JP5815891B2 - ネットワーク自己保護 - Google Patents

ネットワーク自己保護 Download PDF

Info

Publication number
JP5815891B2
JP5815891B2 JP2014549007A JP2014549007A JP5815891B2 JP 5815891 B2 JP5815891 B2 JP 5815891B2 JP 2014549007 A JP2014549007 A JP 2014549007A JP 2014549007 A JP2014549007 A JP 2014549007A JP 5815891 B2 JP5815891 B2 JP 5815891B2
Authority
JP
Japan
Prior art keywords
network
flows
flow
aggregation
netfuse
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
JP2014549007A
Other languages
English (en)
Japanese (ja)
Other versions
JP2015501119A (ja
Inventor
クリスティアン ルメザヌ、
クリスティアン ルメザヌ、
グオフェイ ジアング、
グオフェイ ジアング、
ユエピング ジャング、
ユエピング ジャング、
シング、ヴィシャル
イエ ワン、
イエ ワン、
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
NEC Laboratories America Inc
Original Assignee
NEC Laboratories America Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by NEC Laboratories America Inc filed Critical NEC Laboratories America Inc
Publication of JP2015501119A publication Critical patent/JP2015501119A/ja
Application granted granted Critical
Publication of JP5815891B2 publication Critical patent/JP5815891B2/ja
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H04L47/41—Flow control; Congestion control by acting on aggregated flows or links
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/02—Capturing of monitoring data
    • H04L43/026—Capturing of monitoring data using flow identification
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/16—Threshold monitoring
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/20—Arrangements for monitoring or testing data switching networks the monitoring system or the monitored elements being virtualised, abstracted or software-defined entities, e.g. SDN or NFV
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H04L47/12—Avoiding congestion; Recovering from congestion
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H04L47/24—Traffic characterised by specific attributes, e.g. priority or QoS
    • H04L47/2441—Traffic characterised by specific attributes, e.g. priority or QoS relying on flow classification, e.g. using integrated services [IntServ]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1425—Traffic logging, e.g. anomaly detection
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D30/00—Reducing energy consumption in communication networks
    • Y02D30/50—Reducing energy consumption in communication networks in wire-line communication networks, e.g. low power modes or reduced link rate

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
JP2014549007A 2012-01-11 2013-01-09 ネットワーク自己保護 Expired - Fee Related JP5815891B2 (ja)

Applications Claiming Priority (5)

Application Number Priority Date Filing Date Title
US201261585337P 2012-01-11 2012-01-11
US61/585,337 2012-01-11
US13/736,146 US8976661B2 (en) 2012-01-11 2013-01-08 Network self-protection
US13/736,146 2013-01-08
PCT/US2013/020765 WO2013106386A2 (en) 2012-01-11 2013-01-09 Network self-protection

Publications (2)

Publication Number Publication Date
JP2015501119A JP2015501119A (ja) 2015-01-08
JP5815891B2 true JP5815891B2 (ja) 2015-11-17

Family

ID=48743853

Family Applications (1)

Application Number Title Priority Date Filing Date
JP2014549007A Expired - Fee Related JP5815891B2 (ja) 2012-01-11 2013-01-09 ネットワーク自己保護

Country Status (5)

Country Link
US (1) US8976661B2 (enExample)
EP (1) EP2772021B1 (enExample)
JP (1) JP5815891B2 (enExample)
IN (1) IN2014CN02822A (enExample)
WO (1) WO2013106386A2 (enExample)

Families Citing this family (18)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10455575B2 (en) * 2012-10-05 2019-10-22 Sierra Wireless, Inc. Method, apparatus and system for uplink radio resource allocation in an LTE communication system
WO2014055400A1 (en) * 2012-10-05 2014-04-10 Nec Laboratories America, Inc. Network management
EP2904867B1 (en) 2012-10-05 2019-05-22 Sierra Wireless, Inc. Method and system for radio resource allocation
US9391897B2 (en) * 2013-07-31 2016-07-12 Oracle International Corporation Methods, systems, and computer readable media for mitigating traffic storms
CN103491095B (zh) * 2013-09-25 2016-07-13 中国联合网络通信集团有限公司 流量清洗架构、装置及流量牵引、流量回注方法
US9736064B2 (en) * 2013-12-17 2017-08-15 Nec Corporation Offline queries in software defined networks
JP6035264B2 (ja) * 2014-02-17 2016-11-30 日本電信電話株式会社 リング網分割最適化装置及び方法及びプログラム
WO2015192319A1 (zh) 2014-06-17 2015-12-23 华为技术有限公司 软件定义网络中识别攻击流的方法、装置以及设备
US20160050132A1 (en) * 2014-08-18 2016-02-18 Telefonaktiebolaget L M Ericsson (Publ) Method and system to dynamically collect statistics of traffic flows in a software-defined networking (sdn) system
CN105591780B (zh) * 2014-10-24 2019-01-29 新华三技术有限公司 集群监测方法和设备
CN106034057B (zh) * 2015-03-18 2019-10-25 北京启明星辰信息安全技术有限公司 一种串联安全设备故障系统及方法
EP3292665B1 (en) * 2015-05-05 2019-01-16 Telefonaktiebolaget LM Ericsson (publ) Reducing traffic overload in software defined network
PL412663A1 (pl) 2015-06-11 2016-12-19 Akademia Górniczo-Hutnicza im. Stanisława Staszica w Krakowie Sposób agregacji przepływów w sieciach teleinformatycznych
KR102560594B1 (ko) * 2016-05-03 2023-07-27 삼성전자주식회사 무선 통신 시스템에서 패킷을 송신하기 위한 장치 및 방법
US10929765B2 (en) * 2016-12-15 2021-02-23 Nec Corporation Content-level anomaly detection for heterogeneous logs
CN107147627A (zh) * 2017-04-25 2017-09-08 广东青年职业学院 一种基于大数据平台的网络安全防护方法及系统
CN109120494B (zh) * 2018-08-28 2019-08-30 无锡华云数据技术服务有限公司 在云计算系统中接入物理机的方法
US11132109B2 (en) * 2019-05-08 2021-09-28 EXFO Solutions SAS Timeline visualization and investigation systems and methods for time lasting events

Family Cites Families (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7702806B2 (en) * 2000-09-07 2010-04-20 Riverbed Technology, Inc. Statistics collection for network traffic
WO2002045380A2 (en) * 2000-11-30 2002-06-06 Lancope, Inc. Flow-based detection of network intrusions
US7417951B2 (en) * 2003-12-17 2008-08-26 Electronics And Telecommunications Research Institute Apparatus and method for limiting bandwidths of burst aggregate flows
US20060075093A1 (en) * 2004-10-05 2006-04-06 Enterasys Networks, Inc. Using flow metric events to control network operation
JP4222567B2 (ja) * 2005-05-13 2009-02-12 日本電信電話株式会社 輻輳制御方法および輻輳制御装置
US8130767B2 (en) * 2005-06-17 2012-03-06 Cisco Technology, Inc. Method and apparatus for aggregating network traffic flows
US20090168645A1 (en) * 2006-03-22 2009-07-02 Tester Walter S Automated Network Congestion and Trouble Locator and Corrector
JP4469866B2 (ja) * 2007-03-20 2010-06-02 富士通株式会社 パケット伝送装置および半導体装置
US8804503B2 (en) * 2007-06-29 2014-08-12 Broadcom Corporation Flow regulation switch
US8374102B2 (en) * 2007-10-02 2013-02-12 Tellabs Communications Canada, Ltd. Intelligent collection and management of flow statistics
WO2010103909A1 (ja) * 2009-03-09 2010-09-16 日本電気株式会社 ＯｐｅｎＦｌｏｗ通信システムおよびＯｐｅｎＦｌｏｗ通信方法
EP2254286B1 (en) * 2009-05-20 2013-03-20 Accenture Global Services Limited Network real time monitoring and control method, system and computer program product
WO2011132568A1 (ja) * 2010-04-19 2011-10-27 日本電気株式会社 スイッチ、及びフローテーブル制御方法
JP5800019B2 (ja) * 2010-12-13 2015-10-28 日本電気株式会社 通信経路制御システム、経路制御装置、通信経路制御方法および経路制御プログラム
US9392010B2 (en) * 2011-11-07 2016-07-12 Netflow Logic Corporation Streaming method and system for processing network metadata

Also Published As

Publication number Publication date
EP2772021B1 (en) 2016-09-07
WO2013106386A3 (en) 2013-09-06
US8976661B2 (en) 2015-03-10
EP2772021A4 (en) 2015-07-22
US20130176852A1 (en) 2013-07-11
IN2014CN02822A (enExample) 2015-07-03
WO2013106386A2 (en) 2013-07-18
EP2772021A2 (en) 2014-09-03
JP2015501119A (ja) 2015-01-08

Similar Documents

Publication Publication Date Title
JP2015501119A (ja) ネットワーク自己保護
Wang et al. Netfuse: Short-circuiting traffic surges in the cloud
Gangidi et al. Rdma over ethernet for distributed training at meta scale
Wang et al. SGS: Safe-guard scheme for protecting control plane against DDoS attacks in software-defined networking
Swami et al. Software-defined networking-based DDoS defense mechanisms
Dixit et al. Towards an elastic distributed SDN controller
Maziku et al. Security risk assessment for SDN-enabled smart grids
CN107959690B (zh) 基于软件定义网络的DDoS攻击跨层协同防御方法
Gholami et al. Congestion control in software defined data center networks through flow rerouting
Wang et al. Floodguard: A dos attack prevention extension in software-defined networks
Qian et al. Openflow flow table overflow attacks and countermeasures
Karnani et al. A comprehensive survey on low-rate and high-rate DDoS defense approaches in SDN: taxonomy, research challenges, and opportunities
Maziku et al. Software Defined Networking enabled resilience for IEC 61850-based substation communication systems
Govindarajan et al. A literature review on software-defined networking (SDN) research topics, challenges and solutions
Mousavi Early detection of DDoS attacks in software defined networks controller
CN103430482B (zh) 对预期网络业务量化网络可用服务等级容量的网络交换设备
Cui et al. Difs: Distributed flow scheduling for data center networks
Chaudhary et al. LOADS: Load optimization and anomaly detection scheme for software-defined networks
Jiang et al. BSD‐Guard: A Collaborative Blockchain‐Based Approach for Detection and Mitigation of SDN‐Targeted DDoS Attacks
Dridi et al. A holistic approach to mitigating DoS attacks in SDN networks
Ghosh et al. A simulation study on smart grid resilience under software-defined networking controller failures
Gong et al. An intelligent trust model for hybrid DDoS detection in software defined networks
Irteza et al. Efficient load balancing over asymmetric datacenter topologies
Poddar et al. Haven: Holistic load balancing and auto scaling in the cloud
US9537729B2 (en) Network switching device for quantifying available service-level capacity of a network for projected network traffic

Legal Events

Date Code Title Description
A621 Written request for application examination

Free format text: JAPANESE INTERMEDIATE CODE: A621

Effective date: 20140618

A977 Report on retrieval

Free format text: JAPANESE INTERMEDIATE CODE: A971007

Effective date: 20150514

A131 Notification of reasons for refusal

Free format text: JAPANESE INTERMEDIATE CODE: A131

Effective date: 20150526

A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20150731

TRDD Decision of grant or rejection written
A01 Written decision to grant a patent or to grant a registration (utility model)

Free format text: JAPANESE INTERMEDIATE CODE: A01

Effective date: 20150825

A61 First payment of annual fees (during grant procedure)

Free format text: JAPANESE INTERMEDIATE CODE: A61

Effective date: 20150924

R150 Certificate of patent or registration of utility model

Ref document number: 5815891

Country of ref document: JP

Free format text: JAPANESE INTERMEDIATE CODE: R150

S111 Request for change of ownership or part of ownership

Free format text: JAPANESE INTERMEDIATE CODE: R313113

R350 Written notification of registration of transfer

Free format text: JAPANESE INTERMEDIATE CODE: R350

LAPS Cancellation because of no payment of annual fees