New context-based node acceptance CBNA framework for MitM detection in SDN Architecture
Anass Sebbar, Karim Zkik, Mohammed Boulmalf, Mohamed Dâfir Ech-Cherif El Kettani · Procedia Computer Science · 2019
Software Define Networking (SDN) is a paradigm that was developed to cope with the inherent limitations cause by the rigidity and lack of customization of the traditional networking architecture. SDN has my applicational advantages in terms of network management and configuration and has led to a shift in the view of networking as a whole. Despite the benefits, SDN is facing several challenges most of which are concentrated at the level of network management, security and scalability. These challenges have already prompted several researches among academics and industrials worldwide. Even though several solutions have already been proposed and developed, most of the challenges still remain and more research work is still needed in order to address them. We propose in this article, an in-depth study that measures the risks of two attack scenarios, and the possibility of deploying a solution to mitigate intrusions on SDN, as well as the mitigation of the vulnerabilities resulting from the authentication process of new nodes on the network. We also present an algorithm we call CBNA adapted to the SDN architecture with an aim towards mitigating threats such as man in the middle attacks. An implementation of our algorithm based on multiple attack scenarios along with the mitigation process will be done to prove the effectiveness of the proposed framework.