[AIMS2012]

6th International Conference on

Autonomous Infrastructure, Management and Security

(AIMS 2012)

June 04-08, 2012, University of Luxembourg, Luxembourg

Tutorial 1: Monday June 4 (Morning)

Introduction to Content Centric Networking and the CCNx framework

Thibault Cholez, University of Luxembourg

Based on the observation that today's Internet is more about content diffusion than point-to-point communication, Content Centric Networking (CCN) is a new routing paradigm that proposes a radical change on the Internet architecture while being incrementally deployable. CCN is one of the most promising research area for a future Internet, more scalable, secure, collaborative and efficient. It is currently raising the increasing interest of the network community. This workshop aims to give to the audience the key elements to better understand CCN and its possibilities.

Thibault Cholez graduated in 2007 from Nancy University for both a Master degree in Computer Science and a leading Engineering school (ESIAL). He did his PhD studies in the laboratory INRIA Nancy / LORIA on the monitoring and security of large P2P networks and got his PhD degree from Nancy University in 2011. After a first postdoc at the University of Technology of Troyes where he investigated the diffusion of pollution in P2P systems, he currently pursues his research activities at the University of Luxembourg on the monitoring of distributed systems and the security of services, with a new particular interest for the Content-centric networking paradigm. In the same time, he also contributes to a European FP7 research project on the Internet of Things.

Outline:

  • Presentation of CCN
    • The CCN paradigm
    • Challenges and research activities
  • CCNx tools - how to use the framework to experiment CCN, hands-on exercises
    • Architecture of CCNx
    • Provided tools and libraries
    • Generation of CCN traffic
    • Writing of a CCN application

Tutorial 2: Monday June 4 (Afternoon)

Running a Cloud Computing Infrastructure with OpenStack

Anuj Sehgal, Jacobs University Bremen

Cloud computing enables the delivery of computing resources as a service, rather than a single bundled product. Amongst the many options for running a cloud infrastructure, the open source solution, OpenStack, from NASA and Rackspace has obtained traction due to its high scalability. In the first part of this tutorial, participants will learn to setup a OpenStack compute cloud based on the Nova and Glance services. The participants will gain experience in installing and setting up nova-schedule, nova-api, nova-network and rabbit-mq services. The nova-volume service will also be setup to provide persistent block storage in the cloud using iSCSI. The nova-compute service, will be setup with the KVM hypervisor to instantiate virtual machines. OpenStack Glance will be used to maintain a registry of virtual machines available to Nova services. In the second part of the tutorial, participants will learn to work with the compute cloud by creating user credentials. They will then download, register and instantiate an image using the euca-tools package. They will also learn to create and attach persistent block storage to their virtual machine using euca-tools. Attaching floating and fixed IP addresses will also be covered.

Anuj Sehgal's interests in wireless sensor networks, robotics, image processing and oceanography led him to pursue a M.Sc. in Smart Systems at Jacobs University. While pursuing a PhD he was the teaching assistant for graduate and undergraduate courses in wireless sensor networks and offered tutorials on how to design and program such networks using both, TinyOS and Contiki operating systems. A team led by him designed and built India’s first award-winning Autonomous Underwater Vehicle. He has taught and organized multiple classes, tutorial and summer schools on the topics of embedded systems, robotics and wireless sensor networks attended by undergraduates, graduates, professors and research scientists.

Outline:

  • An Introduction to Cloud Computing
  • An Overview of the OpenStack Architecture
  • Setting up an OpenStack Compute Cloud
    • Cloud controller service
    • Registry service for OpenStack
    • Persistent block storage with iSCSI
  • Using the OpenStack Compute Cloud
    • Creating users
    • Using euca-tools
    • Instantiating VMs
    • Managing storage and IP addresses

Tutorial 3: Tuesday June 5

Using NfSen/NFDUMP tools with Extension Plugins for Network Security Monitoring

Pavel Celeda, Masaryk University

In the first part of tutorial participants will learn how to use NetFlow tools (NetFlow analysis tools NfSen/NFDUMP and the FlowMon probe) for network security monitoring. Participants will use the tools to identify and analyse network security threats in real network data. In the second part of tutorial, additional NfSen plugins will be presented and participants will use them to perform advanced analysis of network data. Possibilities of writing new plugins will be discussed together with further development.

Pavel Celeda, Ph.D., works as a researcher and a systems analyst at the Institute of Computer Science at the Masaryk University in Brno (www.muni.cz). He has a engineering degree in electrical engineering from the Military Academy Brno and Ph.D. in informatics from University of Defence. Pavel led in 2005-2010 the software group of Liberouter project (www.liberouter.org). His current research areas include security and monitoring of high-speed networks and development of network monitoring devices. His research results were successfully transferred to several university startup companies. You can reach him at celeda@ics.muni.cz.

Outline:

  • NetFlow as an essential part of network security monitoring
  • NetFlow tools - how to use NFDUMP and NfSen, hands-on exercises
    • Analysing NetFlow data
    • Creating NfSen profiles and alerts
    • Identifying network threats
  • Overview of existing NfSen plug-ins and work with them
    • University of Twente: SurfMap, SSH plugin, Ethernet monitoring
    • Masaryk University: PortTracker, DelayWatch, CNDet, PeaKock
    • Cesnet: Hamster, InternetAlerts, BC Dimensions
  • Further possibilities
    • Writing new plugins for NfSen and FlowMon
    • Further development