SDN-Based Intrusion Prevention System Software-Defined Networking and Function Virtualization

>_SDN? Host A ... Switch A Service Flow Table Host B Host C Host N Switch B Service Flow Table

>_SDN Host A ... Switch A Service Flow Table Host B Host C Host N Switch B Service Flow Table Controller Service Ctrl Srv

>_SDN? Host A ... Switch A Service Flow Table Host B Host C Host N Switch B Service Flow Table External Network Controller Service Ctrl Srv

>_Issue Host A ... Switch A Service Flow Table Host B Host C Host N Switch B Service Flow Table Controller Service Ctrl Srv Hacking Behavior Packets Packets DDoS, Telnet/SSH Brutforce, Ransomware, etc.

>_Issue Host A ... Switch A Service Flow Table Host B Host C Host N Switch B Service Flow Table Controller Service Ctrl Srv Hacking Behavior Packets Packets DDoS, Telnet/SSH Brutforce, Ransomware, etc.

>_Issue Host A ... Switch A Service Flow Table Host B Host C Host N Switch B Service Flow Table Controller Service Ctrl Srv Hacking Behavior Packets Packets DDoS, Telnet/SSH Brutforce, Ransomware, etc.

>_Issue Host A ... Switch A Service Flow Table Manager Host C Emploee Switch B Service Flow Table Controller Service Ctrl Srv Hacking Behavior Packets Packets DDoS, Telnet/SSH Brutforce, Ransomware, etc. $>/bin/sh Bingo! Get Shell.

>_IDS Host A Switch Service Flow Table Host B Host C IDS Srv Packets Packets Packets Intrusion Detection System

>_ Host A Switch Service Flow Table Host B Host C IDS Srv Packets Packets Packets IDS Intrusion Detection System Tcpdump

>_IDS Host A Switch Service Flow Table Host B Host C IDS Srv Intrusion Detection System Hacked Bruteforce credentials (Telnet/SSH/RDP/AD) SMTP (Email) Godmode

>_IDS Host A Switch Service Flow Table Host B Host C IDS Srv Intrusion Detection System Hacked Bruteforce credentials (Telnet/SSH/RDP/AD) SMTP (Email) Godmode Marked As Pwned Devices

>_SDN Host A Switch A Service Flow Table Host B Hacked Controller Service Ctrl Srv IDS Srv Scouting Updating Flow

>_SDN Host A Switch A Service Flow Table Host B Hacked Controller Service Ctrl Srv IDS Srv Isolating Hacked Host

>_SDN Host A Switch A Service Flow Table Host B Hacked Controller Service Ctrl Srv IDS Srv Isolating Hacked Host

>_SDN? Host A ... Switch A Service Flow Table Host B Host C Host N Switch B Service Flow Table Controller Service Ctrl Srv IDS Srv IDS Srv

Demo

SDN-Based Intrusion Prevention System Thanks.