Published January 16, 2017
| Version v1
Conference paper
Open
A SDN-based Flexible System for On-the-Fly Monitoring and Treatment of Security Events
Description
The Software Defined Networking (SDN) paradigm decouples control and data planes, offering high programmability and a global view of the network. However, it is a challenge not only provide security in these next generation networks as well as allow that network attacks could be subjected to an incident and forensic treatment procedure. This paper proposes the implementation of flexible mechanisms of monitoring and treatment of security events categorized per type of attack and associated with whitelist and blacklist resources by means of the SDN controller programmability. The resources to perform intrusion and attack analysis are validated by means of a real SDN/OpenFlow testbed.
Files
ADVANCE_2017 Final.pdf
Files
(421.9 kB)
| Name | Size | Download all |
|---|---|---|
|
md5:76cee8f9b31302b5a86ec24d8f732896
|
421.9 kB | Preview Download |
Additional details
References
- Anwer M. Bilal et al. Switchblade: A Platform for Rapid Deployment of Network Protocols on Programmable Hardware, ACM SIGCOMM Computer Communications Review, V. 40, No 4, pp 183-194, 2010.
- McKeown, N. et al. OpenFlow: Enabling Innovation in Campus Networks, SIGCOMM Computer Communications Review, V. 38, No 2, pp 69–74, 2008.
- Kreutz, Diego; Rothenberg, Christian; Azodolmonlky, Siamak; Ramos, F. et al. Software-Defined Networking: A Comprehensive Survey, IEEE Proceedings, V. 103, No 1, pp. 14-76, 2015.
- Campos, Maxli; Martins, Joberto. A Security Architecture Proposal for Detection and Response to Threats in SDN Networks, IEEE Andean Council International Conference - ANDESCON, 2016.
- Bobba, Rakesh et al. Networking Software-Defined (SDN). Available in: <osetoreletrico.com.br/web/a-revista/edicoes/1786-redes-definidas-por-software-sdn.html>. October 2015.
- Lopes, Martin A et al. An Elastic Intrusion Detection System for Software Networks, Annals of Telecommunications, pp 1, 2016.
- Jankowksi, Damian; Amanowics, Marek. Intrusion Detection in Software Defined Networks with Self-Organized Maps Journal of Telecommunications and Information Technology, 2015.
- Xing, T. et al. Snort-Flow: A OpenFlow-based Intrusion Prevention System in Cloud Environment, Research and Educational Experiment Workshop - GREE, pp 89-92, 2013.
- Abelem, A.; Stanton, Michael; Machado, Iara; Martins, Joberto; et al. FIT@BR - A Future Internet Testbed in Brazil. In: APAN (Asia Pacific Advanced Network) Network Research Workshop, V. 1, pp. 78-87, 2013.
- RYU, P.T. Ryu SDN Framework using OpenFlow 1.3. 2014.Available in: http: //osrg.github.io/ryu- book/en/ Ryubook.pdf.
- Consortium, O. Pantou: OpenFlow 1.0 for OpenWRT. 2012. Available in: <http://z6.co.uk/openflow>.
- CPQD. OpenFlow 1.3 Software Switch. November 2012. Available in: <https://github.com/CPqD/ofsoftswitch13>.
- Pigrelay. <http://github.com/John-Lin/pigrelay/blob/master/pigrelay.py