Real-time monitoring of SDN networks using non-invasive cloud-based logging platforms

Siniarski, Bartlomiej; Olariu, Cristian; Perry, Philip; Parsons, Trevor; Murphy, John

doi:10.1109/pimrc.2016.7794973

Cited by 9 publications

(2 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…All experiments were done in isolation, so that all load was controlled. Also, we used LogEntries as real-time log analytics platform due to its strong analytic capabilities [11].…”

Section: A Setupmentioning

confidence: 99%

Towards an emulated IoT test environment for anomaly detection using NEMU

Brady

Hava

Perry

et al. 2017

2017 Global Internet of Things Summit (GIoTS)

Self Cite

View full text Add to dashboard Cite

Abstract-The advent of the Internet of Things (IoT) has led to a major change in the way we interact with increasingly ubiquitous connected devices such as smart objects and cyberphysical systems. It has also led to an exponential increase in the number of such Internet-connected devices over the last few years. Conducting extensive functional and performance testing is critical to assess the robustness and efficiency of IoT systems in order to validate them before their deployment in real life. However, creating an IoT test environment is a difficult and expensive task, usually requiring a significant amount of physical hardware and human effort to build it. This paper proposes a method to emulate an IoT environment using the Network Emulator for Mobile Universes (NEMU), itself built on the popular QEMU system emulator, in order to construct a testbed of inter-connected, emulated Raspberry Pi devices.Additionally, we experimentally demonstrate how our method can be successfully applied to IoT by showing how such an emulated environment can be used to detect anomalies in an IoT system.

show abstract

“…All experiments were done in isolation, so that all load was controlled. Also, we used LogEntries as real-time log analytics platform due to its strong analytic capabilities [11].…”

Section: A Setupmentioning

confidence: 99%

Towards an emulated IoT test environment for anomaly detection using NEMU

Brady

Hava

Perry

et al. 2017

2017 Global Internet of Things Summit (GIoTS)

Self Cite

View full text Add to dashboard Cite

show abstract

“…Maintaining a secure network requires real-time observation, deep inspection and classification of network traffic to trigger adequate network reconfiguration and intrusion detection alerts to stop the detected threat or at least minimize its impact. Both NFV and SDN technologies can be very useful in achieving the desired security level for these networked systems, although they might be prone to their specific security threats as well [3], as they can enable faster response to detected security breaches [4]. The ability to forensically examine network traffic after a successful security attack is very important as it provides a learning basis that help the attacked system to be more resilient against new attack attempts and enables pursuing the perpetrators.…”

Section: Introductionmentioning

confidence: 99%

Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV

Mustapha

Djahel

Perry

et al. 2021

2021 IEEE 23rd Int Conf on High Performance Computing &Amp; Communications; 7th Int Conf on Data Science &Amp; Systems; 19th In

Self Cite

View full text Add to dashboard Cite

With the advent of Software-Defined Networking (SDN) and Network Functions Virtualization (NFV), the design and deployment of DPI (Deep Packet Inspection) must be reconsidered. The programmability, global visibility and centralized control of SDN, as well as the NFV enabled lightweight service creation and migration, have potential to empower the capability of DPI tools. On the other hand, dynamic environments make the deployment of DPI challenging. Although it has been validated that some security functions like firewall, and Intrusion Detection System (IDS) can be implemented in SDN controllers or NFV, it remains unclear whether or not DPI can be done in the similar way considering its sophisticated interactions with the network traffic packets, especially for the stateful protocols and encrypted traffic. In other words, the design and deployment of DPI in an SDN and NFV architecture would not be as straightforward. Therefore, this paper aims to shed the light on the challenges facing DPI design and deployment in the context of SDN and NFV and propose a solution to overcome them.

show abstract