2018 IEEE 17th International Symposium on Network Computing and Applications (NCA)最新文献_第7页

Efficient Resources Utilization by Different Microservices Deployment Models 不同微服务部署模型对资源的有效利用

2018 IEEE 17th International Symposium on Network Computing and Applications (NCA) Pub Date : 2018-11-01 DOI: 10.1109/NCA.2018.8548346

Fernando H. L. Buzato, A. Goldman, D. Batista

引用次数: 10

Gwardar: Towards Protecting a Software-Defined Network from Malicious Network Operating Systems 保护软件定义网络免受恶意网络操作系统的侵害

2018 IEEE 17th International Symposium on Network Computing and Applications (NCA) Pub Date : 2018-09-19 DOI: 10.1109/NCA.2018.8548074

Arash Shaghaghi, S. Kanhere, M. Kâafar, Sanjay Jha

{"title":"Gwardar: Towards Protecting a Software-Defined Network from Malicious Network Operating Systems","authors":"Arash Shaghaghi, S. Kanhere, M. Kâafar, Sanjay Jha","doi":"10.1109/NCA.2018.8548074","DOIUrl":"https://doi.org/10.1109/NCA.2018.8548074","url":null,"abstract":"A Software-Defined Network (SDN) controller (aka. Network Operating System or NOS) is regarded as the brain of the network and is the single most critical element responsible to manage an SDN. Complimentary to existing solutions that aim to protect a NOS, we propose an intrusion protection system designed to protect an SDN against a controller that has been successfully compromised. Gwardar maintains a virtual replica of the data plane by intercepting the OpenFlow messages exchanged between the control and data plane. By observing the long-term flow of the packets, Gwardar learns the normal set of trajectories in the data plane for distinct packet headers. Upon detecting an unexpected packet trajectory, it starts by verifying the data plane forwarding devices by comparing the actual packet trajectories with the expected ones computed over the virtual replica. If the anomalous trajectories match the NOS instructions, Gwardar inspects the NOS itself. For this, it submits policies matching the normal set of trajectories and verifies whether the controller submits matching flow rules to the data plane and whether the network view provided to the application plane reflects the changes. Our evaluation results prove the practicality of Gwardar with a high detection accuracy in a reasonable time-frame.","PeriodicalId":268662,"journal":{"name":"2018 IEEE 17th International Symposium on Network Computing and Applications (NCA)","volume":"28 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-09-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129248867","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

Toward Incremental FIB Aggregation with Quick Selections (FAQS) 基于快速选择的增量FIB聚合(FAQS)

2018 IEEE 17th International Symposium on Network Computing and Applications (NCA) Pub Date : 2018-07-23 DOI: 10.1109/NCA.2018.8548101

Yaoqing Liu, Garegin Grigoryan

引用次数: 4

LAMP: Prompt Layer 7 Attack Mitigation with Programmable Data Planes LAMP:使用可编程数据平面提示第7层攻击缓解

2018 IEEE 17th International Symposium on Network Computing and Applications (NCA) Pub Date : 2018-07-23 DOI: 10.1109/NCA.2018.8548136

Garegin Grigoryan, Yaoqing Liu

引用次数: 9

Leveraging Intel SGX Technology to Protect Security-Sensitive Applications 利用英特尔SGX技术保护对安全敏感的应用

2018 IEEE 17th International Symposium on Network Computing and Applications (NCA) Pub Date : 2018-01-29 DOI: 10.1109/NCA.2018.8548184

Joseph Sobchuk, Sean R. O'Melia, Daniil M. Utin, R. Khazan

引用次数: 6