Journal article Open Access

The KISS principle in Software-Defined Networking: a framework for secure communications

Kreutz, Diego; Yu, Jiangshan; Esteves-Verissimo, Paulo; Magalhães, Cátia; Ramos, Fernando

Security is an increasingly fundamental requirement in Software-Defined Networking (SDN). However, the pace of adoption of secure mechanisms has been slow, which we estimate to be a consequence of the performance overhead of traditional solutions and of the complexity of their support infrastructure. To address these challenges we propose KISS, a secure SDN control plane communications architecture that includes innovative solutions in the context of key distribution and secure channel support. Core to our contribution is the integrated device verification value (iDVV), a deterministic but indistinguishablefrom-random secret code generation protocol that allows local but synchronized generation/verification of keys at both ends of the control channel, even on a per-message basis. We show that our solution, while offering the same security properties, outperforms reference alternatives, with performance improvements up to 30% over OpenSSL, and improvement in robustness based on a code footprint one order of magnitude smaller.

Files (377.7 kB)
Name Size
KISS_SDN.pdf
md5:3b261d1dc7d4f80f904b6f4994fe4e85
377.7 kB Download
17
17
views
downloads
All versions This version
Views 1717
Downloads 1717
Data volume 6.4 MB6.4 MB
Unique views 1717
Unique downloads 1616

Share

Cite as