Secure Affordable Sustainable Edge Clouds (SASEC) for Smart Cities and Enterprises *

Transcription

1 Secure Affordable Sustainable Edge Clouds (SASEC) for Smart Cities and Enterprises * University of Virginia, Charlottesville, VA, mv5g@virginia.edu University of Arizona, Tucson, AZ, dkilper@optics.arizona.edu Malathi Veeraraghavan & Xiao Lin University of Virginia mv5g@virginia.edu Dan Kilper University of Arizona dkilper@optics.arizona.edu Oct. 18, 2017 Internet2 TechX 2017 Thanks to NSF CNS for grants: , , Thanks to US-Ignite for Gigabit Application/Service Development Award NSF S&CC Program 2017 Grant: A novel architecture for secure, energy-efficient community-edge-clouds with application in Harlem (SEEC-Harlem) 1 of 15

2 Dumb User Devices (DUDs) for user owned/operated systems + Cyber Protected Edge Clouds administered by professionals Offices/Apartments Keyboard Video Mouse Offices/Apartments Offices/Apartments DUD DUD DUD DUD Floors DUD Floors DUD DUD Ethernet switch IP router Edge cloud Ethernet switch Building 1 Building 3 Compute Storage cluster cluster Building 2 2 of 15 Access links to ISP networks

3 Motivation for enterprises: Cybersecurity + HR Savings Food for thought: Processor ownership is not for everyone One ill-maintained smart device, or an ill-informed Internet user, could hurt many others, e.g., victim of a spear phishing attack can lead to malware implantation, which then spreads to other machines Botnets created from such compromised machines are used in DDoS attacks, Advanced Persistent Threat (APT) exfiltration attacks, Ransomware, all of which affect society-at-large One enterprise user s careless behavior could result in the loss of social security numbers, credit card numbers, and other such information for many, if not all, employees of that enterprise. Mirai botnet: Used camera (IoT); Go dumb, not smart! But connected HR Savings: If all workers in a division of a large enterprise use DUDs, the division may no longer need system admins 3 of 15

4 Smart Harlem/Smart-City Use Case: Affordability argument More basic than lack of broadband access in homes: Lack of computers in homes New York City Comptroller Office 2014 report: 27% of NYC households lack broadband Internet 17% (532,902 households) do not have s 20% if household head did not finish high school Identified need for such urban households Edge cloud first; broadband access next 4 of 15

5 Two critical technologies High-speed networks: low-latency Transport frame-buffer video, audio output from the edge cloud server to the user-owned DUDs, and video from user-owned ordinary SD/HD cameras, 3D cameras, and virtual reality (VR) cameras, keyboard/mouse, audio input back to the edge cloud VMs and containers Address loss of freedom to purchase and install any software on user-owned machine VM services on edge cloud Governance policies for edge cloud 5 of 15

6 Four use cases for connecting multiple monitors to a server (run individual wires: too expensive for our use case) Office workers use multiple monitors Video gamers: Nvidia GeForce GTX 650 Ti HDMI Scientists use video walls for data visualization DisplayPort Reverse switch Front view Two DVI ports Rear view 6 of 15

7 Internet2 UVA network Cogent Google Internet2 MREX-DC 10GE UDC Internet 10GE Level3 10GE MREX-ATL UVA Edge Cloud Carruthers Internet WAN packets mirrored UDC Carruthers Gilmer VL Slaughter Buildings... 7 of Buildings... Buildings

8 Server 1 HDMI Edge Cloud (EC) Server 2 DVI HDMI DVI VGA DisplayPort EC FPGA Board FPGA WiFi Codec & Cryptographic Chips Wireless mesh Ethernet-switched or IP-routed networks Server 3 VGA Audio in/out port Ethernet Server 4 DisplayPort Dumb User Devices (DUDs) Mic/Speaker Camera Audio in/out port FPGA User FPGA Board Codec & Cryptographic Chips Optional Block WiFi Ethernet HDMI DVI VGA DisplayPort 8 of 15

9 Edge cloud services 1. Shared applications as shown below 2. Virtual machines 3. Storage Word Chrome Photoshop User 1 terminal in Office 1 keyboard/mouse commands video to display Word Chrome Photoshop video to display User 1 User 2 Word Skype Host Operating System (OS) itunes Files Word Skype itunes Files User 2 terminal in Office 2 keyboard/mouse commands Hardware (CPU, RAM, Disk, NIC) Server 1 in Edge Cloud 9 of 15

10 Second service type: VMs/container User 3 User 4 Virtual machine 1 (Linux OS) Virtual machine 2 (Windows OS) Hypervisor (for virtualization) Host Operating System (OS) Hardware (CPU, RAM, Disk, NIC) Server 2 in Edge Cloud Users have flexibility to run their own OS Users can install their own applications Can charge more for VM service Can save image for future uses 10 of 15

11 Experimental Setup Location Operating System IP address Remote Server Local Laptop University Data Center of UVa CentOS 6.7 with kernel version Rice Hall of UVa Windows Length of Youtube video: 4.45 minutes Input Parameter Video resolution: 360p, 480p, 720p, 1080p 11 of 15

12 Average Throughput for Different Video Resolution Average Throughput 360p 480p 720p 1080p Uplink (kbps) Downlink (Mbps) Uplink: From the local laptop to the remote server Downlink: From the remote server to the local laptop 360p: SD VGA ( ) 480p: SD VGA ( ) 720p: HDTV ( ) 1080p: HDTV ( ) 12 of 15

13 Thoughts on these challenges? Bandwidth challenge If 50/400 households in one unwired building use edge cloud servers simul., then 50 Mbps * 50 = 250 Mbps wireless required (802.11ac: 450 Mbps) If 200 students in one classroom use wireless access to UVA network to reach edge cloud, need 1Gb/s link FPGA board: Bridge video ports (DVI, HDMI) to WiFi/Ethernet protocol + video coding (compression) + encryption/decryption and key mgmt Evaluation Test varied combinations of software with tens of DUDs Scalability study with simulations How do we test hypothesis about increased security? 13 of 15

14 How do we quantify increased security? Check s for phishing attacks in edge cloud Use VM as sandboxes to test & denotate malware Privacy issues? How does this differ from network IDS/IPS? How can we model and compare security in today's desktop- vs. CPEC-DUD approaches Trained technical professional maintaining these ECs should yield better security Vastly reduces attack surface 14 of 15

15 Summary: Thoughts? Started out as a Smart City idea But see value for campus networks Cybersecurity: vastly reduces attack surface HR savings Cloud computing used for batch jobs our use case is for interactive jobs virtual desktop: but thin clients (we propose dumb clients) Need proof of concept Rigorous evaluation of increased security 15 of 15