Reza Mohammadi

SLICOTS: An SDN-Based Lightweight Countermeasure for TCP SYN Flooding Attacks

Software defined networking (SDN) is a novel networking paradigm which decouples control plane from data plane. This separation facilitates a high level of programmability and manageability. On the other hand, it makes the SDN controller a bottleneck and hence vulnerable to control plane saturation attack. One of the key mechanism to achieve control plane saturation is via TCP SYN flooding attack. This is one of the most effective and popular denial of service attack, in which the attacker produces many half-open TCP connections on the targeted server in order to degrade its availability. Furthermore, when applied to SDN, TCP SYN flooding attack also introduces control plane saturation attack. In particular, the attacker generates a significant number of TCP SYN packets and imposes data plane switches to forward them to the controller. As a result, the performance of the controller degrades and the controller will not be able to respond genuine requests in acceptable time. In this paper, we propose SLICOTS, an effective and efficient countermeasure to mitigate TCP SYN flooding attack in SDN. SLICOTS takes the advantage of dynamic programmability nature of SDN to detect and prevent attacks. SLICOTS is implemented in the controller, it surveils ongoing TCP connection requests, and blocks malicious hosts. We implemented SLICOTS as an extension module of OpenDayLight controller and evaluated it under different attack scenarios. The experimental results confirm that, compared to the state-of-art, SLICOTS reduces the response time overhead up to some 50%, while ensuring the same level of protection.

An adaptive type-2 fuzzy traffic engineering method for video surveillance systems over software defined networks

Software Defined Network (SDN) is a new network technology which allows network providers to afford predefined Quality of Service (QoS) for video streaming applications. Network administrators can develop desired traffic engineering techniques over SDN and support Quality of Experience (QoE) and QoS for their customers. One of the most important issues in traffic engineering is to find favorable links for routing between source and destination. The fitness of each link in the network depends on the end users QoE and the applications they are used. In this paper to achieve optimal routes, the fitness of each link is determined by type-2 fuzzy sets. Then, an adaptive traffic engineering method is proposed to find the best routes between source cameras and monitoring center in a video surveillance system. The proposed method is based on Constraint Shortest Path (CSP) problem and calculates minimum cost path which satisfies delay constraint. Due to NP-completeness of the CSP problems, LARAC algorithm is used to solve it. To the best of our knowledge, this is the first proposed traffic engineering technique which is based on type-2 fuzzy set for video streaming applications over SDN. The contribution of the proposed method regarding to the related works, is to apply type-2 and type-1 fuzzy logic for calculating the costs of network links based on QoE for providing QoS in a video surveillance system. In addition, this paper models the provisioning of QoS in a real scenario and emulates them in a network emulator. Many comparisons carried out between the proposed method and other well-known methods to show the effectiveness of the proposed method in terms of packet loss, delay and PSNR.

An Intelligent Traffic Engineering Method over Software Defined Networks for Video Surveillance Systems Based on Artificial Bee Colony

In applications such as video surveillance systems, cameras transmit video data streams through network in which quality of received video should be assured. Traditional IP based networks cannot guarantee the required Quality of Service QoS for such applications. Nowadays, Software Defined Network SDN is a popular technology, which assists network management using computer programs. In this paper, a new SDN-based video surveillance system infrastructure is proposed to apply desire traffic engineering for practical video surveillance applications. To keep the quality of received videos adaptively, usually Constraint Shortest Path CSP problem is used which is a NP-complete problem. Hence, heuristic algorithms are suitable candidate for solving such problem. This paper models streaming video data on a surveillance system as a CSP problem, and proposes an artificial bee colony ABC algorithm to find optimal solution to manage the network adaptively and guarantee the required QoS. The simulation results show the effectiveness of the proposed method in terms of QoS metrics.

A novel multicast traffic engineering technique in SDN using TLBO algorithm

In recent years, multicast communication is widely used by network providers to deliver multimedia contents. Quality of service (QoS) provisioning is one of the most important issues while transmitting multimedia contents using multicast. Traditional IP multicasting techniques suffer from reliability, scalability and have limitations to provide appropriate QoS for multimedia applications based on service level agreement (SLA). Nowadays, the advent of software defined networking (SDN), enables network providers to manage their networks dynamically and guarantee QoS parameters for customers based on SLA. SDN provides capabilities to monitor network resources and allows to dynamically configure desired multicasting policies. In this paper, we proposed a novel multicasting technique to guarantee QoS for multimedia applications over SDN. To deliver multimedia contents in an efficient manner, our proposed method models multicast routing as a delay constraint least cost (DCLC) problem. As DCLC problem is NP-Complete, we proposed an approximation algorithm using teaching–learning-based optimization to solve this problem. We evaluated our proposed method under different topologies. Experimental results confirmed that our proposed method outperforms IP multicast routing protocol, and it achieves a gain of about 25% for peak signal-to-noise ratio.

OpenIPTV: a comprehensive SDN-based IPTV service framework

IPTV is an emerging TV content delivery service that should guarantee Quality of Service (QoS) to deliver television contents over IP for their customers. However, providing such QoS regarding service level agreements (SLA) requires frequent service monitoring and adaptive configuration mechanisms. Nowadays, Software Defined Networks (SDNs) provide capabilities to deploy and manage networks dynamically and can maintain QoS. In this paper, a novel IPTV service framework (OpenIPTV) is proposed, which utilizes SDN as an underlying technology for providing QoS for IPTV customers in a shared backbone network. OpenIPTV is implemented in a well-known OpenDayLight controller and strictly followed a modular design for the sake of efficiency. OpenIPTV comprises all service requirements such as resource monitoring, channel changing, multicast group managing and dynamic QoS multicast traffic engineering. The performance of OpenIPTV is evaluated under different scenarios and experimental results confirmed the effectiveness of the proposed framework in terms of QoS metrics. Furthermore, experimental results show that OpenIPTV is a feasible and practical solution to deliver IPTV services with high level of QoS over SDN.

GolfEngine: Network management system for software defined networking

Software Defined Networking (SDN) is a new networking paradigm which provides better decoupling between control plane and data plane. The separation not only allows OpenFlow (OF) switches in the data plane simply to forward data, but also enables the centralized programmable controller to control the behavior of entire network. SDN makes it possible to manage the network more flexible and simple. However, while promising, the current SDN frameworks also face new security challenges about network management. In this paper, we propose an innovative framework named GolfEngine, based on OpenDaylight controller, to simplify the development and deployment of security applications for SDN network. GolfEngine provides better visibility to dominate tasks for performing network anomalies on demand. In addition, we propose two important components to assures the robustness, the correctness and the efficiency of GolfEngine framework. The first component is Policy Conflict Detection, which is efficient and robust to discover and conciliate the contradictory flow rules. The second one is Network Status Coordinator, which focuses on simplifying and improving efficiency of the communication between the controller and OF-enabled switches. Moreover, we evaluate the performance and execution efficiency of GolfEngine through a use case implementation. The results of our simulation underline that these two components contribute significantly in improving the efficiency of GolfEngine.

Practical extensions to countermeasure DoS attacks in software defined networking

In this paper, we propose two simple and practically feasible countermeasures to address the Route Spoofing and Resource Exhaustion attacks in Software Defined Networking (SDN) scenarios. For Route Spoofing attack, we introduce a new technique called “selective blocking” which blocks an adversary node to use a genuine users active routes, and for Resource Exhaustion attack, we propose a “periodic monitoring” technique that detect adversary nodes based on the traffic analysis statistics gathered over a period of time at SDN data plane switches. We perform the implementation of the aforementioned attacks and their proposed countermeasures. With our proposed countermeasures installed in the target SDN scenarios, the simulation results indicate 35% reduction in bandwidth consumption, 60% gain in packet delivery rate, and 50% reduction in processing delay.

Analytical Model of Energy Consumption in Cluster based Wireless Sensor Networks with Data Aggregation using M/M/1 Queuing Model

Wireless Sensor Networks (WSNs) consist of several sensor nodes equipped with limited power sources that sense environments event and transmit data to the sink node. WSNs have many constraints including energy, redundant data, and many-to-one flows. Data aggregation is one of the most important issues for achieving energy-efficiency in wireless sensor networks. Sensor nodes in the surrounding region of an event may generate redundant sensed data. A data aggregation technique in WSNs focuses on decreasing the energy consumption by reducing the amount of data that needed to be sent to the sink node. In this paper, we propose an M/M/1 queuing model for evaluating energy consumption in WSNs with dada transmission. The proposed model can help designers to evaluate the energy consumption of cluster based wireless sensor network with data aggregation. We compare the energy consumption results for networks with and without data aggregation technique. General Terms Energy consumption in cluster based wireless sensor networks with data aggregation.