Research

Recent draft papers

This is a list of drafts I am currently working on. I hope to see these documents to become papers soon.

• Detecting Injection Attacks on Cooperative Adaptive Cruise Control (draft, Sept 2019)

• Protecting In-Vehicle Services with Security-Enabled SOME/IP (draft, May 2019)

• Creating Complex Network Services with eBPF: the Kubernetes Network Provider Use Case (draft, May 2019)

• Polycube: A Framework for Flexible and Efficient In-Kernel Virtual Network Functions (draft, May 2019)

• Capability-based Orchestration on Multi-domain Networks (draft, Feb 2017)

Recent published papers

• A Service-Agnostic Software Framework for Fast and Efficient In-Kernel Network Services, ACM/IEEE Symposium on Architectures for Networking and Communications Systems (ANCS '19), Cambridge, UK, September 2019.

• Introducing SmartNICs in Server-based Data Plane Processing: the DDoS Mitigation Use Case, IEEE Access, August 2019

• Securing Linux with a faster and scalable iptables, ACM Computer Communication review, July 2019

• A Disaggregated MEC Architecture Enabling Open Services and Novel Business Models, Proceedings of IEEE Conference on Network Softwarization, Paris, France, June 2019.

• A Distributed Architecture for Edge Service Orchestration with Guarantees, Proceedings of IEEE Infocom, Paris, France, Apr 2019

• Situational Awareness for Virtualized Services: The ASTRID Approach, Proceedings of the IEEE International Conference on Cloud Networking, Tokyo, Japan, October 2018

• Fog Computing over Challenged Networks: a Real Case Evaluation, Proceedings of the IEEE International Conference on Cloud Networking, Tokyo, Japan, October 2018

• Enabling Fog Computing over Delay/Disruption-Tolerant Networks, Proceedings of the Italian Conference on ICT for Smart Cities And Communities (iCities), L'Aquila, Italy, September, 2018

• A New Paradigm to Address Threats for Virtualized Services, Proceedings of the 10th IEEE International Workshop on Security Aspects in Processes and Services Engineering (SAPSE), part of the IEEE COMPSAC conference, Tokio, Japan, July 2018

• Accelerating Linux Security with eBPF iptables, Demo at ACM SIGCOMM, Budapest, Hungary, Aug 2018

• Toward an eBPF clone of iptables, Netdev 0x12, The Technical Conference on Linux Networking, Montreal (Canada), July 2018 (slides and video also available)

• Enabling Precise Traffic Filtering Based on Protocol Encapsulation Rules, Elsevier Computer Networks, May 2018

• Creating Complex Network Services with eBPF: Experience and Lessons Learned, Proceedings of IEEE High Performance Switching and Routing (HPSR18), Bucarest, Romania, June 2018

• COMPOSER: A Compact Open-source Service Platform, Elsevier Computer Networks, July 2018

• An Efficient Data Exchange Mechanism for Chained Network Functions, Elsevier Journal of Parallel and Distributed Computing, Apr 2018

• Seamless Configuration of Virtual Network Functions in Data Center Provider Networks, Springer Journal of Network and Systems Management; January 2018

Here there is a list of drafts that very likely will never be published:

• Service-based traffic classification (November 2008)

Talks

• Have you ever tried to create complex network service chains with eBPF?, Netdev 0x14, The Technical Conference on Linux Networking, online, Aug 2020 (video also available).

• Toward an eBPF-based clone of iptables, Netdev 0x12, The Technical Conference on Linux Networking, Montreal (Canada), July 2018 (paper and video also available).

• Toward Flexible and Efficient In-Kernel Network Function Chaining with IOVisor, IEEE International Conference on High Performance Switching and Routing, Bucarest (Romania), June 2018.

• Live Migration of 5G Services between Heterogeneous Infrastructure Domains, demo presented at ITU Focus Group “IMT2020 Workshop and Demo Day: Technology Enablers for 5G,” Geneva, Switzerland, December 7th, 2016. Youtube video available.

• A Control and Management Plane for IOModules, IOVisor Summit, Mountain View, CA, Feb 27th, 2017.

• 5G Operating Platform: Infrastructure-agnostic orchestration, demo presented at ITU Focus Group “IMT2020 Workshop and Demo Day: Technology Enablers for 5G,” Geneva, Switzerland, December 7th, 2016. Youtube video available.

• Coupling the Flexibility of OVN with the Efficiency of IOVisor: Architecture and Demo, 2016 Fall Open vSwitch Conference, San Jose (CA, USA), Nov 7th, 2016. Youtube video available.

• Introducing IOVisor in OpenStack and SDN Infrastructures, invited talk @ Layer123 World SDN Congress, European Workshop on Software Defined Networks, The Hague, October 2016.

• Exploiting Infrastructure Capabilities to Dynamically Orchestrate NFV Services across Multiple Domains, demo presented at ETSI Workshop “From Research To Standardization,” Sophia Antipolis, France, 10-11 May 2016.

• Orchestration in a real network: a case study, EIT Digital / IEEE SDN Workshop, San Francisco, May 2016. Event photo available.

• User-Defined Service Functions in an SDN-Enabled Network, Telecom Italia TIMUDAY, Rome, June 16th, 2015. Event photo available.

• Towards Slimmer Network Functions in the NFV World (Telecom Italia, November 2014)

• User-oriented Network Functions Virtualization (Cisco Systems, Narus, Telecom Italia, March 2014)

• Revealing the FROG (Telecom Italia, December 2013)

• Research Directions in Network Service Chaining (SDN4FNS, November 2013)

• Some Controversial Opinions on Software-Defined Data Plane Services (SDN4FNS, November 2013)

• Software Defined Networks and Beyond (Narus, October 2013)

• Customizing Data Plane Processing in Edge Router (Cisco Systems, Narus, Telecom Italia, February 2013)

• Filtering Network Traffic Based on Protocol Encapsulation Rules (ICNC 2013, January 2013)

• Customizing Data Plane Processing in Edge Routers (1st European Workshop on Software Defined Networks, October 2012)

• Software Defined Networks and Beyond (Telecom Italia, April 2012)

• Applications Like Bees (Polaris Future Cities Workshop, Porto, October 2011)

• Will low-power CPUs replace network processors in future network devices? (Cisco Systems, Nvidia, Telecom Italia, June 2011)

• A possible future for network processors (Institute Eurecom, Nice, April 2011)

• Pattern matching on GPU devices (Telecom Italia, Torino, December 2010)

Open source projects

Some open source software projects I'm currently involved in:

• Universal Node: is a sort of “datacenter in a box”, hence providing functions similar to an OpenStack cluster, but limited to a single server.

• FROGv4: is an SDN/NFV/cloud service orchestrator that supports multiple heterogeneous domains.

• IOVisor-OVN: it extends the current Open Virtual Networking (OVN) project with a new backend based on the IOVisor technology.

Some open source software project I was involved in:

• WinPcap: a library for packet capture and network analysis for Windows

• WinDump: the porting of the famous tcpdump tool

• Analyzer: graphical network sniffer for Windows

• WebLibrary: a simple tool used to create online documentation, that can be easily printed (maintaining a good looking layout) and includes PowerPoint slides to be used in class.

• 46Bouncer: a simple tool that accepts IPv4/IPv6 connections and translates them to IPv6/IPv4. Useful to make IPv4 servers / applications available on the IPv6 domain

• GT: a tool for extracting ground truth from traffic traces, developed in in collaboration with University of Brescia (Italy)

• iNFAnt: an engine for Non-Deterministic Automata on nVidia GPUs

• Dyn@NG: a simple interface for virtualizing Cisco labs (through Dynamips)

• NetBee: the evolution of the WinPcap library; it offers a much more powerful object-based interface and it implements several modules (packet decoding, packet sniffing, ...) that can be used from external programs. Available for Windows and Linux.