SDX-based security collaboration: Extending the security reach beyond network domains
Kristina Dzeparoska, Hadi Bannazadeh, Alberto Leon‐Garcia · TSpace (University of Toronto) · 2018
Security is becoming increasingly a threat, especially as we progress to Smart Cities and the Internet of Things. Therefore, it becomes necessary to embed greater security in the current Internet architecture, since beyond internal domains, there is little control over traffic circulating the Internet. In this thesis, we propose a collaboration between Software Defined Internet Exchange Points to enable greater control over wide area network traffic. Moreover, with recent surges of extensive DDoS attacks that exhaust and drive the victims' resources and parts of the Internet to a halt, such collaboration could really stem the tide of these attacks. Our proposal is complemented with SDN to simplify management and enable granular inter-domain traffic customization. In addition, the configurations are abstracted from the end users by utilizing the intent concept. The proposed design relies on a hierarchical architecture with a centralized entity capable of distributing the intents to the appropriate SDX's.