Challenge-based collaborative intrusion detection in software-defined networking: an evaluation

Digital Communications and Networks

Jin Li¹  Yu Wang²  Yang Xiang³  Zhiping Jin⁴  Wenjuan Li⁴  Keping Yu⁵ 

[1] Corresponding author.;Department of Applied Mathematics and Computer Science, Technical University of Denmark, 2800, Lyngby, Denmark;Global Information and Telecommunication Institute, Waseda University, Shinjuku, Tokyo, 169-8050, Japan;Institute of Artificial Intelligence and Blockchain, Guangzhou University, Guangzhou, 510006, China;School of Information Engineering, Zhongshan Polytechnic, 528400, Guangdong, China;

关键词: Software-defined networking;    Trust management;    Collaborative intrusion detection;    Insider attack;    Challenge mechanism;   

DOI  :  

来源: DOAJ

【 摘 要 】

Software-Defined Networking (SDN) is an emerging architecture that enables a computer network to be intelligently and centrally controlled via software applications. It can help manage the whole network environment in a consistent and holistic way, without the need of understanding the underlying network structure. At present, SDN may face many challenges like insider attacks, i.e., the centralized control plane would be attacked by malicious underlying devices and switches. To protect the security of SDN, effective detection approaches are indispensable. In the literature, challenge-based Collaborative Intrusion Detection Networks (CIDNs) are an effective detection framework in identifying malicious nodes. It calculates the nodes’ reputation and detects a malicious node by sending out a special message called a challenge. In this work, we devise a challenge-based CIDN in SDN and measure its performance against malicious internal nodes. Our results demonstrate that such a mechanism can be effective in SDN environments.

【 授权许可】

Unknown