Detection of anomalies of a non-deterministic software-defined networking control - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Computers & Security Année : 2023

Detection of anomalies of a non-deterministic software-defined networking control

Thierry Divoux

Résumé

Software Defined Networking (SDN) is a network architecture within the control is centralized through a software-based controller. Being a single point of attack makes the controller the preferred target in the SDN architecture. Multi-controller architecture has been introduced to reinforce the control plane. However it requires a communication interface between the controllers which is a security threat. In this objective, a dual controller architecture is introduced and it consists of one nominal controller in charge of the data plane computation plus a second one in charge of the detection of anomalies in the decisions taken by the main controller. In the case of non-determinist algorithm, the detection logic aims at determining a likelihood score of the decisions taken by the controller. A multi-criterion detection approach is proposed by considering both the performance of the decisions and the structure of the decisions taken by the controller. Such computations are probabilistic and attention has been paid to machine learning algorithms to determine this likelihood. More precisely, three formalisms are compared: Probabilistic Finite Automaton, Hidden Markov Model and Recurrent Neural Network. The impact of the control variance in the detection accuracy depending on the formalism used is discussed on a case study.
Fichier principal
Vignette du fichier
HMM_Hal.pdf (1.63 Mo) Télécharger le fichier
Hal.pdf (1.73 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04056169 , version 1 (13-04-2023)

Identifiants

Citer

Loïc Desgeorges, Jean-Philippe Georges, Thierry Divoux. Detection of anomalies of a non-deterministic software-defined networking control. Computers & Security, 2023, 129, pp.103228. ⟨10.1016/j.cose.2023.103228⟩. ⟨hal-04056169⟩
27 Consultations
70 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More