Visible to the public Dynamic Game Based Security Framework in SDN-enabled Cloud Networking Environments

TitleDynamic Game Based Security Framework in SDN-enabled Cloud Networking Environments
Publication TypeConference Paper
Year of Publication2017
AuthorsChowdhary, Ankur, Pisharody, Sandeep, Alshamrani, Adel, Huang, Dijiang
Conference NameProceedings of the ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization
PublisherACM
Conference LocationNew York, NY, USA
ISBN Number978-1-4503-4908-6
Keywordscloud systems, control theory, Distributed Denial of Service (DDoS), game theory, Human Behavior, human factors, moving target defense (MTD), resilience, Resiliency, Scalability, security, software defined networking (SDN)
AbstractSDN provides a way to manage complex networks by introducing programmability and abstraction of the control plane. All networks suffer from attacks to critical infrastructure and services such as DDoS attacks. We make use of the programmability provided by the SDN environment to provide a game theoretic attack analysis and countermeasure selection model in this research work. The model is based on reward and punishment in a dynamic game with multiple players. The network bandwidth of attackers is downgraded for a certain period of time, and restored to normal when the player resumes cooperation. The presented solution is based on Nash Folk Theorem, which is used to implement a punishment mechanism for attackers who are part of DDoS traffic, and reward for players who cooperate, in effect enforcing desired outcome for the network administrator.
URLhttp://doi.acm.org/10.1145/3040992.3040998
DOI10.1145/3040992.3040998
Citation Keychowdhary_dynamic_2017