Secure Communication between Network Applications and Controller in Software Defined Network

Network applications in SDN environment operate without any threat prevention mechanism or access control to checkmate what functions or operations they can execute within the network. This gives room for malicious applications to implement an offensive attack against the network or install exploits...

Full description

Saved in:
Bibliographic Details
Main Authors: Aliyu, Aliyu Lawal, Aneiba, Adel, Patwary, Mohammad
Format: Conference Proceeding
Language:English
Subjects:
Authentication
Authorisation
Authorization
Cognition
Reliability
SDN
Security
Software
Switches
Trust
Online Access:Request full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Network applications in SDN environment operate without any threat prevention mechanism or access control to checkmate what functions or operations they can execute within the network. This gives room for malicious applications to implement an offensive attack against the network or install exploits that can compromise the confidentiality, integrity or availability of network resources. In order to address this problem, this paper proposes a threat mitigation model based on trust that introduces a token-based authentication method that enables the controller to verify and validate every network application that makes changes in the network. The paper contributes in providing an authorisation method Boolean Access Matrix that constrains what operation, functions or privileges every network application can execute within the network. To assess the trustworthiness of network applications, a trust evaluation method based on Subjective Logic Reasoning which is a belief learning model is proposed. Results from tests and experiments show how scalable and efficient the proposed trust framework is.
ISSN:2643-7929
DOI:10.1109/NCA.2019.8935066