Computer Science and
     Software Engineering

Computer Science and Software Engineering

CSSE Seminar Series (CSSESS)

Quick links: Past seminarsfuture seminarsCSSESS Home


Seminar

SDN-based Network Intrusion Detection/Prevention for Cloud Virtual Networking System


Speaker
Dijiang Huang

Institute
Arizona State University

Time & Place
3pm, Wed., 24 July., in 031, Erskine Building

All are welcome

Abstract

Software Defined Networking (SDN) is an emerging research area that has attracted a lot of attention from academia, industry, and government. It is an innovation that allows us to control and program the network in a way to make it responsive to networking events in a more proactive fashion., for example, events caused by vulnerability explorations and security breaches, SDN approaches, by providing easy access to flow tables, give a real-time control over the network switches and allow administrators to monitor and control the route of packets flowing through the network. Thus the network traffic can now be analyzed and controlled according to user-defined rules. Using this traffic reshaping capability of SDN, security can be improved by controlling of traffic flow in the network such as by redirecting the packets from a suspicious node to an inspection node where in-depth inspection of these packets can be performed. SDN can help in implementation of other techniques for improving security in a cloud environment such as reconfiguring the network dynamically to enforce packet forwarding, blocking, redirection, reflection, MAC or IP address changing, limiting the packet flow rate etc. This can be considered as a less intrusive alternative to security countermeasures taken at the host level. In this talk, we will introduce the basic features of SDN technologies and explain how to deploy a secure cloud computing system based on SDN solutions. The technical areas that will be presented include: (1) cloud computing and security issues; (2) cloud computing virtual networking systems and SDN management architecture; and (4) dynamic and adaptive security mechanisms based on SDN-based intrusion detection and prevention, and case study.

Biography

Dr. Dijiang Huang received his B.S. degree from Beijing University of Posts & Telecommunications, China 1995. He received his M.S., and Ph.D. degrees from the University of Missouri–Kansas City, in 2001 and 2004, respectively. He joined Arizona State University (ASU) in 2005 as an assistant professor. He is currently an Associate Professor in the School of Computing Informatics and Decision System Engineering at ASU. His current research interests are computer networking, security, and mobile cloud computing. Dr. Huang is currently leading a team to develop a secure mobile cloud computing infrastructure sponsored by ONR. His team is also working on a programmable network infrastructure for future Internet and developing a cloud platform for network security education that are sponsored by NSF. Dr. Huang is an associate editor of the Journal of Network and System Management (JNSM) and an editor of the IEEE Communications Surveys & Tutorials. He has served as an organizer for many International conferences and workshops. Dr. Huang’s research is supported by NSF, ONR, ARO, Intel, and HP. He is a recipient of ONR Young Investigator Program (YIP) Award 2010, HP Innovation Research Program (IRP) award 2011 and 2012, JSPS Fellowship 2013. He is a senior member of IEEE.


Quick links: Past seminarsfuture seminarsCSSESS Home