C-BAS: Certificate-based AAA for SDN experimental facilities

Toseef, Umar; Zaalouk, Adel; Rothe, Tom; Broadbent, Matthew; Pentikousis, Kostas

Abstract

Efficient authentication, authorization, and accounting (AAA) management mechanisms will be key for the widespread adoption of SDN experimentation facilities beyond the confines of academic labs. In particular, we are interested in a robust AAA infrastructure to identify experimenters, police their actions based on the associated roles, facilitate secure resource sharing, and provide for detailed accountability. Currently, however, said facilities are forced to employ a patchy AAA infrastructure which lacks several of the aforementioned features. This paper proposes a certificate-based AAA architecture for SDN experimental facilities, which is by design both secure and flexible. As this work is implementation-driven and aims for a short deployment cycle in current facilities, we also outline a credible migration path which we are currently pursuing actively.

Citation

Toseef, U., Zaalouk, A., Rothe, T., Broadbent, M., & Pentikousis, K. (2014). C-BAS: Certificate-based AAA for SDN experimental facilities. In 2014 Third European Workshop on Software Defined Networks (91-96). https://doi.org/10.1109/EWSDN.2014.41

• Conference Name: 2014 Third European Workshop on Software Defined Networks
• Conference Location: Budapest, Hungary
• Start Date: Sep 1, 2014
• Online Publication Date: Dec 15, 2014
• Publication Date: 2014
• Deposit Date: Mar 10, 2022
• Pages: 91-96
• Series ISSN: 2379-0350
• Book Title: 2014 Third European Workshop on Software Defined Networks
• DOI: https://doi.org/10.1109/EWSDN.2014.41
• Public URL: http://researchrepository.napier.ac.uk/Output/2843991