OrchSec: An orchestrator-based architecture for enhancing network-security using network monitoring and SDN control functions

IEEE/IFIP NOMS 2014 - IEEE/IFIP Network Operations and Management Symposium: Management in a Software Defined World

Volumn , Issue , 2014, Pages

  Zaalouk, Adel ^a   Khondoker, Rahamatullah ^b   Marx, Ronald ^b   Bayarou, Kpatcha ^b  

^a RWTH AACHEN UNIVERSITY   (Germany)

^b FRAUNHOFER INSTITUTE FOR SECURE INFORMATION TECHNOLOGY SIT   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

INTERNET; INTERNET PROTOCOLS; NETWORK ARCHITECTURE;

CENTRALIZED CONTROL; CENTRALIZED MANAGEMENT; INFORMATION EXCHANGES; INTERNET ARCHITECTURE; INTERNET INFRASTRUCTURE; PROPOSED ARCHITECTURES; SECURITY APPLICATION; SOFTWARE DEFINED NETWORKING (SDN);

NETWORK SECURITY;

EID: 84904165732     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NOMS.2014.6838409     Document Type: Conference Paper

References (26)

1. S. Zargar, J. Joshi, and D. Tipper, "A survey of defense mechanisms against distributed denial of service (ddos) flooding attacks." IEEE, 2013.
2. G. Kambourakis, T. Moschos, D. Geneiatakis, and S. Gritzalis, "A fair solution to DNS amplification attacks;' in Digital Forensics and Incident Analysis, 2007. WDFIA 2007. Second International Workshop on. IEEE, 2007, pp. 38-47.
3. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner, "OpenFlow: enabling innovation in campus networks," ACM SIGCOMM Computer Communication Review, vol. 38, no. 2, pp. 69-74, 2008.
4. R. Braga, E. Mota, and A. Passito, "Lightweight DDoS flooding attack detection using NOXI Open Flow," in Local Computer Networks (LCN), 2010 IEEE 35th Conference on. IEEE, 2010, pp. 408-415.
5. l. H. Jafarian, E. Al-Shaer, and Q. Duan, "Open flow random host mutation: transparent moving target defense using software defined networking," in Proceedings of the first workshop on Hot topics in software defined networks. ACM, 2012, pp. 127-132.
6. S. A. Mehdi, J. Khalid, and S. A. Khayam, "Revisiting traffic anomaly detection using software defined networking," in Recent Advances in Intrusion Detection. Springer, 2011, pp. 161-180.
7. S. Shin, P. Porras, V. Yegneswaran, M. Fong, G. Gu, and M. Tyson, "FRESCO: Modular composable security services for software-defined networks," in Proceedings of Network and Distributed Security Symposium, 2013.
8. S. Shin and G. Gu, "CloudWatcher: Network security monitoring using OpenFlow in dynamic cloud networks (or: How to provide security monitoring as a service in clouds?)," in Network Protocols (ICNP), 2012 20th IEEE International Conference on. IEEE, 2012, pp. 1-6.
9. D. Kreutz, F. Ramos, and P. Verissimo, "Towards secure and dependable software-defined networks," in Proceedings of the second ACM SIGCOMM workshop on Hot topics in software defined networking. ACM, 2013, pp. 55-60.
10. R. Fielding, "Representational state transfer," Architectural Styles and the Design of Netowork-based Software Architecture, pp. 76-85, 2000.
11. R. E. Jurga and M. M. Hulbj, "Technical report packet sampling for network monitoring," 2007.
12. J. Mai, C.-N. Chuah, A. Sridharan, T. Ye, and H. Zang, "Is sampled data sufficient for anomaly detection?" in Proceedings of the 6th ACM SIGCOMM conference on Internet measurement. ACM, 2006, pp. 165-176.
13. R. Kawahara, T. Mori, N. Kamiyama, S. Harada, and S. Asano, "A study on detecting network anomalies using sampled flow statistics," in Applications and the lnternet Workshops, 2007. SA1NT Workshops 2007. International Symposium on. IEEE, 2007, pp. 81-81.
14. A. Zaalouk, "Taking In-Network Security To The Next-Level With Software Defined Networking (SDN)," 2014.
15. P. Peter, "DNS Amplification Attacks," http://blog.sflow.com!20 13/1 O/dns-amplification-attacks.html, 2013, [Online; accessed 01-January-2014].
16. M. Wang, B. Li, and Z. Li, "sflow: Towards resource-efficient and agile service federation in service overlay networks," in Distributed Computing Systems, 2004. Proceedings. 24th International Conference on. IEEE, 2004, pp. 628-635.
17. c. Sun, B. Liu, and L. Shi, "Efficient and low-cost hardware defense against DNS amplification attacks," in Global Telecommunications Conference, 2008. IEEE GLOBECOM 2008. IEEE. IEEE, 2008, pp. 1-5.
18. T. M. Cover and J. A. Thomas, Elements of information theory. John Wiley & Sons, 2012.
19. B. Lantz, B. Heller, and N. McKeown, "A network in a laptop: rapid prototyping for software-defined networks," in Proceedings of the 9th ACM SIGCOMM Workshop on Hot Topics in Networks. ACM, 2010, p. 19.
20. Oracle, "Virtual Box," http://www.virtualbox.org/, [Online; accessed 01-January-2014].
21. BigSwitch, "Floodlight Controller," http://www. projectfloodlight.org/floodlight!, 2013, [Online; accessed 01-January-2014].
22. NoxRepo.org, "About POX," hup://www.noxrepo.org/pox/about-pox/, 2013, [Online; accessed 01-January-2014].
23. P. Biondi, "Scapy, a powerful interactive packet manipulation program," 2010.
24. "Dnslib," https://pypi.python.org/pypi/dnslib, [Online; accessed 01-January-2014].
25. "Most visited websites," "https://ebizmba.com/articles/ most-popularwebsites", [Online; accessed 01-January-2014].
26. A. Lara, A. Kolasani, and B. Ramamurthy, "Network innovation using openflow: A survey," 2013.