December 2013 - talks - lists.cs.princeton.edu

11am Mon Dec 16 talk on integrating middleboxes into software-defined networking
by Jennifer Rexford 14 Dec '13

14 Dec '13

Speaker: Professor Minlan Yu, USC Title: Integrating Middleboxes into Software Defined Networking Date/time: 11am Mon Dec 16 Place: 302 in CS building Abstract: Networks today rely on middleboxes to provide critical performance, security, and policy compliance capabilities. Achieving these benefits and ensuring that the traffic is directed through the desired sequence of middleboxes requires significant manual effort and operator expertise. In this respect, Software-Defined Networking (SDN) offers a promising alternative. Middleboxes, however, introduce new aspects (e.g., policy composition, resource management, dynamic traffic modifications) that fall outside the purvey of traditional L2/L3 functions that SDN supports (e.g., access control or routing). In this talk, we discuss two systems that integrate middleboxes into SDN: First, we propose SIMPLE, which enforces SDN policies with unmodified middleboxes and today’s OpenFlow APIs. Second, we discuss FlowTags, which takes minimal extension of middleboxes to ensure SDN tenets (Origin binding and paths following policy). Bio: Minlan Yu is an assistant professor in the computer science department of University of Southern California. She received her B.A. in computer science and mathematics from Peking University in 2006 and her M.A. and Ph.D in computer science from Princeton University in 2008 and 2011. After that she was a postdoctoral scholar in UC Berkeley for one year. She has actively collaborated with companies such as AT&T, Microsoft, and Bell Labs. Her research interest includes data networking, distributed systems, enterprise and data center networks, network virtualization, and software-defined networking. She received ACM SIGCOMM doctoral dissertation award in 2012 and Google research award in 2013.

1 0

11am Mon Dec 16 talk on integrating middleboxes into software-defined networking
by Jennifer Rexford 14 Dec '13

14 Dec '13

Speaker: Professor Minlan Yu, USC Title: Integrating Middleboxes into Software Defined Networking Date/time: 11am Mon Dec 16 Place: 302 in CS building Abstract: Networks today rely on middleboxes to provide critical performance, security, and policy compliance capabilities. Achieving these benefits and ensuring that the traffic is directed through the desired sequence of middleboxes requires significant manual effort and operator expertise. In this respect, Software-Defined Networking (SDN) offers a promising alternative. Middleboxes, however, introduce new aspects (e.g., policy composition, resource management, dynamic traffic modifications) that fall outside the purvey of traditional L2/L3 functions that SDN supports (e.g., access control or routing). In this talk, we discuss two systems that integrate middleboxes into SDN: First, we propose SIMPLE, which enforces SDN policies with unmodified middleboxes and today’s OpenFlow APIs. Second, we discuss FlowTags, which takes minimal extension of middleboxes to ensure SDN tenets (Origin binding and paths following policy). Bio: Minlan Yu is an assistant professor in the computer science department of University of Southern California. She received her B.A. in computer science and mathematics from Peking University in 2006 and her M.A. and Ph.D in computer science from Princeton University in 2008 and 2011. After that she was a postdoctoral scholar in UC Berkeley for one year. She has actively collaborated with companies such as AT&T, Microsoft, and Bell Labs. Her research interest includes data networking, distributed systems, enterprise and data center networks, network virtualization, and software-defined networking. She received ACM SIGCOMM doctoral dissertation award in 2012 and Google research award in 2013.

1 0

10am Wed Dec 11 talk on pattern matching in compressed HTTP traffic
by Jennifer Rexford 11 Dec '13

11 Dec '13

Speaker: Yaron Koral, Tel Aviv University Title: Efficient multi-pattern matching on Compressed HTTP traffic Date/time: 10-10:50am Wed Dec 11 Place: 402 ’Signature-based’ detection is one of the fundamental technique to detect malicious activities in a network environment. Today, the performance of the security tools is dominated by the speed of the string-matching algorithms that detect these signatures. A significant part of the traffic over the Internet is compressed HTTP. However, current security tools do not deal with such a traffic and require some kind of decompression phase before performing the multi-patterns matching task. Thus, there is a high performance penalty in pattern matching on compressed data. In this talk, we present efficient algorithms for ’on-the-fly’ multi-pattern matching algorithms for common HTTP compression algorithms, such as GZIP and SDCH (Google's compression algorithm). Our results show that surprisingly it is usually faster to do pattern matching on the compressed data, with the penalty of decompression, than to do pattern matching on regular traffic. The talk is based on three papers: one with A. Bremler-Barr (INFOCOM 2009, later in Transactions on Networking 2012), one with Y. Afek and A. Bremler-Barr (Networking 2011, later in Computer Communication 2012) and one with S. Tzur-David, D. Hay and A. Bremler-Barr (INFOCOM 2012).

1 1

Talk starting now in small auditorium
by Jennifer Rexford 09 Dec '13

09 Dec '13

Sent from my iPad

1 0

Colloquium Speaker Yuanyuan Zhou
by Nicole E. Wagenblast 09 Dec '13

09 Dec '13

Do not blame users for misconfigurations Yuanyuan Zhou , University of California, San Diego Monday, December 9, 4:30pm Computer Science 105 Today's data centers usually employ high redundancy to tolerate hardware and software errors. But unfortunately another type of errors, namely configuration errors (i.e., misconfigurations) can still take down the whole data centers. It has contributed to more than 30% high severity issues and caused some of the recent major downtime in cloud service companies including Amazon, Microsoft Azure, Google, Facebook, etc. Unfortunately, many software developers and system designers put most of blames on users for configuration errors, and do not pay enough attention to handling misconfiguration in a more active way. Comparing to software bugs, configuration issues have much less tooling support for error detections, issue tracking, tolerance testing, as well as design reviews. In this talk, I will present our recent work on characterizing misconfigurations in commercial and open source systems (as well as a major commercial cloud service provider), and also some of our solutions in addressing this configuration problem. We approach it from the perspective that configurations are a part of user interface, and thereby need to consider from user perspectives. More specifically, as a practical first step, we need to avoid error-prone requirements and also react gracefully to user mistakes. Our solutions have been used two commercial companies and have influenced some popular open source systems such as "Squid" redesigning their configuration. In this talk, I will also some of the negative interactions (and "challenges") with some open source developers. Yuanyuan Zhou is currently a Qualcomm Chair Professor at UC-San Diego. Before UCSD, she was a tenured associate professor at University of Illinois at Urbana Champaign. Her research interests span the areas of operating systems, software engineering, system reliability and maintainability. She has 3 papers selected into the IEEE Micro Special Issue on Top Picks from Architecture Conferences, best paper at SOSP'05, and 2011 ACM SIGSOFT FSE (Foundation of Software Engineering) Distinguished Paper. She has co-founded two startups. Her recent startup, PatternInsight, has successfully deployed software quality assurance tools in many companies including Cisco, Juniper, Qualcomm, Motorola, Intel, EMC, Lucent, Tellabs, etc. Recently Pattern Insight has sold its Log Insight business to VmWare. In addition, Intel has licensed some of her solutions on detecting concurrency bugs. She has graduated 14 Ph.D. students so far, many of whom have joined top industrial companies and academia such as University of Wisconsin at Madison, University of Toronto, University of Waterloo, etc as tenure-track faculty.

1 1

Fwd: Adi's talk Monday
by Moses S. Charikar 05 Dec '13

05 Dec '13

Adi Shamir will be speaking at IAS this coming Monday, Dec 9. Details below: Cheers, Moses How Cryptosystems Are REALLY Broken Computer Science/Discrete Mathematics Seminar I Topic: How Cryptosystems Are REALLY Broken Speaker: Adi Shamir Affiliation: Weizmann Institute Date: Monday, December 9 Time/Room: 11:15am - 12:15pm/S-101 Most of the cryptosystems we currently use are highly secure, and cannot be broken with reasonable complexity by mathematical cryptanalysis. However, over the last fifteen years researchers have developed many types of physical attacks on their implementations which can easily bypass their mathematical security. In this talk I will survey some of the latest techniques of this type, and show how difficult it is to build a truly secure communication systems.

1 0

Colloquium Speaker David Malan Tues Dec 3, 4:30pm
by Nicole E. Wagenblast 02 Dec '13

02 Dec '13

Pedagogy behind CS50 David Malan , Harvard University Tuesday, December 3, 4:30pm Computer Science 105 CS50 is Harvard University's introductory course for majors and non-majors alike, a one-semester amalgam of courses generally known as CS1 and CS2. In 2007, we set out to alter the course's style and tone to resonate with those "less comfortable" and "more comfortable" alike, albeit without sacrificing the course's historical rigor. We maintained the course's underlying syllabus but revamped every problem set, providing students not only with more direction but context as well. And we augmented the course's support structure. As of 2013, CS50 is Harvard's second-largest course with nearly 700 students, up from 132 in 2006, and those "less comfortable" now compose the course's largest demographic. We present in this talk what we have done and why we have done it. And we offer a glimpse of CS50x, Harvard College's first course to be offered on an even larger scale via edX. BIO David J. Malan is a Senior Lecturer on Computer Science at Harvard University for the School of Engineering and Applied Sciences. He received his A.B., S.M., and Ph.D. in Computer Science from the same in 1999, 2004, and 2007, respectively. His research in graduate school focused primarily on cybersecurity and computer forensics. His more recent publications focus on instructional technologies and pedagogy. He now teaches Harvard College's introductory computer science course, Computer Science 50, otherwise known as CS50, which is available as OpenCourseWare at cs50.tv as well as via edx.org.

1 1