國立虎尾科技大學 |

Policy Conflict Management in Distributed SDN Environments.

Record Type:	Language materials, manuscript : Monograph/item
Title/Author:	Policy Conflict Management in Distributed SDN Environments./
Author:	Pisharody, Sandeep.
Description:	1 online resource (150 pages)
Notes:	Source: Dissertation Abstracts International, Volume: 78-12(E), Section: B.
Contained By:	Dissertation Abstracts International78-12B(E).
Subject:	Computer science. -
Online resource:	click for full text (PQDT)
ISBN:	9780355085358

Policy Conflict Management in Distributed SDN Environments.
Pisharody, Sandeep.

Policy Conflict Management in Distributed SDN Environments. - 1 online resource (150 pages)

Source: Dissertation Abstracts International, Volume: 78-12(E), Section: B.

Thesis (Ph.D.)

Includes bibliographical references

The ease of programmability in Software-Defined Networking (SDN) makes it a great platform for implementation of various initiatives that involve application deployment, dynamic topology changes, and decentralized network management in a multi-tenant data center environment. However, implementing security solutions in such an environment is fraught with policy conflicts and consistency issues with the hardness of this problem being affected by the distribution scheme for the SDN controllers.

Electronic reproduction.
Ann Arbor, Mich. :
ProQuest,
2018

Mode of access: World Wide Web

ISBN: 9780355085358Subjects--Topical Terms:

573171
Computer science.
Index Terms--Genre/Form:

554714
Electronic books.

Policy Conflict Management in Distributed SDN Environments.
LDR:03053ntm a2200361Ki 4500 001 908997
005 20180419104824.5
006 m o u
007 cr mn||||a|a||
008 190606s2017 xx obm 000 0 eng d
020 $a 9780355085358
035 $a (MiAaPQ)AAI10599151
035 $a (MiAaPQ)asu:17159
035 $a AAI10599151
040 $a MiAaPQ $b eng $c MiAaPQ
099 $a TUL $f hyy $c available through World Wide Web
100 1 $a Pisharody, Sandeep. $3 1179469
245 1 0 $a Policy Conflict Management in Distributed SDN Environments.
264 0 $c 2017
300 $a 1 online resource (150 pages)
336 $a text $b txt $2 rdacontent
337 $a computer $b c $2 rdamedia
338 $a online resource $b cr $2 rdacarrier
500 $a Source: Dissertation Abstracts International, Volume: 78-12(E), Section: B.
500 $a Adviser: Dijiang Huang.
502 $a Thesis (Ph.D.) $c Arizona State University $d 2017.
504 $a Includes bibliographical references
520 $a The ease of programmability in Software-Defined Networking (SDN) makes it a great platform for implementation of various initiatives that involve application deployment, dynamic topology changes, and decentralized network management in a multi-tenant data center environment. However, implementing security solutions in such an environment is fraught with policy conflicts and consistency issues with the hardness of this problem being affected by the distribution scheme for the SDN controllers.
520 $a In this dissertation, a formalism for flow rule conflicts in SDN environments is introduced. This formalism is realized in Brew, a security policy analysis framework implemented on an OpenDaylight SDN controller. Brew has comprehensive conflict detection and resolution modules to ensure that no two flow rules in a distributed SDN-based cloud environment have conflicts at any layer; thereby assuring consistent conflict-free security policy implementation and preventing information leakage. Techniques for global prioritization of flow rules in a decentralized environment are presented, using which all SDN flow rule conflicts are recognized and classified. Strategies for unassisted resolution of these conflicts are also detailed. Alternately, if administrator input is desired to resolve conflicts, a novel visualization scheme is implemented to help the administrators view the conflicts in an aesthetic manner. The correctness, feasibility and scalability of the Brew proof-of-concept prototype is demonstrated. Flow rule conflict avoidance using a buddy address space management technique is studied as an alternate to conflict detection and resolution in highly dynamic cloud systems attempting to implement an SDN-based Moving Target Defense (MTD) countermeasures.
533 $a Electronic reproduction. $b Ann Arbor, Mich. : $c ProQuest, $d 2018
538 $a Mode of access: World Wide Web
650 4 $a Computer science. $3 573171
650 4 $a Intellectual property. $3 559280
655 7 $a Electronic books. $2 local $3 554714
690 $a 0984
690 $a 0513
710 2 $a ProQuest Information and Learning Co. $3 1178819
710 2 $a Arizona State University. $b Computer Science. $3 845377
773 0 $t Dissertation Abstracts International $g 78-12B(E).
856 4 0 $u http://pqdd.sinica.edu.tw/twdaoapp/servlet/advanced?query=10599151 $z click for full text (PQDT)