NDLI: MINOS: regulating router dataplane actions in dynamic runtime environments

Please wait, while we are loading the content...

A data-driven analysis of student efforts and improvements on a SPOC experiment

Streamline architecture of network simulator to facilitate teaching of computer networking

Remote FPGA lab platform for computer system curriculum

MOOC student dropout: pattern and prevention

Hybrid small class teaching: dividing and conquering large computer systems classes

Botzone: a competitive and interactive platform for game AI education

Building step-by-step practical curriculum system for computer systemic ability training

Matrix completion for SPOC student peer-grading evaluation

How does web-based virtual reality affect learning: evidences from a quasi-experiment

Research on quantitative quality evaluation method based on double cycles

Evaluation of situational case-based teaching technique in engineering education

Teaching evaluation for computational-thinking-oriented elementary computer courses

The design of course architecture for big data

From the perspective of teaching scheme: cultivating and training undergraduates driven by engineering education accreditation

Tide and shock: the influential modern teaching methods on chinese education reform

Using coursera clickstream data to improve online education for software engineering

Determining the currency of dynamic data

Correlation analysis between electricity consumption and economic development

Distributed skyline trajectory query processing

An APCA-enhanced compression method on large-scale time-series data

CLR: coupled logistic regression model for CTR prediction

NIOSIT: efficient data access for log-structured merge-tree style storage systems

FlashSkipList: indexing on flash devices

Learning word embeddings via context grouping

NANI: an efficient community detection algorithm based on nested aggregation of node influence

Android digital forensics: data, extraction and analysis

U2F based secure mutual authentication protocol for mobile payment

Collaboratively filtering malware infections: a tensor decomposition approach

(k, R, r)-anonymity: a light-weight and personalized location protection model for LBS query

ShadowPWD: practical browser-based password manager with a security token

FNF: flow-net based fingerprinting

Performance evaluation of anomaly-detection algorithm for keystroke-typing based insider detection

Hybrid de-anonymization across real-world heterogeneous social networks

Crowdsourcing-based wifi fingerprint update for indoor localization

Taming both predictable and unpredictable link failures for network tomography

Thor: a server-level hybrid switching data center network with heterogeneous topologies

Preventing "bad" content dispersal in named data networking

Security analysis of Bloom filter based multicast forwarding

Composed sketch framework for quantiles and cardinality queries over big data streams

MINOS: regulating router dataplane actions in dynamic runtime environments

Exploiting contention and congestion aware switch allocation in network-on-chips

Cooperative relay tracking with multiple mobile camera sensors

GlobeSen: an open interconnection framework based on named sensory date for IoT

MagSpider: a localization-free approach for constructing global indoor map for navigation purpose

COFFEE: coexist wifi for ZigBee networks: a frequency overlay approach

Towards heterogeneous keyword search

The early fusion strategy for search result diversification

Computing skyline groups: an experimental evaluation

Search engine drives the evolution of social networks

MINOS: regulating router dataplane actions in dynamic runtime environments

Content Provider	ACM Digital Library
Author	Shen, Meng Xu, Lei Ren, Kui Guan, Chaowen Chen, Wen-Long Fan, Jingyuan Xu, Ke
Abstract	Programmable routers are emerging as a promising alternative which facilitates the deployment of new network technologies, for example, software-defined networking; meanwhile, theirs programmability and openness also bring risks of security vulnerabilities. Prior work has concentrated on code security and encryption to improve router action honesty. In this paper, we exploit the feasibility of regulating actions on run-time dataplanes by detecting unexpected packet processing operations, which finally provides an honest and backdoor-proof router to operators. The main challenge is to monitor and regulate the action of router dataplane in dynamic runtime environment. Hence we propose Minos, a framework to regulate router actions on dataplanes. Minos takes Action Identifier (AID) as input to perform lookups in a pre-defined white list called Regulated Action Table (RAT), and it finally verifies that the action is (ab)normal. In the end, Minos achieves a pair of irreconcilable goals for security, i.e., costs and effectiveness. We implement and evaluate Minos on Click and DPDK, separately. And our evaluation results show that Minos captures mal-actions with 2 mega-byte spatial costs and no more than 9% performance loss in both Click and DPDK.
Starting Page	1
Ending Page	10
Page Count	10
File Format	PDF
ISBN	9781450348737
DOI	10.1145/3063955.3063996
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2017-05-12
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Router actions Router security Minos
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in