Cognition: A tool for reinforcing security in software defined networks

Advances in Intelligent Systems and Computing

Volumn 288, Issue , 2014, Pages 61-78

  Tantar, Emilia ^a   Palattella, Maria Rita ^a   Avanesov, Tigran ^a   Kantor, Miroslaw ^a   Engel, Thomas ^a  

^a UNIVERSITY OF LUXEMBOURG   (Luxembourg)

Author keywords

Cognitive mechanisms; SDN; Security

Indexed keywords

MANAGERS; MOBILE SECURITY;

AUTONOMIC MANAGERS; COGNITIVE FUNCTIONS; COGNITIVE MECHANISMS; SDN; SECURITY; SECURITY MONITORING; SOFTWARE-DEFINED NETWORKINGS; SOFTWARE-DEFINED NETWORKS;

NETWORK SECURITY;

EID: 84927513249     PISSN: 21945357     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-319-07494-8_6     Document Type: Article

References (65)

1. Agoulmine, N., Balasubramaniam, S., Botvitch, D., Strassner, J., Lehtihet, E., Donnelly, W.: Challenges for autonomic network management. In: Proc. of 1st IEEE International Workshop on Modeling Autonomic Communications Environments, MACE 2006 (2006).
2. Avramopoulos, I.C., Rexford, J., Schapire, R.E.: From optimization to regret minimization and back again. In: Fox, A., Basu, S. (eds.) SysML. USENIX Association (2008).
3. Ballani, H., Francis, P.: CONMan: A step towards network manageability. SIGCOMM Comput. Commun. Rev. 37(4), 205–216 (2007).
4. Ballard, J.R., Rae, I., Akella, A.: Extensible and scalable network monitoring using Open-SAFE. In: Proc. of the 2010 Internet NetworkManagement Conf. on Research on Enterprise Networking, INM/WREN 2010, p. 8. USENIX Association, Berkeley (2010).
5. Benton, K., Camp, L.J., Small, C.: Openflow vulnerability assessment. In: Proceedings of the Second ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking, HotSDN 2013, pp. 151–152. ACM, New York (2013).
6. Bouet, M., Leguay, J., Conan, V.: Cost-based placement of virtualized Deep Packet Inspection functions in SDN. In: Military Comm. Conf., IEEE MILCOM 2013, pp. 992–997 (November 2013).
7. Boyd, J.: Destruction and Creation. Operational level of war, U.S. Army Command and General Staff College. Center for Army Tactics (1987).
8. Braga, R., Mota, E., Passito, A.: Lightweight DDoS flooding attack detection using NOX/OpenFlow. In: 2010 IEEE 35th Conference on Local Computer Networks (LCN), pp. 408–415 (October 2010).
9. Cahon, S., Melab, N., Talbi, E.G.: Paradiseo: A framework for the reusable design of parallel and distributed metaheuristics. Journal of Heuristics 10(3), 357–380 (2004).
10. Carvalho, L., Rodrigues, J., Barbon, S., Lemes Proenca, M.: Using ant colony optimization metaheuristic and dynamic time warping for anomaly detection. In: 2013 21st International Conference on Software, Telecommunications and Computer Networks (SoftCOM), pp. 1–5 (September 2013).
11. Casas, P., Mazel, J., Owezarski, P.: Steps towards autonomous network security: Unsupervised detection of network attacks. In: NTMS, pp. 1–5. IEEE (2011).
12. Casas, P., Mazel, J., Owezarski, P.: Unsupervised network intrusion detection systems: Detecting the unknown without knowledge. Comp. Comm. 35(7), 772–783 (2012).
13. Clark, D.D., Partridge, C., Ramming, J.C., Wroclawski, J.: A knowledge plane for the Internet. In: Feldmann, A., Zitterbart, M., Crowcroft, J., Wetherall, D. (eds.) SIGCOMM, pp. 3–10. ACM (2003).
14. Dierks, T., Rescorla, E.: The Transport Layer Security (TLS) Protocol Version 1.2. RFC 5246 (Proposed Standard) (August 2008).
15. Erickson, D.: The beacon OpenFlow controller. In: Proc. of the 2nd ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking, HotSDN2013, pp. 13–18. ACM, New York (2013).
16. ETSI: Generic autonomic network architecture (an architectural reference model for autonomic networking, cognitive networking and self-management). ETSI GS AFI 002 V1.1.1 (April 2013).
17. Fayazbakhsh, S.K., Sekar, V., Yu, M., Mogul, J.C.: FlowTags: Enforcing network-wide policies in the presence of dynamic middlebox actions. In: Proc. of the 2nd ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking, HotSDN2013, pp. 19–24. ACM, New York (2013).
18. Floodlight project, http://www.projectfloodlight.org.
19. Gat, E.: On three-layer architectures. In: Kortenkamp, D., Bonnasso, P.R., Murphy, R. (eds.) Artificial Intelligence and Mobile Robots, pp. 195–210 (1998).
20. Geni design principles. Computer 39(9), 102–105 (2006).
21. Greenberg, A., Hjalmtysson, G., Maltz, D.A., Myers, A., Rexford, J., Xie, G., Yan, H., Zhan, J., Zhang, H.: A clean slate 4D approach to network control and management. SIGCOMM Comput. Commun. Rev. 35(5), 41–54 (2005).
22. IST FP6 Haggle project, http://www.haggleproject.org.
23. Hall, M., Frank, E., Holmes, G., Pfahringer, B., Reutemann, P., Witten, I.H.: The weka data mining software: an update. SIGKDD Explor. Newsl. 11(1), 10–18 (2009).
24. Hand, R., Ton, M., Keller, E.: Active security. In: Proc. of the 12th ACM Workshop on Hot Topics in Software Defined Networking, HotNets-XII, pp. 17:1–17:7. ACM, New York (2013).
25. IBM: An architectural blueprint for autonomic computing. ONF White paper (2006).
26. IEEE SDN/NFV subcommittee, http://cms.comsoc.org/eprise/main/SiteGen/TC SDN NFV/Content/Home.html.
27. Jain, S., Kumar, A., Mandal, S., Ong, J., Poutievski, L., Singh, A., Venkata, S., Wanderer, J., Zhou, J., Zhu, M., Zolla, J., Hölzle, U., Stuart, S., Vahdat, A.: B4: Experience with a globally-deployed software defined WAN. SIGCOMM Comput. Commun. Rev. 43(4), 3–14 (2013).
28. Jin, R., Wang, B.:Malware detection for mobile devices using software-defined networking. In: Proc. of the 2013 2nd GENI Research and Educational Experiment Workshop, GREE 2013, pp. 81–88. IEEE Computer Society, Washington, DC (2013).
29. Jin, X., Guo, Y., Sarkar, S., Ray, A., Edwards, R.: Anomaly detection in nuclear power plants via symbolic dynamic filtering. IEEE Transactions on Nuclear Science 58(1), 277–288 (2011).
30. Katz, D., Ward, D.: Bidirectional Forwarding Detection. IETF Internet-Draft, draft-ietf-bfdbase-11.txt (January 2010).
31. Khurshid, A., Zhou, W., Caesar, M., Godfrey, P.: VeriFlow: Verifying network-wide invariants in real time. ACM SIGCOMM Comp. Commun. Rev. 42(4), 467–472 (2012).
32. Kim, S., Kang, J.M., Seo, S.S., Hong, J.W.K.: A cognitive model-based approach for autonomic fault management in OpenFlow networks. Int. Journal of Network Management 23(6), 383–401 (2013).
33. Kreutz, D., Ramos, F.M., Verissimo, P.: Towards secure and dependable software-defined networks. In: Proc. of the 2nd ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking, HotSDN 2013, pp. 55–60. ACM, New York (2013).
34. Louca, A., Mauthe, A., Hutchison, D.: Autonomic network management for Next Generation Networks. In: Proc. of 11th Annual PostGraduate Symposium on the Convergence of Telecommunications, Networking and Broadcasting, PGNet 2010, pp. 1–6 (2010).
35. Luke, S., Cioffi-Revilla, C., Panait, L., Sullivan, K., Balan, G.: Mason: A multiagent simulation environment. Simulation 81(7), 517–527 (2005).
36. Manzalini, A., Minerva, R., Moiso, C.: Bio-inspired autonomic structures: a middleware for telecommunications ecosystems. In: Vasilakos, A.V., Parashar, M., Karnouskos, S., Pedrycz, W. (eds.) Autonomic Communication, pp. 3–30. Springer US (2009).
37. Mazel, J., Casas, P., Labit, Y., Owezarski, P.: Sub-space clustering, inter-clustering results association & anomaly correlation for unsupervised network anomaly detection. In: CNSM, pp. 1–8. IEEE (2011).
38. McKeown, N., Anderson, T., Balakrishnan, H., Parulkar, G., Peterson, L., Rexford, J., Shenker, S., Turner, J.: OpenFlow: enabling innovation in campus networks. Proc. of the ACM SIGCOMM 2008 Conference. 38(2), 69–74 (2008).
39. Miller, B., Arcolano, N., Bliss, N.: Efficient anomaly detection in dynamic, attributed graphs: Emerging phenomena and big data. In: 2013 IEEE International Conference on Intelligence and Security Informatics (ISI), pp. 179–184 (June 2013).
40. Mitola, J.: Cognitive Radio Architecture. In: Cognitive Networks-Towards Self-Aware Networks. Wiley London, London (2007).
41. Nadeau, T.D., Gray, K.: SDN: Software Defined Networks, 1st edn. O’Reilly Media (September 2013).
42. Nayak, A.K., Reimers, A., Feamster, N., Clark, R.: Resonance: Dynamic access control for enterprise networks. In: Proc. of the 1st ACM Workshop on Research on Enterprise Networking, WREN 2009, pp. 11–18. ACM, New York (2009).
43. Open Networking Foundation: Migration use cases and methods. ONF White paper (December 2013).
44. Open Networking Foundation: SDN architecture overview. ONF White paper (December 2013).
45. OpenDaylight project, http://www.opendaylight.org.
46. OpenFlow Switch Specification (version 1.1.0), https://www.opennetworking.org/images/stories/downloads/sdn-resources/onf-specifications/openflow/openflow-spec-v1.1.0.pdf (February 2011).
47. OpenFlow Switch Specification (version 1.4.0), https://www.opennetworking.org/images/stories/downloads/sdn-resources/onf-specifications/openflow/openflow-spec-v1.4.0.pdf (October 2013).
48. Porras, P., Shin, S., Yegneswaran, V., Fong, M., Tyson, M., Gu, G.: A security enforcement kernel for OpenFlow networks. In: Proc. of the 1st Workshop on Hot Topics in Software Defined Networking, pp. 121–126. ACM (2012).
49. POX controller, http://www.noxrepo.org/pox/about-pox.
50. Qazi, Z.A., Tu, C.C., Chiang, L., Miao, R., Sekar, V., Yu, M.: SIMPLE-fying middlebox policy enforcement using SDN. SIGCOMM Comput. Comm. Rev. 43(4), 27–38 (2013).
51. Radware: Defense4All, User Guide, https://wiki.opendaylight.org/view/Defense4All:User_Guide (2014).
52. Roesch, M.: Snort-lightweight intrusion detection for networks. In: Proc. of the 13th USENIX Conference on System Administration, LISA 1999, pp. 229–238. USENIX Association, Berkeley (1999).
53. Saint-Andre, P.: Extensible Messaging and Presence Protocol (XMPP): Core, RFC 6120. The Internet Engineering Task Force (March 2011).
54. Scott-Hayward, S., O’Callaghan, G., Sezer, S.: SDN security: A survey. In: Proc. of IEEE SDN Conf. for Future Networks and Services (SDN4FNS), pp. 1–7 (November 2013).
55. Sezer, S., Scott-Hayward, S., Chouhan, P., Fraser, B., Lake, D., Finnegan, J., Viljoen, N., Miller, M., Rao, N.: Are we ready for SDN? Implementation challenges for softwaredefined networks. IEEE Comm. Magazine 51(7), 36–43 (2013).
56. Shin, S., Gu, G.: CloudWatcher: Network security monitoring using OpenFlow in dynamic cloud networks (or: How to provide security monitoring as a service in clouds?). In: Proc. Of the 2012 20th IEEE Int. Conf. on Network Protocols, ICNP 2012, pp. 1–6. IEEE Computer Society, Washington, DC (2012).
57. Shin, S., Porras, P.A., Yegneswaran, V., Fong, M.W., Gu, G., Tyson, M.: FRESCO: Modular composable security services for software-defined networks. In: 20th Annual Network and Distributed System Security Symposium (NDSS 2013). The Internet Society (February 2013).
58. Srisuresh, P., Holdrege, M.: IP Network Address Translator (NAT) Terminology and Considerations. RFC 2663 (Informational) (August 1999), http://www.ietf.org/rfc/rfc2663.txt.
59. Staniford, S., Hoagland, J.A., McAlerney, J.M.: Practical automated detection of stealthy portscans. J. Comput. Secur. 10(1-2), 105–136 (2002).
60. Strassner, J., Agoulmine, N., Lehtihet, E.: FOCALE: A Novel Autonomic Networking Architecture. Int. Trans. on Systems Science and Applications 3(1), 64–79 (2007).
61. Tantar, E., Tantar, A.A., Bouvry, P.: On dynamic multi-objective optimization, classification and performance measures. In: IEEE Congress on Evolutionary Computation, pp. 2759–2766. IEEE (2011).
62. Vasseur, J.P., Le Roux, J.L.: Path Computation Ement Communication Protocol, RFC 5440. The Internet Engineering Task Force (March 2009).
63. White, D.: Software review: the ecj toolkit. Genetic Programming and Evolvable Machines 13(1), 65–67 (2012).
64. Xie, H., Tsou, T., Lopez, D.R., Yin, H.: Use Cases for ALTO with Software Defined Networks. IETF Internet-Draft, draft-xie-alto-sdn-extension-use-cases-01 (January 2013).
65. Yang, L., Dantu, R., Anderson, T.A., Gopal, R.: Forwarding and Control Element Separation (ForCES) Framework, RFC 3746. The Internet Engineering Task Force (April 2004).