A Compatible OpenFlow Platform for Enabling Security Enhancement in SDN
Joint Authors
Liu, Jianwei
Chen, Jie
Mao, Jian
Bian, Jingdong
Cheng, Haosu
Wang, Mengmeng
Source
Security and Communication Networks
Issue
Vol. 2018, Issue 2018 (31 Dec. 2018), pp.1-20, 20 p.
Publisher
Hindawi Publishing Corporation
Publication Date
2018-11-15
Country of Publication
Egypt
No. of Pages
20
Main Subjects
Information Technology and Computer Science
Abstract EN
Software-defined networking (SDN) is a representative next generation network architecture, which allows network administrators to programmatically initialize, control, change, and manage network behavior dynamically via open interfaces.
SDN is widely adopted in systems like 5G mobile networks and cyber-physical systems (CPS).
However, SDN brings new security problems, e.g., controller hijacking, black-hole, and unauthorized data modification.
Traditional firewall or IDS based solutions cannot fix these challenges.
It is also undesirable to develop security mechanisms in such an ad hoc manner, which may cause security conflict during the deployment procedure.
In this paper, we propose OSCO (Open Security-enhanced Compatible OpenFlow) platform, a unified, lightweight platform to enhance the security property and facilitate the security configuration and evaluation.
The proposed platform supports highly configurable cryptographic algorithm modules, security protocols, flexible hardware extensions, and virtualized SDN networks.
We prototyped our platform based on the Raspberry Pi Single Board Computer (SBC) hardware and presented a case study for switch port security enhancement.
We systematically evaluated critical security modules, which include 4 hash functions, 8 stream/block ciphers, 4 public-key cryptosystems, and key exchange protocols.
The experiment results show that our platform performs those security modules and SDN network functions with relatively low computational (extra 2.5% system overhead when performing AES-256 and SHA-256 functions) and networking performance overheads (73.7 Mb/s TCP and 81.2Mb/s UDP transmission speeds in 100Mb/s network settings).
American Psychological Association (APA)
Cheng, Haosu& Liu, Jianwei& Mao, Jian& Wang, Mengmeng& Chen, Jie& Bian, Jingdong. 2018. A Compatible OpenFlow Platform for Enabling Security Enhancement in SDN. Security and Communication Networks،Vol. 2018, no. 2018, pp.1-20.
https://search.emarefa.net/detail/BIM-1214432
Modern Language Association (MLA)
Cheng, Haosu…[et al.]. A Compatible OpenFlow Platform for Enabling Security Enhancement in SDN. Security and Communication Networks No. 2018 (2018), pp.1-20.
https://search.emarefa.net/detail/BIM-1214432
American Medical Association (AMA)
Cheng, Haosu& Liu, Jianwei& Mao, Jian& Wang, Mengmeng& Chen, Jie& Bian, Jingdong. A Compatible OpenFlow Platform for Enabling Security Enhancement in SDN. Security and Communication Networks. 2018. Vol. 2018, no. 2018, pp.1-20.
https://search.emarefa.net/detail/BIM-1214432
Data Type
Journal Articles
Language
English
Notes
Includes bibliographical references
Record ID
BIM-1214432