{"id":{"repo_id":"uiuc","oai_identifier":"oai:www.ideals.illinois.edu:2142/106221"},"canonical_url":"https://search.dev.ndltd.org/etd/uiuc/oai:www.ideals.illinois.edu:2142/106221","repository":{"repo_id":"uiuc","name":"University of Illinois - Urbana-Champaign","base_url":"https://www.ideals.illinois.edu/oai-pmh"},"display":{"title":"Programmable cyber networks for critical infrastructure","abstract":"The operational integrity of the infrastructure systems is critical for a nation state’s economic and security interests. Such systems rely on automation to perform complex control tasks to avoid malfunction caused by human error. However, such automation requires coordination of their components. Such coordination relies on several guarantees of safety and performance from their underlying cyber networks. It is challenging to provide such guarantees using traditional networks due to their rigid feature set and distributed, opaque and non-standard control interfaces. The central goal of this dissertation is to develop a set of design tools that use network programmability to achieve end-to-end delay, access control and resiliency guarantees for critical infrastructure (CI) applications. We propose and evaluate the architecture and design of several tools to address these guarantees singularly and simultaneously. With the standardized control and data-planes, the computational analysis of the centralized network configurations has emerged as a powerful approach for solving a variety of problems. We used this approach in one of our analysis tools to simultaneously validate access control and resilience of networks. We also used an analytic approach to assess the resiliency of CI network with the use of metrics computed by using Monte Carlo methods. To that end, we built a data-plane simulator to enable such computation. Furthermore, it is now feasible to synthesize desired behavior in a programmable CI network to meet the performance and resilience goals for individual application flows. We used the synthesis approach to build a tool that uses efficient centralized algorithms to synthesize control-plane configuration resulting in flows meeting their end-to-end delay deadlines. We also demonstrate a framework that uses synthesis at the intersection of control and data planes to implement network coding to achieve seamless resiliency for network flows.","abstract_html":"The operational integrity of the infrastructure systems is critical for a nation state’s economic and security interests. Such systems rely on automation to perform complex control tasks to avoid malfunction caused by human error. However, such automation requires coordination of their components. Such coordination relies on several guarantees of safety and performance from their underlying cyber networks. It is challenging to provide such guarantees using traditional networks due to their rigid feature set and distributed, opaque and non-standard control interfaces. The central goal of this dissertation is to develop a set of design tools that use network programmability to achieve end-to-end delay, access control and resiliency guarantees for critical infrastructure (CI) applications. We propose and evaluate the architecture and design of several tools to address these guarantees singularly and simultaneously. With the standardized control and data-planes, the computational analysis of the centralized network configurations has emerged as a powerful approach for solving a variety of problems. We used this approach in one of our analysis tools to simultaneously validate access control and resilience of networks. We also used an analytic approach to assess the resiliency of CI network with the use of metrics computed by using Monte Carlo methods. To that end, we built a data-plane simulator to enable such computation. Furthermore, it is now feasible to synthesize desired behavior in a programmable CI network to meet the performance and resilience goals for individual application flows. We used the synthesis approach to build a tool that uses efficient centralized algorithms to synthesize control-plane configuration resulting in flows meeting their end-to-end delay deadlines. We also demonstrate a framework that uses synthesis at the intersection of control and data planes to implement network coding to achieve seamless resiliency for network flows.","abstract_has_math":false,"creators":["Kumar, Rakesh"],"institution":"University of Illinois at Urbana-Champaign","degree_name":"Ph.D.","degree_level":"Dissertation","degree_discipline":"Electrical & Computer Engr","degree_department":null,"school":null,"contributors":["Nicol, David M.","Bailey, Michael D","Vaidya, Nitin H.","Caesar, Matthew"],"advisors":[],"committee_chairs":[],"committee_members":[],"year":2020,"date_issued":"2020-03-02T21:58:18Z","date_published":"2020-03-02T21:58:18Z","updated_at":"2026-07-22T22:24:45Z","subjects":["Critical Infrastructure Networking Reliability Resilience Security"],"languages":["en"],"rights":["Copyright 2019 Rakesh Kumar"],"rights_urls":[],"identifier_entries":[]},"links":{"outbound_url":"http://hdl.handle.net/2142/106221","outbound_label":"Handle","outbound_source":"dc:identifier"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor","label":"Contributor","values":["Nicol, David M.","Bailey, Michael D","Vaidya, Nitin H.","Caesar, Matthew"]},{"key":"dc:creator","label":"Author","values":["Kumar, Rakesh"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date","label":"Dc Date","values":["2020-03-02T21:58:18Z","2019-11-27","2019-12"]},{"key":"dc:type","label":"Dc Type","values":["text"]},{"key":"thesis:degree_discipline","label":"Discipline","values":["Electrical & Computer Engr"]},{"key":"thesis:degree_level","label":"Degree Level","values":["Dissertation"]},{"key":"thesis:degree_name","label":"Degree Name","values":["Ph.D."]},{"key":"thesis:institution_name","label":"Thesis Institution Name","values":["University of Illinois at Urbana-Champaign"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["Critical Infrastructure Networking Reliability Resilience Security"]}]},{"id":"language_rights","label":"Language and Rights","entries":[{"key":"dc:language","label":"Dc Language","values":["en"]},{"key":"dc:rights","label":"Dc Rights","values":["Copyright 2019 Rakesh Kumar"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier","label":"Identifier","values":["http://hdl.handle.net/2142/106221"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description","label":"Description","values":["The operational integrity of the infrastructure systems is critical for a nation state’s economic and security interests. Such systems rely on automation to perform complex control tasks to avoid malfunction caused by human error. However, such automation requires coordination of their components. Such coordination relies on several guarantees of safety and performance from their underlying cyber networks. It is challenging to provide such guarantees using traditional networks due to their rigid feature set and distributed, opaque and non-standard control interfaces. The central goal of this dissertation is to develop a set of design tools that use network programmability to achieve end-to-end delay, access control and resiliency guarantees for critical infrastructure (CI) applications. We propose and evaluate the architecture and design of several tools to address these guarantees singularly and simultaneously. With the standardized control and data-planes, the computational analysis of the centralized network configurations has emerged as a powerful approach for solving a variety of problems. We used this approach in one of our analysis tools to simultaneously validate access control and resilience of networks. We also used an analytic approach to assess the resiliency of CI network with the use of metrics computed by using Monte Carlo methods. To that end, we built a data-plane simulator to enable such computation. Furthermore, it is now feasible to synthesize desired behavior in a programmable CI network to meet the performance and resilience goals for individual application flows. We used the synthesis approach to build a tool that uses efficient centralized algorithms to synthesize control-plane configuration resulting in flows meeting their end-to-end delay deadlines. We also demonstrate a framework that uses synthesis at the intersection of control and data planes to implement network coding to achieve seamless resiliency for network flows.","Submission original under an indefinite embargo labeled 'Open Access'. The submission was exported from vireo on 2020-02-28 without embargo terms","The student, Rakesh Kumar, accepted the attached license on 2019-11-26 at 16:54.","The student, Rakesh Kumar, submitted this Dissertation for approval on 2019-11-26 at 17:01.","This Dissertation was approved for publication on 2019-11-27 at 13:26.","DSpace SAF Submission Ingestion Package generated from Vireo submission #14621 on 2020-02-28 at 17:14:28","Made available in DSpace on 2020-03-02T21:58:18Z (GMT). No. of bitstreams: 3 KUMAR-DISSERTATION-2019.pdf: 5959636 bytes, checksum: 335414d9f092fcd3e99e1957beab1d05 (MD5) LICENSE.txt: 4209 bytes, checksum: 56eba26e951293381581acc04efe119c (MD5) PROQUEST_LICENSE.txt: 4555 bytes, checksum: 5923767301d47e0bc8d3dce31ef2c4bf (MD5) Previous issue date: 2019-11-27"]},{"key":"dc:format","label":"Dc Format","values":["application/pdf"]},{"key":"dc:title","label":"Title","values":["Programmable cyber networks for critical infrastructure"]}]}],"canonical_facts":{"dc:contributor":["Nicol, David M.","Bailey, Michael D","Vaidya, Nitin H.","Caesar, Matthew"],"dc:creator":["Kumar, Rakesh"],"dc:date":["2020-03-02T21:58:18Z","2019-11-27","2019-12"],"dc:description":["The operational integrity of the infrastructure systems is critical for a nation state’s economic and security interests. Such systems rely on automation to perform complex control tasks to avoid malfunction caused by human error. However, such automation requires coordination of their components. Such coordination relies on several guarantees of safety and performance from their underlying cyber networks. It is challenging to provide such guarantees using traditional networks due to their rigid feature set and distributed, opaque and non-standard control interfaces. The central goal of this dissertation is to develop a set of design tools that use network programmability to achieve end-to-end delay, access control and resiliency guarantees for critical infrastructure (CI) applications. We propose and evaluate the architecture and design of several tools to address these guarantees singularly and simultaneously. With the standardized control and data-planes, the computational analysis of the centralized network configurations has emerged as a powerful approach for solving a variety of problems. We used this approach in one of our analysis tools to simultaneously validate access control and resilience of networks. We also used an analytic approach to assess the resiliency of CI network with the use of metrics computed by using Monte Carlo methods. To that end, we built a data-plane simulator to enable such computation. Furthermore, it is now feasible to synthesize desired behavior in a programmable CI network to meet the performance and resilience goals for individual application flows. We used the synthesis approach to build a tool that uses efficient centralized algorithms to synthesize control-plane configuration resulting in flows meeting their end-to-end delay deadlines. We also demonstrate a framework that uses synthesis at the intersection of control and data planes to implement network coding to achieve seamless resiliency for network flows.","Submission original under an indefinite embargo labeled 'Open Access'. The submission was exported from vireo on 2020-02-28 without embargo terms","The student, Rakesh Kumar, accepted the attached license on 2019-11-26 at 16:54.","The student, Rakesh Kumar, submitted this Dissertation for approval on 2019-11-26 at 17:01.","This Dissertation was approved for publication on 2019-11-27 at 13:26.","DSpace SAF Submission Ingestion Package generated from Vireo submission #14621 on 2020-02-28 at 17:14:28","Made available in DSpace on 2020-03-02T21:58:18Z (GMT). No. of bitstreams: 3 KUMAR-DISSERTATION-2019.pdf: 5959636 bytes, checksum: 335414d9f092fcd3e99e1957beab1d05 (MD5) LICENSE.txt: 4209 bytes, checksum: 56eba26e951293381581acc04efe119c (MD5) PROQUEST_LICENSE.txt: 4555 bytes, checksum: 5923767301d47e0bc8d3dce31ef2c4bf (MD5) Previous issue date: 2019-11-27"],"dc:format":["application/pdf"],"dc:identifier":["http://hdl.handle.net/2142/106221"],"dc:language":["en"],"dc:rights":["Copyright 2019 Rakesh Kumar"],"dc:subject":["Critical Infrastructure Networking Reliability Resilience Security"],"dc:title":["Programmable cyber networks for critical infrastructure"],"dc:type":["text"],"thesis:degree_discipline":["Electrical & Computer Engr"],"thesis:degree_level":["Dissertation"],"thesis:degree_name":["Ph.D."],"thesis:institution_name":["University of Illinois at Urbana-Champaign"]},"updated_at":"2026-07-22T22:24:45Z"}