Experimental Demonstration of DDoS Mitigation over a Quantum Key Distribution (QKD) Network Using Software Defined Networking (SDN)

Hugues-Salas, E.; Ntavou, Foteini; Ou, Yanni; Kennard, Jake; White, Catherine A.; Gkounis, Dimitrios; Nikolovgenis, Konstantinos; Kanellos, George T.; Erven, Chris; Lord, Andrew; Nejabati, Reza; Simeonidou, Dimitra

doi:10.48550/arxiv.1802.05679

Cited by 1 publication

(1 citation statement)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Therefore, based on this, the MitM attacker is prevented because of the timestamp of the response since the time taken by the attacker to decrypt a random number would certainly exceed the timeframe of the client's response to the server request. While, authors explain in [19] a method for detecting DDoS attacks in the SDN depended on the quantum parameters of QKD system, such as the secret key rate (SKR) and quantum bit error rate (QBER). Where the controller monitors the QBER, if the rate exceeds the > REPLACE THIS LINE WITH YOUR PAPER IDENTIFICATION NUMBER (DOUBLE-CLICK HERE TO EDIT) < 2 the need to add new components to the network, namely the controller and communication channels between the planes, which include many challenges that pose security problems that deserve attention.…”

Section: Related Workmentioning

confidence: 99%

Enhanced Security of Software-defined Network and Network Slice Through Hybrid Quantum Key Distribution Protocol

Mahdi¹,

Abdullah²

2022

Infocommunications journal

View full text Add to dashboard Cite

Software-defined networking (SDN) has revolutionized the world of technology as networks have become more flexible, dynamic and programmable. The ability to conduct network slicing in 5G networks is one of the most crucial features of SDN implementation. Although network programming provides new security solutions of traditional networks, SDN and network slicing also have security issues, an important one being the weaknesses related to openflow channel between the data plane and controller as the network can be attacked via the openflow channel and exploit communications with the control plane. Our work proposes a solution to provide adequate security for openflow messages through using a hybrid key consisting of classical and quantum key distribution protocols to provide double security depending on the computational complexity and physical properties of quantum. To achieve this goal, the hybrid key used with transport layer security protocol to provide confidentiality, integrity and quantum authentication to secure openflow channel. We experimentally based on the SDN-testbed and network slicing to show the workflow of exchanging quantum and classical keys between the control plane and data plane and our results showed the effectiveness of the hybrid key to enhance the security of the transport layer security protocol. Thereby achieving adequate security for openflow channel against classical and quantum computer attacks.

show abstract

Section: Related Workmentioning

confidence: 99%