基于软件定义网络的安全服务框架

2015 IEEE 29th International Conference on Advanced Information Networking and Applications Workshops Pub Date : 2015-03-24 DOI:10.1109/WAINA.2015.102

J. Jeong, Jihyeok Seo, Geumhwan Cho, Hyoungshick Kim, Jungsoo Park

{"title":"基于软件定义网络的安全服务框架","authors":"J. Jeong, Jihyeok Seo, Geumhwan Cho, Hyoungshick Kim, Jungsoo Park","doi":"10.1109/WAINA.2015.102","DOIUrl":null,"url":null,"abstract":"This paper proposes a framework for security services using Software-Defined Networking (SDN) and specifies requirements for such a framework. It describes two representative security services, such as (i) centralized firewall system and (ii) centralized DDoS-attack mitigation system. For each service, this paper discusses the limitations of legacy systems and presents a possible SDN-based system to protect network resources by controlling suspicious and dangerous network traffic that can be regarded as security attacks.","PeriodicalId":6845,"journal":{"name":"2015 IEEE 29th International Conference on Advanced Information Networking and Applications Workshops","volume":"6 4","pages":"150-153"},"PeriodicalIF":0.0000,"publicationDate":"2015-03-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"24","resultStr":"{\"title\":\"A Framework for Security Services Based on Software-Defined Networking\",\"authors\":\"J. Jeong, Jihyeok Seo, Geumhwan Cho, Hyoungshick Kim, Jungsoo Park\",\"doi\":\"10.1109/WAINA.2015.102\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"This paper proposes a framework for security services using Software-Defined Networking (SDN) and specifies requirements for such a framework. It describes two representative security services, such as (i) centralized firewall system and (ii) centralized DDoS-attack mitigation system. For each service, this paper discusses the limitations of legacy systems and presents a possible SDN-based system to protect network resources by controlling suspicious and dangerous network traffic that can be regarded as security attacks.\",\"PeriodicalId\":6845,\"journal\":{\"name\":\"2015 IEEE 29th International Conference on Advanced Information Networking and Applications Workshops\",\"volume\":\"6 4\",\"pages\":\"150-153\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2015-03-24\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"24\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2015 IEEE 29th International Conference on Advanced Information Networking and Applications Workshops\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/WAINA.2015.102\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2015 IEEE 29th International Conference on Advanced Information Networking and Applications Workshops","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/WAINA.2015.102","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 24

摘要

本文提出了一个使用软件定义网络(SDN)的安全服务框架，并详细说明了该框架的要求。介绍了两种具有代表性的安全服务，如(i)集中式防火墙系统和(ii)集中式ddos攻击缓解系统。对于每种服务，本文讨论了遗留系统的局限性，并提出了一种可能的基于sdn的系统，通过控制可被视为安全攻击的可疑和危险网络流量来保护网络资源。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

查看原文本刊更多论文

A Framework for Security Services Based on Software-Defined Networking

This paper proposes a framework for security services using Software-Defined Networking (SDN) and specifies requirements for such a framework. It describes two representative security services, such as (i) centralized firewall system and (ii) centralized DDoS-attack mitigation system. For each service, this paper discusses the limitations of legacy systems and presents a possible SDN-based system to protect network resources by controlling suspicious and dangerous network traffic that can be regarded as security attacks.

求助全文

通过发布文献求助，成功后即可免费获取论文全文。去求助

来源期刊

2015 IEEE 29th International Conference on Advanced Information Networking and Applications Workshops

自引率

0.00%

发文量