Enabling secure mobility with OpenFlow

Suneth Namal; Ijaz Ahmad; Andrei Gurtov; Mika Ylianttila

doi:10.1109/SDN4FNS.2013.6702540

Enabling secure mobility with OpenFlow

Suneth Namal, Ijaz Ahmad, Andrei Gurtov, Mika Ylianttila

Not published at VTT

University of Oulu

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

29 Citations (Scopus)

Abstract

Software Defined Networking (SDN) and its one possible realization, OpenFlow, define the trends of future networks. However, the present OpenFlow architecture does not allow the switches to be mobile e.g., in a moving train as it would disrupt flow processing from network switches. We present OFHIP, an architecture that enables OpenFlow switches to change their IP addresses securely during mobility. OFHIP employs IPSec encapsulated security payload (ESP) in transport mode for protection against DoS, data origin authenticity, connectionless integrity, anti-replay protection, and limited traffic flow confidentiality. We demonstrate the benefits of OFHIP compared to present use of SSL in enabling mobility, reducing the connection latency and improving the resilience to known TCP-level attacks.

Original language	English
Title of host publication	SDN4FNS 2013 - 2013 Workshop on Software Defined Networks for Future Networks and Services
DOIs	https://doi.org/10.1109/SDN4FNS.2013.6702540
Publication status	Published - 2013
MoE publication type	A4 Article in a conference publication
Event	Workshop on Software Defined Networks for Future Networks and Services, SDN4FNS 2013 - Trento, Italy Duration: 11 Nov 2013 → 13 Nov 2013

Conference

Conference	Workshop on Software Defined Networks for Future Networks and Services, SDN4FNS 2013
Country/Territory	Italy
City	Trento
Period	11/11/13 → 13/11/13

Access to Document

10.1109/SDN4FNS.2013.6702540

Cite this

@inproceedings{8b1e2c4e56104060aa861d315aeed259,

title = "Enabling secure mobility with OpenFlow",

abstract = "Software Defined Networking (SDN) and its one possible realization, OpenFlow, define the trends of future networks. However, the present OpenFlow architecture does not allow the switches to be mobile e.g., in a moving train as it would disrupt flow processing from network switches. We present OFHIP, an architecture that enables OpenFlow switches to change their IP addresses securely during mobility. OFHIP employs IPSec encapsulated security payload (ESP) in transport mode for protection against DoS, data origin authenticity, connectionless integrity, anti-replay protection, and limited traffic flow confidentiality. We demonstrate the benefits of OFHIP compared to present use of SSL in enabling mobility, reducing the connection latency and improving the resilience to known TCP-level attacks.",

author = "Suneth Namal and Ijaz Ahmad and Andrei Gurtov and Mika Ylianttila",

year = "2013",

doi = "10.1109/SDN4FNS.2013.6702540",

language = "English",

booktitle = "SDN4FNS 2013 - 2013 Workshop on Software Defined Networks for Future Networks and Services",

note = "Workshop on Software Defined Networks for Future Networks and Services, SDN4FNS 2013 ; Conference date: 11-11-2013 Through 13-11-2013",

}

TY - GEN

T1 - Enabling secure mobility with OpenFlow

AU - Namal, Suneth

AU - Ahmad, Ijaz

AU - Gurtov, Andrei

AU - Ylianttila, Mika

PY - 2013

Y1 - 2013

N2 - Software Defined Networking (SDN) and its one possible realization, OpenFlow, define the trends of future networks. However, the present OpenFlow architecture does not allow the switches to be mobile e.g., in a moving train as it would disrupt flow processing from network switches. We present OFHIP, an architecture that enables OpenFlow switches to change their IP addresses securely during mobility. OFHIP employs IPSec encapsulated security payload (ESP) in transport mode for protection against DoS, data origin authenticity, connectionless integrity, anti-replay protection, and limited traffic flow confidentiality. We demonstrate the benefits of OFHIP compared to present use of SSL in enabling mobility, reducing the connection latency and improving the resilience to known TCP-level attacks.

AB - Software Defined Networking (SDN) and its one possible realization, OpenFlow, define the trends of future networks. However, the present OpenFlow architecture does not allow the switches to be mobile e.g., in a moving train as it would disrupt flow processing from network switches. We present OFHIP, an architecture that enables OpenFlow switches to change their IP addresses securely during mobility. OFHIP employs IPSec encapsulated security payload (ESP) in transport mode for protection against DoS, data origin authenticity, connectionless integrity, anti-replay protection, and limited traffic flow confidentiality. We demonstrate the benefits of OFHIP compared to present use of SSL in enabling mobility, reducing the connection latency and improving the resilience to known TCP-level attacks.

UR - http://www.scopus.com/inward/record.url?eid=2-s2.0-84893589427&partnerID=MN8TOARS

U2 - 10.1109/SDN4FNS.2013.6702540

DO - 10.1109/SDN4FNS.2013.6702540

M3 - Conference article in proceedings

BT - SDN4FNS 2013 - 2013 Workshop on Software Defined Networks for Future Networks and Services

T2 - Workshop on Software Defined Networks for Future Networks and Services, SDN4FNS 2013

Y2 - 11 November 2013 through 13 November 2013

ER -

Enabling secure mobility with OpenFlow

Abstract

Conference

Access to Document

Other files and links

Fingerprint

Cite this