Integrated Security of SDN

• Project/Area Number: 16K00132
• Research Category: Grant-in-Aid for Scientific Research (C)
• Allocation Type: Multi-year Fund
• Section: 一般
• Research Field: Information network
• Research Institution: Saga University
• Principal Investigator: Hori Yoshiaki 佐賀大学, 全学教育機構, 教授 (90264126)
• Project Period (FY): 2016-04-01 – 2019-03-31
• Project Status: Completed (Fiscal Year 2018)
• Budget Amount: ¥4,680,000 (Direct Cost: ¥3,600,000、Indirect Cost: ¥1,080,000); Fiscal Year 2018: ¥1,430,000 (Direct Cost: ¥1,100,000、Indirect Cost: ¥330,000); Fiscal Year 2017: ¥1,690,000 (Direct Cost: ¥1,300,000、Indirect Cost: ¥390,000); Fiscal Year 2016: ¥1,560,000 (Direct Cost: ¥1,200,000、Indirect Cost: ¥360,000)
• Keywords: セキュア・ネットワーク / Software Defined Network / SDN / セキュリティ評価

Outline of Final Research Achievements

We organize security threats in the OpenFlow network system and create a security threat list. After that, we organize the risk assessment for each security risk and the measures for the risk. We create the security check sheet for the SDN network system.
As a method to detect changes in new cyber attack tendency, focusing on attacks targeting an unspecified number such as port scan performed as an initial stage of cyber attack, we propose an anomaly detection by using of time series of Change Finder with Bollinger band.

Academic Significance and Societal Importance of the Research Achievements

SDN を各構成要素からなるシステムであることに着目し、システムという観点から全体および構成要素を分析し、SDN システムのセキュリティ確保ための分析と検討を行い、チェックシートとしてまとめた。

Research Products

• [Journal Article] A Detection System for Distributed DoS Attacks Based on Automatic Extraction of Normal Mode and Its Performance Evaluation (2017)
  • Author(s): Y.Feng, Y.Hori, K.Sakurai
  • Journal Title: Proc. of SpaCCS 2017, Springer LNCS Volume: 10656 Pages: 461-473
  • DOI: 10.1007/978-3-319-72389-1_37
  • ISBN: 9783319723884, 9783319723891
  • Peer Reviewed
• [Journal Article] A Comprehensive Security Analysis Checksheet for OpenFlow Networks (2017)
  • Author(s): Yoshiaki Hori, Seiichiro Mizoguchi, Ryosuke Miyazaki, Akira Yamada, Yaokai Feng, Ayumu Kubota, Kouichi Sakurai
  • Journal Title: Proc. of BWCCA2016, Lecture Notes on Data Engineering and Communications Technologies(LNDECT), Springer Volume: 2 Pages: 232-242
  • DOI: 10.1007/978-3-319-49106-6_22
  • ISBN: 9783319491059, 9783319491066
  • Peer Reviewed / Acknowledgement Compliant
• [Presentation] ダークネットを用いた新たなサイバー攻撃傾向の変化検出 (2019)
  • Author(s): 今永 大遥，大谷 誠，堀 良彰，田中 久治
  • Organizer: 火の国情報シンポジウム2019
• [Presentation] 端末ローミングを例としたマルチドメインSDNアプリケーションのセキュリティ評価に関する考察 (2017)
  • Author(s): 溝口 誠一郎, 宮崎亮輔, 山田 明, 山本 幸二, 窪田 歩, フォン ヤオカイ, 堀 良彰, 櫻井 幸一
  • Organizer: 2017年暗号と情報セキュリティシンポジウム(SCIS2017)
  • Place of Presentation: 那覇市
  • Year and Date: 2017-01-24