Proposal of a Malicious Communication Control Method Using OpenFlow

Abstract

We have been developing an anomaly detection system (ADS) for detecting malicious communication from the Internet to our campus network. We implement two methods for blocking malicious communications. However, these blocking methods have some problems. Therefore, we propose a new method for blocking malicious communications using OpenFlow technology. In this paper, we describe the overview of our blocking method using OpenFlow. We compared the ACL method and the OpenFlow method, and we conducted an experiment on our proposed system using actual packet data. As a result, we confirmed the method effective in blocking malicious communication on our system.