Anomalies detection method for non-determinist SDN control - Archive ouverte HAL
Communication Dans Un Congrès Année : 2022

Anomalies detection method for non-determinist SDN control

Thierry Divoux

Résumé

Software Defined Networking (SDN) is a networking architecture within the control is centralized through a software-based controller. Thus, being a single point of attack makes it the preferred target in case of attack. Multi controller architecture has been considered to reinforce the control plane. However, the communication interface between the controller is a security threat. We already propose a dual controller architecture, one nominal controller which is in charge of the data plane computation plus a second one which is in charge of the detection of anomalies in the decisions taken by the first controller. Previous work considered a deterministic control and this paper extends to the case of a non-determinist algorithm. In this objective we introduce a multi-criteria detection approach and we developed two approaches: verifying the consistency of the performance of the decisions taken and verifying the consistency of the sequence of decisions of the controller. We tested the proposition on a study case.
Fichier principal
Vignette du fichier
TA22_Desgeorgesetal.pdf (1.02 Mo) Télécharger le fichier
Origine Fichiers éditeurs autorisés sur une archive ouverte

Dates et versions

hal-03774871 , version 1 (12-09-2022)

Licence

Identifiants

Citer

Loïc Desgeorges, Jean-Philippe Georges, Thierry Divoux. Anomalies detection method for non-determinist SDN control. 6th IFAC Symposium on Telematics Applications, TA 2022, Jun 2022, Nancy, France. ⟨10.1016/j.ifacol.2022.08.010⟩. ⟨hal-03774871⟩
24 Consultations
43 Téléchargements

Altmetric

Partager

More