TY - GEN
T1 - Access Control Based Dynamic Path Establishment for Securing Flows from the User Devices with Different Security Clearance
AU - Tupakula, Uday
AU - Varadharajan, Vijay
AU - Karmakar, Kallol
PY - 2020/12/31
Y1 - 2020/12/31
N2 - In this work, we proposed Software Defined Networking (SDN) based access control techniques for preventing unauthorised access to traffic flows in secure networks. We have developed an Access Control Application (ACA) for the SDN Controller for differentiating the flow requests from the user/devices that are classified at different security levels and configuring the routes with physical or virtual separation between the flows. This separation of flows makes it difficult for the malicious users with lower security clearance to access the flows that belong to the users with higher security clearance. Hence, our work significantly minimises the attack surface in secure environments. We will also discuss the prototype implementation of our model and some performance characteristics.
AB - In this work, we proposed Software Defined Networking (SDN) based access control techniques for preventing unauthorised access to traffic flows in secure networks. We have developed an Access Control Application (ACA) for the SDN Controller for differentiating the flow requests from the user/devices that are classified at different security levels and configuring the routes with physical or virtual separation between the flows. This separation of flows makes it difficult for the malicious users with lower security clearance to access the flows that belong to the users with higher security clearance. Hence, our work significantly minimises the attack surface in secure environments. We will also discuss the prototype implementation of our model and some performance characteristics.
UR - https://link.springer.com/chapter/10.1007/978-3-030-15032-7_109
UR - https://dblp.org/db/conf/aina/index.html
UR - https://doi.org/10.1007/978-3-030-15032-7
UR - https://www.scopus.com/pages/publications/85064004546
U2 - 10.1007/978-3-030-15032-7_109
DO - 10.1007/978-3-030-15032-7_109
M3 - Conference contribution
SN - 9783030150327
T3 - Advances in Intelligent Systems and Computing
SP - 1303
EP - 1315
BT - Advanced Information Networking and Applications Proceedings of the 33rd International Conference on Advanced Information Networking and Applications (AINA-2019), p. 1303–1315
A2 - Barolli, Leonard
A2 - Takizawa, Makoto
A2 - Xhafa, Fatos
A2 - Enokido, Tomoya
PB - Springer
CY - Cham, Switzerland
T2 - International Conference on Advanced Information Networking and Applications
Y2 - 27 March 2019 through 29 March 2019
ER -