AVANT-GUARD: scalable and vigilant switch flow management in software-defined networks

By Seungwon Shin, Vinod Yegneswaran, Phillip A. Porras, Guofei Gu. Conference on Computer and Communications Security, 2013

659 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Computer Networks and Communications

View Paper: https://www.semanticscholar.org/paper/921c359a13dc0d23554881e04e08364d1dcd167c

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Computer Networks and Communications

Citations in the corpus

A Survey and a Layered Taxonomy of Software-Defined Networking (2014, methodology): “[93] designed and implemented AVANT-GUARD to defeat TCP-SYN flooding attacks and network scanning.”
FloodGuard: A DoS Attack Prevention Extension in Software-Defined Networks (2015, background): “An attacker can exploit it by launching dedicated denial of service attack (or data-to-control plane saturation attack ) that ﬂoods SDN networks [27], [29].”
Security in Software Defined Networks: A Survey (2015, positive): “Hence, the lack of scalability in SDN can enable targeted attacks by inundating communication between the controller and the switch to cause control plane saturation [39].”
Security for 5G and Beyond (2019, methodology): “To mitigate the controller scalability issues and improve resilience against DoS attacks, AVANT-GUARD [208] limits the ﬂow requests (failed TCP sessions) to the control plane using a connection migrating tool.”
Software-Defined Networking (SDN) and Distributed Denial of Service (DDoS) Attacks in Cloud Computing Environments: A Survey, Some Research Issues, and Challenges (2016, background): “AVANT-GUARD addresses this by creating actuating triggers that can be inserted by the control plane to register asynchronous call back and by adding conditional flow rules that are activated when a predefined trigger condition is detected.”
Software-defined networking (SDN): a survey (2016, background): “In [113,143,166,171 – 179], analysis, enhancements, and solutions to counter DoS attacks have been presented.”
SPHINX: Detecting Security Attacks in Software-Defined Networks (2015, background): “Avant-guard [42] alters flow management at switch level to make SDN security applications more scalable and responsive to dynamic network threats.”
Poisoning Network Visibility in Software-Defined Networks: New Attacks and Countermeasures (2015, background): “AvantGuard [31] provides security protection against data-to-control-plane saturation attacks.”
A Survey on Emerging SDN and NFV Security Mechanisms for IoT Systems (2019, background): “Avant-guard [136] has introduced two mechanisms, namely connection migration and actuation triggers.”
A Survey of Security in Software Defined Networks (2016, methodology): “A number of solutions have been proposed to overcome this weakness [55]–[58] AVANT-GUARD [55] proposes a solution to the controldata plane communication bottleneck in SDN by limiting the flow requests sent to the control plane using a connection migration tool.”
Software Defined Networking Architecture, Security and Energy Efficiency: A Survey (2017, background): “Avant guard has been proposed in [17] that focuses on two key aspects i.”
Bohatei: Flexible and Elastic DDoS Defense (2015, background): “SDN/NFV-based security: There are few efforts in this space such as FRESCO [53] and AvantGuard [54].”