Aumentando a resiliência em SDN quando o plano de controle se encontra sob ataque

Abstract

SDN (Software Defined Networks) is a network paradigm that allow operators to ma-nage network elements using software that executes on an external server making possible to divide the control plane from the data plane. However, as in all technologies, mainly the newer ones, there are security problems and vulnerabilities to be investigated. Network outages caused by human error for instance. An administrator that misconfigures a con-troller can easily reduce the network performance, even if the controller works properly and there are no errors with the installed rules. This scenario is also called the mis-configured administrator problem, where the administrator misconfigures a full capacity controller in a way that impairs the network performance. The work proposed in this dis-sertation has two objectives: first, to evaluate the impact on the performance of the data plan resulting from problems caused by a misconfigured system; And second, propose, through the development of a module adjacent to the controller, measures to mitigate these impacts. The results obtained by experimentation in a realistic scenario show that the use of this module is capable of improving the average performance of the system by 4,82%.