Secure Communication Between OpenFlow Switches and Controllers
Secure Communication Between OpenFlow Switches and Controllers
复制标题
OpenFlow 交换机和控制器之间的安全通信
DOI：
10.1109/glocom.2011.6134496
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
Dominik Samociuk
中科院分区：
文献类型：
--
作者：
Dominik Samociuk
我们研究了与OpenFlow通信的软件定义网络中交换机和控制器之间的安全通道的认证和访问控制相关的不同协议的适用性。我们首先展示了OpenFlow架构中缺乏安全机制可能存在的问题。然后分析了传输层安全协议、安全外壳协议和IPSec协议作为交换机和控制器之间OpenFlow通信的安全通道介质的可用性、优缺点和实现细节。最后，我们讨论了他们可能的扩展认证和访问控制机制。关键词-网络安全;安全体系结构; OpenFlow，软件定义网络。
We study the applicability of different protocols related to authentication and access control for secure channel between switches and controllers in Software Defined Networks communicating with OpenFlow. We firstly show possible problems with the lack of security mechanisms in OpenFlow architecture. Then we analyze the usability, advantages, drawbacks and implementation details of Transport Layer Security, Secure Shell and IPSec protocols as the secure channel medium for OpenFlow communication between switches and controllers. Finally, we discuss their possible extensions to authentication and access control mechanisms. Keywords–Network security; Secure architecture; OpenFlow, Software Defined Network.