.png){kind=icon}
返回
B-DAC: A decentralized access control framework on Northbound interface for securing SDN using blockchain
.png){kind=icon}
OA
AI
DOI：10.1016/j.jisa.2021.103080.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Software-Defined Network (SDN) is a new arising terminology of network architecture with outstanding features of orchestration by decoupling the control plane and the data plane in each network element. Even though it brings several benefits, SDN is vulnerable to a diversity of attacks. Abusing the single point of failure in the SDN controller component, hackers can shut down all network operations. More specifics, a malicious OpenFlow application can access to SDN controller to carry out harmful actions without any limitation owing to the lack of the access control mechanism as a standard in the Northbound. The sensitive information about the whole network such as network topology, flow information, and statistics can be gathered and leaked out. Even worse, the entire network can be taken over by the compromised controller. Hence, it is vital to build a scheme of access control for SDN's Northbound. Furthermore, it must also protect the data integrity and availability during data exchange between application and controller. To address such limitations, we introduce B-DAC, a blockchain-based framework for decentralized authentication and fine-grained access control for the Northbound interface to assist administrators in managing and protecting critical resources. With strict policy enforcement, B-DAC can perform decentralized access control for each request to keep network applications under surveillance for preventing over-privileged activities or security policy conflicts. To demonstrate the feasibility of our approach, we also implement a prototype of this framework to evaluate the security impact, effectiveness, and performance through typical use cases.
Keyword:
SDN security
Access control policy
Northbound interface
Blockchain adoption
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
3.7
论文数:
2.0K
被引数:
4.9K
机构
引用论文
Latency performance modeling and analysis for hyperledger fabric blockchain networkhyperledger fabric区块链网络时延性能建模与分析
PREAI
分享收藏Bubbles of Trust: A decentralized blockchain-based authentication system for IoT信任的泡沫: 基于区块链的分散式IoT身份验证系统.png)
COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏
分享收藏SEAPP: A secure application management framework based on REST API access control in SDN-enabled cloud environmentSEAPP: 在支持SDN的云环境中基于REST API访问控制的安全应用管理框架
PREAI
分享收藏
查看更多内容