Visible to the public Detecting Malicious Hosts in SDN through System Call Learning

TitleDetecting Malicious Hosts in SDN through System Call Learning
Publication TypeConference Paper
Year of Publication2021
AuthorsChasaki, Danai, Mansour, Christopher
Conference NameIEEE INFOCOM 2021 - IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS)
KeywordsConferences, machine learning, Monitoring, pubcrawl, Resiliency, Scalability, SDN security, security, software defined networking, Standards
AbstractSoftware Defined Networking (SDN) has changed the way of designing and managing networks through programmability. However, programmability also introduces security threats. In this work we address the issue of malicious hosts running malicious applications that bypass the standard SDN based detection mechanisms. The SDN security system we are proposing periodically monitors the system calls utilization of the different SDN applications installed, learns from past system behavior using machine learning classifiers, and thus accurately detects the existence of an unusual activity or a malicious application.
DOI10.1109/INFOCOMWKSHPS51825.2021.9484586
Citation Keychasaki_detecting_2021