• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>Computer networks >A kangaroo-based intrusion detection system on software-defined networks
【24h】

A kangaroo-based intrusion detection system on software-defined networks

机译：基于Kangaroo的入侵检测系统在软件定义的网络上

获取原文
获取原文并翻译 | 示例
           
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

In recent years, a new generation of architecture has emerged in the world of computer networks, known as software-defined networking (SDN), that aims to improve and remove the limitations of traditional networks. Although SDN provides viable benefits, it has faced many security threats and vulnerability-related issues. To solve security issues in the SDN, one of the most vital solutions is employing an intrusion detection system (IDS). Merging IDS into the SDN network remains efficient due to the unique features of SDN, such as high manageability, flexibility, and programmability. In this paper, we propose a new approach as a kangaroo-based intrusion detection system (KIDS), which is an SDN-based architecture for attack detection and malicious behaviors in the data plane. Designing a zone-based architecture in the KIDS assists us in achieving a distributed architecture which is scalable in both area and anomaly detection. In the KIDS architecture, the IDS module supplies the flow-based and packet-based intrusion detection components based on monitoring packet parser and Flow tables of the SDN switches. In the proposed approach, the IDS uses consecutive jumps like a kangaroo for announcing the attacks both to the SDN controller and other IDSs, contributing to improved scalability and efficiency. The evaluation of the proposed approach shows an enhanced performance against that of peer approaches in detecting malicious packets.
机译：近年来，在计算机网络世界中出现了新一代的架构，称为软件定义的网络（SDN），旨在提高和消除传统网络的局限性。虽然SDN提供了可行的福利，但它面临许多安全威胁和漏洞相关的问题。为了解决SDN中的安全问题，最重要的解决方案之一是采用入侵检测系统（IDS）。由于SDN的独特特征，例如高可管理性，灵活性和可编程性，将ID合并到SDN网络中保持有效。在本文中，我们提出了一种作为基于袋鼠的入侵检测系统（儿童）的新方法，它是基于SDN的架构，用于数据平面中的攻击检测和恶意行为。设计儿童区域的架构有助于我们实现在区域和异常检测中可扩展的分布式架构。在儿童架构中，IDS模块基于监视分组解析器和SDN交换机的流量表提供基于流基的和数据包的入侵检测组件。在所提出的方法中，IDS使用连续跳跃，如kangaroo，用于宣布SDN控制器和其他IDS的攻击，有助于提高可扩展性和效率。对所提出的方法的评估表明，在检测恶意数据包方面的对等方法方面的性能提高。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号