TY - GEN
T1 - A novel method against the firewall bypass threat in OpenFlow networks
AU - Zhang, Yicong
AU - Li, Jie
AU - Chen, Lin
AU - Ji, Yusheng
AU - Tang, Feilong
N1 - Publisher Copyright:
© 2017 IEEE.
PY - 2017/12/7
Y1 - 2017/12/7
N2 - Software-Defined Networking (SDN) is an innovational network architecture introduced a couple of years ago. It gives network administrators the ability to directly control the whole network by programming on a centralized controller, without manually configure each device. However, new security challenges come out with SDN development. One significant challenge is to design a secure firewall specifically designed for SDN, since the traditional firewall could be easily bypassed in SDN. To detect and prevent this bypass threat, we propose a novel detection method by modeling the network to a directed graph with two significant features. Then, we implement our method and conduct experiments. The result of experiments show that our method can actively and accurately detect bypass threats for OpenFlow networks.
AB - Software-Defined Networking (SDN) is an innovational network architecture introduced a couple of years ago. It gives network administrators the ability to directly control the whole network by programming on a centralized controller, without manually configure each device. However, new security challenges come out with SDN development. One significant challenge is to design a secure firewall specifically designed for SDN, since the traditional firewall could be easily bypassed in SDN. To detect and prevent this bypass threat, we propose a novel detection method by modeling the network to a directed graph with two significant features. Then, we implement our method and conduct experiments. The result of experiments show that our method can actively and accurately detect bypass threats for OpenFlow networks.
UR - https://www.scopus.com/pages/publications/85046339082
U2 - 10.1109/WCSP.2017.8171014
DO - 10.1109/WCSP.2017.8171014
M3 - 会议稿件
AN - SCOPUS:85046339082
T3 - 2017 9th International Conference on Wireless Communications and Signal Processing, WCSP 2017 - Proceedings
SP - 1
EP - 6
BT - 2017 9th International Conference on Wireless Communications and Signal Processing, WCSP 2017 - Proceedings
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 9th International Conference on Wireless Communications and Signal Processing, WCSP 2017
Y2 - 11 October 2017 through 13 October 2017
ER -