RAQAMLI TIZIMLARDA TASHQI KIBER TAHDIDLARNING RIVOJLANISH TENDENSIYALARI VA MAVJUD HIMOYA TIZIMLARINING QIYOSIY TAHLILI
DOI:
https://doi.org/10.65164/wv2ytc62Kalit so‘zlar:
SDN, kiberxavfsizlik, tashqi tahdidlar, DDoS, IDS, IPS, firewall, SIEM, NGFW, tarmoq xavfsizligi, anomaly detection.Abstrak
Mazkur maqolada Software-Defined Networking (SDN) asosidagi raqamli tizimlarda yuzaga kelayotgan tashqi kiber tahdidlarning zamonaviy tendensiyalari hamda mavjud himoya tizimlarining samaradorligi tahlil qilinadi. SDN arxitekturasining markazlashgan boshqaruvga asoslanganligi tarmoqni boshqarish imkoniyatlarini kengaytirgani holda, control plane va data plane qatlamlariga qaratilgan yangi turdagi tahdidlarning yuzaga kelishiga sabab bo‘lmoqda. Maqolada DDoS, Flow Table Exhaustion, API hujumlari hamda Control Plane hujumlari kabi asosiy tashqi tahdidlar ko‘rib chiqilib, ularning SDN muhitidagi xususiyatlari yoritilgan. Shuningdek, firewall, Next Generation Firewall (NGFW), IDS/IPS, SIEM, EDR va monitoring tizimlarining imkoniyatlari hamda cheklovlari qiyosiy tahlil qilinadi. Tahlillar natijasida mavjud himoya vositalari asosan reaktiv yondashuvga asoslanganligi va SDN muhitida tashqi tahdidlarni oldindan bashoratlash imkoniyatlari yetarli emasligi aniqlangan. Shu asosda intellektual, mashinali o‘qitish va anomaliya tahliliga asoslangan proaktiv xavfsizlik yondashuvlarini joriy etish zarurligi asoslab berilgan.
Havolalar
1.
Kreutz D., Ramos F.M.V., Verissimo P. Software-Defined Networking: A Comprehensive Survey // Proceedings of the IEEE. – 2015. – Vol. 103, No. 1. – pp. 14–76.
2.
Stallings W. Network Security Essentials: Applications and Standards. – Pearson Education, 2017. – 816 p.
630
3.
Nunes B.A.A., Mendonca M., Nguyen X.N. A Survey of Software-Defined Networking: Past, Present, and Future of Programmable Networks // IEEE Communications Surveys & Tutorials. – 2014. – Vol. 16, No. 3. – pp. 1617–1634.
4.
Scott-Hayward S., O’Callaghan G., Sezer S. SDN Security: A Survey // IEEE SDN for Future Networks and Services. – 2013. – pp. 1–7.
5.
Hu F., Hao Q., Bao K. A Survey on Software-Defined Network and OpenFlow: From Concept to Implementation // IEEE Communications Surveys & Tutorials. – 2014. – Vol. 16, No. 4. – pp. 2181–2206.
6.
Shin S., Gu G. Attacking Software-Defined Networks: A First Feasibility Study // ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking. – 2013. – pp. 165–166.
7.
Benton K., Camp L.J., Small C. OpenFlow Vulnerability Assessment // ACM HotSDN. – 2013. – pp. 151–152.
8.
Tang T.A., Mhamdi L., McLernon D. Deep Learning Approach for Network Intrusion Detection in Software Defined Networking // International Conference on Wireless Networks and Mobile Communications. – 2016. – pp. 258–263.
9.
Braga R., Mota E., Passito A. Lightweight DDoS Flooding Attack Detection Using NOX/OpenFlow // IEEE Local Computer Networks Conference. – 2010. – pp. 408–415.
10.
Mehdi S.A., Khalid J., Khayam S.A. Revisiting Traffic Anomaly Detection Using Software Defined Networking // RAID Conference. – 2011. – pp. 161–180.
