{"id":{"repo_id":"brazil-uerj","oai_identifier":"oai:pantheon.ufrj.br:11422/6270"},"canonical_url":"https://search.dev.ndltd.org/etd/brazil-uerj/oai:pantheon.ufrj.br:11422/6270","repository":{"repo_id":"brazil-uerj","name":"Brazil UERJ","base_url":"https://pantheon.ufrj.br/oai/request"},"display":{"title":"Segurança em redes definidas por software :autenticação, controle de acesso e consistência com plano de controle eficientemente distribuído","abstract":"The control distribution in Software-Defined Networks improves the security, performance and scalability of the network. However, distributed control introduces consistency challenges into the network global view. In this work, we present the main security threats to the software-defined networks, we propose a host authentication and access control mechanism based on host credentials, we propose an efficient controller-distribution architecture, and we also propose consistent schemes for the policy updates on centralized or on distributed control networks. An authenticationmechanism prototype was implemented over POX, an OpenFlow controller. The results of the authentication prototype show that the proposal blocks access to unauthorized hosts, even in the scenario where a host has its access permission revoked. The distributed controller prototype was implemented and the placement heuristic was analyzed in several real topologies. The results of the controller placement evaluation show that network connectivity is maintained in scenarios where there is a high rate of network node failure. It is also proven that placement optimization reduces the average latency between controllers. A simulator for Software-Defined Networking has been developed and validated. The simulations of security policy enforcement in real network topologies show that the overhead generated by the proposed schemes is very low. Through formal verification, it is shown that the proposed consistency protocol guarantees a global order for all policy updates and that correctly composes all policies installed on the network.","abstract_html":"The control distribution in Software-Defined Networks improves the security, performance and scalability of the network. However, distributed control introduces consistency challenges into the network global view. In this work, we present the main security threats to the software-defined networks, we propose a host authentication and access control mechanism based on host credentials, we propose an efficient controller-distribution architecture, and we also propose consistent schemes for the policy updates on centralized or on distributed control networks. An authenticationmechanism prototype was implemented over POX, an OpenFlow controller. The results of the authentication prototype show that the proposal blocks access to unauthorized hosts, even in the scenario where a host has its access permission revoked. The distributed controller prototype was implemented and the placement heuristic was analyzed in several real topologies. The results of the controller placement evaluation show that network connectivity is maintained in scenarios where there is a high rate of network node failure. It is also proven that placement optimization reduces the average latency between controllers. A simulator for Software-Defined Networking has been developed and validated. The simulations of security policy enforcement in real network topologies show that the overhead generated by the proposed schemes is very low. Through formal verification, it is shown that the proposed consistency protocol guarantees a global order for all policy updates and that correctly composes all policies installed on the network.","abstract_has_math":false,"creators":["Mattos, Diogo Menezes Ferrazani"],"institution":"Universidade Federal do Rio de Janeiro","degree_name":null,"degree_level":null,"degree_discipline":null,"degree_department":null,"school":null,"contributors":[],"advisors":["Duarte, Otto Carlos Muniz Bandeira"],"committee_chairs":[],"committee_members":[],"year":2017,"date_issued":"2017-01","date_published":"2017-01","updated_at":"2026-07-24T01:16:21Z","subjects":["Engenharia elétrica","Virtualização de redes","Computação em nuvens"],"languages":["por"],"rights":["Acesso Aberto"],"rights_urls":[],"identifier_entries":[]},"links":{"outbound_url":"http://hdl.handle.net/11422/6270","outbound_label":"Handle","outbound_source":"dc:identifier.uri"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor.advisor","label":"Advisor","values":["Duarte, Otto Carlos Muniz Bandeira"]},{"key":"dc:creator","label":"Author","values":["Mattos, Diogo Menezes Ferrazani"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date.accessioned","label":"Dc Date Accessioned","values":["2019-01-29T16:18:06Z"]},{"key":"dc:date.available","label":"Dc Date Available","values":["2026-05-16T03:05:25Z"]},{"key":"dc:date.issued","label":"Date","values":["2017-01"]},{"key":"dc:publisher","label":"Institution","values":["Universidade Federal do Rio de Janeiro"]},{"key":"dc:publisher.department","label":"Dc Publisher Department","values":["Instituto Alberto Luiz Coimbra de Pós-Graduação e Pesquisa de Engenharia"]},{"key":"dc:type","label":"Dc Type","values":["Tese"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["Engenharia elétrica","Virtualização de redes","Computação em nuvens"]}]},{"id":"language_rights","label":"Language and Rights","entries":[{"key":"dc:language","label":"Dc Language","values":["por"]},{"key":"dc:rights","label":"Dc Rights","values":["Acesso Aberto"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier.uri","label":"Identifier URI","values":["http://hdl.handle.net/11422/6270"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description.abstract","label":"Abstract","values":["The control distribution in Software-Defined Networks improves the security, performance and scalability of the network. However, distributed control introduces consistency challenges into the network global view. In this work, we present the main security threats to the software-defined networks, we propose a host authentication and access control mechanism based on host credentials, we propose an efficient controller-distribution architecture, and we also propose consistent schemes for the policy updates on centralized or on distributed control networks. An authenticationmechanism prototype was implemented over POX, an OpenFlow controller. The results of the authentication prototype show that the proposal blocks access to unauthorized hosts, even in the scenario where a host has its access permission revoked. The distributed controller prototype was implemented and the placement heuristic was analyzed in several real topologies. The results of the controller placement evaluation show that network connectivity is maintained in scenarios where there is a high rate of network node failure. It is also proven that placement optimization reduces the average latency between controllers. A simulator for Software-Defined Networking has been developed and validated. The simulations of security policy enforcement in real network topologies show that the overhead generated by the proposed schemes is very low. Through formal verification, it is shown that the proposed consistency protocol guarantees a global order for all policy updates and that correctly composes all policies installed on the network."]},{"key":"dc:title","label":"Title","values":["Segurança em redes definidas por software :autenticação, controle de acesso e consistência com plano de controle eficientemente distribuído"]}]}],"canonical_facts":{"dc:contributor.advisor":["Duarte, Otto Carlos Muniz Bandeira"],"dc:creator":["Mattos, Diogo Menezes Ferrazani"],"dc:date.accessioned":["2019-01-29T16:18:06Z"],"dc:date.available":["2026-05-16T03:05:25Z"],"dc:date.issued":["2017-01"],"dc:description.abstract":["The control distribution in Software-Defined Networks improves the security, performance and scalability of the network. However, distributed control introduces consistency challenges into the network global view. In this work, we present the main security threats to the software-defined networks, we propose a host authentication and access control mechanism based on host credentials, we propose an efficient controller-distribution architecture, and we also propose consistent schemes for the policy updates on centralized or on distributed control networks. An authenticationmechanism prototype was implemented over POX, an OpenFlow controller. The results of the authentication prototype show that the proposal blocks access to unauthorized hosts, even in the scenario where a host has its access permission revoked. The distributed controller prototype was implemented and the placement heuristic was analyzed in several real topologies. The results of the controller placement evaluation show that network connectivity is maintained in scenarios where there is a high rate of network node failure. It is also proven that placement optimization reduces the average latency between controllers. A simulator for Software-Defined Networking has been developed and validated. The simulations of security policy enforcement in real network topologies show that the overhead generated by the proposed schemes is very low. Through formal verification, it is shown that the proposed consistency protocol guarantees a global order for all policy updates and that correctly composes all policies installed on the network."],"dc:identifier.uri":["http://hdl.handle.net/11422/6270"],"dc:language":["por"],"dc:publisher":["Universidade Federal do Rio de Janeiro"],"dc:publisher.department":["Instituto Alberto Luiz Coimbra de Pós-Graduação e Pesquisa de Engenharia"],"dc:rights":["Acesso Aberto"],"dc:subject":["Engenharia elétrica","Virtualização de redes","Computação em nuvens"],"dc:title":["Segurança em redes definidas por software :autenticação, controle de acesso e consistência com plano de controle eficientemente distribuído"],"dc:type":["Tese"]},"updated_at":"2026-07-24T01:16:21Z"}