Multi-objective optimization placement strategy for SDN security controller considering Byzantine attributes

Tao WANG; Hongchang CHEN

doi:10.11959/j.issn.2096-109x.2021060

您当前的位置：

首页 >

文章列表页 >

Multi-objective optimization placement strategy for SDN security controller considering Byzantine attributes

TopicⅡ: SDN and cloud computing security | 更新时间：2024-06-03

- Multi-objective optimization placement strategy for SDN security controller considering Byzantine attributes
- Chinese Journal of Network and Information Security Vol. 7, Issue 3, Pages: 72-84(2021)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2021060
  CLC： TP393
- Online First：2021-06，
  
  Published：15 June 2021
- 稿件说明：
移动端阅览
Tao WANG, Hongchang CHEN. Multi-objective optimization placement strategy for SDN security controller considering Byzantine attributes[J]. Chinese Journal of Network and Information Security, 2021, 7(3): 72-84.
DOI：

Tao WANG, Hongchang CHEN. Multi-objective optimization placement strategy for SDN security controller considering Byzantine attributes[J]. Chinese Journal of Network and Information Security, 2021, 7(3): 72-84. DOI： 10.11959/j.issn.2096-109x.2021060.

摘要

通过赋予软件定义网络分布式控制平面拜占庭属性可以有效提高其安全性。在实现拜占庭属性过程中，控制器部署的数量、位置，以及交换机与控制器之间的连接关系会直接影响全局网络关键性能指标。为此，提出了一种考虑拜占庭属性的 SDN 安全控制器多目标优化部署方案。首先，构建了综合考量交互时延、同步时延、负载差异程度和控制器部署数量等优化指标的拜占庭控制器部署问题（MOSBCPP）模型；然后，针对该模型个性化设计了包括控制器部署策略初始化函数、变异函数，快速非支配排序函数及精英策略选择函数等在内的NASG-II求解算法。相关仿真结果表明，该部署方案能够在有效降低交互时延、同步时延、负载差异程度和控制器部署数量等性能指标的同时提高控制平面安全性。

Abstract

By giving the software defined network distributed control plane Byzantine attributes

its security can be effectively improved.In the process of realizing Byzantine attributes

the number and location of controllers

and the connection relationship between switches and controllers can directly affect the key network performance.Therefore

a controller multi-objective optimization placement strategy for SDN security controllers considering Byzantine attributes was proposed.Firstly

a Byzantine controller placement problem (MOSBCPP) model that comprehensively considered interaction delay

synchronization delay

load difference and the number of controllers was constructed.Then

a solution algorithm based on NASG-II was designed for this model

which included the initialization function

the mutation function

the fast non-dominated sorting function and the elite strategy selection function.Simulation results show that this strategy can effectively reduce interaction delay

synchronization delay

load difference and the number of controllers

while improving control plane security.

关键词

Keywords

references

MCKEOWN N , ANDERSON T , BALAKRISHNAN H , et al . OpenFlow:enabling innovation in campus networks [J ] . ACM Sigcomm Computer Communication Review , 2008 , 38 ( 2 ): 69 - 74 .

TOOTOONCHIAN A , GANJALI Y . HyperFlow:a distributed control plane for OpenFlow [C ] // Internet Network Management Conference on Research on Enterprise Networking . 2011 .

CHICA J , IMBACHI J , BOTERO J . Security in SDN:a comprehensive survey [J ] . Journal of Network and Computer Applications , 2020 , 159 : 102595

KRIAA S , PAPILLON S , JAGADEESAN L , et al . Better safe than sorry:modeling reliability and security in replicated SDN controllers [C ] // 2020 16th International Conference on the Design of Reliable Communication Networks (DRCN) . 2020 .

HELLER B , SHERWOOD R , MCKEOWN N . The controller placement problem [J ] . ACM Sigcomm Computer Communication Review , 2012 , 42 ( 4 ): 473 - 478 .

SALLAHI A , ST-HILAIRE M . Optimal model for the controller placement problem in software defined networks [J ] . IEEE Communications Letters , 2015 , 19 ( 1 ): 30 - 33 .

YAO G , BI J , LI Y , et al . On the capacitated controller placement problem in software defined networks [J ] . IEEE Communications Letters , 2014 , 18 ( 8 ): 1339 - 1342 .

HU Y , LUO T , WANG W , et al . On the load balanced controller placement problem in software defined networks [C ] // 2016 2nd IEEE International Conference on Computer and Communications (ICCC) . 2016 .

BALA P . Capacitated next controller placement in software defined networks [J ] . IEEE Transactions on Network and Service Management , 2017 , 14 ( 3 ): 514 - 527 .

ISHIGAKI G , SHINOMIYA N . Controller placement algorithm to alleviate burdens on communication nodes [C ] // International Conference on Computing . 2016 .

HU Y , WANG W , GONG X , et al . On reliability-optimized controller placement for software-defined networks [J ] . China Communications , 2014 , 11 ( 2 ): 38 - 54 .

吴奇 , 陈鸿昶 . 低故障恢复开销的软件定义网络控制器布局算法 [J ] . 网络与信息安全学报 , 2020 , 6 ( 6 ): 97 - 104 .

WU Q , CHEN H C . Low fault recovery cost controller placement strategy in software-defined networks [J ] . Chinese Journal of Network and Information Security , 2020 , 6 ( 6 ): 97 - 104 .

WANG G , ZHAO Y , HUANG J , et al . An effective approach to controller placement in software defined wide area networks [J ] . IEEE Transactions on Net-work and Service Management , 2018 , 15 ( 1 ): 344 - 355 .

史久根 , 谢熠君 , 孙立 , 等 . 软件定义网络中面向时延和负载的多控制器放置策略 [J ] . 电子与信息学报 , 2019 , 41 ( 8 ): 1869 - 1876 .

SHI J G , XIE Y J , SUN L , et al . Multi-controller placement strategy based on latency and load in software defined network [J ] . Journal of Electronics ＆ Information Technology , 2019 , 41 ( 8 ): 1869 - 1876 .

LIAO J , SUN H . Density cluster based approach for controller placement problem in large-scale software defined networkings [J ] . Computer Networks , 2017 , 112 ( 1 ): 24 - 35 .

ZHANG Y , BEHESHTI N , TATIPAMULA M . On resilience of split-architecture networks [C ] // 2011 IEEE Global Telecommunications Conference-GLOBECOM 2011 . 2012 .

ZHAO J , QU H , ZHAO J , et al . Towards controller placement problem for software-defined network using affinity propagation [J ] . Electronics Letters , 2017 , 53 ( 14 ): 928 - 929 .

史久根 , 邾伟 , 贾坤荧 , 等 . 软件定义网络中基于负载均衡的多控制器部署算法 [J ] . 电子与信息学报 , 2018 , 40 ( 2 ): 455 - 461 .

SHI J G , ZHU W , JIA K Y , et al . Multi-controller deployment algorithm based on load balance in software defined network [J ] . Journal of Electronics ＆ Information Technology , 2018 , 40 ( 2 ): 455 - 461 .

吴奇 , 陈鸿昶 . 软件定义网络容错控制平面的最小覆盖布局方法 [J ] . 电子与信息学报 , 2020 , 42 ( 12 ): 2849 - 2856 .

WU Q , CHEN H C . Minimal coverage model for fault-tolerant controller placement in software-defined networks [J ] . Journal of Electronics ＆ Information Technology , 2020 , 42 ( 12 ): 2849 - 2856 .

XIE J , GUO D , ZHU X , et al . Minimal fault-tolerant coverage of controllers in IaaS datacenters [J ] . IEEE Transactions on Services Computing , 2020 , 13 ( 6 ): 1128 - 1141 .

Views

356

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Using rule association to generate data collection policies

Low failure recovery cost controller placement strategy in software defined networks

Related Author

Pei CHEN

Fenghua LI

Zifu LI

Yunchuan GUO

Lin CHENG

Qi WU

Related Institution

Institute of Information Engineering, Chinese Academy of Sciences

School of Cyber Security, University of Chinese Academy of Sciences

China Information Technology Security Evaluation Center

⁰