This post comes to us courtesy of Prof. Cees de Laat and his team from the University of Amsterdam.
SARNET, Secure Autonomous Response NETworks, is a project funded by the
Dutch Research Foundation . The University of Amsterdam, TNO, KLM, and
Ciena conduct research on automated methods against attacks on computer
network infrastructures. By using the latest techniques in Software
Defined Networking and Network Function Virtualization, a SARNET can use
advanced methods to defend against cyber-attacks and return the network
to its normal state. The research goal of SARNET is to obtain the
knowledge to create ICT systems that: 1) model the system’s state based
on the emerging behavior of its components; 2) discover by observations
and reasoning if and how an attack is developing and calculate the
associated risks; 3) have the knowledge to calculate the effect of
countermeasures on states and their risks; 4) choose and execute the
most effective countermeasure.
Similar to the SC15 demonstration,, we showed an interactive touch
table based demonstration that controls a Software Defined Network
running on the ExoGENI infrastructure.
In the SC16 demo  the visitor selects the attack type and its origin, the
system will respond and defend against this attack autonomously. The
response includes the use of security VNF’s that are deployed using
ExoGeni infrastructure when required for analysis or mitigation,
the underlying Software Defined Network routes the attack traffic to the
VNF for analysis or mitigation. The demo showed how Network Function
Virtualization and Software Defined Networks can be useful in attack
mitigation and how they can be used effectively in setting up autonomous
responses to higher layer attacks.
 SARNET project page: http://www.delaat.net/sarnet
 SARNET demonstration at SC15 – http://sc.delaat.net/sc15/SARNET.html
 R. Koning et al., “Interactive analysis of sdn-driven defence
against distributed denial of service attacks,” in “2016 IEEE NetSoft
Conference and Workshops (NetSoft),” (IEEE, 2016), pp. 483–488.
 SARNET demonstration at SC16 – http://sc.delaat.net/