SMART: Shared Memory based SDN Architecture to Resist DDoS ATtacks

被引:0
作者
Belguith, Sana [1 ]
Asghar, Muhammad Rizwan [2 ]
Wang, Song [3 ]
Gomez, Karina [3 ]
Russello, Giovanni [2 ]
机构
[1] Univ Salford, Sch Comp Sci & Engn, Manchester, Lancs, England
[2] Univ Auckland, Cyber Secur Foundry, Auckland, New Zealand
[3] RMIT Univ, Sch Engn, Melbourne, Australia
来源
PROCEEDINGS OF THE 17TH INTERNATIONAL JOINT CONFERENCE ON E-BUSINESS AND TELECOMMUNICATIONS (SECRYPT), VOL 1 | 2020年
关键词
SDN; Security; Shared Memory; Tuple Spaces; DDoS; Availability; OpenFlow;
D O I
10.5220/0009864906080617
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Software-Defined Networking (SDN) is a virtualised yet promising technology that is gaining attention from both academia and industry. On the one hand, the use of a centralised SDN controller provides dynamic configuration and management in an efficient manner; but on the other hand, it raises several concerns mainly related to scalability and availability. Unfortunately, a centralised SDN controller may be a Single Point Of Failure (SPOF), thus making SDN architectures vulnerable to Distributed Denial of Service (DDoS) attacks. In this paper, we design SMART, a scalable SDN architecture that aims at reducing the risk imposed by the centralised aspects in typical SDN deployments. SMART supports a decentralised control plane where the coordination between switches and controllers is provided using Tuple Spaces. SMART ensures a dynamic mapping between SDN switches and controllers without any need to execute complex migration techniques required in typical load balancing approaches.
引用
收藏
页码:608 / 617
页数:10
相关论文
共 21 条
[1]  
Alshra'a A. S., 2019, IEEE COMMUNICATIONS
[2]  
Ammar HA, 2017, INT SYM WIRELESS COM, P216, DOI 10.1109/ISWCS.2017.8108113
[3]   Distributed denial of service (DDoS) attack mitigation in software defined network (SDN)-based cloud computing environment [J].
Bhushan, Kriti ;
Gupta, B. B. .
JOURNAL OF AMBIENT INTELLIGENCE AND HUMANIZED COMPUTING, 2019, 10 (05) :1985-1997
[4]  
Carriero Nicholas John., 1987, Implementation of tuple space machines
[5]   BalCon: A Distributed Elastic SDN Control via Efficient Switch Migration [J].
Cello, Marco ;
Xu, Yang ;
Walid, Anwar ;
Wilfong, Gordon ;
Chao, H. Jonathan ;
Marchese, Mario .
2017 IEEE INTERNATIONAL CONFERENCE ON CLOUD ENGINEERING (IC2E 2017), 2017, :40-50
[6]  
Chen KY, 2016, IEEE CONF COMM NETW, P28, DOI 10.1109/CNS.2016.7860467
[7]   Towards an Elastic Distributed SDN Controller [J].
Dixit, Advait ;
Hao, Fang ;
Mukherjee, Sarit ;
Lakshman, T. V. ;
Kompella, Ramana .
ACM SIGCOMM COMPUTER COMMUNICATION REVIEW, 2013, 43 (04)
[8]   Providing privacy on the tuple space model [J].
Floriano E. ;
Alchieri E. ;
Aranha D.F. ;
Solis P. .
Journal of Internet Services and Applications, 2017, 8 (01)
[9]   GENERATIVE COMMUNICATION IN LINDA [J].
GELERNTER, D .
ACM TRANSACTIONS ON PROGRAMMING LANGUAGES AND SYSTEMS, 1985, 7 (01) :80-112
[10]  
Hari H., 2012, TUPLE SPACE CLOUD