Can I read Extended Data Plane Architecture for In-network Security Services in Software-defined Networks on EtoBox?

Extended Data Plane Architecture for In-network Security Services in Software-defined Networks by Jinwoo Kim; Yeonkeun Kim; Vinod Yegneswaran; Phillip Porras; Seungwon Shin; Taejune Park is a Computer Science article available to read on EtoBox.

What is Extended Data Plane Architecture for In-network Security Services in Software-defined Networks about?

Software-Defined Networking (SDN)-based Network Function Virtualization (NFV) technologies improve the dependability and resilience of networks by enabling administrators to spawn and scale-up traffic management and security services in response to dynamic network conditions. However, in practice, they often suffer from poor performance and require complex configurations because network packets must be ‘detoured’ to each virtualized security service, which expends bandwidth and increases network propagation delay. To address these challenges, we propose a new SDN-based data plane architecture, called DPX (Data Plane eXtension), that natively supports in-network security services. The DPX action model reduces redundant processing caused by frequent packet parsing and provides administrators with a simplified (and less error-prone) method for configuring security services into the network. DPX also increases the efficiency of enforcing complex security policies by introducing a novel technique called action clustering, which aggregates security actions from multiple flows into a small number of synthetic rules. Also, the application of action clustering (i.e., advanced and global) pr

Who reads Extended Data Plane Architecture for In-network Security Services in Software-defined Networks?

Author

Jinwoo Kim; Yeonkeun Kim; Vinod Yegneswaran; Phillip Porras; Seungwon Shin; Taejune Park

Publisher

Elsevier BV

Published

2023

Language

EN

Field

Computer Science (Physical Sciences)