm via simulations employing traffic
loads that mimic actual Web traffic, i.e.,
bursty TCP traffic, and whose characteristics
are consistent with self-similarity. The simulations quickly
converge and do not exhibit significant oscillations on both
artificial as well as real topologies, as can be expected from
the theoretical results.
[PDF]
Presentation; [PDF]
Paper
|
|
21. Nov. 2006
16:00–18:00
|
Munich: FMI 01.08.035
Berlin: Spirit
|
PGT:
Matthias
Vallentin
RAID 2006 – Recent
Advances in Intrusion Detection
This talk summarizes the annual
RAID conference, bringing together leading
researchers and practitioners from academia, government, and
industry to discuss issues and technologies related to intrusion
detection and defense. After introducing the current global trends
in computer security, key insights of various talks from each
session are outlined.
[PDF] Presenation
|
|
14. Nov. 2006
16:00–18:00
|
Munich: FMI 01.08.035
Berlin: Spirit
|
PGT:
Eugen
Rogoza
Cooperative IP Mobility – A
Hybrid Design
Although there exists an official standard for
Mobile-IP (RFC 2002), its outing
scheme and timing parameters prevent a widespread use in modern
IP networks. Even today, despite all optimizations,
Mobile-IP remains widely undeployed. The goal of
my master thesis is to design, implement, and test a hybrid
IP mobility mechanism based on numerous improvement
suggestions of recent years. It's primary features are cooperative
foreign agents, preservation of existing connections as well as
fast Layer-3 handovers. The introduced protocol is supposed to be
deployed mainly for wireless networks, though adaptation to other
carrier media is also possible.
[PDF] Slides/Folien
|
|
10. Nov. 2006
15:30–17:30
|
Berlin: Spirit
Munich: FMI 01.08.035
|
The explosion of
internet traffic is leading to higher bandwidths and an increased
need for high speed networks. To analyze and optimize such networks
an efficient monitoring system is required. The sFlow standard
describes a mechanism to capture traffic data in switched or routed
networks. It uses a sampling technology to collect statistics
from the device and is for this reason applicable to high speed
connections (at gigabit speeds or higher).
[PDF] Slides/Folien
|
|
7. Nov. 2006
16:00–18:00
|
Munich: FMI 01.08.035
Berlin: Spirit
|
PGT:
Andreas Wundsam
Connection Sharing in Community Networks –
How to accomodate peak bandwidth demands
This diploma thesis aims to implement and
evaluate a working prototype for a peer-to-peer system that allows
moderately provisioned Internet access users to collaborately
bundle their resources to improve their Internet performance,
as based on a proposal by Anja Feldmann and Vlad Manilici.
Emphasis will be placed on designing a realistic system that
does not require infrastructure changes. Typical home user
internet connections should suffice, and no dedicated network
infrastructure outside of the community network concerned has to
be installed (e.g., an acces concentrator on the
backbone). However, the system should still provide benefits to
the end user that are substantial enough to pay off the burdens
of the installation. In this talk, I will describe the proposed
peer-to-peer system, as well as the architectural approach taken
to implement the solution. An important aspect will be the network
topology, metrics and measuring techniques used to evaluate the
solution.
[PDF] Slides/Folien;
[PDF] Handout
|
|
31. Oct. 2006
16:00–18:00
|
Munich: FMI 01.08.035
Berlin: Spirit
|
PGT:
Gunnar
Bornemann
BGP Alarmsystem (Antrittsvortrag
zur Diplomarbeit, Talk will be held in german)
Der Vortrag behandelt die Analyse und Bewertung von
BGP-Daten, die der Lehrstuhl von den Border-Routern
des AS SpaceNet bekommt.
Im theoretischen Teil der Arbeit soll geklärt
werden, welche Informationen man überhaupt aus
BGP-Daten beziehen kann und ob damit Topologie-
oder Konfigurationsänderungen nachvollzogen und Fehler bzw.
Fehlkonfigurationen erkannt und deren Ursache eingegrenzt werden
kann. Zusätzlich zu den Daten der Border-Router, die eine
Sicht auf das AS von "Innen" ermöglichen,
liefern die Looking Glas Server von z.B. RIPE
eine Sicht auf das AS von "Außen", und aus dem
Vergleich dieser Sichtweisen lassen sich weitere Erkenntnisse
über die Vorgänge im AS beziehen.
Im praktischen Teil soll ein kleines System erstellt
werden, welches den Netzadministrator über wichtige,
ausgewählte Vorgänge und Veränderungen sofort
informiert. Unkritische Ereignisse sollen für den Admin
in einer Tageszusammenfassung dokumentiert werden. Ziel ist
hierbei die Menge an gesammelten Daten nach geeigneten Kriterien
zu filtern und in einer für diesen Zweck sinnvollen Form
dazustellen.
[PDF] Slides/Folien
|
|
24. Oct. 2006
16:00–18:00
|
Munich: FMI 01.08.035
Berlin: Spirit
|
PGT:
Rumen Tashev
Experimenting with Neighbour Discovery Schemes for
P2P Networks in a Simulation Framework
Lately, peer-to-peer
(P2P) networks have gained a lot of attention from
the research community. Much work has been done investigating
different properties of those systems. P2P protocols
have evolved over time, making networks more stable, resistant to
attacks, reachable, etc. Now people are investigating the impact of
such systems on the Internet, its users and the Internet Service
Providers (ISPs).
[PDF] Diplom thesis,
[PDF] Presentation
|
|
10. Oct. 2006
16:00–18:00
|
Munich: FMI 01.08.035
Berlin: Spirit
|
PGT:
Zhi Qui
AS Path-Prepending in the Internet and its impact
on Routing Decisions
AS-path prepending is a common method to influence BGP routing
decision. By prepending the local ASN multiple times, ASes can
make advertised AS paths appear artificially longer.
Analyzing data from BGP table dumps, we try to shed light on
the importance of AS-path prepending in the Internet. Simple
experiments are supposed to study how observed prependings can be
integrated into interdomain-routing models of the Internet.
[PDF] Slides/Folien
|
| 3rd
quarter of 2006 |
|
22. Sept. 2006
15:00–17:00
|
Munich: FMI 01.08.035
Berlin: Spirit
|
PGT:
Hugh
Dollman
Secure web based control of a distributed
simulation system and dynamic resolution adaptation of simulation
experiments
For a high-resolution analysis of simulation models it is
often necessary to execute simulation experiments consisting of a
large amount of simulation runs. Such simulation experiments may
consume substantial computational time, even when a simple model
is used, and therefore can often only be successfully computed
using a super-computer or by distributing the computation of the
simulation experiment on a network of PCs, often referred to as a
cluster or a grid.
As part of my thesis, a web based system has been developed
to interact with a simulation system, enabling users to start
simulations and retrieve simulation results securely through the
internet. Users with administrative permission are able to see all
simulation activity and to perform administrative tasks.
Furthermore an analysis method will be conceptualised to detect
"interesting" regions within high-dimensional model response,
with the goal of increasing the experiment resolution in these
regions.
In this presentation, the infrastructure upon which the
web based system is built will be presented. Additionally, an
introduction to a method of simulation experimentation, called
data farming, as well as an introduction to the analysis method
will be given.
[PDF] Presentation
|
|
19. Sept. 2006
16:00–18:00
|
Munich: FMI 01.08.035
Berlin: Spirit
|
PGT:
Dennis
Knorr (the talk will be held in german)
Efficient IP Prefix Lookup Algorithms
and Datastructures: A Framework for Performance Evaluation
Nowadays the process of IP Lookup
is emerging to a severe performance problem when forwarding packets
in the Internet. This problem gets even worse regarding the
progressing deployment of IPv6. Therefore, a framework was developed
to test the performance and efficiency of different IP Prefix
Lookup Algorithms and Datastructures for Longest Prefix Matching.
This framework can also be used as an C Library for storing and
retrieving Information associated to IP in the way mentioned above.
Three Approaches have been compared: Brute Force (linear search),
Patricia Trees/Tries and the Elevator/Stairs Algorithm.
Slides/Folien: PDF;
Bachelorthesis: PDF
|
|
12. Sept. 2006
16:00–18:00
|
Munich: FMI 01.08.035
Berlin: Spirit
|
PGT:
Ivan Pronchev
Packet Capturing using the Linux Netfilter
Framework
Network packets take many ways through the Kernel. Let us
take the TCP/IP stack for example.
Furthermore (under Linux) there is the PF_PACKET (a
raw socket) used to capture packets and the netfilter framework
in general used to perform routing and/or packet filtering. Our
research group is interested in capturing packet, which are
possibly subject to filtering as well, as soon as possible. This
work deals with the question, whether the netfilter framework is
suitable for this task.
While the first talk was about the way of a packet throught
the kernel, and the design of the netfilter framework, this talk
will focus on the developement and implementation of the kernel
sniffer. Furthermore the problems and necessities of moving a
user space application into the kernel are discussed, and the
implemented solutions are explained. In doing so, the kernel
sniffer was optimised, errors were corrected until the performance
reached a comparable level to tcpdump.
Slides/Folien: PDF;
Projectthesis: PDF
|
|
05. Sept. 2006
16:00–18:00
|
Munich: FMI 01.08.035
Berlin: Spirit
|
PGT:
Wolfgang Mühlbauer
Building an AS-topology model that captures
route diversity
The Internet is composed of a large number
of independent autonomous systems (ASes) resulting in complex
interactions, and until now no model of the Internet has
succeeded in producing predictions of acceptable accuracy. We
demonstrate that there are two limitations of prior models: (i) they have all assumed that an Autonomous
System (AS) is an atomic structure — it is not, and (ii) models have tended to oversimplify
the relationships between ASes. Our approach uses multiple
"quasi-routers" to capture route diversity within the ASes,and is
deliberately agnostic regarding the types of relationships between
ASes. Exploiting a large number of observation points, we show that
our model provides accurate predictions for unobserved routes, a
first step towards developing structural models of the Internet that
enable real applications.
Slides/Folien: PDF;
Paper at SIGCOMM'06:
PDF
|