Stream project: security in real-time with elasticity, analytic, and monitoring

• Grant number: 15/24514-9
• Support Opportunities: Regular Research Grants
• Start date: October 01, 2017
• End date: April 30, 2020
• Field of knowledge: Physical Sciences and Mathematics - Computer Science
• Agreement: MCTI/MC
• Principal Investigator: Otto Carlos Muniz Bandeira Duarte
• Grantee: Otto Carlos Muniz Bandeira Duarte
• Host Institution: Instituto Alberto Luiz Coimbra de Pós-Graduação e Pesquisa (COPPE). Universidade Federal do Rio de Janeiro (UFRJ). Ministério da Educação (Brasil)
• Associated researchers: Anelise Munaretto Fonseca ; Mauro Sérgio Pereira Fonseca

Abstract

Most of current threats are detected long after they occurred, considerably increasing the risk of irreparable damages, and disabling any defense attempt. The late detection of those threats is a consequence of the high complexity of the attacks, more specialized every day, and the huge amount of data (Big Data) to be analyzed and monitored by security specialists. Although very hard analyze, attacks always leave traces, or trails, that can be detected with machine learning techniques through real-time stream processing. The efficiency of the defense mechanisms requires reducing the detection time of threats, from months to minutes or hours. Therefore, the STREAM project focuses on collecting, enriching data, and processing data in real-time to detect security threats. We propose to develop a platform to promptly detect security threat and start an immediate defense of the target. The project propose the development of a platform for real time threat detection, which is based in open source tools and released to the community. The services provided by the proposed platform ensure system security for both known and unknown attacks through various automated machine learning methods of attack classification and network anomaly detection. (AU)

Scientific publications

(13)

(References retrieved automatically from Web of Science and SciELO through information on FAPESP grants and their corresponding numbers as mentioned in the publications by the authors)

LOPEZ, MARTIN ANDREONI; MATTOS, DIOGO M. F.; DUARTE, OTTO CARLOS M. B.; PUJOLLE, GUY. A fast unsupervised preprocessing method for network monitoring. ANNALS OF TELECOMMUNICATIONS, v. 74, n. 3-4, SI, p. 139-155, APR 2019. (15/24485-9, 14/50937-1, 15/24514-9)

FERRAZANI MATTOS, DIOGO MENEZES; VELLOSO, PEDRO BRACONNOT; MUNIZ BANDEIRA DUARTE, OTTO CARLOS. An agile and effective network function virtualization infrastructure for the Internet of Things. JOURNAL OF INTERNET SERVICES AND APPLICATIONS, v. 10, MAR 15 2019. (14/50937-1, 15/24514-9, 15/24485-9)

FERRAZANI MATTOS, DIOGO MENEZES; MUNIZ BANDEIRA DUARTE, OTTO CARLOS; PUJOLLE, GUY. A lightweight protocol for consistent policy update on software-defined networking with multiple controllers. JOURNAL OF NETWORK AND COMPUTER APPLICATIONS, v. 122, p. 77-87, NOV 15 2018. (14/50937-1, 15/24514-9, 15/24485-9)

TORRES, JOAO VITOR; ALVARENGA, IGOR DRUMMOND; BOUTABA, RAOUF; MUNIZ BANDEIRA DUARTE, OTTO CARLOS. Evaluating CRoS-NDN: a comparative performance analysis of a controller-based routing scheme for named-data networking. JOURNAL OF INTERNET SERVICES AND APPLICATIONS, v. 10, n. 1, DEC 2019. (14/50937-1, 15/24485-9, 15/24514-9)

REBELLO, GABRIEL ANTONIO F.; ALVARENGA, IGOR D.; SANZ, IGOR J.; DUARTE, OTTO CARLOS M. B.; IEEE. BSec-NFVO: A Blockchain-based Security for Network Function Virtualization Orchestration. ICC 2019 - 2019 IEEE INTERNATIONAL CONFERENCE ON COMMUNICATIONS (ICC), v. N/A, p. 6-pg., 2019-01-01. (15/24485-9, 14/50937-1, 15/24514-9)

REBELLO, GABRIEL ANTONIO F.; CAMILO, GUSTAVO F.; POTOP-BUTUCARU, MARIA; CAMPISTA, MIGUEL ELIAS M.; DE AMORIM, MARCELO DIAS; COSTA, LUIS HENRIQUE M. K.; IEEE. PCNsim: A Flexible and Modular Simulator for Payment Channel Networks. IEEE INFOCOM 2022 - IEEE CONFERENCE ON COMPUTER COMMUNICATIONS WORKSHOPS (INFOCOM WKSHPS), v. N/A, p. 2-pg., 2022-01-01. (15/24485-9, 15/24494-8, 18/23292-0, 14/50937-1, 15/24514-9)

REBELLO, GABRIEL ANTONIO F.; CAMILO, GUSTAVO F.; SILVA, LEONARDO G. C.; GUIMARAES, LUCAS C. B.; DE SOUZA, LUCAS AIRAM C.; ALVARENGA, IGOR D.; DUARTE, OTTO CARLOS M. B.; IEEE. Providing a Sliced, Secure, and Isolated Software Infrastructure of Virtual Functions Through Blockchain Technology. 2019 IEEE 20TH INTERNATIONAL CONFERENCE ON HIGH PERFORMANCE SWITCHING AND ROUTING (IEEE HPSR), v. N/A, p. 6-pg., 2019-01-01. (15/24485-9, 15/24514-9, 14/50937-1)

LOPEZ, MARTIN ANDREONI; PASTANA LOBATO, ANTONIO GONZALEZ; DUARTE, OTTO CARLOS M. B.; PUJOLLE, GUY; URIEN, P; PIRAMUTHU, S. An Evaluation of a Virtual Network Function for Real-Time Threat Detection using Stream Processing. PROCEEDINGS OF THE 2018 FOURTH INTERNATIONAL CONFERENCE ON MOBILE AND SECURE SERVICES (MOBISECSERV), v. N/A, p. 5-pg., 2018-01-01. (15/24485-9, 15/24514-9, 14/50937-1)

ALVARENGA, IGOR D.; REBELLO, GABRIEL A. F.; DUARTE, OTTO CARLOS M. B.; IEEE. Securing Configuration Management and Migration of Virtual Network Functions Using Blockchain. NOMS 2018 - 2018 IEEE/IFIP NETWORK OPERATIONS AND MANAGEMENT SYMPOSIUM, v. N/A, p. 9-pg., 2018-01-01. (15/24485-9, 15/24514-9, 14/50937-1)

CAMILO, GUSTAVO F.; REBELLO, GABRIEL ANTONIO F.; DE SOUZA, LUCAS AIRAM C.; DUARTE, OTTO CARLOS M. B.; IEEE. AutAvailChain: Automatic and Secure Data Availability through Blockchain. 2020 IEEE GLOBAL COMMUNICATIONS CONFERENCE (GLOBECOM), v. N/A, p. 6-pg., 2020-01-01. (14/50937-1, 15/24514-9, 18/23292-0)

SANZ, IGOR JOCHEM; FERRAZANI MATTOS, DIOGO MENEZES; MUNIZ BANDEIRA DUARTE, OTTO CARLOS; IEEE. SFCPerf: An Automatic Performance Evaluation Framework for Service Function Chaining. NOMS 2018 - 2018 IEEE/IFIP NETWORK OPERATIONS AND MANAGEMENT SYMPOSIUM, v. N/A, p. 9-pg., 2018-01-01. (15/24485-9, 15/24514-9, 14/50937-1)

PASTANA LOBATO, ANTONIO GONZALEZ; LOPEZ, MARTIN ANDREONI; SANZ, IGOR JOCHEM; CARDENAS, ALVARO A.; DUARTE, OTTO CARLOS M. B.; PUJOLLE, GUY; IEEE. An Adaptive Real-Time Architecture for Zero-Day Threat Detection. 2018 IEEE INTERNATIONAL CONFERENCE ON COMMUNICATIONS (ICC), v. N/A, p. 6-pg., 2018-01-01. (15/24485-9, 15/24514-9, 14/50937-1)

LOPEZ, MARTIN ANDREONI; MATTOS, DIOGO M. F.; DUARTE, OTTO CARLOS M. B.; PUJOLLE, GUY. A fast unsupervised preprocessing method for network monitoring. ANNALS OF TELECOMMUNICATIONS, v. 74, n. 3-4, p. 17-pg., 2019-04-01. (15/24485-9, 15/24514-9, 14/50937-1)