Thesis Project

Management of Secure Deployment

When networking devices (routers, switches, modems, etc.) are deployed in medium-sized and large networks, it is desirable to be able to configure and monitor them remotely.  To date, this has primarily been done using a combination of Simple Network Management Protocol (SNMP) exchanges and Command Line Interface (CLI) scripts.

These approaches are (typically) labor-intensive, and relatively insecure.

With the advent of the Network Configuration (NETCONF) protocol and the YANG data-description language, there is an opportunity to reduce manpower requirements and increase security.  However, legacy devices are unlikely to be upgradable to support NETCONF/YANG.

A current student in my research group has explored an idea for making the secure management of this deployment easier.

The proposed thesis topic would bring together the work of this student and on-going work in the IETF, to provide a "demonstration of utility" in a large production environment.  The actual academic project would be based on the design issues to be encountered, i.e., you will not get a thesis from producing the demonstration, but I expect that you will get a thesis from exploring the design alternatives.

Essential qualifications

-   Currently in the M.Ap.Comp.Sc. (CSE) or M.Eng. (CIISE or ECE) programs

-   Eager to transfer to a thesis-based program, with at least 16 credits completed.

-   GPA at least 3.0

-   Good understanding of networking and especially device configuration

-   Good working knowledge of Linux

Useful qualifications

-   Knowledge of configuration for Cisco routers and switches

-   Good C/C++ programming skills