A trust management framework for software‐defined network applications

Chen

Concurrency and Computation

et al. 2019

Summary Software‐defined networking (SDN) decouples the control and data planes to simplify network management and function deployment. SDN provides a solution for managing large‐scale virtual networks in the cloud environment. However, in the process of SDN network update, various attacks can lead to network state inconsistency. In this paper, a comprehensive and efficient verification scheme is proposed to defend the security threats and guarantee the network state consistency in the cloud environment. The scheme verifies the consistency of network update from two stages of network update request and response. Firstly, the flow path model and the security space are abstracted to quickly verify whether the network request is allowed. Then, a novel forwarding path probing and verification method is designed to validate the actual forwarding path and locate the abnormal path in real time. With the two‐stage verification, the scheme can prevent the spread of illegal flow rules and ensure the correct delivery and execution of flow rules. Finally, we carry out a series of experiments in OpenStack. The results show that the proposed scheme can detect security threats and label the abnormal forwarding path in real time to ensure the network state consistency, while introducing negligible performance overhead.

Section: Security Policies Parsingmentioning

confidence: 99%

“…The result shows that the scheme we proposed can detect attacks in the process of SDN network update effectively. ACC = TP + TN TP + TN + FP + FN (7) FPR = FP FP + TN (8)…”

Section: Network Configurationmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

An efficient scheme for SDN state consistency verification in cloud computing environment

Chen

Concurrency and Computation

et al. 2019

Trans Emerging Tel Tech

“…Thus, in the mentioned environments, in order to establish trust between service users and providers, SLAs alone are not adequate due to their uncertain and changeable conditions 14,25,26 . There are various works have been done in order to manage trust for different context such as WSN, 27‐29 smart IoT, 30 edge computing, 31 multimedia block‐chain privacy protection system, 32 VANET, 33 SDN, 34 but our focus is on TMoS.…”

Section: Introductionmentioning

confidence: 99%

Trust management of services (TMoS): Investigating the current mechanisms

Hayyolalam

Pourghebleh

Kazem

2020

Generally, service interactions in dynamic environments comprising cloud computing, Internet of Things (IoT), and etc. occur in an unspecified situation causing trust management a significant aspect. The widespread usage of services in today's vastly high-tech world reveals the rising necessity of trust management in terms of services. In dynamic environments, there are not enough confidences for users to recognize trustworthy service providers. Hence, evaluating and managing the trustworthiness of services is a vital challenge for enabling customers to select trustworthy resources in dynamic environments. To the extent of our knowledge, in spite of the vital role of Trust Management of Services (TMoS), there is not any thorough and systematic work in this scope with a specific focus on services. Thus, this research investigates the current methods of trust management in terms of services, which are published up to February 2020. We have identified 68 papers that are diminished to 22 mostly qualified papers through the article selection process. Also, we have examined and compared the selected papers in terms of their merits and demerits, considering the important parameters in this field. The investigation results point out that the security, scalability, and dynamicity are essential to almost all research. Furthermore, privacy and reliability are the most essential parameters in the field of TMoS. Moreover, the statistical results and information can contribute to future works; also, we have conducted some open issues and future work suggestions that could be an effective roadmap for future researchers in this area.

International Journal of Distributed Sensor Networks

“…Currently, research on policy conflict detection for SDN has been gradually carried out. For example, for the conflict between traffic scheduling policies and firewall policies, Hu et al 10 proposed the FlowGuard framework to track traffic flows to detect the conflicts with firewall strategies when policies are issued, but this method does not involve conflicts between forwarding policies; FortNOX 11 proposed a security constraint mechanism for OpenFlow controllers to detect indirect security conflicts based on role authorization and constraints, and this mechanism also fails to handle forwarding policy conflicts; Wang et al 12 proposed a detection method for the conflict between traffic scheduling policies and firewall strategies, and this method also unable to resolve the forwarding policy conflict; Shu et al 13 proposed a controller module FLOVER based on NOX to prevent conflicts between network security policies and flow strategies of application, but this method does not involve conflicts between forwarding and auditing. However, most of these methods are only for the strategies conflict between application level and security level.…”

Section: Introductionmentioning

confidence: 99%

A policy conflict detection mechanism for multi-controller software-defined networks

et al. 2019

As the network environment expands and becomes more complex, the deficiencies of decision-making capabilities in the single-controller software-defined network architecture are increasingly exposed. Currently, software-defined networks have gradually adopted a multi-controller-based architecture. However, in this architecture, multiple controllers may cause conflicts in the flow policies, which may cause failures such as security and route conflicts. Most of the existing detection methods are only aimed at specific types of conflicts. Aiming at the above insufficiency, this article proposes a policy conflict detection mechanism for multi-controller software-defined network. First, it quantifies and classifies the software-defined policy conflict itself to provide the basis for detection mechanism; then, it proposes a conflict detection model and its deployment scheme for multi-controller software-defined networks; finally, based on the software-defined flow policy’s structure, a multi-branch tree-based policy conflict detection algorithm is proposed to accurately detect the universal types of conflicts. The experimental results under the campus network environment prove that our method can effectively detect the conflict of flow policies existing in the multi-controller software-defined network and has advantages over the existing methods in the integrity, accuracy, and efficiency of the detection.