Search

Your search keyword '"UÇAR, Erdem"' showing total 4 results
Start Over Author "UÇAR, Erdem" Topic openflow
4 results on '"UÇAR, Erdem"'

1. An Inter-Domain Attack Mitigating Solution.

Author

AKIN, Gökhan, BÜK, Ozan, and UÇAR, Erdem

Subjects
SOFTWARE-defined networking, BGP (Computer network protocol), DENIAL of service attacks, AUTOMATION software, EMAIL, RESTRAINING orders, EMAIL hacking
Abstract

Online services on the Internet are increasing day by day, and in parallel, the number of cyber-attacks is rapidly increasing. These attacks are not always about data theft, but they can cause severe damage by denial of service attacks. Intrusion Prevention System products that many organizations use at the border of their enterprise networks are not strong enough to protect against DoS attacks. The typical way to mitigate such attacks is to get support from a service provider. However, a service provider only provides solutions for the traffic originating from itself. If the source of attack is in another ISP domain, it is possible to inform that ISP via phone or e-mail. As a result, the source of the attack is blocked by the manual intervention of the service provider whose domain hosts it. Border Gateway Protocol (BGP) based solutions are also available for automating a blocking system, but not all enterprise networks support BGP. In this research, we have developed a centralized automation solution for software defined network (SDN) environments that is capable of preventing cyber-attacks at the source of attack. This solution does not require any BGP support. Non-SDN environments can also use this attack mitigation and notification system. In the long run, we may use this system to create a national protection shield in order to mitigate Cybersecurity attacks. [ABSTRACT FROM AUTHOR]

Published
2020
Full Text
View/download PDF

2. POX CONTROLLER PERFORMANCE FOR OPENFLOW NETWORKS.

Author

Yazar, Selçuk and Uçar, Erdem

Subjects
*PACKET switching (Data transmission), *DIGITAL electronics, *ELECTRIC switchgear, *ELECTRONIC circuits
Abstract

OpenFlow is an open platform that manages flow tables and packet forwarding in the network switches and other network components. The OpenFlow controller, connected network switch's control path with secure channel that is basically flow control software. This paper focused performance of newly adopted OpenFlow controller POX in a simple network controlled by a HP network switch. Jitter values analyzed with different size of packets and three distinct state of OpenFlow protocol. [ABSTRACT FROM AUTHOR]

Published
2013

3. A security policy sharing protocol design between control servers using Openflow protocol

Author

Akın, Gökhan and Uçar, Erdem

Subjects
SDN, Flowspec, YTA, DDoS, Openflow
Abstract

Çevrimiçi verilen hizmetlerin gün geçtikçe kullanım oranının artması ile beraber, siber güvenlik tehditleri daha da kritik duruma gelmiştir. Yapılacak bir DDoS saldırısı sadece maddi zarara sebep olmaz, ülke çapında bazı hizmetlerin aksamasına da sebep olabilir. Mevcut çözümler, bu tip atakları hedef kurumda ya da ISP’de durdurmaktadır. Çalışma dahilinde; bu tip ulusal tehditleri kaynağında durdurmak amaçlı, Saldırı Bloklama Sunucu (SBS) yazılımı, Ulusal Siber Güvenlik Merkezi (USGM) sunucu yazılımı ve bu sunucular arasında atak bilgilendirmeleri için kullanılan bir protokol geliştirilmiştir. Sistem sadece saldırı engelleme üzerine oluşturulmuştur. Saldırı tespit verileri haricen sisteme bildirilmektedir. Oluşturulan sistem, Yazılım Tanımlı Ağları (YTA) destekleyen altyapılar için optimize edilmiştir. Saldırı bilgilerini paylaşmak için geliştirilmiş protokol, TCP 9090 ve 9191 portlarını kullanmaktadır. Sunucular, YTA kontrolcüsü ile REST API kullanarak, kontrolcü de anahtar cihazlar ile Openflow protokolünü kullanarak haberleşmektedir. Sistem; YTA destekli kurumlar arasında atak bilgisi doğrulaması, bloklama ve atak bittiğinde otomatik blok kaldırma süreçlerini gerçekleştirebilmektedir. YTA desteği olmayan ağlarda, sistem atak bilgilendirme amacıyla kullanılabilmektedir. Çalışmada, YTA desteği olmayan altyapılara eklenecek bir YTA cihazı ile atak bloklama özelliğinin kullanabileceği bir model de önerilmiştir. With the increasing use of online services, cyber security threats have become even more critical. A DDoS attack will not only cause financial burden, it may also cause disruption of some services across the country. Existing solutions stop such attacks at the target institution or ISP. Within the study; In order to stop such national threats at their source, Attack Blocking Server (SBS) software, National Cyber Security Center (USGM) server software and a protocol used for attack notifications between these servers have been developed. The system was created only for attack prevention. Intrusion detection data is reported to the system externally. The created system is optimized for infrastructures supporting Software Defined Networks (SDN). The protocol, developed to share attack information, uses TCP ports 9090 and 9191. The servers communicate with the SDN controller using REST API, and the controller communicates with the switch devices using the Openflow protocol. System can perform attack information verification, attack blocking and automatic block removal processes when the attack is over at the SDN supported institutions. In networks without SDN support, the system can only be used for attack notification purposes. In the study, a model that can use attack verification and attack blocking features is also proposed by adding an SDN supported device at non SDN infrastructures.

Published
2021

4. OpenFlow protocol and use of pox controller on network swtiches

Author

Yazar, Selçuk, Uçar, Erdem, Fen Bilimleri Enstitüsü, and Bilgisayar Mühendisliği Anabilim Dalı

Subjects
OpenFlow Denetleyicisi, Network systems, OpenFlow Controller, Network Swtiches, OpenFlow Protokolü, Computer Engineering and Computer Science and Control, OpenFlow, Pox Denetleyicisi, Pox Controller, Network performance, Software Defined Network, Ağ Anahtarları, OpenFlow Protocol, Yazılım Tabanlı Ağ, Bilgisayar Mühendisliği Bilimleri-Bilgisayar ve Kontrol
Abstract

Yüksek Lisans Tezi Bu tez çalışmasında, İstanbul Teknik Üniversitesi Bilgi İşlem Daire Başkanlığı'nda bulunan OpenFlow etkin HP ağ anahtarları kullanılarak, OpenFlow protokolü üzerinde, D-ITG açık kaynak kodlu programıyla birlikte bir araştırma çalışması yapılmıştır. Bu çalışmayla, OpenFlow protokolünün bir controller vasıtasıyla ve controller olmadan performansları ölçülmüş, bahsi geçen POX denetleyicisi (controller) ile ilerde, OpenFlow protokolüne bir katkı yapılıp yapılamayacağı tartışılmak istenmiştir. Çalışma esnasında 64, 128, 265, 512, 1024, 2048 byte'lık veri paketleri ile 8'er saatlik ağ trafiği oluşturulmuş ve bu çalışma sonucunda elde edilen veriler GNU PLOT programıyla görsel hale getirilerek, OpenFlow protokolü ile ilgili bir sonuç çıkarılmaya çalışılmıştır.Anahtar Kelimeler:OpenFlow, Yazılım Tabanlı Ağ, OpenFlow denetleyicisi. Abstract In this thesis, a research has been done on OpenFlow protocol with the open-source D-ITG software by using the Open Flow enabled HP network switch available in Istanbul Technical University, Directorate of Information Technologies. In this study, the performance of OpenFlow protocol with a controller and without a controller has been measured and it has been intended to be discussed whether a contribution could be made to the OpenFlow protocol with the previously mentioned POX controller. In the research, an eight-hour network traffic has been generated with 64, 128, 256, 512, 1024, 2048 bytes data packets and a conclusion concerning the OpenFlow protocol has been tried to be acquired through visualizing the obtained data by using GNU PLOT software.Keywords: OpenFlow, Software Defined Network, OpenFlow Controller.

Published
2013

Catalog

Books, media, physical & digital resources
See catalog results