Real-time security services for SDN-based datacenters

2017 13th International Conference on Network and Service Management, CNSM 2017

Volumn 2018-January, Issue , 2017, Pages 1-9

  Varga, Pál ^b   Kathareios, Georgios ^a   Máté, Ákos ^a   Clauberg, Rolf ^a   Anghel, Andreea ^a   Orosz, Péter ^b   Nagy, Balázs ^c   Tóthfalusi, Tamás ^b   Kovács, László ^c   Gusat, Mitch ^a  

^a IBM RESEARCH ZURICH   (Switzerland)

^b BUDAPEST UNIVERSITY OF TECHNOLOGY AND ECONOMICS   (Hungary)

^c Telecommunication Division   (Hungary)

Author keywords

datacenter networking; dDoS; intrusion detection and prevention; online datapath monitoring; SDN; switching

Indexed keywords

ANOMALY DETECTION; DENIAL-OF-SERVICE ATTACK; INDUSTRIAL MANAGEMENT; INTRUSION DETECTION; NETWORK FUNCTION VIRTUALIZATION; SWITCHING;

DATA PATHS; DATACENTER; DDOS; INTRUSION DETECTION AND PREVENTION; NETWORK SECURITY MANAGEMENT; PERFORMANCE AND SCALABILITIES; SECURITY APPLICATION; SECURITY MANAGEMENT SYSTEMS;

NETWORK SECURITY;

EID: 85046692870     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.23919/CNSM.2017.8256030     Document Type: Conference Paper

References (27)

1. Akamai, https://www. akamai. com/us/en/multimedia/documents/ state-of-the-internet/q4-2016-state-of-the-internet-connectivity-report. pdf.
2. Corero, http://info. corero. com/rs/258-JCF-941/images/ corero-q1-2017-ddos-trends-report. pdf.
3. B. Veal and A. Foong, "Performance scalability of a multi-core web server, " in Proceedings of the 3rd ACM/IEEE Symposium on Architecture for networking and communications systems. ACM, 2007, pp. 57-66.
4. J. Rasley, et al., "Planck: Millisecond-scale monitoring and control for commodity networks, " ACM SIGCOMM Computer Communication Review, vol. 44, no. 4, pp. 407-418, 2015.
5. Y. Zhu, et al., "Packet-level telemetry in large datacenter networks, " in ACM SIGCOMM Computer Communication Review, vol. 45, no. 4. ACM, 2015, pp. 479-491.
6. Arista, https://www. arista. com/assets/data/pdf/Datasheets/ 7500RDataSheet. pdf.
7. Cisco, http://www. cisco. com/c/en/us/products/collateral/switches/ nexus-7000-series-switches/data-sheet-c78-728423. html.
8. Corsa, https://www. corsa. com/products/dp2400/.
9. NoviFlow, http://noviflow. com/wp-content/uploads/ NoviSwitch-21100-Datasheet. pdf.
10. Mellanox Technologies, http://www. mellanox. com/related-docs/prod- npu/PB-NP-5. pdf.
11. A. M. Caulfield, et al., "A cloud-scale acceleration architecture, " in Microarchitecture (MICRO), 2016 49th Annual IEEE/ACM International Symposium on. IEEE, 2016, pp. 1-13.
12. A. Putnam, et al., "A reconfigurable fabric for accelerating large-scale datacenter services, " in Computer Architecture (ISCA), 2014 ACM/IEEE 41st International Symposium on. IEEE, 2014, pp. 13-24.
13. S. Byma, et al., "FPGAs in the cloud: Booting virtualized hardware accelerators with OpenStack, " in Field-Programmable Custom Computing Machines (FCCM), 2014 IEEE 22nd Annual International Symposium on. IEEE, 2014, pp. 109-116.
14. N. P. Jouppi, et al., "In-datacenter performance analysis of a tensor processing unit, " arXiv preprint arXiv:1704. 04760, 2017.
15. P. Varga and L. Gulyas, "Traffic analysis methods to support decisions at the Knowledge Plane, " Infocommunications Journal, vol. 65, no. 4, pp. 50-56, 2010.
16. J. Suh, et al., "Opensample: A low-latency, sampling-based measurement platform for commodity SDN, " in Distributed Computing Systems (ICDCS), 2014 IEEE 34th International Conference on. IEEE, 2014, pp. 228-237.
17. M. Kúzniar, et al., "What you need to know about SDN flow tables, " in International Conference on Passive and Active Network Measurement. Springer, 2015, pp. 347-359.
18. A. R. Curtis, et al., "Devoflow: Scaling flow management for highperformance networks, " ACM SIGCOMM Computer Communication Review, vol. 41, no. 4, pp. 254-265, 2011.
19. -, "Mahout: Low-overhead datacenter traffic management using endhost-based elephant detection, " in INFOCOM, 2011 Proceedings IEEE. IEEE, 2011, pp. 1629-1637.
20. P. Varga, et al., "C-GEP: 100 Gbit/s capable, FPGA-based, reconfigurable networking equipment, " in High Performance Switching and Routing (HPSR), 2015 IEEE 16th International Conference on. IEEE, 2015, pp. 1-6.
21. P. Orosz, et al., "C-GEP: Adaptive network management with reconfigurable hardware, " in Integrated Network Management (IM), 2015 IFIP/IEEE International Symposium on. IEEE, 2015, pp. 954-959.
22. J. D. Case, et al., "Simple Network Management Protocol (SNMP), " United States, 1990.
23. P. Phaal, et al., "InMon corporation's sFlow: A method for monitoring traffic in switched and routed networks, " RFC 3176, Tech. Rep., 2001.
24. B. Claise, "Cisco systems NetFlow services export version 9, " Internet Engineering Task Force, Internet Draft, 2004.
25. N. Duffield, et al., "Rule-based anomaly detection on IP flows, " in INFOCOM 2009, IEEE. IEEE, 2009, pp. 424-432.
26. J. Dromard, et al., "Online and scalable unsupervised network anomaly detection method, " IEEE Transactions on Network and Service Management, vol. 14, no. 1, pp. 34-47, 2017.
27. http://www. dpdk. org/.