As in-vehicle communication becomes more complex, the automotive community is exploring various architectural options such as centralized and zonal architectures for their numerous benefits. Common characteristics of these architectures include the need for high-bandwidth communication and security, which have been elusive with standard automotive architectures. Further, as automotive communication technologies evolve, it is also likely that multiple link-layer technologies such as CAN and Automotive Ethernet will co-exist. These alternative architectures promise to integrate these diverse sets of technologies. However, architectures that allow such co-existence have not been adequately explored. In this work we explore a new network architecture called Named Data Networking (NDN) to achieve multiple goals: provide a foundational security infrastructure and bridge different link layer protocols such as CAN, LIN, and automotive Ethernet into a unified communication system. We have created a proof-of-concept bench-top testbed using CAN HATS and Raspberry PIs that replay real traffic over CAN and Ethernet to demonstrate how NDN can provide a secure, high-speed bridge between different automotive link layers. We also show how NDN can support communication between centralized or zonal high-power compute components. Security is achieved through digitally signing all Data packets between these components, preventing unauthorized ECUs from injecting arbitrary data into the network. We also demonstrate NDN's ability to prevent DoS and replay attacks between different network segments connected through NDN.
more »
« less
Capture and Analysis of Traffic Traces on a Wide-Area NDN Testbed
High-quality traffic measurements from realistic deployments are essential for understanding and improving new network technologies. For Named Data Networking, collecting such measurements is difficult because real-world deployments are limited. To address this problem, we created a dataset of NDN traffic traces and a toolkit for capturing, analyzing, and replaying them. The dataset is collected from real routers on the official NDN testbed and is the first large, non-synthetic NDN dataset available to the research community. This paper presents the dataset and tools, describes their properties, and shares insights useful for broader NDN research.
more »
« less
- PAR ID:
- 10647727
- Publisher / Repository:
- ACM
- Date Published:
- Page Range / eLocation ID:
- 101 to 108
- Format(s):
- Medium: X
- Sponsoring Org:
- National Science Foundation
More Like this
-
-
Abstract. Ground-based instruments offer unique capabilities such as detailed atmospheric, thermodynamic, cloud, and aerosol profiling at a high temporal sampling rate. The U.S. Department of Energy Atmospheric Radiation Measurement (ARM) user facility provides comprehensive datasets from key locations around the globe, facilitating long-term characterization and process-level understanding of clouds, aerosol, and aerosol–cloud interactions. However, as with other ground-based datasets, the fixed (Eulerian) nature of these measurements often introduces a knowledge gap in relating those observations with air-mass hysteresis. Here, we describe ARMTRAJ (https://doi.org/10.5439/2309851, Silber, 2024a; https://doi.org/10.5439/2309849, Silber, 2024b; https://doi.org/10.5439/2309850, Silber, 2024c; https://doi.org/10.5439/2309848, Silber, 2024d), a set of multipurpose trajectory datasets that helps close this gap in ARM deployments. Each dataset targets a different aspect of atmospheric research, including the analysis of surface, planetary boundary layer, distinct liquid-bearing cloud layers, and (primary) cloud decks. Trajectories are calculated using the Hybrid Single-Particle Lagrangian Integrated Trajectory (HYSPLIT) model informed by the European Centre for Medium-Range Weather Forecasts ERA5 reanalysis dataset at its highest spatial resolution (0.25°) and are initialized using ARM datasets. The trajectory datasets include information about air-mass coordinates and state variables extracted from ERA5 before and after the ARM site overpass. Ensemble runs generated for each model initialization enhance trajectory consistency, while ensemble variability serves as a valuable uncertainty metric for those reported air-mass coordinates and state variables. Following the description of dataset processing and structure, we demonstrate applications of ARMTRAJ to a case study and a few bulk analyses of observations collected during ARM's Eastern Pacific Cloud Aerosol Precipitation Experiment (EPCAPE) field deployment. ARMTRAJ will soon become a near real-time product accompanying new ARM deployments and an augmenting product to ongoing and previous deployments, promoting reaching science goals of research relying on ARM observations.more » « less
-
Digital signatures are a fundamental building block for ensuring integrity and authenticity of contents delivered by the Named Data Networking (NDN) systems. However, current digital signature schemes adopted by NDN open source libraries have a high computational and communication overhead making them unsuitable for high throughput applications like video streaming and virtual reality gaming. In this poster, we propose a real-time digital signature mechanism for NDN based on the offline-online signature framework known as Structure-free and Compact Real-time Authentication scheme (SCRA). Our signature mechanism significantly reduces the signing and verification costs and provides different variants to optimize for the specific requirements of applications (i.e. signing overhead, verification overhead or communication cost). Our experiments results show that SCRA is a suitable framework for latency-sensitive NDN applications.more » « less
-
Named Data Networking (NDN) has a number of forwarding behaviors, strategies, and protocols proposed by researchers and incorporated into the codebase, to enable exploiting the full flexibility and functionality that NDN offers. This additional functionality introduces complexity, motivating the need for a tool to help reason about and verify that basic properties of an NDN data plane are guaranteed. This paper proposes Name Space Analysis (NSA), a network verification framework to model and analyze NDN data planes. NSA can take as input one or more snapshots, each representing a particular state of the data plane. It then provides the verification result against specified properties. NSA builds on the theory of Header Space Analysis, and extends it in a number of ways, e.g., supporting variable-sized headers with flexible formats, introduction of name space functions, and allowing for name-based properties such as content reachability and name leakage-freedom. These important additions reflect the behavior and requirements of NDN, requiring modeling and verification foundations fundamentally different from those of traditional host-centric networks. For example, in name-based networks (NDN), host-to-content reachability is required, whereas the focus in host-centric networks (IP) is limited to host-to-host reachability. We have implemented NSA and identified a number of optimizations to enhance the efficiency of verification. Results from our evaluations, using snapshots from various synthetic test cases and the real-world NDN testbed, show how NSA is effective, in finding errors pertaining to content reachability, loops, and name leakage, has good performance, and is scalable.more » « less
-
A large number of Connected and Automated Vehicle (CAV) applications are being designed, developed, and deployed in order to greatly improve our transportation systems in terms of safety, mobility, and reducing environmental impacts. These benefits can be quantified by a variety of performance measures that are often cited in the literature. However, most of these CAV applications are typically designed to improve transportation systems only in a particular dimension, usually focusing on either safety, mobility, or the environment. Very few research papers have considered a wider range or combination of performance measures across multiple dimensions, examining potential co-benefits or tradeoffs between these measures. For example, you can design a CAV application that greatly improves safety, but it might come at the cost of reducing traffic throughput. Further, the design of the CAV applications is often static and limited to specific traffic scenarios and conditions. CAVs that can adapt to different conditions, and be “tunable” for different societal needs will have much greater impact and versatility. In this presentation, we examine various co-benefits and tradeoffs of current CAV applications and consider how we can design these systems to have greater flexibility when it comes to deployment. We cite not only different CAV applications evaluated in simulation, but also real-world CAV deployments that operate on various testbeds, such as the Innovation Corridor located in Riverside, California. Based on this analysis, we can consider several new research directions for future CAV deployments.more » « less
An official website of the United States government

