PERM-GUARD: Authenticating the Validity of Flow Rules in Software Defined Networking

详细信息    查看全文

• 作者：Mengmeng Wang ; Jianwei Liu ; Jie Chen ; Xiao Liu…
• 关键词：Software Defined Networking ; Flow ; rule ; validity authentication ; Identity ; based signature ; Flow rule production permissions management
• 刊名：Journal of Signal Processing Systems
• 出版年：2017
• 出版时间：March 2017
• 年：2017
• 卷：86
• 期：2-3
• 页码：157-173
• 全文大小：
• 刊物类别：Engineering
• 刊物主题：Signal,Image and Speech Processing; Circuits and Systems; Electrical Engineering; Image Processing and Computer Vision; Pattern Recognition; Computer Imaging, Vision, Pattern Recognition and Graphics;
• 出版者：Springer US
• ISSN：1939-8115
• 卷排序：86

文摘

Software Defined Networking (SDN) is one type of the flow-rule-driven networks. In SDN, a centralized controller dictates the network behavior and configures network devices via flow rules. Therefore, the validity and consistency of flow rules are the critical for the security of operations in SDN, requiring a secure and efficient mechanism to manage and authenticate flow rules between the controller and network devices. In this paper, we aim to develop solutions to guarantee the validity of flow rules in SDN. We analyze the mechanisms that generate and manage flow rules in SDN, and present PERM-GUARD, a fine-grained permission management and authentication scheme for flow rules in SDN. PERM-GUARD employs a new permission authentication model and introduces an identity-based signature scheme for the controller to verify the validity of flow rules. We conduct theoretical analysis and simulation-based evaluation of PERM-GUARD. The results demonstrate that PERM-GUARD can efficiently identify and reject fake flow rules generated by unregistered applications. Meanwhile, it can also effectively filter out unauthorized flow rules created by valid applications, and trace their creator timely and accurately.