 |
Firewall systems cooperating with IDS and SDN attract much attention due to their flexibility but cooperation is not so easy.
So, in our study, instead of using a log monitoring tool and the REST API to feed alert messages from the IDS to the SDN controller, we proposed our method that uses syslog and Packet-In messages.
Our experimental results confirm that our proposed method can effectively reduce the total latency since the packet mirroring from the IDS until the flow table in the OpenFlow switch is changed.
For the future work, to support larger networks, multiple OpenFlow switches should be introduced for forwarding the Packet-In message as shown in the next slide.
|
IEEE/ICACT20220162 Slide.21
[Big Slide]
[YouTube]