FlowMon: Detecting malicious switches in Software-Defined Networks

SafeConfig 2015 - Proceedings of the 2015 Workshop on Automated Decision Making for Active Cyber Defense

Volumn , Issue , 2015, Pages 39-45

  Kamisiński, Andrzej ^a   Fung, Carol ^b  

^a AGH UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Poland)

^b Virginia Commonwealth University   (United States)

Author keywords

Anomaly Detection; Malicious Behavior; Network Security; OpenFlow; SDN; Software Defined Networking

Indexed keywords

CONTROLLERS; DECISION MAKING; NETWORK MANAGEMENT; SIGNAL DETECTION; SOFTWARE DEFINED NETWORKING; TELECOMMUNICATION NETWORKS; TIME SWITCHES;

ANOMALY DETECTION; ANOMALY-DETECTION ALGORITHMS; MALICIOUS BEHAVIOR; NETWORK CONGESTIONS; OPENFLOW; REAL TIME ANALYSIS; ROUTING MECHANISM; SOFTWARE DEFINED NETWORKING (SDN);

NETWORK SECURITY;

EID: 84958634379     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2809826.2809833     Document Type: Conference Paper

References (16)

1. The Open Networking Foundation. https://www.opennetworking.org/about.
2. M. Aminian and F. Aminian. Neural-network based analog-circuit fault diagnosis using wavelet transform as preprocessor. Circuits and Systems II: Analog and Digital Signal Processing, IEEE Transactions on, 47(2):151-156, Feb 2000.
3. S. R. Chowdhury, M. F. Bari, R. Ahmed, and R. Boutaba. PayLess: A Low Cost Network Monitoring Framework for Software Defined Networks. In Network Operations and Management Symposium (NOMS), 2014 IEEE, pages 1-9, May 2014.
4. Cisco. Introduction to Cisco IOS NetFlow, 2012. http://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/ios-netflow/prodwhitepaper0900aecd80406232.pdf (last accessed: July 4, 2015).
5. X. Du, M.-Z. Wang, X. Zhang, and L. Zhu. Traffic-based Malicious Switch Detection in SDN. International Journal of Security and Its Applications, 8(5):119-130, 2014.
6. M. Garcia, A. Bessani, I. Gashi, N. Neves, and R. Obelheiro. Analysis of operating system diversity for intrusion tolerance. Software: Practice and Experience, 44(6):735-770, 2014.
7. R. Isermann. Supervision, fault-detection and fault-diagnosis methods - An introduction. Control Engineering Practice, 5(5):639-652, 1997.
8. R. Isermann. Fault-Diagnosis Systems: An Introduction from Fault Detection to Fault Tolerance. Springer Berlin Heidelberg, 2006.
9. I. Katzela and M. Schwartz. Schemes for fault identification in communication networks. Networking, IEEE/ACM Transactions on, 3(6):753-764, Dec 1995.
10. D. Kreutz, F. M. Ramos, and P. Verissimo. Towards Secure and Dependable Software-defined Networks. In Proceedings of the Second ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking, Hot SDN '13, pages 55-60, New York, NY, USA, 2013. ACM.
11. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner. OpenFlow: Enabling Innovation in Campus Networks. SIGCOMM Comput. Commun. Rev., 38(2):69-74, Mar. 2008.
12. S. Neti, A. Somayaji, and M. E. Locasto. Software Diversity: Security, Entropy and Game Theory. In 7th USENIX Workshop on Hot Topics in Security, Berkeley, CA, 2012. USENIX.
13. S. Shin, V. Yegneswaran, P. Porras, and G. Gu. AVANT-GUARD: Scalable and Vigilant Switch Flow Management in Software-Defined Networks. In Proceedings of the 2013 ACM SIGSAC Conference on Computer & Communications Security, CCS '13, pages 413-424, New York, NY, USA, 2013. ACM.
14. M. Steinder and A. S. Sethi. Probabilistic fault localization in communication systems using belief networks. Networking, IEEE/ACM Transactions on, 12(5):809-822, Oct 2004.
15. The Open Networking Foundation. OpenFlow Switch Specification, 2013. https://www.opennetworking.org/images/stories/downloads/sdn-resources/onf-specifications/openflow/openflow-spec-v1.4.0.pdf (last accessed: July 4, 2015).
16. L. Wei and C. Fung. FlowRanger: A Request Prioritizing Algorithm for Controller DoS Attacks in Software Defined Networks. In IEEE International Conference on Communications (ICC 2015). IEEE, 2015.