Name
Abstract | ||
|---|---|---|
While the threats in Internet are still increasing and evolving (like intra multi-tenant data center attacks), protection and detection mechanisms are not fully accurate. Therefore, forensics is vital for recovering from an attack but also to identify the responsible entities. Therefore, this paper focuses on tracing back to the sources of an anomaly in the network. In this paper, we propose a method leveraging the Software Defined Networking (SDN) paradigm to passively identify switches composing the network path of an anomaly. As SDN technologies tend to be deployed in the next generation of networks including in data centers, they provide a helpful framework to implement our proposal without developing dedicated routers like usual IP traceback techniques. We evaluated our scheme with different network topologies (Internet and data centers) by considering distributed attacks with numerous hosts. |
Year | DOI | Venue |
|---|---|---|
2014 | 10.1109/WIFS.2014.7084328 | Information Forensics and Security |
Keywords | Field | DocType |
Internet,computer centres,software defined networking,telecommunication network topology,telecommunication security,Internet,SDN paradigm,anomaly traceback,distributed attacks,forensics,intra multitenant data center attacks,network topologies,software defined networking paradigm,switches | Network forensics,Computer security,Computer science,Computer network,Network topology,IP traceback,Software-defined networking,Data center,Tracing,The Internet | Conference |
ISSN | Citations | PageRank |
2157-4766 | 10 | 0.56 |
References | Authors | |
15 | 2 | |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Jerome Francois | 1 | 57 | 4.39 |
| Olivier Festor | 2 | 665 | 85.40 |