arrow
Return

RouteGuardian: Constructing Secure Routing Paths in Software-Defined Networking

delete2017-08-01
delete25
delete
OA
AI
M
Mengmeng Wang
J
Jianwei Liu
毛剑 (Jian Mao) *
H
Haosu Cheng
J
Jie Chen
C
Chan Qi
DOI:10.23919/TST.2017.7986943delete
deleteOriginal
deleteShare
deleteSave
View PDF
Abstract

Abstract

En 中文
Software-Defined Networking (SDN) decouples the control plane and the data plane in network switches and routers, which enables the rapid innovation and optimization of routing and switching configurations. However, traditional routing mechanisms in SDN, based on the Dijkstra shortest path, do not take the capacity of nodes into account, which may lead to network congestion. Moreover, security resource utilization in SDN is inefficient and is not addressed by existing routing algorithms. In this paper, we propose RouteGuardian, a reliable security-oriented SDN routing mechanism, which considers the capabilities of SDN switch nodes combined with a Network Security Virtualization framework. Our scheme employs the distributed network security devices effectively to ensure analysis of abnormal traffic and malicious node isolation. Furthermore, RouteGuardian supports dynamic routing reconfiguration according to the latest network status. We prototyped RouteGuardian and conducted theoretical analysis and performance evaluation. Our results demonstrate that this approach can effectively use the existing security devices and mechanisms in SDN.
Keywords:
Software-Defined Networking (SDN)
network security virtualization
capacity-based routing
security-oriented routing
dynamic routing reconfiguration
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

T
Tsinghua Science and Technology
IF:
3.5
Papers:
987
Citations:
2.5K

Organization

B
Beihang University
Scholars:
5.2W
Papers: 4.1W
Citations: 37