The capability for third parties to create network applications is one of the fundamental features of Software Defined Networking (SDN). This opens up more opportunity for networking innovation, from performance-enhanced to energy-efficient solutions. The SDN controller in SDN is how the application communicates with the network. The reliability of an application is a particular issue with this communication route. What details, for instance, does the application acquire on the state of the network? Is this data obtained with malevolent intent or is it required for the program to operate? In this work, we offer a method for securing the northbound communication interface by adding a permissions mechanism that makes sure that only trusted apps may access controller operations. The application of this permissions scheme using our method incurs very little additional effort and demonstrates effective protection against illegal control function access attempts. The proposed solution is deployed on OpenDaylight controller to measure its efficiency.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Design of an Application Authentication Framework to Secure Controller Access via Northbound Interface in SDN

  • Tinku Adhikari,
  • Ajoy Kumar Khan,
  • Malay Kule

摘要

The capability for third parties to create network applications is one of the fundamental features of Software Defined Networking (SDN). This opens up more opportunity for networking innovation, from performance-enhanced to energy-efficient solutions. The SDN controller in SDN is how the application communicates with the network. The reliability of an application is a particular issue with this communication route. What details, for instance, does the application acquire on the state of the network? Is this data obtained with malevolent intent or is it required for the program to operate? In this work, we offer a method for securing the northbound communication interface by adding a permissions mechanism that makes sure that only trusted apps may access controller operations. The application of this permissions scheme using our method incurs very little additional effort and demonstrates effective protection against illegal control function access attempts. The proposed solution is deployed on OpenDaylight controller to measure its efficiency.