The Spine concept for improving network availability

The article analyzes the existing legal mechanisms for managing critical information infrastructure in Ukraine. The instruments for their improvement are proposing in this article. An important component of critical infrastructure is its information component – a critical information infrastructure. The sphere of protection of critical information infrastructure in Ukraine is at the initial stage of formation. The current legislation defines only certain objects of socio-economic sphere, in which extraordinary events can lead to socially dangerous consequences. In view of the fact, that the term “critical information infrastructure” does not having a consistent interpretation in different countries, we propose our opinion. “Critical information infrastructure is a system of information management of critical facilities and information and communication networks that provide defense capabilities and security of public and private institutions, whose operation may flow to the national security of Ukraine” (KII). In the KII we can identified information and network components. Information environment of KII is a system for information management of critical objects, including computing and information resources that form automated control systems (ACS). The network component of KII consists of a set of telecommunication devices, communication lines and network equipment, systems of open protocols for the exchange of information between elecommunication devices, global system of digital addresses and digital identifiers, software. The Internet network can be considered as a technological add-on over a telecommunication network that provides the provision of data transmission and processing services (e-mail, teleconferencing, file transfer, access to computing and information systems in local area networks). The main threat to the safety of ACS of critical information infrastructure objects is targeted actions on information systems, information and telecommunication networks by software and hardware. KII legal security include two main components – national and international. The national component may be forming by a set of principles, legal institutions and norms, which are enshrined in the national legislation regulating public relations in Ukraine in the area of counteracting the security threats of the ACS of critical objects. In order to protect the most important objects of KII, it is necessary to identify these objects. The current legislation defines such categories of objects, for which special conditions for ensuring their protection and functioning are established. Some of them, in whole or in part, may be classifying as objects of critical infrastructure. The specificity of providing information security was reflecting in such Ukraine laws like “On the Fundamentals of National Security of Ukraine”, “On the Concept of the National Program of Informatization”, “On the National Program of Informatization”. As well as the Concept of Development of the Security and Defense Sector of Ukraine, the National Security Strategy of Ukraine, the Strategy of Cybersecurity Of Ukraine. The National Security Strategy identifies actual threats to national security and sets priorities for information security, cyber security and security of information resources and critical infrastructure. At the same time, the implementation of the state policy in the field of security of KII requires the further development of legal principles and norms governing the relevant social relations, that is, the national component of the legal security of KII. Ukraine should ensure the establishment of a nationwide system for assessing risks and threats to critical infrastructure, and after the legislative definition of the main terms, the implementation of the Identification of Critical Information Infrastructure objects. Identification of objects of critical information infrastructure can be accomplishing by introducing the certification of objects of critical information infrastructure. Such passports must contain general data about the facility, data on the main sources of danger, data on hazardous natural conditions, technological processes and response to threats. The international component of the legal security of KII provides for the regulation of a set of principles and norms defined by international treaties and recognized by the state, regulating issues of international cooperation in this area. Ukraine has signed the Convention on Cybercrime together with the member states of the Council of Europe and other States. It is aiming at stopping actions against the confidentiality, integrity and availability of computer systems, networks and computer data, as well as abusing such systems, networks and data by installing the criminal responsibility for such behavior, the provision of powers sufficient to combat criminal offenses, and the conclusion of agreements on rapid and reliable international cooperation. In addition, the plan of measures for 2017 on implementation of the Cybersecurity Strategy of Ukraine provides for the implementation of Directive 2008/114/EC on the protection of critical infrastructure, in particular on cybersecurity and cyber defense of critical infrastructure objects. Development of the system of international information security, the following main groups of international relations that requirenormative legal regulation within the framework of the legal security of KII: definition of the boundaries of the national KII in the global information and communication infrastructure and fixing signs of computer incidents in the control system of critical objects information infrastructure. The absence of generally recognized borders of state sovereignty of States in this space is a significant obstacle to the application of international law to the actions of other states. In particular, this impedes the establishment of limits of responsibility of states for violating the security of the KII and organizing international cooperation in the field of countering computer crime. The urgency of the legislative consolidation of signs of computer incidents in the automated control system of critical information infrastructure objects suggests the widespread use of the concept of “incident” in international law. An incident in cyberspace usually associated with a violation of the functioning of the components of cyberspace – an electronic collection environment and automated processing of information that determines the processes of the implementation of these operations, as well as information systems and automated control systems. The essence of the general definition of the “international incident” in the field of KII will be determining, firstly, by the nature of international relations between states that are violating by the “incident”. This event may be the result of unforeseen actions of the state, including actions that harm the interests of public bodies of one or more states, or, conversely, be one of many intentional but minor provocations carried out by agents of one state against another state. Given that international relations in the field of incidents in the field of KII are not regulating by international treaties, the main and, in fact, the only source of international law in this case serves as an international custom, however, its application to the sphere of KII is accompanying by considerable difficulties. For Ukraine, it is possible to introduce the positive experience of other states in the security of the KII. In particular, the problem of security of information technologies has been enshrined in the international standard ISO / IEC 15408 “General criteria for assessing the safety of information technology”.

As an important IT infrastructure, website is a system which requires high reliability and availability levels. Website meets the criteria as a highly available system because website must provide services to clients in real time, handle a large amount of data, and not lose data during transaction . A highly available system must meet the condition of being able to run continuously as well as guaranteeing consistency on data requests. This study designed a website with high availability. The approach was building network cluster with failover and replicated block device functions . Failover was built to provide service availability, while replicated block device provides data consistency during failure of service . With failover cluster and replicated block device approaches, a cluster which is able to handle service failures of web server and database server on the website. The result of this study was the services of the website could run well if there was any failure in node members of the cluster. The system was able to provide 99,999 (five nines) availability on database server services and 99,98 (three nines) on web server services .

The availability of organizational resources and the degree of internationalization of furniture companies - the empirical research findings. The article presents the results of empirical research carried out in 100 medium and large furniture companies. The availability of organizational resources was assessed in the group of furniture manufacturers using the Likert scale. The respondents indicated that the highest availability, taking into account the average score for all surveyed companies, was obtained in the case of financial and material resources. It should be emphasized, however, that the remaining categories of resources were also characterized by a relatively high level of availability. The differences were noticed in the groups of enterprises considering the degree of internationalization. The highest availability of all resources was indicated by respondents from companies operating mainly in foreign markets. Moreover, the relationship between the level of availability of organizational resources and the degree of internationalization of the surveyed enterprises was checked. For this purpose, the Spearman's rho correlation coefficient was used. Such a relationship was confirmed in the case of human resources and information resources. The research shows that higher availability of the indicated resources occurs in enterprises showing a greater degree of involvement in foreign activities.

The internet is playing an increasingly crucial role in both personal and business activities. In addition, with the emergence of real-time, delay sensitive and mission-critical applications, stringent network availability requirement is put forward for internet service providers (ISPs). However, commonly deployed intradomain link-state routing protocols react to link failures by globally exchanging link state advertisements and recalculating routing table, inevitably causing significant forwarding discontinuity after a failure. Therefore, the loop-free criterion (LFC) approach has been widely deployed by many ISPs for coping with the single network component failure scenario in large internet backbones. The success of LFC lies in its inherent simplicity, but this comes at the expense of letting certain failure scenarios go unprotected. To achieve full failure coverage with LFC without incurring significant extra overhead, we propose a novel link protection scheme, hybrid link protection (HLP), to achieve failure resilient routing. Compared to previous schemes, HLP ensures high network availability in a more efficient way. HLP is implemented in two stages. Stage one provides an efficient LFC based method (MNP-e). The complexity of the algorithm is less than that of Dijkstra's algorithm and can provide the similar network availability with LFC. Stage two provides backup path protection (BPP) based on MNP-e, where only a minimum number of links need to be protected, using special paths and packet headers, to meet the network availability requirement. We evaluate these algorithms in a wide spread of relevant topologies, both real and synthetic, and the results reveal that HLP can achieve high network availability without introducing conspicuous overhead. HLP not only needs around 10% time of that of full protection, but also provides full protection capabilities that full protection provide.

Communication networks are complex information systems influenced by a vast amount of factors. It is critically important to forecast the paths that data take to verify the network, check its security and plan its updates. Model allows exploring processes that take place in the network without affecting performance and availability of a real network itself. With modelling it becomes possible to investigate the results of infrastructural changes introduced to the network before actually implementing them. It is important to be able to formally convert real network description into the model definition which preserves all data that is significant for network operation and skip data which is not. Outlining the rules for such conversion and using a limited set of basic functional components provide the ground for automatic model creation for the network of different levels of complexity.Proposed approach to modelling of communication networks is based on decomposition of the overall function of every particular real network component into a set of functions that belong to some predefined basic set. Functions of the basic set include L3 routing, L2 switching, packet filtering, NAT, etc. Model of a real network component is defined as a group of functional nodes each of which implements some function from the basic set.Configuration and current state of network components that influence its operation are also decomposed into elements each of which relates to some particular functional node. Configuration of network components is modelled as a set of configuration storage elements and current state is modelled as a set of current state storage elements.Links that connect real network components and links that connect functional nodes in the model are presented as singledirection channels that implement propagation of L2 frames thus simplifying the model due to excluding physical layer (L1) from the scope.Using the proposed approach to modelling may allow to formalize conversion of a real network descrip- tion to a model thus making automated modelling possible. By using a sufficient basic set of functional nodes it is possible to model the network containing components of any complexity level.

Network monitoring is necessary so as to ensure high reliability and availability in telecom networks. One of the main challenges posed by state-of-the-art monitoring tools is the creation of network baselines. Such baselines include thresholds that can be used to determine whether monitored values (with a given context, e.g. time) represent normal network operation or not. The size and complexity of current (and future) networks makes it infeasible to manually determine and set baselines for each network operator and metric, let alone adapting the thresholds to changes in network conditions. This leads to the use of default baselines and/or setting baselines only once and never changing them throughout the lifetime of network elements. This does not only cause inefficient operation, but could have implications for network reliability and availability. In this paper, we present the design, implementation, and evaluation of DARN: a collection of analytics and machine learning-based algorithms aimed at ensuring that network baselines are automatically adapted to different metric evolution. DARN has been comprehensively evaluated on a deployment with real traffic to confirm accuracy of generated baselines, a 22% improvement in accuracy due to baseline adaptation, and a 72% reduction in false alarms.

In many telecommunication networks, a given set of client nodes must be served by different sets of facilities—providing different services and having different capabilities—which must be located and dimensioned in the design phase. Network topology must be designed as well, by assigning clients to facilities and facilities to higher level entities, when necessary. We tackle a particular location problem, where two sets of facilities have to be located, and in which different devices can be installed at each site, providing different capacities at different costs. We optimize location and dimensioning of these facilities simultaneously. We introduce a compact formulation of that problem, we use discretization and Dantzig–Wolfe reformulation techniques to improve models, and we design an exact optimization algorithm. We test our approach on a set of instances derived from existing literature on facility location. © 2011 Wiley Periodicals, Inc. NETWORKS, 2012

Dynamic characteristics of social networks users' behavior represent the toolkit for diagnosing the character and orientation of cyber communication. This study aims to analyze the communicative behavior of youth after transitioning directly from direct communication to communication via technology for the purpose of defining opportunities and determining manipulation potential on communicants. Sixty-two (62) active participants of social networks were selected to answer the questions of the questionnaire. Further, on the grounds of the provided statistics of their accounts, quantitative characteristics of dynamics of cyber communication of participants' communicative behavior were analyzed using descriptive statistics and r-criterion of Spearman rank correlation. From the results, decrease in the level of intellectual communication of the youth in cyberspace provides a high level of the youth manipulative availability in social networks. Hypotheses about measurability of dynamic characteristics of cyber communication, as well as the communication vector shift from small groups into big ones were confirmed.
 Keywords: dynamic characteristics of communication, cyber communication, social networks, meme, repost, post.

Design, measurement and achievement of a high level of service availability in a domestic satellite communications network

Indonesia is an archipelago country which causing unequal development distribution in some areas. As one of the gauernment's efforts towards equitable development, they built pioneer transportation in remote areas that is expected to increase the local economy level. Based quantitative analysis, the aim of this study is to find out the services of pioneer transportation in remote areas. On of pioneer transportation route services is at East Nusa Tenggara Prauince which through 4 pools namely Kefamenanu Pool, Pool Ende, Waingapu Pool, and Pool Kupang. Routes that cross these pools have load factor between 30-40%. In addition, comparison of the level of fleet operation and high availability on all routes pioneer in East Nusa Tenggara Prauince reached 100%. This means all existing vehicles to operate to serve the routes pioneers. Nevertheless, there are several routes that have a high level of service that is Kefamenanu - Motadik, Kefamenanu -Wini - Ponu, Kefamenanu - Oekolo, Kupang - Kuanfatu, Kupang - Kolbano, and Kupang - Naikliu. Based on the respondents perception, more than 90% said that pioneer transportation is needed in order to open mobility for remote areas. Moreauer, also concluded that the tariff of pioneer transport that expects the prauision is affordable then need additional fleet quality that fix in the pioneer route.Keywords: remote areas, pioneer transportation

It has been a long-standing goal in systems biology to find relations between the topological properties and functional features of protein networks. However, most of the focus in network studies has been on highly connected proteins (“hubs”). As a complementary notion, it is possible to define bottlenecks as proteins with a high betweenness centrality (i.e., network nodes that have many “shortest paths” going through them, analogous to major bridges and tunnels on a highway map). Bottlenecks are, in fact, key connector proteins with surprising functional and dynamic properties. In particular, they are more likely to be essential proteins. In fact, in regulatory and other directed networks, betweenness (i.e., “bottleneck-ness”) is a much more significant indicator of essentiality than degree (i.e., “hub-ness”). Furthermore, bottlenecks correspond to the dynamic components of the interaction network—they are significantly less well coexpressed with their neighbors than nonbottlenecks, implying that expression dynamics is wired into the network topology.

Cluster-based databases have been traditionally used for providing fault tolerant storage solutions. However, the limited scalability of this kind of systems has motivated the creation of a variety of storage systems based on the cloud paradigm, which achieve high scalability and availability by giving up some functionalities such as strong consistency. While this is fairly acceptable for a wide range of applications, there are still many use cases which cannot take advantage of the cloud paradigm because they are unable to resign their transactional nature. The purpose of this paper is to review how these novel systems overcome typical scalability and availability issues and present a new architecture able to offer transactional support on the cloud. This hybrid architecture is based on well-known replication protocols used in classic transactional systems which are combined according to the application workload, thus providing different consistency levels depending on the needs of each application. Moreover, the system inherits the elasticity and dynamism properties of the cloud paradigm, which makes it able to offer high scalability and availability levels without sacrificing transactional support.

Along with the development of 5G and IoT technologies in recent years, Inter Data Center (Inter-DC) network is facing an explosive growth of geographically distributed user data, which needs to be duplicated among DCs in a real-time manner. Transmission-based applications require high availability that is going beyond 99.99%. However, with the expansion of Inter-DC network scale, link failures are also growing, which seriously affects data transmission efficiency, so fast link failure recovery is then urgently needed. Many previous works have been done to achieve fast failure recovery, but most of them ignore two key points, 1) the cost of deploying recovery strategies, and 2) the side-effect of re-transmission to network availability. These two factors make the existing failure recovery process too slow to be practical in real-time online industrial environments. To achieve realistic fast recovery from Inter-DC network failures, we propose a failure recovery framework FRAVaR, which achieves high network availability with very little deployment overhead. Particularly, FRAVaR reduces the deployment overhead by a novel incremental routing strategy to isolate link failures. In other words, it only needs to shuffle a tiny amount of traffic within a small failure isolation domain. On this base, FRAVaR further adopts a risk assessment theory named Value-at-Risk (VaR) to control flow re-transmission. We implement a prototype of FRAVaR and conduct a series of experiments on 4 real InterDC network topologies (ATT North America, IBM, GlobalCenter, AGIS). Experiment results show that FRAVaR outperforms state-of-the-art solutions on the recovery speed by 70.2%. <sup xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">1</sup>

Due to their high availability and low cost level, passive protection measures are a key factor for reducing the vulnerability of persons within and close to assets against potentially impacting mortar, rocket and artillery threats. Particularly, mortar shelling has even most recently been reported. At risk are permanent and nonpermanent assets of civil, (non)governmental or peacekeeping organizations with corresponding effects, e.g., on civil society, civil services or successful nation building, respectively. Of interest are the identification of vulnerable areas and the assessment of the effectiveness of protective structures while taking also other counter measures into account. To this end, a seven-step quantitative risk and resilience analysis and management methodology is described and applied. It consists of the analysis of scenarios, frequencies, hazards, damage effects and risks and yields individual and collective risks for multi-threat scenarios. Local individual or collective risks can be minimized below criteria, thus reducing vulnerability and increasing resilience in an efficient way, e.g., by using geometrical changes, by structural roof, wall and window retrofits, by mitigating barriers and/or organizational measures. The approach is demonstrated along with three detailed example cases.

To match the bandwidth requirements of our fast-growing communication world, submarine networks have to provide ever greater transmission capacity. Thus, almost 2 Tbit/s will soon be the capacity available in submarine networks. A high level of availability is achieved owing to a very reliable submarine cable and to powerful network protection mechanisms.