.png){kind=icon}
返回
SEAPP: A secure application management framework based on REST API access control in SDN-enabled cloud environment
.png){kind=icon}
PRE
AI
DOI：10.1016/j.jpdc.2020.09.006.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Cloud computing provides scalable network services and makes network management more flexible by combining Software-Defined Networking (SDN). Through the northbound interface (e.g., REST API) offered by the SDN controller, users can easily deploy diversified applications to access the network resources. However, exploiting the openness of the northbound interface, malicious applications abuse APIs to launch hostile attacks, which poses serious threats to the network. In this paper, we propose SEAPP, a secure application management framework based on REST API access control. Our main idea is to granularly manage application permissions and encrypt REST API calls to defend against malicious attacks. SEAPP includes two components: 1) permissions detection engine identifies the facticity of application permissions by analyzing permission manifests and byte codes and further identifies the legality of permissions with constructed sensitive API list; 2) registration authorization engine executes encrypted registration between applications and controller by virtue of NTRU algorithm and authorizes applications to call the requested REST APIs based on their risk levels after securely authenticating them. Besides, SEAPP is a lightweight logic architecture between application plane and control plane and supports quick deployment and reconfiguration in runtime. Both theoretical analysis and evaluation results show the security and effectiveness of SEAPP. Besides, SEAPP introduces negligible CPU and memory overheads. (C) 2020 Elsevier Inc. All rights reserved.
Keyword:
Cloud
Software-Defined Networking
Network security
Application
REST API
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
4
论文数:
3.8K
被引数:
4.8K
机构
引用论文
.png){kind=icon}
An autonomous 16 mm/sup 3/ solar-powered node for distributed wireless sensor networks用于分布式无线传感器网络的自治16毫米/sup3/太阳能节点
PREAI
分享收藏分享收藏MORPH: An Adaptive Framework for Efficient and Byzantine Fault-Tolerant SDN Control PlaneMORPH: 一种高效拜占庭式容错SDN控制平面的自适应框架
OAAI
OAAI分享收藏分享收藏
查看更多内容