SDNFV Cloud Computing Reference Model:
Projects (TU Chemnitz):
1. SENDATE-SECURE-DCI: SENDATE (Completed)
Working team:
M.Sc. Trung V. Phan
M.Sc. Mehrdad Hajizadeh
M.Sc. Beny Nugraha
Completed projects (Master's Degree):
1) Effectively Protecting SDN-enabled Cloud Computing from Potential Attacks using an Elastic-Hybrid Honeynet.
[Completed]
- Propose a elastic and optimal resource consumption mechanism to prevent Scanning attacks for a public cloud based on SDN and OpenStack technologies.
- Illustrate an effective protection scheme from Scanning attacks and a fast-response cloud system in terms of tracing attackers and migrating attack traffic.
- Testbed: Clients, OpenFlow switches, Servers (OpenStack Platform), SDN Controllers.
-----------------------------------------------------------------------------------------------------------------------------------
2) Development of Machine-learning based Network Attack Detection and Dynamic Defense Security System using SDN-based NFV.
[Completed]
- Introduce ML-based security solutions for attack detection and adaptive defense in SDNFV Cloud Computing.
- Show how SDNFV Cloud advantages compared to legacy networks in attack defense.
- Testbed: OpenFlow switches, Routers, Servers (OpenStack Platform), SDN Controllers.
-----------------------------------------------------------------------------------------------------------------------------------
3) S2eH: A Substantial Denial-of-Service Attack Defender in SDNFV-Based Cloud Computing.
[Completed]
- Introduce a novel mechanism for DoS protection in SDNFV Cloud Computing.
- Show how SDN helps SFC security services in improving accuracy and resource utilization as well.
- Testbed: HP switches, Routers, Servers (OpenStack), POX, Floodlight Controller.
-----------------------------------------------------------------------------------------------------------------------------------
4) Elastic Network Intrusion Detection System (ENIDS) in SDNFV:
(Completed)
- Introduce a new solution for distributing NIDSs in Data Center and Cloud Provider based on OpenStack and Software-Defined Networking.
- ENIDS shows an optimized cloud resource mechanism.
- Testbed: HP switches, Routers, Servers, Floodlight Controller.
-----------------------------------------------------------------------------------------------------------------------------------
5) OpenFlow Random Host Mutation (OF-RHM) in SDNFV-Based Cloud Computing:
(Completed)
- Introduce an efficient security solution for defending Scanning attacks in Cloud and Data Center.
- Apply strong algorithms to enhance unpredictability from scanning tools.
- Testbed: HP switches, Routers, Servers, Floodlight Controller.
-----------------------------------------------------------------------------------------------------------------------------------
6) Distributed-Self Organizing Map in Software-Definded Networking to Defense DDoS Attacks: (Completed)
- We present a novel mechanism using the Self-Organizing Map (SOM) application to solve the performance bottleneck and overload problems for the upper layers in a large-sized SDN in case of flooding attacks.
- Our proposed approach integrates a Distributed Self-Organizing Map (DSOM) system to OpenFlow Switches instead of using a standalone SOM.
- This work is under review in the Journal of Network and Computer Applications 2016.