Author

Mario Baldi

101 papers · 1994–2026

1994peak 9 in 20062026

Frequent co-authors

Papers

showing 1–25 of 101 RSS

Evaluating the tradeoffs of mobile code design paradigms in network management applications

Computer Networks and Communications · International Conference on Software Engineering · April 1998 · cited 145× · DOI ↗ · more like this ·

The question of whether technologies supporting mobile code are bringing significant benefits to the design and implementation of distributed applications is still an open one. Even more difficult is to identify precisely under which conditions a design exploiting mobile code is preferable over a traditional one. In this work, we present an in-depth evaluation of several mobile code design paradigms against the traditional client-server architecture, within the application domain of network management. The evaluation is centered around a quantitative model, which is used to determine precisely the conditions for the selection of a design paradigm minimizing the network traffic related to management. KEYWORDS Mobile code, network management, management by delegation, mobile agent, remote evaluation. 1 INTRODUCTION Recently, a new approach to the development of distributed applications…

End-to-end delay analysis of videoconferencing over packet-switched networks

Mario Baldi, Y. Ofek

Signal Processing · IEEE/ACM Transactions on Networking · 2000 · cited 130× · DOI ↗ · more like this ·

Videoconferencing is an important global application-it enables people around the globe to interact when distance separates them. In order for the participants in a videoconference call to interact naturally, the end-to-end delay should be below human perception; even though an objective and unique figure cannot be set, 100 ms is widely recognized as the desired one-way delay requirement for interaction. Since the global propagation delay can be about 100 ms, the actual end-to-end delay budget available to the system designer (excluding propagation delay) can be no more than 10 ms. We identify the components of the end-to-end delay in various configurations with the objective of understanding how it can be kept below the desired 10-ms bound. We analyze these components step-by-step through six system configurations obtained by combining three generic network architectures with two video…

Lightweight, Payload-Based Traffic Classification: An Experimental Evaluation

Fulvio Risso, Mario Baldi, Olivier Morandi +2 more

Artificial Intelligence · PORTO Publications Open Repository TOrino (Politecnico di Torino) · 2008 · cited 89× · DOI ↗ · more like this ·

With the ever increasing amount of traffic, scalability is probably the most important factor that differentiates several existing approaches to traffic classification. This paper focuses on payload-based classification and compares the results obtained through a "lightweight" traffic classification approach with the ones obtained with a "completely stateful" approach, demonstrating that the first approach, albeit less precise, is still appropriate for a large class of applications.

Automatic generation of mobile app signatures from traffic observations

Qiang Xu, Yong Liao, Stanislav Miskovic +4 more

Artificial Intelligence · PORTO Publications Open Repository TOrino (Politecnico di Torino) · April 2015 · cited 66× · DOI ↗ · more like this ·

There are network management, traffic engineering, and security practices adopted in today's networking that rely on the knowledge about what applications' traffic is passing through the networks. These practices might fail with mobile apps whose identity remains hidden in generic HTTP traffic. The main reason is that unlike traditional applications, most mobile apps do not use specific protocols or IP ports with distinctive features. Many enterprises and service providers are in a great need of regaining control over their networks that increasingly carry mobile traffic. In this paper we propose FLOWR, a system that automatically identifies mobile apps by continually learning the apps' distinguishing features via traffic analysis. FLOWR focuses solely on key-value pairs in HTTP headers and intelligently identifies the pairs suitable for app signatures. Our system employs a custom…

OS Fingerprinting and Tethering Detection in Mobile Networks

Yi‐Chao Chen, Yong Liao, Mario Baldi +2 more

Artificial Intelligence · PORTO Publications Open Repository TOrino (Politecnico di Torino) · 5 Nov 2014 · cited 39× · DOI ↗ · more like this ·

Fingerprinting the Operating System (OS) running on a device based on its traffic has several applications, such as NAT detection, policy enforcement in enterprise networks, and billing for shared access in mobile networks. In this paper, we propose to utilize several features in TCP/IP headers for OS identification, and use real traffic traces to evaluate the accuracy of fingerprinting. Our trace-driven study shows that several techniques that successfully fingerprint desktop OSes are not effective for fingerprinting mobile devices. Therefore, we propose new features for fingerprinting OSes on mobile devices. We also consider NAT/tethering detection, an important application of OS fingerprinting. We use the presence of multiple OSes from the same IP address along with TCP timestamp, clock frequency, and boot time to detect tethering. Evaluation shows that our approach effectively…

Identifying Personal Information in Internet Traffic

Yabing Liu, Han Hee Song, Ignacio Bermudez +3 more

Signal Processing · PORTO Publications Open Repository TOrino (Politecnico di Torino) · 27 Oct 2015 · cited 36× · DOI ↗ · more like this ·

Users today access a multitude of online services---among the most popular of which are online social networks (OSNs)---via both web sites and dedicated mobile applications (apps), using a range of devices (traditional PCs, tablets, and smartphones) that are connected via a variety of networks. The resulting infrastructure makes these services conveniently available anytime and anywhere, enabling them to become an integral part of daily life. As a consequence, users explicitly and implicitly provide a wealth of Personal Information (PI) that reflects several aspects of their life. Service providers monetize this information by selling to third parties (e.g., advertisers). Unfortunately, today, it remains difficult for end users to fully understand the amount and nature of the collected data.

Time-Driven Access and Forwarding for Industrial Wireless Multihop Networks

Mario Baldi, Riccardo Giacomelli, Guido Marchetto

Computer Networks and Communications · IEEE Transactions on Industrial Informatics · 15 Apr 2009 · cited 33× · DOI ↗ · more like this ·

The deployment of wireless technologies in industrial networks is very promising mainly due to their inherent flexibility. However, current wireless solutions lack the capability to provide the deterministic, low delay service required by many industrial applications. Moreover, the high level of interference generated by industrial equipment limits the coverage that ensures acceptable performance. Multihop solutions, when combining frame forwarding with higher node density, have the potential to provide the needed coverage while keeping radio communication range short. However, in multihop solutions, the medium access time at each of the nodes traversed additively contributes to the end-to-end delay and the forwarding delay (i.e., the time required for packets to be processed, switched, and queued) at each node is to be added as well. This paper describes time-driven access and…

Efficiency of packet voice with deterministic delay

Mario Baldi, Fulvio Risso

Computer Networks and Communications · IEEE Communications Magazine · May 2000 · cited 31× · DOI ↗ · more like this ·

Packet switching is appealing for carrying real-time traffic because it can benefit from (possibly variable bit rate) compression schemes and statistical multiplexing to more efficiently exploit network resources. This work explores the efficiency of IP telephony in terms of the volume of voice traffic carried with deterministically guaranteed quality related to the amount of network resources used. An IP network carrying compressed voice is compared to circuit switching carrying PCM (64 kb/s) encoded voice, and some design choices affecting IP telephony efficiency are discussed.

Data mining techniques for effective and scalable traffic analysis

Mario Baldi, Elena Baralis, Fulvio Risso

Computer Networks and Communications · PORTO Publications Open Repository TOrino (Politecnico di Torino) · 15 Jun 2005 · cited 30× · DOI ↗ · more like this ·

This paper describes a novel approach to traffic analysis in high speed networks based on data mining techniques. Data mining techniques are here applied as a means to effectively process the significant amount of captured data. The paper provides a first evaluation of the proposed approach in terms of its ability of extracting relevant information and its computational requirements. Such evaluation is based on experiments run on a prototypal implementation of the proposed approach.

AWESoME: Big Data for Automatic Web Service Management in SDN

Martino Trevisan, Idílio Drago, Marco Mellia +2 more

Computer Networks and Communications · IEEE Transactions on Network and Service Management · 21 Dec 2017 · cited 23× · DOI ↗ · more like this ·

Software defined network (SDN) has enabled consistent and programmable management in computer networks. However, the explosion of cloud services and content delivery networks (CDNs)-coupled with the momentum of encryption-challenges the simple per-flow management and calls for a more comprehensive approach for managing Web traffic. We propose a new approach based on a “per service” management concept, which allows to identify and prioritize all traffic of important Web services, while segregating others, even if they are running on the same cloud platform, or served by the same CDN. We design and evaluate AWESoME, automatic Web service manager, a novel SDN application to address the above problem. On the one hand, it leverages big data algorithms to automatically build models describing the traffic of thousands of Web services. On the other hand, it uses the models to install rules in…

End-to-end delay of videoconferencing over packet switched networks

Mario Baldi, Y. Ofek

Signal Processing · Institutional Research Information System (Università degli Studi di Trento) · 27 Nov 2002 · cited 23× · DOI ↗ · more like this ·

Videoconferencing is an important global application -it enables people around the globe to interact when they are far from one another. In order for the participants in a video-conference call to interact naturally, the end-to-end delay should be below human perception-about 100 ms. Since the global propagation delay can be about 100 ms, the actual end-to-end delay budget available to the system designer (excluding propagation delay) can be no more than 10 ms. We identify the components of the end-to-end delay in various configurations with the objective of understanding how it can be kept below the desired 10 ms bound. We analyze these components going step-by-step through six system configurations obtained by combining three generic network architectures with two video encoding schemes. We study the transmission of raw video and variable bit rate (VBR) MPEG video encoding over (i)…

Profiling and optimization of software-based network-analysis applications

L. Degioanni, Mario Baldi, Fulvio Risso +1 more

Hardware and Architecture · PORTO Publications Open Repository TOrino (Politecnico di Torino) · 22 Mar 2004 · cited 20× · DOI ↗ · more like this ·

A large set of tools for network monitoring and accounting, security, traffic analysis and prediction - more broadly, for network operation and management - require direct and efficient real-time access to data traveling on the network. Software tools are often preferred because of their low cost and high versatility. However, these tools are often considered to suffer from performance problems on high-speed networks. We demonstrate that, despite the common belief, the performance limits for software real-time network analysis tools are still far from being reached and it can even be improved with limited hardware support. We analyze the performance of a widely used library for network analysis, WinPcap, highlight its bottlenecks, and propose some solutions that almost double the overall speed, thus enabling the deployment of software-based tools on high speed networks.

Service-based traffic classification: Principles and validation

Mario Baldi, Andrea Baldini, N. Cascarano +1 more

Artificial Intelligence · PORTO Publications Open Repository TOrino (Politecnico di Torino) · March 2009 · cited 19× · DOI ↗ · more like this ·

This paper presents a novel approach in traffic classification that is based on the identification of the service that generates the traffic. This method is, in some sense, orthogonal to current approaches and it can be used as an efficient complement to existing methods to reduce computation and memory requirements. Experimental results on real traffic confirm that this method is extremely effective and may improve considerably the accuracy of traffic classification, while it is suitable to a large number of applications.

Application-Oriented Trust in Distributed Computing

Riccardo Scandariato, Y. Ofek, Paolo Falcarin +1 more

Artificial Intelligence · ROAR (University of East London) · March 2008 · cited 19× · DOI ↗ · more like this ·

Preserving integrity of applications being executed in remote machines is an open problem. Integrity requires that application code is not tampered with, prior to or during execution, by a rogue user or a malicious software agent. This paper presents a methodology to enforce runtime integrity of application code by means of an integrity- preserving software component that is combined with the application. The software component is a trusted logic that can be replaced continuously from a remote location during run-time. For added assurance, the software component produces continuous sequence of proofs of its proper operation that are verified remotely.

Adaptive group multicast with time-driven priority

Mario Baldi, Y. Ofek, B. Yener

Computer Networks and Communications · IEEE/ACM Transactions on Networking · 2000 · cited 19× · DOI ↗ · more like this ·

This paper shows how to provide an adaptive real-time group multicast (many-to-many) communication service. Adaptive means that the number of nodes that transmit to the multicast group is continuously changing. In order to meet deterministic quality-of-service (QoS) requirements of a real-time group multicast, some communication resources are reserved. We show (1) how bandwidth is reserved for each multicast group and (2) how an active source can dynamically share the bandwidth allocated to this multicast group with other active group members. Quality-of-service support for a real-time multicast group is based on time-driven priority. In this scheme the time is divided into time frames of fixed duration, and all the time frames are aligned by using a common global time reference, which can be obtained from the Global Positioning System. Bandwidth is allocated to a multicast group as a…

Quality-Oriented Video Transmission With Pipeline Forwarding

Mario Baldi, Juan Carlos De Martin, Enrico Masala +1 more

Computer Vision and Pattern Recognition · IEEE Transactions on Broadcasting · 4 Aug 2008 · cited 15× · DOI ↗ · more like this ·

This work proposes a quality-oriented multimedia delivery framework that tackles the issue of optimizing video broadcasting and interactive video applications over packet networks with respect to both resource utilization and user perceived quality. Previous work showed that the quality of service requirements of multimedia applications can be optimally satisfied by pipeline forwarding of packets by keeping delay controlled and resource utilization high, while enabling highly scalable network devices. These properties are key in today networks to enable valuable (i.e., chargeable for) services and to avoid that the traffic increase due to broadband video either collapses existing networks or forces the deployment of high cost, cutting-edge technology to properly upgrade them. However, the current Internet is not based on such technology and its incremental introduction raises questions…

Optimizing packet capture on symmetric multiprocessing machines

G. Varenni, Mario Baldi, L. Degioanni +1 more

Hardware and Architecture · PORTO Publications Open Repository TOrino (Politecnico di Torino) · 22 Mar 2004 · cited 14× · DOI ↗ · more like this ·

Traffic monitoring and analysis based on general purpose systems with high speed interfaces, such as Gigabit Ethernet and 10 Gigabit Ethernet, requires carefully designed software in order to achieve the needed performance. One approach to attain such a performance relies on deploying multiple processors. This work analyses some general issues in multiprocessor systems that are particularly critical in the context of packet capture and network monitoring applications. More important, a new algorithm is proposed to coordinate multiple producers concurrently accessing a shared buffer, which is instrumental in packet capture on symmetrical multiprocessor machines.

Adaptive real-time group multicast

Mario Baldi, Y. Ofek, B. Yener

Computer Networks and Communications · Institutional Research Information System (Università degli Studi di Trento) · 22 Nov 2002 · cited 14× · DOI ↗ · more like this ·

This paper shows how to provide an adaptive real-time group multicast (many-to-many) communication service. Such a service can be used by applications, like audio/video tele-conferencing, that require low loss, and bounded delay and jitter. In order to meet deterministic quality of service (QoS) requirements of a real-time group multicast, some communication resources are reserved. In this work we show (i) how bandwidth is reserved for each group, and (ii) how an active user in a multicast group can dynamically share, in an efficient and fair manner, the bandwidth allocated to its group. Quality of service support for a real-time multicast group is based on time driven priority. In this scheme the time is divided into time frames of fixed duration and all the time frames are aligned by using a global time reference which can be obtained from GPS (global positioning system). Bandwidth is…

Per-user policy enforcement on mobile apps through network functions virtualization

Amedeo Sapio, Yong Liao, Mario Baldi +5 more

Computer Networks and Communications · PORTO Publications Open Repository TOrino (Politecnico di Torino) · 5 Sep 2014 · cited 13× · DOI ↗ · more like this ·

Due to the increasing popularity of smartphones and tablets, mobile apps are becoming the preferred portals for users to access various network services in both residential and enterprise environments. Predominantly using generic HTTP or HTTPS protocols, traffic from different mobile apps is largely indistinguishable. This loss of visibility into mobile app traffic brings new challenges to network management and traffic analysis. It has became very hard to implement network policies based on the differentiation between traffic from compliant and non-compliant mobile apps. This paper presents a system that not only provides network administrators the much desired capability of enforcing policies on mobile app traffic, but also does that at a fine per-user granularity. The proposed system takes a Network Functions Virtualization (NFV) approach and virtualizes an edge router into multiple…

Network virtual machine (NetVM): a new architecture for efficient and portable packet processing applications

L. Degioanni, Mario Baldi, D. Buffa +3 more

Hardware and Architecture · Proceedings of the 8th International Conference on Telecommunications, 2005. ConTEL 2005. · 2005 · cited 13× · DOI ↗ · more like this ·

A challenge facing network device designers, besides increasing the speed of network gear, is improving its programmability in order to simplify the implementation of new applications (see for example, active networks, content networking, etc). This paper presents our work on designing and implementing a virtual network processor, called NetVM, which has an instruction set optimized for packet processing applications, i.e., for handling network traffic. Similarly to a Java Virtual Machine that virtualizes a CPU, a NetVM virtualizes a network processor. The NetVM is expected to provide a compatibility layer for networking tasks (e.g., packet filtering, packet counting, string matching) performed by various packet processing applications (firewalls, network monitors, intrusion detectors) so that they can be executed on any network device, ranging from expensive routers to small appliances…

WHAT: A big data approach for accounting of modern web services

Martino Trevisan, Idílio Drago, Marco Mellia +2 more

Artificial Intelligence · ArTS Archivio della ricerca di Trieste (University of Trieste https://www.units.it/) · December 2016 · cited 12× · DOI ↗ · more like this ·

HTTP(S) has become the main means to access the Internet. The web is a tangle, with (i) multiple services and applications co-located on the same infrastructure and (ii) several websites, services and applications embedding objects from CDN, ads and tracking platforms. Traditional solutions for traffic classification and metering fall short in providing visibility in users' activities. Service providers and corporate network administrators are left with huge amounts of measurements, which cannot immediately reveal the real impact of each web service on the network. Such visibility is key to dimension the network, charge users and policy traffic. This paper introduces the Web Helper Accounting Tool (WHAT), a system to uncover the overall traffic produced by specific web services. WHAT combines big data and machine learning approaches to process large volumes of network flow measurements…

Enabling Flexible Packet Filtering Through Dynamic Code Generation

Olivier Morandi, Fulvio Risso, Mario Baldi +1 more

Hardware and Architecture · PORTO Publications Open Repository TOrino (Politecnico di Torino) · 2008 · cited 12× · DOI ↗ · more like this ·

Despite its efficiency, the general approach of hardcoding protocol format descriptions in packet processing applications suffers from many limitations. Among the others, the lack of flexibility when needing to extend the software for supporting new protocols, and the proliferation of modules with similar functionality between different applications, resulting in decreased maintainability. The NetPDL language was defined for overcoming such limitations, allowing decoupling applications from the knowledge of the format of protocol headers. The main criticism to NetPDL relates to its supposed performance penalties; this paper demonstrates that this language can be effectively used for the dynamic generation of optimized, i.e. efficient and fast, packet-processing code, and presents the architecture of a compiler implemented for such purpose.

A comparison of ring and tree embedding for real-time group multicast

Mario Baldi, Y. Ofek

Computer Networks and Communications · IEEE/ACM Transactions on Networking · June 2003 · cited 12× · DOI ↗ · more like this ·

In general topology networks, routing from one node to another over a tree embedded in the network is intuitively a good strategy, since it typically results in a route length of O(logn) links, n being the number of nodes in the network. Routing from one node to another over a ring embedded in the network results in route length of O(n) links. However, in group (many-to-many) multicast, the overall number of links traversed by each packet, i.e., the networks elements on which resources must possibly be reserved, is typically O(N) for both tree and ring embedding, where N is the size of the group. The paper focuses on tree versus ring embedding for real-time group multicast in which all packets should reach all the nodes in the group with a bounded end-to-end delay. Real-time properties are guaranteed by the deployment of time-driven priority in network nodes. In order to have a better…

BLOCKING PROBABILITY WITH TIME-DRIVEN PRIORITY SCHEDULING

Mario Baldi, Y. Ofek

Computer Networks and Communications · Institutional Research Information System (Università degli Studi di Trento) · 2000 · cited 12× · OpenAlex ↗ · more like this ·

This paper evaluates call blocking probability over packet-switched networks with Time-driven priority (TDP) (Li et al. 1998; Li, Ofek and Yung 1996). The presented work is novel since call blocking is typically studied in the context of circuit-switched networks. TDP together with resource reservation enables real-time delivery of packets with no loss due to congestion and constant jitter of one time frame (TF)typically between 12.5 s and 125 s. Resource reservation for a call (or multiple calls) over a TDP network requires finding a schedule. A call may not be accepted for two reasons (i) there is no capacitythe call is rejectedor (ii) there is capacity but no schedulethe call is blocked. This work studies the call blocking probability as a function of the link utilization, since call blocking can possibly lead to low link utilization. In other words, it may not be possible to fully…

Optimized H.264 Video Encoding and Packetization for Video Transmission Over Pipeline Forwarding Networks

Enrico Masala, Andrea Vesco, Mario Baldi +1 more

Signal Processing · IEEE Transactions on Multimedia · 4 May 2009 · cited 11× · DOI ↗ · more like this ·

Previous works showed that the quality-of-service (QoS) requirements of multimedia applications can be optimally satisfied by pipeline forwarding (PF) by providing end-to-end delay guarantees as well as high network resource utilization. However, the unavoidable mismatch between reserved resources and the unpredictable traffic profile of a video stream has an impact on the resulting application layer quality. Therefore, a new low-complexity H.264 video encoding and packetization scheme based on a distortion-optimized macroblock grouping technique is designed here to maximize the performance of video transmission on PF networks. The scheme considers the perceptual importance of the different parts of the video data to group the most important information in few packets that are the natural candidates to receive the deterministic service provided by PF. Results show peak signal-to-noise…