Criação de Redes Virtuais no MENTORED Testbed: Uma Análise Experimental
Resumo
O MENTORED Testbed auxilia pesquisas na área de prevenção, detecção e mitigação de ataques de DDoS em IoT. O ambiente lida com um alto volume de tráfego de rede e um grande número de dispositivos. Sua implementação justapõe a Infraestrutura Definida por Software da Rede Nacional de Ensino e Pesquisa (IDS-RNP) que suporta diferentes tecnologias para criação de redes virtuais (Macvlan, KNetLab e Calico). Este trabalho descreve os experimentos do ambiente conduzidos com cada uma das tecnologias de rede a fim de avaliar as vantagens e as limitações do seu uso.
Palavras-chave:
Cibersegurança, Testbed, Redes Virtuais, Kubernetes
Referências
Antonakakis, M., April, T., Bailey, M., Bernhard, M., Bursztein, E., Cochran, J., Durumeric, Z., Halderman, J. A., Invernizzi, L., Kallitsis, M., et al. (2017). Understanding the mirai botnet. In USENIX Security, pages 1093–1110.
Caban, W. (2019). Architecting and Operating OpenShift Clusters: OpenShift for Infrastructure and Operations Teams. Apress.
Cha, J.-G. and Kim, S. W. (2021). Design and evaluation of container-based networking for low-latency edge services. In 2021 International Conference on Information and Communication Technology Convergence (ICTC), pages 1287–1289. IEEE.
CNI (2020). Macvlan. [link]. Acesso em Março de 2022.
Hernandez, M. (2021). KNetLab. [link]. Acesso em Março de 2022.
Kapocius, N. (2020). Overview of kubernetes cni plugins performance. Mokslas–Lietuvos ateitis/Science–Future of Lithuania, 12.
Koroniotis, N., Moustafa, N., Sitnikova, E., and Turnbull, B. (2019). Towards the development of realistic botnet dataset in the internet of things for network forensic analytics: Bot-iot dataset. Future Generation Computer Systems, 100:779–796.
Kubernetes (2022). Cluster Networking. [link]. Acesso em 03/2022.
Lee, S., Lee, S., Yoo, H., Kwon, S., and Shon, T. (2018). Design and implementation of cybersecurity testbed for industrial iot systems. The Journal of Supercomputing, 74(9):4506–4520.
Mahalingam, M., Dutt, D. G., Duda, K., Agarwal, P., Kreeger, L., Sridhar, T., Bursell, M., and Wright, C. (2014). Virtual extensible local area network (vxlan): A framework for overlaying virtualized layer 2 networks over layer 3 networks. RFC, 7348:1–22.
Mirkovic, J. and Benzel, T. (2013). Deterlab testbed for cybersecurity research and education. Journal of Computing Sciences in Colleges, 28(4):163–163.
Pfaff, B. and Davie, B. (2013). The open vswitch database management protocol. Internet Requests for Comments, RFC Editor, RFC, 7047.
Prates Jr, N. G., Andrade, A. M., de Mello, E. R., Wangham, M. S., and Nogueira, M. (2021). Um ambiente de experimentação em cibersegurança para internet das coisas. In Anais do VI Workshop do testbed FIBRE, pages 68–79. SBC.
Rahal, B. M., Santos, A., and Nogueira, M. (2020). A distributed architecture for ddos prediction and bot detection. IEEE Access, 8:159756–159772.
Simpson, W. et al. (1995). Ip in ip tunneling. Technical report, RFC 1853, October.
Wroclawski, J., Benzel, T., Blythe, J., Faber, T., Hussain, A., Mirkovic, J., and Schwab, S. (2016). Deterlab and the deter project. In The GENI Book, pages 35–62. Springer.
Yusof, A. R., Udzir, N. I., and Selamat, A. (2019). Systematic literature review and taxonomy for ddos attack detection and prediction. International Journal of Digital Enterprise Technology, 1(3):292–315.
Zhu, S., Yang, S., Gou, X., Xu, Y., Zhang, T., and Wan, Y. (2022). Survey of testing methods and testbed development concerning internet of things. Wireless Personal Communications, 123(1):165–194.
Caban, W. (2019). Architecting and Operating OpenShift Clusters: OpenShift for Infrastructure and Operations Teams. Apress.
Cha, J.-G. and Kim, S. W. (2021). Design and evaluation of container-based networking for low-latency edge services. In 2021 International Conference on Information and Communication Technology Convergence (ICTC), pages 1287–1289. IEEE.
CNI (2020). Macvlan. [link]. Acesso em Março de 2022.
Hernandez, M. (2021). KNetLab. [link]. Acesso em Março de 2022.
Kapocius, N. (2020). Overview of kubernetes cni plugins performance. Mokslas–Lietuvos ateitis/Science–Future of Lithuania, 12.
Koroniotis, N., Moustafa, N., Sitnikova, E., and Turnbull, B. (2019). Towards the development of realistic botnet dataset in the internet of things for network forensic analytics: Bot-iot dataset. Future Generation Computer Systems, 100:779–796.
Kubernetes (2022). Cluster Networking. [link]. Acesso em 03/2022.
Lee, S., Lee, S., Yoo, H., Kwon, S., and Shon, T. (2018). Design and implementation of cybersecurity testbed for industrial iot systems. The Journal of Supercomputing, 74(9):4506–4520.
Mahalingam, M., Dutt, D. G., Duda, K., Agarwal, P., Kreeger, L., Sridhar, T., Bursell, M., and Wright, C. (2014). Virtual extensible local area network (vxlan): A framework for overlaying virtualized layer 2 networks over layer 3 networks. RFC, 7348:1–22.
Mirkovic, J. and Benzel, T. (2013). Deterlab testbed for cybersecurity research and education. Journal of Computing Sciences in Colleges, 28(4):163–163.
Pfaff, B. and Davie, B. (2013). The open vswitch database management protocol. Internet Requests for Comments, RFC Editor, RFC, 7047.
Prates Jr, N. G., Andrade, A. M., de Mello, E. R., Wangham, M. S., and Nogueira, M. (2021). Um ambiente de experimentação em cibersegurança para internet das coisas. In Anais do VI Workshop do testbed FIBRE, pages 68–79. SBC.
Rahal, B. M., Santos, A., and Nogueira, M. (2020). A distributed architecture for ddos prediction and bot detection. IEEE Access, 8:159756–159772.
Simpson, W. et al. (1995). Ip in ip tunneling. Technical report, RFC 1853, October.
Wroclawski, J., Benzel, T., Blythe, J., Faber, T., Hussain, A., Mirkovic, J., and Schwab, S. (2016). Deterlab and the deter project. In The GENI Book, pages 35–62. Springer.
Yusof, A. R., Udzir, N. I., and Selamat, A. (2019). Systematic literature review and taxonomy for ddos attack detection and prediction. International Journal of Digital Enterprise Technology, 1(3):292–315.
Zhu, S., Yang, S., Gou, X., Xu, Y., Zhang, T., and Wan, Y. (2022). Survey of testing methods and testbed development concerning internet of things. Wireless Personal Communications, 123(1):165–194.
Publicado
31/07/2022
Como Citar
MEYER, Bruno Henrique; GEMMER, Davi Daniel; ANDRADE, Allex Magno; MELLO, Emerson Ribeiro de; NOGUEIRA, Michele; WANGHAM, Michelle Silva.
Criação de Redes Virtuais no MENTORED Testbed: Uma Análise Experimental. In: WORKSHOP DE TESTBEDS, 1. , 2022, Niterói.
Anais [...].
Porto Alegre: Sociedade Brasileira de Computação,
2022
.
p. 24-35.
DOI: https://doi.org/10.5753/wtestbeds.2022.223308.
