CWT-DPA: Component-wise waiting time for BC-enabled data plane authentication

Name: CWT-DPA: Component-wise waiting time for BC-enabled data plane authentication
Author: Latah, Majd, Çakmakçı, Kübra Kalkan

İsim	CWT-DPA: Component-wise waiting time for BC-enabled data plane authentication
Yazar	Latah, Majd, Çakmakçı, Kübra Kalkan
Basım Tarihi:	2022-11-24
Basım Yeri	- Elsevier
Konu	Blockchain (BC), Network security, Software-defined networking (SDN)
Tür	Süreli Yayın
Dil	İngilizce
Dijital	Evet
Yazma	Hayır
Kütüphane:	Özyeğin Üniversitesi
Demirbaş Numarası	1389-1286
Kayıt Numarası	0b42c6bb-a2a7-4bb3-8089-96cdafc3f260
Lokasyon	Computer Science
Tarih	2022-11-24
Örnek Metin	Software-Defined Networking (SDN) is a promising networking paradigm that brings central management and network programmability to improve existing networking systems. However, SDN has several security threats due to its untrusted control and data planes. Blockchain (BC) technology has recently provided a fault-tolerant, decentralized, and immutable ledger among untrusted parties. While the integration between SDN and BC enhances the security, it suffers from performance degradation when applied to SDN's data plane. In traditional BC-SDN approaches, such as our previous work DPSEC (Latah and Kalkan, 2020), every switch has to wait for the final commitment of each submitted transaction, which significantly decreases the performance of the BC-SDN model. In this work, we enhance the performance of BC-SDN data plane approaches by separating switch-related and host-related transactions and propose a different waiting strategy for each type of data plane transaction. We also propose a batching technique to enhance the average latency for high-load scenarios. In addition, SDN switches and controllers utilize lattice-based signatures and Key Encapsulation Methods (KEMs) to protect against quantum adversaries. We compare the performance of CWT-DPA with existing solutions such as SSL/TLSv1.3, DPSEC (Latah and Kalkan, 2020), and AuthFlow (Mattos and Duarte, 2016).
DOI	10.1016/j.comnet.2022.109423
Cilt	219

Kaynağa git Özyeğin Üniversitesi

Aramaya Dön

Özyeğin Üniversitesi

Kaynağa git

CWT-DPA: Component-wise waiting time for BC-enabled data plane authentication

Yazar Latah, Majd, Çakmakçı, Kübra Kalkan

Basım Tarihi 2022-11-24

Basım Yeri - Elsevier

Konu Blockchain (BC), Network security, Software-defined networking (SDN)

Tür Süreli Yayın

Dil İngilizce

Dijital Evet

Yazma Hayır

Kütüphane Özyeğin Üniversitesi

Demirbaş Numarası 1389-1286

Kayıt Numarası 0b42c6bb-a2a7-4bb3-8089-96cdafc3f260

Lokasyon Computer Science

Tarih 2022-11-24

Örnek Metin Software-Defined Networking (SDN) is a promising networking paradigm that brings central management and network programmability to improve existing networking systems. However, SDN has several security threats due to its untrusted control and data planes. Blockchain (BC) technology has recently provided a fault-tolerant, decentralized, and immutable ledger among untrusted parties. While the integration between SDN and BC enhances the security, it suffers from performance degradation when applied to SDN's data plane. In traditional BC-SDN approaches, such as our previous work DPSEC (Latah and Kalkan, 2020), every switch has to wait for the final commitment of each submitted transaction, which significantly decreases the performance of the BC-SDN model. In this work, we enhance the performance of BC-SDN data plane approaches by separating switch-related and host-related transactions and propose a different waiting strategy for each type of data plane transaction. We also propose a batching technique to enhance the average latency for high-load scenarios. In addition, SDN switches and controllers utilize lattice-based signatures and Key Encapsulation Methods (KEMs) to protect against quantum adversaries. We compare the performance of CWT-DPA with existing solutions such as SSL/TLSv1.3, DPSEC (Latah and Kalkan, 2020), and AuthFlow (Mattos and Duarte, 2016).

DOI 10.1016/j.comnet.2022.109423

Cilt 219