Research on network programming language and policy conflicts for <scp>SDN</scp>

He, Bohan; Dong, Ligang; Xu, Tijie; Fei, Shuocheng; Zhang, Huafei; Wang, Weiming

doi:10.1002/cpe.4218

Cited by 11 publications

(5 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…All the end-user applications are in this layer, which has their network requirements and is passed to the control layer through the northbound interface. Some of the northbound interfaces are REST API [26], pyretic [27], Frenetic [28], Procera [29], etc.…”

Section: ) Application Layermentioning

confidence: 99%

A Systematic Review of Load Balancing Techniques in Software-Defined Networking

et al. 2020

View full text Add to dashboard Cite

The traditional networks are facing difficulties in managing the services offered by cloud computing, big data, and the Internet of Things as the users have become more dependent on their services. Software-Defined Networking (SDN) has pulled enthusiasm in the integration process of technologies and function as per the user's requirements for both academia and industry, and it has begun to be embraced in actual framework usage. The emergence of SDN has given another idea to empower the focal programmability of the system. Because of the increasing demand and the scarcity of resources, the load balancing issue needs to be addressed efficiently to manage the incoming traffic and resources and to improve network performance. One of the most critical issues is the role of the controller in SDN to balance the load for having a better Quality of Service (QoS). Though there are few survey articles written on load balancing, there is no detail and systematic review conducted in load balancing in SDN. Hence, this paper extends and reviews the discussion with a taxonomy of current emerging load balancing techniques in SDN systematically by categorizing the techniques as conventional and artificial intelligence-based techniques to improve the service quality. The review also includes the study of metrics and parameters which have been used to measure the performance. This review would allow gaining more information on load balancing approaches in SDN and enables the researchers to fill the current research gaps.

show abstract

Section: ) Application Layermentioning

confidence: 99%

A Systematic Review of Load Balancing Techniques in Software-Defined Networking

et al. 2020

View full text Add to dashboard Cite

show abstract

“…Since multiple customized or third-party-provided applications are running in the control plane, 8 policies generated by applications may compete, conflict, or override with each other. The prior methods of policies conflict resolution [9][10][11][12] only considered running state conflicts, and only detected when a security vulnerability occurs after the error policy is installed. In this way, conflict prevention and policies management cannot be achieved.…”

Section: Related Workmentioning

confidence: 99%

An efficient scheme for SDN state consistency verification in cloud computing environment

Wang

Chen

Wang

et al. 2019

Concurrency and Computation

View full text Add to dashboard Cite

Summary Software‐defined networking (SDN) decouples the control and data planes to simplify network management and function deployment. SDN provides a solution for managing large‐scale virtual networks in the cloud environment. However, in the process of SDN network update, various attacks can lead to network state inconsistency. In this paper, a comprehensive and efficient verification scheme is proposed to defend the security threats and guarantee the network state consistency in the cloud environment. The scheme verifies the consistency of network update from two stages of network update request and response. Firstly, the flow path model and the security space are abstracted to quickly verify whether the network request is allowed. Then, a novel forwarding path probing and verification method is designed to validate the actual forwarding path and locate the abnormal path in real time. With the two‐stage verification, the scheme can prevent the spread of illegal flow rules and ensure the correct delivery and execution of flow rules. Finally, we carry out a series of experiments in OpenStack. The results show that the proposed scheme can detect security threats and label the abnormal forwarding path in real time to ensure the network state consistency, while introducing negligible performance overhead.

show abstract

“…2) Fraud traffic insertion: Malicious or buggy applications could generate erroneous harmful flow rules and routing policies, but compromised applications are hard to be detected. 3) Conflicts between applications: each application generates lots of flow rules, but it's hard to guarantee that there are no conflicts between these rules [40]. Therefore, how to deal with the conflicts among applications is another challenge of SDN security.…”

Section: Motivationmentioning

confidence: 99%

A trust management framework for software‐defined network applications

Yao

Yan

2018

Concurrency and Computation

View full text Add to dashboard Cite

The emergence of Software-Defined Network (SDN) has brought unprecedented innovation to current networks. SDN's two most notable features are decoupling and programmability. Decoupling makes network management centralized in a control plane. Meanwhile, benefitted from the programmable characteristic of SDN, new functions of networking can be easily realized. However, these features also introduce new security issues to SDN. Through the programming interface provided by SDN, software engineers can easily develop network applications to generate networking policies for SDN's control planes for the purpose of guiding network routing. But it is hard to guarantee the security and quality of these new applications. Malicious or low-quality applications could damage a whole network. To solve this problem, we propose a novel trust management framework for SDN applications in this paper. It can evaluate applications' trust values based on their impact on the network performance (such as time delay, packet loss rate, throughput, etc.). These trust values further play a decisive role for managing and selecting applications in SDN. We evaluate this framework's performance through a prototype system implemented based on a floodlight controller. The experimental results show the accuracy and effectiveness of our design.

show abstract

Research on network programming language and policy conflicts for SDN

Cited by 11 publications

References 15 publications

A Systematic Review of Load Balancing Techniques in Software-Defined Networking

A Systematic Review of Load Balancing Techniques in Software-Defined Networking

An efficient scheme for SDN state consistency verification in cloud computing environment

A trust management framework for software‐defined network applications

Contact Info

Product

Resources

About