363 citations · 729 across the 14 of their papers we have counts for
15 papers
Introducing Packet-Level Analysis in Programmable Data Planes to Advance Network Intrusion Detection
Roberto Doriguzzi-Corin, Luis Augusto Dias Knob, Luca Mendozzi +2
Programmable data planes offer precise control over the low-level processing steps applied to network packets, serving as a valuable tool for analysing malicious flows in the field…
Resource-aware Cyber Deception for Microservice-based Applications
Marco Zambianco, Claudio Facchinetti, Roberto Doriguzzi-Corin +1
Cyber deception can be a valuable addition to traditional cyber defense mechanisms, especially for modern cloud-native environments with a fading security perimeter. However, pre-b…
FLAD: Adaptive Federated Learning for DDoS Attack Detection
Roberto Doriguzzi-Corin, Domenico Siracusa
Federated Learning (FL) has been recently receiving increasing consideration from the cybersecurity community as a way to collaboratively train deep learning models with distribute…
GADoT: GAN-based Adversarial Training for Robust DDoS Attack Detection
Maged Abdelaty, Sandra Scott-Hayward, Roberto Doriguzzi-Corin +1
Machine Learning (ML) has proven to be effective in many application domains. However, ML methods can be vulnerable to adversarial attacks, in which an attacker tries to fool the c…
A Cost-Effective Workload Allocation Strategy for Cloud-Native Edge Services
Valentino Armani, Francescomaria Faticanti, Silvio Cretti +2
Nowadays IoT applications consist of a collection of loosely coupled modules, namely microservices, that can be managed and placed in a heterogeneous environment consisting of priv…
In-Network Volumetric DDoS Victim Identification Using Programmable Commodity Switches
Damu Ding, Marco Savi, Federico Pederzolli +2
Volumetric distributed Denial-of-Service (DDoS) attacks have become one of the most significant threats to modern telecommunication networks. However, most existing defense systems…
Tracking Normalized Network Traffic Entropy to Detect DDoS Attacks in P4
Damu Ding, Marco Savi, Domenico Siracusa
Distributed Denial-of-Service (DDoS) attacks represent a persistent threat to modern telecommunications networks: detecting and counteracting them is still a crucial unresolved cha…
DAICS: A Deep Learning Solution for Anomaly Detection in Industrial Control Systems
Maged Abdelaty, Roberto Doriguzzi-Corin, Domenico Siracusa
Deep Learning is emerging as an effective technique to detect sophisticated cyber-attacks targeting Industrial Control Systems (ICSs). The conventional approach to detection in lit…
LUCID: A Practical, Lightweight Deep Learning Solution for DDoS Attack Detection
Roberto Doriguzzi-Corin, Stuart Millar, Sandra Scott-Hayward +2
Distributed Denial of Service (DDoS) attacks are one of the most harmful threats in today's Internet, disrupting the availability of essential services. The challenge of DDoS detec…
Dynamic and Application-Aware Provisioning of Chained Virtual Security Network Functions
Roberto Doriguzzi-Corin, Sandra Scott-Hayward, Domenico Siracusa +2
A promising area of application for Network Function Virtualization is in network security, where chains of Virtual Security Network Functions (VSNFs), i.e., security-specific virt…
Cutting Throughput on the Edge:App-Aware Placement in Fog Computing
Francescomaria Faticanti, Francesco De Pellegrini, Domenico Siracusa +2
Fog computing extends cloud computing technology to the edge of the infrastructure to let IoT applications access objects' data with reduced latency, location awareness and dynamic…
Automatic Intent-Based Secure Service Creation Through a Multilayer SDN Network Orchestration
Thomas Szyrkowiec, Michele Santuari, Mohit Chamania +5
Growing traffic demands and increasing security awareness are driving the need for secure services. Current solutions require manual configuration and deployment based on the custo…
First Demonstration of an Automatic Multilayer Intent-Based Secure Service Creation by an Open Source SDN Orchestrator
Thomas Szyrkowiec, Michele Santuari, Mohit Chamania +3
In this work we demonstrate an automatic intent-based encryption layer selection and configuration for a multilayer network covering IP and optical utilizing an open source SDN orc…
Intent-Based In-flight Service Encryption in Multi-Layer Transport Networks
Mohit Chamania, Thomas Szyrkowiec, Michele Santuari +5
We demonstrate multi-layer encrypted service provisioning via the ACINO orchestrator. ACINO combines a novel intent interface with an ONOS-based SDN orchestrator to facilitate encr…
Softwarized 5G Networks Resiliency with Selfhealing
José Sánchez, Imen Grida Ben Yahia, Noël Crespi +2
The meaning of 5G is still a subject of discussion in the industry. However, the softwarization of networks is expected to shape the design, operation and management of 5G networks…