The Experts below are selected from a list of 243 Experts worldwide ranked by ideXlab platform

Yuanyuan Yang - One of the best experts on this subject based on the ideXlab platform.

  • AsiaCCS - Software-Defined Firewall: Enabling Malware Traffic Detection and Programmable Security Control
    Proceedings of the 2018 on Asia Conference on Computer and Communications Security - ASIACCS '18, 2018
    Co-Authors: Zecheng Li, Bin Xiao, Yuanyuan Yang
    Abstract:

    Network-based malware has posed serious threats to the security of host machines. When malware adopts a private TCP/IP stack for communications, personal and network Firewalls may fail to identify the malicious traffic. Current Firewall policies do not have a convenient update mechanism, which makes the malicious traffic detection difficult. In this paper, we propose Software-Defined Firewall (SDF), a new security design to protect host machines and enable programmable security policy control by abstracting the Firewall Architecture into control and data planes. The control plane strengthens the easy security control policy update, as in the SDN (Software-Defined Networking) Architecture. The difference is that it further collects host information to provide application-level traffic control and improve the malicious traffic detection accuracy. The data plane accommodates all incoming/outgoing network traffic in a network hardware to avoid malware bypassing it. The design of SDF is easy to be implemented and deployed in today's network. We implement a prototype of SDF and evaluate its performance in real-world experiments. Experimental results show that SDF can successfully monitor all network traffic (i.e., no traffic bypassing) and improves the accuracy of malicious traffic identification. Two examples of use cases indicate that SDF provides easier and more flexible solutions to today's host security problems than current Firewalls.

  • Software-Defined Firewall: Enabling Malware Traffic Detection and Programmable Security Control
    Proceedings of the 2018 on Asia Conference on Computer and Communications Security, 2018
    Co-Authors: Shang Gao, Zecheng Li, Songtao Guo, Yuan Yao, Bin Xiao, Yuanyuan Yang
    Abstract:

    Network-based malware has posed serious threats to the security of host machines. When malware adopts a private TCP/IP stack for communications, personal and network Firewalls may fail to identify the malicious traffic. Current Firewall policies do not have a convenient update mechanism, which makes the malicious traffic detection difficult. In this paper, we propose Software-Defined Firewall (SDF), a new security design to protect host machines and enable programmable security policy control by abstracting the Firewall Architecture into control and data planes. The control plane strengthens the easy security control policy update, as in the SDN (Software-Defined Networking) Architecture. The difference is that it further collects host information to provide application-level traffic control and improve the malicious traffic detection accuracy. The data plane accommodates all incoming/outgoing network traffic in a network hardware to avoid malware bypassing it. The design of SDF is easy to be implemented and deployed in today's network. We implement a prototype of SDF and evaluate its performance in real-world experiments. Experimental results show that SDF can successfully monitor all network traffic (i.e., no traffic bypassing) and improves the accuracy of malicious traffic identification. Two examples of use cases indicate that SDF provides easier and more flexible solutions to today's host security problems than current Firewalls.

Shang Gao - One of the best experts on this subject based on the ideXlab platform.

  • Software-Defined Firewall: Enabling Malware Traffic Detection and Programmable Security Control
    Proceedings of the 2018 on Asia Conference on Computer and Communications Security, 2018
    Co-Authors: Shang Gao, Zecheng Li, Songtao Guo, Yuan Yao, Bin Xiao, Yuanyuan Yang
    Abstract:

    Network-based malware has posed serious threats to the security of host machines. When malware adopts a private TCP/IP stack for communications, personal and network Firewalls may fail to identify the malicious traffic. Current Firewall policies do not have a convenient update mechanism, which makes the malicious traffic detection difficult. In this paper, we propose Software-Defined Firewall (SDF), a new security design to protect host machines and enable programmable security policy control by abstracting the Firewall Architecture into control and data planes. The control plane strengthens the easy security control policy update, as in the SDN (Software-Defined Networking) Architecture. The difference is that it further collects host information to provide application-level traffic control and improve the malicious traffic detection accuracy. The data plane accommodates all incoming/outgoing network traffic in a network hardware to avoid malware bypassing it. The design of SDF is easy to be implemented and deployed in today's network. We implement a prototype of SDF and evaluate its performance in real-world experiments. Experimental results show that SDF can successfully monitor all network traffic (i.e., no traffic bypassing) and improves the accuracy of malicious traffic identification. Two examples of use cases indicate that SDF provides easier and more flexible solutions to today's host security problems than current Firewalls.

Zecheng Li - One of the best experts on this subject based on the ideXlab platform.

  • AsiaCCS - Software-Defined Firewall: Enabling Malware Traffic Detection and Programmable Security Control
    Proceedings of the 2018 on Asia Conference on Computer and Communications Security - ASIACCS '18, 2018
    Co-Authors: Zecheng Li, Bin Xiao, Yuanyuan Yang
    Abstract:

    Network-based malware has posed serious threats to the security of host machines. When malware adopts a private TCP/IP stack for communications, personal and network Firewalls may fail to identify the malicious traffic. Current Firewall policies do not have a convenient update mechanism, which makes the malicious traffic detection difficult. In this paper, we propose Software-Defined Firewall (SDF), a new security design to protect host machines and enable programmable security policy control by abstracting the Firewall Architecture into control and data planes. The control plane strengthens the easy security control policy update, as in the SDN (Software-Defined Networking) Architecture. The difference is that it further collects host information to provide application-level traffic control and improve the malicious traffic detection accuracy. The data plane accommodates all incoming/outgoing network traffic in a network hardware to avoid malware bypassing it. The design of SDF is easy to be implemented and deployed in today's network. We implement a prototype of SDF and evaluate its performance in real-world experiments. Experimental results show that SDF can successfully monitor all network traffic (i.e., no traffic bypassing) and improves the accuracy of malicious traffic identification. Two examples of use cases indicate that SDF provides easier and more flexible solutions to today's host security problems than current Firewalls.

  • Software-Defined Firewall: Enabling Malware Traffic Detection and Programmable Security Control
    Proceedings of the 2018 on Asia Conference on Computer and Communications Security, 2018
    Co-Authors: Shang Gao, Zecheng Li, Songtao Guo, Yuan Yao, Bin Xiao, Yuanyuan Yang
    Abstract:

    Network-based malware has posed serious threats to the security of host machines. When malware adopts a private TCP/IP stack for communications, personal and network Firewalls may fail to identify the malicious traffic. Current Firewall policies do not have a convenient update mechanism, which makes the malicious traffic detection difficult. In this paper, we propose Software-Defined Firewall (SDF), a new security design to protect host machines and enable programmable security policy control by abstracting the Firewall Architecture into control and data planes. The control plane strengthens the easy security control policy update, as in the SDN (Software-Defined Networking) Architecture. The difference is that it further collects host information to provide application-level traffic control and improve the malicious traffic detection accuracy. The data plane accommodates all incoming/outgoing network traffic in a network hardware to avoid malware bypassing it. The design of SDF is easy to be implemented and deployed in today's network. We implement a prototype of SDF and evaluate its performance in real-world experiments. Experimental results show that SDF can successfully monitor all network traffic (i.e., no traffic bypassing) and improves the accuracy of malicious traffic identification. Two examples of use cases indicate that SDF provides easier and more flexible solutions to today's host security problems than current Firewalls.

Bin Xiao - One of the best experts on this subject based on the ideXlab platform.

  • AsiaCCS - Software-Defined Firewall: Enabling Malware Traffic Detection and Programmable Security Control
    Proceedings of the 2018 on Asia Conference on Computer and Communications Security - ASIACCS '18, 2018
    Co-Authors: Zecheng Li, Bin Xiao, Yuanyuan Yang
    Abstract:

    Network-based malware has posed serious threats to the security of host machines. When malware adopts a private TCP/IP stack for communications, personal and network Firewalls may fail to identify the malicious traffic. Current Firewall policies do not have a convenient update mechanism, which makes the malicious traffic detection difficult. In this paper, we propose Software-Defined Firewall (SDF), a new security design to protect host machines and enable programmable security policy control by abstracting the Firewall Architecture into control and data planes. The control plane strengthens the easy security control policy update, as in the SDN (Software-Defined Networking) Architecture. The difference is that it further collects host information to provide application-level traffic control and improve the malicious traffic detection accuracy. The data plane accommodates all incoming/outgoing network traffic in a network hardware to avoid malware bypassing it. The design of SDF is easy to be implemented and deployed in today's network. We implement a prototype of SDF and evaluate its performance in real-world experiments. Experimental results show that SDF can successfully monitor all network traffic (i.e., no traffic bypassing) and improves the accuracy of malicious traffic identification. Two examples of use cases indicate that SDF provides easier and more flexible solutions to today's host security problems than current Firewalls.

  • Software-Defined Firewall: Enabling Malware Traffic Detection and Programmable Security Control
    Proceedings of the 2018 on Asia Conference on Computer and Communications Security, 2018
    Co-Authors: Shang Gao, Zecheng Li, Songtao Guo, Yuan Yao, Bin Xiao, Yuanyuan Yang
    Abstract:

    Network-based malware has posed serious threats to the security of host machines. When malware adopts a private TCP/IP stack for communications, personal and network Firewalls may fail to identify the malicious traffic. Current Firewall policies do not have a convenient update mechanism, which makes the malicious traffic detection difficult. In this paper, we propose Software-Defined Firewall (SDF), a new security design to protect host machines and enable programmable security policy control by abstracting the Firewall Architecture into control and data planes. The control plane strengthens the easy security control policy update, as in the SDN (Software-Defined Networking) Architecture. The difference is that it further collects host information to provide application-level traffic control and improve the malicious traffic detection accuracy. The data plane accommodates all incoming/outgoing network traffic in a network hardware to avoid malware bypassing it. The design of SDF is easy to be implemented and deployed in today's network. We implement a prototype of SDF and evaluate its performance in real-world experiments. Experimental results show that SDF can successfully monitor all network traffic (i.e., no traffic bypassing) and improves the accuracy of malicious traffic identification. Two examples of use cases indicate that SDF provides easier and more flexible solutions to today's host security problems than current Firewalls.

Yuan Yao - One of the best experts on this subject based on the ideXlab platform.

  • Software-Defined Firewall: Enabling Malware Traffic Detection and Programmable Security Control
    Proceedings of the 2018 on Asia Conference on Computer and Communications Security, 2018
    Co-Authors: Shang Gao, Zecheng Li, Songtao Guo, Yuan Yao, Bin Xiao, Yuanyuan Yang
    Abstract:

    Network-based malware has posed serious threats to the security of host machines. When malware adopts a private TCP/IP stack for communications, personal and network Firewalls may fail to identify the malicious traffic. Current Firewall policies do not have a convenient update mechanism, which makes the malicious traffic detection difficult. In this paper, we propose Software-Defined Firewall (SDF), a new security design to protect host machines and enable programmable security policy control by abstracting the Firewall Architecture into control and data planes. The control plane strengthens the easy security control policy update, as in the SDN (Software-Defined Networking) Architecture. The difference is that it further collects host information to provide application-level traffic control and improve the malicious traffic detection accuracy. The data plane accommodates all incoming/outgoing network traffic in a network hardware to avoid malware bypassing it. The design of SDF is easy to be implemented and deployed in today's network. We implement a prototype of SDF and evaluate its performance in real-world experiments. Experimental results show that SDF can successfully monitor all network traffic (i.e., no traffic bypassing) and improves the accuracy of malicious traffic identification. Two examples of use cases indicate that SDF provides easier and more flexible solutions to today's host security problems than current Firewalls.