Lightweight edge authentication for software defined networks

Almaini, A. E. A.; Al‐Dubai, Ahmed; Romdhani, Imed; Schramm, Martin; Alsarhan, Ayoub

doi:10.1007/s00607-020-00835-4

Cited by 15 publications

(4 citation statements)

References 24 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Almaini et al 15 To ensure that only authorized nodes can access the network; the authors offer two authentication methods using the programming language for protocol-independent packet processors (P4). Port knocking is the first technique, while a One-Time Password is the second.…”

Section: Namentioning

confidence: 99%

Towards a software‐defined networking model for consumer‐centric content delivery network for IoT

Bhardwaj,

Harit,

Yadav

2023

Trans Emerging Tel Tech

View full text Add to dashboard Cite

Every entity must communicate seamlessly in an interconnected network. Personalised delivery of information in an open private network(s) among consumers should be transparent while maintaining privacy. In information‐centric content delivery networks (ICDN) or data‐centric content delivery networks (DCDN), data delivery relies heavily on sharing data with third‐party entities, resulting in a privacy breach. To overcome these challenges, this article proposes a novel communication model with a consumer‐centric content delivery network (CCDN) approach for an internet‐of‐things (IoT) network that deals in personalised information delivery with users' identity and location privacy. The article derives motivation from a use case‐based analysis of the proposed communication model (CCDN) by incorporating the latest technologies like software‐defined networks (SDN) and content delivery network (CDN) into IoT Networks to achieve a higher level of personalisation while maintaining user privacy. CCDN leverages SDN‐based CDN for IoT networks in the designed use case that strictly adheres to user‐defined preferences/demands. The article suggests an environment with a possible topology implementation and describes the elements that can help achieve it. The article investigates the need for personalisation and how it is contrary to maintaining user privacy. The article also contributes a survey of the underlying technologies while linking them to IoT.

show abstract

Section: Namentioning

confidence: 99%

Towards a software‐defined networking model for consumer‐centric content delivery network for IoT

Bhardwaj,

Harit,

Yadav

2023

Trans Emerging Tel Tech

View full text Add to dashboard Cite

show abstract

“…Almaini et al [13] explored the use of a ticketing mechanism in P4 switches using Port Knocking such that the traffic is forwarded only if the sender has a valid ticket. The predefined nodes have a ticket by default, while new nodes can obtain a ticket by completing a successful authentication via port knocking.…”

Section: A Previous State Of the Art Approachesmentioning

confidence: 99%

P4Filter: A two level defensive mechanism against attacks in SDN using P4

Saxena¹,

Muttreja²,

Upadhyay³

et al. 2022

Preprint

View full text Add to dashboard Cite

The advancements in networking technologies have led to a new paradigm of controlling networks, with data plane programmability as a basis. This facility opens up many advantages, such as flexibility in packet processing and better network management, which leads to better security in the network. However, the current literature lacks network security solutions concerning authentication and preventing unauthorized access. In this work, our goal is to avoid attacks in a two level defense mechanism (P4Filter). The first level is a dynamic firewall logic, which blocks packets generated from an unauthorized source. The second level is an authentication mechanism based on dynamic port knocking. The two security levels were tested in a virtual environment with P4 based switches. The packets arriving at the switch from unknown hosts are sent to the controller. The controller maintains an ACL using which it assigns rules for both the levels to allow or drop the packets. For port knocking a new random sequence is generated for every new host. Hosts can only connect using the correct sequence assigned to them.The tests conducted show this approach performs better than the previous P4 based firewall approaches due to two security levels. Moreover, it is successful in mitigating specific security attacks by blocking unauthorized access to the network.

show abstract

“…Finally, Bai et al [207] presented P40f, a tool that performs OS fingerprinting on programmable switches, and consequently, applies security policies (e.g., allow, drop, redirect) at line rate. Almaini et al [208] implemented an authentication technique based on One Time Passwords (OTP). The technique follows the Leslie Lamport algorithm [318] in which a chain of successive hash functions are verified for authentication.…”

Section: ) Other Access Controlmentioning

confidence: 99%

An Exhaustive Survey on P4 Programmable Data Plane Switches: Taxonomy, Applications, Challenges, and Future Trends

2021

View full text Add to dashboard Cite

Traditionally, the data plane has been designed with fixed functions to forward packets using a small set of protocols. This closed-design paradigm has limited the capability of the switches to proprietary implementations which are hard-coded by vendors, inducing a lengthy, costly, and inflexible process. Recently, data plane programmability has attracted significant attention from both the research community and the industry, permitting operators and programmers in general to run customized packet processing functions. This open-design paradigm is paving the way for an unprecedented wave of innovation and experimentation by reducing the time of designing, testing, and adopting new protocols; enabling a customized, top-down approach to develop network applications; providing granular visibility of packet events defined by the programmer; reducing complexity and enhancing resource utilization of the programmable switches; and drastically improving the performance of applications that are offloaded to the data plane. Despite the impressive advantages of programmable data plane switches and their importance in modern networks, the literature has been missing a comprehensive survey. To this end, this paper provides a background encompassing an overview of the evolution of networks from legacy to programmable, describing the essentials of programmable switches, and summarizing their advantages over Softwaredefined Networking (SDN) and legacy devices. The paper then presents a unique, comprehensive taxonomy of applications developed with P4 language; surveying, classifying, and analyzing more than 200 articles; discussing challenges and considerations; and presenting future perspectives and open research issues.

show abstract

Lightweight edge authentication for software defined networks

Cited by 15 publications

References 24 publications

Towards a software‐defined networking model for consumer‐centric content delivery network for IoT

Towards a software‐defined networking model for consumer‐centric content delivery network for IoT

P4Filter: A two level defensive mechanism against attacks in SDN using P4

An Exhaustive Survey on P4 Programmable Data Plane Switches: Taxonomy, Applications, Challenges, and Future Trends

Contact Info

Product

Resources

About