Detection as a service: An SDN application

International Conference on Advanced Communication Technology, ICACT

Volumn , Issue , 2017, Pages 285-290

  Monshizadeh, Mehrnoosh ^a,b   Khatri, Vikramajeet ^a   Kantola, Raimo ^b  

^a LUCENT TECHNOLOGIES   (United States)

^b AALTO UNIVERSITY   (Finland)

Author keywords

Anomaly detection; Cloud; Controller; DaaS; IDS; OpenFlow; SDN; Security

Indexed keywords

CLOUDS; COMPUTER CRIME; CONTROLLERS; DENIAL-OF-SERVICE ATTACK; DISTRIBUTED COMPUTER SYSTEMS; FLOW CONTROL; GATEWAYS (COMPUTER NETWORKS); INTRUSION DETECTION; MERCURY (METAL); MOBILE SECURITY; MOBILE TELECOMMUNICATION SYSTEMS; MONITORING; NETWORK ARCHITECTURE; NETWORK FUNCTION VIRTUALIZATION; SECURITY OF DATA; SWITCHING SYSTEMS; UNINTERRUPTIBLE POWER SYSTEMS; WIRELESS NETWORKS;

ANOMALY DETECTION; CLOUD COMPUTING ENVIRONMENTS; DAAS; INTRUSION DETECTION SYSTEMS; INTRUSION PREVENTION SYSTEMS; OPENFLOW; SECURITY; SOFTWARE DEFINED NETWORKING (SDN);

NETWORK SECURITY;

EID: 85018495153     PISSN: 17389445     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.23919/ICACT.2017.7890099     Document Type: Conference Paper

References (24)

1. M. Monshizadeh, V. Khatri and A. Gurtov, "NFV Security Considerations for Cloud-Based Mobile Virtual Network Operators-v06", The 24th International Conference on Software, Telecommunications and Computer Networks (SoftCOM 2016), Split, 2016.
2. Open Networking Foundation (ONF), "Threat Analysis for the SDN Architecture," Technical Report 530, v1.0, Jul. 2016.
3. Anthony Lim, "Security Risks in SDN and Other New Software Issues," RSA Conference, Jul. 2015.
4. M. Monshizadeh, Z. Yan, L. Hippeläinen and V. Khatri, "Cloudification and security implications of TaaS," Computer Networks and Information Security (WSCNIS), 2015 World Symposium on, Hammamet, 2015, pp. 1-8.
5. K. Scarfone and P. Mell, "Guide to Intrusion Detection and Prevention Systems," Technical Report NIST SP 800-94, National Institute of Standards and Technology, 2007.
6. H. Han, L. Yan, Z. Li and J. Zhang, "Network security defense system based on software-defined network and working method of network security defense system," Patent CN104539625, Apr. 22, 2015.
7. C. Luo, "Network security traffic platform based on software definition," Patent CN104753951, Jul. 1, 2015.
8. J. Y. Jo, J. U. Kong and K. M. Lee, "System and method for preventing network intrusion," Patent KR101553264, Sep. 15, 2015.
9. N. K. P. Puttaswamy, F. Hao and T. V. Lakshman, "Securing software defined networks via flow deflection," Patent CN104685850, Jun. 23, 2015.
10. W. Eddy, "TCP SYN Flooding Attacks and Common Mitigations," RFC 4987, IETF, Aug 2007.
11. M. Liyanage, A. B. Abro, M. Ylianttila and A. Gurtov, "Opportunities and Challenges of Software-Defined Mobile Networks in Network Security," in IEEE Security & Privacy, vol. 14, no. 4, pp. 34-44, July-Aug. 2016.
12. Open Networking Foundation (ONF). OpenFlow Switch Specification Version 1.5.1, Mar 2015. https://www.opennetworking.org/images/stories/downloads/sdnresources/onf-specifications/openflow/openflow-switch-v1.5.1.pdf
13. P. Marques, N. Sheth, R. Raszuk, B. Greene, J. Mauch and D. McPherson, "Dissemination of Flow Specification Rules," RFC 5575, IETF, Aug 2009.
14. J. Haas, Ed., "Clarification of the Flowspec Redirect Extended Community," RFC 7674, IETF, Oct 2015.
15. L. Serodio, "Traffic Diversion Techniques for DDoS Mitigation using BGP Flowspec," May 2013. https://www.nanog.org/sites/default/files/wed.general.trafficdiversion.s erodio.10.pdf
16. A. Bremler-Barr, S. T. David, D. Hay and Y. Koral, "Decompressionfree inspection: DPI for shared dictionary compression over HTTP," INFOCOM, 2012 Proceedings IEEE, Orlando, FL, 2012, pp. 1987-1995.
17. Tor Project: Overview https://www.torproject.org/about/overview.html.en
18. Mark O. Riedl, Andrew Stern, Don Dini, and Jason Alderman, "Dynamic Experience Management in Virtual Worlds for Entertainment, Education, and Training," International Transactions on Systems Science and Applications, Special Issue on Agent Based Systems for Human Learning, vol. 3(1), 2008.
19. John Mattsson and Mats Näslund, "Detection and Mitigation of HTTPS Man-in-the-Middles and Impersonators," W3C Workshop on Authentication, Hardware Tokens and Beyond, Sep. 2014.
20. Jeff Jarmoc, "SSL Interception Proxies and Transitive Trust," Blackhat Europe, Mar. 2012.
21. J. Michael Butler, "Finding Hidden Threats by Decrypting SSL," SANS Analyst Whitepaper, Nov 2013.
22. A. Yamada, Y. Miyake, K. Takemori, A. Studer and A. Perrig, "Intrusion Detection for Encrypted Web Accesses," Advanced Information Networking and Applications Workshops, 2007, AINAW '07. 21st International Conference on, Niagara Falls, Ont., 2007, pp. 569-576.
23. John W. Pirc, "SSL Performance Problems: Significant SSL Performance Loss Leaves Much Room for Improvement," Analyst Brief, NSS Labs, Jun 2013.
24. M. Monshizadeh and Z. Yan, "Security Related Data Mining," Computer and Information Technology (CIT), 2014 IEEE International Conference on, Xi'an, 2014, pp. 775-782.