BCFR: Blockchain-based Controller Against False Flow Rule Injection in SDN

Boukria, Sarra; Guerroumi, Mohamed; Romdhani, Imed

Abstract

Software Defined Networking (SDN) technology increases the evolution of Internet and network development. SDN, with its logical centralization of controllers and global network overview changes the network's characteristics, on term of flexibility, availability and programmability. However, this development increased the network communication security challenges. To enhance the SDN security, we propose the BCFR solution to avoid false flow rules injection in SDN data layer devices. In this solution, we use the blockchain technology to provide the controller authentication and the integrity of the traffic flow circulated between the controller and the other network elements. This work is implemented using OpenStack platform and Onos controller. The evaluation results show the effectiveness of our proposal.

Citation

Boukria, S., Guerroumi, M., & Romdhani, I. (2020). BCFR: Blockchain-based Controller Against False Flow Rule Injection in SDN. In 2019 IEEE Symposium on Computers and Communications (ISCC) (1034-1039). https://doi.org/10.1109/ISCC47284.2019.8969780

• Conference Name: 11th IEEE International Workshop on Performance Evaluation of Communications in Distributed Systems and Web based Service Architectures, PEDISWESA'2019
• Conference Location: Barcelona, Spain
• Start Date: Jun 30, 2019
• End Date: Jul 3, 2019
• Acceptance Date: May 15, 2019
• Online Publication Date: Jan 27, 2020
• Publication Date: Jan 27, 2020
• Deposit Date: May 21, 2019
• Publicly Available Date: May 21, 2019
• Publisher: Institute of Electrical and Electronics Engineers
• Pages: 1034-1039
• Series Title: IEEE Symposium on Computers and Communication
• Series ISSN: 2642-7389
• Book Title: 2019 IEEE Symposium on Computers and Communications (ISCC)
• DOI: https://doi.org/10.1109/ISCC47284.2019.8969780
• Keywords: Software Defined Networking; SDN controller security; Blockchain; OpenStack; Onos; injection; false flow rules
• Public URL: http://researchrepository.napier.ac.uk/Output/1817993