Geodesic
A novel Security Mechanism for Software Defined Network Based on Blockchain
Computer Science and Information Systems, Tome 19 (2022) no. 2.

Voir la notice de l'article provenant de la source Computer Science and Information Systems website

The decoupling of the data plane and the control plane in the Software-Defined Network (SDN) can increase the flexibility of network management and operation. And it can reduce the network limitations caused by the hardware. However, the centralized scheme in SDN also can introduce some other security issues such as the single point of failure, the data consistency in multiple-controller environment and the spoofing attack initiated by a malicious device in the data plane. To solve these problems, a security framework for SDN based on Blockchain (BCSDN) is proposed in this paper. BCSDN adopts a physically distributed and logically centralized multi-controller architecture. LLDP protocol is periodically used to obtain the link state information of the network, and a Merkle tree is establised according to the collected link information and the signature is generate based on KSI for each link that submitted by a switch by the main controller selected by using the PoW mechanism. Such, the dynamic change of network topology is recorded on Blockchian and the consistency of the topology information among multiple controllers can be guaranteed. The main controller issues the signature to the corresponding switch and a controller checks the legitimate of a switch by verifying the signature when it requests the flow rule table from the controller later. The signature verification ensures the authenticated communication between a controller and a switch. Finally, the simulation of the new scheme is implemented in Mininet platform that is a network emulation platform and experiments are done to verify our novel solution in our simulation tool. And we also informally analysis the security attributes that provided by our BCSDN.
Keywords: SDN, LLDP, Blockchain, KSI 
@article{CSIS_2022_19_2_a3,
     author = {Xian Guo and Chen Wang and Laicheng Cao and Yongbo Jiang and Yan Yan},
     title = {A novel {Security} {Mechanism} for {Software} {Defined} {Network} {Based} on {Blockchain}},
     journal = {Computer Science and Information Systems},
     publisher = {mathdoc},
     volume = {19},
     number = {2},
     year = {2022},
     url = {http://geodesic.mathdoc.fr/item/CSIS_2022_19_2_a3/}
}
TY  - JOUR
AU  - Xian Guo
AU  - Chen Wang
AU  - Laicheng Cao
AU  - Yongbo Jiang
AU  - Yan Yan
TI  - A novel Security Mechanism for Software Defined Network Based on Blockchain
JO  - Computer Science and Information Systems
PY  - 2022
VL  - 19
IS  - 2
PB  - mathdoc
UR  - http://geodesic.mathdoc.fr/item/CSIS_2022_19_2_a3/
ID  - CSIS_2022_19_2_a3
ER  - 
%0 Journal Article
%A Xian Guo
%A Chen Wang
%A Laicheng Cao
%A Yongbo Jiang
%A Yan Yan
%T A novel Security Mechanism for Software Defined Network Based on Blockchain
%J Computer Science and Information Systems
%D 2022
%V 19
%N 2
%I mathdoc
%U http://geodesic.mathdoc.fr/item/CSIS_2022_19_2_a3/
%F CSIS_2022_19_2_a3
Xian Guo; Chen Wang; Laicheng Cao; Yongbo Jiang; Yan Yan. A novel Security Mechanism for Software Defined Network Based on Blockchain. Computer Science and Information Systems, Tome 19 (2022) no. 2. http://geodesic.mathdoc.fr/item/CSIS_2022_19_2_a3/