sOFTDP: Secure and efficient OpenFlow topology discovery protocol
sOFTDP: Secure and efficient OpenFlow topology discovery protocol
复制标题
soFTDP：安全高效的OpenFlow拓扑发现协议
DOI：
10.1109/noms.2018.8406229
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
G. Pujolle
中科院分区：
文献类型：
--
作者：
A. Azzouni;R. Boutaba;T. Nguyen;G. Pujolle
拓扑发现是软件定义网络（SDN）控制器最关键的任务之一。当前的SDN控制器使用OpenFlow发现协议（OFDP）作为发现底层网络拓扑的事实协议。在之前的工作中，我们已经展示了OFDP的功能，性能和安全性限制。本文详细介绍了一种安全高效的OpenFlow发现协议sOTDP。sOFTDP只需要对OpenFlow交换机的设计进行最小的修改，消除了拓扑发现过程中的主要漏洞，提高了性能。我们在泛光灯中实现了sOFTDP作为拓扑发现模块进行评估。结果表明，我们的实现比OFDP和以前的安全解决方案更安全。此外，与原有的OFDP和现有的OFDP改进相比，sOFTDP减少了几个数量级的拓扑发现时间。
Topology discovery is one of the most critical tasks of Software-Defined Network (SDN) controllers. Current SDN controllers use the OpenFlow Discovery Protocol (OFDP) as the de-facto protocol for discovering the underlying network topology. In a previous work, we have shown the functional, performance and security limitations of OFDP. In this paper, we introduce and detail a novel protocol called secure and efficient OpenFlow Discovery Protocol sOTDP. sOFTDP requires minimal changes to OpenFlow switch design, eliminates major vulnerabilities in the topology discovery process and improves its performance. We have implemented sOFTDP as a topology discovery module in Floodlight for evaluation. The results show that our implementation is more secure than OFDP and previous security workarounds. Also, sOFTDP reduces the topology discovery time several orders of magnitude compared to the original OFDP and existing OFDP improvements.