TARU PUBLICATIONS
Journal of Discrete Mathematical Sciences and Cryptography cover
Open Access ·Peer-reviewed·ISSN (Online): 2169-0065·ISSN (Print): 0972-0529

Monthly Journal: Publishes theoretical and applied research in all areas of Discrete Mathematical Sciences, Cryptography, Combinatorics, Elliptic Curves and Information Security.

Issues up to 2022 co-published with and available at:Taylor & Francis Online
submissions@tarupublications.com
Open Access Research Article

Novel framework for enhancing security of SDN based VPLS architecture

, , , * ,

* Corresponding author · click or hover a name for details

pp. 1331–1343Vol. 27Issue 4June 2024DOI: 10.47974/JDMSC-1986 Crossmark XML
Published Online:
26 Jun 2024
Article type:
Research Article
Language:
EN
Article no.:
JDMSC-1986
Pages:
1331–1343

Abstract

Software-Defined Networking (SDN) is an emerging technology that enables the extension of a single Ethernet broadcast domain over a wide area network. However, there are still several major network security threats that could lead to network and resource unavailability, man-in-the-middle attacks, cryptographic flaws, and other vulnerabilities. This paper presents a method that proposes the use of Trusted Platform Module (TPM)-based SDN Virtual Private LAN Services (VPLS), which is intended to provide a secure solution that can help mitigate various network attacks. Open VSwitch (OVS) is a virtual switch that can be used to implement SDN-based VPLS networks. Direct Anonymous Attestation (DAA) is used to verify the authenticity of hardware devices without revealing any identifying information about the devices. The proposed architecture is implemented in a testbed to analyze the performance. The results show that TPM can be utilized in an SDN network to enhance security by securely storing encryption keys and certificates.

Keywords

Subject Classifications

Primary 93A30Secondary 49K15

References

[1] B. Mirkhanzadeh, N. Taheri, and S. Khorsandi, “SDxVPN: A software-defined solution for VPN service providers,” in NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium,  pp. 180–188 (2016). doi: 10.1109/NOMS.2016.7502811.
[2] J.-W. Hu, C.-S. Yang, and T.-L. Liu, “L2OVX: An On-demand VPLS Service with Software-Defined Networks,” in 2016 30th International Conference on Advanced Information Networking and Applications Workshops (WAINA), pp. 861–866 (2016). doi: 10.1109/WAINA.2016.9.
[3] M. Liyanage and A. Gurtov, “A scalable and secure VPLS architecture for provider provisioned networks,” in 2013 IEEE Wireless Communications and Networking Conference (WCNC), pp. 1115–1120 (2013). doi: 10.1109/WCNC.2013.6554720.
[4] U. Tupakula, V. Varadharajan, and K. K. Karmakar, “Attack Detection on the Software Defined Networking Switches,” in 2020 6th IEEE Conference on Network Softwarization (NetSoft), pp. 262–266 (2020). doi: 10.1109/NetSoft48620.2020.9165459.
[5] N. and others Kenchaiah, “Trustworthiness Among Controllers and Switches In Multi-Provider Software Defined Network Deployments Using A Trusted Platform Module (Tpm) And Secure Ledger,” (2020).
[6] S. Chattopadhyay, A. K. Sahoo, and S. Jasola, “Improvement in DDoS attack detection in software defined network using ML algorithm,” Journal of Discrete Mathematical Sciences & Cryptography, vol. 26, no. 7, pp. 2025–2044 (2023), doi: 10.47974/JDMSC-1848.
[7] M. Liyanage, M. Ylianttila, and A. Gurtov, “Improving the tunnel management performance of secure VPLS architectures with SDN,” in 2016 13th IEEE Annual Consumer Communications & Networking Conference (CCNC), pp. 530–536 (2016). doi: 10.1109/CCNC.2016.7444836.
[8] Oracle VM Box. Available at https://www.virtualbox.org/. Accessed on 20 Feb 2024.
[9] K. Linux, “Kali Linux,” Obtenido de Official Kali Linux Documentation: http://docs. kali. org (2020).

Views: 327Downloads: 126Citations: 0