Resilient networks and services : Second International Conference on Autonomous Infrastructure, Management and Security, AIMS 2008, Bremen, Germany, July 1-3, 2008 : proceedings

Annotation This book constitutes the refereed proceedings of the Second International Conference on Autonomous Infrastructure, Management and Security, AIMS 2008, held in Bremen, Germany, in June 2008, under the auspices of IFIP. The 13 revised full papers presented together with 8 papers of the AIMS PhD workshop were carefully reviewed and selected from 33 submissions to the main conference and 12 papers for the PhD workshop respectively. The papers are discussing topics such as autonomy, incentives and trust, overlays and virtualization, load balancing and fault recovery, network traffic engineering and analysis, and convergent behavior of distributed systems Subject Title Page 2 Preface 5 Organization 7 Table of Contents 10 A Role-Based Infrastructure for the Management of Dynamic Communities 12 Introduction 12 Role-Based Community Model 14 Secure Community Management 16 Security Requirements and Management Roles 17 Community Management Overview 18 A Methodology for Modeling Community Management 18 Implementation and Evaluation 20 Related Work 23 Discussion and Concluding Remarks 23 References 24 PSH: A Private and Shared History-Based Incentive Mechanism 26 Introduction 26 Related Work 27 Trust-Based Incentive Schemes 27 Trade-Based Incentive Schemes 28 Comparison of Incentive Schemes 29 Design 29 Requirements 29 Assumptions 29 Algorithm 29 Shared History Data Propagation 30 Private History Verification 31 Implementation and Simulation 32 Implementation 32 Simulation 33 Summary, Discussion, Conclusion, and Future Work 35 Discussion 36 Conclusion 36 Future Work 36 References 37 Cooperation under Scarcity: The Sharer’s Dilemma 39 Introduction 39 Game Theoretic Models of Cooperation 40 The Prisoner’s Dilemma 40 The Shadow of the Future 40 Multi-player Dilemmas 41 The Sharer’s Dilemma 41 The Expected Utility Strategy 42 Simulations 43 Fixed Population Proportions 44 Evolutionary Simulations 45 Invasion Simulations 47 Discussion 47 Conclusions and Future Work 48 References 48 A Distributed Certification System for Structured P2P Networks 51 Introduction 51 Related Work 52 Structured P2P Networks 52 Distributed Certification 52 A Distributed Certification System 53 Principle 53 Sharing the Network Secret Key 54 Distributed Certification Process 55 Security Analysis 57 Obtaining a Fake Certificate 58 Attacking an Honest Certification 58 Experimental Results 59 Applications of Distributed Certification 61 Sybil Protection through Admission Control to the Network 61 Detection and Exclusion of Misbehaving Nodes 61 Secure Naming of Resources 62 Conclusion and Future Work 62 References 63 N2N: A Layer Two Peer-to-Peer VPN 64 Motivation and Scope of Work 64 The Design of N2N 66 N2N Architecture and Implementation 68 N2N Evaluation and Testing 70 Comparing N2N and Mobile IP 71 N2N Scalability 72 Network Management and N2N 73 Open Issues and Future Work 73 Final Remarks 74 References 74 Secure Sharing of an ICT Infrastructure through Vinci 76 Introduction 76 Vinci Overall Architecture 77 Community and VCN 79 Application VMs 80 Community VMs 80 File System VMs 81 Communication and Control VMs 82 Assurance VMs 83 Infrastructure VMs 83 Performance Results 85 Related Works 86 Conclusion 87 References 88 Statistical Behaviors of Distributed Transition Planning 90 Introduction 90 Hospitals/Residents Problem 92 Quality of Stable Marriage and Hospital/Resident Solutions 93 Simulations 95 The Gale-Shapley Algorithm 96 The Gale-Shapley Algorithm Plus a Greedy Heuristic 98 Simulating Real Cases 98 Conclusion and Future Work 101 References 101 Service Load Balancing with Autonomic Servers: Reversing the Decision Making Process 103 Introduction 103 Pull-Based Load Balancer 105 Underlying Architecture 105 Experimental Results 107 Performance with Homogeneous Servers 107 Performance with Heterogeneous Servers 110 Scalability and Bottleneck Effect 111 Related Approaches 113 Conclusions and Future Work 113 References 114 An Architecture for Supporting Network Fault Recovery Management 116 Introduction 116 System Architecture 117 Methodology 120 PBM and ARP Collaboration 120 KD and ARP Collaboration 122 System Analysis - Case Study 124 Automated Recovery Using Outbound TE Algorithm 124 Automated Recovery Using Planning Algorithm 126 Related Work 128 Conclusion 129 References 129 RLTE: Reinforcement Learning for Traffic-Engineering 131 Introduction 131 Problem Definition 133 Reinforcement Learning for Traffic Engineering 134 Results 139 Conclusion and Future Work 142 References 143 SNMP Trace Analysis Definitions 145 Introduction 145 Overview 146 Messages 147 TracesandFlows 149 Trace and Flow Definition 149 Trace and Flow Example 150 Slices 151 Slice Definition 151 Slice Example 152 Slice Signature and Prefix 153 Slice Signature and Prefix Definition 154 Slice Signature and Prefix Example 154 Slice Types 155 Slice Type Definition 155 Slice Type Example 156 Related and Future Work 156 Conclusions 157 References 157 Dynamic Consistency Analysis for Convergent Operators 159 Introduction 159 Operator Consistency 160 Operator Precedence 161 Consistency as an Emergent Property 162 Kinds of Operators 163 Fixed Points and Policies 163 The Quandary of Observability 164 Synchronous Operator Activation 165 HeartbeatsandTime 166 Fixed Points and Time 166 Multiple Time Bases 170 Bounded Operators 170 Conclusions 171 References 172 A Theory of Closure Operators 173 Introduction 173 Convergent and Closure Operators 175 StrategyandTactics 176 Operator Consistency 177 Implementing Closure Operators 179 Validation Models 180 Properties of Closure Operators 182 Conclusions 183 References 184 Entwined Influences of Users’ Behaviour and QoS: A Multi-model Approach 186 Motivation 186 Proposition of Study 187 A First Case Study 188 Conclusion and Future Work 189 References 190 Business-Driven Management of Policies in DiffServ Networks 191 Introduction 191 Application Domain – Particular Objectives of Our Research 192 Business Indicators and Management of Policies – Foreseen Technical Approach 193 Concluding Remarks 194 References 195 Token-Based Payment in Dynamic SAML-Based Federations 196 Introduction 196 Related Work 197 Payment-Enabled Identity Federation 197 Security Analysis 198 Conclusions and Outlook 199 References 200 Conceptual Integration of Flow-Based and Packet-Based Network Intrusion Detection 201 Introduction, Motivation, and Goals 201 Analysis 201 Proposed Combination Angles 203 Evaluation 204 Preliminary Conclusions, Tasks, and Issues 205 References 205 Towards Resilient Community Wireless Mesh Networks 206 Introduction 206 TheResearchProblem 207 Chosen Approach 208 Conclusion 209 References 209 Resource Management of Disruption Tolerant Networks 211 Introduction 211 Research Questions and Proposed Approach 212 Related Work 214 Conclusion 214 References 215 Design of an IP Flow Record Query Language 216 Introduction 216 State of the Art in Query/Filter Languages 217 Research Issues 219 Conclusions 220 References 220 Enabling Next Generation Peer-to-Peer Services 222 Introduction, Motivation, Goal 222 Approach 223 Challenges 225 Simulation Scenario 225 Preliminary Conclusions 226 References 226 Author Index 227 Front Matter....Pages - A Role-Based Infrastructure for the Management of Dynamic Communities....Pages 1-14 PSH: A Private and Shared History-Based Incentive Mechanism....Pages 15-27 Cooperation under Scarcity: The Sharer’s Dilemma....Pages 28-39 A Distributed Certification System for Structured P2P Networks....Pages 40-52 N2N: A Layer Two Peer-to-Peer VPN....Pages 53-64 Secure Sharing of an ICT Infrastructure through Vinci....Pages 65-78 Statistical Behaviors of Distributed Transition Planning....Pages 79-91 Service Load Balancing with Autonomic Servers: Reversing the Decision Making Process....Pages 92-104 An Architecture for Supporting Network Fault Recovery Management....Pages 105-119 RLTE: Reinforcement Learning for Traffic-Engineering....Pages 120-133 SNMP Trace Analysis Definitions....Pages 134-147 Dynamic Consistency Analysis for Convergent Operators....Pages 148-161 A Theory of Closure Operators....Pages 162-174 Entwined Influences of Users’ Behaviour and QoS: A Multi-model Approach....Pages 175-179 Business-Driven Management of Policies in DiffServ Networks....Pages 180-184 Token-Based Payment in Dynamic SAML-Based Federations....Pages 185-189 Conceptual Integration of Flow-Based and Packet-Based Network Intrusion Detection....Pages 190-194 Towards Resilient Community Wireless Mesh Networks....Pages 195-199 Resource Management of Disruption Tolerant Networks....Pages 200-204 Design of an IP Flow Record Query Language....Pages 205-210 Enabling Next Generation Peer-to-Peer Services....Pages 211-215 Back Matter....Pages - This Volume Of The Lecture Notes In Computer Science Series Contains The Papers Accepted For Presentation At The Second International Conference On Autonomous Infrastructure, Management And Security (aims 2008). The Conference Took Place In Bremen, Germany, Hosted By The Jacobs University Bremen. Aims 2008 Was - Ganized And Supported By The Ec Ist-emanics Network Of Excellence (#26854) In Cooperation With Acm Sigapp And Acm Sigmis And Co-sponsored By Ifip Wg 6.6 And Jacobs University Bremen. This Year’s Aims 2008 Constituted The Second Edition Of A Single-track And Standalone Conference On Management And Security Aspects Of Distributed And Autonomous Systems, Which Took Place Initially In Oslo, Norway In June 2007. The ?rst Objective Of The Aims Conference Series Is To Stimulate The Exchange Of Ideas In A Cross-disciplinary Forum Where There Is Su?cient Time For Discussion Of Novel Ideas. A Second Objective Is To Provide A Forum For Doctoral Students To Discuss Their Research Ideas In A Wider Audience And To Receive Training To Help Make Their Research Careers Successful. To This End, Aims Includes A Phd Workshop And A Tutorial Program That Is O?ered As Part Of The Main Conference Program.