Tutorials

MON 08:45 - 12:45 T1: Network-as-a-service: Software Defined Networking for Cloud
Speakers: Anilkumar Vishnio, Vijay Mann (IBM)
Room: Refter

Abstract:
Software Defined Networking (SDN) is an emerging architecture for computer networking that comprises of a programmable control plane that is physically separated from the data plane in a network switch runs on a standard server and communicates with the switches through a standard protocol such as OpenFlow. This separation allows users and administrators to program routing policies and rules using high level languages such as Java and Python, without knowing anything about the arcane CLI commands supported by network switches. SDN can bring enormous value to cloud by providing Network-as-a-Service. Among other things, SDN can enable policy based creation of virtual networks for cloud tenants that can have overlapping or identical network addresses and also provide services such as service replication and fail-over. In this tutorial, we will first give an overview of SDN and then describe several such use cases for the cloud. We will also describe the various challenges related to managagement aspects of SDN for Cloud. We will give an overview of OpenStack and OpenFlow integration and how this integration can drive innovation in the cloud.

Agenda:

  • Overview of SDN and OpenFlow
  • SDN use cases for the cloud
  • Challenges related to management aspects of SDN for Cloud
  • Overview of OpenStack and OpenFlow integration and describe some use cases
  • Demos/practice sessions for some of the above use cases using FloodLight, Mininet and OpenStack.

Speaker biographies:

Anilkumar Vishnoi received his Masters of Technology (MTech) in computer science from BITS-Pilani, India in 2007. After post graduation he joined IBM India Software Labs as a technical staff member. In Software labs he worked on IBM Java Virtual Machine technology for around 2 years. He moved to IBM Research - India in 2009 as a technical staff member. His research interests are  mainly around Data Center Networking and Cloud Computing. Since last 2 years he has been working on software defined  networks and their application in data center networking and cloud computing environments. More details about his research work in this area can be found on his IBM research web page.
 
Vijay Mann is a senior software engineer and researcher at IBM Research - India in New Delhi. He currently leads the data center networking effort at IBM Research - India. He joined IBM in 2003 after working on Wall Street (Portfolio Analytics Group at Morgan Stanley, New York) for a couple of years. He has more than 12 years of experience in enterprise systems development and research. He has authored more than 20 publications in well known conferences and journals as well as several IBM Redbooks, book-chapters and IBM developerworks articles.  He has 16 filed patents to his credit, out of which 8 have already been issued.  His research interests are diverse and cover various aspects of systems research such as data center networks, distributed systems, operating systems, performance analysis and systems management. He holds a MS from Rutgers University, New Jersey and a BE (Bachelor of Engineering) from Malaviya National Institute of Technology (MNIT), Jaipur, India. More details about his work can be found on his IBM web page.
MON 08:45 - 12:45 T2: Android Security: Malware, Reverse Engineering and Automated Malware Analysis for Android
Speakers: Radu State, Quentin Jerome and Thibault Cholez (University of Luxembourg)
Room: Persconferentiezaal

Abstract:
The security of mobile devices becomes a critical factor in the current Internet. Smart handsets are now ubiquitous and more and more end users rely on them to perform a broad scope of operations that range from e-banking to the control of industrial control systems. The objective of this tutorial is twofold.  We will give an overview on the state of the art in academic research in the area of Android systems and their security. We will present the known threats that cover malware packaging, system level privilege escalation and continue with an overview on the automated detection methods of Android malware and repackaged applications. The second objective will address a hands-on introduction to reverse engineering and hacking of Android systems. Participants will have the possibility to use a virtual machine prepared by the instructors to perform on their own some of the described attacks.

Speaker biographies:

Radu State is a senior researcher with the Interdisciplinary Center on Security and Trust in Luxembourg. He was a former professor at the University of Lorraine and a senior researcher at INRIA Nancy, Grand Est. Having authored more then 100 papers, his research interests cover network and system security and management.  He holds a Ph.D and a HDR  from University of Lorraine and a M.Sc from the Johns Hopkins University.
 
Quentin Jerome has gotten a master's degree in Computer Sciences and a master's degree in General Engineer Sciences before starting a Ph.D at SnT (Interdisciplinary Center for Security Reliability and Trust) in Luxembourg. His research interests are mainly malware analysis and malware detection mechanisms. A large part of Quentin's Ph.D is focused on the Android platform, which has seen its malware number increase in the same time of new activated devices.
 
Thibault Cholez graduated in 2007 from Nancy University for both a Master degree in Computer Science and a leading Engineering school (ESIAL). He did his PhD studies in the laboratory INRIA Nancy / LORIA on the monitoring and security of large P2P networks and got his PhD degree from Nancy University in 2011. After a first postdoc at the University of Technology of Troyes where he investigated the diffusion of pollution in P2P systems, he currently pursues his research activities at the University of Luxembourg with a new particular interest for the Content-Centric Networking paradigm and the security of the Android platform.
MON 13:45 - 17:45 T3: NETCONF and YANG
Speakers: Jan Lindblad (Tail-f)
Room: Persconferentiezaal

Abstract:
In 2002, IETF held a workshop to collect requirements from network operators to guide the IETFs focus on future work regarding network management [RFC3535]. Several operators expressed their opinion that the developments in the IETF did not address their requirements, especially for configuration management. The outcome of this was the design of NETCONF and YANG. The Network Configuration Protocol (NETCONF) provides operators and application developers with a standard framework and a set of standard Remote Procedure Call (RPC) methods to manipulate the configuration of a network device. YANG is a data modeling language used to model configuration and state data manipulated by the Network Configuration Protocol (NETCONF) protocol, NETCONF remote procedure calls, and NETCONF notifications. NETCONF and YANG together enable network wide configuration management and data-models for devices and services that allow for well-defined semantics and rendering of management and agents. The tutorial will be a straightforward technical explanation of the standards.

Agenda:

  • Standards background, motivation and history
  • NETCONF and YANG introduction
  • YANG overview and examples
  • NETCONF overview and examples
  • Demonstration
  • Current IETF Status

References:
[RFC3535]:  J. Schoenwaelder, Overview of the 2002 IAB Network Management Workshop
[RFC6241]: R. Enns, Editor, Network Configuration Protocol (NETCONF)
[RFC6020]: M. Björklund, Editor, YANG - A Data Modeling Language for the Network Configuration Protocol (NETCONF)

Spreaker biography:

Jan Lindblad received his M.Sc in Computer Science from the Royal Institute of Technology (KTH) in Stockholm, 1995. Aged 12, he built his first computer and at 16 wrote his first compiler. Over the last 25 years Lindblad worked as developer, applications engineer and product manager for IBM, Ericsson, Enea, and is presently Principal Solutions Architect at Tail-f. Lindblad has taught more than a hundred training classes in various programming languages, operating systems, high availability, and network management; presented at even more trade shows, academic conferences and standardization body meetings; created more than 25 M.Sc. thesis projects and acted as long term Swedish government industry advisor for the Vinnova program on Advanced Software Technology (ASTEC).
MON 13:45 - 17:45 T4: Leveraging Cloud for Extreme Scale Applications
Speakers: Sambit Sahu, Salman Baset (IBM)
Room: Refter

Abstract:
This tutorial will focus on leveraging Cloud for enabling large scale enterprise applications. Using several real world use cases, recent advancements, opportunities and research challenges will be illustrated for building such applications and services on Cloud. The use cases will include various commercial applications and services that leverage Cloud computing platforms such as Amazon AWS, Google Cloud to design, build and deliver enterprise level services.

The first part of the tutorial will start with anatomy of a Cloud with exposition of OpenStack architecture and mechanisms. We shall cover the basic concepts behind a large scale cloud computing stack to illustrate the design principles in handling large scale distributed applications. The second part will illustrate several Cloud design patterns and enabling technologies such as AWS auto-scale, Elastic Load Balancer, Cloud Formation, Cloud Front, messaging services and software defined networks (SDN) to demonstrate how to leverage Cloud to design extremely large scale, scalable and reliable applications. The third part will illustrate several use cases that leverage Cloud.

Speaker biographies:

Sambit Sahu has been a research staff member at IBM since 2000 where he currently leads a research group focused on innovations in city scale smarter city services and analytics leveraging cloud technologies. Dr. Sahu received his Ph.D. degree in Computer Science from University of Massachusetts at Amherst. After joining IBM Research, Dr. Sahu has focused on systems and network services management, content distribution network and data center networking and more recently on cloud computing and smarter planet solutions. He has more than 60 technical papers and 75 patents filed in these areas. He is the founding chair of Usenix/ACM HotClpoud workshop which has been well received in the Cloud/Systems community. Dr. Sahu has a best paper award at ACM Internet Measurement Conference 2006. Dr. Sahu’s recent research has been on designing cloud platform and solutions for deploying smarter city services at city scale. He is a master inventor at IBM Research and has several Outstanding Achievement Award and Research Division Awards for his pioneering work in these areas.
 
Salman Baset is working as a Research Staff Member at IBM T. J. Watson Research Center in Hawthorne, NY since December 2010. He obtained his Ph.D. in Computer Science from Columbia University, under the guidance of Professor. Henning Schulzrinne. His research interests are in designing, building, and modeling, cloud-based and peer-to-peer systems. His current research at IBM is focused on over subscription of physical machine resources, automation of software and operating system updates in the cloud, cloud SLAs, and OpenStack. He has been elected as the Release manager of SPEC OSGcloud benchmarking sub-committee which is working on standardizing a cloud benchmark. He is also a co-author of cloud benchmark framework report published by SPEC.  He has been active in the Internet Engineering Task Force (IETF) and is coauthor of RELOAD protocol for building peer-to-peer communication systems. He is a recipient of Young Scholars Award by Marconi Society in 2008 and a best paper award at IPTCOMM in 2010.
FRI 08:45 - 12:45 T5: Practical Network Programming
Speakers: Michael Behringer, Joe Clarke, Bruno Klauser and Jason Pfeifer (Cisco Systems)
Room: Refter

Abstract:
Over the past years, substantial progress has been made in the industry adoption of embedded manageability technologies, network-embedded automation and network programmability. Implementations of network programming are emerging in multiple technology domains – and various self-management, software-defined and autonomic concepts have been validated in proof-of-concept and early production deployments. Hence it makes sense to share experience, compare findings, review current best practices and not only discuss open and upcoming questions among industry practitioners, but also with researchers in academia. In this session, the following main areas will be discussed from the perspective of industry practitioners:

  • Network Automation: Concepts and lessons learned from several years of steep increase in industry adoption of network-embedded manageability and automation. Review of technologies, current best practices as well as challenges going forward.
  • Autonomic Networking: Based on the groundwork laid by research and academia, early validation and adoption of autonomic networking concepts became a reality.
  • Network Programming: Seemingly contradicting to some, perceived complementary by others – software defined networking and network programming introduce new ways for operational procedures and business applications to interact with the network.

A combination of concept presentations, practical validation and case studies as well as hands-on labs will be used to disseminate and discuss current practice as well as early adoptions and emerging capabilities - from the perspective of Cisco individual contributors and based Cisco as well as standard network technology. Current and future work will be discussed, including open questions, interest areas for research collaboration as well as opportunities for practical validation of upcoming concepts.

Speaker biographies:

Michael H. Behringer works at Cisco Systems as a distinguished engineer, where he focuses on autonomic networking, and network complexity. His previous area was service provider core and security issues, such as MPLS security, NGN security, and Denial-of-Service attack prevention. Prior to joining Cisco in 1998, he worked at the European Internet Service Provider DANTE, based in Cambridge, UK. Here he attained the position of senior network engineer and was responsible for the design and implementation of DANTE's pan-European networks. Michael holds a diploma in computer science from the Technical University of Munich. He is an active member of the IETF, co-chair of the IRTF Network Complexity Research Group, and has published several papers, RFCs, and a book on MPLS VPN security.
 
Joe Clarke has contributed to network management products and technologies by finding and fixing bugs, as well as implementing maintenance and troubleshooting components in Cisco Prime, Cisco’s flagship network management suite.  Joe helps to support and enhance the embedded automation and programmability technologies, such as the Embedded Event Manager, Tcl, and onePK.  He is a top-rated speaker at Cisco’s annual user conference, CiscoLive!, as well as a certified as a CCIE, Sun System Administrator, Sun Network Administrator, Sun Security Administrator, Sun Java certified, and VMware Certified Professional.  He has authored numerous technical documents on Cisco network management products and technologies as well as a chapter co-author in the upcoming Springer publication, “Network-Embedded Management and Applications: Understanding Programmable Networking Infrastructure”; and he served as one of the technical editors for the Cisco Press book, "Tcl Scripting for Cisco IOS."  He works as the XML lead on the Common Vulnerability and Reporting Framework project, which is a cross-vendor effort to standardize how security advisory data is shared amongst organizations.  Joe is co-author of six Cisco patents, including one on leveraging XMPP as a network management and a VPN protocol.
 
Bruno Klauser works at Cisco as a Consulting Engineer for Network Automation and Programming in the EMEAR Borderless CTO Team, based out of Zurich, Switzerland. Within this field he's focusing on the adoption of programmability, autonomic concepts and embedded network automation. Key Deliverables include white paper and book chapter contributions, proof of concept demonstrations, open-source tutorials, transfer of information seminars and supporting development and architectural groups within Cisco and the industry. Bruno is a member of the IEEE and co-organizer of workshops related to his focus areas. Prior to joining Cisco in 2000, Bruno has worked as Software Engineer, Software Architect and Project Manager in SP network management projects and network management software development teams. He holds a diploma in Software Engineering from University of Applied Sciences Brugg/Windisch, Switzerland as well as a Master of Advanced Studies diploma in Human Computer Interaction Design from University of Basel, Switzerland. Bruno is married and father of a boy born in 2001 and a girl born in 2004.
 
Jason Pfeifer is a Technical Marketing Engineer in the Network Operating Systems Technology Group for Cisco.  He joins the NOSTG technical marketing team with 11 years experience in the core development of Embedded Event Manager.  He has been in the EEM group since its inception, and is a joint patent holder of the product.  Jason has created EEM solutions for multiple customers, putting the power of EEM to use solving immediate customer needs.
FRI 08:45 - 12:45 T6: Management of the Internet of Things
Speakers: Juergen Schoenwaelder and Anuj Sehgal (Jacobs University)
Room: Rector Vermeylen

Abstract:
The Internet of Things is a vision of a world here physical objects are seamlessly integrated into today's global information network. While initially the focus was the identification of tagged objects, there is meanwhile a clear trend to integrate small embedded systems (often equipped with wireless interfaces) into physical objects. Studies predict up to 50 billion devices connected to the Internet by 2020. With such growth-rates in mind, one has to ask the question how the Internet of Things will be controlled and managed. While implicit self-management is an obvious goal, there are a number of scenarios where explicit management will be needed. This tutorial looks into the challenges and into new enabling technologies that likely play a major role in the Internet of Things and its management.

Agenda:

  • Introduction
    • What is the Internet of Things?
    • Application scenarios and their management requirements
    • Embedded computing technology - classes of IoT devices
  • IoT Protocol Stack
    • IPv6 over IEEE 802.15.4 / Low Energy Bluetooth (6LoWPAN)
    • Routing above or below the IP layer? RPL versus LOAD-NG
    • CoAP: HTTP light for constrained devices
    • Security (DTLS/TLS vs. 802.15.4 security vs. ...)
  • Management of the IoT
    • Traditional: SNMP and NETCONF on constrained devices
    • Modern: RESTful network management interfaces
    • Research: self-management, in-network processing

Speaker biographies:

Juergen Schoenwaelder is the head of the Computer Networks and Distributed Systems (CNDS) research group at Jacobs University Bremen. His research interests are network management, distributed systems, wireless sensor networks, and network security.  He is an active member of the Internet Engineering Task Force (IETF) where he has edited about 30 network management related specifications and standards. He has been co-chair of the ISMS working group of the IETF and he currently serves as co-chair of the NETMOD working group. Previously, he has been chairing the Network Management Research Group (NMRG) of the Internet Research Task Force (IRTF). He currently serves on the editorial boards of the IEEE Transactions on Network and Service Management, the Springer Journal of Network and Systems Management, and the Wiley International Journal of Network Management.
 
Anuj Sehgal is a PhD student of Computer Science at the School of Engineering and Science at Jacobs University Bremen, Germany, from where he also received an M.Sc. in Computer Science. His research is currently within the are of the Internet of Things, but his interests include Wireless Sensor Networks, Disruption Tolerant Networks, Embedded Systems and Underwater Communications. After pursuing his undergraduate education at Brigham Young University-Hawaii, USA, he worked as a Systems Engineer at The I.T. Pros in San Diego, CA.
FRI 13:45 - 17:45 T7: Programmable Cloud Computing and Networking
Speakers: Masum Z. Hasan, Alexander Clemm and Host Dumcke (Cisco Systems)
Room: Refter

Abstract:
This tutorial will cover major concepts of Cloud Computing and Networking, and SDN (Software Defined Networking) or Programmable Networking. Using practical frameworks, such as OpenStack and Cisco OnePK for network programming, it will be shown how the concepts are realized in Cloud and network environments. The tutorial will also cover the important topic of manageability of a deployed Cloud and SDN-enabled network. Following is an outline of the topics that will be covered:

  • Cloud Computing Concepts:
    • IaaS, PaaS and SaaS
    • Public, Private and Hybrid Clouds
    • Cloud DC Network Architecture
    • Enterprise and Cloud DC Application Tier Architecture
    • Introduction to Cloud Management Framework Architecture
    • Cloud Abstractions
    • Cloud related Service and Management Interfaces
    • REST API
    • Hypervisor or Virtual Machine Technologies focusing on KVM and KVM Networking
    • VM-aware Networking
    • Virtual Hybrid Cloud
    • Distributed, parallel and high-performance computing applications on Cloud
  • SDN / Programmable Networking Concepts:
    • SDN concepts and architecture
    • OpenFlow
    • OpenFlow like capabilities in existing network
  • Cloud Concept Realization:
    • Introduction to open source Cloud framework OpenStack
    • OpenStack Architecture, Internal Workings and Service APIs
    • Use Cases and Demos of Cloud Usage Scenarios using OpenStack
    • Functional Demos Conducted on Real Testbed Cloud Infrastructure (canned demo video)
  • SDN or programmable networking frameworks:
    • Cisco Network Programmability Framework - OnePK
    • Use Cases with OnePK (Java) programs
    • Use cases integrating Cloud Functions with SDN
  • Cloud and SDN network manageability:
    • Cloud management issues
    • SDN to improve manageability
    • Relationship between SDN programmability and manageability
    • Integration of SDN apps into manageability infrastructure
    • Management vs SDN interfaces
  • Cutting-edge and practical R&D issues.

Speaker biographies:

Dr. Masum Z. Hasan is currently a Principal Engineer (Technology Director) at the Cloud CTO office of Cisco Systems, San Jose, USA. He currently leads R&D work in Cloud networking, Network Virtualization and Programmable Networking (aka SDN: Software-defined Networking).  His work focus also has been in the area of Grid/High-performance Computing, Healthcare Computing and Networking, Network Analytics, Traffic Engineering, Application and Network resource access control, and Network Management. Masum’s prior job experiences include Principal Investigator at the Bell Labs, USA, Research Scientist at the University of Toronto, Canada and software engineer / computer scientist positions in a number of companies / institutions in Canada and Bangladesh. Masum obtained his MMath and PhD in Computer Science from University of Waterloo, Canada and combined BEng-MEng in Computer Engineering from Odessa National Polytechnic University in Ukraine. Masum has been serving on the organizing and technical program committees of a number of IEEE/IFIP International Conferences and co-editor of a number of journals and magazines. He also serves as the Chair for the IEEE Communications Society's Ad hoc Committee on Cloud Communications and Networking Committee. Visit his personal website for more information.
 
Dr. Alexander Clemm is a Principal Engineer at Cisco. As a member of the Network Operating Systems Group’s Technology Architecture team, he provides technical direction and leadership for technology that relates to manageability of Cisco networking products from original conception to delivery to the customer.  This includes management instrumentation, management and programming interfaces for management applications, and networking capabilities aimed at facilitating operational tasks.  He has several dozen publications and patents in this area and also author and/or editor of several books, including “Network Management Fundamentals” and, very recently, “Network-Embedded Management and Applications”.   Alex is General Co-chair of IFIP/IEEE IM 2013; in the past he was co-chair of Manweek (now CNSM) 2007, DSOM 2007, and the TPC of IM 2005. 
 
Horst Dumcke is a senior technical solutions architect for Cisco System. In this capacity, he covers application optimization and data center technologies, working with customers all over Europe, Middle East, Africa, North and South America. Prior to this role of consultant Horst was responsible for developing web-based applications at Cisco. He has 20+ years of experience in the industry, more than 10 of which he spend in software engineering before moving to more customer facing roles. Horst holds a Diploma in Mathematics from University of Heidelberg, Germany.