Home avatar

咸蛋超人的心情小屋

Atlantic : a framework for anomaly traffic detection, classification, and mitigation in SDN

Silva A S D . Atlantic : a framework for anomaly traffic detection, classification, and mitigation in SDN[C]// Network Operations & Management Symposium. IEEE, 2016.

本文提出一个架构用于在SDN中的异常检测与缓解,架构分为两个阶段:检测异常(利用Entropy),分类流(Machine Learning),并提供了实现的源码。源码下载,这个人的github里只有这一个代码项目….下面详细记录这篇文章。

Adaptive Performance Anomaly Detection in Distributed Systems Using Online SVMs

Alvarez Cid-Fuentes J , Szabo C , Falkner K . Adaptive Performance Anomaly Detection in Distributed Systems Using Online SVMs[J]. IEEE Transactions on Dependable and Secure Computing, 2018:1-1.

本文提出框架,通过周期地收集系统矩阵来提取特征,并采用在线SVM法训练和对特征进行分类从而识别异常行为:deadlock,livelock,unwanted synchronization,memory leaks。

Automatic test packet generation

Zeng H , Kazemian P , Varghese G , et al. Automatic test packet generation[C]// International Conference on Emerging Networking Experiments & Technologies. IEEE, 2012.

背景分析

当前特别需要自动化的网络测试工具

概念

  • packets
  • Switch
  • Rules:defines how header space at ingress is transformed into regions of header space of egress.
  • Rule Historyt:包被传送过程中记录自己所经历过的规则。
  • Topology:拓扑结构

测试包生成算法过程

step1:生成一个all-pairs reachability table

An Analysis of Using Reflectors for Distributed Denial-of-Service Attacks

Paxson, Vern. An analysis of using reflectors for distributed denial-of-service attacks[J]. ACM SIGCOMM Computer Communication Review, 2001, 31(3):38.

本文先讲解了DDoS攻击,再讲解基于reflector的DDoS攻击,最后基于各种网络协议的字段进行挨个分析,讲解哪些字段容易受到attacker的利用从而进行攻击。