.png){kind=icon}
返回
Mitigating attacks in software defined networks
.png){kind=icon}
PRE
AI
DOI：10.1007/s10586-018-02900-2.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Future network innovation lies in software defined networking (SDN). This innovative technology has revolutionised the networking world for half a decade and contributes to transform legacy network architectures. This transformation blesses the networking world with improved performance and quality of service. However, security for SDN remains an afterthought. In this paper we present a detailed discussion of some of the attacks possible in SDN and techniques to deal with the attacks. The threat model will consider some significantly vulnerable areas in SDN which can lead to severe network security breaches. In particular, we describe different attacks such as attacks on the Controller, attacks on networking devices, attacks exploiting the communication links between the control plane and the data plane and different types of topology poisoning attacks. We then propose techniques to deal with some of the attacks in SDN. We make use of northbound security application on the Controller and OpenFlow agents in the networking devices for enforcing security policies in the data plane. The security application is used for specification and storage of the security policies and to make decisions on the enforcement of security policies to deal with different types of attacks. We will describe the prototype implementation of our approach using ONOS Controller and demonstrate its effectiveness against different types of attacks.
Keyword:
Software defined networking (SDN) security
Threat model
Policy control
期刊
C
IF:
4.1
论文数:
5.0K
被引数:
7.5K
机构
引用论文
.png){kind=icon}
An autonomous 16 mm/sup 3/ solar-powered node for distributed wireless sensor networks用于分布式无线传感器网络的自治16毫米/sup3/太阳能节点
PREAI
分享收藏
分享收藏分享收藏Organometallic and Bioactive Cyclophosphazenes, and the Relationship to Inorganic Macromolecules
PREAI
分享收藏
查看更多内容