Towards a reliable firewall for software-defined networks

doi:10.1016/j.cose.2019.101597

2019-11-01

DOI：10.1016/j.cose.2019.101597

原文链接

查看原文

摘要

En 中文

Software-Defined Networking (SDN) is an emerging paradigm in networking where network control plane is decoupled from forwarding plane through programmable control. OpenFlow - the most popular SDN platform - introduces significant granularity, visibility and flexibility to networking, but at the same time brings forth new security challenges. One of the fundamental challenges is to build a reliable firewall for protecting OpenFlow networks where network states and traffic are frequently changed. To address this challenge, we introduce FLOWMON, an OpenFlow-based firewall, to support network-wide access control by facilitating not only accurate violation detection but also effective violation resolution in dynamic OpenFlow networks. FLOWMON detects firewall policy violations by checking flow path space against firewall authorization space when a flow entry or firewall rule is inserted, modified, or deleted. In particular, FLOWMON conducts automatic and real-time violation resolutions with the help of several innovative resolution strategies applied to diverse network update situations. We also implement a prototype of FLOWMON in Floodlight. Our experimental results demonstrate FLOWMON effectively addresses violations in a real-world network topology, and produces manageable performance overhead with effective violation detection and resolution. Published by Elsevier Ltd.

Keyword:

Firewalls

Policy violation

Software-Defined networking

Openfiow

Network security

AI总结

对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

Computers and Security

IF:

5.4

论文数:

4.6K

被引数:

1.4W

机构

Arizona State University

学者数:

2.7W

论文数: 2.5W

被引数: 4.2W

Rochester Institute of Technology

学者数:

3.8K

论文数: 3.3K

被引数: 45

arizona state university-tempe

学者数:

1.5W

论文数: 1.2W

被引数: 13

Clemson University

学者数:

1.3W

论文数: 1.1W

被引数: 1.4W

查看更多机构

引用论文

Reduction potentials of blue and purple copper proteins in their unfolded states: a closer look at rack-induced coordination

JBIC Journal of Biological Inorganic Chemistry

IF0

1998-08-01

PREAI

Pernilla Wittung-Stafshede; Michael G. Hill; Ester Gomez; A. J. Di Bilio; B. Göran Karlsson; Johan Leckner; J. R. Winkler; Harry B. Gray; B. G. Malmström

An autonomous 16 mm/sup 3/ solar-powered node for distributed wireless sensor networks 用于分布式无线传感器网络的自治16毫米/sup3/太阳能节点

Proceedings of IEEE Sensors

IF0

2024-10-30

PREAI

B.A. Warneke; M.D. Scott; B.S. Leibowitz; Lixia Zhou; C.L. Bellew; J.A. Chediak; J.M. Kahn; B.E. Boser; K.S.J. Pister

Topology Discovery in Software Defined Networks: Threats, Taxonomy, and State-of-the-Art

IEEE COMMUNICATIONS SURVEYS AND TUTORIALS

IF46.7

2017-01-01

124

PREAI