Securing SDN controller and switches from attacks. (21st May 2019)

• Record Type: Journal Article
• Authors: Tupakula, Udaya; Varadharajan, Vijay; Mishra, Preeti
• Is Part Of: International journal of high performance computing and networking. Volume 14:Number 1(2019)
• Page Start: 77
• Page End: 91
• Publication Date: 2019-05-21
• Subjects: DN security -- trusted computing -- virtual machine introspection -- VMI -- machine learning -- security attack; High performance computing -- Periodicals; Computer networks -- Periodicals; High performance computing; Periodicals; 004.05
• Languages: English
• ISSNs: 1740-0562

Abstract

In this paper, we propose techniques for securing the SDN controller and the switches from malicious end-host attacks. Our model makes use of trusted computing and introspection-based intrusion detection to deal with attacks in SDN. We have developed a security application for the SDN controller to validate the state of the switches in the data plane and enforce the security policies to monitor the virtual machines at system call level and detect attacks. We have developed a feature extraction method named vector of n-grams which represents the traces in an efficient way without losing the ordering of system calls. The flows from the malicious hosts are dropped before they are processed by the switches or forwarded to the SDN controller. Hence, our model protects the switches and the SDN controller from the attacks.