Efficient anomaly detection and mitigation in software defined networking environment
Authors:
- 1 February 2015
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- p. 479-484
Abstract
A Computer network or data communication network is a telecommunication network that allows computers to exchange data. Computer networks are typically built from a large number of network devices such as routers, switches and numerous types of middle boxes with many complex protocols implemented on them. They need to accomplish very complex tasks with access to very limited tools. As a result, network management and performance tuning is quite challenging. Software-Defined Networking (SDN) is an emerging architecture purporting to be adaptable, cost-effective, dynamic and manageable pursuing to be suitable for the high-bandwidth, changing nature of today's applications. SDN architectures decouples network control and forwarding functions, making network control to become directly programmable and the underlying infrastructure to be abstracted from applications and network services. The network security is a prominent feature of the network ensuring accountability, confidentiality, integrity, and protection against many external and internal threats. An Intrusion Detection System (IDS) is a type of security software designed to automatically alert administrators when someone or something is trying to compromise information system through malicious activities or through security policy violations. Security violation in SDN environment needs to be identified to prevent the system from an attack. The proposed work aims to detect the attacks on SDN environment. Detecting anomalies on SDN environment will be more manageable and efficient.Keywords
This publication has 9 references indexed in Scilit:
- Improving the performance of load balancing in software-defined networks through load variance-based synchronizationComputer Networks, 2014
- Software defined networking for security enhancement in wireless mobile networksComputer Networks, 2014
- Combining OpenFlow and sFlow for an effective and scalable anomaly detection and mitigation mechanism on SDN environmentsComputer Networks, 2014
- A wrapper approach for feature selection based on Bat Algorithm and Optimum-Path ForestExpert Systems with Applications, 2014
- Binary bat algorithmNeural Computing and Applications, 2013
- Feature selection using fuzzy entropy measures with similarity classifierExpert Systems with Applications, 2011
- OpenFlowACM SIGCOMM Computer Communication Review, 2008
- Mining anomalies using traffic feature distributionsACM SIGCOMM Computer Communication Review, 2005
- A flow-based method for abnormal network traffic detection2004