BlockCSDN: towards blockchain-based collaborative intrusion detection in software defined networking

W Li, Y Wang, W Meng, J Li, C Su - … on Information and Systems, 2022 - search.ieice.org
W Li, Y Wang, W Meng, J Li, C Su
IEICE TRANSACTIONS on Information and Systems, 2022search.ieice.org
To safeguard critical services and assets in a distributed environment, collaborative intrusion
detection systems (CIDSs) are usually adopted to share necessary data and information
among various nodes, and enhance the detection capability. For simplifying the network
management, software defined networking (SDN) is an emerging platform that decouples
the controller plane from the data plane. Intuitively, SDN can help lighten the management
complexity in CIDSs, and a CIDS can protect the security of SDN. In practical …
To safeguard critical services and assets in a distributed environment, collaborative intrusion detection systems (CIDSs) are usually adopted to share necessary data and information among various nodes, and enhance the detection capability. For simplifying the network management, software defined networking (SDN) is an emerging platform that decouples the controller plane from the data plane. Intuitively, SDN can help lighten the management complexity in CIDSs, and a CIDS can protect the security of SDN. In practical implementation, trust management is an important approach to help identify insider attacks (or malicious nodes) in CIDSs, but the challenge is how to ensure the data integrity when evaluating the reputation of a node. Motivated by the recent development of blockchain technology, in this work, we design BlockCSDN — a framework of blockchain-based collaborative intrusion detection in SDN, and take the challenge-based CIDS as a study. The experimental results under both external and internal attacks indicate that using blockchain technology can benefit the robustness and security of CIDSs and SDN.
search.ieice.org
以上显示的是最相近的搜索结果。 查看全部搜索结果