http://chineseinput.net/에서 pinyin(병음)방식으로 중국어를 변환할 수 있습니다.
변환된 중국어를 복사하여 사용하시면 됩니다.
Utilizing OpenFlow and sFlow to Detect and Mitigate SYN Flooding Attack
Nugraha, Muhammad,Paramita, Isyana,Musa, Ardiansyah,Choi, Deokjai,Cho, Buseung Korea Multimedia Society 2014 멀티미디어학회논문지 Vol.17 No.8
Software Defined Network (SDN) is a new technology in computer network area which enables user to centralize control plane. The security issue is important in computer network to protect system from attackers. SYN flooding attack is one of Distributed Denial of Service attack methods which are popular to degrade availability of targeted service on Internet. There are many methods to protect system from attackers, i.e. firewall and IDS. Even though firewall is designed to protect network system, but it cannot mitigate DDoS attack well because it is not designed to do so. To improve performance of DDOS mitigation we utilize another mechanism by using SDN technology such as OpenFlow and sFlow. The methodology of sFlow to detect attacker is by capturing and sum cumulative traffic from each agent to send to sFlow collector to analyze. When sFlow collector detect some traffics as attacker, OpenFlow controller will modify the rule in OpenFlow table to mitigate attacks by blocking attack traffic. Hence, by combining sum cumulative traffic use sFlow and blocking traffic use OpenFlow we can detect and mitigate SYN flooding attack quickly and cheaply.
KREONET 에서 가상 환경을 위한 sFlow 모니터링 시스템
노르마라티프피트리야니 ( Norma Latif Fitriyani ),김재린 ( Kim Jae-rin ),송왕철 ( Wang-cheol Song ),조부승 ( Buseung Cho ),김승해 ( Sunghae Kim ) 한국정보처리학회 2014 한국정보처리학회 학술대회논문집 Vol.21 No.2
This paper provides insights into the sFlow monitoring system of OF@KREONET. OF@KREONET is software defined network (SDN) testbed adapted by KREONET (Korea Research Environment Open NETwork). OF@KREONET uses SDN-based network virtualization to slice the network among multiple concurrent experimenter. Flow Monitoring of OF@KREONET using sFlow. sFlow and OpenFlow can be used to provide an integrated flow monitoring system where OpenFlow controller can be used to define flows to be monitored by sFlow. OF@KREONET flow monitoring system supports monitoring of per slice FlowSpace. An Experimental can monitor his/her own FlowSpace while network administrator can monitor all spaces.