November 2015, № 13 (188)

Bakhareva N.F., Polezhaev P.N., Ushakov U.A., Shukhman A.E. MANAGEMENT OF ENTERPRISE SOFTWARE DEFINED NETWORKSThe existing solutions for enterprise networks have a number of drawbacks. First, there is a problem deciding where to install the security tools, which are usually placed at the subnet borders. This leads to the fact, that they only handle the traffic transmitted through them. It reduces the level of network security. Second, there is the problem of the efficient network traffic routing while ensuring quality of service at the appropriate level. To solve these problems we propose the usage of the software-defined network technology. On the base of this technology, the prototype's architecture for network security system of enterprise SDN is proposed. It includes the implementation of the algorithms for firewall, authentication, routing and delivering QoS. The proposed authentication algorithm for enterprise SDN supports IEEE802.1x, EAP, RADIUS, LDAP, WPA2-EAP. SDN is used to isolate the data streams of different users with the ability to create any number of isolated virtual networks without restrictions of VLAN, and to implement additional access control by firewall. The experimental results of the prototype research show the efficiency and suitability of the developed algorithms for enterprise SDNs. The results can be used to deploy enterprise SDNs in companies of the Orenburg region.Key words: software-defined networks, enterprise networks, authentication, routing, QoS, firewall.

Download

References:

1. McKeown, N. OpenFlow: Enabling Innovation in Campus Networks / N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, J. Turner // ACM SIGCOMM Computer Communication Review.  — New York, 2008.  — т. 38, №2. – с. 69-74.

2. Intro to OpenFlow // Open Networking Foundation.  — 2015. URL: https://www.opennetworking.org/standards/intro-to-openflow.

3. Adrova L.S., Polezhaev P.N. Security of software-defined networks // Proc. of " XXI Vserossijskoj nauchno-metodicheskoj konferencii Telematika'2014".  — PP.133-134.

4. Adrova L.S., Polezhaev P.N. Development of the management system of enterprise networks based on SDN // Perspektivnye informacionnye tehnologii (PIT 2014):trudy Mezhdunarodnoj nauchno-tehnicheskoj konferencii /pod red. S.A. Prohorova.  — Samara: Izdatelstvo Samarskogo nauchnogo centra RAN, 2014.  — PP. 301-305.

5. Shukhman A., Polezhaev P., Ushakov Yu., Legashev L., Tarasov V., Bakhareva N. Development of network security tools for enterprise software-defined networks // Proceedings of the 8th International Conference on Security of Information Networks, September 8-10, 2015 Sochi/Russia.  — PP 224-228.

6. Adrova L.S., Polezhaev P.N. Access control model for enterprise software-defined networks // Informacionnye tehnologii. Problemy i reshenija: materialy mezhdunarodnoj nauchno-prakticheskoj konferencii. Tom 2 / redkol.: F.U. Enikeev i dr.  — Ufa: Izd-vo "Vostochnaja pechat'", 2015.  — PP. 192-196.

7. Polezhaev P.N. Implementation of the firewal algorithm for cloud systems using software-defined networks // Sbornik trudov III Mezhdunarodnoj nauchno-prakticheskoj konferencii "Informacionnaja bezopasnost' v svete Strategii Kazahstan-2050".  — 2015.  — PP. 266-271.

8. Polezhaev P.N. Bakhareva N.F., Shukhman A.E. Development of the efficient genetic algorithm for routing and providing quolity of service in software-defined networks.  — Vestnik Orenburgskogo gosudarstvennogo universiteta.  — 2015.  — No 1 (176).  — PP. 213-217.

About this article

Authors: Bahareva N.F., Shuhman A.E., Ushakov Yu.A., Polezhaev P.N.

Year: 2015

Editor-in-chief

Sergey Aleksandrovich
MIROSHNIKOV

© Электронное периодическое издание: ВЕСТНИК ОГУ on-line (VESTNIK OSU on-line), ISSN on-line 1814-6465
Зарегистрировано в Федеральной службе по надзору в сфере связи, информационных технологий и массовых коммуникаций
Свидетельство о регистрации СМИ: Эл № ФС77-37678 от 29 сентября 2009 г.
Учредитель: Оренбургский государственный университет (ОГУ)
Главный редактор: С.А. Мирошников
Адрес редакции: 460018, г. Оренбург, проспект Победы, д. 13, к. 2335
Тел./факс: (3532)37-27-78 E-mail: vestnik@mail.osu.ru