Enabling Efficient and Consistent Network Update in Wireless Data Centers

Tsai, Meng-Hsun; Chuang, Cheng-Min; Chou, Shih-Fan; Pang, Ai‐Chun; Chen, Guan-Yu

doi:10.1109/tnsm.2019.2899763

Cited by 10 publications

(2 citation statements)

References 39 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Besides, an SDN controller can collect and analyze comprehensive information of the whole networks, which gives the SDN controller an more powerful ability. [5][6][7] OpenFlow 8 and P4 9 are two well-known specifications in SDN. OpenFlow is the first standardized interface for SDN controllers to communicate with switches.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

E‐Replacement: Efficient scanner data collection method in P4‐based software‐defined networks

et al. 2021

Self Cite

View full text Add to dashboard Cite

Internet of things (IoT) botnets such as Mirai are rampant in the past years. Port scanning is a well-known behavior of botnets for searching targets in networks. To detect port scanning, a detector requires network statistics with high discriminatory power. In P4-based software-defined network (SDN), switches take charge of recording characteristics about scanning behaviors, and controllers pull the statistics from the switches periodically for anomaly detection. Given storage resources in switches are limited, we proposed a scanner data collection method, 0-Replacement, in P4-based SDN to efficiently collect scanner data and improve the detection rate. 0-Replacement, however, does not consider performance degradation caused by the hash collision. In this paper, we combine the conception of Hashpipe with 0-Replacement and propose a new scanner data collection method named E-Replacement. By leveraging the conception of Hashpipe, E-Replacement can mitigate the performance degradation caused by the hash collision. Through simulations, weshow that E-Replacement improves the detection rate by up to 6.73% and 210.82% compared to 0-Replacement and the traditional sample and hold method, respectively. Besides, E-Replacement improves the precision by around 528.2% compared to the count-min sketch and k-ary sketch methods. The memory usage in E-Replacement is the same as 0-Replacement. In simulations, E-Replacement can detect around 93.4% of scanners in a class B network with only 4.02-Mb SRAM. After implementing E-Replacement on a software P4 switch, BMv2, we observe the extra forwarding latency for E-Replacement is not greater than a millisecond.

show abstract

Section: Introductionmentioning

confidence: 99%

“…A logic centralized control plane, SDN controller, can orchestrate switches in networks more easily than traditional networks. Besides, an SDN controller can collect and analyze comprehensive information of the whole networks, which gives the SDN controller an more powerful ability 5–7 …”

Section: Introductionmentioning

confidence: 99%