5322420
Connection-oriented communications for real-time applications in FDDI-ATM-FDDI heterogeneous networks
We study connection-oriented service in an FDDI-ATM-FDDI heterogeneous network for real-time applications. We design and analyze an algorithm for connection admission control (CAC) for such a network. Upon a request of connection establishment, the CAC determines if the worst case delays of the requesting and existing connections can be satisfied given the available network resources. If so, the CAC allocates appropriate network resources to the requesting connection. The process of allocating resources for homogeneous networks (e.g. FDDI-only or ATM-only) may not be applied directly to a heterogeneous network environment (e.g. FDDI-ATM-FDDI network) because heterogeneity adds more complexity to the process. Hence resource allocation in a heterogeneous network needs more careful analysis than its homogeneous counterpart. We propose a CAC algorithm that will, by proper parameter tuning, allocate sufficient but not excessive network resources to the requesting connection in an FDDI-ATM-FDDI network. We show that the system can achieve satisfactory performance with this CAC algorithm. Our approach is compatible with current network standards and hence can be readily used in practical systems.
3436856
Distributed Privacy Preserving Information Sharing
In this paper, we address issues related to sharing information in a distributed system consisting of autonomous entities, each of which holds a private database. Semi-honest behavior has been widely adopted as the model for adversarial threats. However, it substantially underestimates the capability of adversaries in reality. In this paper, we consider a threat space containing more powerful adversaries that includes not only semi-honest but also those malicious adversaries. In particular, we classify malicious adversaries into two widely existing subclasses, called weakly malicious and strongly malicious adversaries, respectively. We define a measure of privacy leakage for information sharing systems and propose protocols that can effectively and efficiently protect privacy against different kinds of malicious adversaries.
3254470
Providing absolute differentiated services with statistical guarantees in static-priority scheduling networks
The authors propose and analyze a methodology for providing absolute differentiated services with statistical performance guarantees for real time applications in networks that use static priority schedulers. We extend previous work on delay analysis and develop a method that can be used to derive statistical delay guarantees in a flow-unaware fashion. While traditional delay analysis methods depend on flow population information, we have developed a method that relies on network (re-)configuration time analysis, and that allows us to analyze the delays without depending on the dynamic status of flow population. With this new method, we are able to reduce the runtime admission control to a simple utilization test. No explicit delay computation is necessary at admission time, making this approach scalable to large systems.
14217231
Scheduling Tasks with Resource Requirements in Hard Real-Time Systems
This paper describes a heuristic approach for solving the problem of dynamically scheduling tasks in a real-time system where tasks have deadlines and general resource requirements. The crux of our approach lies in the heuristic function used to select the task to be scheduled next. The heuristic function is composed of three weighted factors. These factors explicitly consider information about real-time constraints of tasks and their utilization of resources. Simulation studies show that the weights for the various factors in the heuristic function have to be fine-tuned in order to obtain a degree of success in the range of 75-88 percent of that obtained via exhaustive search. However, modifying the approach to use limited backtracking improves the degree of success substantially to as high as 99.5 percent. This improvement is observed even when the initial set of weights are not tailored for a particular set of tasks. Simulation studies also show that in most cases the schedule determined by the heuristic algorithm is optimal or close to optimal.
38045083
Guarantee protocols for communication in distributed hard real-time systems
A classification scheme is proposed which divides real-time messages into three different classes according to the impact on system performance when the deadline of a message is missed. A study is made of several multiaccess protocols that take into account the time constraints of messages as well as their classifications and that are able to given an early notice when an important message will miss its deadline. The performances of these protocols are evaluated and compared through simulation.<<ETX>>
35665703
Implementation of QoS-Provisioning system for voice over IP
In this paper, we address issues related to implementing Voice-over-IP (VoIP) services in packet switching networks. VoIP has been identified as a critical real-time application in the network QoS research community and has been implemented in commercial products. To provide competent quality of service for VoIP, the call admission control (CAC) mechanism has to be introduced to prevent packet losing and over-queuing. Several well-designed CAC mechanisms, such as the Site- Utilization-Based CAC and the link-utilization-based CAC mechanisms, are in place. However, the existing commercial VoIP systems have not been able to adequately apply and support these CAC mechanisms, and hence unable to provide QoS guarantees to VoIP. We have designed and implemented a QoS-Provisioning system that can be seamlessly integrated to the existing VoIP system to overcome its weakness in offering QoS guarantees. As a result, our system has been realized at Internet2 Voice Over IP Testbed in Texas A&M University.
446110
Controlling the mobility of multiple data transport ferries in a delay-tolerant network
As technology rapidly progresses, more devices will combine both communication and mobility capabilities. With mobility in devices, we envision a new class of proactive networks that are able to adapt themselves, via physical movement, to meet the needs of applications. To fully realize these opportunities, effective control of device mobility and the interaction between devices is needed. In this paper, we consider the message ferrying (MF) scheme which exploits controlled mobility to transport data in delay-tolerant networks, where end-to-end paths may not exist between nodes. In the MF scheme, a set of special mobile nodes called message ferries are responsible for carrying data for nodes in the network. We study the use of multiple ferries in such networks, which may be necessary to address performance and robustness concerns. We focus on the design of ferry routes. With the possibilities of interaction between ferries, the route design problem is challenging. We present algorithms to calculate routes such that the traffic demand is met and the data delivery delay is minimized. We evaluate these algorithms under a variety of network conditions via simulations. Our goal is to guide the design of MF systems and understand the tradeoff between the incurred cost of multiple ferries and the improved performance. We show that the performance scales well with the number of ferries in terms of throughput, delay and resource requirements in both ferries and nodes.
17989665
Message ferrying: proactive routing in highly-partitioned wireless ad hoc networks
An ad hoc network allows devices with wireless interfaces to communicate with each other without any pre-installed infrastructure. Due to node mobility, limited radio power, node failure and wide deployment area, ad hoc networks are often vulnerable to network partitioning. A number of examples are in battlefield, disaster recovery and wide area surveillance. Unfortunately, most existing ad hoc routing protocols will fail to deliver messages under these circumstances since no route to the destination exists. In this work we propose the Message Ferrying or MF scheme that provides efficient data delivery in disconnected ad hoc networks. In the MF scheme, nodes move proactively to send or receive messages. By introducing non-randomness in a node's proactive movement and exploiting such nonrandomness to deliver messages, the MF scheme improves data delivery performance in a disconnected network. In this paper, we propose the basic design of the MF scheme and develop a general framework to classify variations of MF systems. We also study ferry route design problem in stationary node case which is shown to be NP-hard and provide an efficient algorithm to compute ferry route.
30153007
Selective anti-entropy
Anti-entropy [1] is an important mechanism to achieve eventual consistency among a set of replicas. We refer to traditional antientropy [2, 3] as complete anti-entropy, where two replicas reconcile all inconsistent states between them in a two-way session or two one-way sessions. Complete anti-entropy works well in full replications, but may cause a summary problem (a replica cannot summarize its received updates using a summary vector) in partial replications (where the state set is divided into subsets referred to as scopes). To avoid the summary problem, we propose to use selective anti-entropy, which is to selectively reconcile inconsistent states between two replicas in a session, i.e., a replica specifies the subsets of updates it solicits, and thus controls what it receives from another replica. In selective anti-entropy, all updates that are initially received by the same replica R= belong to the same s u b s e t / ~ . The subset of a state is determined by the last update applied to it. A selective anti-entropy session where R¢ requests new updates in -P~i, Rx2, .... R~ k from R~ is denoted as O(R~, {/:/=~, Rx2, ..., R=k }, R~). We distinguish four types of selective anti-entropy sessions (listed in Figure 1) based on the number of subsets requested and whether the session is direct or indirect. We assume that a replica R¢ does not request updates in ~ from other replicas. A session is direct if it only requests updates in R--~ from R= (e.g., O___(R~, { ~ } , R~)), otherwise the session is indirect (e.g., O(R=, {1-~u}, R~)) or mixed (e.g., O(_R=, {R~, R~}, R~)). A select-multiple or select-all session can be viewed as comprising k (k >_ 2) select-one sessions, in which at most one is select-one-direct session, and the rest are select-one-indirect sessions. A select-all session is equivalent to a complete anti-entropy session. An anti-entropy session is safe if it will not cause the summary problem. A replica can always choose safe sessions by using selective anti-entropy. Any select-one-direct anti-entropy session, such as O(R=, {R~}, R~), is safe. A select-one-indirect anti-entropy session O(R=, {R-~y}, R~) is safe if S(R=) A S(Ru) C_ S(R~), where S(R=), S(Ru) and S(Rz) denote the scopes of Re, Rv and R~, respectively. In other words, if S(R=) n S(Ru) D S(R=), O(R=, {R-~}, Rz) may cause the summary problem. In Figure 2, for example, O(Ra, {R1}, R6) is safe because S(Ra) N S(R1) = {$1, $2} = S(R6) , but O(R3, {R6}, R2) may not be safe since
12760716
Making Web services dependable
Web services offer great promise for integrating and automating software applications within and between enterprises over the Internet. However, ensuring that Web services are dependable, and can satisfy their clients' requests when the clients need them is a real challenge because, typically, a business activity involves multiple Web services and a Web service involves multiple components, each of which must be dependable. In this paper, we describe fault tolerance techniques, including replication, checkpointing, and message logging, in addition to reliable messaging and transaction management for which Web services specifications exist. We discuss how those techniques can be applied to the components of the Web services involved in the business activities to render them dependable.
9870709
End-to-end latency of a fault-tolerant CORBA infrastructure
This paper presents an evaluation of the end-to-end latency of a fault-tolerant CORBA infrastructure that we have implemented. The fault-tolerant infrastructure replicates the server applications using active, passive and semi-active replication, and maintains strong replica consistency of the server replicas. By analyses and by measurements of the running fault-tolerant infrastructure, we characterize the end-to-end latency under fault-free conditions. The main determining factor of the run-time performance of the fault-tolerant infrastructure is the Totem group communication protocol, which contributes to the end-to-end latency primarily in two ways: the delay in sending messages and the processing cost of the rotating token.To reduce the delay in sending messages for passive and semi-active replication, the position of the primary server replica on the Totem ring, the token rotation time, the processing time at the client, and the processing time at the server must be considered. For active replication, the presence of duplicate messages adversely affects the performance. However, if an effective sending-side duplicate suppression mechanism is implemented, active replication is more advantageous than both passive and semi-active replication because of the automatic selection of the most favorable position of the server replica that sends the first non-duplicate reply.