使用OpenFlow实现安全移动

Suneth Namal, Ijaz Ahmad, A. Gurtov, M. Ylianttila
{"title":"使用OpenFlow实现安全移动","authors":"Suneth Namal, Ijaz Ahmad, A. Gurtov, M. Ylianttila","doi":"10.1109/SDN4FNS.2013.6702540","DOIUrl":null,"url":null,"abstract":"Software Defined Networking (SDN) and its one possible realization, OpenFlow, define the trends of future networks. However, the present OpenFlow architecture does not allow the switches to be mobile e.g., in a moving train as it would disrupt flow processing from network switches. We present OFHIP, an architecture that enables OpenFlow switches to change their IP addresses securely during mobility. OFHIP employs IPSec encapsulated security payload (ESP) in transport mode for protection against DoS, data origin authenticity, connectionless integrity, anti-replay protection, and limited traffic flow confidentiality. We demonstrate the benefits of OFHIP compared to present use of SSL in enabling mobility, reducing the connection latency and improving the resilience to known TCP-level attacks.","PeriodicalId":6455,"journal":{"name":"2013 IEEE SDN for Future Networks and Services (SDN4FNS)","volume":null,"pages":null},"PeriodicalIF":0.0000,"publicationDate":"2013-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"32","resultStr":"{\"title\":\"Enabling Secure Mobility with OpenFlow\",\"authors\":\"Suneth Namal, Ijaz Ahmad, A. Gurtov, M. Ylianttila\",\"doi\":\"10.1109/SDN4FNS.2013.6702540\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Software Defined Networking (SDN) and its one possible realization, OpenFlow, define the trends of future networks. However, the present OpenFlow architecture does not allow the switches to be mobile e.g., in a moving train as it would disrupt flow processing from network switches. We present OFHIP, an architecture that enables OpenFlow switches to change their IP addresses securely during mobility. OFHIP employs IPSec encapsulated security payload (ESP) in transport mode for protection against DoS, data origin authenticity, connectionless integrity, anti-replay protection, and limited traffic flow confidentiality. We demonstrate the benefits of OFHIP compared to present use of SSL in enabling mobility, reducing the connection latency and improving the resilience to known TCP-level attacks.\",\"PeriodicalId\":6455,\"journal\":{\"name\":\"2013 IEEE SDN for Future Networks and Services (SDN4FNS)\",\"volume\":null,\"pages\":null},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2013-11-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"32\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2013 IEEE SDN for Future Networks and Services (SDN4FNS)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/SDN4FNS.2013.6702540\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2013 IEEE SDN for Future Networks and Services (SDN4FNS)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/SDN4FNS.2013.6702540","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 32

摘要

软件定义网络(SDN)及其可能实现的OpenFlow定义了未来网络的趋势。然而,目前的OpenFlow架构不允许交换机是移动的,例如,在移动的列车中,因为它会破坏网络交换机的流处理。我们提出了OFHIP,一种架构,使OpenFlow交换机能够在移动期间安全地更改其IP地址。OFHIP在传输模式中采用IPSec封装的ESP (security payload),实现了DoS防护、数据源真实性、无连接完整性、防重放保护和有限流量机密性等功能。与目前使用SSL相比,我们展示了OFHIP在实现移动性、减少连接延迟和提高对已知tcp级攻击的弹性方面的优势。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
查看原文
分享 分享
微信好友 朋友圈 QQ好友 复制链接
本刊更多论文
Enabling Secure Mobility with OpenFlow
Software Defined Networking (SDN) and its one possible realization, OpenFlow, define the trends of future networks. However, the present OpenFlow architecture does not allow the switches to be mobile e.g., in a moving train as it would disrupt flow processing from network switches. We present OFHIP, an architecture that enables OpenFlow switches to change their IP addresses securely during mobility. OFHIP employs IPSec encapsulated security payload (ESP) in transport mode for protection against DoS, data origin authenticity, connectionless integrity, anti-replay protection, and limited traffic flow confidentiality. We demonstrate the benefits of OFHIP compared to present use of SSL in enabling mobility, reducing the connection latency and improving the resilience to known TCP-level attacks.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
自引率
0.00%
发文量
0
期刊最新文献
An SDN-Based Network Architecture for Extremely Dense Wireless Networks Scalable On-Demand Network Management Module for Software Defined Telecommunication Networks Research Directions in Network Service Chaining SDN for Inter Cloud Networking Network Virtualisation Trends: Virtually Anything Is Possible by Connecting the Unconnected
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
已复制链接
已复制链接
快去分享给好友吧!
我知道了
×
扫码分享
扫码分享
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1