Behavioral security threat detection strategies for data center switches and routers

Proceedings - International Conference on Distributed Computing Systems

Volumn 30-June-2014, Issue , 2014, Pages 82-87

  Krishnan, Ram ^a   Krishnaswamy, Dilip ^b   McDysan, Dave ^c  

^a Brocade Communications Systems Inc   (United States)

^b IBM RESEARCH   (United States)

^c Verizon   (United States)

Author keywords

Data Center; Distributed Denial of Service; NFV; SDN; Security; Threat Detection

Indexed keywords

DISTRIBUTED COMPUTER SYSTEMS; NETWORK SECURITY; SECURITY SYSTEMS; THROUGHPUT; TRANSMISSION CONTROL PROTOCOL;

DATA CENTERS; DISTRIBUTED DENIAL OF SERVICE; DISTRIBUTED DENIAL OF SERVICE ATTACK; LARGE SCALE DATA; PERFORMANCE CHALLENGES; SECURITY; SECURITY THREATS; THREAT DETECTION;

DENIAL-OF-SERVICE ATTACK;

EID: 84988359711     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICDCSW.2014.19     Document Type: Conference Paper

References (33)

1. David Holmes, "The DDoS Threat Spectrum-F5 White paper, " 2012.
2. Estan, C. And G. Varghese, "New directions in traffic measurement and accounting, " Proceedings of ACM SIGCOMM, August 2002.
3. Mahalingam, M. et al., "VXLAN: A Framework for Overlaying Virtualized Layer 2 Networks over Layer 3 Networks, " April 2014.
4. Sridharan, M. et al., "Network Virtualization using Generic Routing Encapsulation (NVGRE), " February 2014.
5. "802. 1Q-2011-IEEE Standard for Local and metropolitan area networks-Media Access Control (MAC) Bridges and Virtual Bridged Local Area Networks, " 2011.
6. "802. 1ad-2005-IEEE Standard for Local and Metropolitan Area Networks-Virtual Bridged Local Area Networks-Amendment 4: Provider Bridges, " 2005.
7. Rosen, E. et al., "Multiprotocol Label Switching Architecture, " RFC 3031, January 2001.
8. Krishnan, R. et al., "Flow-state Dependent Packet Selection Techniques, " http://tools. ietf. org/html/draft-krishnan-ipfix-flow-awarepacket-sampling-06, April 2014.
9. Ignasi Paredes-Oliva et al., "Portscan Detection with Sampled NetFlow, " TMA 2009.
10. Mell, P. et al., "The NIST Definition of Cloud Computing, " September 2011.
11. "inMon sFlow-RT, " http://www. inmon. com/products/sFlow-RT. php.
12. "OpenFlow Switch Specification, " https://www. opennetworking. org/images/stories/downloads/sdnresources/ onf-specifications/openflow/openflow-spec-v1. 4. 0. pdf.
13. Atlas, A. et al, "An Architecture for the Interface to the Routing System", February 2014.
14. "Port Scanner, " http://en. wikipedia. org/wiki/Port-scanner.
15. "Typical Ethernet DC Traffic pattern-Slide 4, " http://www. conficnc. org/2012/Renato-keynote. pdf.
16. "Rackspace DDoS Attack, " http://readymadeweb. com/2013/03/27/rackspace-outage-global-ddosattack/
17. Chabchoub, Y. et al., "Adaptive algorithms for identifying large flows in IP traffic", 2009
18. "DDoS Appliance Pricing, " http://www. webhostingtalk. com/showthread. php?t=1225267.
19. "ETSI NFV White Paper, " http://portal. etsi. org/NFV/NFV-White-Paper. pdf.
20. Krishnan, R. et, al, "Mechanisms for Optimizing LAG/ECMP Component Link Utilization in Networks, " http://datatracker. ietf. org/doc/draft-ietf-opsawg-large-flow-loadbalancing, October 2014.
21. Krishnan, R. et al, "Large Flow Use Cases for I2RS PBR and QoS, " http://datatracker. ietf. org/doc/draft-krishnan-i2rs-large-flow-use-case/, October 2014.
22. "SDN Definition, " https://www. opennetworking. org/sdn-resources/sdndefinition.
23. Claise, B. et al., "Specification of the IP Flow Information Export (IPFIX) Protocol for the Exchange of IP Traffic Flow Information, " RFC 7011, September 2013.
24. Zseby, T. et al., "Sampling and Filtering Techniques for IP Packet Selection, " March 2009.
25. Phaal, P. And M. Lavine, "sFlow version 5, " http://www. sflow. org/sflow-version-5. Txt, July 2004.
26. Phaal, P. And A. Ghanwani, "sFlow LAG counters structure, " http://www. sflow. org/sflow-lag. Txt, September 2012.
27. "ETSI NFV Architectural Framework, " http://www. etsi. org/deliver/etsi-gs/NFV/001-099/002/01. 01. 01-60/gs- NFV002v010101p. pdf.
28. Krishnan, R. et al., "OpenDaylight project proposal on Dynamic Flow Management, " https://wiki. opendaylight. org/view/Project-Proposals:Dynamic-Flow- Management.
29. "OpenDaylight, A Linux Foundation Collaborative Project, " http://www. opendaylight. org/.
30. Rekhter, Y. et al., "A Border Gateway Protocol 4 (BGP-4), " RFC 4271, January 2006.
31. Zseby, T. et al., "IP Flow Information Export (IPFIX) Applicability, " RFC 5472, March 2009.
32. Marques, P. et al., "Dissemination of Flow Specification Rules, " RFC 5575, August 2009.
33. Holmes, D., "Mitigating DDoS Attacks with F5 Technology, " F5 Whitepaper, 2013.