Bayes-Based ARP Attack Detection Algorithm for Cloud Centers  

作　　者：Huan Ma Hao Ding Yang Yang Zhenqiang Mi James Yifei Yang Zenggang Xiong 

机构地区：[1]School of Computer and Communication Engineering,University of Science and Technology Beijing [2]Department of Electronics and Communication Engineering,University of Illinois at Urbana-Champaign [3]School of Computer and Information Science,Hubei Engineering University

出　　处：《Tsinghua Science and Technology》2016年第1期17-28,共12页清华大学学报（自然科学版（英文版）

基　　金：supported by the National Natural Science Foundation of China(Nos.61472033,61370092,and 61272432)

摘　　要：To address the issue of internal network security, Software-Defined Network（SDN） technology has been introduced to large-scale cloud centers because it not only improves network performance but also deals with network attacks. To prevent man-in-the-middle and denial of service attacks caused by an address resolution protocol bug in an SDN-based cloud center, this study proposed a Bayes-based algorithm to calculate the probability of a host being an attacker and further presented a detection model based on the algorithm. Experiments were conducted to validate this method.To address the issue of internal network security, Software-Defined Network（SDN） technology has been introduced to large-scale cloud centers because it not only improves network performance but also deals with network attacks. To prevent man-in-the-middle and denial of service attacks caused by an address resolution protocol bug in an SDN-based cloud center, this study proposed a Bayes-based algorithm to calculate the probability of a host being an attacker and further presented a detection model based on the algorithm. Experiments were conducted to validate this method.

关 键 词：cloud computing Bayes ARP attack detection software-defined network 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP393.07[自动化与计算机技术—计算机科学与技术]