A novel flow-vector generation approach for malicious traffic detection

Hou, Jianrong; Fang-ai, Liu; Lu, Hui; Tan, Zhiyuan; Zhuang, Xuqiang; Tian, Zhihong

doi:10.1016/j.jpdc.2022.06.004

Cited by 22 publications

(1 citation statement)

References 41 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…8 . As a result, compared to vSFC and cSFC, the EnsureS scheme can minimize processing overhead per packet by 90% and 69%, respectively, due to batching 36 .…”

Section: Resultsmentioning

confidence: 99%

Developing an SDN security model (EnsureS) based on lightweight service path validation with batch hashing and tag verification

Pradeep,

Sharma,

Lilhore

et al. 2023

Sci Rep

View full text Add to dashboard Cite

Software-defined networking (SDN) has significantly transformed the field of network management through the consolidation of control and provision of enhanced adaptability. However, this paradigm shift has concurrently presented novel security concerns. The preservation of service path integrity holds significant importance within SDN environments due to the potential for malevolent entities to exploit network flows, resulting in a range of security breaches. This research paper introduces a model called "EnsureS", which aims to enhance the security of SDN by proposing an efficient and secure service path validation approach. The proposed approach utilizes a Lightweight Service Path Validation using Batch Hashing and Tag Verification, focusing on improving service path validation's efficiency and security in SDN environments. The proposed EnsureS system utilizes two primary techniques in order to validate service pathways efficiently. Firstly, the method utilizes batch hashing in order to minimize computational overhead. The proposed EnsureS algorithm enhances performance by aggregating packets through batches rather than independently; the hashing process takes place on each one in the service pathway. Additionally, the implementation of tag verification enables network devices to efficiently verify the authenticity of packets by leveraging pre-established trust relationships. EnsureS provides a streamlined and effective approach for validating service paths in SDN environments by integrating these methodologies. In order to assess the efficacy of the Proposed EnsureS, a comprehensive series of investigations were conducted within a simulated SDN circumstance. The efficacy of Proposed EnsureS was then compared to that of established methods. The findings of our study indicate that the proposed EnsureS solution effectively minimizes computational overhead without compromising on the established security standards. The implementation successfully reduces the impact of different types of attacks, such as route alteration and packet spoofing, increasing SDN networks' general integrity.

show abstract

“…8 . As a result, compared to vSFC and cSFC, the EnsureS scheme can minimize processing overhead per packet by 90% and 69%, respectively, due to batching 36 .…”

Section: Resultsmentioning

confidence: 99%