A Sdn-Based Flexible System For On-The-Fly Monitoring And Treatment Of Security Events

Martins, Joberto S B

doi:10.5281/zenodo.1291094

Cited by 1 publication

(1 citation statement)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Badotra et al [5] offered SNORT-based for early DDoS detection using Opendaylight and open networking OS. Campos et al [6] deployed On-the-Fly monitoring and treatment of security events using real SDN/OpenFlow Switch. Authors Po-Wen Chi et al [7] deployed AMI as a threat detection mechanism based on the SDN network using IDS integration.…”

Section: Related Workmentioning

confidence: 99%

SDN-Based Network Intrusion Detection as DDoS defense system for Virtualization Environment

Usman

Winarno

Sudarsono

2021

EMITTER Int'l J. of Engin. Technol.

View full text Add to dashboard Cite

Nowadays, DDoS attacks are often aimed at cloud computing environments, as more people use virtualization servers. With so many Nodes and distributed services, it will be challenging to rely solely on conventional networks to control and monitor intrusions. We design and deploy DDoS attack defense systems in virtualization environments based on Software-defined Networking (SDN) by combining signature-based Network Intrusion Detection Systems (NIDS) and sampled flow (sFlow). These techniques are practically tested and evaluated on the Proxmox production Virtualization Environment testbed, adding High Availability capabilities to the Controller. The evaluation results show that it promptly detects several types of DDoS attacks and mitigates their negative impact on network performance. Moreover, it also shows good results on Quality of Service (QoS) parameters such as average packet loss about 0 %, average latency about 0.8 ms, and average bitrate about 860 Mbit/s.

show abstract

Section: Related Workmentioning

confidence: 99%