Blockchain-Based SDN Security Guarantee Model

Abstract

At present, the software-defined network lacks a complete security mechanism for guarantee stream rule integrity, which contributes to attackers to trigger a variety of destructive network attacks through malicious tampering. Based on the non-tamperable performance of the blockchain technology and the characteristics of decentralization, this paper proposes a blockchain-based SDN security model, which could ensure the integrity of the network information by saving SDN flow rules, node identity and privilege information, and controller global information to the blockchain. The model establishes a distributed authentication mechanism through the blockchain network, which alleviates the problem that traditional centralized authentication is vulnerable to single-point attacks. In addition, the model performs role-based rights management based on data uplink storage and distributed authentication. Also, the Markov model is used to analyze the security performance of the blockchain-based SDN model. Analysis and simulation results show that the model can significantly improve the security performance of SDN.