標題: Mitigating DoS Attacks against SDN Controller Using Information Hiding
作者: Abdullaziz, Osamah Ibrahiem
Wang, Li-Chun
電機工程學系
Department of Electrical and Computer Engineering
關鍵字: Software defined networking (SDN);OpenFlow;Denial of service (DoS) attacks;Information hiding
公開日期: 1-Jan-2019
摘要: Because of SDN centralization nature, denial of service (DoS) attacks have become a prominent concern. In the OpenFlow (OF) protocol, the transport layer security (TLS) protocol is recommended to secure the control channel. Unfortunately, the tasks involved in the proper configuration of a secured TLS are very challenging. Even worse, TLS is made an optional mode of communication in OF. As a consequence, some OF-enabled switches and controllers do not adopt TLS. In this paper, we develop a lightweight authentication mechanism, called Hidden Authentication (HiAuth), to protect SDN controller against DoS attacks. HiAuth legitimizes SDN forwarding devices by hiding authentication information into the header of control channel packets. Our experimental results prove that HiAuth is lightweight and can not only mitigate DoS attacks, but also provide high undetectability to the attacker.
URI: http://hdl.handle.net/11536/154052
ISBN: 978-1-5386-7646-2
ISSN: 1525-3511
期刊: 2019 IEEE WIRELESS COMMUNICATIONS AND NETWORKING CONFERENCE (WCNC)
起始頁: 0
結束頁: 0
Appears in Collections:Conferences Paper