LiveSec: Towards effective security management in large-scale production networks

Proceedings - 32nd IEEE International Conference on Distributed Computing Systems Workshops, ICDCSW 2012

Volumn , Issue , 2012, Pages 451-460

  Wang, Kai ^a   Qi, Yaxuan ^a   Yang, Baohua ^a   Xue, Yibo ^a,b   Li, Jun ^a,b  

^a TSINGHUA UNIVERSITY   (China)

^b TSINGHUA NATIONAL LABORATORY FOR INFORMATION SCIENCE AND TECHNOLOGY   (China)

Author keywords

network architecture; network management; OpenFlow; security

Indexed keywords

APPLICATION-AWARE NETWORK; HEAVY NETWORK TRAFFIC; LARGE-SCALE NETWORK; LARGE-SCALE PRODUCTION; LOAD-BALANCING; NETWORK SCALE; OPENFLOW; PRODUCTION NETWORK; SECURITY; SECURITY EVENTS; SECURITY MANAGEMENT; SECURITY PROTECTION; SECURITY SERVICES; SERVICE ELEMENTS; TRAFFIC MONITORING; TSINGHUA UNIVERSITY;

INDUSTRIAL MANAGEMENT; NETWORK ARCHITECTURE; NETWORK MANAGEMENT; TELEPHONE SYSTEMS; VISUALIZATION;

NETWORK SECURITY;

EID: 84866345800     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICDCSW.2012.87     Document Type: Conference Paper

References (19)

1. Amazon, Elastic Compute Cloud. [Online]. Available: http://aws.amazon. com/ec2/
2. D. Maltz, G. Xie, J. Zhan, H. Zhang, G. Hjálmtỳsson, and A. Greenberg, "Routing design in operational networks: A look from the inside," ACM SIGCOMM Computer Communication Review, vol. 34, no. 4, pp. 27-40, 2004.
3. D. Joseph, A. Tavakoli, and I. Stoica, "A policy-aware switching layer for data centers," ACM SIGCOMM Computer Communication Review, vol. 38, no. 4, pp. 51-62, 2008.
4. T. Koponen, M. Casado, N. Gude, J. Stribling, L. Poutievski, M. Zhu, R. Ramanathan, Y. Iwata, H. Inoue, T. Hama, and S. Shenker, "Onix: A distributed control platform for largescale production networks," in Proceedings of OSDI, 2010.
5. A. Greenberg, G. Hjalmtysson, D. Maltz, A. Myers, J. Rexford, G. Xie, H. Yan, J. Zhan, and H. Zhang, "A clean slate 4d approach to network control and management," ACM SIGCOMM Computer Communication Review, vol. 35, no. 5, pp. 41-54, 2005.
6. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner, "Openflow: enabling innovation in campus networks," ACM SIGCOMM Computer Communication Review, vol. 38, no. 2, pp. 69-74, 2008.
7. M. Yu, J. Rexford, M. Freedman, and J. Wang, "Scalable flow-based networking with difane," ACM SIGCOMM Computer Communication Review, vol. 41, no. 4, pp. 351-362, 2010.
8. R. Sherwood, G. Gibb, K. Yap, G. Appenzeller, M. Casado, N. McKeown, and G. Parulkar, "Can the production network be the testbed," in Proceedings of OSDI, 2010.
9. N. Gude, T. Koponen, J. Pettit, B. Pfaff, M. Casado, N. McKeown, and S. Shenker, "Nox: towards an operating system for networks," ACM SIGCOMM Computer Communication Review, vol. 38, no. 3, pp. 105-110, 2008.
10. B. Pfaff, J. Pettit, T. Koponen, K. Amidon, M. Casado, and S. Shenker, "Extending networking into the virtualization layer," in Proceedings of HotNets, 2009.
11. A. Tavakoli, M. Casado, T. Koponen, and S. Shenker, "Applying nox to the datacenter," in Proceedings of HotNets, 2009.
12. R. Mysore, A. Pamboris, N. Farrington, N. Huang, P. Miri, S. Radhakrishnan, V. Subramanya, and A. Vahdat, "Portland: a scalable fault-tolerant layer 2 data center network fabric," ACM SIGCOMM Computer Communication Review, vol. 39, no. 4, pp. 39-50, 2009.
13. A. Greenberg, J. Hamilton, N. Jain, S. Kandula, C. Kim, P. Lahiri, D. Maltz, P. Patel, and S. Sengupta, "Vl2: a scalable and flexible data center network," ACM SIGCOMM Computer Communication Review, vol. 39, no. 4, pp. 51-62, 2009.
14. Y. Qi, F. He, K. Wang, X. Chen, J. Fong, F. Xie, Y. Shao, Y. Gao, Y. Xue, and L. J., "Livesec: Openflow-based security management for production networks," in Proceedings of IEEE INFOCOM (Demo), 2009.
15. Open vSwitch. [Online]. Available: http://openvswitch.org/
16. OpenWrt. [Online]. Available: http://openwrt.org/
17. Pantou. [Online]. Available: http://www.openflow.org/wk/index.php/Pantou : OpenFlow 1.0 for OpenWRT
18. Snort. [Online]. Available: http://www.snort.org/
19. Application Layer Packet Classifier for Linux. [Online]. Available: http://l7-filter.sourceforge.net/