Design and implementation of the controller scheduling-time in SDN

Zhenping LU; Fucai CHEN; Guozhen CHENG

doi:10.11959/j.issn.2096-109x.2018003

您当前的位置：

首页 >

文章列表页 >

Design and implementation of the controller scheduling-time in SDN

Papers | 更新时间：2024-06-03

- Design and implementation of the controller scheduling-time in SDN
- Chinese Journal of Network and Information Security Vol. 4, Issue 1, Pages: 36-44(2018)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2018003
  CLC： TP393
- Online First：2018-01，
  
  Published：15 January 2018
- 稿件说明：
移动端阅览
Zhenping LU, Fucai CHEN, Guozhen CHENG. Design and implementation of the controller scheduling-time in SDN[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 36-44.
DOI：

Zhenping LU, Fucai CHEN, Guozhen CHENG. Design and implementation of the controller scheduling-time in SDN[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 36-44. DOI： 10.11959/j.issn.2096-109x.2018003.

摘要

在软件定义网络的控制平面引入多个控制器，从而动态地改变控制器与底层网络的映射关系是一种有效缓解控制器安全威胁的方法。然而，现有的工作缺乏研究控制器动态调度的时间问题，由此，在分析软件定义网络的安全现状以及动态控制器研究的基础之上，首先说明了动态平面控制器调度时间的重要性，并在先前的研究基础之上刻画了动态控制平面的安全工作流程；进一步地，将动态调度的时间问题建模为更新收益过程，并提出一种对防御者最优的调度算法。实验仿真基于真实的网络攻击信息集，对比分析表明，提出的算法明显优于固定周期的算法和随机算法。

Abstract

Introducing multiple controllers to software defined network so that dynamically altering the mapping relationship between controller and the underlying network is an effective method to ease the security threats in control plane.However

little previous work has been done to investigate the economical time in dynamic-scheduling controllers.Firstly

the importance of scheduling-time in dynamic control plane based on security in SDN and dynamic control plane was introduced.Further

this problem was modeled as a renewal reward process and an optimal algorithm in deciding the right time to schedule was proposed.In our experiments

Simulations based on real network attack dataset are conducted and it demonstrate that proposed algorithm outperforms fixed-cycle algorithms and random algorithm.

关键词

Keywords

references

JAIN S , KUMAR A , MANDAL S , et al . B4:experience with a globally-deployed software defined wan [J ] . Computer Communication Review , 2013 , 43 ( 4 ): 3 - 14 .

KREUTZ D , RAMOS F M V , VERISSIMO P . Towards secure and dependable software-defined networks [C ] // ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking . 2013 : 55 - 60 .

LENG J , ZHOU Y , ZHANG J , et al . An inference attack model for flow table capacity and usage:exploiting the vulnerability of flow table overflow in software-defined network [J ] . Water Air ＆ Soil Pollution , 2015 , 85 ( 3 ): 1413 - 1418 .

SONCHACK J , DUBEY A , AVIV A J , et al . Timing-based reconnaissance and defense in software-defined networks [C ] // Conference on Computer Security Applications . 2016 : 89 - 100 .

CUI H , KARAME G O , KLAEDTKE F , et al . On the fingerprinting of software-defined networks [J ] . IEEE Transactions on Information Forensics ＆ Security , 2016 , 11 ( 10 ): 2160 - 2173 .

BERDE P , GEROLA M , HART J , et al . ONOS:towards an open,distributed SDN OS [C ] // The Workshop on Hot Topics in Software Defined Networking . 2014 : 1 - 6 .

MEDVED J , VARGA R , TKACIK A , et al . OpenDaylight:towards a model-driven SDN controller architecture [C ] // International Symposium on a World of Wireless,Mobile and Multimedia Networks . 2014 : 1 - 6 .

LI H , LI P , GUO S , et al . Byzantine-resilient secure software-defined networks with multiple controllers in cloud [C ] // International Conference on Communications . 2014 : 695 - 700 .

ELDEFRAWY K , KACZMAREK T . Byzantine fault tolerant software-defined networking (SDN) controllers [C ] // Computer Society International Conference on Computers,Software ＆ Applications . 2016 : 208 - 213 .

WANG T , LIU F , GUO J , et al . Dynamic SDN controller assignment in data center networks:Stable matching with transfers [C ] // The IEEE International Conference on Computer Communications . 2016 : 1 - 9 .

QI C , WU J , HU H , et al . An intensive security architecture with multi-controller for SDN [C ] // Computer Communications Workshops . 2016 : 401 - 402 .

扈红超 , 陈福才 , 王禛鹏 . 拟态防御 DHR 模型若干问题探讨和性能评估 [J ] . 信息安全学报 , 2016 , 1 ( 4 ): 40 - 51 .

HU H C , CHEN F C , WANG Z P . Discussion and performance evaluation of the proposed DHR model [J ] . Journal of Cyber Security , 2016 , 1 ( 4 ): 40 - 51

QI C , WU J , HU H , et al . Dynamic-scheduling mechanism of controllers based on security policy in software-defined network [J ] . Electronics Letters , 2016 , 52 ( 23 ): 1918 - 1920 .

LU Z P , CHEN F C . Poster:A Secure control plane with dynamic Multi-NOS for SDN [C ] // Network and Distributed System Security Symposium (NDSS) . 2017 .

ZHUANG R , DELOACH S A , OU X . Towards a theory of moving target defense [C ] // ACM Workshop on Moving Target Defense . ACM , 2014 : 31 - 40 .

RUI ZHUANG , ALEXANDRU G , et al . A theory of cyber attacks a step towards analyzing mtd systems [J ] .-- > In Proceedings of the 2nd ACM Workshop on Moving Target Defense (MTD) , 2015 .

BROOKS M , YANG B . A Man-in-the-Middle attack against OpenDayLight SDN control-ler [C ] // ACM Conference on Research in Information Technology . ACM , 2015 : 45 - 49 .

ECESSA . What does network downtime ＆ latency cost your business [EB/OL ] . http://www.ecessa.com/blog/downtime-costs http://www.ecessa.com/blog/downtime-costs .

ILGUN K , KEMMERER R A , PORRAS P A . State transition analysis:a rule-based intrusion detection approach [J ] . IEEE Transactions on Software Engineering , 1995 , 21 ( 3 ): 181 - 199 .

LEE S , YOON C . DELTA:a security assessment framework for software-defined networks [C ] // Network and Distributed System Security Symposium . 2017 .

WANG H , LI F , CHEN S . Towards cost-effective moving target defense against DDoS and covert channel attacks [C ] // ACM Workshop on Moving Target Defense . 2016 : 15 - 25 .

WANG A , CHANG W , MOHAISEN A , et al . Delving into internet DDoS attacks by botnets:characterization and analysis [C ] // The 45th IEEE International Conference on Dependable Systems and Networks (DSN) . 2015 .

MATTHEWS T . INCAPSULA survey :what DDoS attacks really cost businesses [EB/OL ] . http://lp.incapsula.com/rs/incapsulainc/images/eBook%20%20DDoS%20Impact%20Survey.pdf http://lp.incapsula.com/rs/incapsulainc/images/eBook%20%20DDoS%20Impact%20Survey.pdf .

JAFARIAN J H , AL-SHAER E , QI D . Adversary-aware IP address randomization for proactive agility against sophisticated attackers [C ] // The 34th IEEE Conference on Computer Communications (INFOCOM) . 2015 : 238 - 276 .

Views

1824

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Efficient and safe software defined network topology discovery protocol

Game model based security strategy of heterogeneous controllers in the cloud

Secure control plane for SDN using Bayesian Stackelberg games

Security scheme for time-critical TRDP message

Secure multidimensional interconnection network for the software defined system on wafer

Related Author

Dong LI

Junqing YU

Yongpu GU

Pengcheng ZHAO

Yichao WANG

Xiao FU

Zhenyu WU

Juntai HU

Related Institution

School of Cyber Science and Engineering, Huazhong University of Science and Technology

Network and Computation Center, Huazhong University of Science and Technology

School of Cyber Security, University of CAS

Institute of Information Engineering, CAS

CRRC Qingdao Sifang Co., Ltd.

⁰