An Extendable Software Architecture for Mitigating ARP Spoofing-Based Attacks in SDN Data Plane Layer
Software-defined networking (SDN) is an emerging network architecture that brings benefits in network function virtualization, performance, and scalability. However, the scalability feature also increases the number of possible vulnerabilities through multiple entry points in the network. Address Re...
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2022-06-01
|
| Series: | Electronics |
| Subjects: | |
| Online Access: | https://www.mdpi.com/2079-9292/11/13/1965 |
| _version_ | 1797480466310234112 |
|---|---|
| author | Sorin Buzura Mihaiela Lehene Bogdan Iancu Vasile Dadarlat |
| author_facet | Sorin Buzura Mihaiela Lehene Bogdan Iancu Vasile Dadarlat |
| author_sort | Sorin Buzura |
| collection | DOAJ |
| description | Software-defined networking (SDN) is an emerging network architecture that brings benefits in network function virtualization, performance, and scalability. However, the scalability feature also increases the number of possible vulnerabilities through multiple entry points in the network. Address Resolution Protocol (ARP) spoofing-based attacks are widely encountered and allow an attacker to assume the identity of a different computer, facilitating other attacks, such as Man in the Middle (MitM). In the SDN context, most solutions employ a controller to detect and mitigate attacks. However, interacting with the control plane involves asynchronous network communication, which causes delayed responses to an attack. The current work avoids these delays by being implemented solely in the data plane through extendable and customizable software architecture. Therefore, faster response times improve network reliability by automatically blocking attackers. As attacks can be generated with a variety of tools and in networks experiencing different traffic patterns, the current solution is created to allow flexibility and extensibility, which can be adapted depending on the running environment. Experiments were run performing ARP spoofing-based attacks using KaliLinux, Mininet, and OpenVSwitch. The presented results are based on traffic pattern analysis offering greater customization capabilities and insight compared to similar work in this area. |
| first_indexed | 2024-03-09T22:00:26Z |
| format | Article |
| id | doaj.art-486c78dbf49345f9b15fd6f85772fc76 |
| institution | Directory Open Access Journal |
| issn | 2079-9292 |
| language | English |
| last_indexed | 2024-03-09T22:00:26Z |
| publishDate | 2022-06-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Electronics |
| spelling | doaj.art-486c78dbf49345f9b15fd6f85772fc762023-11-23T19:50:40ZengMDPI AGElectronics2079-92922022-06-011113196510.3390/electronics11131965An Extendable Software Architecture for Mitigating ARP Spoofing-Based Attacks in SDN Data Plane LayerSorin Buzura0Mihaiela Lehene1Bogdan Iancu2Vasile Dadarlat3Department of Computer Science, Technical University of Cluj-Napoca, 28 Memorandumului Street, 400114 Cluj-Napoca, RomaniaDepartment of Computer Science, Technical University of Cluj-Napoca, 28 Memorandumului Street, 400114 Cluj-Napoca, RomaniaDepartment of Computer Science, Technical University of Cluj-Napoca, 28 Memorandumului Street, 400114 Cluj-Napoca, RomaniaDepartment of Computer Science, Technical University of Cluj-Napoca, 28 Memorandumului Street, 400114 Cluj-Napoca, RomaniaSoftware-defined networking (SDN) is an emerging network architecture that brings benefits in network function virtualization, performance, and scalability. However, the scalability feature also increases the number of possible vulnerabilities through multiple entry points in the network. Address Resolution Protocol (ARP) spoofing-based attacks are widely encountered and allow an attacker to assume the identity of a different computer, facilitating other attacks, such as Man in the Middle (MitM). In the SDN context, most solutions employ a controller to detect and mitigate attacks. However, interacting with the control plane involves asynchronous network communication, which causes delayed responses to an attack. The current work avoids these delays by being implemented solely in the data plane through extendable and customizable software architecture. Therefore, faster response times improve network reliability by automatically blocking attackers. As attacks can be generated with a variety of tools and in networks experiencing different traffic patterns, the current solution is created to allow flexibility and extensibility, which can be adapted depending on the running environment. Experiments were run performing ARP spoofing-based attacks using KaliLinux, Mininet, and OpenVSwitch. The presented results are based on traffic pattern analysis offering greater customization capabilities and insight compared to similar work in this area.https://www.mdpi.com/2079-9292/11/13/1965ARP spoofingattack detectionattack mitigationnetwork securitysoftware architecturesoftware-defined networking |
| spellingShingle | Sorin Buzura Mihaiela Lehene Bogdan Iancu Vasile Dadarlat An Extendable Software Architecture for Mitigating ARP Spoofing-Based Attacks in SDN Data Plane Layer Electronics ARP spoofing attack detection attack mitigation network security software architecture software-defined networking |
| title | An Extendable Software Architecture for Mitigating ARP Spoofing-Based Attacks in SDN Data Plane Layer |
| title_full | An Extendable Software Architecture for Mitigating ARP Spoofing-Based Attacks in SDN Data Plane Layer |
| title_fullStr | An Extendable Software Architecture for Mitigating ARP Spoofing-Based Attacks in SDN Data Plane Layer |
| title_full_unstemmed | An Extendable Software Architecture for Mitigating ARP Spoofing-Based Attacks in SDN Data Plane Layer |
| title_short | An Extendable Software Architecture for Mitigating ARP Spoofing-Based Attacks in SDN Data Plane Layer |
| title_sort | extendable software architecture for mitigating arp spoofing based attacks in sdn data plane layer |
| topic | ARP spoofing attack detection attack mitigation network security software architecture software-defined networking |
| url | https://www.mdpi.com/2079-9292/11/13/1965 |
| work_keys_str_mv | AT sorinbuzura anextendablesoftwarearchitectureformitigatingarpspoofingbasedattacksinsdndataplanelayer AT mihaielalehene anextendablesoftwarearchitectureformitigatingarpspoofingbasedattacksinsdndataplanelayer AT bogdaniancu anextendablesoftwarearchitectureformitigatingarpspoofingbasedattacksinsdndataplanelayer AT vasiledadarlat anextendablesoftwarearchitectureformitigatingarpspoofingbasedattacksinsdndataplanelayer AT sorinbuzura extendablesoftwarearchitectureformitigatingarpspoofingbasedattacksinsdndataplanelayer AT mihaielalehene extendablesoftwarearchitectureformitigatingarpspoofingbasedattacksinsdndataplanelayer AT bogdaniancu extendablesoftwarearchitectureformitigatingarpspoofingbasedattacksinsdndataplanelayer AT vasiledadarlat extendablesoftwarearchitectureformitigatingarpspoofingbasedattacksinsdndataplanelayer |