國立高雄大學圖資館 |

Language: English

Back

An SDN-based IPS Development Framewo...

Arizona State University.

An SDN-based IPS Development Framework in Cloud Networking Environment.

Record Type:	Electronic resources : Monograph/item
Title/Author:	An SDN-based IPS Development Framework in Cloud Networking Environment.
Author:	Xiong, Zhengyang.
Description:	69 p.
Notes:	Source: Masters Abstracts International, Volume: 53-05.
Notes:	Adviser: Dijiang Huang.
Contained By:	Masters Abstracts International53-05(E).
Subject:	Computer science.
Online resource:	http://pqdd.sinica.edu.tw/twdaoapp/servlet/advanced?query=1568075
ISBN:	9781321300284

An SDN-based IPS Development Framework in Cloud Networking Environment.
Xiong, Zhengyang.

An SDN-based IPS Development Framework in Cloud Networking Environment. - 69 p.

Source: Masters Abstracts International, Volume: 53-05.

Thesis (M.S.)--Arizona State University, 2014.

This item must not be sold to any third party vendors.

Security has been one of the top concerns in cloud community while cloud resource abuse and malicious insiders are considered as top threats. Traditionally, Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) have been widely deployed to manipulate cloud security, with the latter one providing additional prevention capability. However, as one of the most creative networking technologies, Software-Defined Networking (SDN) is rarely used to implement IDPS in the cloud computing environment because the lack of comprehensive development framework and processing flow. Simply migration from traditional IDS/IPS systems to SDN environment are not effective enough for detecting and defending malicious attacks. Hence, in this thesis, we present an IPS development framework to help user easily design and implement their defensive systems in cloud system by SDN technology. This framework enables SDN approaches to enhance the system security and performance. A Traffic Information Platform (TIP) is proposed as the cornerstone with several upper layer security modules such as Detection, Analysis and Prevention components. Benefiting from the flexible, compatible and programmable features of SDN, Customized Detection Engine, Network Topology Finder, Source Tracer and further user-developed security appliances are plugged in our framework to construct a SDN-based defensive system. Two main categories Python-based APIs are designed to support developers for further development. This system is designed and implemented based on the POX controller and Open vSwitch in the cloud computing environment. The efficiency of this framework is demonstrated by a sample IPS implementation and the performance of our framework is also evaluated.

ISBN: 9781321300284Subjects--Topical Terms:

199325
Computer science.

An SDN-based IPS Development Framework in Cloud Networking Environment.
LDR:02729nmm a2200289 4500 001 457626
005 20150805065209.5
008 150916s2014 ||||||||||||||||| ||eng d
020 $a 9781321300284
035 $a (MiAaPQ)AAI1568075
035 $a AAI1568075
040 $a MiAaPQ $c MiAaPQ
100 1 $a Xiong, Zhengyang. $3 708592
245 1 3 $a An SDN-based IPS Development Framework in Cloud Networking Environment.
300 $a 69 p.
500 $a Source: Masters Abstracts International, Volume: 53-05.
500 $a Adviser: Dijiang Huang.
502 $a Thesis (M.S.)--Arizona State University, 2014.
506 $a This item must not be sold to any third party vendors.
506 $a This item must not be added to any third party search indexes.
520 $a Security has been one of the top concerns in cloud community while cloud resource abuse and malicious insiders are considered as top threats. Traditionally, Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) have been widely deployed to manipulate cloud security, with the latter one providing additional prevention capability. However, as one of the most creative networking technologies, Software-Defined Networking (SDN) is rarely used to implement IDPS in the cloud computing environment because the lack of comprehensive development framework and processing flow. Simply migration from traditional IDS/IPS systems to SDN environment are not effective enough for detecting and defending malicious attacks. Hence, in this thesis, we present an IPS development framework to help user easily design and implement their defensive systems in cloud system by SDN technology. This framework enables SDN approaches to enhance the system security and performance. A Traffic Information Platform (TIP) is proposed as the cornerstone with several upper layer security modules such as Detection, Analysis and Prevention components. Benefiting from the flexible, compatible and programmable features of SDN, Customized Detection Engine, Network Topology Finder, Source Tracer and further user-developed security appliances are plugged in our framework to construct a SDN-based defensive system. Two main categories Python-based APIs are designed to support developers for further development. This system is designed and implemented based on the POX controller and Open vSwitch in the cloud computing environment. The efficiency of this framework is demonstrated by a sample IPS implementation and the performance of our framework is also evaluated.
590 $a School code: 0010.
650 4 $a Computer science. $3 199325
690 $a 0984
710 2 $a Arizona State University. $b Computer Science. $3 708551
773 0 $t Masters Abstracts International $g 53-05(E).
790 $a 0010
791 $a M.S.
792 $a 2014
793 $a English
856 4 0 $u http://pqdd.sinica.edu.tw/twdaoapp/servlet/advanced?query=1568075