La nouvelle génération de réseaux mobiles (5G) devrait faire face, durant les cinq prochaines années, à une importante croissance du volume de données, échangé entre plusieurs milliards d'objets et d'applications connectés. En outre, l'émergence de nouvelles technologies, telles que Internet of Things (IoT), conduite autonome et réalité augmentée, impose de plus fortes contraintes de performance et de qualité de service (QoS). Répondre aux besoins cités, tout en réduisant les dépenses d'investissement et d'exploitation (CAPEX/OPEX), sont les objectifs poursuivis par les opérateurs télécom, qui ont défini une nouvelle architecture d'accès radio, appelée Cloud Radio Access Network (C-RAN). Le principe du C-RAN est de centraliser, au sein d'un pool, les parties de traitement, BaseBand Unit (BBU), d'un RAN traditionnel. Les BBU sont alors dissociées de la station de base et de la partie radio, Remote Radio Unit (RRU). Ces deux parties restent néanmoins connectées à travers un réseau intermédiaire appelé Fronthaul (FH). Dans cette thèse, nous allons concevoir une nouvelle architecture C-RAN partiellement centralisée qui intègrera une plateforme de virtualisation basée sur un environnement Xen, nommée " Metamorphic Network " (MNet). A travers cette architecture, nous viserons à : i) mettre en place un pool, dans lequel des ressources physiques (processeurs, mémoire, ports réseaux, etc.) seront partagées entre des BBU virtualisées et d'autres applications, ii) établir un réseau FH ouvert aux fournisseurs de services et aux tierces parties, facilitant ainsi le déploiement des services au plus près des utilisateurs, pour une meilleure qualité d'expérience, iii) exploiter, à travers le FH, les infrastructures Ethernet existantes pour réduire les CAPEX/OPEX et enfin, iv) atteindre les performances réseau préconisées pour la 5G. Dans la première contribution, nous allons définir une nouvelle architecture Xen pour la plateforme MNet, intégrant le framework de packet processing, OpenDataPlane (ODP), au sein d’un domaine Xen privilégié, nommé « Driver Domain ». Notre objectif, à travers cette architecture, est d’accélérer le traitement des paquets de données transitant par MNet, en évitant la surutilisation, par ODP, des cœurs du processeur physique (CPU) de la plateforme. Pour cela, des cœurs CPU virtuels (vCPU) seront alloués dans le Driver Domain pour être exploités durant le traitement des paquets par ODP. Cette nouvelle plateforme MNet servira de base pour notre architecture C-RAN. Dans la seconde contribution, nous allons implémenter, au sein du FH, deux solutions réseau. La première solution, consistera à déployer le réseau de couche 2, Transparent Interconnection of Lots of Links (TRILL), pour connecter les différents éléments de notre architecture C-RAN. La seconde solution, consistera à déployer un réseau Software Defined Network (SDN), géré par le contrôleur distribué ONOS, qui sera virtualisé dans le pool BBU. Une comparaison des performances réseau sera réalisée entre ces deux solutions. / Over the next five years, the new generation of mobile networks (5G) would face a significant growth of the data volume, exchanged between billions of connected objects and applications. Furthermore, the emergence of new technologies, such as Internet of Things (IoT), autonomous driving and augmented reality, imposes higher performance and quality of service (QoS) requirements. Meeting these requirements, while reducing the Capital and Operation Expenditures (CAPEX/OPEX), are the pursued goals of the mobile operators. Consequently, Telcos define a new radio access architecture, called Cloud Radio Access Network (C-RAN). The C-RAN principle is to centralize, within a pool, the processing unit of a radio interface, named BaseBand Unit (BBU). These two units are interconnected through a Fronthaul (FH) network. In this thesis, we design a new partially centralized C-RAN architecture that integrates a virtualization platform, based on a Xen environment, called Metamorphic Network (MNet). Through this architecture, we aim to: i) implement a pool in which physical resources (processors, memory, network ports, etc.) are shared between virtualized BBUs and other applications; ii) establish an open FH network that can be used by multiple operators, service providers and third parties to deploy their services and Apps closer to the users for a better Quality of Experience (QoE); iii) exploit, through the FH, the existing Ethernet infrastructures to reduce CAPEX/OPEX; and finally iv) provide the recommended network performance for the 5G. In the first contribution, we define a new Xen architecture for the MNet platform integrating the packet-processing framework, OpenDataPlane (ODP), within a privileged Xen domain, called Driver Domain (DD). This new architecture accelerates the data packet processing within MNet, while avoiding the physical CPUs overuse by ODP. Thus, virtual CPU cores (vCPU) are allocated within DD and are used by ODP to accelerate the packet processing. This new Xen architecture improves the MNet platform by 15%. In the second contribution, we implement two network solutions within the FH. The first solution consist of deploying a layer 2 network protocol, Transparent Interconnection of Lots of Links (TRILL), to connect multiple elements of our C-RAN architecture. The second solution consists of implementing a Software Defined Network (SDN) model managed by Open Network Operating System (ONOS), a distributed SDN controller that is which is virtualized within BBU pool. Moreover, a network performance comparison is performed between these two solutions.

Indiana University-Purdue University Indianapolis (IUPUI) / This thesis firstly surveys and summarizes the state-of-the-art studies from two research areas in Software De fined Networking (SDN) architecture: (i) control plane scalability and (ii) Quality of Service (QoS)-related problems. It also outlines the potential challenges and open problems that need to be addressed further for more scalable SDN control planes and better and complete QoS abilities in SDN networks. The thesis secondly presents a hierarchical SDN design along with an inter-AS QoS-guaranteed routing approach. This design addresses the scalability problems of control plane and privacy concerns of inter-AS QoS routing philosophies in SDN. After exploring the roots of control plane scalability problems in SDN, the thesis then proposes a metric to quantitatively evaluate the control plane scalability in SDN. Later, the thesis presents a general framework for economic analysis of network architectures and designs. To this end, the thesis defines and utilizes two metrics, Unit Service Cost Scalability and Cost-to-Service, to evaluate how SDN architecture performs compared to MPLS architecture in terms of unit cost for a service and cost of introducing a new service along with giving mathematical models to calculate Capital Expenditures (CAPEX) and Operational Expenditures (OPEX) of a network. Moreover, the thesis studies the problem of optimal final pricing for services by proposing an optimal pricing scheme for a service request with QoS in SDN environment while aiming to maximize benefits of both service providers and customers. Finally, the thesis investigates how programmable network architectures, i.e. SDN, affect the network economics compared to traditional network architectures, i.e. MPLS, in case of failures along with exploring the economic impact of failures in different SDN control plane models.

Along with the dramatic changes that have happened over the years, from the first-generation (1G) of mobile networks to the current fifth-generation (5G) of mobile networks. A wide range of different technologies has been seen as potential possibilities for changing and improving the 5G networks, whereas Software-defined networking (SDN) has been widely regarded as one of the significant enablers for this possibility. At the same time, it has been seen that lowering cost and increasing speed and coverage is not enough for the emerging market. Instead, higher flexibility and increased revenues are desirable and have been seen coming from being able to manage and make use of programmed mobile networks. This thesis investigates the principles and concepts of merging 5G networks with the SDN technology, in which ways those networks can make use of programming to make them more suitable to manage and use. Lastly, it explores the possibility to demonstrate the identified model with the use case for creating virtual private networks. This was mainly done by evaluating and experimenting with 5G networks and the SDN technology together with available tools. Alongside doing so, it was possible to present several principles and concepts suitable for such a programmed mobile network, where some of which were through the utilization of a programming language and a compiler. In addition, it was also possible to discover a compatible SDN controller that seamlessly could be integrated with the other components providing more efficient network management and enhanced usability. To then present the identified model, an implementation could be made by combining the principles and concepts to illustrate a programmed mobile network. The implementation contained two elements, each resembling a virtual private network, with each network further consisting of several user equipments (UEs). Furthermore, it was possible to control the communication between individual UEs and their respective base stations. Several useful pieces of information have thus been gathered in the same place towards answering those research questions, whereas the identified model has also been demonstrated with the use case for creating virtual private networks.

In the era of Industry 4 and Digital Twin – DT- (integrating Audio-Video, Virtual Reality, Augmented Reality and Haptics - from the Greek word Haptikos meaning "able to touch") and the Tactile Internet (TI), it becomes obvious that telecom stakeholders need different networks requirements to provision high quality services with respect to the new standards. In reality, this era is proposed as TI, and it will achieve a true paradigm shift from content delivery to skill-set delivery network types, thanks to recent technical breakthroughs. It will build a new internet structure with improved capabilities; but it will be difficult to meet the technical needs of the TI with current fourth generation (4G) mobile communication systems. As a result, 5G mobile communication systems will be used at the wireless edge and as a key enabler for TI due to its automated core network functionalities. Because of the COVID-19 outbreak, most daily activities such as employment, research, and education are now conducted online rather than in person. As a result, internet traffic has risen dramatically. Nowadays, Tactile Internet is in its infancy deployment phase worldwide. For this reason, and because of the growing need of its applications, the feasibility of these applications on the existing and deployed networks infrastructures, especially in the growing countries, is thought to be very hard, even quasi-impossible. Since 5G is not reaching yet its convergence stage (i.e. it is not deployed everywhere) and there is a huge stress on mobile communications given that the world is still facing the COVID-19 Pandemic, and since all the activities are taking place online, we propose design and implement a QoS framework to facilitate the feasibility and the applicability of the TI systems, where no 5G infrastructure is deployed. This framework will predict the most suitable network type to be deployed for certain given TI applications with certain given KPIs (Key Performance Indicators). Also, this framework is scalable, in such it gives an idea of even the future Next Generation Mobile Networks types (NGMN, if necessary). “To deal” with TI applications, means “to deal” with Haptics added to Audio and Video streams. Therefore, performance evaluation for haptic networks is required. And since there are different types of haptic networks, so interoperability is needed. Consequently, a standardization form is necessary for that purpose, to annotate and describe the haptic network. The first idea that flashes in mind, is the use of Ontologies. In these latters, we can add intelligent rules to infer additional data and predict resource requirements in order to achieve better performance. Many works in the research rely on Artificial Intelligence approaches to tackle the above-mentioned standardization, but very few depend on ontologies, and without futuristic outcomes, especially for the optimization problem. We mean by optimization, the optimal types, methods and rules that are able to accommodate the applicability of the TI systems (here come the applications KPIs) in an acceptable environment or infrastructure (here come the networking KPIs), and even-more, to infer the most optimal network type. To help manufacturing companies take full advantage of the TI, we propose to develop new methods and tools (ontologies) to intelligently handle the TI, DT (Digital Twin) and IoT (Internet of Things) sensor data and process data at the edge of the network and deliver faster insights. The outcomes of these ontologies, have been validated through two conducted case studies, where we simulated, in the first, TI traffic over Wi-Fi, WiMAX and UMTS (3G) infrastructures; While in the second we used 4G (LTE-A), along with SDN (Software Defined Networking) integrated to MEC (Mobile Edge Computing) as networking backbone. The results, in terms of QoS KPIs performance evaluation, present high relevance to our proposed Ontology outcomes.

No description available.

Software Defined Networking (SDN) modernizes network control, offering streamlined management. However, its centralized structure makes it more vulnerable to distributed Denial of Service (DDoS) attacks, posing serious threats to network stability. This thesis explores the development of a DDoS attack prevention technique in SDN environments using the Ryu controller application. The research aims to address the vulnerabilities in SDN, particularly focusing on flooding and Internet Protocol (IP) spoofing attacks, which are a significant threat to network security. The study employs an experimental approach, utilizing tools like Mininet-VM (VirtualMachine), Oracle VM VirtualBox, and hping3 to simulate a virtual SDN environment and conduct DDoS attack scenarios. Key methodologies include packet sniffing and rule-based detection by integrating Snort IDS (Intrusion Detection System), which is critical for identifying and mitigating such attacks. The experiments demonstrate the effectiveness of the proposed prevention technique, highlighting the importance of proper configuration and integration of network security tools in SDN. This work contributes to enhancing the resilience of SDN architectures against DDoS attacks, offering insights into future developments in network security.

Software Defined Networks (SDN) has created great potential and hope to overcome the need for secure, reliable and well managed next generation networks to drive effective service delivery on the go and meet the demand for high data rate and seamless connectivity expected by users. Thus, it is a network technology that is set to enhance our day-to-day activities. As network usage and reliance on computer technology are increasing and popular, users with bad intentions exploit the inherent weakness of this technology to render targeted services unavailable to legitimate users. Among the security weaknesses of SDN is Distributed Denial of Service (DDoS) attacks. Even though DDoS attack strategy is known, the number of successful DDoS attacks launched has seen an increment at an alarming rate over the last decade. Existing detection mechanisms depend on signatures of known attacks which has not been successful in detecting unknown or different shades of DDoS attacks. Therefore, a novel detection mechanism that relies on deviation from confidence interval obtained from the normal distribution of throughput polled without attack from the server. Furthermore, sensitivity analysis to determine which of the network metrics (jitter, throughput and response time) is more sensitive to attack by introducing white Gaussian noise and evaluating the local sensitivity using feed-forward artificial neural network is evaluated. All metrics are sensitive in detecting DDoS attacks. However, jitter appears to be the most sensitive to attack. As a result, the developed framework provides an avenue to make the SDN technology more robust and secure to DDoS attacks.

No description available.

No description available.

No description available.