首页> 外文会议>Recent advances in intrusion detection >Revisiting Traffic Anomaly Detection Using Software Defined Networking
【24h】

Revisiting Traffic Anomaly Detection Using Software Defined Networking

机译:使用软件定义的网络重新访问流量异常检测

获取原文
获取原文并翻译 | 示例

摘要

Despite their exponential growth, home and small office/home office networks continue to be poorly managed. Consequently, security of hosts in most home networks is easily compromised and these hosts are in turn used for largescale malicious activities without the home users' knowledge. We argue that the advent of Software Defined Networking (SDN) provides a unique opportunity to effectively detect and contain network security problems in home and home office networks. We show how four prominent traffic anomaly detection algorithms can be implemented in an SDN context using Openfiow compliant switches and NOX as a controller. Our experiments indicate that these algorithms are significantly more accurate in identifying malicious activities in the home networks as compared to the ISP. Furthermore, the efficiency analysis of our SDN implementations on a programmable home network router indicates that the anomaly detectors can operate at line rates without introducing any performance penalties for the home network traffic.
机译:尽管呈指数级增长,但家庭和小型办公室/家庭办公室网络的管理仍然不佳。因此,大多数家庭网络中的主机的安全性很容易受到损害,并且这些主机又被用于家庭用户不知情的大规模恶意活动。我们认为,软件定义网络(SDN)的出现提供了独特的机会,可以有效地检测和控制家庭和家庭办公室网络中的网络安全问题。我们展示了如何使用兼容Openfiow的交换机和NOX作为控制器,在SDN上下文中实现四种重要的流量异常检测算法。我们的实验表明,与ISP相比,这些算法在识别家庭网络中的恶意活动方面要准确得多。此外,对我们在可编程家庭网络路由器上的SDN实施的效率分析表明,异常检测器可以以线路速率运行,而不会对家庭网络流量造成任何性能损失。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号