<p>Deploying Software-Defined Networking (SDN) across multiple administrative domains presents distinct security challenges, particularly regarding the integrity and security of flow modification requests. Furthermore, various malicious activities, including rogue controller attacks, replay attacks, and Distributed Denial of Service (DDoS) attacks, create vulnerabilities that can compromise flow integrity. To address these challenges, we propose Cross-DistBlock, a multi-stage flow verification in multi-domain SDN networks, implemented through blockchain chaincode. This method ensures that flow modification proposals undergo three security checks before a final decision is made (digital signature, selecting the non-rogue controllers, and voting consensus). The decentralized chaincode shares the security events, and an adaptive policy is installed to prevent future attacks. Cross-DistBlock dynamically adjusts controller capabilities based on real-time trust scores, ensuring that security measures are immediately enforced against suspected or rogue controllers. We conducted experiments using the private blockchain to demonstrate the feasibility of the proposed approach. The performance of our method was evaluated under various attack scenarios, such as rogue controller attacks, replay attacks, and DDoS attacks. The experimental results of Cross-DistBlock demonstrates a latency improvement of 20.49% compared to BCS, 28.15% compared to BMC-SDN, and 49.21% compared to FRChain. In contrast, the baseline method allowed DDoS attacks to persist, leading to increasing latency. Overall, our findings suggest that the proposed method effectively restricts malicious flow modification requests while maintaining minimal latency compared to other existing methods.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Cross-DistBlock: Blockchain-Enabled Multi-stage Flow Verification in Multi-domain Software-Defined Networks

  • Birglang Bargayary,
  • Nabajyoti Medhi

摘要

Deploying Software-Defined Networking (SDN) across multiple administrative domains presents distinct security challenges, particularly regarding the integrity and security of flow modification requests. Furthermore, various malicious activities, including rogue controller attacks, replay attacks, and Distributed Denial of Service (DDoS) attacks, create vulnerabilities that can compromise flow integrity. To address these challenges, we propose Cross-DistBlock, a multi-stage flow verification in multi-domain SDN networks, implemented through blockchain chaincode. This method ensures that flow modification proposals undergo three security checks before a final decision is made (digital signature, selecting the non-rogue controllers, and voting consensus). The decentralized chaincode shares the security events, and an adaptive policy is installed to prevent future attacks. Cross-DistBlock dynamically adjusts controller capabilities based on real-time trust scores, ensuring that security measures are immediately enforced against suspected or rogue controllers. We conducted experiments using the private blockchain to demonstrate the feasibility of the proposed approach. The performance of our method was evaluated under various attack scenarios, such as rogue controller attacks, replay attacks, and DDoS attacks. The experimental results of Cross-DistBlock demonstrates a latency improvement of 20.49% compared to BCS, 28.15% compared to BMC-SDN, and 49.21% compared to FRChain. In contrast, the baseline method allowed DDoS attacks to persist, leading to increasing latency. Overall, our findings suggest that the proposed method effectively restricts malicious flow modification requests while maintaining minimal latency compared to other existing methods.