Control of sensitive traffic in the cloud based on OpenFlow
Stéphane Betge-Brezetz, Guy-Bertrand Kamga, Ali El Amrani Joutei, Oussama Maalmi · 2014
Security of sensitive data in the cloud is a critical issue as they can easily be transferred between different locations and then violate some constraints such as country-based regulations. There is notably a specific need to control the path followed by the data when they are transferred within the cloud. This paper is then presenting a new approach using OpenFlow and allowing to enforce in the network a Trusted Path compliant with the policy applicable on a sensitive data to transfer. This approach has been implemented within a SDN controller and experimented on a test-bed of physical OpenFlow switches. It is then shown how a sensitive traffic can actually follow a compliant trusted path in the network.