Enhancing quality of service in software-defined networks

Resource management is of paramount importance in network scenarios and it is a long-standing and still open issue. Unfortunately, while technology and innovation continue to evolve, our network infrastructure system has been maintained almost in the same shape for decades and this phenomenon is known as “Internet ossification”. Software-Defined Networking (SDN) is an emerging paradigm in computer networking that allows a logically centralized software program to control the behavior of an entire network. This is done by decoupling the network control logic from the underlying physical routers and switches that forward traffic to the selected destination. One mechanism that allows the control plane to communicate with the data plane is OpenFlow. The network operators could write high-level control programs that specify the behavior of an entire network. Moreover, the centralized control makes it possible to define more specific and complex tasks that could involve many network functionalities, e.g., security, resource management and control, into a single framework. Nowadays, the explosive growth of real time applications that require stringent Quality of Service (QoS) guarantees, brings the network programmers to design network protocols that deliver certain performance guarantees. This thesis exploits the use of SDN in conjunction with OpenFlow to manage differentiating network services with an high QoS. Initially, we define a QoS Management and Orchestration architecture that allows us to manage the network in a modular way. Then, we provide a seamless integration between the architecture and the standard SDN paradigm following the separation between the control and data planes. This work is a first step towards the deployment of our proposal in the University of California, Los Angeles (UCLA) campus network with differentiating services and stringent QoS requirements. We also plan to exploit our solution to manage the handoff between different network technologies, e.g., Wi-Fi and WiMAX. Indeed, the model can be run with different parameters, depending on the communication protocol and can provide optimal results to be implemented on the campus network.

Emergency response to railroad accidents involving hazardous materials

The chemical industry has to face safety problems linked to the hazards of chemicals and the risks posed by the plants where they are handled. However, their transport may cause significant risk values too: it’s not totally possible to avoid the occurrence of accidents. This work is focused on the emergency response to railway accidents involving hazardous materials, that is what has to be done once they happen to limit their consequences. A first effort has been devoted to understand the role given to this theme within legislations: it has been found out that often it’s not even taken into account. Exceptionally a few countries adopt guidelines suggesting how to plan the response, who is appointed to intervene and which actions should be taken first. An investigation has been made to define the tools available for the responders, with attention on the availability of chemical-specific safety distances. It has emerged that the ERG book adopted by some American countries has suggestions and the Belgian legislation too establishes criteria to evaluate these distances. An analysis has been conducted then on the most recent accidents occurred worldwide, to understand how the response was performed and which safety distances were adopted. These values were compared with the numbers reported by the ERG book and the results of two devoted software tools for consequence analysis of accidental spills scenarios. This comparison has shown that there are differences between them and that a more standardized approach is necessary. This is why further developments of the topic should focus on promoting uniform procedures for emergency response planning and on a worldwide adoption of a guidebook with suggestions about actions to reduce consequences and about safety distances, determined following finer researches. For this aim, the development of a detailed database of hazardous materials transportation accidents could be useful.

Tor network forensics and hidden service deanonymization

The cybernetics revolution of the last years improved a lot our lives, having an immediate access to services and a huge amount of information over the Internet. Nowadays the user is increasingly asked to insert his sensitive information on the Internet, leaving its traces everywhere. But there are some categories of people that cannot risk to reveal their identities on the Internet. Even if born to protect U.S. intelligence communications online, nowadays Tor is the most famous low-latency network, that guarantees both anonymity and privacy of its users. The aim of this thesis project is to well understand how the Tor protocol works, not only studying its theory, but also implementing those concepts in practice, having a particular attention for security topics. In order to run a Tor private network, that emulates the real one, a virtual testing environment has been configured. This behavior allows to conduct experiments without putting at risk anonymity and privacy of real users. We used a Tor patch, that stores TLS and circuit keys, to be given as inputs to a Tor dissector for Wireshark, in order to obtain decrypted and decoded traffic. Observing clear traffic allowed us to well check the protocol outline and to have a proof of the format of each cell. Besides, these tools allowed to identify a traffic pattern, used to conduct a traffic correlation attack to passively deanonymize hidden service clients. The attacker, controlling two nodes of the Tor network, is able to link a request for a given hidden server to the client who did it, deanonymizing him. The robustness of the traffic pattern and the statistics, such as the true positive rate, and the false positive rate, of the attack are object of a potential future work.