A Trustworthy and Resilient Event Broker for Monitoring Cloud Infrastructures

Kreutz, Diego; Casimiro, António; Pasin, Marcelo

doi:10.1007/978-3-642-30823-9_7

Cited by 5 publications

(3 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In addition, these subsystems may provide resilience and trustworthiness properties [469]. Some reasons for delegating control to the data plane include [218]:…”

Section: Delegation Of Controlmentioning

confidence: 99%

Software-Defined Networking: A Comprehensive Survey

et al. 2015

Self Cite

View full text Add to dashboard Cite

Abstract-The Internet has led to the creation of a digital society, where (almost) everything is connected and is accessible from anywhere. However, despite their widespread adoption, traditional IP networks are complex and very hard to manage. It is both difficult to configure the network according to predefined policies, and to reconfigure it to respond to faults, load and changes. To make matters even more difficult, current networks are also vertically integrated: the control and data planes are bundled together. Software-Defined Networking (SDN) is an emerging paradigm that promises to change this state of affairs, by breaking vertical integration, separating the network's control logic from the underlying routers and switches, promoting (logical) centralization of network control, and introducing the ability to program the network. The separation of concerns introduced between the definition of network policies, their implementation in switching hardware, and the forwarding of traffic, is key to the desired flexibility: by breaking the network control problem into tractable pieces, SDN makes it easier to create and introduce new abstractions in networking, simplifying network management and facilitating network evolution.In this paper we present a comprehensive survey on SDN. We start by introducing the motivation for SDN, explain its main concepts and how it differs from traditional networking, its roots, and the standardization activities regarding this novel paradigm. Next, we present the key building blocks of an SDN infrastructure using a bottom-up, layered approach. We provide an in-depth analysis of the hardware infrastructure, southbound and northbound APIs, network virtualization layers, network operating systems (SDN controllers), network programming languages, and network applications. We also look at cross-layer problems such as debugging and troubleshooting. In an effort to anticipate the future evolution of this new paradigm, we discuss the main ongoing research efforts and challenges of SDN. In particular, we address the design of switches and control platforms -with a focus on aspects such as resiliency, scalability, performance, security and dependability -as well as new opportunities for carrier transport networks and cloud providers. Last but not least, we analyze the position of SDN as a key enabler of a software-defined environment.

show abstract

“…In addition, these subsystems may provide resilience and trustworthiness properties [469]. Some reasons for delegating control to the data plane include [218]:…”

Section: Delegation Of Controlmentioning

confidence: 99%

Software-Defined Networking: A Comprehensive Survey

et al. 2015

Self Cite

View full text Add to dashboard Cite

show abstract

“…In a study evaluating systems to monitor security for cloud computing, Diego et al [73] conclude that no single solution can currently cover all existing security threats for Infrastructure as a Service (IaaS) platforms. To enhance the overall infrastructure security it is recommended to use more diverse and heterogeneous solutions.…”

Section: Security Information and Event Management Systemsmentioning

confidence: 99%

Intrusion detection and Big Heterogeneous Data: a Survey

Zuech

Khoshgoftaar

Wald

2015

Journal of Big Data

241

100

View full text Add to dashboard Cite

Intrusion Detection has been heavily studied in both industry and academia, but cybersecurity analysts still desire much more alert accuracy and overall threat analysis in order to secure their systems within cyberspace. Improvements to Intrusion Detection could be achieved by embracing a more comprehensive approach in monitoring security events from many different heterogeneous sources. Correlating security events from heterogeneous sources can grant a more holistic view and greater situational awareness of cyber threats. One problem with this approach is that currently, even a single event source (e.g., network traffic) can experience Big Data challenges when considered alone. Attempts to use more heterogeneous data sources pose an even greater Big Data challenge. Big Data technologies for Intrusion Detection can help solve these Big Heterogeneous Data challenges. In this paper, we review the scope of works considering the problem of heterogeneous data and in particular Big Heterogeneous Data. We discuss the specific issues of Data Fusion, Heterogeneous Intrusion Detection Architectures, and Security Information and Event Management (SIEM) systems, as well as presenting areas where more research opportunities exist. Overall, both cyber threat analysis and cyber intelligence could be enhanced by correlating security events across many diverse heterogeneous sources.

show abstract

“…Therefore, their security and dependability is a crucial issue for ensuring different security, availability and safety properties of future IT infrastructures [6], [29].…”

Section: Introductionmentioning

confidence: 99%

Identity Providers-as-a-Service built as Cloud-of-Clouds: challenges and opportunities

Kreutz¹,

Feitosa²

2014

Annals of Computer Science and Information Systems

Self Cite

View full text Add to dashboard Cite

Abstract-In our previous work we designed and evaluated the feasibility of highly secure and dependable identity providers (IdPs) for the increasing requirements of future IT infrastructures. In this position paper we extend our previous work by analyzing and discussing the benefits of deploying highly secure and dependable identity providers-as-a-service (IdP-as-aService), without compromising the confidentiality of sensitive data and operations. In order to achieve this goal, we discuss some of the forefront challenges of deploying IdP-as-a-Service as a cloud-of-clouds model to ensure important properties such as the resistance against different types of threats and attacks, arbitrary faults, and make it more realistic to improve the system availability up to the three-nines mark. Notwithstanding, the main opportunities towards IdP-as-a-Service are also analyzed. We finish the paper proposing a sustainable business model based on our previous deployments and results, showing that it can be a win-win opportunity, i.e., both IdP-as-a-Service providers and customers can benefit from it.

show abstract

A Trustworthy and Resilient Event Broker for Monitoring Cloud Infrastructures

Cited by 5 publications

References 12 publications

Software-Defined Networking: A Comprehensive Survey

Software-Defined Networking: A Comprehensive Survey

Intrusion detection and Big Heterogeneous Data: a Survey

Identity Providers-as-a-Service built as Cloud-of-Clouds: challenges and opportunities

Contact Info

Product

Resources

About