Ändra sökning
RefereraExporteraLänk till posten
Permanent länk

Direktlänk
Referera
Referensformat
  • apa
  • harvard1
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annat format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annat språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf
Privacy-preserving detection of inter-domain SDN rules overlaps
Université catholique du Louvain, Belgium.ORCID-id: 0000-0002-9675-9729
2017 (Engelska)Ingår i: SIGCOMM Posters and Demos 2017 - Proceedings of the 2017 SIGCOMM Posters and Demos, Part of SIGCOMM 201722 August 2017, Association for Computing Machinery (ACM), 2017, s. 6-8Konferensbidrag, Publicerat paper (Refereegranskat)
Abstract [en]

SDN approaches to inter-domain routing promise better traffic engineering, enhanced security, and higher automation. Yet, naïve deployment of SDN on the Internet is dangerous as the control-plane expressiveness of BGP is significantly more limited than the data-plane expressiveness of SDN, which allows fine-grained rules to deflect traffic from BGP's default routes. This mismatch may lead to incorrect forwarding behaviors such as forwarding loops and blackholes, ultimately hindering SDN deployment at the inter-domain level. In this work, we make a first step towards verifying the correctness of inter-domain forwarding state with a focus on loop freedom while keeping private the SDN rules, as they comprise confidential routing information. To this end, we design a simple yet powerful primitive that allows two networks to verify whether their SDN rules overlap, i.e., the set of packets matched by these rules is non-empty, without leaking any information about the SDN rules. We propose an efficient implementation of this primitive by using recent advancements in Secure Multi-Party Computation and we then leverage it as the main building block for designing a system that detects Internet-wide forwarding loops among any set of SDN-enabled Internet eXchange Points.

Ort, förlag, år, upplaga, sidor
Association for Computing Machinery (ACM), 2017. s. 6-8
Nationell ämneskategori
Kommunikationssystem Datavetenskap (datalogi)
Identifikatorer
URN: urn:nbn:se:kth:diva-222316DOI: 10.1145/3123878.3131967Scopus ID: 2-s2.0-85029717340ISBN: 9781450350570 (tryckt)OAI: oai:DiVA.org:kth-222316DiVA, id: diva2:1180777
Konferens
ACM SIGCOMM 2017 Conference, Los Angeles, United States, 22 August 2017 through 24 August 2017
Anmärkning

QC 20180207

Tillgänglig från: 2018-02-06 Skapad: 2018-02-06 Senast uppdaterad: 2018-02-07Bibliografiskt granskad

Open Access i DiVA

Fulltext saknas i DiVA

Övriga länkar

Förlagets fulltextScopus

Sök vidare i DiVA

Av författaren/redaktören
Chiesa, Marco
KommunikationssystemDatavetenskap (datalogi)

Sök vidare utanför DiVA

GoogleGoogle Scholar

doi
isbn
urn-nbn

Altmetricpoäng

doi
isbn
urn-nbn
Totalt: 15 träffar
RefereraExporteraLänk till posten
Permanent länk

Direktlänk
Referera
Referensformat
  • apa
  • harvard1
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annat format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annat språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf