{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,22]],"date-time":"2025-10-22T05:20:37Z","timestamp":1761110437171,"version":"build-2065373602"},"reference-count":24,"publisher":"MDPI AG","issue":"12","license":[{"start":{"date-parts":[[2018,12,4]],"date-time":"2018-12-04T00:00:00Z","timestamp":1543881600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61472438","61303264"],"award-info":[{"award-number":["61472438","61303264"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Symmetry"],"abstract":"<jats:p>Efficient network monitoring is an important basis work for network management. Generally, many management applications require accurate and timely statistics about network states at different aggregation levels at low cost, such as malicious traffic detection, traffic engineering, etc. Moreover, the network environment to be monitored is constantly changing and expanding, including not only the data center for cloud computing but also the Internet of Things (IoT) for smart urban sensing, which requires the intensive study of more fine-grained network monitoring. As is well known, the development of efficient network monitoring approaches greatly relies on a flexible monitoring framework. Software defined network (SDN) can provide dramatic advantages for network management by separating the control plane and data plane. Therefore, it is a good choice to design a flexible monitoring framework based on the advantages of SDN. However, most research works only take advantage of the centralized control feature in SDN, which leads to limited improvement in the flexibility of the monitoring framework. This paper proposes a flexible monitoring framework named FlexMonitor, which can realize greater flexibility based on not only the centralized control feature, but also the high programmability in the controller and the limited programmability in the openflow switches in SDN. There are two key parts in FlexMonitor, namely the monitoring strategy deployment part and the monitoring data collection part, which can enrich the deployment methods of monitoring strategies and increase the kinds of monitoring data sources, respectively. Based on the NetMagic platform, this monitoring framework was implemented and evaluated through realizing a distributed denial of service (DDoS) detection approach. The experimental results show that the proposed DDoS detection approach has a better detection performance compared with other related approaches as well as indirectly show that FlexMonitor can flexibly support a variety of efficient monitoring approaches.<\/jats:p>","DOI":"10.3390\/sym10120713","type":"journal-article","created":{"date-parts":[[2018,12,4]],"date-time":"2018-12-04T11:56:18Z","timestamp":1543924578000},"page":"713","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":13,"title":["FlexMonitor: A Flexible Monitoring Framework in SDN"],"prefix":"10.3390","volume":"10","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3039-9214","authenticated-orcid":false,"given":"Binfeng","family":"Wang","sequence":"first","affiliation":[{"name":"College of Computer, National University of Defense Technology, Changsha 410073, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jinshu","family":"Su","sequence":"additional","affiliation":[{"name":"Science and Technology On Parallel and Distributed Processing Laboratory, National University of Defense Technology, Changsha 410073, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2018,12,4]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"1533","DOI":"10.1109\/TNET.2015.2417809","article-title":"Estimating Traffic and Anomaly Maps via Network Tomography","volume":"24","author":"Mardani","year":"2016","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Kim, J., Sim, A., Sang, C.S., and Kim, I. (2017, January 26\u201329). An approach to online network monitoring using clustered patterns. Proceedings of the International Conference on Computing, Networking and Communications, Silicon Valley, CA, USA.","DOI":"10.1109\/ICCNC.2017.7876207"},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Yu, C., Lumezanu, C., Zhang, Y., Singh, V., Jiang, G., and Madhyastha, H.V. (2013, January 18\u201319). FlowSense: Monitoring Network Utilization with Zero Measurement Cost. Proceedings of the International Conference on Passive and Active Network Measurement, Hong Kong, China.","DOI":"10.1007\/978-3-642-36516-4_4"},{"key":"ref_4","unstructured":"Yang, Z., and Yeung, K.L. (May, January 30). An efficient flow monitoring scheme for SDN networks. Proceedings of the 2017 IEEE 30th Canadian Conference on Electrical and Computer Engineering, Windsor, ON, Canada."},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Shirali-Shahreza, S., and Ganjali, Y. (2015, January 17\u201321). Traffic statistics collection with FleXam. Proceedings of the ACM Conference on SIGCOMM, London, UK.","DOI":"10.1145\/2619239.2631441"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"466","DOI":"10.1145\/2043164.2018524","article-title":"Using NetMagic to observe fine-grained per-flow latency measurements","volume":"41","author":"Li","year":"2011","journal-title":"ACM SiGCOMM Comput. Commun. Rev."},{"key":"ref_7","unstructured":"Xuan, T.P., and Fukuda, K. (2017, January 26\u201330). Adaptive and distributed monitoring mechanism in software-defined networks. Proceedings of the International Conference on Network and Service Management, Tokyo, Japan."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Shah, S.A.R., Bae, S., Jaikar, A., and Noh, S.Y. (2016, January 5\u20137). An adaptive load monitoring solution for logically centralized SDN controller. Proceedings of the Network Operations and Management Symposium, Kanazawa, Japan.","DOI":"10.1109\/APNOMS.2016.7737207"},{"key":"ref_9","unstructured":"Xiao, K. (2018). The Research and Application of Simple Network Management Protocol SNMP. China Comput. Commun., Available online: http:\/\/erlang.org\/doc\/apps\/snmp\/snmp.pdf."},{"key":"ref_10","unstructured":"Li, Y., Kim, C., Kim, C., and Yu, M. (2016, January 16\u201318). FlowRadar: A better NetFlow for data centers. Proceedings of the Usenix Conference on Networked Systems Design and Implementation, Santa Clara, CA, USA."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"52","DOI":"10.1016\/j.comcom.2017.05.002","article-title":"Controller-proxy: Scaling network management for large-scale SDN networks","volume":"108","author":"Song","year":"2017","journal-title":"Comput. Commun."},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Megyesi, P., Botta, A., and Aceto, G. (2016, January 4\u20138). Available bandwidth measurement in software defined networks. Proceedings of the 31st Annual ACM Symposium on Applied Computing, Pisa, Italy.","DOI":"10.1145\/2851613.2851727"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Tang, F., Li, L., Barolli, L., and Tang, C. (2017, January 27\u201329). An Efficient Sampling and Classification Approach for Flow Detection in SDN-Based Big Data Centers. Proceedings of the IEEE International Conference on Advanced Information Networking and Applications, Taipei, Taiwan.","DOI":"10.1109\/AINA.2017.125"},{"key":"ref_14","unstructured":"Adrichem, N.L.M.V., Doerr, C., and Kuipers, F.A. (2014, January 5\u20139). OpenNetMon: Network monitoring in OpenFlow Software-Defined Networks. Proceedings of the Network Operations and Management Symposium, Krakow, Poland."},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Henni, D.E., Hadjaj-Aoul, Y., and Ghomari, A. (2017, January 25\u201327). Probe-SDN: A smart monitoring framework for SDN-based networks. Proceedings of the Global Information Infrastructure and NETWORKING Symposium, Saint Pierre, France.","DOI":"10.1109\/GIIS.2016.7814940"},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Chowdhury, S.R., Bari, M.F., Ahmed, R., and Boutaba, R. (2014, January 5\u20139). PayLess: A low cost network monitoring framework for Software Defined Networks. Proceedings of the Network Operations and Management Symposium, Krakow, Poland.","DOI":"10.1109\/NOMS.2014.6838227"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Su, Z., Wang, T., Xia, Y., and Hamdi, M. (2015, January 8\u201312). FlowCover: Low-cost flow monitoring scheme in software defined networks. Proceedings of the Global Communications Conference, Austin, TX, USA.","DOI":"10.1109\/GLOCOM.2014.7037094"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"55","DOI":"10.1109\/MCOM.2015.7263373","article-title":"Software-defined internet of things for smart urban sensing","volume":"53","author":"Liu","year":"2015","journal-title":"IEEE Commun. Mag."},{"key":"ref_19","unstructured":"Xu, Y., Yan, Y., Dai, Z., and Wang, X. (May, January 27). A management model for SDN-based data center networks. Proceedings of the Computer Communications Workshops, Toronto, ON, Canada."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"22","DOI":"10.1080\/23335777.2017.1358765","article-title":"RFID-based smart parking management system","volume":"3","author":"Tsiropoulou","year":"2017","journal-title":"Cyber-Phys. Syst."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"651","DOI":"10.1007\/s11276-007-0088-8","article-title":"A game-theoretic analysis of denial of service attacks in wireless random access","volume":"15","author":"Sagduyu","year":"2009","journal-title":"Wirel. Netw."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Tsiropoulou, E.E., Baras, J.S., Papavassiliou, S., and Qu, G. (2016, January 2\u20134). On the Mitigation of Interference Imposed by Intruders in Passive RFID Networks. Proceedings of the International Conference on Decision and Game Theory for Security, New York, NY, USA.","DOI":"10.1007\/978-3-319-47413-7_4"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Kandoi, R., and Antikainen, M. (2015, January 11\u201315). Denial-of-service attacks in OpenFlow SDN networks. Proceedings of the IFIP\/IEEE International Symposium on Integrated Network Management, Ottawa, ON, Canada.","DOI":"10.1109\/INM.2015.7140489"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Yang, X., Han, B., Sun, Z., and Huang, J. (2017, January 4\u20138). SDN-based DDoS Attack Detection with Cross-Plane Collaboration and Lightweight Flow Monitoring. Proceedings of the GLOBECOM 2017, Singapore.","DOI":"10.1109\/GLOCOM.2017.8254079"}],"container-title":["Symmetry"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2073-8994\/10\/12\/713\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T15:31:03Z","timestamp":1760196663000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2073-8994\/10\/12\/713"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,12,4]]},"references-count":24,"journal-issue":{"issue":"12","published-online":{"date-parts":[[2018,12]]}},"alternative-id":["sym10120713"],"URL":"https:\/\/doi.org\/10.3390\/sym10120713","relation":{},"ISSN":["2073-8994"],"issn-type":[{"type":"electronic","value":"2073-8994"}],"subject":[],"published":{"date-parts":[[2018,12,4]]}}}