A network topology-aware selectively distributed firewall control in SDN

Thuy Vinh Tran; Heejune Ahn

doi:10.1109/ICTC.2015.7354501

A network topology-aware selectively distributed firewall control in SDN

Thuy Vinh Tran, Heejune Ahn

Dept. of Electrical and Information Engineering

Seoul National University of Science and Technology (SNUST)

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

13 Scopus citations

Abstract

Software defined networking (SDN) and its enabling standards, OpenFlow promise flexible and faster evolving networks, by separating the control plane from data plane so that the control plane becomes more responsive to the changes in topology, load balancing requirement, and suspicious traffics. To ever-changing security attacks, SDN also offers new potentials to handle security threats in more robust and reactive way. The previous SDN firewall proposals suffer from firewall long setup up latency and controller overhead. This paper presents a topology aware selective firewall distribution solution, which sends only necessary firewall configuration rules considering the traffic flows and network topology. The Mininet simulation results in various network sizes show the proposed solution reduces the firewall setup traffic and lessens the firewall-violated traffic travel route significantly, so suitable for large-scale SDN networks.

Original language	English
Title of host publication	International Conference on ICT Convergence 2015
Subtitle of host publication	Innovations Toward the IoT, 5G, and Smart Media Era, ICTC 2015
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	89-94
Number of pages	6
ISBN (Electronic)	9781467371155
DOIs	https://doi.org/10.1109/ICTC.2015.7354501
State	Published - 11 Dec 2015
Event	6th International Conference on Information and Communication Technology Convergence, ICTC 2015 - Jeju Island, Korea, Republic of Duration: 28 Oct 2015 → 30 Oct 2015

Publication series

Name	International Conference on ICT Convergence 2015: Innovations Toward the IoT, 5G, and Smart Media Era, ICTC 2015

Conference

Conference	6th International Conference on Information and Communication Technology Convergence, ICTC 2015
Country/Territory	Korea, Republic of
City	Jeju Island
Period	28/10/15 → 30/10/15

Keywords

Firewall
Mininet
Network Topology
Openflow
POX controller
SDN

Access to Document

10.1109/ICTC.2015.7354501

Cite this

Tran, T. V., & Ahn, H. (2015). A network topology-aware selectively distributed firewall control in SDN. In International Conference on ICT Convergence 2015: Innovations Toward the IoT, 5G, and Smart Media Era, ICTC 2015 (pp. 89-94). Article 7354501 (International Conference on ICT Convergence 2015: Innovations Toward the IoT, 5G, and Smart Media Era, ICTC 2015). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ICTC.2015.7354501

Tran, Thuy Vinh ; Ahn, Heejune. / A network topology-aware selectively distributed firewall control in SDN. International Conference on ICT Convergence 2015: Innovations Toward the IoT, 5G, and Smart Media Era, ICTC 2015. Institute of Electrical and Electronics Engineers Inc., 2015. pp. 89-94 (International Conference on ICT Convergence 2015: Innovations Toward the IoT, 5G, and Smart Media Era, ICTC 2015).

@inproceedings{baf7668380fa487db4487d7a4b0295eb,

title = "A network topology-aware selectively distributed firewall control in SDN",

abstract = "Software defined networking (SDN) and its enabling standards, OpenFlow promise flexible and faster evolving networks, by separating the control plane from data plane so that the control plane becomes more responsive to the changes in topology, load balancing requirement, and suspicious traffics. To ever-changing security attacks, SDN also offers new potentials to handle security threats in more robust and reactive way. The previous SDN firewall proposals suffer from firewall long setup up latency and controller overhead. This paper presents a topology aware selective firewall distribution solution, which sends only necessary firewall configuration rules considering the traffic flows and network topology. The Mininet simulation results in various network sizes show the proposed solution reduces the firewall setup traffic and lessens the firewall-violated traffic travel route significantly, so suitable for large-scale SDN networks.",

keywords = "Firewall, Mininet, Network Topology, Openflow, POX controller, SDN",

author = "Tran, \{Thuy Vinh\} and Heejune Ahn",

note = "Publisher Copyright: {\textcopyright} 2015 IEEE.; 6th International Conference on Information and Communication Technology Convergence, ICTC 2015 ; Conference date: 28-10-2015 Through 30-10-2015",

year = "2015",

month = dec,

day = "11",

doi = "10.1109/ICTC.2015.7354501",

language = "English",

series = "International Conference on ICT Convergence 2015: Innovations Toward the IoT, 5G, and Smart Media Era, ICTC 2015",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "89--94",

booktitle = "International Conference on ICT Convergence 2015",

}

Tran, TV & Ahn, H 2015, A network topology-aware selectively distributed firewall control in SDN. in International Conference on ICT Convergence 2015: Innovations Toward the IoT, 5G, and Smart Media Era, ICTC 2015., 7354501, International Conference on ICT Convergence 2015: Innovations Toward the IoT, 5G, and Smart Media Era, ICTC 2015, Institute of Electrical and Electronics Engineers Inc., pp. 89-94, 6th International Conference on Information and Communication Technology Convergence, ICTC 2015, Jeju Island, Korea, Republic of, 28/10/15. https://doi.org/10.1109/ICTC.2015.7354501

A network topology-aware selectively distributed firewall control in SDN. / Tran, Thuy Vinh; Ahn, Heejune.
International Conference on ICT Convergence 2015: Innovations Toward the IoT, 5G, and Smart Media Era, ICTC 2015. Institute of Electrical and Electronics Engineers Inc., 2015. p. 89-94 7354501 (International Conference on ICT Convergence 2015: Innovations Toward the IoT, 5G, and Smart Media Era, ICTC 2015).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - A network topology-aware selectively distributed firewall control in SDN

AU - Tran, Thuy Vinh

AU - Ahn, Heejune

PY - 2015/12/11

Y1 - 2015/12/11

N2 - Software defined networking (SDN) and its enabling standards, OpenFlow promise flexible and faster evolving networks, by separating the control plane from data plane so that the control plane becomes more responsive to the changes in topology, load balancing requirement, and suspicious traffics. To ever-changing security attacks, SDN also offers new potentials to handle security threats in more robust and reactive way. The previous SDN firewall proposals suffer from firewall long setup up latency and controller overhead. This paper presents a topology aware selective firewall distribution solution, which sends only necessary firewall configuration rules considering the traffic flows and network topology. The Mininet simulation results in various network sizes show the proposed solution reduces the firewall setup traffic and lessens the firewall-violated traffic travel route significantly, so suitable for large-scale SDN networks.

AB - Software defined networking (SDN) and its enabling standards, OpenFlow promise flexible and faster evolving networks, by separating the control plane from data plane so that the control plane becomes more responsive to the changes in topology, load balancing requirement, and suspicious traffics. To ever-changing security attacks, SDN also offers new potentials to handle security threats in more robust and reactive way. The previous SDN firewall proposals suffer from firewall long setup up latency and controller overhead. This paper presents a topology aware selective firewall distribution solution, which sends only necessary firewall configuration rules considering the traffic flows and network topology. The Mininet simulation results in various network sizes show the proposed solution reduces the firewall setup traffic and lessens the firewall-violated traffic travel route significantly, so suitable for large-scale SDN networks.

KW - Firewall

KW - Mininet

KW - Network Topology

KW - Openflow

KW - POX controller

KW - SDN

UR - http://www.scopus.com/inward/record.url?scp=84964815308&partnerID=8YFLogxK

U2 - 10.1109/ICTC.2015.7354501

DO - 10.1109/ICTC.2015.7354501

M3 - Conference contribution

AN - SCOPUS:84964815308

T3 - International Conference on ICT Convergence 2015: Innovations Toward the IoT, 5G, and Smart Media Era, ICTC 2015

SP - 89

EP - 94

BT - International Conference on ICT Convergence 2015

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 6th International Conference on Information and Communication Technology Convergence, ICTC 2015

Y2 - 28 October 2015 through 30 October 2015

ER -

Tran TV, Ahn H. A network topology-aware selectively distributed firewall control in SDN. In International Conference on ICT Convergence 2015: Innovations Toward the IoT, 5G, and Smart Media Era, ICTC 2015. Institute of Electrical and Electronics Engineers Inc. 2015. p. 89-94. 7354501. (International Conference on ICT Convergence 2015: Innovations Toward the IoT, 5G, and Smart Media Era, ICTC 2015). doi: 10.1109/ICTC.2015.7354501

A network topology-aware selectively distributed firewall control in SDN

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this