Shimin Sun

Performance optimization of media distribution in overlay networks using OpenFlow

Throughout the last decade, overlay multicast is a hot issue for media distribution services. High bandwidth consumption and multi-source multicasting in widely distributed networks is a critical issue for a wide range of applications including video conferencing, multi-party games, content distribution etc. A number of research projects have explored to use multicast as an efficient and scalable mechanism to deal with group oriented communications. However, there are still some limitations, such as long latency, duplicated packet transmission at certain points and lack of network equipment functionality support. With the appearance of Software Defined Networking, represented by OpenFlow devices, network control and management becomes possible to remote administrators. With the support of OpenFlow, it is possible to do some optimizations of existing media distribution mechanisms in overlay networks. In this paper, we proposed a novel method to improve the traditional overlay multicast relay networks with available limited number of OpenFlow devices, to cut down the bandwidth expenditures and perform a good control and management of media distribution services.

Secure IP Mobility Support in Software Defined Networks

With the proliferation of mobile device and applications, a large number of mobility management solutions have been proposed to support mobility in IP networks. Mobile IP and its derivatives are basically network layer solutions for terminal mobility problems. However, there are several shortages in those solutions, such as large overhead, high latency, lack of scalability and weak security. Software Defined Networking (SDN) provides a flexible centralized approach to handle mobility in IP networks. In this paper, we propose a network based secure mobility management architecture. SDN controller manages the mobility with full authority and controls OpenFlow Switches to forward packets for mobile nodes in optimal path. The implementation and test results show a better delay and throughput performance during the handover process.

Design and deployment of IPv6 address management system on research networks

Recently, research for Future Internet has been proposed and carried out in order to address two kinds of issues. First, the existing Internet protocol does not use new identifiers, and secondly the Internet protocol should be improved to meet usage requirements. Internet Protocol version 6 (IPv6) has been applied to fix the second issue. IPv6 has almost infinite address space. In addition, it has a significant feature in that it allows the host to generate and configure its own IPv6 addresses. We call that feature the Stateless Address Auto Configuration (SLAAC). However, this feature has drawbacks with respect to security for the network management system. Illegal hosts or unauthorized hosts could access the network and attack critical equipment, such as financial or industrial IT infrastructure. Users are exposed to such attacks as identity theft. In order to solve this issue, a host management method is needed to control and protect from illegal or unauthorized hosts. In this paper, we developed and implemented a mechanism for collecting host information and blocking specific hosts using features of ICMPv6. This proposal is tested and implemented in Korea Advance Research Network (KOREN). Through this, our solution covers the mechanisms to control host which is illegal or unauthorized in local network. Therefore, it can be protection from any Virus, DDOS and etc.