Work place: Computer Science Department, North-West University, Mafikeng, South Africa
E-mail: kgogot@gmail.com
Website:
Research Interests: Computer systems and computational processes, Computer Architecture and Organization, Computer Networks, Information Security, Network Security
Biography
Tebogo Kgogo is a postgraduate student of the department of Department of Computer Sciences, FAST, North-West University, Mafikeng Campus. He is also CSIR research student. His research interests include: Software Defined Networks, Computer Security and Cloud Computing.
By Bassey Isong Tebogo Kgogo Francis Lugayizi
DOI: https://doi.org/10.5815/ijcnis.2017.07.03, Pub. Date: 8 Jul. 2017
Software Defined Networks (SDNs) is a network technology developed to deal with several limitations faced by the current traditional networks. However, SDN itself is confronted with security challenges which emanates specifically from its platform, given the explosive growth in network attacks and threats. Though many solutions have been developed and proposed, the continual lack of trust between the SDN controller and the applications running atop the control plane poses a great security challenge. SDN controller can easily be attacked by malicious/compromised applications which can result in network failure as the controller represents a single point of failure. Though trust mechanisms to certify network devices exist, mechanisms to certify management applications are still not well developed. Therefore, this paper proposes a novel direct trust establishment framework between an OpenFlow-based SDN controller and applications. The objective is to ensure that SDN controller is protected and diverse applications that consumes network resources are always trusted throughout their lifetime. Additionally, the paper introduce the concept of trust access matrix and application identity to ensure efficient control of network resources. We believe that, if the proposed trust model is adopted in the OpenFlow architecture, it could go a long way to improve the security of the SDN.
[...] Read more.Subscribe to receive issue release notifications and newsletters from MECS Press journals