BQSV: Protecting SDN controller cluster’s network topology view based on byzantine quorum system with verification function

Zhi, Y; Yang, L; Yu, S; Ma, J

BQSV: Protecting SDN controller cluster’s network topology view based on byzantine quorum system with verification function

Zhi, Y Yang, L Yu, S

Ma, J

Permalink

Publisher:: Springer International Publishing
Publication Type:: Conference Proceeding
Citation:: Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), 2019, 11982 LNCS, pp. 73-88
Issue Date:: 2019-01-01

Closed Access

	Filename	Description	Size
	Zhi2019_Chapter_BQSVProtectingSDNControllerClu.pdf	Published version	957.78 kB	Adobe PDF	View/Open

Copyright Clearance Process

Recently Added
In Progress
Closed Access

This item is closed access and not available.

Full metadata record

Field	Value	Language
dc.contributor.author	Zhi, Y
dc.contributor.author	Yang, L
dc.contributor.author	Yu, S https://orcid.org/0000-0003-4485-6743
dc.contributor.author	Ma, J
dc.date.accessioned	2020-06-16T20:56:33Z
dc.date.available	2020-06-16T20:56:33Z
dc.date.issued	2019-01-01
dc.identifier.citation	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), 2019, 11982 LNCS, pp. 73-88
dc.identifier.isbn	9783030373368
dc.identifier.issn	0302-9743
dc.identifier.issn	1611-3349
dc.identifier.uri	http://hdl.handle.net/10453/141450
dc.description.abstract	© 2019, Springer Nature Switzerland AG. In Software-defined network (SDN), SDN applications and administrators rely on the logically centralized view of the network topology to make management decisions. Therefore, the correctness of SDN controller cluster’s network topology view becomes critical. However, the lack of security mechanism in SDN controller cluster makes the network topology view easy to be tampered with. In this paper, we argue that malicious controllers in a cluster can easily damage the network view of the cluster through the east-west bound interfaces. We present a scheme based on Byzantine Quorum System with verification function (BQSV) to prevent malicious controllers from manipulating the cluster’s network view through east-west bound interface and providing wrong topology information to SDN applications and administrators. Moreover, we implement the prototype of our scheme and extensive experiments to show that the proposed scheme can prevent malicious controllers from damaging the topology information of the cluster with trivial overheads.
dc.language	en
dc.publisher	Springer International Publishing
dc.relation.ispartof	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
dc.relation.isbasedon	10.1007/978-3-030-37337-5_7
dc.rights	info:eu-repo/semantics/restrictedAccess
dc.subject.classification	Artificial Intelligence & Image Processing
dc.title	BQSV: Protecting SDN controller cluster’s network topology view based on byzantine quorum system with verification function
dc.type	Conference Proceeding
utslib.citation.volume	11982 LNCS
pubs.organisational-group	/University of Technology Sydney/Faculty of Engineering and Information Technology
pubs.organisational-group	/University of Technology Sydney
utslib.copyright.status	closed_access	*
dc.date.updated	2020-06-16T20:56:30Z
pubs.publication-status	Published
pubs.volume	11982 LNCS

Abstract:

© 2019, Springer Nature Switzerland AG. In Software-defined network (SDN), SDN applications and administrators rely on the logically centralized view of the network topology to make management decisions. Therefore, the correctness of SDN controller cluster’s network topology view becomes critical. However, the lack of security mechanism in SDN controller cluster makes the network topology view easy to be tampered with. In this paper, we argue that malicious controllers in a cluster can easily damage the network view of the cluster through the east-west bound interfaces. We present a scheme based on Byzantine Quorum System with verification function (BQSV) to prevent malicious controllers from manipulating the cluster’s network view through east-west bound interface and providing wrong topology information to SDN applications and administrators. Moreover, we implement the prototype of our scheme and extensive experiments to show that the proposed scheme can prevent malicious controllers from damaging the topology information of the cluster with trivial overheads.

Please use this identifier to cite or link to this item:

http://hdl.handle.net/10453/141450