Toward Network-based DDoS Detection in Software-defined Networks

To combat susceptibility of modern computing systems to cyberattack, identifying and disrupting malicious traffic without human intervention is essential. To accomplish this, three main tasks for an effective intrusion detection system have been identified: monitor network traffic, categorize and identify anomalous behavior in near real time, and take appropriate action against the identified threat. This system leverages distributed SDN architecture and the principles of Artificial Immune Systems and Self-Organizing Maps to build a network-based intrusion detection system capable of detecting and terminating DDoS attacks in progress

Openflow-based Mechanisms For Qos In Lte Backhaul Networks

The growing data traffic demand is forcing network operators to deploy more base stations, culminating in dense heterogeneous networks that require a high-connectivity backhaul. This scenario imposes significant challenges for current and future cellular networks, and Software Defined Networking (SDN) has been pointed as an enabling technology to overcome existing limitations. This paper shows how the OpenFlow protocol can be integrated into existing Long Term Evolution (LTE) networks to provide the required Quality of Service (QoS) in the network infrastructure. Three OpenFlow-based mechanisms are proposed: a traffic routing, an admission control function, and a traffic coexistence mechanism. Together, they can effectively control the bandwidth usage in the backhaul infrastructure, improving the QoS and ensuring a better user experience. Simulations were performed to validate the proposed mechanisms and highlight the benefits that can be achieved with the flexibility offered by the SDN technology.12331238IEEE Symposium on Computers and Communication (ISCC)JUN 27-JUL 01, 2016Messina, ITAL