DFL: Secure and practical fault localization for datacenter networks

IEEE/ACM Transactions on Networking

Volumn 22, Issue 4, 2014, Pages 1218-1231

  Zhang, Xin ^a   Zhou, Fanfu ^b   Zhu, Xinyu ^b   Sun, Haiyang ^b   Perrig, Adrian ^c   Vasilakos, Athanasios V ^d   Guan, Haibing ^b  

^a GOOGLE INC   (United States)

^b SHANGHAI JIAO TONG UNIVERSITY   (China)

^c ETH ZURICH   (Switzerland)

^d UNIVERSITY OF WESTERN MACEDONIA   (Greece)

Author keywords

Datacenter network; delayed function disclosure; fault localization

Indexed keywords

ELECTRICAL ENGINEERING; SOFTWARE ENGINEERING;

COMMUNICATION OVERHEADS; DATA CENTER NETWORKS; DELAYED FUNCTIONS; DYNAMIC TRAFFIC PATTERNS; FAULT LOCALIZATION; NETWORK AVAILABILITY; PERFORMANCE AND SCALABILITIES; RELIABLE DATA DELIVERY;

ROUTERS;

EID: 84907600349     PISSN: 10636692     EISSN: None     Source Type: Journal    
DOI: 10.1109/TNET.2013.2274662     Document Type: Article

References (43)

1. K. Zetter, "Cisco security hole a whopper, " Wired 2005 [Online].Available: Http://www.wired.com/politics/security/news/2005/07/68328
2. T. Espiner, "Symantec warns of router compromise, " 2008 [Online]. Available: Http://news.cnet.com/Symantec-warns-ofrouter-compromise/ 2100-7349-3-6227502.html
3. The Internet2 observatory: Proposal process, " 2008 [Online]. Available: Http://www.internet2.edu/observatory/archive/proposal-process. html
4. D. Achlioptas, "Database-friendly random projections, " in Proc. 20th ACM SIGMOD-SIGACT-SIGART PODS, New York, NY, USA, 2001, pp. 274-281.
5. N. Alon, Y. Matias, andM. Szegedy, "The space complexity of approximating the frequency moments, " in Proc. STOC, 1996, pp. 20-29.
6. X. Ao, "Report on DIMACS workshop on large-scale Internet attacks, " 2003 [Online]. Available: Http://dimacs.rutgers.edu/Workshops/Attacks/ internet-Attack-9-03.pdf
7. K. Argyraki, P. Maniatis, O. Irzak, S. Ashish, and S. Shenker, "Loss and delay accountability for the Internet, " in Proc. IEEE ICNP, 2007, pp. 194-205.
8. K. Argyraki, P. Maniatis, and A. Singla, "Verifiable network-performance measurements, " in Proc. ACM CoNEXT, 2010, Art. no. 1.
9. I. Avramopoulos, H. Kobayashi, R. Wang, and A. Krishnamurthy, "Highly secure and efficient routing, " in Proc. IEEE Infocom, 2004, pp. 197-208.
10. B. Awerbuch, R. Curtmola, D. Holmer, C. Nita-Rotaru, and H. Rubens, "ODSBR: An on-demand secure Byzantine resilient routing protocol for wireless ad hoc networks, " Trans. Inf. Syst. Security, vol. 10, no. 4, 2008, Art. no. 6.
11. B. Awerbuch, D. Holmer, C. Nita-Rotaru, and H. Rubens, "An on-demand secure routing protocol resilient to Byzantine failures, " in Proc. ACM WiSE, 2002, pp. 21-30.
12. B. Barak, S. Goldberg, and D. Xiao, "Protocols and lower bounds for failure localization in the Internet, " in Proc. EUROCRYPT, 2008, pp. 341-360.
13. B. H. Bloom, "Space/time trade-offs in hash coding with allowable errors, " Commun. ACM, vol. 13, no. 7, pp. 422-426, 1970.
14. K. A. Bradley, S. Cheung, N. Puketza, B. Mukherjee, and R. A. Olsson, "Detecting disruptive routers: A distributed network monitoring approach, " in Proc. IEEE Symp. Security Privacy, May 1998, pp. 115-124.
15. M. Casado, T. Garfinkel, A. Akella, M. Freedman, D. Boneh, N. McKeown, and S. Shenker, "SANE: A protection architecture for enterprise networks, " in Proc. USENIX Security, 2006, Art. no 10.
16. M. Charikar, K. Chen, and M. Farach-Colton, "Finding frequent items in data streams, " Theoret. Comput. Sci., vol. 312, no. 1, pp. 3-15, 2004.
17. K. Chen, C. Hu, X. Zhang, K. Zheng, Y. Chen, and T. Vasilakos, "Survey on routing in data centers: Insights and future directions, " IEEE Netw., vol. 25, no. 4, pp. 6-10, Jul.-Aug. 2011.
18. I. Cunha, R. Teixeira, and C. Diot, "Measuring and characterizing end-To-end route dynamics in the presence of load balancing, " in Proc. PAM, 2011, pp. 235-244.
19. E. Dinic, "Algorithm for solution of a problem of maximum flow in a network with power estimation, " Soviet Math. Dokl, vol. 11, pp. 1277-1280, 1970.
20. S. Goldberg, D. Xiao, E. Tromer, B. Barak, and J. Rexford, "Pathquality monitoring in the presence of adversaries, " in Proc. Sigmetrics, 2008, pp. 193-204.
21. A. Greenberg, G. Hjalmtysson, D. A. Maltz, A. Myers, J. Rexford, G. Xie, H. Yan, J. Zhan, and H. Zhang, "A clean slate 4D approach to network control and management, " Comput. Commun. Rev., vol. 35, no. 5, pp. 41-54, 2005.
22. A.Greenberg, N. Jain, S.Kandula, C. Kim, P. Lahiri, D.Maltz, P. Patel, and S. Sengupta, "VL2: A scalable and flexible data center network, " in Proc. ACM Sigcomm, 2009, pp. 51-62.
23. C. Guo, G. Lu, D. Li, H. Wu, X. Zhang, Y. Shi, C. Tian, Y. Zhang, and S. Lu, "BCube: A high performance, server-centric network architecture for modular data centers, " in Proc. ACM Sigcomm, 2009, pp. 63-74.
24. C. Guo, H. Wu, K. Tan, L. Shiy, Y. Zhang, and S. Luz, "Dcell: A scalable and fault-Tolerant network structure for data centers, " in Proc. ACM Sigcomm, 2008, pp. 75-86.
25. J. R. Hughes, T. Aura, and M. Bishop, "Using conservation of flow as a security mechanism in network protocols, " in Proc. IEEE Symp. Security Privacy, 2000, pp. 132-141.
26. S. Kandula, R. Mahajan, P.Verkaik, S.Agarwal, J. Padhye, and P. Bahl, "Detailed diagnosis in enterprise networks, " in Proc. ACMSIGCOMM, 2009, pp. 243-254.
27. C. Labovitz, A. Ahuja, and M. Bailey, "Shining light on dark address space, " Arbor Networks, Waltham, MA, USA, Tech. rep., 2001.
28. K. Liu, J. Deng, P. K. Varshney, and K. Balakrishnan, "An acknowledgment-based approach for the detection of routing misbehavior in MANETs, " IEEE Trans. Mobile Comput., vol. 6, no. 5, pp. 536-550, May 2007.
29. R. Mahajan, M. Rodrig, D.Wetherall, and J. Zahorjan, "Sustaining cooperation in multi-hop wireless networks, " in Proc. USENIX NSDI, 2005, pp. 231-244.
30. S. Marti, T. J. Giuli, K. Lai, and M. Baker, "Mitigating routing misbehavior in mobile ad hoc networks, " in Proc. ACM MobiCom, 2000, pp. 255-265.
31. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner, "OpenFlow: Enabling innovation in campus networks, " Comput. Commun. Rev., vol. 38, no. 2, pp. 69-74, 2008.
32. A. T. Mizrak, Y. c. Cheng, K. Marzullo, and S. Savage, "Fatih: Detecting and isolating malicious routers, " IEEE Trans. Depend. Secure Comput., vol. 3, no. 3, pp. 230-244, Jul.-Sep. 2005.
33. R. N. Mysore, A. Pamboris, N. Farrington, N. Huang, P. Miri, S. Radhakrishnan, and V. Subram, "PortLand: A scalable fault-Tolerant layer 2 data center network fabric, " in Proc. ACM Sigcomm, 2009, pp. 39-50.
34. Y.Otachi, H. L. Bodlaender, and E. J. v. Leeuwen, "Complexity results for the spanning tree congestion problem, " in Proc. Workshop Graph Theoret. Concept Comput. Sci., 2010, pp. 3-14.
35. V. N. Padmanabhan and D. R. Simon, "Secure traceroute to detect faulty or malicious routing, " Comput. Commun. Rev., vol. 33, no. 1, pp. 77-82, 2003.
36. A. Perrig, R. Canetti, D. Song, and D. Tygar, "The TESLA broadcast authentication protocol, " Cryptobytes, vol. 5, no. 2, pp. 2-13, 2002.
37. N. Spring, R. Mahajan, and D. Wetherall, "Measuring ISP topologies with Rocketfuel, " in Proc. ACM Sigcomm, 2002, pp. 133-145.
38. R. Thomas, "ISP security bof, nanog 28, " 2003 [Online]. Available: Http://www.nanog.org/meetings/nanog28/presentations/thomas.pdf
39. M. Thorup and Y. Zhang, "Tabulation based 4-universal hashing with applications to second moment estimation, " in Proc. SODA, 2004, pp. 615-624.
40. X. Zhang, A. Jain, and A. Perrig, "Packet-dropping adversary identification for data plane security, " in Proc. ACM CoNEXT, 2008, Art. no 24.
41. X. Zhang, C. Lan, and A. Perrig, "Secure and scalable network fault localization under dynamic traffic patterns, " in Proc. IEEE Symp. Security Privacy, 2012, pp. 317-331.
42. X. Zhang, Z. Zhou, G. Hasker, A. Perrig, and V. Gligor, "Network fault localization with small TCB, " in Proc. IEEE ICNP, 2011, pp. 143-154.
43. X. Zhang, Z. Zhou, H.-C. Hsiao, A. Perrig, and P. Tague, "Shortmac: Efficient data plane fault localization, " in Proc. NDSS, 2012.