Publication: REFLO: Reactive firewall system with OpenFlow and flow monitoring system
Issued Date
2017-12-19
Resource Type
ISSN
21593450
21593442
21593442
Other identifier(s)
2-s2.0-85044211666
Rights
Mahidol University
Rights Holder(s)
SCOPUS
Bibliographic Citation
IEEE Region 10 Annual International Conference, Proceedings/TENCON. Vol.2017-December, (2017), 2273-2278
Suggested Citation
Vasaka Visoottiviseth, Suthasinee Lertviriyasawat, Peerada Suppiyatrakoon, Pattarajit Chitkornkitsil, Nariyoshi Yamai REFLO: Reactive firewall system with OpenFlow and flow monitoring system. IEEE Region 10 Annual International Conference, Proceedings/TENCON. Vol.2017-December, (2017), 2273-2278. doi:10.1109/TENCON.2017.8228240 Retrieved from: https://repository.li.mahidol.ac.th/handle/20.500.14594/42316
Research Projects
Organizational Units
Authors
Journal Issue
Thesis
Title
REFLO: Reactive firewall system with OpenFlow and flow monitoring system
Other Contributor(s)
Abstract
© 2017 IEEE. To maintain the high level of security, many organizations use Deep Packet Inspection (DPI) firewalls to filter anomaly traffic coming into their networks. However, a DPI firewall with a large volume of traffic can lead to a high packet drop rate, high delay, and the poor network throughput. One possible way to relieve the firewall workload is to deploy multiple firewalls and select only suspicious traffic to check with the firewall. To perform this task, we apply the Software Defined Network (SDN) concept by using the OpenFlow standard. We develop a system called Reactive Firewall System with OpenFlow and Flow Monitoring System (REFLO) to distribute traffic to multiple firewalls and bypass non-suspicious traffic. REFLO system is able to select the most appropriate firewall for each data flow based on the contents of the flow and rules set by administrators on the OpenFlow controller. In addition, REFLO allows administrators to easily monitor the network by visualizing the flow summarization and flow statistics on our web application. To verify the effectiveness of our system, we deploy OpenFlow switches by using the low-cost Raspberry Pi boards and deploy OpenFlow controller and the web application on an Ubuntu PC. Experimental results also confirm that REFLO can achieve the lower average packet delay and higher throughput than that of the existing firewall system.