Design of an Application Authentication Framework to Secure Controller Access via Northbound Interface in SDN
摘要
The capability for third parties to create network applications is one of the fundamental features of Software Defined Networking (SDN). This opens up more opportunity for networking innovation, from performance-enhanced to energy-efficient solutions. The SDN controller in SDN is how the application communicates with the network. The reliability of an application is a particular issue with this communication route. What details, for instance, does the application acquire on the state of the network? Is this data obtained with malevolent intent or is it required for the program to operate? In this work, we offer a method for securing the northbound communication interface by adding a permissions mechanism that makes sure that only trusted apps may access controller operations. The application of this permissions scheme using our method incurs very little additional effort and demonstrates effective protection against illegal control function access attempts. The proposed solution is deployed on OpenDaylight controller to measure its efficiency.