Support
royaltec
Your shopping cart
ดูตะกร้าสินค้าของคุณ
ไม่มีสินค้าในตะกร้าของคุณ

Ensure Security Across Entire Network Using Software Defined Networking

oilluang | 29-06-2560 | เปิดดู 128 | ความคิดเห็น 1

 

Ensure Security Across Entire Network Using Software Defined Networking

This document outlines the benefits of a combined solution for security in SDN environments.

The number of cyber threats is growing constantly. Attackers have become more sophisticated, precisely targeted and can overcome traditional security solutions for the data network perimeter. If these attacks break the security mechanisms, they can easily infiltrate the internal network of organizations, leaving limited options for defence. They usually target sensitive data, systems or specific individuals with the aim of stealing intellectual property or even secret information of corporate and government institutions. By doing this, attackers may gain an unfair competitive advantage in both commercial and public sectors.

Challenge

Increased complexity due to the rising number of devices, inconsistent policies across networks or the inability to scale-out according to current business needs are the biggest challenges for traditional networks. Software Defined Networking addresses these challenges and brings the same agility that abstraction and virtualization have brought to server infrastructure.

Modern cyber threats are a serious risk to the assets of every organization. Network Behavior Analysis allows a way to detect such threats, undesirable network communication and other traffic anomalies which cannot be detected by traditional solutions deployed on the network perimeter or end points. Combining Network Behavior Analysis and Software Defined Networking technologies enables a way to protect even the largest network infrastructures and organizations.

Solution Architecture

The integrated solution architecture consists of Flowmon ADS (Anomaly Detection System) for network anomaly detection based on flow data (NetFlow, IPFIX or other compatible) and Network Behavior Analysis and Allied Telesis SES (Secure Enterprise SDN) solution for the dynamical determination of access policies across the whole network architecture based on detected network events (anomalies).

The joint solution for addressing security challenges in Software Defined Networking combines the following features:

  • Flow data export from Flowmon Probes to provide visibility into network traffic. Probes connected to TAP or SPAN/mirror ports generate flow statistics from all communications in the network and exports them to Flowmon Collector.
  • Flowmon Collector with module Flowmon ADS stores, processes, analyses and reports network traffic information. Network Behavior Analysis technology of Flowmon ADS allows a way to detect undesirable network communication, traffic anomalies and other operational and security incidents. Script triggering or sending a syslog message upon event detection and REST API allows a way to integrate with third party solutions like Allied Telesis SES SDN controller and to provide it with detailed information about security incidents and to configure and enforce network policies.
  • Allied Telesis SES SDN controller for centralized automation of policy-based application profiles. The controller automates the deployment and compliance checking of network policies across the entire network. Highly programmable open APIs allow a way for integrating with third-party solutions like Flowmon ADS and to create innovative network services and applications to fuel business growth. 

Figure 1: Integration architecture

Flowmon ADS detects anomalies in network traffic and reports every detected security threat. Upon detection, Flowmon ADS sends information about malicious hosts to Allied Telesis SES. Using the provided information, Allied Telesis SES sets up a new access policy to reconfigure the SDN switch to which the malicious host is connected. Based on the policy, the host can be disconnected from the network and moved to quarantine.

Figure 2: Infected host is blocked from the network

The network / security operator is notified by an alert from Flowmon ADS and can analyse attack details to get more information about the attacker and its victims. From event details in Flowmon ADS, the operator immediately sees detailed information about the attack and also each individual flows on which the event was detected.

Figure 3: Event details in Flowmon ADS

Solution Benefits

The joint solution aims to provide a detailed insight into an internal network, to detect operational and security incidents in the network and to troubleshoot network issues and reactively protect the network infrastructure against cyber threats and network attacks. The major benefits of the solution are:

  • Active protection against cyber threats and network attacks using and applying policies across entire network infrastructure.
  • Saves significant investments in scripting language or tools that can automate configuration changes.
  • Eliminates time needed to discover and troubleshoot incorrect manual entries for a given device.
  • Operational-security incidents can be processed without the need of manual reconfiguration of network access points.
For more information, contact Allied Telesis to learn how to implement a SDN solution into your network.

ความคิดเห็น

วันที่: Tue Feb 20 12:33:02 ICT 2018

แสดงความคิดเห็น
All Comments: 1 Pages: 1/1
guest
Rogelio Colorado
- Guest -

2017-12-23 16:23:28.0 Post : 2017-12-23 16:23:28.0

  Jual besi hollow Jual besi hollow Toko besi siku Jual pipa besi Toko pipa besi baja sch 40 sch 80 undangan pernikahan bentuk tas Supplier Besi H beam Agen Wiremesh Besi baja Jual plat kapal besi baja Pabrik besi beton master steel ms jual hp asus murah jual hp asus murah undangan pernikahan simple Supplier besi hollow Supplier besi hollow Toko pipa besi baja sch 40 sch 80 Supplier pipa besi Toko besi hollow undangan pernikahan simple undangan pernikahan ada fotonya Supplier Besi Beton Toko Wiremesh Besi baja Supplier plat kapal besi baja Pabrik besi beton ksty Toko besi hollow Toko besi hollow Toko Plat besi Toko pipa besi Toko besi beton Sni Ulir Polos undangan pernikahan aneh www.sentrabesibaja.com Jual Wiremesh Besi baja Toko plat kapal besi baja Pabrik besi beton krakatau steel Agen besi hollow Agen besi hollow Toko besi h beam Agen pipa besi Toko besi wf baja undangan pernikahan amplop Pabrik Welded Beam T beam King Queen Cross Castellated Beam Harga Wiremesh Besi baja Agen plat kapal besi baja Pabrik besi beton jcac Pabrik besi hollow Pabrik besi hollow Toko besi wf Pabrik pipa besi Toko besi unp undangan pernikahan batik Pabrik Bondek Cor Pabrik Wiremesh Besi baja Pabrik plat kapal besi baja Pabrik besi beton interworld steel is Distributor pipa besi Distributor pipa besi Toko wiremesh Distributor sch 40 Toko besi siku undangan pernikahan murah Pabrik Atap Spandek Sni jual laptop asus jual laptop asus jual laptop asus murahjual laptop asus murahundangan pernikahan kalender undangan pernikahan bahasa inggris islam Distributor Besi Siku Baja Distributor besi siku baja Pabrik besi beton gunung garuda Harga pipa besi Harga pipa besi Toko besi unp Harga sch 40 Toko Plat besi plat kapal undangan pernikahan online Pabrik Plat Bordes Kembang Supplier Besi Siku Baja Harga besi siku baja Pabrik besi beton delcoprima Jual pipa besi Jual pipa besi Toko besi cnp Jual sch 40 Toko besi h beam baja undangan pernikahan anti mainstream Pabrik Plat Besi Hitam Agen Besi Siku Baja Jual besi siku baja Pabrik besi beton cakra steel cs Supplier pipa besi Supplier pipa besi Toko besi hollow Supplier sch 40 Toko besi cnp undangan pernikahan cantik dan murah Pabrik Plat Kapal Bki Krakatau Steel Toko Besi Siku Baja Supplier besi siku baja Pabrik besi beton bjku Toko pipa besi Toko pipa besi Toko besi beton Sni Ulir Polos Toko sch 40 www.gudangbesibaja.com undangan pernikahan unik Pabrik Jual Besi Siku Baja Jual Besi Siku Baja Toko besi siku baja Pabrik besi beton Sni Ulir Polos Agen pipa besi Agen pipa besi ironsteelcenter.com Agen sch 40 Supplier besi Wf Baja undangan pernikahan yang unik Pabrik Besi Unp Baja Profil Kanal Harga Besi Siku Baja Agen besi siku baja Pabrik besi beton ais Pabrik pipa besi Pabrik pipa besi Supplier stainless steel Pabrik sch 40 Supplier bondek undangan pernikahan lucu Pabrik Besi Cnp Profil Baja Gording Pabrik Besi Siku Baja Pabrik besi siku baja Pabrik besi beton Distributor sch 40 Distributor sch 40 Supplier atap spandek Distributor besi Pipa sch 80 baja Supplier wiremesh undangan pernikahan bunga Pabrik Besi Hollow Distributor Besi Unp Baja Distributor besi wf jasa konstruksi baja Harga sch 40 Harga sch 40 Supplier baja ringan Harga besi Pipa sch 80 baja Supplier pipa besi baja sch 40 sch 80 undangan pernikahan islami Pabrik Wiremesh Supplier Besi Unp Baja Harga besi wf www.pusatbesibaja.co.id Jual sch 40 Jual sch 40 Supplier bondek Jual besi Pipa sch 80 baja Supplier besi hollow undangan pernikahan ada foto Pabrik Besi Pipa Baja Schedule 80 Agen Besi Unp Baja Jual besi wf www.pusatbesibaja.com link7 

Quote

1