MWMon: A Software Defined Network-based Malware Monitor

Abstract

An antivirus is a widely used solution for detecting malicious softwares in client devices.The performance of antivirus solutions in the mobile client environment is critical due to its resource constrains. Many solutions light-weighting client's overhead in the mobile client environment have been developed. However, most solutions require platform modifications or software installations and it decreases their realizations in practice. In this paper, we propose a solution detecting malwares on networks using the Software Defined Network (SDN). Our main goal is designing a solution detecting malwares of mobile client without involving the client into the work. We contribute to provide a solution that does not require client-side installations or modifications and so is easily applicable in practice.

Present and Future of Network Security Monitoring

“…On the contrary, other authors are more focused in a complete automation of the process, using deep learning to implement IDSs to increase data correlation and to be able to detect zero-day attacks [11,121]. Finally, other authors follow approaches such as malware monitoring [131] or Threat Intelligence for SDN [132].…”