DPSec: A blockchain-based data plane authentication protocol for SDNs

Name: DPSec: A blockchain-based data plane authentication protocol for SDNs
Author: Latah, Majd, Çakmakçı, Kübra Kalkan

İsim	DPSec: A blockchain-based data plane authentication protocol for SDNs
Yazar	Latah, Majd, Çakmakçı, Kübra Kalkan
Basım Tarihi:	2020-11-02
Basım Yeri	- IEEE
Konu	Blockchain (BC), Network security, Software-defined networking (SDN)
Tür	Belge
Dil	İngilizce
Dijital	Evet
Yazma	Hayır
Kütüphane:	Özyeğin Üniversitesi
Demirbaş Numarası	2-s2.0-85098702142
Kayıt Numarası	5a58588e-b690-418d-bff3-bcd646aff7ef
Lokasyon	Computer Science
Tarih	2020-11-02
Örnek Metin	Software-Defined Networking (SDN) is a promising networking architecture that enables central management along with network programmability. However, SDN brings additional security threats due to untrusted control and data planes. In this work, we focus on authenticating SDN's data plane since it can be exploited to attack SDN's control plane. As a result, the whole SDN network will be paralysed. On the other hand, Blockchain (BC) can be utilized to provide more secure data plane by introducing a fault-tolerant, decentralized and secure ledger without relying on any trusted third-party intermediaries. To this end, in this work we propose, DPSec, a consortium BC-based protocol for authenticating SDN's data plane including SDN switches and hosts. We also provide a proof-of-concept that demonstrates the applicability and feasibility of our protocol in SDNs. Finally, we present a security analysis that shows how DPSec can address several attacks against SDNs including CVE-2018-1000155 vulnerability [1] that targets SDN controllers due to the untrusted data plane.
Editör	Alsmirat, M., Jararweh, Y., Aloqaily, M., Ozkasap, O.
DOI	10.1109/BCCA50787.2020.9274449

Kaynağa git Özyeğin Üniversitesi

Aramaya Dön

Özyeğin Üniversitesi

Kaynağa git

DPSec: A blockchain-based data plane authentication protocol for SDNs

Yazar Latah, Majd, Çakmakçı, Kübra Kalkan

Basım Tarihi 2020-11-02

Basım Yeri - IEEE

Konu Blockchain (BC), Network security, Software-defined networking (SDN)

Tür Belge

Dil İngilizce

Dijital Evet

Yazma Hayır

Kütüphane Özyeğin Üniversitesi

Demirbaş Numarası 2-s2.0-85098702142

Kayıt Numarası 5a58588e-b690-418d-bff3-bcd646aff7ef

Lokasyon Computer Science

Tarih 2020-11-02

Örnek Metin Software-Defined Networking (SDN) is a promising networking architecture that enables central management along with network programmability. However, SDN brings additional security threats due to untrusted control and data planes. In this work, we focus on authenticating SDN's data plane since it can be exploited to attack SDN's control plane. As a result, the whole SDN network will be paralysed. On the other hand, Blockchain (BC) can be utilized to provide more secure data plane by introducing a fault-tolerant, decentralized and secure ledger without relying on any trusted third-party intermediaries. To this end, in this work we propose, DPSec, a consortium BC-based protocol for authenticating SDN's data plane including SDN switches and hosts. We also provide a proof-of-concept that demonstrates the applicability and feasibility of our protocol in SDNs. Finally, we present a security analysis that shows how DPSec can address several attacks against SDNs including CVE-2018-1000155 vulnerability [1] that targets SDN controllers due to the untrusted data plane.

Editör Alsmirat, M., Jararweh, Y., Aloqaily, M., Ozkasap, O.

DOI 10.1109/BCCA50787.2020.9274449