A SDN-based Flexible System for On-the-Fly Monitoring and Treatment of Security Events

descriptionPublicationkeyboard_double_arrow_right Article , Conference object , Preprint , Other literature type 01 Jan 2017Embargo end date: 01 Jun 2018Publisher:ZenodoJournal:CoRR, volume abs/1806.03156

Authors: Maxli Campos; Joberto S. B. Martins;

doi: 10.48550/arxiv.1806.03156 , 10.5281/zenodo.1291094 , 10.5281/zenodo.1291095

arXiv: 1806.03156

A SDN-based Flexible System for On-the-Fly Monitoring and Treatment of Security Events

- Summary
- Subjects
- Metrics

Abstract

The Software Defined Networking (SDN) paradigm decouples control and data planes, offering high programmability and a global view of the network. However, it is a challenge not only provide security in these next generation networks as well as allow that network attacks could be subjected to an incident and forensic treatment procedure. This paper proposes the implementation of flexible mechanisms of monitoring and treatment of security events categorized per type of attack and associated with whitelist and blacklist resources by means of the SDN controller programmability. The resources to perform intrusion and attack analysis are validated by means of a real SDN/OpenFlow testbed.

https://lrsm.ibisc.univ-evry.fr/Advance2017/

Related Organizations

Universidade Salvador
Brazil

Keywords

[INFO.INFO-AI] Computer Science [cs]/Artificial Intelligence [cs.AI], Networking and Internet Architecture (cs.NI), FOS: Computer and information sciences, Computer Science - Cryptography and Security, [INFO.INFO-NI] Computer Science [cs]/Networking and Internet Architecture [cs.NI], Cyber Security, Security Monitoring, Incident Response, Security Attacks, Intrusion Detection Systems, IDS, Computer Science - Networking and Internet Architecture, SDN, OpenFlow, Security Architecture, [INFO.INFO-ET] Computer Science [cs]/Emerging Technologies [cs.ET], Security, [INFO.INFO-MO] Computer Science [cs]/Modeling and Simulation, Threats, Cryptography and Security (cs.CR)

Impact byBIP!

	selected citations These citations are derived from selected sources. This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).	0
	popularity This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.	Average
	influence This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).	Average
	impulse This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.	Average