Holistic Security Approach in Cybersecurity Services for Datacenters and Telecommunication Operators
Kasım Öztoprak, Yusuf Kursat Tuncel · 2023
This study examines and presents a resolution for Protocol Independent Switch Architecture (PISA) to handle data at the application layer, facilitating the precise inspection of security traffic, particularly in relation to DDOS attacks. The primary objective of this approach is to empower telecommunication operators to develop their own networking code within a hardware environment, granting them the ability to write code for hardware-level operations. This strategy also simplifies the process of modeling equipment in a simulation environment, as all components of a hardware switch run compatible code in a software-modeled switch. The innovative techniques proposed in this paper leverage the key functionalities of a programmable switch and combine them with the streaming data processor to achieve the desired outcomes from the perspective of a telecommunication operator, reducing costs and enabling comprehensive network management. The findings demonstrate that the suggested employment of PISA switches remarkably enhances the detection of DDOS attacks. This capability assists operators in bridging a significant gap between flexibility and scalability by efficiently utilizing limited compute resources for DDOS attack detection and response. The study helps to build a building block for a holistic security system combined by deep packet inspection systems and DDOS prevention systems.