StreaMon: A Data-Plane Programming Abstraction for Software-Defined Stream Monitoring

Bonola, Marco; Bianchi, Giuseppe; Picierro, Giulio; Pontarelli, Salvatore; Monaci, Marco

doi:10.1109/tdsc.2015.2499747

Cited by 12 publications

(5 citation statements)

References 24 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Applying SDN to multi-domain networks introduces security challenges that have been highlighted in the literature [73]- [76]. The overview of SDN security issues is shown in Fig.…”

Section: F Sdn Security Issuesmentioning

confidence: 99%

Multi-Domain Federation Utilizing Software Defined Networking—A Review

Hassan

Gregory

2023

IEEE Access

View full text Add to dashboard Cite

The global growth of the Internet continues with an increase in accessibility, connected users and new applications in emerging fields like egames, augmented and virtual reality. Technologies that improve reliability whilst reducing cost and latency are being developed. However, before the Internet can sustain the growth in utilisation and new applications there are challenges to overcome. One of the key challenges remaining is to develop new mechanisms for intra and inter-domain federation that facilitate fast, reliable, and secure sharing of reachability and routing information. Software Defined Networking (SDN) is being introduced to address control and management challenges at domain boundaries. This paper reviews the current state of domain federation and discusses the potential approaches that utilise SDN for a nextgeneration solution.

show abstract

“…Applying SDN to multi-domain networks introduces security challenges that have been highlighted in the literature [73]- [76]. The overview of SDN security issues is shown in Fig.…”

Section: F Sdn Security Issuesmentioning

confidence: 99%

Multi-Domain Federation Utilizing Software Defined Networking—A Review

Hassan

Gregory

2023

IEEE Access

View full text Add to dashboard Cite

show abstract

“…Bonola et al proposed a data‐plane programming abstraction that allows the creation of monitoring tasks performed within the switches. The authors suggested an implementation that enables the use of state tables and flows directly running over network devices, allowing them to associate different metrics and features to be monitored for each flow/state.…”

Section: Related Workmentioning

confidence: 99%

A real‐time attack defense framework for 5G network slicing

et al. 2020

View full text Add to dashboard Cite

Network Slicing (NS) is a key enabler to support 5G network services on-demand. However, since NS is a result of the recent advancement in Software-Defined Networking and Network Function Virtualization, it introduces new security issues which include attacks against an NS instance within an operator network and interslice security threats. In this scenario, identifying and mitigating attacks in real-time is of paramount importance to improve security aspects. However, it is far from being straightforward. Therefore, this work proposes the FrameRTP4, a P4-based framework that aims to deliver real-time attack detection and mitigation mechanisms in 5G NS scenarios. For this, it provides a P4-based switch that implements an Service Function Chaining protocol layer, an efficient and scalable Access Control List for the detection and mitigation of known attacks, and a monitoring system aiming to reduce the overhead induced on the control channel. Furthermore, it delivers an orchestrator that aims to control all switches in order to enable lifecycle management of NS instances and P4 table rules. Besides, it also performs some autonomous tasks such as the wildcard rules generation and the detection of new threats by using machine learning algorithms. Preliminary results point to the potential benefits of FrameRTP4 to be part of a 5G NS infrastructure. K E Y W O R D S5G, bloom filter, cybersecurity, network function virtualization, network slice, P4

show abstract

“…Stateful packet processing -was used in StreaMon [137] to separate the program logic of the traffic analysis applications from elementary primitives implemented in the network device probes. StreaMon abstracts the measurement process through three phases: 1) identification of the entity being monitored, 2) measurement by applying efficiently-implemented primitives to the configurable fields of the packet header, 3) making decisions using extended finite-state machines (XFSM).…”

Section: Measurement and Monitoringmentioning

confidence: 99%

Section: Measurement and Monitoringmentioning

confidence: 99%

A Survey on Data Plane Flexibility and Programmability in Software-Defined Networking

et al. 2019

View full text Add to dashboard Cite

Software-defined networking (SDN) attracts the attention of the research community in recent years, as evidenced by a large number of survey and review papers. The architecture of SDN clearly recognizes three planes: application, control, and data plane. The application plane executes network applications; control plane regulates the rules for the entire network based on the requests generated by network applications; and based on the set rules, the controller configures the switches in the data plane. The role of the switch in the data plane is to simply forward packets based on the instructions given by the controller. By analyzing SDN-related research papers, it is observed that research, from the very beginning, is insufficiently focused on the data plane. Therefore, this paper gives a comprehensive overview of the data plane survey with particular emphasis on the problem of programmability and flexibility. The first part of the survey is dedicated to the evaluation of actual data plane architectures through several definitions and aspects of data plane flexibility and programmability. Then, an overview of SDN-related research was presented with the aim of identifying key factors influencing the gradual deviation from the original data plane architectures given with ForCES and OpenFlow specifications, which we called the data plane evolution. By establishing a correlation between the treated problem and the problem-solving approaches, the limitations of ForCES and OpenFlow data plane architectures were identified. Based on identified limitations, a generalization of approaches to addressing the problem of data plane flexibility and programmability is made. By examining generalized approaches, open issues have been identified, establishing the grounds for future research directions proposal.

show abstract

StreaMon: A Data-Plane Programming Abstraction for Software-Defined Stream Monitoring

Cited by 12 publications

References 24 publications

Multi-Domain Federation Utilizing Software Defined Networking—A Review

Multi-Domain Federation Utilizing Software Defined Networking—A Review

A real‐time attack defense framework for 5G network slicing

A Survey on Data Plane Flexibility and Programmability in Software-Defined Networking

Contact Info

Product

Resources

About