|
This article is cited in 1 scientific paper (total in 1 paper)
End-to-end information flow security model for software-defined networks
D. Ju. Chaly, E. S. Nikitin, E. Ju. Antoshina, V. A. Sokolov P.G. Demidov Yaroslavl State University, Sovetskaya str., 14, Yaroslavl, 150000, Russia
Abstract:
Software-defined networks (SDN) are a novel paradigm of networking which became an enabler technology for many modern applications such as network virtualization, policy-based access control and many others. Software can provide flexibility and fast-paced innovations in the networking; however, it has a complex nature. In this connection there is an increasing necessity of means for assuring its correctness and security. Abstract models for SDN can tackle these challenges. This paper addresses to confidentiality and some integrity properties of SDNs. These are critical properties for multi-tenant SDN environments, since the network management software must ensure that no confidential data of one tenant are leaked to other tenants in spite of using the same physical infrastructure. We define a notion of end-to-end security in context of software-defined networks and propose a semantic model where the reasoning is possible about confidentiality, and we can check that confidential information flows do not interfere with non-confidential ones. We show that the model can be extended in order to reason about networks with secure and insecure links which can arise, for example, in wireless environments.
The article is published in the authors' wording.
Keywords:
SDN, security, formal models.
Received: 21.10.2015
Citation:
D. Ju. Chaly, E. S. Nikitin, E. Ju. Antoshina, V. A. Sokolov, “End-to-end information flow security model for software-defined networks”, Model. Anal. Inform. Sist., 22:6 (2015), 735–749
Linking options:
https://www.mathnet.ru/eng/mais470 https://www.mathnet.ru/eng/mais/v22/i6/p735
|
Statistics & downloads: |
Abstract page: | 231 | Full-text PDF : | 67 | References: | 68 |
|