Mininet-Sec: an experimentation platform for cybersecurity in programmable networks

• Italo Valcy S. Brito UFBA
• Leobino N. Sampaio UFBA

DOI: https://doi.org/10.5753/sbseg_estendido.2024.241936

Abstract

This paper presents Mininet-Sec, an emulation platform for studying and experimenting with cybersecurity in programmable networks. Mininet-Sec allows rapid prototyping of cybersecurity scenarios, attack simulation, and testing offensive security tools in an isolated and secure environment. The availability of specialized resources, along with support for network programmability, enables fast, effective and skilled development of security solutions. Mininet-Sec will be demonstrated in a variety of scenarios, including secure interdomain routing, DDoS attacks, and network security teaching, revealing how one can leverage Mininet-Sec’s resources to provide advanced cybersecurity labs.

References

Aslam, N., Srivastava, S., and Gore, M. M. (2022). ONOS Flood Defender: An Intelligent Approach to Mitigate DDoS Attack in SDN.

Chouliaras, N., Kittes, G., Kantzavelou, I., Maglaras, L., Pantziou, G., and Ferrag, M. A. (2021). Cyber ranges and testbeds for education, training, and research. Applied Sciences, 11(4):1809.

Gemmer, D. D., Meyer, B. H., Mello, E. R. d., Schwarz, M., Wangham, M. S., and Nogueira, M. (2023). A Scalable Cyber Security Framework for the Experimentation of DDoS Attacks of Things. In NOMS 2023-2023 IEEE/IFIP Network Operations and Management Symposium, pages 1–7.

Gomez, J., Kfoury, E. F., Crichigno, J., and Srivastava, G. (2023). A survey on network simulators, emulators, and testbeds used for research and education. Computer Networks, 237:110054.

Lantz, B., Heller, B., and McKeown, N. (2010). A network in a laptop: rapid prototyping for software-defined networks. In Proceedings of the 9th ACM SIGCOMM Workshop on Hot Topics in Networks, pages 1–6.

Rahouti, M. and Xiong, K. (2019). A Customized Educational Booster for Online Students in Cybersecurity Education. In CSEDU (2), pages 535–541.

Santos, J. B., Ribeiro, A. V., Brito, I. V. S., de Souza, M. C. S., de Souza Matos, E., and Sampaio, L. N. (2020). Uma experiência de avaliação multidimensional de cursos de redes de computadores em ambientes de testbeds. In Anais do XXXI Simpósio Brasileiro de Informática na Educação, pages 1703–1712. SBC.

Sriram, K. and Montgomery, D. (2019). Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation. Technical report, National Institute of Standards and Technology.

Yamin, M. M., Katt, B., and Gkioulos, V. (2020). Cyber ranges and security testbeds: Scenarios, functions, tools and architecture. Computers & Security, 88:101636.