TY - GEN
T1 - MTD analysis and evaluation framework in software defined network (MASON)
AU - Chowdhary, Ankur
AU - Huang, Dijiang
AU - Alshamrani, Adel
AU - Liang, Hongbin
N1 - Publisher Copyright:
© 2018 Association for Computing Machinery.
PY - 2018/3/14
Y1 - 2018/3/14
N2 - Security issues in a Software Defined Network (SDN) environment like system vulnerabilities and intrusion attempts can pose a security risk for multi-tenant network managed by SDN. In this research work, Moving target defense (MTD) technique based on shuffle strategy - port hopping has been employed to increase the difficulty for the attacker trying to exploit the cloud network. Our research work MASON, considers the problem of multi-stage attacks in a network managed using SDN. SDN controller can be used to dynamically reconfigure the network and render attacker’s knowledge in multi-stage attacks redundant. We have used a threat score based on vulnerability information and intrusion attempts to identify Virtual Machines (VMs) in systems with high-security risk and implement MTD countermeasures port hopping to assess threat score reduction in a cloud network.
AB - Security issues in a Software Defined Network (SDN) environment like system vulnerabilities and intrusion attempts can pose a security risk for multi-tenant network managed by SDN. In this research work, Moving target defense (MTD) technique based on shuffle strategy - port hopping has been employed to increase the difficulty for the attacker trying to exploit the cloud network. Our research work MASON, considers the problem of multi-stage attacks in a network managed using SDN. SDN controller can be used to dynamically reconfigure the network and render attacker’s knowledge in multi-stage attacks redundant. We have used a threat score based on vulnerability information and intrusion attempts to identify Virtual Machines (VMs) in systems with high-security risk and implement MTD countermeasures port hopping to assess threat score reduction in a cloud network.
KW - Intrusion Detection System (IDS)
KW - Moving Target Defense (MTD)
KW - Software Defined Networking (SDN)
UR - https://www.scopus.com/pages/publications/85052016948
U2 - 10.1145/3180465.3180473
DO - 10.1145/3180465.3180473
M3 - Conference Proceeding
AN - SCOPUS:85052016948
T3 - SDN-NFVSec 2018 - Proceedings of the 2018 ACM International Workshop on Security in Software Defined Networks and Network Function Virtualization, Co-located with CODASPY 2018
SP - 43
EP - 48
BT - SDN-NFVSec 2018 - Proceedings of the 2018 ACM International Workshop on Security in Software Defined Networks and Network Function Virtualization, Co-located with CODASPY 2018
PB - Association for Computing Machinery, Inc
T2 - 2018 ACM International Workshop on Security in Software Defined Networks and Network Function Virtualization, SDN-NFVSec 2018
Y2 - 21 March 2018
ER -