SoftSwitch: a centralized honeypot-based security approach using software-defined switching for secure management of VLAN networks

Muhammet BAYKARA; Resul DAŞ

Makale detayları

SoftSwitch: a centralized honeypot-based security approach using software-defined switching for secure management of VLAN networks

Yazarlar:

Muhammet BAYKARA | Resul DAŞ

Yayıncı:

TUBITAK

Dergi:

Turkish Journal of Electrical Engineering and Computer Science 2019 Vol.27 Issue 5, pp.3309-3325

Belge Tipi:

Makale

Yayın Tarihi:

9/2019

Belge Dili:

İngilizce

Document ID (Org No.):

2000733578

Sıklık:

İki Aylık

eISSN:

1303-6203

pISSN:

1300-0632

Özet:

 

Honeypot systems are traps for intruders which simulate real systems such as web, application, and database servers used in information systems. Using these systems, unauthorized and malicious access can be efficiently detected. Honeypot is an entity which acts as a source of valued information and its behavior can be monitored. The inability or difficulty of intrusion detection is a serious security problem in networks including virtual local area network (VLAN). According to the literature, the use of honeypots for intrusion detection and prevention in networks including VLAN is strongly recommended.    In this paper, in order to provide security and to detect unauthorized and malicious access to the VLAN, a centralized honeypot-based approach with a software-defined switching is proposed. With the developed and proposed honeypot-based intrusion detection and prevention approach, reduction in false alarm, network traffic, and cybersecurity cost, as well as centralized control, was provided. The proposed system has been run in GNS3 simulation software and successful results have been obtained by reducing false alarm level, network traffic, and cybersecurity cost. The numerical results of the attacks that were detected based on the port and protocol using SoftSwitch are detailed in the performance evaluation subsection.

Makale detayları

SoftSwitch: a centralized honeypot-based security approach using software-defined switching for secure management of VLAN networks

Yazarlar: Muhammet BAYKARA | Resul DAŞ

Yayıncı: TUBITAK

Dergi: Turkish Journal of Electrical Engineering and Computer Science 2019 Vol.27 Issue 5, pp.3309-3325

Belge Tipi: Makale

Yayın Tarihi: 9/2019

Belge Dili: İngilizce

Document ID (Org No.): 2000733578

Sıklık: İki Aylık

eISSN: 1303-6203

pISSN: 1300-0632

Sayı

Yazarlar:

Muhammet BAYKARA | Resul DAŞ

Yayıncı:

TUBITAK

Dergi:

Turkish Journal of Electrical Engineering and Computer Science 2019 Vol.27 Issue 5, pp.3309-3325

Belge Tipi:

Makale

Yayın Tarihi:

9/2019

Belge Dili:

İngilizce

Document ID (Org No.):

2000733578

Sıklık:

İki Aylık

eISSN:

1303-6203

pISSN:

1300-0632