Fast Inverse Model Transformation: Algebraic Framework for Fast Data Plane Verification

2024-01-24

IEEE Transactions on Dependable and Secure Computing

AI Summary

Centralized data plane verification (DPV) systems lack formal modeling and analytical foundations, hindering rigorous correctness guarantees. Method: We propose FIMT—the first algebraic framework for DPV—characterizing the intrinsic algebraic structure of model updates. It introduces inverse model transformation algebra to enable systematic algebraic verification of DPV correctness and directly informs the design of NeoFlash, a compiler-optimized DPV system integrating algebraic modeling, formal verification, incremental rule update analysis, and compiler-level optimizations. Contribution/Results: Experiments on multiple real-world network datasets demonstrate that NeoFlash significantly outperforms state-of-the-art centralized DPV systems, achieving sub-microsecond verification latency. The framework uncovers critical acceleration paths and verifiable optimization principles, thereby resolving the long-standing theoretical modeling gap in DPV research.

Technology Category

• Search and Optimization: Distributed Search
• Data Mining & Knowledge Management: Representing, Reasoning, and Using Provenance, Trust
• Planning, Routing, and Scheduling: Model-Based Reasoning

Application Category

• Systems and Infrastructure for Web, Mobile and WoT: Experiences and lessons learnt from Web-based algorithms and system deployments
• Graph Algorithms and Modeling for the Web: Efficient manipulation of static and dynamic Web-related graphs
• Responsible Web: Human-perceived consequences of algorithmic deployment on the web

Abstract

Data plane verification (DPV) analyzes routing tables and detects routing abnormalities and policy violations during network operation and planning. Thus, it has become an important tool to harden the networking infrastructure and the computing systems building on top. Substantial advancements have been made in the last decade and state-of-the-art DPV systems can achieve sub-us verification for an update of a single forwarding rule. In this paper, we introduce fast inverse model transformation (FIMT), the first theoretical framework to systematically model and analyze centralized DPV systems. FIMT reveals the algebraic structure in the model update process, a key step in fast DPV systems. Thus, it can systematically analyze the correctness of several DPV systems, using algebraic properties. The theory also guides the design and implementation of NeoFlash, a refactored version of Flash with new optimization techniques. Evaluations show that NeoFlash outperforms existing state-of-the-art centralized DPV systems in various datasets and reveal insights to key techniques towards fast DPV.

Problem

• Systematically model and analyze centralized DPV systems
• Analyze correctness of DPV systems using algebraic properties
• Design and implement optimized fast DPV systems

Innovation

• Fast Inverse Model Transformation (FIMT) framework
• Algebraic structure for model update analysis
• NeoFlash with optimized DPV techniques