Research Student Profile

Home People Profile...

Dr Taimur Bakhshi MBCS MIEEE AFHEA

Research Student

Brief biographical information

taimur.bakhshi@plymouth.ac.uk

  

Access thesis on-line

User-Centric Traffic engineering in Software Defined Networks

Software defined networking (SDN) is a relatively new paradigm that decouples individual network elements from the control logic, offering real-time network programmability, translating high level policy abstractions into low level device configurations. The framework comprises of the data (forwarding) plane incorporating network devices, while the control logic and network services reside in the control and application planes respectively. Operators can optimize the network fabric to yield performance gains for individual applications and services utilizing flow metering and application-awareness, the default traffic management method in SDN. Existing approaches to traffic optimization, however, do not explicitly consider user application trends. Recent SDN traffic engineering designs either offer improvements for typical time-critical applications or focus on devising monitoring solutions aimed at measuring performance metrics of the respective services. The performance caveats of isolated service differentiation on the end users may be substantial considering the growth in Internet and network applications on offer and the resulting diversity in user activities. Application-level flow metering schemes therefore, fall short of fully exploiting the real-time network provisioning capability offered by SDN instead relying on rather static traffic control primitives frequent in legacy networking.
For individual users, SDN may lead to substantial improvements if the framework allows operators to allocate resources while accounting for a user-centric mix of applications. This project explored the user traffic application trends in different network environments and proposed a novel user traffic profiling framework to aid the SDN control plane (controller) in accurately configuring network elements for a broad spectrum of users without impeding specific application requirements. Predominant existing segregated application policy based controls in SDN do not consider the cost of isolated application gains on parallel SDN services and resulting consequence for users having varying application usage. Therefore, attention was given to investigating techniques which may capture the user behaviour for possible integration in SDN traffic controls. To this end, profiling of user application traffic trends was identified as a technique which may offer insight into the inherent diversity in user activities and offer possible incorporation in SDN based traffic engineering.
A series of subsequent user traffic profiling studies were carried out in this regard employing network flow statistics collected from residential and enterprise network environments. Utilizing machine learning techniques including the prominent unsupervised k-means cluster analysis, user generated traffic flows were cluster analysed and the derived profiles in each networking environment were benchmarked for stability before integration in SDN control solutions. In parallel, a novel flow-based traffic classifier was designed to yield high accuracy in identifying user application flows and the traffic profiling mechanism was automated.
The core functions of the novel user-centric traffic engineering solution were validated by the implementation of traffic profiling based SDN network control applications in residential, data center and campus based SDN environments. A series of simulations highlighting varying traffic conditions and profile based policy controls were designed and evaluated in each network setting using the traffic profiles derived from realistic environments to demonstrate the effectiveness of the traffic management solution. The overall network performance metrics per profile showed substantive gains, proportional to operator defined user profile prioritization policies despite high traffic load conditions. The proposed user-centric SDN traffic engineering framework therefore, dynamically provisions data plane resources among different user traffic classes (profiles), capturing user behaviour to define and implement network policy controls, going beyond isolated application management.

Dr Taimur Bakhshi

Director of studies: Dr Bogdan V Ghita
Other supervisors: Dr David Lancaster

Journal papers

On Internet Traffic Classification: A Two-Phased Machine Learning Approach
Bakhshi T, Ghita BV
Journal of Computer Networks and Communications, Volume 2016 (2016), Article ID 2048302, 21 pages, 2016
More details | External link available

Social engineering: assessing vulnerabilities in practice
Bakhshi T, Papadaki M, Furnell SM
Information Management and Computer Security, vol. 17, no. 1, pp53-63, 2009
More details | External link available

2 Journal papers

Conference papers

Traffic profiling: Evaluating stability in multi-device user environments
Bakhshi T, Ghita BV
Advanced Information Networking and Applications Workshops (WAINA), 2016 30th International Conference on, Crans-Montana, pp. 731-736, 2016
More details | External link available

User-centric traffic optimization in residential software defined networks
Bakhshi T, Ghita BV
Telecommunications (ICT), 2016 23rd International Conference on, Thessaloniki, pp. 1-6, 2016
More details | External link available

User-Centric Network Provisioning in Software Defined Data Center Environment
Bakhshi T, Ghita BV
Local Computer Networks (LCN), 2016 IEEE 41st Conference on, 7-10 November, Dubai, pp 289-297, 2016
More details | External link available

A Practical Assessment of Social Engineering Vulnerabilities
Bakhshi T, Papadaki M, Furnell SM
Proceedings of the Second International Symposium on Human Aspects of Information Security & Assurance (HAISA 2008), Plymouth, UK, pp12-23, 2008
Can be ordered on-line.
More details | Download PDF

4 Conference papers

Internal publications

Social Engineering Vulnerabilities
Bakhshi T, Papadaki M
Advances in Communications, Computing, Networks and Security 6, ISBN: 978-1-84102-258-1, pp23-31, 2009
Can be ordered on-line.
More details | Download PDF

1 Internal publications

7 publication(s) - all categories.