Publication

Visiting Professor at TU Berlin

Contents: Publications | Teaching | Working Group | Projects | Professional Activites

Habilitationsschrift

Performance evaluation of novel network and application paradigms and management approaches. Technical Report (PhD dissertation), . Zinner, Thomas. PhD dissertation. University of Wuerzburg, 2017, October.
- [ BibTeX ]
- [ EndNote ]
@phdthesis{info3-habilitation-2017-1, author = {Zinner, Thomas}, keywords = {sys:hidden:habilitation}, month = 10, school = {University of Wuerzburg}, title = {Performance evaluation of novel network and application paradigms and management approaches}, year = 2017 }

%0 Thesis %1 info3-habilitation-2017-1 %A Zinner, Thomas %D 2017 %T Performance evaluation of novel network and application paradigms and management approaches

Dissertation

Performance Modeling of QoE-Aware Multipath Video Transmission in the Future Internet. Zinner, Thomas. 2012, August.
- [ BibTeX ]
- [ EndNote ]
- [ Download ]
@phdthesis{info3-dissertation-2012-32, author = {Zinner, Thomas}, keywords = {sys:hidden:dissertation}, month = {08}, title = {Performance Modeling of QoE-Aware Multipath Video Transmission in the Future Internet}, year = 2012 }

%0 Thesis %1 info3-dissertation-2012-32 %A Zinner, Thomas %D 2012 %T Performance Modeling of QoE-Aware Multipath Video Transmission in the Future Internet

Demos

SDN/NFV-enabled Security Architecture for Fine-grained Policy Enforcement and Threat Mitigation for Enterprise Networks. Pfaff, Benedikt; Scherer, Johann; Hock, David; Gray, Nicholas; Zinner, Thomas; Tran-Gia, Phuoc; Durner, Raphael; Kellerer, Wolfgang; Lorenz, Claas. 2017, August.
- [ Abstract ]
- [ BibTeX ]
- [ EndNote ]
- [ Download ]
Network Functions Visualization (NFV) replaces physical middleboxes with software instances running network functions in cloud environments. To support this new paradigm, it is necessary to port the code basis from highly specialized hardware devices to virtual machines running on COTS hardware. In order to fully exploit the inherent capabilities of cloud environments it is further necessary to redesign the software to support a large amount of distributed, cooperating function instances instead of single, isolated and monolithic instances. This development can be observed for network functions like stateful firewalling. Until now, available software firewalls lack support for active/active operation in clustered environments, which hinders horizontal scalability. This is due to the fact that the required synchronization of connection states among the cluster's instances is an impediment that still has to be resolved. Therefore, this work investigates different synchronization strategies and mechanisms, which allow to share connection states among the cluster to maintain scalability and high-availability.

@misc{info3-demo-2017-3, abstract = {Network Functions Visualization (NFV) replaces physical middleboxes with software instances running network functions in cloud environments. To support this new paradigm, it is necessary to port the code basis from highly specialized hardware devices to virtual machines running on COTS hardware. In order to fully exploit the inherent capabilities of cloud environments it is further necessary to redesign the software to support a large amount of distributed, cooperating function instances instead of single, isolated and monolithic instances. This development can be observed for network functions like stateful firewalling. Until now, available software firewalls lack support for active/active operation in clustered environments, which hinders horizontal scalability. This is due to the fact that the required synchronization of connection states among the cluster's instances is an impediment that still has to be resolved. Therefore, this work investigates different synchronization strategies and mechanisms, which allow to share connection states among the cluster to maintain scalability and high-availability.}, author = {Pfaff, Benedikt and Scherer, Johann and Hock, David and Gray, Nicholas and Zinner, Thomas and Tran-Gia, Phuoc and Durner, Raphael and Kellerer, Wolfgang and Lorenz, Claas}, booktitle = {In Proceedings of the SIGCOMM Posters and Demos}, keywords = {sardine}, month = {08}, title = {SDN/NFV-enabled Security Architecture for Fine-grained Policy Enforcement and Threat Mitigation for Enterprise Networks}, year = 2017 }

%0 Generic %1 info3-demo-2017-3 %A Pfaff, Benedikt %A Scherer, Johann %A Hock, David %A Gray, Nicholas %A Zinner, Thomas %A Tran-Gia, Phuoc %A Durner, Raphael %A Kellerer, Wolfgang %A Lorenz, Claas %B In Proceedings of the SIGCOMM Posters and Demos %D 2017 %T SDN/NFV-enabled Security Architecture for Fine-grained Policy Enforcement and Threat Mitigation for Enterprise Networks %X Network Functions Visualization (NFV) replaces physical middleboxes with software instances running network functions in cloud environments. To support this new paradigm, it is necessary to port the code basis from highly specialized hardware devices to virtual machines running on COTS hardware. In order to fully exploit the inherent capabilities of cloud environments it is further necessary to redesign the software to support a large amount of distributed, cooperating function instances instead of single, isolated and monolithic instances. This development can be observed for network functions like stateful firewalling. Until now, available software firewalls lack support for active/active operation in clustered environments, which hinders horizontal scalability. This is due to the fact that the required synchronization of connection states among the cluster's instances is an impediment that still has to be resolved. Therefore, this work investigates different synchronization strategies and mechanisms, which allow to share connection states among the cluster to maintain scalability and high-availability.
Enhancing SDN Security by Device Fingerprinting. Gray, Nicholas; Zinner, Thomas; Tran-Gia, Phuoc. 2017, May.
- [ Abstract ]
- [ BibTeX ]
- [ EndNote ]
- [ Download ]
Software-defined Networking (SDN) provides an increased flexibility and cost savings by separating the data from the control plane. Despite these benefits, this separation also results in a greater attack surface as new devices and protocols are deployed. OpenFlow is one of these protocols and enables the communication between the switch and the controller. Ideally this connection takes place over an encrypted TLS channel, but as this feature is marked optional, it is not supported by all devices. This allows an attacker to eavesdrop and alter the communication, hence resulting in a comprised network. In this work, we demonstrate a new approach for authentication based on device fingerprinting to enhance the security in scenarios, where cryptographic mechanisms are unavailable.

@misc{info3-demo-2017-2, abstract = {Software-defined Networking (SDN) provides an increased flexibility and cost savings by separating the data from the control plane. Despite these benefits, this separation also results in a greater attack surface as new devices and protocols are deployed. OpenFlow is one of these protocols and enables the communication between the switch and the controller. Ideally this connection takes place over an encrypted TLS channel, but as this feature is marked optional, it is not supported by all devices. This allows an attacker to eavesdrop and alter the communication, hence resulting in a comprised network. In this work, we demonstrate a new approach for authentication based on device fingerprinting to enhance the security in scenarios, where cryptographic mechanisms are unavailable.}, author = {Gray, Nicholas and Zinner, Thomas and Tran-Gia, Phuoc}, booktitle = {15th IFIP/IEEE International Symposium on Integrated Network Management (IM), Lisbon, Portugal, May 2017}, keywords = {sardine}, month = {05}, title = {Enhancing SDN Security by Device Fingerprinting}, year = 2017 }

%0 Generic %1 info3-demo-2017-2 %A Gray, Nicholas %A Zinner, Thomas %A Tran-Gia, Phuoc %B 15th IFIP/IEEE International Symposium on Integrated Network Management (IM), Lisbon, Portugal, May 2017 %D 2017 %T Enhancing SDN Security by Device Fingerprinting %X Software-defined Networking (SDN) provides an increased flexibility and cost savings by separating the data from the control plane. Despite these benefits, this separation also results in a greater attack surface as new devices and protocols are deployed. OpenFlow is one of these protocols and enables the communication between the switch and the controller. Ideally this connection takes place over an encrypted TLS channel, but as this feature is marked optional, it is not supported by all devices. This allows an attacker to eavesdrop and alter the communication, hence resulting in a comprised network. In this work, we demonstrate a new approach for authentication based on device fingerprinting to enhance the security in scenarios, where cryptographic mechanisms are unavailable.
Demonstrating a Personalized Secure-By-Default Bring Your Own Device Solution Based on Software Defined Networking. Gebert, Steffen; Zinner, Thomas; Gray, Nicholas; Durner, Raphael; Lorenz, Class; Lange, Stanislav. Würzburg, Germany, 2016, September.
- [ Abstract ]
- [ BibTeX ]
- [ EndNote ]
- [ Download ]
Network virtualization is one classical use-case for Software Defined Networks (SDN). By programmatically instantiating virtual networks, traffic from one or more devices can be separated or connectivity can be established as needed. S- BYOD, which is presented in this demonstration, applies the SDN concept to Bring Your Own Device (BYOD) scenarios and offers personalized virtual networks that are set up and extended on demand. This is done once the user authenticates, activates access to additional applications, or as soon as applications scale out and involve more servers. The described proof-of-concept implementation explores, to what degree an agent-less BYOD solution, based only on SDN, can lower the attack surface by explicit user opt-ins for particular services. Further, an assessment of the number of required rules within the flow tables of switches completes this work.

@misc{info3-demo-2016-1, abstract = {Network virtualization is one classical use-case for Software Defined Networks (SDN). By programmatically instantiating virtual networks, traffic from one or more devices can be separated or connectivity can be established as needed. S- BYOD, which is presented in this demonstration, applies the SDN concept to Bring Your Own Device (BYOD) scenarios and offers personalized virtual networks that are set up and extended on demand. This is done once the user authenticates, activates access to additional applications, or as soon as applications scale out and involve more servers. The described proof-of-concept implementation explores, to what degree an agent-less BYOD solution, based only on SDN, can lower the attack surface by explicit user opt-ins for particular services. Further, an assessment of the number of required rules within the flow tables of switches completes this work.}, address = {Würzburg, Germany}, author = {Gebert, Steffen and Zinner, Thomas and Gray, Nicholas and Durner, Raphael and Lorenz, Class and Lange, Stanislav}, booktitle = {28th International Teletraffic Congress (ITC 28)}, keywords = {sardine}, month = {09}, title = {Demonstrating a Personalized Secure-By-Default Bring Your Own Device Solution Based on Software Defined Networking}, year = 2016 }

%0 Generic %1 info3-demo-2016-1 %A Gebert, Steffen %A Zinner, Thomas %A Gray, Nicholas %A Durner, Raphael %A Lorenz, Class %A Lange, Stanislav %B 28th International Teletraffic Congress (ITC 28) %C Würzburg, Germany %D 2016 %T Demonstrating a Personalized Secure-By-Default Bring Your Own Device Solution Based on Software Defined Networking %X Network virtualization is one classical use-case for Software Defined Networks (SDN). By programmatically instantiating virtual networks, traffic from one or more devices can be separated or connectivity can be established as needed. S- BYOD, which is presented in this demonstration, applies the SDN concept to Bring Your Own Device (BYOD) scenarios and offers personalized virtual networks that are set up and extended on demand. This is done once the user authenticates, activates access to additional applications, or as soon as applications scale out and involve more servers. The described proof-of-concept implementation explores, to what degree an agent-less BYOD solution, based only on SDN, can lower the attack surface by explicit user opt-ins for particular services. Further, an assessment of the number of required rules within the flow tables of switches completes this work.

Software

Demonstrating the Prospects of Dynamic Application-Aware Networking in a Home Environment. Wamser, Florian; Zinner, Thomas; Iffländer, Lukas; Tran-Gia, Phuoc. Chicago, IL, USA, 2014, August.
- [ BibTeX ]
- [ EndNote ]
@misc{info3-software-2014-20, address = {Chicago, IL, USA}, author = {Wamser, Florian and Zinner, Thomas and Iffländer, Lukas and Tran-Gia, Phuoc}, keywords = {sys:hidden:software}, month = {08}, title = {Demonstrating the Prospects of Dynamic Application-Aware Networking in a Home Environment}, year = 2014 }

%0 Generic %1 info3-software-2014-20 %A Wamser, Florian %A Zinner, Thomas %A Iffländer, Lukas %A Tran-Gia, Phuoc %C Chicago, IL, USA %D 2014 %T Demonstrating the Prospects of Dynamic Application-Aware Networking in a Home Environment
Demonstrating the Optimal Placement of Virtualized Cellular Network Functions in Case of Large Crowd Events. Gebert, Steffen; Hock, David; Zinner, Thomas; Tran-Gia, Phuoc; Hoffmann, Marco; Jarschel, Michael; Schmidt, Ernst-Dieter; Braun, Ralf-Peter; Banse, Christian; Koepsel, Andreas. 2014, August.
- [ BibTeX ]
- [ EndNote ]
@misc{info3-software-2014-21, author = {Gebert, Steffen and Hock, David and Zinner, Thomas and Tran-Gia, Phuoc and Hoffmann, Marco and Jarschel, Michael and Schmidt, Ernst-Dieter and Braun, Ralf-Peter and Banse, Christian and Koepsel, Andreas}, booktitle = {SIGCOMM}, keywords = {sys:hidden:software}, month = {08}, title = {Demonstrating the Optimal Placement of Virtualized Cellular Network Functions in Case of Large Crowd Events}, year = 2014 }

%0 Generic %1 info3-software-2014-21 %A Gebert, Steffen %A Hock, David %A Zinner, Thomas %A Tran-Gia, Phuoc %A Hoffmann, Marco %A Jarschel, Michael %A Schmidt, Ernst-Dieter %A Braun, Ralf-Peter %A Banse, Christian %A Koepsel, Andreas %B SIGCOMM %D 2014 %T Demonstrating the Optimal Placement of Virtualized Cellular Network Functions in Case of Large Crowd Events
POCO: A Framework for the Pareto-Optimal Resilient Controller Placement in SDN-based Core Networks. Hock, David; Gebert, Steffen; Hartmann, Matthias; Zinner, Thomas; Tran-Gia, Phuoc. Krakow, Poland, 2014, May.
- [ BibTeX ]
- [ EndNote ]
@misc{info3-software-2014-18, address = {Krakow, Poland}, author = {Hock, David and Gebert, Steffen and Hartmann, Matthias and Zinner, Thomas and Tran-Gia, Phuoc}, booktitle = {IEEE NOMS}, keywords = {poco}, month = {05}, title = {POCO: A Framework for the Pareto-Optimal Resilient Controller Placement in SDN-based Core Networks}, year = 2014 }

%0 Generic %1 info3-software-2014-18 %A Hock, David %A Gebert, Steffen %A Hartmann, Matthias %A Zinner, Thomas %A Tran-Gia, Phuoc %B IEEE NOMS %C Krakow, Poland %D 2014 %T POCO: A Framework for the Pareto-Optimal Resilient Controller Placement in SDN-based Core Networks
POCO-PLC: Enabling Dynamic Pareto-Optimal Resilient Controller Placement in SDN Networks. Hock, David; Hartmann, Matthias; Gebert, Steffen; Zinner, Thomas; Tran-Gia, Phuoc. Toronto, Canada, 2014, April.
- [ BibTeX ]
- [ EndNote ]
@misc{info3-software-2014-19, address = {Toronto, Canada}, author = {Hock, David and Hartmann, Matthias and Gebert, Steffen and Zinner, Thomas and Tran-Gia, Phuoc}, booktitle = {Computer Communications Workshops (INFOCOM WKSHPS)}, keywords = {poco}, month = {04}, title = {POCO-PLC: Enabling Dynamic Pareto-Optimal Resilient Controller Placement in SDN Networks}, year = 2014 }

%0 Generic %1 info3-software-2014-19 %A Hock, David %A Hartmann, Matthias %A Gebert, Steffen %A Zinner, Thomas %A Tran-Gia, Phuoc %B Computer Communications Workshops (INFOCOM WKSHPS) %C Toronto, Canada %D 2014 %T POCO-PLC: Enabling Dynamic Pareto-Optimal Resilient Controller Placement in SDN Networks
Demonstrating the Benefit of Joint Application and Network Control Within a Wireless Access Network. Wamser, Florian; Hock, David; Seufert, Michael; Zinner, Thomas; Tran-Gia, Phuoc. Turin, Italy, 2013, April.
- [ BibTeX ]
- [ EndNote ]
- [ Download ]
@misc{info3-software-2013-16, address = {Turin, Italy}, author = {Wamser, Florian and Hock, David and Seufert, Michael and Zinner, Thomas and Tran-Gia, Phuoc}, booktitle = {2013 IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS)}, keywords = {sys:hidden:software}, month = {04}, title = {Demonstrating the Benefit of Joint Application and Network Control Within a Wireless Access Network}, year = 2013 }

%0 Generic %1 info3-software-2013-16 %A Wamser, Florian %A Hock, David %A Seufert, Michael %A Zinner, Thomas %A Tran-Gia, Phuoc %B 2013 IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS) %C Turin, Italy %D 2013 %T Demonstrating the Benefit of Joint Application and Network Control Within a Wireless Access Network

Habilitationsschrift

Dissertation

Demos

Software

Data privacy protection

Data privacy protection

Picture credits