.png){kind=icon}
返回
Dynamic Packet Forwarding Verification in SDN
.png){kind=icon}
PRE
AI
DOI：10.1109/TDSC.2018.2810880.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Like traditional IP networking, the emerging Software-Defined Networking (SDN) technology is vulnerable to sophisticated attacks against packets and their forwarding behaviors. However, existing proposals of packet forwarding verification for IP networking cannot be directly applied to the current SDN deployment due to the limited functionalities and resources in commercial off-the-shelf (COTS) SDN switches. We propose DynaPFV, a dynamic packet forwarding verification mechanism that is capable of detecting various sophisticated attacks against packet forwarding. DynaPFV leverages the controllability of SDN to examine both packets and flow statistics across a network of switches to detect violation of packet integrity and forwarding behaviors. To mitigate the verification overhead, DynaPFV dynamically adjusts the rates of packet sampling and flow statistics collection based on the prior detection results in order to preserve the verification accuracy. Furthermore, DynaPFV makes changes to the SDN controller only, and is directly deployable atop COTS SDN switches without modifications. We conduct theoretical analysis on the trade-off between performance and accuracy in our dynamic verification approach. We further prototype DynaPFV using the open-source Floodlight controller, and evaluate our DynaPFV prototype using Mininet simulations and hardware testbed experiments. DynaPFV achieves over 97 percent of verification accuracy only with less than 5 percent of throughput degradation and less than 10 percent of additional forwarding delays.
Keyword:
Control systems
Cryptography
Protocols
IP networks
Software
Prototypes
Delays
Software-defined networking
attacks
forwarding verification
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
7.5
论文数:
2.6K
被引数:
9.6K
机构
引用论文
.png){kind=icon}
An acknowledgment-based approach for the detection of routing misbehavior in MANETs一种基于确认的manet路由错误行为检测方法
PREAI
分享收藏分享收藏Identification and characterization of intermediates in the formation of the cyclobutadiene linked dimeric cobalt sandwich compound [( ${\eta ^{5}}$ -RCp)Co( ${\eta^{4}}$ -C 4 Ph 3 )] 2 [R ${=}$ H, CH 3 C(O)O]环丁二烯连接的二聚钴夹心化合物 [( ${\ eta ^{5 }}$ -RCp)Co( ${\ eta ^{4 }}$ -C 4 Ph 3 )] 2 [R ${=}$ H，CH 3 C(O)O] 形成过程中中间体的鉴定和表征
OAAI
OAAI分享收藏
查看更多内容