NDLI: Trust support for SDN controllers and virtualized network applications

Content Provider	IEEE Xplore Digital Library
Author	Betge-Brezetz, S. Kamga, G.-B. Tazi, M.
Copyright Year	2015
Description	Author affiliation: Alcatel-Lucent Bell Labs., Nozay, France (Betge-Brezetz, S.; Kamga, G.-B.) \|\| Telecom SudParis, Evry, France (Tazi, M.)
Abstract	The SDN paradigm allows networks to be dynamically reconfigurable by network applications. SDN is also of particular interest for NFV which deals with the virtualization of network functions. The network programmability offered by SDN presents then various advantages but it also induces various threats regarding potential attacks on the network. For instance, there is a critical risk that a hacker takes over the network control by exploiting this SDN network programmability (e.g., using the SDN API or tampering a network application running on the SDN controller). This paper proposes then an approach to deal with this possible lack of trust in the SDN controller or in their applications. This approach consists in not relying on a single controller but on several `redundant' controllers that may also run in different execution environments. The network configuration requests coming from these controllers are then compared and, if deemed sufficiently consistent and then trustable, they are actually sent to the network. This approach has been implemented in an intermediary layer (based on a network hypervisor) inserted between the network equipments and the controllers. Experimentations have been performed showing the feasibility of the approach and providing some first evaluations of its impact on the network and the services.
Starting Page	1
Ending Page	5
File Size	208839
Page Count	5
File Format	PDF
ISBN	9781479978991
DOI	10.1109/NETSOFT.2015.7116153
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2015-04-13
Publisher Place	UK
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Network hypervisor Network virtualization Network applications Routing Security Trust Virtual machine monitors Network topology Prototypes Computer architecture SDN Virtualization NFV
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Network issues in virtual machine migration

dVirt: A virtualized infrastructure for experimenting BGP routing

HyperFlex: An SDN virtualization architecture with flexible hypervisor function allocation

Seamless virtual machine live migration on network security enhanced hypervisor

Pairing SDN with network virtualization: The network hypervisor placement problem

Cloud security tactics: Virtualization and the VMM

SDN/NFV orchestration for dynamic deployment of virtual SDN controllers as VNF for multi-tenant optical networks

Towards Thwarting Unauthorized Network Accesses with a Feather-Weight Hypervisor

High-Performance vNIC Framework for Hypervisor-Based NFV with Userspace vSwitch

Trust support for SDN controllers and virtualized network applications

Similar Documents

Network issues in virtual machine migration

dVirt: A virtualized infrastructure for experimenting BGP routing

HyperFlex: An SDN virtualization architecture with flexible hypervisor function allocation

Seamless virtual machine live migration on network security enhanced hypervisor

Pairing SDN with network virtualization: The network hypervisor placement problem

Cloud security tactics: Virtualization and the VMM

SDN/NFV orchestration for dynamic deployment of virtual SDN controllers as VNF for multi-tenant optical networks

Towards Thwarting Unauthorized Network Accesses with a Feather-Weight Hypervisor

High-Performance vNIC Framework for Hypervisor-Based NFV with Userspace vSwitch

Trust support for SDN controllers and virtualized network applications