Lightweight authentication mechanism for software defined network using information hiding

Osamah Ibrahiem Abdullaziz; Yu Jia Chen; Li Chun Wang

doi:10.1109/GLOCOM.2016.7841954

Lightweight authentication mechanism for software defined network using information hiding

Osamah Ibrahiem Abdullaziz, Yu Jia Chen, Li Chun Wang

Department of Communication Engineering

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

17 Scopus citations

Abstract

Software defined network (SDN) is an emerging network architecture which offloads the control logic of the network from the underlying forwarding devices to a centralized controller. This centralized control intelligence software defines the behavior of the network. However, the programmability and centralization of the SDN architecture introduce potential security concerns. In this paper, we first investigate the threats of denial of service (DoS) attacks on the SDN control channel. Then, we evaluate the impact of DoS by simulating a DoS attack against the network controller. Our results show that it is possible to exhaust the controller resources in the absence of an authentication mechanism. Finally, we propose a lightweight information hiding authentication mechanism to prevent DoS attacks in the SDN control channel.

Original language	English
Title of host publication	2016 IEEE Global Communications Conference, GLOBECOM 2016 - Proceedings
Publisher	Institute of Electrical and Electronics Engineers Inc.
ISBN (Electronic)	9781509013289
DOIs	https://doi.org/10.1109/GLOCOM.2016.7841954
State	Published - 2016
Event	59th IEEE Global Communications Conference, GLOBECOM 2016 - Washington, United States Duration: 4 Dec 2016 → 8 Dec 2016

Publication series

Name	2016 IEEE Global Communications Conference, GLOBECOM 2016 - Proceedings

Conference

Conference	59th IEEE Global Communications Conference, GLOBECOM 2016
Country/Territory	United States
City	Washington
Period	4/12/16 → 8/12/16

Keywords

Denial of service attacks
Information hiding
Software defined network

Access to Document

10.1109/GLOCOM.2016.7841954

Cite this

Abdullaziz, O. I., Chen, Y. J., & Wang, L. C. (2016). Lightweight authentication mechanism for software defined network using information hiding. In 2016 IEEE Global Communications Conference, GLOBECOM 2016 - Proceedings [7841954] (2016 IEEE Global Communications Conference, GLOBECOM 2016 - Proceedings). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/GLOCOM.2016.7841954

@inproceedings{e7d5b64083ae4ac0b4b8be93e255be31,

title = "Lightweight authentication mechanism for software defined network using information hiding",

abstract = "Software defined network (SDN) is an emerging network architecture which offloads the control logic of the network from the underlying forwarding devices to a centralized controller. This centralized control intelligence software defines the behavior of the network. However, the programmability and centralization of the SDN architecture introduce potential security concerns. In this paper, we first investigate the threats of denial of service (DoS) attacks on the SDN control channel. Then, we evaluate the impact of DoS by simulating a DoS attack against the network controller. Our results show that it is possible to exhaust the controller resources in the absence of an authentication mechanism. Finally, we propose a lightweight information hiding authentication mechanism to prevent DoS attacks in the SDN control channel.",

keywords = "Denial of service attacks, Information hiding, Software defined network",

author = "Abdullaziz, {Osamah Ibrahiem} and Chen, {Yu Jia} and Wang, {Li Chun}",

note = "Publisher Copyright: {\textcopyright} 2016 IEEE.; null ; Conference date: 04-12-2016 Through 08-12-2016",

year = "2016",

doi = "10.1109/GLOCOM.2016.7841954",

language = "???core.languages.en_GB???",

series = "2016 IEEE Global Communications Conference, GLOBECOM 2016 - Proceedings",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

booktitle = "2016 IEEE Global Communications Conference, GLOBECOM 2016 - Proceedings",

}

Abdullaziz, OI, Chen, YJ & Wang, LC 2016, Lightweight authentication mechanism for software defined network using information hiding. in 2016 IEEE Global Communications Conference, GLOBECOM 2016 - Proceedings., 7841954, 2016 IEEE Global Communications Conference, GLOBECOM 2016 - Proceedings, Institute of Electrical and Electronics Engineers Inc., 59th IEEE Global Communications Conference, GLOBECOM 2016, Washington, United States, 4/12/16. https://doi.org/10.1109/GLOCOM.2016.7841954

Lightweight authentication mechanism for software defined network using information hiding. / Abdullaziz, Osamah Ibrahiem; Chen, Yu Jia; Wang, Li Chun.

2016 IEEE Global Communications Conference, GLOBECOM 2016 - Proceedings. Institute of Electrical and Electronics Engineers Inc., 2016. 7841954 (2016 IEEE Global Communications Conference, GLOBECOM 2016 - Proceedings).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Lightweight authentication mechanism for software defined network using information hiding

AU - Abdullaziz, Osamah Ibrahiem

AU - Chen, Yu Jia

AU - Wang, Li Chun

PY - 2016

Y1 - 2016

N2 - Software defined network (SDN) is an emerging network architecture which offloads the control logic of the network from the underlying forwarding devices to a centralized controller. This centralized control intelligence software defines the behavior of the network. However, the programmability and centralization of the SDN architecture introduce potential security concerns. In this paper, we first investigate the threats of denial of service (DoS) attacks on the SDN control channel. Then, we evaluate the impact of DoS by simulating a DoS attack against the network controller. Our results show that it is possible to exhaust the controller resources in the absence of an authentication mechanism. Finally, we propose a lightweight information hiding authentication mechanism to prevent DoS attacks in the SDN control channel.

AB - Software defined network (SDN) is an emerging network architecture which offloads the control logic of the network from the underlying forwarding devices to a centralized controller. This centralized control intelligence software defines the behavior of the network. However, the programmability and centralization of the SDN architecture introduce potential security concerns. In this paper, we first investigate the threats of denial of service (DoS) attacks on the SDN control channel. Then, we evaluate the impact of DoS by simulating a DoS attack against the network controller. Our results show that it is possible to exhaust the controller resources in the absence of an authentication mechanism. Finally, we propose a lightweight information hiding authentication mechanism to prevent DoS attacks in the SDN control channel.

KW - Denial of service attacks

KW - Information hiding

KW - Software defined network

UR - http://www.scopus.com/inward/record.url?scp=85015452307&partnerID=8YFLogxK

U2 - 10.1109/GLOCOM.2016.7841954

DO - 10.1109/GLOCOM.2016.7841954

M3 - 會議論文篇章

AN - SCOPUS:85015452307

T3 - 2016 IEEE Global Communications Conference, GLOBECOM 2016 - Proceedings

BT - 2016 IEEE Global Communications Conference, GLOBECOM 2016 - Proceedings

PB - Institute of Electrical and Electronics Engineers Inc.

Y2 - 4 December 2016 through 8 December 2016

ER -

Abdullaziz OI, Chen YJ, Wang LC. Lightweight authentication mechanism for software defined network using information hiding. In 2016 IEEE Global Communications Conference, GLOBECOM 2016 - Proceedings. Institute of Electrical and Electronics Engineers Inc. 2016. 7841954. (2016 IEEE Global Communications Conference, GLOBECOM 2016 - Proceedings). https://doi.org/10.1109/GLOCOM.2016.7841954

Lightweight authentication mechanism for software defined network using information hiding

Abstract

Publication series

Conference

Keywords

Access to Document

Fingerprint

Cite this