Attacker Independent Stability Guarantees for - - PowerPoint PPT Presentation

attacker independent stability guarantees for peer 2 peer
SMART_READER_LITE
LIVE PREVIEW

Attacker Independent Stability Guarantees for - - PowerPoint PPT Presentation

Attacker Independent Stability Guarantees for Peer-2-Peer-Live-Streaming Topologies Andreas Brieg, Michael Brinkmeier, Sascha Grau, Mathias Fischer, Guenter Schaefer This work was in part supported by the Deutsche Forschungsgemeinschaft under


slide-1
SLIDE 1

Attacker Independent Stability Guarantees for Peer-2-Peer-Live-Streaming Topologies

Andreas Brieg, Michael Brinkmeier, Sascha Grau, Mathias Fischer, Guenter Schaefer

This work was in part supported by the Deutsche Forschungsgemeinschaft under grant numbers KU658/10-1 and SCHA1533/1-1.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 1 / 21

slide-2
SLIDE 2

P2P-Live-Streaming - What & Why?

Goal

Realtime distribution of continously generated multimedia-stream to varying and potentially large set of viewers.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 2 / 21

slide-3
SLIDE 3

P2P-Live-Streaming - What & Why?

Goal

Realtime distribution of continously generated multimedia-stream to varying and potentially large set of viewers.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 2 / 21

slide-4
SLIDE 4

P2P-Live-Streaming - What & Why?

Goal

Realtime distribution of continously generated multimedia-stream to varying and potentially large set of viewers.

Key Idea

Incorporate viewers’ resources for distribution to overcome problems

  • f classical Client-Server approach:

restricted bandwidth resources at server high hardware costs inefficient traffic patterns (all paths lead to server)

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 2 / 21

slide-5
SLIDE 5

Packet distribution in trees

Packets: enter the system at source node s s

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 3 / 21

slide-6
SLIDE 6

Packet distribution in trees

Packets: enter the system at source node s distributed to direct neighbors s v1 v2 v3

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 3 / 21

slide-7
SLIDE 7

Packet distribution in trees

Packets: enter the system at source node s distributed to direct neighbors replicated and re-distributed to

  • ther nodes

s v1 v4 v5 v2 v6 v3 v7 v8

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 3 / 21

slide-8
SLIDE 8

Packet distribution in trees

Packets: enter the system at source node s distributed to direct neighbors replicated and re-distributed to

  • ther nodes . . .

Packet distribution over Spanning Trees! s v1 v4 v5 v2 v6 v3 v7 v8

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 3 / 21

slide-9
SLIDE 9

Packet distribution in trees

Packets: enter the system at source node s distributed to direct neighbors replicated and re-distributed to

  • ther nodes . . .

Packet distribution over Spanning Trees! s v1 v4 v5 v2 v6 v3 v7 v8 Service quality of peers in low levels of the tree depends on cooperation and health of all nodes in its path to the source.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 3 / 21

slide-10
SLIDE 10

Problems of P2P-Live-Streaming systems

But peers... constantly join and leave the system have small resources are vulnerable to attacks and have high failure probability

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 4 / 21

slide-11
SLIDE 11

Problems of P2P-Live-Streaming systems

But peers... constantly join and leave the system have small resources are vulnerable to attacks and have high failure probability

A key idea

Using multiple distribution trees with varying inner nodes decreases dependency on single nodes.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 4 / 21

slide-12
SLIDE 12

Model of push-based P2P-Streaming systems (1)

Basic model

Stream is divided into k substreams called stripes Participants V = {s, v1, . . . , vn} are nodes of a graph G Stripe i is distributed using a directed spanning tree Ti over V Streaming Topology T = {T1, . . . , Tk} is set of these k distribution trees

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 5 / 21

slide-13
SLIDE 13

Model of push-based P2P-Streaming systems (2)

More definitions...

Assumption: source has a maximum degree of C · k, for C ∈ N+ Nodes receiving packets directly from s are called heads of T The successors succi(v) of a node v ∈ V in Ti ∈ T are all nodes

  • f the maximal subtree of Ti that is rooted in v

s 2 1 3 4 5 6 7 8 9

10 11

s 3

11

8 1 5 2 4 6

10

7 9

Stripe 1 Stripe 2 C = 3 Heads H = {2, 3, 5, 7, 10} succ1(2) = {1, 2, 3, 4}

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 6 / 21

slide-14
SLIDE 14

What do we aim for?

Goal

1

Identify the class of all streaming topologies that are optimally stable against node failures due to malicious DoS attacks.

2

Provide rules for their efficient construction.

3

Design and implement distributed topology management mechanisms realizing stable topologies in P2P-streaming systems.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 7 / 21

slide-15
SLIDE 15

Attackers, damage and stability (1)

Abstract attacker

A map from T and x ∈ N to a set X ⊆ V \ {s} of x failing peers.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 8 / 21

slide-16
SLIDE 16

Attackers, damage and stability (1)

Abstract attacker

A map from T and x ∈ N to a set X ⊆ V \ {s} of x failing peers. Why exclude source s? Source attack would always be optimal. Would disregard influence of distribution topology → seemingly equal stability of P2P and client-server approach

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 8 / 21

slide-17
SLIDE 17

Attackers, damage and stability (1)

Abstract attacker

A map from T and x ∈ N to a set X ⊆ V \ {s} of x failing peers. Why exclude source s? Source attack would always be optimal. Would disregard influence of distribution topology → seemingly equal stability of P2P and client-server approach

Damage function aT (X)

The damage function aT : 2V → R quantifies the damage incured on T by the failure of nodes.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 8 / 21

slide-18
SLIDE 18

Attackers, damage and stability (2)

In this work, we chose on the packet loss damage function, summing up the number of successors of nodes in X over all stripes. aT (X) =

k

  • i=1
  • v∈X

succi(v)

  • Stability Guarantees for Live-Streaming Topologies
  • S. Grau

ITI, TU Ilmenau, Germany Page 9 / 21

slide-19
SLIDE 19

Attackers, damage and stability (2)

In this work, we chose on the packet loss damage function, summing up the number of successors of nodes in X over all stripes. aT (X) =

k

  • i=1
  • v∈X

succi(v)

  • s

3 7 2 1 5 6 4 s 2 1 3 4 5 6 7 s 6 1 7 3 4 2 5 Stripe 1 Stripe 2 Stripe 3 aT1(X) = 4 aT2(X) = 7 aT3(X) = 5 aT (X) = 16

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 9 / 21

slide-20
SLIDE 20

The complete class of optimally stable streaming topologies (1).

The complete class of optimally stable streaming topologies is characterized by the damage incured by an optimal attacker.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 10 / 21

slide-21
SLIDE 21

The complete class of optimally stable streaming topologies (1).

The complete class of optimally stable streaming topologies is characterized by the damage incured by an optimal attacker. For l = (i div C) and h = (i mod C), define δC,k

i

= n

C

  • + (k − 2l − 1)

if h ≤ (n mod C) n

C

  • + (k − 2l − 1)
  • therwise

δC,k

1

δC,k

C+1

δC,k

2C+1

δC,k

Ck

Ck n mod C C Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 10 / 21

slide-22
SLIDE 22

The complete class of optimally stable streaming topologies (2).

For l = (i div C) and h = (i mod C), define δC,k

i

= n

C

  • + (k − 2l − 1)

if h ≤ (n mod C) n

C

  • + (k − 2l − 1)
  • therwise

Optimally stable topologies [1]

A topology T with parameters C, k, n is optimally stable if and only if aT (O(T , m)) = m

i=1 δC,k i

for 1 ≤ m ≤ C · k.

[1] Brinkmeier et. al., ”Optimally DoS Resistant P2P Topologies for Live Multimedia Streaming”, IEEE Transactions on Parallel and Distributed Computing, 2009

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 11 / 21

slide-23
SLIDE 23

The bad news.

Decision problem

Decide whether any given streaming topology T is optimally stable. We have shown that this problem is co-NP-complete. Hence, without P=NP, it is not solvable in polynomial time.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 12 / 21

slide-24
SLIDE 24

The bad news.

Decision problem

Decide whether any given streaming topology T is optimally stable. We have shown that this problem is co-NP-complete. Hence, without P=NP, it is not solvable in polynomial time.

All is not lost

We can identify a large and easy-to-check subclass of optimally stable topologies!

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 12 / 21

slide-25
SLIDE 25

Necessary properties of stable topologies (1)

Stable topologies must follow a number of necessary rules.

Not-Too-Many-Successors Rule

Every peer has at most δC,k

1

= n

C

  • + (k − 1) successors.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 13 / 21

slide-26
SLIDE 26

Necessary properties of stable topologies (2)

Head Rules

1

In each stripe each head adjacent to the source has exactly one head from each other stripe as a successor.

2

If u, v ∈ V are heads and u ∈ succ(v), then |succ(u)| = |succ(v)|.

s 1 2 3 4 5 7 6 s 2 1 3 5 4 6 7 s 3 1 2 6 4 5 7 Stripe 1 Stripe 2 Stripe 3

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 14 / 21

slide-27
SLIDE 27

Necessary properties of stable topologies (3)

Head topology of T

The head topology H(T ) of a topology T is a streaming topology

  • ver node set VH(T ) = {v ∈ V | v is head in T } ∪ {s} and in tree Ti,

an edge (u, v) exists if v ∈ succi(u) in T .

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 15 / 21

slide-28
SLIDE 28

Necessary properties of stable topologies (3)

Head topology of T

The head topology H(T ) of a topology T is a streaming topology

  • ver node set VH(T ) = {v ∈ V | v is head in T } ∪ {s} and in tree Ti,

an edge (u, v) exists if v ∈ succi(u) in T .

Heads-Are-Optimally-Stable Rule

For topology T to be stable, H(T ) has to be optimally stable.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 15 / 21

slide-29
SLIDE 29

Necessary properties of stable topologies (3)

Head topology of T

The head topology H(T ) of a topology T is a streaming topology

  • ver node set VH(T ) = {v ∈ V | v is head in T } ∪ {s} and in tree Ti,

an edge (u, v) exists if v ∈ succi(u) in T .

Heads-Are-Optimally-Stable Rule

For topology T to be stable, H(T ) has to be optimally stable. Untrivial requirement. Large class of stable head topologies has been identified since paper submission.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 15 / 21

slide-30
SLIDE 30

A large and easily checkable subclass of optimally stable topologies

Shown requirements are not sufficient to guarantee optimal topology stability. But: complexity of decision problem traced back to existence of non-heads with head-like successor number.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 16 / 21

slide-31
SLIDE 31

A large and easily checkable subclass of optimally stable topologies

Shown requirements are not sufficient to guarantee optimal topology stability. But: complexity of decision problem traced back to existence of non-heads with head-like successor number. Forbid them!

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 16 / 21

slide-32
SLIDE 32

A large and easily checkable subclass of optimally stable topologies

Shown requirements are not sufficient to guarantee optimal topology stability. But: complexity of decision problem traced back to existence of non-heads with head-like successor number. Forbid them!

Strictly-Not-Too-Many-Successors Rule

Every head has at most δC,k

1

= n

C

  • + (k − 1) successors and every

non-head has at most δC,k

Ck =

n

C

  • − k − 1 successors.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 16 / 21

slide-33
SLIDE 33

A large and easily checkable subclass of optimally stable topologies (2)

Theorem

A streaming topology T satisfying Head Rules 1 Head Rules 2 Heads-Are-Optimally-Stable Rule Strictly-Not-Too-Many-Successors Rule is optimally stable.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 17 / 21

slide-34
SLIDE 34

A large and easily checkable subclass of optimally stable topologies (2)

Theorem

A streaming topology T satisfying Head Rules 1 Head Rules 2 Heads-Are-Optimally-Stable Rule Strictly-Not-Too-Many-Successors Rule is optimally stable. Easy to construct. Membership checkable in polynomial time.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 17 / 21

slide-35
SLIDE 35

Stable topologies in ’the wild’.

Practical topology construction would demand for distributed construction mechanisms.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 18 / 21

slide-36
SLIDE 36

Stable topologies in ’the wild’.

Practical topology construction would demand for distributed construction mechanisms. Current rule set still seems to require central coordination of heads. Options: Special treatment → nodes learn about their head status Approximation by additional rules

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 18 / 21

slide-37
SLIDE 37

Stable topologies in ’the wild’.

Practical topology construction would demand for distributed construction mechanisms. Current rule set still seems to require central coordination of heads. Options: Special treatment → nodes learn about their head status Approximation by additional rules

Current Implementation

Cost functions based on stripe-specific successor numbers of children nodes prefer forwarding single stripe: one-stripe-only rule Simulations [2]: topology properties near optimum

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 18 / 21

slide-38
SLIDE 38

Conclusion & Outlook

Conclusion

Optimally stable topologies exist. General optimally stable topologies are hard to identify. Simple rule set defines a large, easy-to-check subclass.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 19 / 21

slide-39
SLIDE 39

Conclusion & Outlook

Conclusion

Optimally stable topologies exist. General optimally stable topologies are hard to identify. Simple rule set defines a large, easy-to-check subclass.

Outlook

Distributed construction still challenging problem. Assuming Multiple Description Coding or Forward Error Correction, more complex damage measures regarding indivual service loss of nodes can be introduced.

Hardness of attacker problems already studied in [3] Optimal topologies are topic of ongoing research.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 19 / 21

slide-40
SLIDE 40

Thank you for your attention!

Do you have questions?

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 20 / 21

slide-41
SLIDE 41

Bibliography

  • A. Brieg, “Classification of optimally stable live-streaming

topologies (German: Klassifikation optimal stabiler Live-Streaming Topologien),” Master’s thesis, TU Ilmenau, 2008.

  • M. Brinkmeier, G. Schaefer, and T. Strufe, “Optimally DOS

Resistant P2P Topologies for Live Multimedia Streaming,” IEEE Transactions on Parallel and Distributed Systems, vol. 20, no. 6,

  • pp. 831–844, 2009.
  • S. Grau, M. Fischer, M. Brinkmeier, and G. Schaefer, “On

Complexity and Approximability of Optimal DoS Attacks on Multiple-Tree P2P Streaming Topologies,” submitted to IEEE Transacations on Dependable and Secure Computing, 2009.

Stability Guarantees for Live-Streaming Topologies

  • S. Grau

ITI, TU Ilmenau, Germany Page 21 / 21