SDN 기반 네트워크에서의 유해트래픽 검출을 위한 테스트베드 구축 = Establishment of Testbed for Detection of Harmful Traffic in SDN-based Network

다국어 초록 (Multilingual Abstract)

SDN-based networks have many advantages over existing networks. SDN is different from existing network configuration It is a method of delivering packets based on software functions in network equipment, which has many advantages in terms of cost and operation over existing network structure. However, since it is built around OpenFlow, which is the most widely known interface in SDN, it is also vulnerable to security. So SDN tried to solve this by providing virtualized security function based on NFV(Network Function Virtualization). The advantage of NFV is that it is possible to apply security only to the place where security is needed by using controller without need to set up like existing equipment. In this paper, I tried to investigate a method to filter harmful traffic without the ACL(Access Control List), ZFW(Zone-Based Firewall) and other functions set in the security device in the NFV that operates for security in the SDN environment. The hardware-based security technologies currently used are inevitably subject to delays and can not be used to prevent security attacks that are executed in various ways by changing port numbers. Therefore, the purpose of this paper is to improve the security performance of SDN based on NFV by analyzing traffic pattern and filtering harmful traffic and nontoxic traffic. For this study, a test network based on actual SDN was constructed and the pattern - based harmful traffic detection technology was proved.

참고문헌 (Reference)

1 "opendaylight"

2 "iPerf - The ultimate speed test tool for TCP, UDP and SCTP"

3 "Wikipedia"

4 D. Kreutz, "Software-defined networking: A comprehensive survey" 103 (103): 14-76, 2015

5 M. Yu, "Scalable flow-based networking with DIFANE" 41 (41): 351-362, 2011

6 "OpenFlow deployment"

7 "OpenFlow deployment"

8 OpenFlow Networking Foundation, "OpenFlow Switch Specification Version 1.5.1(Protocol version 0x06)"

9 "OpenDaylight"

10 "Open Networking Foundation"

11 Open Networking Foundation, "Nick McKeown, Software-Defined Networking: The New Norm for Networks" ONF 2-12, 2012

12 "Global Environment for Network Innovations"

13 "Cisco OpenDaylight"

14 S. Sezer, "Are we ready for SDN? Implementation challenges for software-defined networks" 51 (51): 36-43, 2013

15 W. Xia, "A survey on software-defined networking" 17 (17): 27-51, 2014