Scholarlink

The growing complexity of potential attacks in network infrastructure demands advanced incident response (IR) techniques. With organization adopting the Software-Defined Networks the response capabilities can be improved to a greater extend. SDN’s centralized control is utilized in this process. However the lacking of a list of possible defense mechanisms in the SDN, effects the swift respondence against the occurrence of a security incident. To address this challenge, we studied the MITRE D3FEND knowledge base, which provides various standard defense mechanisms. Later, within the knowledge base the defense mechanisms that can be implemented in SDN were identified. A valid list of possible implementable defense mechanisms in SDN was created. With the help of the developed implementer tool ANTq, which runs on top of the Ryu controller the suggested MITRE defense mechanisms were automatically implemented.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

A Novel Approach for Bridging the Gap Between SDN and MITRE for Agile Incident Response

  • 会议论文

  • 发表日期：

    2025年

查看全文
  • Anjana Jimmington,
  • P. Alfas Hakeem,
  • Preetam Mukherjee,
  • Sabu M. Thampi

摘要

The growing complexity of potential attacks in network infrastructure demands advanced incident response (IR) techniques. With organization adopting the Software-Defined Networks the response capabilities can be improved to a greater extend. SDN’s centralized control is utilized in this process. However the lacking of a list of possible defense mechanisms in the SDN, effects the swift respondence against the occurrence of a security incident. To address this challenge, we studied the MITRE D3FEND knowledge base, which provides various standard defense mechanisms. Later, within the knowledge base the defense mechanisms that can be implemented in SDN were identified. A valid list of possible implementable defense mechanisms in SDN was created. With the help of the developed implementer tool ANTq, which runs on top of the Ryu controller the suggested MITRE defense mechanisms were automatically implemented.