SnortFlow: A OpenFlow-based intrusion prevention system in cloud environment

Proceedings - 2013 2nd GENI Research and Educational Experiment Workshop, GREE 2013

Volumn , Issue , 2013, Pages 89-92

  Xing, Tianyi ^a   Huang, Dijiang ^a   Xu, Le ^a   Chung, Chun Jen ^a   Khatkar, Pankaj ^a  

^a ARIZONA STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CLOUD ENVIRONMENTS; CLOUD NETWORKINGS; CLOUD SECURITIES; EVALUATION RESULTS; INTRUSION DETECTION SYSTEMS; INTRUSION PREVENTION SYSTEMS; NETWORKING SYSTEMS; SECURE NETWORKING;

INTRUSION DETECTION;

EXPERIMENTS;

EID: 84885205587     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/GREE.2013.25     Document Type: Conference Paper

References (17)

1. C. C. S. Alliance, "Top threats to cloud computing v1. 0," in White Paper, 2010.
2. "SourceFire Inc. " [Online]. Available: http://www. snort. org
3. C.-J. Chung, P. Khatkar, T. Xing, J. Lee, and D. Huang, "Nice: Network intrusion detection and countermeasure selection in virtual network systems," in IEEE Transactions on Dependable and Secure Computing (TDSC), Special Issue on Cloud Computing Assessment, 2013.
4. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner, "Openflow: Enabling innovation in campus networks," in ACM SIGCOMM Computer Communication Review, April 2008.
5. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neugebauer, I. Pratt, and A. Warfieldh, "Xen and the art of virtualization," in Proceedings of the nineteenth ACM symposium on Operating systems principles (SOSP), 2003.
6. Open vSwitch, http://openvswitch. org/.
7. N. Gude, T. Koponen, J. Pettit, B. Pfaff, M. Casado, N. McKeown, and S. Shenkes, "Nox: Towards an operating system for networks," in ACM SIGCOMM Computer Communication Review, July 2008.
8. A. Alhomoud, R. Munir, J. P. Disso, I. Awan, and A. Al-Dhelaan, "Performance evaluation study of intrusion detection systems," in The 2nd International Conference on Ambient System, Networks and Technologies, 2011.
9. A. Papadogiannakis, M. Polychronakis, and E. O. Markatos, "Improving the accuracy of network intrusion detection system under load using selective packet discarding," in EUROSEC, 2010.
10. L. Tan and T. Sherwood, "A high throughput string matching architecture for intrusion detection and prevention," in the 32nd Annual International Symposium on Computer Architecture (ISCA), 2005.
11. B. Koldehofe, F. Durr, M. A. Tariq, and K. Rothermel, "The power of software-defined networking: Line-rate content-based routing using openflow," in MW4NG, 2011.
12. R. Kappor, G. Porter, M. Tewari, G. M. Voelker, and A. Vahdat, "Chronos: Predictable low latency for data center applications," in SOCC, 2012.
13. M. Suchara, D. Xu, R. Doverspike, D. Johnson, and J. Rexford, "Network architecture for joint failure recovery and traffic engineering," in SIGMETRICS, 2011.
14. M. R. Nascimento, C. E. Rothenberg, M. R. Salvador, and M. F. Magalhaes, "Quagflow: Partnering quagga with openflow," in SIGCOMM Poster, 2010.
15. J. H. Jafarian, E. AI-Shaer, and Q. Duan, "Openflow random host mutation: Transparent moving target defense using software defined networking," in HotSDN, 2012.
16. J. R. Ballard, I. Rae, and A. Akella, "Extensible and Scalable Network Monitoring Using OpenSAFE," in INM/WREN, 2010.
17. Stanford University. [Online]. Available: http://netfpga. org/