Abstract:SDN improves the flexibility and programmability of the network. However, malicious attacks caused by potential vulnerabilities and backdoors can easily lead to data and rule tampering in the network. To address this problem, this paper proposes an endogenous secure SDN network framework based on multipath resilient routing (MRR). MRR includes multipath comparing forwarding, multipath weighted forwarding, and multipath random forwarding. The framework ensures the correctness of flow rules and data content by dynamically comparing the consistency of multi-heterogeneous path data within a certain period, and multipath can also achieve load balance by weighted forwarding. In the MRR framework, we also present an intermediate information feedback mechanism based on encryption authentication and give a mathematical model to evaluate it. This mechanism can accurately identify and dynamically repair malicious switches. Simulation evaluation and prototype system test show that this framework can achieve high accuracy of flow transmission and high availability of system. At the same time, multipath comparing forwarding will bring some performance costs such as delay, bandwidth, and jitter at initial and attacking time. However, when the appropriate forwarding mode and reasonable period T are selected, the proportion of delay introduced by comparing and ruling can be less than 10%, and the average bandwidth of mixed forwarding is almost the same as traditional multipaths', such as we can guarantee 25% multipath comparing forwarding when the bandwidth requirement is 250 M in prototype system.

Modeling for Endogenous Secure Domain Name System Based on Software Defined Networks

Research on Security Threat Monitoring and Testing Framework in Software - Defined Network Based on Depth Learning

Evolving Defense Mechanism for Future Network Security

SDN-ESRC: A Secure and Resilient Control Plane for Software-Defined Networks

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

Safe Reconfiguring Data Plane Via Supervision over Resource and Flow States

Risk Assessment and Defense Resource Allocation of Cyber-Physical Distribution Systems under Denial-of-Service Attacks

Hiding and Trapping: A Deceptive Approach for Defending against Network Reconnaissance with Software-Defined Network

Performance Modeling Based on GSPN for Cyberspace Mimic DNS

Anti-Attacking Modeling and Analysis of Cyberspace Mimic DNS

Security Analysis of Dynamic SDN Architectures Based on Game Theory

SDN-Empowered Reliable and Dynamic Scheduling Scheme for Security Resources.

NetSecu: A Collaborative Network Security Platform for In-network Security

JESS: Joint Entropy-Based DDoS Defense Scheme in SDN

Multipath Resilient Routing for Endogenous Secure Software Defined Networks.

Game-Theoretic Analysis for Security of Various Software-Defined Networking (SDN) Architectures

Design and Implementation of A Network Security Management System

DESIGN AND DEVELOPMENT OF SECURE AND SUSTAINABLE SOFTWARE DEFINED NETWORKS

Design and analysis of a robust security layer for software defined network framework

Security Analysis of Low Earth Orbit Satellites Based on Different Software-Defined Networking Structure

An Intelligent Honeynet Architecture Based on Software Defined Security.