Detection of security and safety threats related to the control of a SDN architecture - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2021

Detection of security and safety threats related to the control of a SDN architecture

Thierry Divoux

Résumé

Software Defined Networking is a concept within the networking field which proposed a centralized control considering the control and data planes. To overcome the safety and security threats, solutions might be divided into two categories: enforcing the controller to make it more robust or the architecture using a multi-controller approach. This work aims to pave the way for a multi-controller architecture without East-West interface to avoid the spreading of an attack. There is one nominal controller in charge of the control while the second observes the traffic at the Southbound interface to detect anomalies of control. A detection method is introduced theoretically and relies on Intrusion Detection System theory, more precisely the specificationbased. Here, the specification is a template determined through a projection function of the control logic. The template is compared to the activity of the command observed such that any deviation generates an alarm. The method is finally explained in use cases.
Fichier principal
Vignette du fichier
CESCIT_21(5).pdf (690.76 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03280816 , version 1 (07-07-2021)

Identifiants

  • HAL Id : hal-03280816 , version 1

Citer

Loïc Desgeorges, Jean-Philippe Georges, Thierry Divoux. Detection of security and safety threats related to the control of a SDN architecture. 4th IFAC Conference on Embedded Systems, Computational Intelligence and Telematics in Control, CESCIT 2021, Jul 2021, Valenciennes (virtuel), France. ⟨hal-03280816⟩
60 Consultations
72 Téléchargements

Partager

Gmail Facebook X LinkedIn More