UKNOF44 - The 5 Ws of Network Monitoring for SDN-based IDPS

Speaker: Dr Sandra Scott-Hayward (Queen's University Belfast)
http://uknof.uk/44/

With the introduction of software-defined networks (SDNs) and network function virtualization (NFV) come opportunities for efficient network threat detection and protection. SDN’s global view and NFV service distribution provide a means of monitoring and defence across the entire network. However, with distributed attacks involving high traffic volumes, network monitoring is a challenging task. In this talk, we will discuss our lessons learned and recommendations for efficient and proportionate network monitoring; the Who, What, When, Where, and Why (5 Ws) of network monitoring for SDN-based intrusion detection and prevention systems.