論文 - 寺岡　文男

GAMPALv2: An Anomaly Detection Mechanism for Internet Traffic by Predicting Flow Size Range from Time Features

Taku Wakui, Fumio Teraoka, Takao Kondo

IEICE Transactions on Information and Systems （電子情報通信学会）  E108-D （ 6 ）  2025年06月

研究論文（学術雑誌）, 共著, 査読有り

Detecting Inconsistency between Network Design and Current State Based on Network Ontology Bonsai

Mori K., Kondo T., Teraoka F.

Asian Internet Engineering Conference, AINTEC 2024    76 - 84 2024年08月

　概要を見る

Generally, a network administrator designs, constructs, and operates an enterprise network. Since inconsistency between the network design understood by the administrator and the actual network configuration might arise due to mistakes or errors, a method for automatically detecting such inconsistency is needed. The following four techniques are necessary for this purpose. (i) A machine-readable notation to represent the network configuration. (ii) A tool to write down the network design using the machine-readable notation. (iii) A tool to automatically detect the current network configuration and write it down in the machine-readable notation. (iv) A tool to compare the two outputs generated in (ii) and (iii). This paper employs the network ontology called Bonsai for (i). Bonsai can represent not only physical configurations but also virtualization technologies such as VLAN and overlay. This paper proposes three tools, nc-design, nc-detect, and nc-diff for (ii)-(iv), and confirms that they work as expected in the test network. This paper also measures their fundamental performance.

• Access to Document (DOI)

Poster: A container orchestration method considering shared containers in an mec environment

Sekiguchi A., Kondo T., Mori K., Kumakura K., Zhang L., Teraoka F.

MOBISYS 2024 - Proceedings of the 2024 22nd Annual International Conference on Mobile Systems, Applications and Services （ACM）     698 - 699 2024年06月

研究論文（国際会議プロシーディングス）, 共著, 最終著者, 責任著者, 査読有り

　概要を見る

In a Multi-access Edge Computing (MEC) environment, an application will be composed of multiple containers running on edge servers, and a container orchestration method determines which containers should be deployed on which edge servers. This paper proposes a container orchestration method considering shared containers. These containers will be introduced in an MEC environment to reduce application resource usage, similar to a shared library in an operating system. The proposed method adopts a multi-stage grouping of edge servers to aggregate computation resource information and network information of the edge servers for efficient orchestration calculation. The formulation of the proposed orchestration method has been successfully completed, marking a significant milestone in this research. Evaluation will be conducted assuming an environment that contains 2,048 edge servers and 200 user terminals.

• Access to Document (DOI)

Poster: Secure NFV Infrastructure based on Software Fault Isolation Considering Multi-Tenant Environment

Koizumi S., Kondo T., Teraoka F.

MOBISYS 2024 - Proceedings of the 2024 22nd Annual International Conference on Mobile Systems, Applications and Services （ACM）     650 - 651 2024年06月

研究論文（国際会議プロシーディングス）, 共著, 最終著者, 責任著者, 査読有り

　概要を見る

Network Function Virtualization Infrastructure (NFVI) enables the operation of Network Function Chaining (NFC) in a low-cost and flexible manner by realizing network functions as software on general-purpose servers. One of NFVI's security requirements is access control to packet buffers, which can be achieved using Intra-process Isolation techniques. This paper proposes a secure NFVI using Software Fault Isolation (SFI) for access control to packet buffers by inserting bounds check instructions before indirect memory access instructions. The measurement results show that the proposed method is faster than ERIM, another Intra-process isolation method based on domain switching.

• Access to Document (DOI)

Poster: Pub-Sub Based M2M System in an MEC Environment Considering Mobile Nodes as Compute Servers

Takano H., Sawada R., Mori K., Teraoka F.

MOBISYS 2024 - Proceedings of the 2024 22nd Annual International Conference on Mobile Systems, Applications and Services （ACM）     700 - 701 2024年06月

研究論文（国際会議プロシーディングス）, 共著, 最終著者, 責任著者, 査読有り

　概要を見る

The number of IoT devices is increasing, but applications that utilize IoT devices and their data are still developing. One reason is the tight coupling between M2M infrastructure and applications and the difficulty of handling mobile devices in a unified manner. To address these challenges, we developed a versatile M2M system called "MECM2M"that utilizes the MEC paradigm. This paper proposes "MECM2Mv2"by adopting the Pub-Sub model and redesigning modules to improve the latency and efficiency, which were issues in MECM2M. Our future research evaluates the safety of using MECM2Mv2 in autonomous driving applications.

• Access to Document (DOI)

OLIViS: An OSINT-Based Lightweight Method for Identifying Video Services in Backbone ISPs

Tamura Y., Teraoka F., Kondo T.

Proceedings of IEEE/IFIP Network Operations and Management Symposium 2024, NOMS 2024 （IEEE）   （ 1 ） 11 2024年05月

研究論文（国際会議プロシーディングス）, 共著, 査読有り

　概要を見る

As of 2022, 66% of Internet traffic is generated by video services, among which Netflix and YouTube are the dominant players. By monitoring the traffic volume of individual video services, ISPs (Internet Service Providers) can make appropriate capital investments and determine appropriate peering policies with CDN (Content Delivery Network) providers. Although DPI (Deep Packet Inspection) is widely used to identify network services, packet-level analysis does not scale to the traffic passing through backbone ISPs and is inapplicable to encrypted packets. This paper proposes OLIViS (OSINT-based Lightweight method for Identifying Video Services), a flow-level, label-free method designed for backbone ISPs. OLIViS employs a CNN-VAE (Convolutional Neural Network - Variational AutoEncoder) model to initially identify elephant flows which likely include video service flows and then utilizes OSINT (Open Source INTelligence) data for further services identification. Two datasets are used for evaluation: UTMobileNet2021 and WIDE backbone real trace. The evaluation results show that OLIViS identifies the Netflix and YouTube flows with an accuracy of over 96% in terms of traffic volume. Moreover, OLIViS infers the flow statistics (e.g., mean and peak throughput) of Netflix and YouTube, which closely resemble those inferred with DPI on non-encrypted traffic in a campus network.

• Access to Document (DOI)

BROF: An Efficient Tree Construction Method Using Passive Link Quality Estimation for a Wireless Sensor Network

Fujita H., Tanaka Y., Mori K., Teraoka F.

Journal of Information Processing （情報処理学会）  32   319 - 330 2024年03月

研究論文（学術雑誌）, 共著, 最終著者, 責任著者, 査読有り

　概要を見る

RPL is a standard routing protocol for an IPv6-Based LLN (Low power and Lossy Network). In RPL, each node estimates link quality to neighboring nodes and selects its parent node by an OF (Objective Function) to construct a tree structure rooted at the sink node. Currently, a typical OF is MRHOF (Minimum Rank with Hysteresis OF). MRHOF on Contiki-NG, an operating system for LLN devices, adopts an active monitoring approach for link quality estimation, which consumes much battery power. This paper proposes BROF (Broadcast Reception based OF) based on a passive monitoring approach. BROF listens to control messages transmitted by neighboring nodes and exploits unicast messages transmitted to the parent node. The performance of BROF and MRHOF on Contiki-NG is evaluated with a simulator and a testbed. The evaluation results show that the delivery ratio and delay of data messages in both OFs are almost the same while the number of transmitted L2 frames for control messages in BROF is only 19.7% to 37.8% of that in MRHOF on Contiki-NG for constructing and maintaining a tree structure. This means that BROF can achieve almost the same performance for sensing data collection as MRHOF on Contiki-NG with remarkably less battery consumption.

• Access to Document (DOI)

Sharing Stateless Containers among MEC Applications Composed of Multiple Containers

Yanagisawa S., Yamada K., Sekiguchi A., Kondo T., Kumakura K., Maesako K., Zhang L., Mori K., Teraoka F.

Proceedings - International Conference on Computer Communications and Networks, ICCCN 2024年

ISSN  10952055

　概要を見る

In an MEC (Multi-access Edge Computing) environment, it is suitable to compose an application as a set of containers for flexibility in resource allocation. This paper proposes stateless shared containers (SS-Containers) that can be shared by multiple applications simultaneously in an MEC environment, similar to a shared library in an operating system. It is expected that SS-Containers reduce resource consumption, shorten application startup time, and efficiently manage special hardware such as GPU. When 16 applications share an SS-Container with an encryption function, and each application contains the container with the same encryption function, the memory consumption is reduced by approximately 190 MiB. Comparing the case in which nine applications share an SS-Container that accesses a GPU to solve large-scale simultaneous linear equations with the case in which nine applications randomly access a GPU via a container inside them, the response time is reduced approximately by 57 % (39 seconds).

• Access to Document (DOI)

MECM2M: An MEC Based M2M System Considering Mobile Nodes as Compute Servers

Sawada R., Takano H., Mori K., Teraoka F.

Proceedings - 2024 IEEE 48th Annual Computers, Software, and Applications Conference, COMPSAC 2024    765 - 775 2024年

　概要を見る

In addition to stationary sensors/actuators (nodes), mobile nodes such as vehicles and smartphones are connected to M2M (Machine-to-Machine) systems. Some M2M systems take into account node mobility, while some M2M systems regard vehicles as compute servers. N one of them, however, handle the mobility of nodes that act as compute servers. This paper proposes an MEC (Multi-access Edge Computing) based M2M system called MECM2M, which can handle the mobility of nodes acting as sensors/actuators and compute servers. The design policy of MECM2M is analogous to that of the Internet. The Internet provides two fundamental services: reliable byte stream and unreliable datagram. How data is used is up to applications. MECM2M provides M2M applications with three fundamental services as the M2M services: area-based data acquisition, node-based data acquisition, and node-based action instruction. How sensing data is used is up to M2M applications. MECM2M introduces the virtual nodes as digital twins in the virtual space for the physical nodes. The virtual nodes conceal differences from the physical nodes and provide a uniform interface. The relation among the virtual nodes, the physical nodes, and the locations of the physical nodes is managed by a domain ontology called Onto- Mecm2m,which enables effective processing of the three fundamental services. The evaluation results on an MECM2M emulator show that the response times of the three fundamental services satisfy the latency constraints, i.e., 100 ms, defined in an ETSI (European Telecommunications Standards Institute) document.

• Access to Document (DOI)

Weaver Meets KANVAS: An Autonomous Closed-Loop Network Management System

Tanabe K., Kondo T., Mori K., Kuroda T., Satoda K., Teraoka F.

ACM International Conference Proceeding Series （ACM）     28 - 36 2023年12月

研究論文（国際会議プロシーディングス）, 共著, 最終著者, 責任著者, 査読有り

　概要を見る

This paper proposes an autonomous network management system based on closed-loop control to deal with network failures and congestion. The proposed system is realized by collaboration of Weaver, an automated system configuration designer based on Intent-based Networking, and KANVAS (Knowledge base system in wide Area Networks with Versatility, Availability, and Scalability), a framework for collecting and utilizing network information. In the proposed system, the KANVAS system collects and analyzes network conditions, and the Weaver system plans and executes countermeasures against a failure event based on the analysis results. This paper shows two case studies. In the first case study, the proposed system can automatically recover from a service failure caused by a node failure in approximately 8.5 minutes. In the second case study, the proposed system can reroute VPN due to congestion in the underlay network in approximately 35 seconds. These results show that the proposed system can automatically recover service networks from a failure and congestion that occur on the underlay network in shorter time than that required for manual recovery.

• Access to Document (DOI)

A Fast Handover Mechanism for Ground-to-Train Free-Space Optical Communication using Station ID Recognition by Dual-Port Camera

Mori K., Teraoka F., Haruyama S.

IEICE Transactions on Information and Systems （電子情報通信学会）  E106.D （ 5 ） 940 - 951 2023年05月

研究論文（学術雑誌）, 共著, 査読有り,  ISSN  09168532

　概要を見る

There are demands for high-speed and stable ground-totrain optical communication as a network environment for trains. The existing ground-to-train optical communication system developed by the authors uses a camera and a QPD (Quadrant photo diode) to capture beacon light. The problem with the existing system is that it is impossible to identify the ground station. In the system proposed in this paper, a beacon light modulated with the ID of the ground station is transmitted, and the ground station is identified by demodulating the image from the dual-port camera on the opposite side. In this paper, we developed an actual system and conducted experiments using a car on the road. The results showed that only one packet was lost with the ping command every 1 ms near handover. Although the communication device itself has a bandwidth of 100 Mbps, the throughput before and after the handover was about 94 Mbps, and only dropped to about 89.4 Mbps during the handover.

• Access to Document (DOI)

FedIoT: An Autonomous and Decentralized IoT System Federation Mechanism with Primitive API

Shimada K., Watanabe H., Kondo T., Teraoka F.

Journal of Information Processing （情報処理学会）  30   898 - 908 2022年12月

研究論文（学術雑誌）, 共著, 最終著者, 責任著者, 査読有り

　概要を見る

Current IoT systems are closed and specialized for specific purposes. In the near future, IoT Service Providers (IoTSPs) will emerge to allow providing sensing data observed by IoTSPs to subscribers. This paper proposes a mechanism called FedIoT, in which IoTSPs federate or namely unite in an autonomous and decentralized manner. Subscribers to an IoTSP in an FedIoT system can obtain sensing data observed by any IoTSPs in the FedIoT system. The design principle of FedIoT is analogous to that of the Internet. A FedIoT system is composed of multiple IoTSPs as the Internet is composed of multiple ASs (Autonomous Systems). FedIoT basically provides only sensing data to IoT applications and it depends on IoT applications how the sensing data is utilized as the Internet basically provides data exchange between applications. IoTSPs are interconnected with a unified interface called Primitive API considering operation policy as ASs exchange routing information considering operation policy. FedIoT defines a domain ontology called OntoFedIoT as the unified representation of locations and types of sensor nodes. A proof of concept system is implemented in Go language. The basic performance evaluation in this paper shows that the time required for obtaining sensing data is short enough for practical use.

• Access to Document (DOI)

KANVAS: A Network Information Sharing Framework Based on Network Ontology Bonsai

Kuchii K., Kondo T., Teraoka F.

ACM International Conference Proceeding Series （ACM）     79 - 87 2022年11月

研究論文（国際会議プロシーディングス）, 共著, 最終著者, 責任著者, 査読有り

　概要を見る

Demands for acquiring Internet behavior are increasing for Internet-scale network understanding such as inter-AS path management and traffic engineering. Although there are several efforts to make Internet behavior public, most of the public information is not structured and it is hard for applications to use such information. This paper proposes a network information sharing framework called KANVAS. It defines a network ontology called Bonsai which models network structure from viewpoints of physical, logical, service, and operation network structures. Bonsai can express network virtualization technologies such as link aggregation (LAG), VLAN, L2 over L3 tunneling, and virtual routing and forwarding (VRF). Applications can access network information via useful API. As a first step of development of KANVAS and Bonsai, this paper describes network information sharing within a single domain focusing on failure localization and throughput monitoring as examples. Evaluation results on a PoC system show that the time for failure localization is short enough and a throughput monitoring tool can choose appropriate monitoring points.

• Access to Document (DOI)

6TiSCH Scheduling Function Design Suite founded on Contiki-NG

Tanaka Y., Ito T., Teraoka F.

Journal of Information Processing （情報処理学会）  30   669 - 678 2022年09月

研究論文（学術雑誌）, 共著, 最終著者, 査読有り

　概要を見る

6TiSCH (IPv6 over the TSCH mode of IEEE 802.15.4e) is a key enabler of Industrial Internet of Things. A 6TiSCH network is an IPv6 wireless multi-hop network built over TSCH (Timeslotted Channel Hopping) links. TSCH is a medium access mode of IEEE 802.15.4 which provides deterministic properties, and increases robustness against external interference. A 6TiSCH scheduling function computes a TSCH communication schedule which determines key performance indicators of the network such as end-to-end latency. We propose a 6TiSCH scheduling function design suite founded on Contiki-NG, an open source and cross-platform operating system for wireless sensor networks. We implement missing pieces of Contiki-NG and other tools for the design suite: a Cooja mote port of TSCH, 6top Protocol (6P) on Contiki-NG, and a 6P dissector for Wireshark. The Cooja mote is a node type of Cooja that is an accompanying simulator of Contiki-NG. We confirm that execution time of a 6TiCSH network simulation with our Cooja mote port is more than 5 times faster than that with Z1 mote. It is confirmed that our 6P implementation is interopeable with other implementations including OpenWSN. All our implementations are publicly available as part of the official releases of Cooja, Contiki-NG, and Wireshark.

• Access to Document (DOI)

ContMEC: An Architecture of Multi-access Edge Computing for Offloading Container-Based Mobile Applications

Watanabe H., Yasumori R., Kondo T., Kumakura K., Maesako K., Zhang L., Inagaki Y., Teraoka F.

IEEE International Conference on Communications （IEEE）  2022-May   3647 - 3653 2022年05月

研究論文（国際会議プロシーディングス）, 共著, 最終著者, 責任著者, 査読有り,  ISSN  15503607

　概要を見る

This paper proposes an architecture called Cont-MEC for enabling UEs (User Equipments) to offload a part of applications to MEC (Multi-access Edge Computing) servers. It is expected that a MEC infrastructure is composed of a small number of centralized data centers and geographically distributed edge stations, in each of which multiple edge servers are installed. It is also expected that applications on UEs are implemented as container clusters similar to cloud-native applications and they are deployed on computing clusters. ContMEC has the following three features: (i) constructing a computing cluster per edge station for scalability to the number of UEs, (ii) hierarchical resource management for scalability and efficient resource sharing among computing clusters, and (iii) overlapped computing clusters for efficient resource sharing. A PoC (Proof-of Concept) implementation of ContMEC employs Kubernetes as a container orchestration system without modifications although Kubernetes does not take account of the MEC infrastructure. The PoC implementation shows that advantage of offloading is larger than disadvantage of implementing applications as container clusters, control traffic is moderate against the number of UEs, and efficient resource sharing among computing clusters is achieved.

• Access to Document (DOI)

階層型 ICN 機構 ZINK における Diameter を用いた認証認可機構

近藤賢郎，寺岡文男

電子情報通信学会論文誌B （電子情報通信学会）  J105-B （ 3 ） 128 - 144 2022年03月

研究論文（学術雑誌）, 共著, 最終著者, 責任著者, 査読有り,  ISSN  1881-0209

• Access to Document (DOI)

L5-TSPP: A Protocol for Disruption Tolerant Networking in Layer-5

Watanabe H., Teraoka F.

IEICE Transactions on Communications （電子情報通信学会）  E105–B （ 2 ） 215 - 227 2022年02月

研究論文（学術雑誌）, 共著, 最終著者, 責任著者, 査読有り,  ISSN  09168516

　概要を見る

TCP/IP, the foundation of the current Internet, assumes a sufficiently low packet loss rate for links in communication path. On the other hand, for communication services such as mobile and wireless communications, communication link tends to be disruptive. In this paper, we propose Layer-5 temporally-spliced path protocol (L5-TSPP), which provides disruption-tolerance in the L5 temporally-spliced path (L5-TSP), as one of the communication paths provided by Layer-5 (L5-paths). We design and implement an API for using L5-paths (L5 API). The L5 API is designed and implemented to support not only POSIX systems but also non-POSIX systems. L5 API and L5-TSPP are implemented in the user space in Go language. The measurement results show that L5-TSP achieves lower and more stable connection establishment time and better end-to-end throughput in the presence of disruption than conventional communication paths.

• Access to Document (DOI)

Accelerating 6TiSCH Network Formation

Tanaka Y., Minet P., Watteyne T., Teraoka F.

Proceedings - 17th Annual International Conference on Distributed Computing in Sensor Systems, DCOS 2021 （IEEE）     18 - 24 2021年07月

研究論文（国際会議プロシーディングス）, 共著, 最終著者, 査読有り

　概要を見る

Wireless sensor networking is a key enabler of Industrial IoT. IETF (Internet Engineering Task Force) has standardized a protocol suite called 6TiSCH (IPv6 over the TSCH mode of IEEE802.15.4e). 6TiSCH builds an IPv6 multi-hop wireless network with the IEEE802.15.4 radio, which achieves low energy consumption and high reliability. Although network formation time is one of key performance indicators of wireless sensor networks, it has not been studied well with 6TiSCH standard protocols such as MSF (6TiSCH Minimal Scheduling Function) and CoJP (Constrained Join Protocol). In this paper, we propose a scheduling function called SF-Fastboot which shortens network formation time of 6TiSCH. We evaluate SF-Fastboot by simulation comparing with MSF, the state-of-the-art scheduling function. The simulation shows SF-Fastboot reduces network formation time by 41 % - 80 %.

• Access to Document (DOI)

LiONv2: An Experimental Network Construction Tool Considering Disaggregation of Network Configuration and Device Configuration

Nagai Y., Watanabe H., Kondo T., Teraoka F.

Proceedings of the 2021 IEEE Conference on Network Softwarization: Accelerating Network Softwarization in the Cognitive Age, NetSoft 2021 （IEEE）     171 - 175 2021年06月

研究論文（国際会議プロシーディングス）, 共著, 最終著者, 責任著者, 査読有り

　概要を見る

An experimental network environment plays an important role to examine new systems and protocols. We have developed an experimental network construction tool called LiONv1 (Lightweight On-Demand Networking, ver.1). LiONv1 satisfies the following four requirements: programmer-friendly configuration file based on Infrastructure as Code, multiple virtualization technologies for virtual nodes, physical topology conscious virtual node placement, and L3 protocol agnostic virtual networks. None of existing experimental network environments satisfy all the four requirements. In this paper, we develop LiONv2 which satisfies three more requirements: diversity of available network devices, Internet-scale deployment, and disaggregation of network configuration and device configuration. LiONv2 employs NETCONF and YANG to achieve diversity of available network devices and Internet-scale deployment. LiONv2 also defines two YANG models which disaggregate network configuration and device configuration. LiONv2 is implemented in Go and C languages with public libraries for Go. Measurement results show that construction time of a virtual network is irrelevant to the number of virtual nodes if a single virtual node is created per physical node.

• Access to Document (DOI)

Nishikaze: Self-Sustained Wind Power Supply Employing Potential Energy Conversion Method

Teraoka F., Nishiura S., Ohno H.

ACM International Conference Proceeding Series （ACM）     151 - 156 2021年01月

研究論文（国際会議プロシーディングス）, 共著, 筆頭著者, 責任著者, 査読有り

　概要を見る

In an IoT (Internet of Things) system, if image data can be collected in addition to sensor data, the amount of information obtained will increase significantly, which is very useful for monitoring natural disasters, for example. Considering communication speed and covering range, it is assumed that Wi-Fi multi-hop communication is appropriate for image data transmission. Since Wi-Fi consumes a large amount of power, a power supply for sensor nodes is required. Therefore, we are developing a self-sustaining wind power supply called Nishikaze which employs the potential energy conversion method. In this paper, we produced the Nishikaze second prototype. The measurement results of the amount of the generated power show that the Nishikaze second prototype can cover the power required to transmit an image of 500 kbytes at a 10 minute interval assuming that 3 m/s of wind blows for 6 hours in a day, 100 % of the generated power is available, and the active period of sensor nodes is 5 seconds.

• Access to Document (DOI)