StreaMon: A software-defined monitoring platform

Giuseppe Bianchi; Marco Bonola; Giulio Picierro; Salvatore Pontarelli; Marco Monaci

doi:10.1109/ITC.2014.6932956

StreaMon: A software-defined monitoring platform

Giuseppe Bianchi^*, Marco Bonola, Giulio Picierro, Salvatore Pontarelli, Marco Monaci

^*Corresponding author for this work

Department of Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference Contribution (Conference Proceeding)

7 Citations (Scopus)

Abstract

The fast evolving nature of modern cyber threats and network monitoring as well as the increasing interest in virtualization approaches for more complex network middlebox functionalities call for new, "software-defined", solutions to virtualize and simplify the programming and deployment of online (stream-based) traffic analysis functions. StreaMon is based on a data-plane abstraction devised to scalably decouple the "programming logic" of a traffic analysis application (tracked states, features, anomaly conditions, etc.) from elementary primitives (counting and metering, matching, events generation, etc), efficiently pre-implemented in the probes, and used as common instruction set for supporting the desired logic. The proposed SDN approach entails platform-independent, portable, multi-tenant online traffic analysis tasks written in a high level language and enables system users to completely virtualize network monitoring functionalities, isolate aggregated traffic flows and run multiple independent applications on a single software instance of the StreaMon platform. We validate our design by developing a prototype and a set of simple (but functionally demanding) use-case applications and by testing them over real traffic traces.

Original language	English
Title of host publication	2014 26th International Teletraffic Congress, ITC 2014
Publisher	Institute of Electrical and Electronics Engineers (IEEE)
ISBN (Print)	9780988304505
DOIs	https://doi.org/10.1109/ITC.2014.6932956
Publication status	Published - 1 Jan 2014
Event	2014 26th International Teletraffic Congress, ITC 2014 - Karlskrona, United Kingdom Duration: 9 Sept 2014 → 11 Sept 2014

Conference

Conference	2014 26th International Teletraffic Congress, ITC 2014
Country/Territory	United Kingdom
City	Karlskrona
Period	9/09/14 → 11/09/14

Keywords

Network monitoring
network programmability
XFSM

Access to Document

10.1109/ITC.2014.6932956

Handle.net

Persistent link

Cite this

@inproceedings{9824ec0f35714c4096f3729619948d8e,

title = "StreaMon: A software-defined monitoring platform",

abstract = "The fast evolving nature of modern cyber threats and network monitoring as well as the increasing interest in virtualization approaches for more complex network middlebox functionalities call for new, {"}software-defined{"}, solutions to virtualize and simplify the programming and deployment of online (stream-based) traffic analysis functions. StreaMon is based on a data-plane abstraction devised to scalably decouple the {"}programming logic{"} of a traffic analysis application (tracked states, features, anomaly conditions, etc.) from elementary primitives (counting and metering, matching, events generation, etc), efficiently pre-implemented in the probes, and used as common instruction set for supporting the desired logic. The proposed SDN approach entails platform-independent, portable, multi-tenant online traffic analysis tasks written in a high level language and enables system users to completely virtualize network monitoring functionalities, isolate aggregated traffic flows and run multiple independent applications on a single software instance of the StreaMon platform. We validate our design by developing a prototype and a set of simple (but functionally demanding) use-case applications and by testing them over real traffic traces.",

keywords = "Network monitoring, network programmability, XFSM",

author = "Giuseppe Bianchi and Marco Bonola and Giulio Picierro and Salvatore Pontarelli and Marco Monaci",

year = "2014",

month = jan,

day = "1",

doi = "10.1109/ITC.2014.6932956",

language = "English",

isbn = "9780988304505",

booktitle = "2014 26th International Teletraffic Congress, ITC 2014",

publisher = "Institute of Electrical and Electronics Engineers (IEEE)",

address = "United States",

note = "2014 26th International Teletraffic Congress, ITC 2014 ; Conference date: 09-09-2014 Through 11-09-2014",

}

Bianchi, G, Bonola, M, Picierro, G, Pontarelli, S & Monaci, M 2014, StreaMon: A software-defined monitoring platform. in 2014 26th International Teletraffic Congress, ITC 2014., 6932956, Institute of Electrical and Electronics Engineers (IEEE), 2014 26th International Teletraffic Congress, ITC 2014, Karlskrona, United Kingdom, 9/09/14. https://doi.org/10.1109/ITC.2014.6932956

TY - GEN

T1 - StreaMon

T2 - 2014 26th International Teletraffic Congress, ITC 2014

AU - Bianchi, Giuseppe

AU - Bonola, Marco

AU - Picierro, Giulio

AU - Pontarelli, Salvatore

AU - Monaci, Marco

PY - 2014/1/1

Y1 - 2014/1/1

N2 - The fast evolving nature of modern cyber threats and network monitoring as well as the increasing interest in virtualization approaches for more complex network middlebox functionalities call for new, "software-defined", solutions to virtualize and simplify the programming and deployment of online (stream-based) traffic analysis functions. StreaMon is based on a data-plane abstraction devised to scalably decouple the "programming logic" of a traffic analysis application (tracked states, features, anomaly conditions, etc.) from elementary primitives (counting and metering, matching, events generation, etc), efficiently pre-implemented in the probes, and used as common instruction set for supporting the desired logic. The proposed SDN approach entails platform-independent, portable, multi-tenant online traffic analysis tasks written in a high level language and enables system users to completely virtualize network monitoring functionalities, isolate aggregated traffic flows and run multiple independent applications on a single software instance of the StreaMon platform. We validate our design by developing a prototype and a set of simple (but functionally demanding) use-case applications and by testing them over real traffic traces.

AB - The fast evolving nature of modern cyber threats and network monitoring as well as the increasing interest in virtualization approaches for more complex network middlebox functionalities call for new, "software-defined", solutions to virtualize and simplify the programming and deployment of online (stream-based) traffic analysis functions. StreaMon is based on a data-plane abstraction devised to scalably decouple the "programming logic" of a traffic analysis application (tracked states, features, anomaly conditions, etc.) from elementary primitives (counting and metering, matching, events generation, etc), efficiently pre-implemented in the probes, and used as common instruction set for supporting the desired logic. The proposed SDN approach entails platform-independent, portable, multi-tenant online traffic analysis tasks written in a high level language and enables system users to completely virtualize network monitoring functionalities, isolate aggregated traffic flows and run multiple independent applications on a single software instance of the StreaMon platform. We validate our design by developing a prototype and a set of simple (but functionally demanding) use-case applications and by testing them over real traffic traces.

KW - Network monitoring

KW - network programmability

KW - XFSM

UR - http://www.scopus.com/inward/record.url?scp=84912052336&partnerID=8YFLogxK

U2 - 10.1109/ITC.2014.6932956

DO - 10.1109/ITC.2014.6932956

M3 - Conference Contribution (Conference Proceeding)

AN - SCOPUS:84912052336

SN - 9780988304505

BT - 2014 26th International Teletraffic Congress, ITC 2014

PB - Institute of Electrical and Electronics Engineers (IEEE)

Y2 - 9 September 2014 through 11 September 2014

ER -

StreaMon: A software-defined monitoring platform

Abstract

Conference

Keywords

Access to Document

Handle.net

Other files and links

Fingerprint

Cite this