Visible to the public Feedback Based Sampling for Intrusion Detection in Software Defined Network

TitleFeedback Based Sampling for Intrusion Detection in Software Defined Network
Publication TypeConference Paper
Year of Publication2018
AuthorsShi, Jiangyong, Zeng, Yingzhi, Wang, Wenhao, Yang, Yuexiang
Conference NameProceedings of the 2Nd International Conference on Cryptography, Security and Privacy
PublisherACM
ISBN Number978-1-4503-6361-7
Keywordsfeedback, flow sampling, IDS, OpenFlow, pubcrawl, resilience, Resiliency, Scalability, SDN, SDN security
Abstract

Cloud computing is being deployed more and more widely. However, the difficulty of monitoring the huge east-west traffic is a great security concern. In this paper, we proposed FBSample, a sampling method which employs the central control feature of SDN and feedback information of IDS. Evaluation results show FBSample can largely reduce the amount of packets to be transferred while maintaining a relatively high detection precision.

URLhttps://dl.acm.org/citation.cfm?doid=3199478.3199495
DOI10.1145/3199478.3199495
Citation Keyshi_feedback_2018