Proceedings of the 11th International Conference on Future Internet Technologies最新文献

Flo-v: Low Overhead Network Monitoring Framework in Virtualized Software Defined Networks flow -v:虚拟化软件定义网络中的低开销网络监控框架

Proceedings of the 11th International Conference on Future Internet Technologies Pub Date : 2016-06-15 DOI: 10.1145/2935663.2935677

Gyeongsik Yang, Kyungwoon Lee, Wontae Jeong, C. Yoo

引用次数: 5

Detecting Compromised Email Accounts from the Perspective of Graph Topology 从图拓扑的角度检测被入侵的电子邮件帐户

Proceedings of the 11th International Conference on Future Internet Technologies Pub Date : 2016-06-15 DOI: 10.1145/2935663.2935672

Xuan Hu, Banghuai Li, Yang Zhang, Changling Zhou, Hao Ma

引用次数: 16

An Easy Defense Mechanism Against Botnet-based DDoS Flooding Attack Originated in SDN Environment Using sFlow SDN环境下基于僵尸网络的DDoS泛洪攻击的简单防御机制

Proceedings of the 11th International Conference on Future Internet Technologies Pub Date : 2016-06-15 DOI: 10.1145/2935663.2935674

Yiqin Lu, M. Wang

{"title":"An Easy Defense Mechanism Against Botnet-based DDoS Flooding Attack Originated in SDN Environment Using sFlow","authors":"Yiqin Lu, M. Wang","doi":"10.1145/2935663.2935674","DOIUrl":"https://doi.org/10.1145/2935663.2935674","url":null,"abstract":"As today's networks become larger and more complex, the Distributed Denial of Service (DDoS) flooding attack threats may not only come from the outside of networks but also from inside, such as cloud computing network where exists multiple tenants possibly containing malicious tenants. So, the need of source-based defense mechanism against such attacks is pressing. In this paper, we mainly focus on the source-based defense mechanism against Botnet-based DDoS flooding attack through combining the power of Software-Defined Networking (SDN) and sample flow (sFlow) technology. Firstly, we defined a metric to measure the essential features of this kind attack which means distribution and collaboration. Then we designed a simple detection algorithm based on statistical inference model and response scheme through the abilities of SDN. Finally, we developed an application to realize our idea and also tested its effect on emulation network with real network traffic. The result shows that our mechanism could effectively detect DDoS flooding attack originated in SDN environment and identify attack flows for avoiding the harm of attack spreading to target or outside. We advocate the advantages of SDN in the area of defending DDoS attacks, because it is difficult and laborious to organize selfish and undisciplined traditional distributed network to confront well collaborative DDoS flooding attacks.","PeriodicalId":305382,"journal":{"name":"Proceedings of the 11th International Conference on Future Internet Technologies","volume":"21 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-06-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130240646","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 25

Protecting DNS services from IP spoofing: SDN collaborative authentication approach 保护DNS服务免受IP欺骗:SDN协同认证方法

Proceedings of the 11th International Conference on Future Internet Technologies Pub Date : 2016-06-15 DOI: 10.1145/2935663.2935666

Nm Sahri, K. Okamura

{"title":"Protecting DNS services from IP spoofing: SDN collaborative authentication approach","authors":"Nm Sahri, K. Okamura","doi":"10.1145/2935663.2935666","DOIUrl":"https://doi.org/10.1145/2935663.2935666","url":null,"abstract":"As DNS packet are mostly UDP-based, make it as a perfect tool for hackers to launch a well-known type of distributed denial of service (DDoS). The purpose of this attack is to saturate the DNS server availability and resources. This type of attack usually utilizes a large number of botnet and perform spoofing on the IP address of the targeted victim. We take a different approach for IP spoofing detection and mitigation strategies to protect the DNS server by utilizing Software Defined Networking (SDN). In this paper, we present CAuth, a novel mechanism that autonomously block the spoofing query packet while authenticate the legitimate query. By manipulating Openflow control message, we design a collaborative approach between client and server network. Whenever a server controller receives query packet, it will send an authentication packet back to the client network and later the client controller also replies via authentication packet back to the server controller. The server controller will only forward the query to the DNS server if it receives the replied authentication packet from the client. From the evaluation, CAuth instantly manage to block spoofing query packet while authenticate the legitimate query as soon as the mechanism started. Most notably, our mechanism designed with no changes in existing DNS application and Openflow protocol.","PeriodicalId":305382,"journal":{"name":"Proceedings of the 11th International Conference on Future Internet Technologies","volume":"25 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-06-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127909502","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 11

Establish the Intrinsic Binding in Naming Space for Future Internet Using Combined Public Key 利用组合公钥建立未来互联网命名空间的内在绑定

Proceedings of the 11th International Conference on Future Internet Technologies Pub Date : 2016-06-15 DOI: 10.1145/2935663.2935676

Hongwei Meng, Zhong Chen, Jian-bin Hu, Zhi Guan

{"title":"Establish the Intrinsic Binding in Naming Space for Future Internet Using Combined Public Key","authors":"Hongwei Meng, Zhong Chen, Jian-bin Hu, Zhi Guan","doi":"10.1145/2935663.2935676","DOIUrl":"https://doi.org/10.1145/2935663.2935676","url":null,"abstract":"In order to enable intrinsic security without the Public Key Infrastructure (PKI) deployment, flat self-certifying addresses have been involved into the future Internet architecture (FIA) designs. In contrast to deriving a self-certifying address from hashing of a correspondent prepared public key, we build up this self-certifying relationship along the reverse path using Combined Public Key (CPK). Our design develop the chain of trust embedded in the Internet name/address registration and allocation process for domains, hosts, services and content, to establish intrinsic bindings between three different identities: user-level human-readable names, network-level routable flat identifiers and the correspondent public keys. This binding connects the accountability between real-world space and network space. The use cases of our design are also given in named data networking (NDN) and identity/locator splitting network architecture, i.e. XIA and MobilityFirst. The analysis also shows that identity authentication based on CPK is capable of resource-constrained nodes in large-scale networks without scalability tradeoffs.","PeriodicalId":305382,"journal":{"name":"Proceedings of the 11th International Conference on Future Internet Technologies","volume":"24 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-06-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"117031371","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

Implementing a Dynamically Reconfigurable Wireless Mesh Network Testbed for Multi-Faceted QoS Support 实现面向多面QoS支持的动态可重构无线Mesh网络测试平台

Proceedings of the 11th International Conference on Future Internet Technologies Pub Date : 2016-06-15 DOI: 10.1145/2935663.2935678

Si Young Jang, B. Shin, Dongman Lee

引用次数: 1

Deployment and Evaluation of Software-Defined Inter-Connections for Multi-domain Federated SDN-Cloud 面向多域联邦sdn云的软件定义互连部署与评估

Proceedings of the 11th International Conference on Future Internet Technologies Pub Date : 2016-06-15 DOI: 10.1145/2935663.2935683

A. C. Risdianto, Junsik Shin, JongWon Kim

引用次数: 7

Directed-Propagation Link-State Routing Protocol for Information-Centric Networks 面向信息中心网络的定向传播链路状态路由协议

Proceedings of the 11th International Conference on Future Internet Technologies Pub Date : 2016-06-15 DOI: 10.1145/2935663.2935667

Lemei Huang, Yu Guan, Xinggong Zhang, Zongming Guo

引用次数: 3

Enabling Fast Recovery from Unanticipated Data Access Failure in Named Data Networking 在命名数据网络中实现从意外数据访问失败的快速恢复

Proceedings of the 11th International Conference on Future Internet Technologies Pub Date : 2016-06-15 DOI: 10.1145/2935663.2935681

Xiaoyan Hu, J. Gong

引用次数: 0

Efficient Matching Algorithm for Content-based Publish/Subscribe Systems with Compound Predicates 基于内容的复合谓词发布/订阅系统的高效匹配算法

Proceedings of the 11th International Conference on Future Internet Technologies Pub Date : 2016-06-15 DOI: 10.1145/2935663.2935679

Xilai Lv, Yongqiang Dong

引用次数: 0