skip to main content
US FlagAn official website of the United States government
dot gov icon
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
https lock icon
Secure .gov websites use HTTPS
A lock ( lock ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.


Title: Advancing IoT System Dependability: A Deep Dive into Management and Operation Plane Separation
We propose to enhance the dependability of large-scale IoT systems by separating the management and operation plane. We innovate the management plane to enforce overarching policies, such as safety norms, operation standards, and energy restrictions, and integrate multi-faceted management entities, including regulatory agencies and manufacturers, while the current IoT operational workflow remains unchanged. Central to the management plane is a meticulously designed, identity-independent policy framework that employs flexible descriptors rather than fixed identifiers, allowing for proactive deployment of overarching policies with adaptability to system changes. Our evaluation across three datasets indicates that the proposed framework can achieve near-optimal expressiveness and dependable policy enforcement.  more » « less
Award ID(s):
1932418
PAR ID:
10664110
Author(s) / Creator(s):
 ;  ;  
Publisher / Repository:
IEEE
Date Published:
Page Range / eLocation ID:
1 to 6
Format(s):
Medium: X
Sponsoring Org:
National Science Foundation
More Like this
  1. Enforcing overarching policies such as safety norms and energy restrictions becomes critical as IoT scales and integrates into large systems. These policies should be applied preemptively and capable of adapting to system changes. Traditional IoT systems, reliant on fixed device identities, limit reliability, scalability, and resilience. Thus, we propose Identity-Independent IoT (I3oT), centered on adopting flexible descriptors to enforce policies. I3oT introduces a separate management plane on top of the standard operational workflow, thereby enhancing safety in scalable and integrated IoT systems. 
    more » « less
  2. Software-defined networking (SDN) in conjunction with programmable switches revolutionizes network management, yet crafting optimal switch configurations remains complex. Traditional P4 optimizations rely on data plane level tuning. In this paper, we argue an essential piece for such optimizations is the control plane itself. We present P4CGO, a P4 compilation framework which focuses on realizing specifications based on control policies. P4CGO leverages user-defined objective functions and control plane policies to guide P4 program optimization through table merging and splitting. We have prototyped P4CGO and applied it solving real-world policy optimization problems. 
    more » « less
  3. Abstract Reservoirs are designed and operated to mitigate hydroclimatic variability and extremes to fulfill various beneficial purposes. Existing reservoir infrastructure capacity and operation policies derived from historical records are challenged by hydrologic regime change and storage reduction from sedimentation. Furthermore, climate change could amplify the water footprint of reservoir operation (i.e. non-beneficial evaporative loss), further influencing the complex interactions among hydrologic variability, reservoir characteristics, and operation decisions. Disentangling and quantifying these impacts is essential to assess the effectiveness of reservoir operation under future climate and identify the opportunities for adaptive reservoir management (e.g. storage reallocation). Using reservoirs in Texas as a testing case, this study develops data-driven models to represent the current reservoir operation policies and assesses the challenges and opportunities in flood control and water supply under dynamically downscaled climate projections from the Coupled Model Intercomparison Project Phase 6. We find that current policies are robust in reducing future flood risks by eliminating small floods, reducing peak magnitude, and extending the duration for large floods. Current operation strategies can effectively reduce the risk of storage shortage for many reservoirs investigated, but reservoir evaporation and sedimentation pose urgent needs for revisions in the current guidelines to enhance system resilience. We also identify the opportunities for reservoir storage reallocation through seasonal-varying conservation pool levels to improve water supply reliability with negligible flood risk increase. This study provides a framework for stakeholders to evaluate the effectiveness of the current reservoir operation policy under future climate through the interactions among hydroclimatology, reservoir infrastructure, and operation policy. 
    more » « less
  4. Operators in multi-tenant cloud datacenters require support for diverse and complex end-to-end policies, such as, reachability, middlebox traversals, isolation, traffic engineering, and network resource management. We present Genesis, a datacenter network management system which allows policies to be specified in a declarative manner without explicitly programming the network data plane. Genesis tackles the problem of enforcing policies by synthesizing switch forwarding tables. It uses the formal foundations of constraint solving in combination with fast off-the-shelf SMT solvers. To improve synthesis performance, Genesis incorporates a novel search strategy that uses regular expressions to specify properties that leverage the structure of datacenter networks, and a divide-and-conquer synthesis procedure which exploits the structure of policy relationships. We have prototyped Genesis, and conducted experiments with a variety of workloads on real-world topologies to demonstrate its performance. 
    more » « less
  5. This research project aims to develop a resource management framework for efficient allocation of 5G network resources to IoT (Internet of Things) devices. As 5G technology is increasingly integrated with IoT applications, the diverse demands and use-cases of IoT devices necessitate dynamic resource management. The focus of this study is to develop an IoT device environment utilizing reinforcement learning (RL) for resource adjustment. The environment observes IoT device parameters including the current BER (bit-error-rate), allocated bandwidth, and current signal power levels. Actions that can be taken by the RL agent on the environment include adjustments to the bandwidth and the signal power level of an IoT device. One implementation of the environment is currently tested with PPO (Proximal Policy Optimization), and DDPG (Deep Deterministic Policy Gradient) RL algorithms using a continuous action space. Initial results show that PPO models train at a faster rate, while DDPG models explore a wider range of states, leading to better model predictions. Another version is tested with PPO and DQN (Deep Q-Networks) using a discrete action space. DQN demonstrates slightly better results than the PPO, possibly due to its value-based approach and that it is better suited for discrete action spaces. 
    more » « less