Challenge-based collaborative intrusion detection in software-defined networking: An evaluation

Wenjuan Li, Yu Wang, Zhiping Jin, Keping Yu, Jin Li, Yang Xiang

Research output: Contribution to journalArticlepeer-review

Abstract

Software-Defined Networking (SDN) is an emerging architecture that enables a computer network to be intelligently and centrally controlled via software applications. It can help manage the whole network environment in a consistent and holistic way, without the need of understanding the underlying network structure. At present, SDN may face many challenges like insider attacks, i.e., the centralized control plane would be attacked by malicious underlying devices and switches. To protect the security of SDN, effective detection approaches are indispensable. In the literature, challenge-based collaborative intrusion detection networks (CIDNs) are an effective detection framework in identifying malicious nodes. It calculates the nodes’ reputation and detects a malicious node by sending out a special message called a challenge. In this work, we devise a challenge-based CIDN in SDN and measure its performance against malicious internal nodes. Our results demonstrate that such a mechanism can be effective in SDN environments.

Original languageEnglish
JournalDigital Communications and Networks
DOIs
Publication statusAccepted/In press - 2020

Keywords

  • Challenge mechanism
  • Collaborative intrusion detection
  • Insider attack
  • Software-defined networking
  • Trust management

ASJC Scopus subject areas

  • Hardware and Architecture
  • Computer Networks and Communications

Fingerprint Dive into the research topics of 'Challenge-based collaborative intrusion detection in software-defined networking: An evaluation'. Together they form a unique fingerprint.

Cite this