Re: [Idnet] Summary 20170814 & IDN dedicated session call for case

[Hesham ElBakoury <[e-mail]>]

I would think that the self-service revolution can provide useful use cases for ML/AI.

Hesham

From: Haoyu song
Sent: Tuesday, August 15, 2017 1:10 PM
To: Hesham ElBakoury; yanshen; [e-mail]
Subject: RE: Summary 20170814 & IDN dedicated session call for case

Obviously we are not going to apply ML on networking just for the sake of ML. In my opinion, the only reason to apply ML is that it’s proved to be a better (or only) way to solve a problem. We have seen a few successful examples such as ETA and root cause analysis, and ML approaches seem promising on solving some networking problems， but I also agree that we are still far from  the conclusion (or don’t even have clear understanding) that all these use cases can be better solved by ML. Then it is even farther to think about standardizing the related protocols and interfaces at the current stage. That said, this doesn’t prevent us from studying the possibilities. The most important thing is to develop more solid use cases to demonstrate that ML is not only useful but preferred. The current list is still too high level which doesn’t help me gain such confidence yet. Hopefully more detailed reports will come.

Haoyu

From: IDNET [mailto:[e-mail]] On Behalf Of Hesham ElBakoury
Sent: Tuesday, August 15, 2017 5:49 AM
To: yanshen <[e-mail]>; [e-mail]
Subject: Re: [Idnet] Summary 20170814 & IDN dedicated session call for case

Hi Yanshen,

In all of these use cases what problems we are trying to solve that have not been solved before or why existing solutions are not good enough ?

Thanks

Hesham

From: IDNET [mailto:[e-mail]] On Behalf Of yanshen
Sent: Sunday, August 13, 2017 8:36 PM
To: [e-mail]<mailto:[e-mail]>
Subject: [Idnet] Summary 20170814 & IDN dedicated session call for case

Dear all,

Here is a summary and some index (2017.08.14). Till now, whatever the case is supported or not, I tried to organize all the content and keep the core part. It is still welcome to contribute and discuss.

If I miss something important, please let me know. Apologized in advance.

Yansen


---------  Roadmap  ---------
***Aug. : Collecting the use cases (related with NM). Rough thoughts and requirements
Sep. : Refining the cases and abstract the common elements
Oct. : Deeply analysis. Especially on Data Format, control flow, or other key points
Nov.: F2F discussions on IETF100
---------  Roadmap End  ---------


1. Gap and Requirement Analysis
    1.1 Network Management requirement
    1.2 TBD
2. Use Cases
    2.1 Traffic Prediction
                   Proposed by: [e-mail]<mailto:[e-mail]>
                   Track: https://www.ietf.org/mail-archive/web/idnet/current/msg00131.html
                   Abstract: Collect the history traffic data and external data which may influence the traffic. Predict the traffic in short/long/specific term. Avoid the congestion or risk in previously.

    2.2 QoS Management
                   Proposed by: [e-mail]<mailto:[e-mail]>
                   Track: https://www.ietf.org/mail-archive/web/idnet/current/msg00131.html
                   Abstract: Use multiple paths to distribute the traffic flows. Adjust the percentages. Avoid congestion and ensure QoS.

    2.3 Application (and/or DDoS) detection
                   Proposed by: [e-mail]<mailto:[e-mail]>
                   Track: https://www.ietf.org/mail-archive/web/idnet/current/msg00133.html
                   Abstract: Detect the application (or attack) from network packets (HTTPS or plain) Collect the history traffic data and identify a service or attack (ex: Skype, Viber, DDoS attack etc.)

         2.4 QoE Management
                   Proposed by: [e-mail]<mailto:[e-mail]>
                   Track: https://www.ietf.org/mail-archive/web/idnet/current/msg00137.html
                   Abstract: Collect low-level metrics (SNR, latency, jitter, losses, etc) and measure QoE. Then use ML to understand what is the relation between satisfactory QoE and the low-level metrics. As an example learn that when delay>N then QoE is degraded, but when M<delay<N then QoE is satisfactory for the customers (please note that QoE cannot be measured directly over your network). This is useful to understand how the network must be operated to provide satisfactory QoE.

         2.5 (Encrypted) Traffic Classification
                   Proposed by: [e-mail]<mailto:[e-mail]>; [e-mail]<mailto:[e-mail]>
                   Track: [Jerome] https://www.ietf.org/mail-archive/web/idnet/current/msg00141.html ; [Min-Suk Kim] https://www.ietf.org/mail-archive/web/idnet/current/msg00153.html
                   Abstract:
                            [Jerome] collect flow-level traffic metrics such as protocol information but also meta metrics such as distribution of packet sizes, inter-arrival times... Then use such information to label the traffic with the underlying application assuming that the granularity of classification may vary (type of application, exact application name, version...)
                            [Min-Suk Kim] continuously collect packet data, then applying learning process for traffic classification with generating application using deep learning models such as CNN (convolutional neural network) and RNN (recurrent neural network). Data-set to apply into the models are generated by processing with features of information from flow in packet data.

         2.6 TBD

3. Data Focus
    3.1 Data attribute
    3.2 Data format
    3.3 TBD

4. Support Technologies
    4.1 Benchmarking Framework
                   Proposed by: [e-mail]<mailto:[e-mail]>
                   Track: https://www.ietf.org/mail-archive/web/idnet/current/msg00146.html
                   Abstract: A proper benchmarking framework comprises a set of reference procedures, methods, and models that can (or better *must*) be followed to assess the quality of an AI mechanism proposed to be applied to the network management/control area. Moreover, and much more specific to the IDNET topics, is the inclusion, dependency, or just the general relation of a standard format enforced to the data that is used (input) and produced (output) by the framework, so a kind of "data market" can arise without requiring to transform the data. The initial scope of input/output data would be the datasets, but also the new knowledge items that are stated as a result of applying the benchmarking procedures defined by the framework, which can be collected together to build a database of benchmark results, or just contrasted with other existing entries in the database to know the position of the solution just evaluated. This increases the usefulness of IDNET.

    4.2 TBD