Paper Info
Title
Could Network View Inconsistency Affect Virtualized Network Security Functions?
Abstract
With SDN increasingly becoming an enabling technology for NFV in the cloud, many virtualized network functions need to monitor the network state in order to function properly. An outdated network view at the controllers can impact the performance of those virtualized network functions. In earlier work, we identified two main factors contributing to an outdated network view in the case of a load-balancer: network state collection and controllers' state distribution. In this paper, we anticipate that the impact might be different in case of security functions. Therefore, we study the impact of an outdated network view on an anomaly-based IDS application. In particular, we investigate: (1) the impact of controllers' state distribution on the performance of a distributed IDS in the case of a DDoS attack; and (2) the impact of network state collection on the performance of an IDS in the case of a TCP SYN flood attack. Our results showed that the outdated network view had negative impact on the IDS anomaly-detection performance in the experiments that we conducted.
Year
DOI
Venue
2017
10.1109/cns.2017.8228698
IEEE Conference on Communications and Network Security
Keywords
DocType
Volume
NFV,SDN,Security,IDS,Performance,Inconsistency
Conference
abs/1707.05546
ISSN
Citations 
PageRank 
2474-025X
0
0.34
References 
Authors
2
2
Name
Order
Citations
PageRank
Mohamed Aslan1101.93
Ashraf Matrawy214626.98