RADAR: A Comprehensive and Dynamic Framework toward Real time Network Traffic Resiliency

This effort proposes a comprehensive framework to design and develop an intelligent, dynamic and real time traffic monitoring/filtering system to identify and covertly divert suspicious/malicious traffic (within an enterprise network) to specific locations for further analysis and to ensure resilient network traffic boundary. The proposed approach exploits existing algorithms/technologies (e.g., commercial traffic monitoring/filtering tools, threat detection algorithms, commercial routers configurations) to develop a complete traffic resilience enabling system that dynamically monitors, detects and intelligently redirects suspicious traffic to isolated locations in the network in a real time manner. We refer to the proposed framework as Realtime, Adaptive and Dynamic trAffic Resilient, the RADAR framework. Using IAIfs experimental network testbed, we will study the feasibility of the proposed RADAR framework over a network comprising of hybrid sets of routers. We will integrate software routers, routers which support open source firmware, such as OpenWrt or DD-WRT, and other widely used commercial routers such as CISCO, Juniper and Linksys into our implementation. A preliminary prototype will be provided to demonstrate our Dynamic Traffic Resilience mechanisms.