Skip to main content
SpringerLink
Log in

OSCO: An Open Security-Enhanced Compatible OpenFlow Platform

  • Conference paper
  • First Online:
Wireless Algorithms, Systems, and Applications (WASA 2018)

Part of the book series: Lecture Notes in Computer Science ((LNTCS,volume 10874))

Abstract

Software-defined Networking (SDN) is a representative next generation network architecture, which allows network administrators to programmatically initialize, control, change and manage network behavior dynamically via open interfaces. However, SDN brings new security problems, e.g., controller hijacking, black-hole, unauthorized data modification, etc. It is desirable to develop a unified platfom to enhance the security property and facilitate the security configuration and evaluation. In this paper, we propose OSCO (Open Security-enhanced Compatible OpenFlow) platform, a platform based on Raspberry Pi Single Board Computer (SBC) hardware and SDN network architecture, which supports highly configurable cryptographic algorithm modules, security protocols, flexible hardware extensions and virtualized SDN networks. Furthermore, we present an enhanced OpenFlow protocol to improve the security in SDN data plane. We implement and evaluate the prototype system and the experiment results show that our system conducted security functions with relatively low computational and networking performance overheads.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 109.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 139.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. Crypto++ Library. http://www.cryptopp.com/

  2. Floodlight Controller. http://www.projectfloodlight.org/

  3. NOX Controller. http://www.noxrepo.org/

  4. OpenSSL. http://www.openssl.org/

  5. Open vSwitch. http://www.openvswitch.org/

  6. Pairing-Based Cryptography Library. http://crypto.stanford.edu/pbc/

  7. Ubuntu MATE. http://ubuntu-mate.org/

  8. Wireshark. http://www.woreshark.org/

  9. Raspberry Pi Hardware Specification (2011). http://www.raspberrypi.org/documentation/hardware/

  10. Open Networking Foundation (2015). https://www.opennetworking.org/

  11. Ahmad, I., Namal, S., Ylianttila, M., Gurtov, A.: Security in software defined networks: a survey. IEEE Commun. Surv. Tutor. 17(4), 2317–2346 (2015)

    Article  Google Scholar 

  12. Kloti, R., Kotronis, V., Smith, P.: Openflow: a security analysis. In: 2013 21st IEEE International Conference on Network Protocols (ICNP), pp. 1–6. IEEE (2013)

    Google Scholar 

  13. Kohl, J.: The Kerberos network authentication service (V5). RFC 7(3), 167 (1993)

    Google Scholar 

  14. Kreutz, D., Ramos, F.M., Verissimo, P.E., Rothenberg, C.E., Azodolmolky, S., Uhlig, S.: Software-defined networking: a comprehensive survey. Proc. IEEE 103(1), 14–76 (2015)

    Article  Google Scholar 

  15. Lantz, B., Heller, B., McKeown, N.: A network in a laptop: rapid prototyping for software-defined networks. In: Proceedings of the 9th ACM SIGCOMM Workshop on Hot Topics in Networks, p. 19. ACM (2010)

    Google Scholar 

  16. McKeown, N., Anderson, T., Balakrishnan, H., Parulkar, G., Peterson, L., Rexford, J., Shenker, S., Turner, J.: Openflow: enabling innovation in campus networks. ACM SIGCOMM Comput. Commun. Rev. 38(2), 69–74 (2008)

    Article  Google Scholar 

  17. Porras, P., Shin, S., Yegneswaran, V., Fong, M., Tyson, M., Gu, G.: A security enforcement kernel for openflow networks, pp. 121–126 (2012)

    Google Scholar 

  18. Riley, G.F., Henderson, T.R.: The \(ns\)-3 network simulator. In: Wehrle, K., Güneş, M., Gross, J. (eds.) Modeling and Tools for Network Simulation, pp. 15–34. Springer, Heidelberg (2010). https://doi.org/10.1007/978-3-642-12331-3_2

    Chapter  Google Scholar 

  19. Shin, S., Porras, P., Yegneswaran, V., Fong, M., Gu, G., Tyson, M.: Fresco: modular composable security services for softwaredefined networks. In: Proceedings of Network and Distributed Security Symposium (2013)

    Google Scholar 

  20. Wang, M., Liu, J., Mao, J., Cheng, H., Chen, J., Qi, C.: Routeguardian: Constructing secure routing paths in software-defined networking. Tsinghua Sci. Technol. 22(4), 400–412 (2017)

    Article  Google Scholar 

Download references

Acknowledgment

This work was supported in part by the National Key R&D Program of China (No. 2017YFB1400700), the National Natural Science Foundation of China (No. 61402029, U17733115), the National Natural Science Foundation of China (No. 61379002, No. 61370190), and the Funding Project of Education Ministry for the Development of Liberal Arts and Social Sciences (No. 12YJAZH136).

Author information

Authors and Affiliations

  1. School of Cyber Science and Technology, Beihang University, Beijing, China

    Haosu Cheng, Jianwei Liu & Jian Mao

  2. School of Electronic and Information Engineering, Beihang University, Beijing, China

    Haosu Cheng, Jianwei Liu, Jian Mao, Mengmeng Wang & Jie Chen

Authors
  1. Haosu Cheng
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Jianwei Liu
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Jian Mao
    View author publications

    You can also search for this author in PubMed Google Scholar

  4. Mengmeng Wang
    View author publications

    You can also search for this author in PubMed Google Scholar

  5. Jie Chen
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Jian Mao .

Editor information

Editors and Affiliations

  1. University of South Florida, Tampa, Florida, USA

    Sriram Chellappan

  2. Virginia Commonwealth University, Richmond, Virginia, USA

    Wei Cheng

  3. Georgia State University, Atlanta, Georgia, USA

    Wei Li

Rights and permissions

Reprints and permissions

Copyright information

© 2018 Springer International Publishing AG, part of Springer Nature

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Cheng, H., Liu, J., Mao, J., Wang, M., Chen, J. (2018). OSCO: An Open Security-Enhanced Compatible OpenFlow Platform. In: Chellappan, S., Cheng, W., Li, W. (eds) Wireless Algorithms, Systems, and Applications. WASA 2018. Lecture Notes in Computer Science(), vol 10874. Springer, Cham. https://doi.org/10.1007/978-3-319-94268-1_6

Download citation

  • DOI: https://doi.org/10.1007/978-3-319-94268-1_6

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-319-94267-4

  • Online ISBN: 978-3-319-94268-1

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation