An Aware-Scheduling Security Architecture with Priority-Equal Multi-Controller for SDN

查看全文 作　　者：Chao [1]Qi;Jiangxing [1]Wu;Guozhen [1]Cheng;Jianjian [1]Ai;Shuo [1]Zhao

机构地区：[1]National Digital Switching System Engineering & Technological R&D Center

出　　处：《China Communications》索引2017年第14卷第9期,共11页

基　　金：supported by the Foundation for Innovative Research Groups of the National Natural Science Foundation of China (No.61521003);the National Key R&D Program of China (No.2016YFB0800100,No.2016YFB0800101);the National Natural Science Foundation of China (No.61602509) 摘　　要：Current SDN controllers suffer from a series of potential attacks. For example, malicious flow rules may lead to system disorder by introducing unexpected flow entries. In this paper, we propose Mcad-SA, an aware decision-making security architecture with multiple controllers, which could coordinate heterogeneous controllers internally as a 'big' controller. This architecture includes an additional plane, the scheduling plane, which consists of transponder, sensor, decider and scheduler. Meanwhile it achieves the functions of communicating, supervising and scheduling between data and control plane. In this framework, we adopt the vote results from the majority of controllers to determine valid flow rules distributed to switches. Besides, an aware dynamic scheduling(ADS) mechanism is devised in scheduler to intensify security of Mcad-SA further. Combined with perception, ADS takes advantage of heterogeneity and redundancy of controllers to enable the control plane operate in a dynamic, reliable and unsteady state, which results in significant difficulty of probing systems and executing attacks. Simulation results demonstrate the proposed methods indicate better security resilience over traditional architectures as they have lower failure probability when facing attacks. 关键词：MULTI-CONTROLLER security architec-ture aware SCHEDULING

相关文献

参考文献（18）
引证文献（4）
耦合文献（0）

参考文献(18)

引证文献(4)

互联网出版许可证新出网证(渝)字10号全国400电话 - 免长途话费

An Aware-Scheduling Security Architecture with Priority-Equal Multi-Controller for SDN

参考文献(18)

引证文献(4)

用户提示