Papers by Aladdin Abdulhassan
AIP Conference Proceedings, Dec 31, 2022
Journal of Sustainability Perspectives
The category of setting and infrastructure indicator (SI) is chosen in this comparative study ref... more The category of setting and infrastructure indicator (SI) is chosen in this comparative study referring to the fact file scores obtained by the University of Babylon during the last four participations into the UI Green Metric Rankings. In general, the scores indicated an escalation in the university performance of the whole six sub-indicators of the setting and infrastructure criterion (SI) from 2017-2020. These results confirmed that the university; by its leadership, staff and students, focused on upgrading and developing its infrastructure for setting a green and safe educational environment for most employees and students. That is to achieve a green campus contributing in the global efforts for achieving the UN agenda of SDGs 2015-2030. Furthermore, all practices of university performance coped with its vision, mission, and objective goals of university strategic plan from 2018-2022, which contained the commitments to set up with most of SDGs, especially related to sustainable ...
Bulletin of Electrical Engineering and Informatics
Internet protocol (IP) packet filtering as a firewall (FW) technology is one of the most widely r... more Internet protocol (IP) packet filtering as a firewall (FW) technology is one of the most widely researched networks functions over the past two decades. IP packet filtering is the process of filtering incoming and outgoing network packets by matching several packet headers fields with thousands of predefined filters known as filter-set. With the development of modern network technologies such as software-defined networking (SDN) and the increase in attacks threatening network security, attention has become focused on IP packet filtering. With the growing size and number of filter-sets, it becomes a challenge to perform IP packet filtering at wire-speed. In this paper, a new method is proposed for IP packet filtering, where two data structures were combined to produce a new data structure suitable for IP packet filtering with high performance and support dynamic access to filters as well as support approximate membership query. Experimental results show that the proposed method has a...
Bulletin of Electrical Engineering and Informatics, 2023
Internet protocol (IP) packet filtering as a firewall (FW) technology is one of the most widely r... more Internet protocol (IP) packet filtering as a firewall (FW) technology is one of the most widely researched networks functions over the past two decades. IP packet filtering is the process of filtering incoming and outgoing network packets by matching several packet headers fields with thousands of predefined filters known as filter-set. With the development of modern network technologies such as software-defined networking (SDN) and the increase in attacks threatening network security, attention has become focused on IP packet filtering. With the growing size and number of filter-sets, it becomes a challenge to perform IP packet filtering at wire-speed. In this paper, a new method is proposed for IP packet filtering, where two data structures were combined to produce a new data structure suitable for IP packet filtering with high performance and support dynamic access to filters as well as support approximate membership query. Experimental results show that the proposed method has a high throughput of 10.8 mega packets per second (MPpS) with high filtering accuracy and low memory requirements to working on big filter-sets (up to 1 mega filters).
Cornell University - arXiv, Jul 5, 2022
Software Defined Networking is an approach which decouples the software based control plane from ... more Software Defined Networking is an approach which decouples the software based control plane from the hardware based data plane proposed for enterprise networks; OpenFlow is the most famous flexible protocol that can manage network traffic between the control and the data plane. Software Defined Networking (SDN) requires up to 18 fields of the packets header to be checked against a big many-fields ruleset to categorize packets into flows, the process of categorizing packets into flows is called packet classification. Network switches process all packets belonging to the same flow in a similar manner by applying the same actions that defined in the corresponding rule. Packet classification facilitates supporting a new services such as filtering, blocking unsafe sites traffic, routing packets based on the packet's header information, and giving priority to specific flows. High performance algorithms for many-field packet classification had been gained much interest in the research communities. This paper presents a new method to implement the many-fields packet classification of SDN flow table using Rectangle Tree (R-Tree). In this method, source and destination IP addresses from each flow table entry have been converted to a two dimensional point. The remainders of rule's fields have been concatenated into a single field by taking the most important bits with rules' ID in order to be inserted into the R-tree, for each rule an effective small binary flag used to indicate the field's size, type and ranges. Subsequently, searching is performed on rectangle tree to find the matched rules according to the highest priority. In the simulation using the class-bench databases, the results show that this method achieves very good performance, classification speed and reduces the number of memory accesses significantly.
2021 2nd Information Technology To Enhance e-learning and Other Application (IT-ELA)
2021 4th International Iraqi Conference on Engineering Technology and Their Applications (IICETA), 2021
Software-Defined Networking (SDN) is considered as one of the most important concepts that separa... more Software-Defined Networking (SDN) is considered as one of the most important concepts that separate network control plane over data routing plane. Where it showed many benefits compared to the traditional case of controlling network resources, however, the distribution of traffic in networks SDN affects efficiency and brings up a set of challenges. Therefore, it has become necessary to use Load Balancing (LB) techniques to improve efficiency in SDN. In this paper, we make a comprehensive survey of LB technology in SDN. As well as common load balancing techniques data plane-LB techniques, control plane-LB techniques, other aspects of data plane/control plane-LB. Finally, we highlighted existing SDN-LB challenges and future research directions on SDN-LB techniques.
Lecture Notes in Networks and Systems, 2021
Int. J. Interact. Mob. Technol., 2021
Content Centric Networking (CCN) is a modern architecture that got wide attention in the current ... more Content Centric Networking (CCN) is a modern architecture that got wide attention in the current researches as a substitutional for the current IP-based architecture. Many studies have been investigated on this novel architecture but only little of them focused on Pending Interest Table (PIT) which is very important component in every CCN router. PIT has fundamental role in packet processing in both upstream process (Interest packets) and downstream process (Data packets). PIT must be fast enough in order to not become an obstruction in the packet processing and also it must be big enough to save a lot of incoming information. In this paper, we suggest a new PIT design and implementation named CF-PIT for CCN router. Our PIT design depends on modifying and utilizing an approximate data structure called Cuckoo filter (CF). Cuckoo filter has ideal characteristics like: high insertion/query/deletion performance, acceptable storage demands and false positive probability which make it wit...
2017 Annual Conference on New Trends in Information & Communications Technology Applications (NTICT), 2017
Network packet classification is important network kernel function to enables various network ser... more Network packet classification is important network kernel function to enables various network services such as Quality of Service (QoS), security and resource reservation. The OpenFlow protocol is the responsible of the packet classification, it uses a set of rules called ruleset, each rule in that rule set contain a set of matching fields. With the rapid growing of rulesets size and rule fields numbers in the modern networks, it became so difficult to classify incoming packets at reasonable speed using the classical packet classification techniques. Many modern software-based classification solutions have been proposed to accelerate packet classification in additional to hardware-based solutions. In general, to design packet classification algorithm, it is important to strike a balance between high throughput and low memory requirements. This paper proposes an R-tree based parallel many-field packet classification technique using multi-threading to classify packet into the flow it ...
Journal of High Speed Networks, 2020
Packet classification is a network kernel function that has been widely investigated over the pas... more Packet classification is a network kernel function that has been widely investigated over the past decade. New networking paradigms, such as software-defined networking and server virtualization, have led to renewed interest in packet classification and its upgrade from classical five-field to many-field classification. With the increasing size of the rule sets and demands for higher throughput, performing many-field packet classification at wire-speed has become challenging. In this paper, we propose an approach to classification by integrating a probabilistic data structure called the Cuckoo filter for approximate membership queries into an R-tree data structure for high-speed, many-field packet classification. Experimental results show that the proposed classifier obtains high throughput of up to 1.5 M packets per second, and requires little memory to support large rule sets (up to 1 million rules).
Journal of High Speed Networks, 2018
In recent years, a modern networking paradigm called Software-Defined Networking (SDN) has been i... more In recent years, a modern networking paradigm called Software-Defined Networking (SDN) has been introduced to manage the large networks and datacenters. This paradigm was introduced to keep pace with the rapid growth rates on the Internet and to support advanced network applications. SDN uses an open standard protocol called OpenFlow to manage the network traffic. In OpenFlow switches, the software control plane has been decoupled from the hardware data plane and placed in a controller which has a network-wide view. OpenFlow process all incoming packets that have the same characteristics (lie in the same class) in the same manner. In this paper, we propose and use a generalized extension of BR-tree data structure called AMQ-R tree to organize the rule-sets in a multi-dimensional tree integrated with approximate membership query data structures including Bloom, Quotient and Cuckoo filters in order to get higher quality packet classification performance. Three types of approximate membership query filters integrated with the R-tree have been designed and implemented. Also, a multi-threading technique has been used to accelerate the packet classification by querying the tree in a parallel manner. The experimental results using simulated rule-sets show that this technique can classify incoming packets in up to 1.4 MPPS (Mega Packet per Second) with very small memory requirements.
The Journal of Supercomputing, 2019
Software-defined networking (SDN) is a new paradigm which emerged in the networking area. Packet ... more Software-defined networking (SDN) is a new paradigm which emerged in the networking area. Packet classification is an interesting topic that has considered in both traditional and SDN networks. Packet classification involves inspection of multiple fields against a set of thousands of rules called rule-set. With the increasing throughput demands in modern networks and the growing size of rule-sets, performing wire-speed packet classification has become challenging and an important topic in recent years. Packet classification is called as many-field packet classification in the SDN because of increasing the number of header fields. In this paper, a scalable many-field packet classification by employing the extended tree (X-tree) integrated with an efficient probabilistic data structure called Cuckoo filter is proposed. X-tree has high performance from the lookup, insertion, and update aspects. However, X-tree has a high memory requirement, Cuckoo filter as a probabilistic data structure is integrated within each X-tree node to outperform memory requirements and providing more classification throughput. Our experiment results show that the proposed approach achieves high throughput while requiring low memory. In addition, the proposed approach improves latency 2.4× , 6.15× and 4.75× in comparison with DBAMCP, BSOL-RC and BF-AQT for 64 k rule-set, respectively.
Bulletin of Electrical Engineering and Informatics
The term software defined networking (SDN) is a network model that contributes to redefining the ... more The term software defined networking (SDN) is a network model that contributes to redefining the network characteristics by making the components of this network programmable, monitoring the network faster and larger, operating with the networks from a central location, as well as the possibility of detecting fraudulent traffic and detecting special malfunctions in a simple and effective way. In addition, it is the land of many security threats that lead to the complete suspension of this network. To mitigate this attack this paper based on the use of machine learning techniques contribute to the rapid detection of these attacks and methods were evaluated detecting DDoS attacks and choosing the optimum accuracy for classifying these types within the SDN, the results showed that the proposed system provides the better results of accuracy to detect the DDos attack in SDN network as 99.90% accuracy of Decision Tree (DT) algorithm.
Bulletin of Electrical Engineering and Informatics, 2022
The term software defined networking (SDN) is a network model that contributes to redef... more The term software defined networking (SDN) is a network model that contributes to redefining the network characteristics by making the components of this network programmable, monitoring the network faster and larger, operating with the networks from a central location, as well as the possibility of detecting fraudulent traffic and detecting special malfunctions in a simple and effective way. In addition, it is the land of many security threats that lead to the complete suspension of this network. To mitigate this attack this paper based on the use of machine learning techniques contribute to the rapid detection of these attacks and methods were evaluated detecting DDoS attacks and choosing the optimum accuracy for classifying these types within the SDN, the results showed that the proposed system provides the better results of accuracy to detect the DDos attack in SDN network as 99.90% accuracy of Decision Tree (DT) algorithm.
Uploads
Papers by Aladdin Abdulhassan