A Reflectornet Based on Software Defined Network

Software-Defined Networking (SDN), which separates the control plane from the data plane and manages data planes in a centralized way, is now considered as a future networking technology, and many researchers and practitioners have dived into this area to devise new network applications, such new routing methods. Likewise, network security applications could be redesigned with SDN, and some pioneers have proposed several interesting network security applications with SDN. However, most approaches have just reimplemented some well-known network security applications, although SDN provides many interesting features, They didn’t effectively use them. To investigate if we can use SDN in realizing sophisticated network security applications, we have designed and implemented an advanced network security application, Reflectornet, which redirects malicious or suspicious network trials to other security monitoring points (e.g., honeypot). In addition, we have tested its performance and practicability in diverse angles. Our findings and some insights will encourage other researchers to design better or intelligent network security applications with SDN. 논문 14-39B-06-08 The Journal of Korea Information and Communications Society '14-06 Vol.39B No.06 http://dx.doi.org/10.7840/kics.2014.39B.6.397 397 First Author : KAIST Graduate School of Information Security, taejune.park@kaist.ac.kr, 학생회원 ° Corresponding Author : KAIST Graduate School of Information Security, claude@kaist.ac.kr, 정회원 * KAIST Graduate School of Information Security, lss365@kaist.ac.kr, 학생회원 논문번호:KICS2014-06-219, Received June 2, 2014; Revised June 18, 2014; Accepted June 18, 2014 The Journal of Korea Information and Communications Society '14-06 Vol.39B No.06