Policy-based Network Management System Research Articles

Towards transactional integrity issues in policy based network management systems

Towards transactional integrity issues in policy based network management systems

Deriving policies from connection codes to ensure ongoing voltage stability

The management and transmission networks is becoming increasingly complex due to the proliferation of renewables-based distributed energy resources (DER). Existing control systems for DER are based on static specifications from interdependent network connection documents. Such systems are inflexible and their maintenance requires concerted effort between grid stakeholders.In this paper we present a new supplementary control approach to increase the agility of the electricity grid. The ICT system that underlies smart grids has the potential to offer, by analogy with ICT based network management, a control plane overlay for the modern smart grid. Policy-based Network Management (PBNM) is widely deployed in managed telecoms networks. We outline how PBNM can augment the management of power and energy networks and report on our initial work to validate the approach. To configure the PBNM system, we have used text mining to derive connection parameters at the LV level. In our simulations, PBNM was used in collaboration with a Volt-VAr optimisation (VVO) to tune the connection settings at each DER to manage the voltage across all the buses. We argue that the full benefits will be realised when stakeholders focus on agreeing relatively stable high-level connection policies, the policies being refined dynamically, and algorithms such as VVO that set connection parameters so they are consistent with those high-level policies. Thus faults, power quality issues and regulatory infringement can be identified sooner, and power flow can be optimised.

Policy-based QoS management for SLA-driven adaptive routing

This paper proposes a policy-based quality of service (QoS) management framework for adaptive routing decisions. We present an approach considering interior gateway protocol (IGP) for path discovery mechanisms and QoS-aware policies for configuring the network elements. The integration of the aforementioned modules into this policy-based network management (PBNM) system is demonstrated by conducting experiments in a real environment, the hellenic public administration network SYZEFXIS. These experiments combine different traffic conditioning mechanisms through event detectors, consider IP service level agreement mechanisms that interoperate with the PBNM system and analyze the enforcement of IGP and QoS policies. Finally, validation and measurement tools are used to prove the efficiency of this framework. It is shown that this architecture offers significantly increased performance and learning capabilities, while the PBNM system achieves adaptive QoS routing through automated configuration considering the avoidance of suboptimal routing issues or under-performance conditions of the network entities.

A Policy Based Scheme for Combined Data Security in Mobile Ad hoc Networks

Problem statement: In Mobile Ad hoc Networks (MANET) routing protocols, we require a network-level or link layer security. Since without appropriate security provisions, the MANETs is subjected to attacks like network traffic, replay transmissions, manipulate packet headers and redirect routing messages. In order to address these needs, a policy based network management system that provides the capability to express network requirements is required. Approach: In this study, we propose a policy based scheme for combined data security which focuses mainly on three policies: Integrity, authentication and Confidentiality. For providing security not only to data, but also for routing information, we calculate the trust indexes of the nodes and the route is selected according to the trust value which improves integrity. Then in order to provide authentication, we propose a Distributed Certificate Authority (DCA) technique in which multiple DCA is required to construct a certificate. Next we propose an RSA based novel encryption mechanism in order to provide Confidentiality among the nodes. Thus, the desired level of security is provided by the system based on the policy of the user by executing the corresponding security modules. Results: By simulation results, we show that this scheme provides a combined data security in MANETs and can be used efficiently. Conclusion: Our proposed combined data security policy provides complete protection for the data in MANET communications.

Adaptive Measurement-Based Policy-Driven QoS Management with Fuzzy-Rule-based Resource Allocation

Fixed and wireless networks are increasingly converging towards common connectivity with IP-based core networks. Providing effective end-to-end resource and QoS management in such complex heterogeneous converged network scenarios requires unified, adaptive and scalable solutions to integrate and co-ordinate diverse QoS mechanisms of different access technologies with IP-based QoS. Policy-Based Network Management (PBNM) is one approach that could be employed to address this challenge. Hence, a policy-based framework for end-to-end QoS management in converged networks, CNQF (Converged Networks QoS Management Framework) has been proposed within our project. In this paper, the CNQF architecture, a Java implementation of its prototype and experimental validation of key elements are discussed. We then present a fuzzy-based CNQF resource management approach and study the performance of our implementation with real traffic flows on an experimental testbed. The results demonstrate the efficacy of our resource-adaptive approach for practical PBNM systems.

Evaluation by Implementation of the Policy-based Network Management System Called DACS System

As the work for managing a whole LAN effectively withoutlimited purposes, there are works of Policy-based networkmanagement (PBNM). The existing PBNM is defined in someorganizations including the Internet Engineering Task Force(IETF). However, it has structural problems. For example,communications sent from many clients concentrate on acommunication control mechanism called PEP (PolicyEnforcement Point). To improve the problems, we have beenstudying next generation PBNM called Destination AddressingControl System (DACS) Scheme. The DACS Scheme controlsthe whole LAN through communication control by the clientsoftware as PEP which locates on a client computer. We havebeen studied on the aspect of principle until now. In thisresearch, we implement a DACS system to realize a concept ofthe DACS Scheme, and show implement method and results offunctional experiments.

Active PDP Discovery for the Policy Based MANET Management

A Policy-based Network Management (PBNM) in Mobile Ad-hoc Networks (MANETs) should be efficient and reliable. In this letter, we propose a mechanism for the policy-based management in ad hoc networks and we discuss methods to discover the Policy Decision Point (PDP), set the management area, and manage the movements of nodes in the PBNM system. Finally, we assess the results through simulations.

Dynamic Policy-Based Network Management for a Secure Coalition Environment

This article reports the latest results of an R&D effort to develop a prototype implementation of a dynamic policy-based network management (PBNM) system that can be used to configure and manage a secure network for a coalition environment across an unsecured wide area network. The prototype, based on a distributed architecture, includes capabilities for policy creation and management, dynamic policy negotiation, and dynamic policy provisioning. The policy negotiation facilitates the rapid deployment of a coalition network while the dynamic policy provisioning automates the configuration and management of network services including firewalls, virtual private network connections, routing, quality of service (QoS), and domain name services. Such a PBNM system enhances an organization's ability to react to network incidents identified by a network situational awareness assessment. Although the focus of the current research is a military coalition environment, the system can be used in any distributed enterprise or collaborative environment