Identification of network measurement challenges in OpenFlow-based service chaining

Narisetty, RajaRevanth; Gurkan, Deniz

doi:10.1109/lcnw.2014.6927718

Cited by 4 publications

(2 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Each of these aspects poses challenges to the measurement setup. [3] divides the targeted system as different traffic scenarios and then discusses the challenges in measuring various parameters associated with those use-cases. [4] targets whole Internet of Things (IoT) system for measurement.…”

Section: A Related Workmentioning

confidence: 99%

Challenges in Net Neutrality Violation Detection: A Case Study of Wehe Tool and Improvements

Khandkar¹,

Hanawal²

2021

Preprint

View full text Add to dashboard Cite

The debate on "Net-neutrality" and events pointing towards its possible violations have led to the development of tools to detect deliberate traffic discrimination on the Internet. Given the complex nature of the Internet, neutrality violations are not easy to detect, and tools developed so far suffer from various limitations. In this paper, we study many challenges in detecting the violations and discuss possible approaches to mitigate them. As a case study, we focus on the tool Wehe [1] and discuss its limitations and propose the aspects that need to be strengthened.Wehe is the most recent tool to detect neutrality violations. Despite Wehe's vast utility and possible influences over policy decisions, its mechanisms are not yet fully validated by researchers other than original tool developers. We seek to fill this gap by conducting a thorough and in-depth validation of Wehe. Our validation uses the Wehe App, a client-server setup mimicking Wehe's behavior and its theoretical arguments. We validated the Wehe app for its methodology, traffic discrimination detection, and operational environments. We found that the critical weaknesses of the Wehe App are due to its design choices of using port number 80, overlooking the effect of background traffic, and the direct performance comparison.

show abstract

Section: A Related Workmentioning

confidence: 99%

Challenges in Net Neutrality Violation Detection: A Case Study of Wehe Tool and Improvements

Khandkar¹,

Hanawal²

2021

Preprint

View full text Add to dashboard Cite

show abstract

“…In recent years, with the growth of the demand for large scale and flexible network architecture, the requirement of SDN technology becomes increasing. For example, SDN has become a key technology to operate NFV (Network Function Virtualization) [11], [12]. Basically, an SDN based network consists of controllers and switches.…”

Section: Sdn Technology and Openflow Protocolmentioning

confidence: 99%

Design and Implementation of SDN-Based Proactive Firewall System in Collaboration with Domain Name Resolution

Ikarashi

Jin

Yamai

et al. 2018

IEICE Trans. Inf. & Syst.

View full text Add to dashboard Cite

Hiroya IKARASHI †a) , Nonmember, Yong JIN † †b) , Nariyoshi YAMAI †c) , Members, Naoya KITAGAWA †d) , Nonmember, and Kiyohiko OKAYAMA † † †e) , Member SUMMARY Security facilities such as firewall system and IDS/IPS (Intrusion Detection System/Intrusion Prevention System) have become fundamental solutions against cyber threats. With the rapid change of cyber attack tactics, detail investigations like DPI (Deep Packet Inspection) and SPI (Stateful Packet Inspection) for incoming traffic become necessary while they also cause the decrease of network throughput. In this paper, we propose an SDN (Software Defined Network)-based proactive firewall system in collaboration with domain name resolution to solve the problem. The system consists of two firewall units (lightweight and normal) and a proper one will be assigned for checking the client of incoming traffic by the collaboration of SDN controller and internal authoritative DNS server. The internal authoritative DNS server obtains the client IP address using EDNS (Extension Mechanisms for DNS) Client Subnet Option from the external DNS full resolver during the name resolution stage and notifies the client IP address to the SDN controller. By checking the client IP address on the whitelist and blacklist, the SDN controller assigns a proper firewall unit for investigating the incoming traffic from the client. Consequently, the incoming traffic from a trusted client will be directed to the lightweight firewall unit while from others to the normal firewall unit. As a result, the incoming traffic can be distributed properly to the firewall units and the congestion can be mitigated. We implemented a prototype system and evaluated its performance in a local experimental network. Based on the results, we confirmed that the prototype system presented expected features and acceptable performance when there was no flooding attack. We also confirmed that the prototype system showed better performance than conventional firewall system under ICMP flooding attack.

show abstract

Challenges in Net Neutrality Violation Detection: A Case Study of Wehe Tool and Improvements

Khandkar

Hanawal

2022

2022 14th International Conference on COMmunication Systems &Amp; NETworkS (COMSNETS)

View full text Add to dashboard Cite

Identification of network measurement challenges in OpenFlow-based service chaining

Cited by 4 publications

References 4 publications

Challenges in Net Neutrality Violation Detection: A Case Study of Wehe Tool and Improvements

Challenges in Net Neutrality Violation Detection: A Case Study of Wehe Tool and Improvements

Design and Implementation of SDN-Based Proactive Firewall System in Collaboration with Domain Name Resolution

Challenges in Net Neutrality Violation Detection: A Case Study of Wehe Tool and Improvements

Contact Info

Product

Resources

About