Em 1997, o conceito de rádio cognitivo foi proposto pela primeira vez e evoluiu significativamente até os dias de hoje, como solução para o problema da escassez de espectro eletromagnético. Nessa proposta, usuários oportunistas, através de acesso dinâmico ao espectro, fazem uso das faixas de frequências atribuídas a usuários licenciados, quando eles não as estão utilizando. Para que isso seja possível, sem interferir ou degradar os sinais dos usuários licenciados, é necessário atender a quatro requisitos essenciais de rádios cognitivos: Sensoriamento espectral, Decisão do espectro, Compartilhamento do espectro e Mobilidade espectral. Neste trabalho, o sensoriamento espectral é investigado com base na detecção de energia. Um algoritmo é desenvolvido para se determinar o número de canais ocupados e o número de amostras necessárias na detecção para se atingir probabilidades de detecção e falso alarme pré-estabelecidas. Resultados de simulações são apresentadas mostrando que a incerteza do ruído degrada o desempenho do sistema quando a relação sinal-ruído é baixa. O algoritmo desenvolvido permite também determinar o limite inferior para a relação sinal-ruído, quando há incerteza do ruído. O comportamento da probabilidade de detecção em função da probabilidade de falso alarme parametrizado para número de amostras e relação sinal-ruído é apresentado. As curvas resultantes são muitas vezes referidas como curvas ROC - Receiver Operation Characteristics na literatura. Em função do grande interesse sócio-político pela banda de TV, que o cenário das telecomunicações atualmente apresenta, a mesma foi escolhida para alguns exemplos deste estudo. / In 1997, the concept of cognitive radio was proposed for the first time and evolved significantly to the present days, as a solution to the problem of electromagnetic spectrum scarcity. In the proposed approach, opportunistic users utilize frequency bands originally assigned to licensed users through dynamic spectrum access when the licensed users are not using them. To make this possible, without interfering or degrading the signals from the licensed users, it is necessary to fulfill four essential requirements of cognitive radios: spectrum sensing, spectrum decision, spectrum sharing, and spectrum mobility. In this work, spectrum sensing based on energy detection was investigated. An algorithm was developed for the determination of channel occupation and the number of samples needed for the detection process to achieve pre-established probabilities of detection and false-alarm. Simulations results are presented showing that noise uncertainty degrade the performance of the system when the signal-to-noise ratio is low. The developed algorithm allows determining a lower threshold for the signal-to-noise ratio, when noise uncertainty exists. The detection probability behavior as a function of the false alarm probability having the number of samples and the signal-to noise ratio as parameters is presented. The resulting curves are often denominated ROC - Receiver Operation Characteristics in the literature. Due to the high social and political interest in the TV broadcasting band, that telecommunications scenario currently presents, this band was chosen for same examples in this study.

Bien qu'Internet soit considéré comme le grand succès de ces dernières années, il est devenu une infrastructure critique à cause de l'absence de changements dans le réseau cœur et de la rigidité des équipements déployés. La mise en place et le déploiement des nouveaux services réseau sont devenus difficiles et coûteux. La virtualisation des réseaux a été présentée comme un nouveau paradigme pour palier aux problèmes de l’architecture actuelle de l'Internet. Dans ce travail de thèse, nous présentons la virtualisation des réseaux et les réseaux définis par logiciels (SDN) comme solution avec laquelle les fournisseurs de services peuvent offrir, au travers des réseaux virtuels (VN), des nouveaux services aux utilisateurs avec une meilleure qualité de service, tout en optimisant l'utilisation des ressources réseaux physiques. La première contribution consiste à démontrer le potentiel de SDN dans la gestion de la QoS dans le contexte d’un réseau domestique virtualisé. Nous proposons et implémentons le mécanisme ''FlowQoS'' qui peut être déployé par un fournisseur d’accès Internet au niveau de la boucle locale ou bien dans la passerelle domestique. Les mesures des performances montrent que cette solution permet de partager la bande passante entre plusieurs applications selon la configuration définie par l’utilisateur pour garantir la QoS pour chaque trafic actif. La seconde contribution est une modélisation, par la théorie des jeux, de l’interaction entre les fournisseurs de services et les fournisseurs de l’infrastructure pour le partage dynamique de l’infrastructure physique entre plusieurs VN avec différents besoins en QoS. Il s'agit d'un ensemble de jeux non-coopératifs pour modéliser la phase de négociation et celle de l’allocation dynamique des nœuds et des liens physiques pour chaque VN déployé. La troisième contribution porte sur une approche prédictive qui permet d’offrir un contrôle adaptatif de l’allocation de bande passante dans le but de réduire les délais des paquets d'un VN sur chaque lien physique. Ces deux dernières contributions offrent des modèles de partage dynamique des ressources d’une infrastructure physique tout en garantissant la QoS pour chaque VN / Internet has been successful in the recent years. The critical infrastructure of the internet has become stagnant due to the absence of changes in the core networks and stiffness of deployed equipment. It has become difficult and expensive to deploy new network services. Network virtualization is a new paradigm to overcome this problem. In this thesis, we present network virtualization and Software Defined Networking (SDN) as a solution that can be used by service providers. It enables them to provide new services to users through virtual networks (VNs) with better quality of service while optimizing the use of physical network resources. Firstly, we demonstrate the potential of SDN in the QoS management ofa virtualized home network (VN). We propose and implement ''FlowQoS'', a mechanism that can be deployed by an Internet Service Provider in the last-mile hop or in the home gateway. Performance measurements show that this solution can share bandwidth between applications according to user-defined configuration to guarantee QoS for each active traffic. The second contribution is modeling the interaction between service providers and infrastructure providers using game theoretic framework to offer dynamic sharing of physical infrastructure across multiple VN with different QoS requirements. We present a set of non-cooperative games to model the negotiation phase and the dynamic allocation of nodes and physical links for each deployed VN. Finally we focus on a predictive approach that allows an adaptive control of bandwidth allocation in order to reduce the packet delays for a given VN on each physical link. The last two contributions offer dynamic sharing models of physical infrastructure resources while guaranteeing the QoS for each VN

Les réseaux programmables (SDN) sont un paradigme émergent qui promet de résoudre les limitations de l'architecture du réseau conventionnel. Dans cette thèse, nous étudions et explorons deux aspects de la relation entre la cybersécurité et les réseaux programmables. D'une part, nous étudions la sécurité pour les réseaux programmables en effectuant une analyse de leurs vulnérabilités. Une telle analyse de sécurité est un processus crucial pour identifier les failles de sécurité des réseaux programmables et pour mesurer leurs impacts. D'autre part, nous explorons l'apport des réseaux programmables à la sécurité. La thèse conçoit et implémente un pare-feu programmable qui transforme la machine à états finis des protocoles réseaux, en une machine à états équivalente pour les réseaux programmables. En outre, la thèse évalue le pare-feu implémenté avec NetFilter dans les aspects de performances et de résistance aux attaques d’inondation par paquets de synchronisation. De plus, la thèse utilise l'orchestration apportée par les réseaux programmables pour renforcer la politique de sécurité dans le Cloud. Elle propose un Framework pour exprimer, évaluer, négocier et déployer les politiques de pare-feu dans le contexte des réseaux programmables sous forme de service dans le Cloud. / Software Defined Networking (SDN) is an emerging paradigm that promises to resolve the limitations of the conventional network architecture.SDN and cyber security have a reciprocal relationship. In this thesis, we study and explore two aspects of this relationship. On the one hand, we study security for SDN by performing a vulnerability analysis of SDN. Such security analysis is a crucial process in identifying SDN security flaws and in measuring their impacts. It is necessary for improving SDN security and for understanding its weaknesses.On the other hand, we explore SDN for security. Such an aspect of the relationship between SDN and security focusses on the advantages that SDN brings into security.The thesis designs and implements an SDN stateful firewall that transforms the Finite State Machine of network protocols to an SDN Equivalent State Machine. Besides, the thesis evaluates SDN stateful firewall and NetFilter regarding their performance and their resistance to Syn Flooding attacks.Furthermore, the thesis uses SDN orchestration for policy enforcement. It proposes a firewall policy framework to express, assess, negotiate and deploy firewall policies in the context of SDN as a Service in the cloud.

<div>This thesis firstly surveys and summarizes the state-of-the-art studies from two research areas in Software Defined Networking (SDN) architecture: (i) control plane scalability and (ii) Quality of Service (QoS)-related problems. It also outlines the potential challenges and open problems that need to be addressed further for more scalable SDN control planes and better and complete QoS abilities in SDN networks. The thesis secondly presents a hierarchical SDN design along with an inter-AS QoS-guaranteed routing approach. This design addresses the scalability problems of control plane and privacy concerns of inter-AS QoS routing philosophies in SDN. After exploring the roots of control plane scalability problems in SDN, the thesis then proposes a metric to quantitatively evaluate the control plane scalability in SDN. Later, the thesis presents a general framework for economic analysis of network architectures and designs. To this end, the thesis defines and utilizes two metrics, Unit Service Cost Scalability and Cost-to-Service, to evaluate how SDN architecture performs compared to MPLS architecture in terms of unit cost for a service and cost of introducing a new service along with giving mathematical models to calculate Capital Expenditures (CAPEX) and Operational Expenditures (OPEX) of a network. Moreover, the thesis studies the problem of optimal final pricing for services by proposing an optimal pricing scheme for a service request with QoS in SDN environment while aiming to maximize benefits of both service providers and customers. Finally, the thesis investigates how programmable network architectures, i.e. SDN, affect the network economics compared to traditional network architectures, i.e. MPLS, in case of failures along with exploring the economic impact of failures in different SDN control plane models. </div>

La radio logicielle est une technologie prometteuse pour répondre aux exigences de flexibilité des nouvelles générations de standards de communication. Elle peut être facilement reprogrammée au niveau logiciel pour implémenter différentes formes d'onde. En s'appuyant sur une technologie dite logicielle telle que les microprocesseurs, cette approche est particulièrement flexible et assez facile à mettre en œuvre. Cependant, ce type de technologie conduit généralement à une faible capacité de calcul et, par conséquent, à des débit faibles. Pour résoudre ce problème, la technologie FPGA s'avère être une bonne alternative pour la mise en œuvre de la radio logicielle. En effet, les FPGAs offrent une puissance de calcul élevée et peuvent être reconfigurés. Ainsi, inclure des FPGAs dans le concept de radio logicielle peut permettre de prendre en charge plus de formes d'onde avec des exigences plus strictes qu'une approche basée sur la technologie logicielle. Cependant, les principaux inconvénients d’une conception à base de FPGAs sont le niveau du langage de description d'entrée qui doit typiquement être le niveau matériel, et le temps de reconfiguration qui peut dépasser les exigences d'exécution si le FPGA est entièrement reconfiguré. Pour surmonter ces problèmes, cette thèse propose une méthodologie de conception qui exploite à la fois la synthèse de haut niveau et la reconfiguration dynamique. La méthodologie proposée donne un cadre pour construire une radio flexible pour la radio logicielle à base de FPGAs et qui peut être reconfigurée pendant l'exécution. / Software defined radio (SDR) is a promising technology to tackle flexibility requirements of new generations of communication standards. It can be easily reprogrammed at a software level to implement different waveforms. When relying on a software-based technology such as microprocessors, this approach is clearly flexible and quite easy to design. However, it usually provides low computing capability and therefore low throughput performance. To tackle this issue, FPGA technology turns out to be a good alternative for implementing SDRs. Indeed, FPGAs have both high computing power and reconfiguration capacity. Thus, including FPGAs into the SDR concept may allow to support more waveforms with more strict requirements than a processor-based approach. However, main drawbacks of FPGA design are the level of the input description language that basically needs to be the hardware level, and, the reconfiguration time that may exceed run-time requirements if the complete FPGA is reconfigured. To overcome these issues, this PhD thesis proposes a design methodology that leverages both high-level synthesis tools and dynamic reconfiguration. The proposed methodology is a guideline to completely build a flexible radio for FPGA-based SDR, which can be reconfigured at run-time.

Em 1997, o conceito de rádio cognitivo foi proposto pela primeira vez e evoluiu significativamente até os dias de hoje, como solução para o problema da escassez de espectro eletromagnético. Nessa proposta, usuários oportunistas, através de acesso dinâmico ao espectro, fazem uso das faixas de frequências atribuídas a usuários licenciados, quando eles não as estão utilizando. Para que isso seja possível, sem interferir ou degradar os sinais dos usuários licenciados, é necessário atender a quatro requisitos essenciais de rádios cognitivos: Sensoriamento espectral, Decisão do espectro, Compartilhamento do espectro e Mobilidade espectral. Neste trabalho, o sensoriamento espectral é investigado com base na detecção de energia. Um algoritmo é desenvolvido para se determinar o número de canais ocupados e o número de amostras necessárias na detecção para se atingir probabilidades de detecção e falso alarme pré-estabelecidas. Resultados de simulações são apresentadas mostrando que a incerteza do ruído degrada o desempenho do sistema quando a relação sinal-ruído é baixa. O algoritmo desenvolvido permite também determinar o limite inferior para a relação sinal-ruído, quando há incerteza do ruído. O comportamento da probabilidade de detecção em função da probabilidade de falso alarme parametrizado para número de amostras e relação sinal-ruído é apresentado. As curvas resultantes são muitas vezes referidas como curvas ROC - Receiver Operation Characteristics na literatura. Em função do grande interesse sócio-político pela banda de TV, que o cenário das telecomunicações atualmente apresenta, a mesma foi escolhida para alguns exemplos deste estudo. / In 1997, the concept of cognitive radio was proposed for the first time and evolved significantly to the present days, as a solution to the problem of electromagnetic spectrum scarcity. In the proposed approach, opportunistic users utilize frequency bands originally assigned to licensed users through dynamic spectrum access when the licensed users are not using them. To make this possible, without interfering or degrading the signals from the licensed users, it is necessary to fulfill four essential requirements of cognitive radios: spectrum sensing, spectrum decision, spectrum sharing, and spectrum mobility. In this work, spectrum sensing based on energy detection was investigated. An algorithm was developed for the determination of channel occupation and the number of samples needed for the detection process to achieve pre-established probabilities of detection and false-alarm. Simulations results are presented showing that noise uncertainty degrade the performance of the system when the signal-to-noise ratio is low. The developed algorithm allows determining a lower threshold for the signal-to-noise ratio, when noise uncertainty exists. The detection probability behavior as a function of the false alarm probability having the number of samples and the signal-to noise ratio as parameters is presented. The resulting curves are often denominated ROC - Receiver Operation Characteristics in the literature. Due to the high social and political interest in the TV broadcasting band, that telecommunications scenario currently presents, this band was chosen for same examples in this study.

Software-defined Networking (SDN) enables flexible network management, but as networks evolve to a large number of end-points with diverse network policies, higher speed, and higher utilization, abstraction of networks by SDN makes monitoring and debugging network problems increasingly harder and challenging. While some problems impact packet processing in the data plane (e.g., congestion), some cause policy deployment failures (e.g., hardware bugs); both create inconsistency between operator intent and actual network behavior. Existing debugging tools are not sufficient to accurately detect, localize, and understand the root cause of problems observed in a large-scale networks; either they lack in-network resources (compute, memory, or/and network bandwidth) or take long time for debugging network problems. This thesis presents three debugging tools: PathDump, SwitchPointer, and Scout, and a technique for tracing packet trajectories called CherryPick. We call for a different approach to network monitoring and debugging: in contrast to implementing debugging functionality entirely in-network, we should carefully partition the debugging tasks between end-hosts and network elements. Towards this direction, we present CherryPick, PathDump, and SwitchPointer. The core of CherryPick is to cherry-pick the links that are key to representing an end-to-end path of a packet, and to embed picked linkIDs into its header on its way to destination. PathDump is an end-host based network debugger based on tracing packet trajectories, and exploits resources at the end-hosts to implement various monitoring and debugging functionalities. PathDump currently runs over a real network comprising only of commodity hardware, and yet, can support surprisingly a large class of network debugging problems with minimal in-network functionality. The key contributions of SwitchPointer is to efficiently provide network visibility to end-host based network debuggers like PathDump by using switch memory as a "directory service" - each switch, rather than storing telemetry data necessary for debugging functionalities, stores pointers to end hosts where relevant telemetry data is stored. The key design choice of thinking about memory as a directory service allows to solve performance problems that were hard or infeasible with existing designs. Finally, we present and solve a network policy fault localization problem that arises in operating policy management frameworks for a production network. We develop Scout, a fully-automated system that localizes faults in a large scale policy deployment and further pin-points the physical-level failures which are most likely cause for observed faults.

This diploma thesis focuses on the design and implementation of an emulator of RFID protocols in a software defined radio. The designed emulator operates in the UHF band (860 MHz – 960 MHz). The main goal of this design is a very fast measurement of power characteristic of tag. The proposed solution is based on implementing the transmitter controls directly into the SDR. Thanks to this solution a reduction of delay between measurements occur compared to the conventional concept, when the transmitter parameters are controlled by the hosted PC. In this thesis, suitable platform based on research is chosen for implementation and also a concept of design is proposed and described herein, which is based on implementation of time critical algorithms directlyinto the software defined radio’s FPGA. The proposed solution was implemented into selected platforms and its functionality was experimentally verified.

Processing power is a key technical challenge holding back the development of a high-performance software defined radio (SDR). Traditionally, SDR has utilized digital signal processors (DSPs), but increasingly complex algorithms, higher data rates, and multi-tasking needs have exceed the processing capabilities of modern DSPs. Reconfigurable computers, such as field-programmable gate arrays (FPGAs), are popular alternatives because of their performance gains over software for streaming data applications like SDR. However, FPGAs have not yet realized the ideal SDR because architectures have not fully utilized their partial reconfiguration (PR) capabilities to bring needed flexibility. A reconfigurable processor architecture is proposed that utilizes PR in reconfigurable computers to achieve a more sophisticated SDR. The proposed processor contains run-time swappable blocks whose parameters and interconnects are programmable. The architecture is analyzed for performance and flexibility and compared with available alternate technologies. For a sample QPSK algorithm, hardware performance gains of at least 44x are seen over modern desktop processors and DSPs while most of their flexibility and extensibility is maintained.

The world of wireless communications is under constant change. Radio standards evolve and new standards emerge. More and more functionality is put into wireless terminals. E.g. mobile phones need to handle both second and third generation mobile telephony as well as Bluetooth, and will soon also support wireless LAN functionality, reception of digital audio and video broadcasting, etc. These developments have lead to an increased interest in software defined radio (SDR), i.e. radio devices that can be reconfigured via software. SDR would provide benefits such as low cost for multi-mode devices, reuse of the same hardware in different products, and increased product life time via software updates. One essential part of any software defined radio is a programmable baseband processor that is flexible enough to handle different types of modulation, different channel coding schemes, and different trade-offs between data rate and mobility. So far, programmable baseband solutions have mostly been used in high end systems such as mobile telephony base stations since the cost and power consumption have been considered too high for handheld terminals. In this work a new low power and low silicon area programmable baseband processor architecture aimed for multi-mode terminals is presented. The architecture is based on a customized DSP core and a number of hardware accelerators connected via a configurable network. The architecture offers a good tradeoff between flexibility and performance through an optimized instruction set, efficient hardware acceleration of carefully selected functions, low memory cost, and low control overhead. One main contribution of this work is a study of important issues in programmable baseband processing such as software-hardware partitioning, instruction level acceleration, low power design, and memory issues. Further contributions are a unique optimized instruction set architecture, a unique architecture for efficient integration of hardware accelerators in the processor, and mapping of complete baseband applications to the presented architecture. The architecture has been proven in a manufactured demonstrator chip for wireless LAN applications. Wireless LAN firmware has been developed and run on the chip at full speed. Silicon area and measured power consumption have proven to be similar to that of a non-programmable ASIC solution.