Self-Aware Networks Self-Healing and Self-Defense via Aware and Vigilant Networks

1. Self-Aware NetworksSelf-Healing and Self-Defense via Aware and Vigilant Networks August, 2002 PnP Networks, Inc.

2. Overview Project • New cognitive architecture to address self-healing and self-defense in distributed networks • Will require advances in representation and reasoning, communications and interaction technology, computational perception, and learning • Begin with LAN problem testbed; later transition to other RAP applications

3. Areas of Research Innovation • Partially observable Markov decision processes • Distributed diagnosis and repair using coalition logic and game theory • Hierarchical distribution of intelligence • Adaptation and learning

4. Technical Rationale Critical need for distributed cognitive networks • Operating with or without a centralized command node • Each node having knowledge of overall network and goals • Cognitive hierarchy functioning at individual node level, collaborating with neighboring nodes, and with global coordination and learning • Adaptive knowledge, building on individual and collaborative experience

5. Technical Rationale (continued) LAN problem ideal for study • Well-defined problem; can be specified using only commercial components. • Complex – currently requires extensive human expertise • System is inherently distributed and amenable to solutions based on coalitions or teams of agents • System is subject to unpredictable changes in connectivity, hardware, firmware, and software at any time in any of its components • Connectivity of the system is unreliable, especially for wireless networks

6. Advise and Adapt • Communicate experience for installation and configuration • Update experience base with feedback Remove Node • Remove from Collaboration Bus Collaboration Bus Add Node Reconfigure Node • Authenticate New Node • Auto-configure • Initialize state Information • Initiate Collaboration Bus WAN • Register new application/functionality • Auto-configure • Re-initialize state Information • Update Collaboration Bus Active Virtual Collaboration Link Expired Virtual Collaboration Link Physical (or wireless) Connection Removed Connection Advisor Node Computing Node Routing Node Attached Peripheral Network Self-Awareness All modes of cognition resident in each node

7. WAN Active Virtual Collaboration Link Expired Virtual Collaboration Link Physical (or wireless) Connection Removed Connection Advisor Node Computing Node Routing/Firewall Node Attached Peripheral Network Self-Healing, Self-Defense Corrective Response • Communicate experience for diagnosis and repair • Update experience base with feedback Web Server Attack Collaboration Bus • Identify source • Request assistance from firewall Network Application Failure • Identify incorrect/incompatible settings, consulting with neighboring nodes • Adjust local settings • Request network settings adjustment from routing node

8. A Hard Problem The problem of distributed cognition is hard, and not yet tested in real-world domains. This will be the first application to combine • Extensive formal representation of network states • Partitioned and hierarchical intelligence • Coalition reasoning • Adaptive distributed knowledge base