SDN Final Report

Transcript

1. SDN-Based Intrusion Prevention System Software-Defined Networking and Function Virtualization

2. >_SDN? Host A ... Switch A Service Flow Table Host

   B Host C Host N Switch B Service Flow Table

3. >_SDN Host A ... Switch A Service Flow Table Host

   B Host C Host N Switch B Service Flow Table Controller Service Ctrl Srv

4. >_SDN? Host A ... Switch A Service Flow Table Host

   B Host C Host N Switch B Service Flow Table External Network Controller Service Ctrl Srv

5. >_Issue Host A ... Switch A Service Flow Table Host

   B Host C Host N Switch B Service Flow Table Controller Service Ctrl Srv Hacking Behavior Packets Packets DDoS, Telnet/SSH Brutforce, Ransomware, etc.

6. >_Issue Host A ... Switch A Service Flow Table Host

   B Host C Host N Switch B Service Flow Table Controller Service Ctrl Srv Hacking Behavior Packets Packets DDoS, Telnet/SSH Brutforce, Ransomware, etc.

7. >_Issue Host A ... Switch A Service Flow Table Host

   B Host C Host N Switch B Service Flow Table Controller Service Ctrl Srv Hacking Behavior Packets Packets DDoS, Telnet/SSH Brutforce, Ransomware, etc.

8. >_Issue Host A ... Switch A Service Flow Table Manager

   Host C Emploee Switch B Service Flow Table Controller Service Ctrl Srv Hacking Behavior Packets Packets DDoS, Telnet/SSH Brutforce, Ransomware, etc. $>/bin/sh Bingo! Get Shell.

9. >_IDS Host A Switch Service Flow Table Host B Host

   C IDS Srv Packets Packets Packets Intrusion Detection System

10. >_ Host A Switch Service Flow Table Host B Host

    C IDS Srv Packets Packets Packets IDS Intrusion Detection System Tcpdump

11. >_IDS Host A Switch Service Flow Table Host B Host

    C IDS Srv Intrusion Detection System Hacked Bruteforce credentials (Telnet/SSH/RDP/AD) SMTP (Email) Godmode

12. >_IDS Host A Switch Service Flow Table Host B Host

    C IDS Srv Intrusion Detection System Hacked Bruteforce credentials (Telnet/SSH/RDP/AD) SMTP (Email) Godmode Marked As Pwned Devices

13. >_SDN Host A Switch A Service Flow Table Host B

    Hacked Controller Service Ctrl Srv IDS Srv Scouting Updating Flow

14. >_SDN Host A Switch A Service Flow Table Host B

    Hacked Controller Service Ctrl Srv IDS Srv Isolating Hacked Host

15. >_SDN Host A Switch A Service Flow Table Host B

    Hacked Controller Service Ctrl Srv IDS Srv Isolating Hacked Host

16. >_SDN? Host A ... Switch A Service Flow Table Host

    B Host C Host N Switch B Service Flow Table Controller Service Ctrl Srv IDS Srv IDS Srv

17. Demo

18. SDN-Based Intrusion Prevention System Thanks.