ACST: Audit-based compromised switch tolerance for enhancing data plane robustness in software-defined networking

Hu, Tao; Peng, Yi; Lan, Julong; Hu, Yuxiang; Sun, Peng

doi:10.1016/j.comnet.2019.06.013

Cited by 2 publications

(16 citation statements)

References 33 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The fault messages are corrected by crossreferencing with the flow path information, and it is possible to detect compromised switches. Similar to our work, both Yuan et al 4 and Hu et al 15 propose solutions for sending error messages from the data plane to the control plane. The difference is that Hu et al 15 address the case when there is fault in the match field of flow table.…”

Section: Introductionsupporting

confidence: 59%

“…In Table 4, we can see that the statistics information of flow3 in S1, S6, S7, and S8 is m3. Based on our assumption that most of the switches in the network are benign, 4,15 we can therefore conclude that the statistics information of flow3 on S2, S3, and S5 should also be m3, as shown in Table 5. Because flow1 and flow3 use the same rule on S2, S3, and S5, combining the statistics of flow3 (i.e., combining Tables 3 and 5), we can obtain the statistics of flow1 on S1, S2, S3, S5, and S6 as m1, −m3, m1, m1, m1, and m1, respectively.…”

Section: Motivationmentioning

confidence: 91%

“…Hu et al 15 believe that an increasing number of network devices are subject to potentially malicious attacks and that data plane switches are not immune. Therefore, it is necessary to fault‐tolerate switches to ensure robustness in the data plane.…”

Section: Related Workmentioning

confidence: 99%

“…He presents an audit‐based compromise switch fault tolerance (ACST) scheme, which aims to tolerate compromised switches and handle misleading phenomena in switches when they cannot be trusted. The main idea of Hu et al 15 is to audit the statistics information (especially status messages) passed by the switch, which not only allows the controller to receive the correct messages, but also to identify the compromised switch. ACST introduces a special logical plane between data plane and control plane, called the fault‐tolerant agent plane.…”

Section: Related Workmentioning

confidence: 99%

“…These switches may be malicious switches compromised by attackers or switches that have failed due to software or hardware problems. Similar to some other works, 4,15,17 we assume that most switches in a network are legitimate. To begin with, we propose that statistics information in the data plane can be erroneous and have a negative impact on control plane and network reliability.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Audit‐based correction mechanism for malicious statistics information of data plane

et al. 2023

Self Cite

View full text Add to dashboard Cite

Summary In software‐defined networking (SDN), the controller relies on the information collected from the data plane for route planning, load balancing, and other functions. Statistics information is the most important kind of information among them, so the correctness of statistics information is the key to the proper operation of the network. Most of the current research on data plane focuses on policy consistency, rule redundancy, forwarding anomalies, and so on, and little attention is paid to whether the statistics information uploaded by the switches to the controller is correct. However, incorrect statistics information inevitably leads the controller to make wrong decisions. Therefore, this paper proposes an audit‐based malicious information correction mechanism to address the problem of wrong statistics information uploaded by the switches. This mechanism audits the statistics information and locates malicious switches before uploading the statistics information to the controller. It identifies and corrects the statistics information errors by combining flow path and statistics information. We have performed simulations on Nsfnet, Abilene, and Fat‐Tree, and the results show that our method can correct about 70% of the statistical information errors with less computational cost. To the best of our knowledge, this paper is the first malicious statistics information correction scheme for wildcard rules.

show abstract

Section: Introductionsupporting

confidence: 59%

Section: Motivationmentioning

confidence: 91%

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Audit‐based correction mechanism for malicious statistics information of data plane

et al. 2023

Self Cite

View full text Add to dashboard Cite

show abstract

Research on the Application of DM Technology with RF in Enterprise Financial Audit

Hao

Qiu

2022

Mobile Information Systems

View full text Add to dashboard Cite

Data mining (DM), as a new technology in the information age, is applied to modern audit work, which is more effective than traditional audit methods. In view of the problems existing in traditional tax audit methods, such as the huge amount of audit data, limited knowledge and experience of auditors, and difficult tracking of audit data, this paper uses computer-aided audit technology to collect, clean up, convert, and analyze data, comprehensively uses data warehouse technology, pattern recognition method, data analysis method, and anomaly detection theory as research methods, and makes a comprehensive study on tax affairs. Then, a random forest (RF) algorithm is used to establish the classification and identification model of audit risk. Second, based on the RF algorithm, the audit early warning framework of accounts receivable and payable in enterprise financial sharing mode is constructed, and the financial data and business data in enterprise financial sharing mode are extracted by using big data technology. The comparison of the results shows that the RF model has higher prediction accuracy and better robustness, which can better improve the antirisk ability of listed companies in China.

show abstract

ACST: Audit-based compromised switch tolerance for enhancing data plane robustness in software-defined networking

Cited by 2 publications

References 33 publications

Audit‐based correction mechanism for malicious statistics information of data plane

Audit‐based correction mechanism for malicious statistics information of data plane

Research on the Application of DM Technology with RF in Enterprise Financial Audit

Contact Info

Product

Resources

About