主讲人：Dr. Xiaobo Wang, Veraz Networks, USA, and Mr. Zhijun Fu, Sun Microsystems

时 间：2008年5月8日（星期四）下午1:30 -3:30

地 点：北大现代物理研究中心报告厅（老化学楼东一层）

内容摘要：

Virtualization is a hot topic today. It brings significant benefits to users and is believed to be one of the most important technologies in the coming years for its broad and profound impact on IT infrastructure and operation. Past virtualization work focused on server virtualization, which means to consolidate multiple servers into a single host machine by creating Virtual Machines on the host. As server virtualization gains momentum in IT departments, network becomes a bottleneck in the virtualization process. Network virtualization is thus becoming increasingly important to achieve a complete virtualization solution. Network virtualization, however, is a challenging task. Current approaches have both performance penalty and security risks. Many issues in this area need to be studied and resolved.

This seminar gives an introduction to network virtualization and discuss its security implication in DDoS attacks. It then describes Crossbow, one of the leading network virtualization solutions. The seminar has three sections. Section one describes the basic concepts of network virtualization. It then gives an overview of the existing solutions and the emerging hardware based solutions. Section two discusses DDoS attacks in network virtualization and potential solutions to mitigate DDoS attacks by leveraging advantages of network virtualization. We argue that network virtualization increases the risk for DDoS attacks but also enables new DDoS mitigation solutions. Section three describes the design and implementation of Crossbow - Sun’s open source network virtualization project, and explains how Crossbow solves some of the most challenges issues in network virtualization with innovative solutions that leverage new features from Solaris OS and new hardware features on NIC cards.

演讲人简介：

Dr. Xiaobo Wang has 15 year’s academic and industry experience in the area of network security. He worked as security architect and senior security engineer at Cylink(SafeNet), Edge Water Networks, and Palm. He also worked as researcher at Spring Labs. Currently he is a senior security architect at Veraz Networks and is responsible for the research and design of next generation VoIP security products. Dr. Xiaobo Wang received his B.A. and M.S. in CS from Beijing University, and Ph.D. in CS from University of Hawaii. His interests include security in converged networks, security in Fixed Mobile Convergence (FMC), security and virtualization, and security for NGN.

Mr. Zhijun Fu is a senior software engineer in Solaris Core OS Group at Sun Microsystems. He has involved in the several projects in the kernel networking area, which enhanced network isolation and network security for virtual machines. Currently he is a developer in project Crossbow. His interests include network virtualization and network security. He received his B.A. and M.S. in CS from Nankai University.