Study on Security in SDN

Sujing Zhou

doi:10.3969／j.issn.1000-0801.2013.09.022

您当前的位置：

首页 >

文章列表页 >

Study on Security in SDN

Overview | 更新时间：2024-06-05

- Study on Security in SDN
- Telecommunications Science Vol. 29, Issue 9, Pages: 113-116(2013)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.3969／j.issn.1000-0801.2013.09.022
  CLC：
- Published Online：2013-09，
  
  Published：20 September 2013
- 稿件说明：
移动端阅览
Sujing Zhou. Study on Security in SDN[J]. Telecommunications science, 2013, 29(9): 113-116.
DOI：

Sujing Zhou. Study on Security in SDN[J]. Telecommunications science, 2013, 29(9): 113-116. DOI： 10.3969／j.issn.1000-0801.2013.09.022.

摘要

首先对SDN和网络安全相关的架构（如SANE、Ethane）进行了调研；其次，分析了SDN 的安全需求和安全应用的现状，包括应用层和控制层之间、控制层和转发平面之间的安全需求研究现状以及在SDN上实现安全应用的现状；最后，探讨了SDN应用的认证、授权的解决方案，并对策略冲突消解、网络安全应用实现的现状进行了总结。

Abstract

Security related SDN architecture was investigated

including SANE、Ethane

etc.

then current state on security requirement analysis in SDN was reported

which was separated into two parts

one was between application plane and control plane

and the other was between control plane and data plane. Subsequently

the mechanisms of security applications in SDN were discussed

especially the resolutions on application authentication and authorization using OAuth and ABFAB framework. In the end

a summarize in policy conflict resolution and security implementation were given.

关键词

Keywords

references

Casado M . Architectural support for security management in enterprise networks . Doctoral Dissertation,Stanford University , 2007

ONF.Software-Defined Networking: the New Norm for Networks . ONF White Paper , 2012

ONF.OpenFlow Switch Specification Version 1.3.1 . 2012

Wasserman M , Hartman S . Security Analysis of the Open Networking Foundation （ONF）OpenFlow Switch Specification . IETF Draft（draft-mrw-sdnsec-openflow-analysis） , 2013

Hartman S , Wasserman M , Zhang D . Security Requirements in the Software Defined Networking Model , IETF Draft （draft-hartman-sdnsec-requirements） , 2013

Porrasy P , Shinz S , Yegneswaran V , et al . A security enforcement kernel for OpenFlow networks , Proceedings of the ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking（HotSDN） , Helsinki,Finland , August 2012

Shin S , Porras P , Yegneswaran V , et al . FRESCO: modular composable security services for software-defined networks , Proceedings of the ISOC Network and Distributed System Security Symposium , San Diego,CA , February 2013

王淑玲，李济汉，张云勇等． SDN架构及安全性研究．电信科学， 2013 ( 4 )

郭春梅，张如辉，毕学尧． SDN网络技术及其安全性研究．信息网络安全， 2012 ( 8 )

Hardt D . The OAuth 2.0 Authorization Framework . IETF RFC6749 , 2011

Howlett J , Hartman S , Tschofenig H , et al . Application Bridging for Federated Access Beyond Web（ABFAB）Architecture . IETF Draft（draft-ietf-ABFAB-arch） , 2011

Campbell B , Mortimore C , Jones M , et al . Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants . IETF Draft（draft-ietf-oauth-assertions） , 2013

Views

794

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

A digital signature scheme based on shared key in intelligent terminal

Application of Interactive Multi-Biometrics Recognition on E-Commerce

Security Analysis of Relay in LTE-Advanced

A survey on 5G capabilities enabling the factories of the future

Interconnection and coexistence of heterogeneous network:requirements, challenges, and architecture

Related Author

Guorong LIU

Dongxin LIU

Laifu WANG

Jun SHEN

Huamin JIN

Ling Tan

Lu Zhang

Hongru Zhu

Related Institution

School of Computer and Software，Nanjing University of Information Science＆Technology

School of the Internet of Things，Nanjing University of Posts and Telecommunications

Operation and Maintenance，Jiangsu Branch of China Telecom Co.，Ltd.

School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University

Key Laboratory of System Control and Information Processing, Ministry of Education of China

⁰