Statistical Analysis Based Malicious Switch Detection Scheme for Software Defined Network

Abstract

In Software Defined Networking (SDN) there are two planes, Data Plane and Control Plane that are separated from each other. An Open Flow (OF) protocol is used by the switch and the controller to communicate with each other. TLS and SSL protocols are used to secure the channel between the network devices in SDN. The controller can monitor the switch activities by using an open flow statistics commands, also it has the ability to install the flow entries in an open flow switch which will be used by the OF switches to forward any network packet to its destination. In this project we are making a network administrator tool for the SDN which will have the capability to encounter the malicious switch, for example if anopen flow switch is compromised by any physical or passive attack and start forwarding the packets to any malicious node in the network, the monitoring system is capable to identify such activity. Monitoring system count the number of packets sent and received at Open flow switch ports and generates alarm if the received and transmitted traffic is not balanced. This project can help the administrator to identify the malicious switch and to understand the behaviour of the network