MalwareMonitor
Zainab Abaid, Mohsen Rezvani, Sanjay Kumar Jha · 2014
Large high-speed networks such as in campuses and enterprises teem with malware infections; current solutions are either incapable of coping with the high data rates, or lacking in effective and speedy threat detection and mitigation. This work presents an early architecture for MalwareMonitor, a security framework that leverages SDN technology to address these limitations. We propose elastically partitioning network traffic to enable distributing detection load across a range of detectors; further, a centralized SDN controller allows for network-wide threat correlation as well as speedy control of malicious flows.