Skip to main content
Top
Published in: Telecommunication Systems 1/2024

31-10-2023

Digital forensics framework for intent-based networking over software-defined networks

Authors: Muhammad Faraz Hyder, Tasbiha Fatima, Saadia Arshad

Published in: Telecommunication Systems | Issue 1/2024

Log in

Activate our intelligent search to find suitable subject content or patents.

search-config
loading …

Abstract

Intent-based networking (IBN) is an evolutionary paradigm. Its recent adaptation has been increased substantially by Cloud Service Providers, Telecom, and network operators due to its automation capabilities. However, there are certain challenges specifically related to security. One of the core challenges is the lack of a forensic framework for identifying different incidents inside IBN. In this paper, we have proposed a framework to perform the forensics investigation of an IBN inside a software defined networking (SDN) environment. This framework is based on the steps of the forensics investigation process and consists of four modules: Identification, Collection, Analysis, and Reporting. Identification includes logs searching for specific events. Logs are searched through keywords, Time, Date, and Event ID. Pieces of evidence are collected from the Application, Control, and Infrastructure Layers of SDN by exploiting the default log file of ONOS and third-party tools. The analysis is performed using manual analysis of the raw log entries and third-party tools such as Loki/Grafana. This framework is implemented by utilizing ONOS as an SDN controller. The emulator used for creating the experimental network is Mininet on two different use cases: Normal Traffic Routing and Redirection of Attack Traffic, to analyze the difference in log files generated by the SDN controller. These files are manually analyzed and sent to the Loki–Grafana server for better analysis, visualization, and real-time monitoring of IBN logs. Assessment of the obtained experimental results is based on the states defined in the Intent Framework of ONOS.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 340 Zeitschriften

aus folgenden Fachgebieten:

  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Versicherung + Risiko




Jetzt Wissensvorsprung sichern!

Literature
3.
go back to reference Chiara, L. F., Coscia, P., Das, S., Calderara, S., Cucchiara, R., & Ballan, L. (2022). Goal-driven self-attentive recurrent networks for trajectory prediction. arXiv preprint arXiv:2204.11561. April 25. Chiara, L. F., Coscia, P., Das, S., Calderara, S., Cucchiara, R., & Ballan, L. (2022). Goal-driven self-attentive recurrent networks for trajectory prediction. arXiv preprint arXiv:​2204.​11561. April 25.
4.
go back to reference Beshley, M., Pryslupskyi, A., Panchenko, O., & Seliuchenko, M. (2020). Dynamic switch migration method based on QoE-aware priority marking for intent-based networking. In 2020 IEEE 15th international conference on advanced trends in radioelectronics, telecommunications and computer engineering (TCSET), Feb 25 (pp. 864–868). IEEE. Beshley, M., Pryslupskyi, A., Panchenko, O., & Seliuchenko, M. (2020). Dynamic switch migration method based on QoE-aware priority marking for intent-based networking. In 2020 IEEE 15th international conference on advanced trends in radioelectronics, telecommunications and computer engineering (TCSET), Feb 25 (pp. 864–868). IEEE.
5.
go back to reference Pang, L., Yang, C., Chen, D., Song, Y., & Guizani, M. (2020). A survey on intent-driven networks. IEEE Access, 8, 22862–22873.CrossRef Pang, L., Yang, C., Chen, D., Song, Y., & Guizani, M. (2020). A survey on intent-driven networks. IEEE Access, 8, 22862–22873.CrossRef
6.
go back to reference Shirmarz, A., & Ghaffari, A. (2020). Performance issues and solutions in SDN-based data center: A survey. The Journal of Supercomputing, 76(10), 7545–93.CrossRef Shirmarz, A., & Ghaffari, A. (2020). Performance issues and solutions in SDN-based data center: A survey. The Journal of Supercomputing, 76(10), 7545–93.CrossRef
10.
go back to reference Sanvito, D., Moro, D., Gulli, M., Filippini, I., Capone, A., & Campanella, A. (2018). ONOS intent monitor and reroute service: Enabling plug &play routing logic. In 2018 4th IEEE Conference on Network Softwarization and Workshops (NetSoft) (pp. 272–276). IEEE. Sanvito, D., Moro, D., Gulli, M., Filippini, I., Capone, A., & Campanella, A. (2018). ONOS intent monitor and reroute service: Enabling plug &play routing logic. In 2018 4th IEEE Conference on Network Softwarization and Workshops (NetSoft) (pp. 272–276). IEEE.
11.
go back to reference Rafiq, A., Afaq, M., & Song, W. C. (2020). Intent-based networking with proactive load distribution in data center using IBN manager and Smart Path manager. Journal of Ambient Intelligence and Humanized Computing, 11(11), 4855–4872.CrossRef Rafiq, A., Afaq, M., & Song, W. C. (2020). Intent-based networking with proactive load distribution in data center using IBN manager and Smart Path manager. Journal of Ambient Intelligence and Humanized Computing, 11(11), 4855–4872.CrossRef
12.
go back to reference Yungaicela-Naula, N. M., Vargas-Rosales, C., Pérez-Díaz, J. A., & Zareei, M. (2022). Towards security automation in software defined networks. Computer Communications, 183, 64–82.CrossRef Yungaicela-Naula, N. M., Vargas-Rosales, C., Pérez-Díaz, J. A., & Zareei, M. (2022). Towards security automation in software defined networks. Computer Communications, 183, 64–82.CrossRef
14.
go back to reference Dmitrieva, J. (2022). Comparative analysis of network resource management methods in SDN. Proceedings of Telecommunication Universities, 8(1), 73–83. Dmitrieva, J. (2022). Comparative analysis of network resource management methods in SDN. Proceedings of Telecommunication Universities, 8(1), 73–83.
15.
go back to reference Medvetskyi, M., Beshley, M., & Klymash, M. (2021). A quality of experience management method for intent-based software-defined networks. In 2021 IEEE 16th international conference on the experience of designing and application of CAD systems (CADSM) Feb 22 (pp. 59–62). IEEE. Medvetskyi, M., Beshley, M., & Klymash, M. (2021). A quality of experience management method for intent-based software-defined networks. In 2021 IEEE 16th international conference on the experience of designing and application of CAD systems (CADSM) Feb 22 (pp. 59–62). IEEE.
16.
go back to reference Perez, R., Zabala, A., & Banchs, A. (2021). Alviu: An intent-based SD-WAN orchestrator of network slices for enterprise networks. In 2021 IEEE 7th international conference on network softwarization (NetSoft) (pp. 211–215). IEEE. Perez, R., Zabala, A., & Banchs, A. (2021). Alviu: An intent-based SD-WAN orchestrator of network slices for enterprise networks. In 2021 IEEE 7th international conference on network softwarization (NetSoft) (pp. 211–215). IEEE.
17.
go back to reference Abbas, K., Khan, T. A., Afaq, M., & Song, W. C. (2021). Network slice lifecycle management for 5g mobile networks: An intent-based networking approach. IEEE Access, 9, 80128–80146.CrossRef Abbas, K., Khan, T. A., Afaq, M., & Song, W. C. (2021). Network slice lifecycle management for 5g mobile networks: An intent-based networking approach. IEEE Access, 9, 80128–80146.CrossRef
18.
go back to reference Abbas, K., Afaq, M., Ahmed Khan, T., Rafiq, A., & Song, W. C. (2020). Slicing the core network and radio access network domains through intent-based networking for 5g networks. Electronics, 9(10), 1710.CrossRef Abbas, K., Afaq, M., Ahmed Khan, T., Rafiq, A., & Song, W. C. (2020). Slicing the core network and radio access network domains through intent-based networking for 5g networks. Electronics, 9(10), 1710.CrossRef
19.
go back to reference Mathew, A. (2020). Artificial intelligence for intent based networking. International Journal of Computer Science Trends and Technology (IJCST), 8(2), 13–17. Mathew, A. (2020). Artificial intelligence for intent based networking. International Journal of Computer Science Trends and Technology (IJCST), 8(2), 13–17.
20.
go back to reference Khan, T. A., Mehmood, A., Ravera, J. J. D., Muhammad, A., Abbas, K., & Song, W. C. (2020). Intent-based orchestration of network slices and resource assurance using machine learning. In NOMS 2020–2020 IEEE/IFIP network operations and management symposium (pp. 1–2). IEEE. Khan, T. A., Mehmood, A., Ravera, J. J. D., Muhammad, A., Abbas, K., & Song, W. C. (2020). Intent-based orchestration of network slices and resource assurance using machine learning. In NOMS 2020–2020 IEEE/IFIP network operations and management symposium (pp. 1–2). IEEE.
21.
go back to reference Mahtout, H., Kiran, M., Mercian, A., & Mohammed, B. (2020). Using machine learning for intent-based provisioning in high-speed science networks. In Proceedings of the 3rd international workshop on systems and network telemetry and analytics (pp. 27–30). Mahtout, H., Kiran, M., Mercian, A., & Mohammed, B. (2020). Using machine learning for intent-based provisioning in high-speed science networks. In Proceedings of the 3rd international workshop on systems and network telemetry and analytics (pp. 27–30).
22.
go back to reference Andrushchak, V., Beshley, M., Dutko, L., Maksymyuk, T., & Andrukhiv, T. (2022). Intelligent traffic engineering for future intent-based software-defined transport network. In Future Intent-Based Networking (pp. 161–181). Cham: Springer. Andrushchak, V., Beshley, M., Dutko, L., Maksymyuk, T., & Andrukhiv, T. (2022). Intelligent traffic engineering for future intent-based software-defined transport network. In Future Intent-Based Networking (pp. 161–181). Cham: Springer.
23.
go back to reference Assis, M. V. O., Carvalho, L. F., Lloret, J., & Proença, M. L., Jr. (2021). A GRU deep learning system against attacks in software defined networks. Journal of Network and Computer Applications, 177, 102942.CrossRef Assis, M. V. O., Carvalho, L. F., Lloret, J., & Proença, M. L., Jr. (2021). A GRU deep learning system against attacks in software defined networks. Journal of Network and Computer Applications, 177, 102942.CrossRef
24.
go back to reference Berde, P., Gerola, M., Hart, J., Higuchi, Y., Kobayashi, M., Koide, T., Lantz, B., et al. (2014). ONOS: Towards an open, distributed SDN OS. In Proceedings of the third workshop on Hot topics in software defined networking (pp. 1–6). Berde, P., Gerola, M., Hart, J., Higuchi, Y., Kobayashi, M., Koide, T., Lantz, B., et al. (2014). ONOS: Towards an open, distributed SDN OS. In Proceedings of the third workshop on Hot topics in software defined networking (pp. 1–6).
25.
go back to reference Medved, J., Varga, R., Tkacik, A., & Gray, K. (2014). Opendaylight: Towards a model-driven sdn controller architecture. In Proceeding of IEEE international symposium on a world of wireless, mobile and multimedia networks 2014 (pp. 1–6). IEEE. Medved, J., Varga, R., Tkacik, A., & Gray, K. (2014). Opendaylight: Towards a model-driven sdn controller architecture. In Proceeding of IEEE international symposium on a world of wireless, mobile and multimedia networks 2014 (pp. 1–6). IEEE.
26.
go back to reference Kaur, S., Singh, J., & Singh Ghumman, N. (2014). Network programmability using POX controller. In ICCCS international conference on communication, computing and systems (Vol. 138, p. 70. sn). IEEE. Kaur, S., Singh, J., & Singh Ghumman, N. (2014). Network programmability using POX controller. In ICCCS international conference on communication, computing and systems (Vol. 138, p. 70. sn). IEEE.
27.
go back to reference Shah, S. A., Faiz, J., Farooq, M., Shafi, A., & Mehdi, S. A. (2013). An architectural evaluation of SDN controllers. In 2013 IEEE international conference on communications (ICC) (pp. 3504–3508). IEEE. Shah, S. A., Faiz, J., Farooq, M., Shafi, A., & Mehdi, S. A. (2013). An architectural evaluation of SDN controllers. In 2013 IEEE international conference on communications (ICC) (pp. 3504–3508). IEEE.
28.
go back to reference Ahmad, S., & Mir, A. H. (2021). Scalability, consistency, reliability and security in SDN controllers: A survey of diverse SDN controllers. Journal of Network and Systems Management, 29(1), 1–59.CrossRef Ahmad, S., & Mir, A. H. (2021). Scalability, consistency, reliability and security in SDN controllers: A survey of diverse SDN controllers. Journal of Network and Systems Management, 29(1), 1–59.CrossRef
29.
go back to reference Campanella, A., Yan, B., Casellas, R., Giorgetti, A., Lopez, V., Zhao, Y., & Mayoral, A. (2020). Reliable optical networks with ODTN: Resiliency and fail-over in data and control planes. Journal of Lightwave Technology, 38(10), 2755–64.CrossRef Campanella, A., Yan, B., Casellas, R., Giorgetti, A., Lopez, V., Zhao, Y., & Mayoral, A. (2020). Reliable optical networks with ODTN: Resiliency and fail-over in data and control planes. Journal of Lightwave Technology, 38(10), 2755–64.CrossRef
30.
go back to reference Zeydan, E., & Turk, Y. (2020). Recent advances in intent-based networking: A survey. In 2020 IEEE 91st vehicular technology conference (VTC2020-Spring) (pp. 1–5). IEEE. Zeydan, E., & Turk, Y. (2020). Recent advances in intent-based networking: A survey. In 2020 IEEE 91st vehicular technology conference (VTC2020-Spring) (pp. 1–5). IEEE.
31.
go back to reference Zheng, X., & Leivadeas, A. (2021). Network assurance in intent-based networking data centers with machine learning techniques. In 2021 17th International conference on network and service management (CNSM) Oct 25 (pp. 14–20). IEEE. Zheng, X., & Leivadeas, A. (2021). Network assurance in intent-based networking data centers with machine learning techniques. In 2021 17th International conference on network and service management (CNSM) Oct 25 (pp. 14–20). IEEE.
33.
go back to reference Ujcich, B. E., Bates, A., & Sanders, W. H. (2020). Provenance for intent-based networking. In 2020 6th IEEE conference on network softwarization (NetSoft) (pp. 195-199). IEEE. Ujcich, B. E., Bates, A., & Sanders, W. H. (2020). Provenance for intent-based networking. In 2020 6th IEEE conference on network softwarization (NetSoft) (pp. 195-199). IEEE.
35.
go back to reference Monika, P., Negara, R. M., & Sanjoyo, D. D. (2020). Performance analysis of software defined network using intent monitor and reroute method on ONOS controller. Bulletin of Electrical Engineering and Informatics, 9(5), 2065–2073. Security & Performance Analysis (Report No. 1). [Other] ONOS, 2017. https://hal.archives-ouvertes.fr/hal-03188700/document. Monika, P., Negara, R. M., & Sanjoyo, D. D. (2020). Performance analysis of software defined network using intent monitor and reroute method on ONOS controller. Bulletin of Electrical Engineering and Informatics, 9(5), 2065–2073. Security & Performance Analysis (Report No. 1). [Other] ONOS, 2017. https://​hal.​archives-ouvertes.​fr/​hal-03188700/​document.
Metadata
Title
Digital forensics framework for intent-based networking over software-defined networks
Authors
Muhammad Faraz Hyder
Tasbiha Fatima
Saadia Arshad
Publication date
31-10-2023
Publisher
Springer US
Published in
Telecommunication Systems / Issue 1/2024
Print ISSN: 1018-4864
Electronic ISSN: 1572-9451
DOI
https://doi.org/10.1007/s11235-023-01064-8

Other articles of this Issue 1/2024

Telecommunication Systems 1/2024 Go to the issue