SVLAN: Secure &amp; Scalable Network Virtualization

Kwon, Jonghoon; Lee, Tae‐Ho; Hähni, Claude; Perrig, Adrian

doi:10.14722/ndss.2020.24162

Cited by 6 publications

(4 citation statements)

References 39 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…These results indicate that MMP can mitigate a DDoS attack of a transit-link and provide high availability on a global network using scalability, control, and isolation on next-generation networks (SCION) [13,14]. SCIONLab [15,16] is a global research network used to test SCION. We can join the SCION network using our own computation resources and set up and run our own ASes.…”

Section: Objectivesmentioning

confidence: 99%

Resilience Evaluation of Multi-Path Routing against Network Attacks and Failures

Lee

et al. 2021

Electronics

Self Cite

View full text Add to dashboard Cite

The current state of security and availability of the Internet is far from being commensurate with its importance. The number and strength of DDoS attacks conducted at the network layer have been steadily increasing. However, the single path (SP) routing used in today’s Internet lacks a mitigation scheme to rapidly recover from network attacks or link failure. In case of a link failure occurs, it can take several minutes until failover. In contrast, multi-path routing can take advantage of multiple alternative paths and rapidly switch to another working path. According to the level of available path control, we classfy the multi-path routing into two types, first-hop multi-path (FMP) and multi-hop multi-path (MMP) routing. Although FMP routing supported by networks, such as SD-WAN, shows marginal improvements over the current SP routing of the Internet, MMP routing supported by a global Internet architecture provides strong improvement under network attacks and link failure. MMP routing enables changing to alternate paths to mitigate the network problem in other hops, which cannot be controlled by FMP routing. To show this comparison with practical outcome, we evaluate network performance in terms of latency and loss rate to show that MMP routing can mitigate Internet hazards and provide high availability on global networks by 18 participating ASes in six countries. Our evaluation of global networks shows that, if network attacks or failures occur in other autonomous systems (ASes) that FMP routing cannot avoid, it is feasible to deal with such problems by switching to alternative paths by using MMP routing. When the global evaluation is under a transit-link DDoS attack, the loss rates of FMP that pass the transit-link are affected significantly by a transit-link DDoS attack, but the other alternative MMP paths show stable status under the DDoS attack with proper operation.

show abstract

Section: Objectivesmentioning

confidence: 99%

Resilience Evaluation of Multi-Path Routing against Network Attacks and Failures

Lee

et al. 2021

Electronics

Self Cite

View full text Add to dashboard Cite

show abstract

“…As the closest related work, SVLAN [33] is an architecture enhancing security in network isolation by enforcing the receiver's consent towards incoming traffic. MONDRIAN provides several significant advantages.…”

Section: Related Workmentioning

confidence: 99%

Mondrian: Comprehensive Inter-domain Network Zoning Architecture

Kwon¹,

Hähni²,

Bamert³

et al. 2021

Proceedings 2021 Network and Distributed System Security Symposium

Self Cite

View full text Add to dashboard Cite

“…Given the path-awareness shown in SCIONLAB, each entity can express the destination-driven decision about their reachability to the network. They do so by announcing the path availability only to trusted parties, in order to explicitly limit untrusted sources from engaging in end-to-end communication [33].…”

Section: A Research Projectsmentioning

confidence: 99%

SCIONLAB: A Next-Generation Internet Testbed

Kwon

García-Pardo

Legner

et al. 2020

2020 IEEE 28th International Conference on Network Protocols (ICNP)

Self Cite

View full text Add to dashboard Cite

Network testbeds have empowered networking research and facilitated scientific progress. However, current testbeds focus mainly on experiments involving the current Internet. In this paper, we propose SCIONLAB, a novel global network testbed that enables exciting research opportunities and experimentation with the SCION next-generation Internet architecture. New users can join SCIONLAB as a full-fledged autonomous system with minimal effort and administrative overhead, and directly gain unfettered access to its inter-domain routing system. Based on a well-connected network topology consisting of globally distributed nodes, SCIONLAB enables new experiments, such as inter-domain multipath communication, path-aware networking, exploration of novel routing policies, and new approaches for DDoS defense. SCIONLAB has been operational since 2016 and has supported diverse research projects. We describe the design and implementation of SCIONLAB, and present use cases that illustrate exciting research opportunities.

show abstract

SVLAN: Secure & Scalable Network Virtualization

Cited by 6 publications

References 39 publications

Resilience Evaluation of Multi-Path Routing against Network Attacks and Failures

Resilience Evaluation of Multi-Path Routing against Network Attacks and Failures

Mondrian: Comprehensive Inter-domain Network Zoning Architecture

SCIONLAB: A Next-Generation Internet Testbed

Contact Info

Product

Resources

About