Software-defined networking (SDN) decouples the control plane from the data plane, offering flexible network configuration and management. Because of this architecture, some security features are missing. On the one hand, because the data plane only has the packet forwarding function, it is impossible to effectively authenticate the data validity. On the other hand, OpenFlow can only match based on network characteristics, and it is impossible to achieve fine-grained access control. In this paper, we aim to develop solutions to guarantee the validity of flow in SDN and present Attribute-Guard, a fine-grained access control and authentication scheme for flow in SDN. We design an attribute-based flow authentication protocol to verify the legitimacy of the validity flow. The attribute identifier is used as a matching field to define a forwarding control. The flow matching based on the attribute identifier and the flow authentication protocol jointly implement fine-grained access control. We conduct theoretical analysis and simulation-based evaluation of Attribute-Guard. The results show that Attribute-Guard can efficiently identify and reject fake flow.

No abstract

A lightweight authentication and key distribution protocol for VANET (Vehicle ad-hoc Network) was proposed by reducing the overload of network communication and vehicle gateway calculation. Both parties of communication could accomplish authentication without trusted third party by presetting each other's certificates. Session key was generated and distributed by cloud server to reduce times of data switch and calculation complexity of vehicle gateway. Lastly, BAN logic was used to decrease redundancy and to assure validity of the protocol. Applicability analysis and simulation show that proposed protocol has the advantage in the aspect of calculation and access time, and it fits VANET well.

No abstract