检索结果-南通市图书馆

From CIA to PDR:A Top-Down Survey of sdn security for Cloud DCN

ZTE Communications 2016年第1期14卷 54-60页

作者： Zhi Liu Xiang Wang Jun Li Research Institute of Information Technology Tsinghua University Department of Automation Tsinghua University Tsinghua National Laboratory for Information Science and Technology

By extracting the control plane from the data plane, sdn en?ables unprecedented flexibility for future network architec?tures and quickly changes the landscape of the networking industry. Although the maturity of commonly accepted sdn security practices is the key to the proliferation of cloud DCN, sdn security research is still in its infancy. This pa?per gives a top?down survey of the approaches in this area, discussing security challenges and opportunities of software?defined datacenter networking for cloud computing. It lever?ages the well?known confidentiality?integrity?availability (CIA) matrix and protection?detection?reaction (PDR) model to give an overview of current security threats and security mea?sures. It also discusses promising research directions in this field.

关键词： sdn security cloud DCN CIA PDR

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Resource investment for DDoS attack resistant sdn: a practical assessment

引用

Science China(Information Sciences) 2023年第7期66卷 112-129页

作者： Bin YUAN Fan ZHANG Jun WAN Huan ZHAO Shui YU Deqing ZOU Qiangsheng HUA Hai JIN School of Cyber Science and Engineering Huazhong University of Science and Technology National Engineering Research Center for Big Data Technology and System Services Computing Technology and System Lab Hubei Engineering Research Center on Big Data security Shenzhen Huazhong University of Science and Technology Research Institute School of Computer Science and Technology Huazhong University of Science and Technology Cluster and Grid Computing Lab School of Computer Science University of Technology Sydney

Software-defined networks(sdns) present a novel network architecture that is widely used in various datacenters. However, sdns also suffer from many types of security threats, among which a distributed denial of service(DDoS) attack, which aims to drain the resources of sdn switches and controllers,is one of the most common. Once the switch or controller is damaged, the network services can be affected.Many defense schemes against DDoS attacks have been proposed from the perspective of attack detection;however, such defense schemes are known to suffer from a time consuming and unpromising accuracy, which could result in an unavailable network service before specific countermeasures are taken. To address this issue through a systematic investigation, we propose an elaborate resource-management mechanism against DDoS attacks in an sdn. Specifically, by considering the sdn topology, we leverage the M/M/c queuing model to measure the resistance of an sdn to DDoS attacks. Network administrators can therefore invest a reasonable number of resources into sdn switches and sdn controllers to defend against DDoS attacks while guaranteeing the quality of service(QoS). Comprehensive analyses and empirical data-based experiments demonstrate the effectiveness of the proposed approach.

关键词： sdn security DDoS attacks resource management queueing theory QoS

来源：

同方期刊数据库评论

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

DDoS Attack in Software Defined Networks: A Survey

引用

ZTE Communications 2017年第3期15卷 13-19页

作者： XU Xiaoqiong YU Hongfang YANG Kun School of Communication & Information Engineering University of Electronic Science and Technology of China Chengdu 611731China

Distributed Denial of Service(DDoS) attacks have been one of the most destructive threats to Internet security. By decoupling the network control and data plane, software defined networking(sdn) offers a flexible network management paradigm to solve DDoS attack in traditional networks. However, the centralized nature of sdn is also a potential vulnerability for DDo S attack. In this paper, we first provide some sdn-supported mechanisms against DDoS attack in traditional networks. A systematic review of various sdn-self DDo S threats are then presented as well as the existing literatures on quickly DDoS detection and defense in sdn. Finally, some promising research directions in this field are introduced.

关键词： software defined networks sdn security DDoS detection method defense mechanism

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

欢迎您,

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

请选择保存的检索档案：

请选择收藏分类：

通借通还

欢迎您,

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：