Approaches for Collaborative Security Defences in Multi Network Environments

Koning, Ralph; Polevoy, Gleb; Meijer, Lydia; Laat, Cees de; Grosso, Paola

doi:10.1109/cscloud/edgecom.2019.000-9

Cited by 3 publications

(7 citation statements)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Similarly, network operators can proactively change their network (e.g., using VNF for fine-grained adaptations) because network descriptions of operators [20,50] provide them with a more comprehensive view on what is going on in the network (cf. Sect.…”

Section: Ncp-rq5: How Can Open Networking Take Advantage Of the Additmentioning

confidence: 99%

A Responsible Internet to Increase Trust in the Digital World

et al. 2020

Self Cite

View full text Add to dashboard Cite

Policy makers in regions such as Europe are increasingly concerned about the trustworthiness and sovereignty of the foundations of their digital economy, because it often depends on systems operated or manufactured elsewhere. To help curb this problem, we propose the novel notion of a responsible Internet, which provides higher degrees of trust and sovereignty for critical service providers (e.g., power grids) and all kinds of other users by improving the transparency, accountability, and controllability of the Internet at the network-level. A responsible Internet accomplishes this through two new distributed and decentralized systems. The first is the Network Inspection Plane (NIP), which enables users to request measurement-based descriptions of the chains of network operators (e.g., ISPs and DNS and cloud providers) that handle their data flows or could potentially handle them, including the relationships between them and the properties of these operators. The second is the Network Control Plane (NCP), which allows users to specify how they expect the Internet infrastructure to handle their data (e.g., in terms of the security attributes that they expect chains of network operators to have) based on the insights they gained from the NIP. We discuss research directions and starting points to realize a responsible Internet by combining three currently largely disjoint research areas: large-scale measurements (for the NIP), open source-based programmable networks (for the NCP), and policy making (POL) based on the NIP and driving the NCP. We believe that a responsible Internet is the next stage in the evolution of the Internet and that the concept is useful for clean slate Internet systems as well.

show abstract

Section: Ncp-rq5: How Can Open Networking Take Advantage Of the Additmentioning

confidence: 99%

A Responsible Internet to Increase Trust in the Digital World

et al. 2020

Self Cite

View full text Add to dashboard Cite

show abstract

“…We implement SARNET on top of VNET which provides an experimental platform for secure networking research [3,5].…”

Section: Multi-domain Sarnetmentioning

confidence: 99%

“…Finally, we compare the efficiency of this approach to the efficiency of three original approaches we evaluated before in [3]:…”

Section: Risk Based Defence Implementationmentioning

confidence: 99%

“…VI we explain how we evaluate the trust based defence and in Sec. VII we compare the results of the trust-based defence approach to the results of the defence approaches defined in [3]. Finally, we discuss the outcomes of this work in Sec.…”

Section: Introductionmentioning

confidence: 98%

“…In [3], Koning et al show that the efficiency of collaborative defences, even when applying the same task, can differ based on the approach and order in which the collaborators are asked for help. Since asking help from more trusted members may yield better results in defending, we ask ourselves: If we have an indicator of trust, can this be used in ally selection and how does trust affect the efficiency of collaborative defences?…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Trust-based collaborative defences in multi network alliances

Koning

Deljoo

Meijer³

et al. 2019

2019 3rd Cyber Security in Networking Conference (CSNet)

Self Cite

View full text Add to dashboard Cite

Collaborative defences against, for example, Distributed Denial of Service attacks require trust between the collaborators. Even in a trusted alliance of collaborators, some members are more trusted than others with the execution of a specific task. This paper shows that trust can be used as a criterion in collaborative defences against attacks on computer infrastructures. We evaluate the implementation of a trust based defence in an overlay network and compare its' performance to other collaborative defences in the same environment. Results show that the trust-based defence has comparable results to the other collaborative defences after the trust values converge to reflect the behaviour of the nodes.

show abstract