Integrating IPsec within OpenFlow Architecture for Secure Group Communication

Heydari Fami Tafreshi, V, Ghazisaeedi, E, Cruickshank, Haitham and Sun, Zhili (2014) Integrating IPsec within OpenFlow Architecture for Secure Group Communication ZTE Communications, Vol. 1 (No. 2). pp. 41-49.

Preview

Text (licence) SRI_deposit_agreement.pdf Available under License : See the attached licence file. Download (33kB) | Preview

Abstract

Network security protocols such as IPsec have been used for many years to ensure robust end⁃to⁃end communication and are impor⁃ tant in the context of SDN. Despite the widespread installation of IPsec to date, per⁃packet protection offered by the protocol is not very compatible with OpenFlow and flow⁃like behavior. OpenFlow architecture cannot aggregate IPsec⁃ESP flows in transport mode or tunnel mode because layer⁃3 information is encrypted and therefore unreadable. In this paper, we propose using the Secu⁃ rity Parameter Index (SPI) of IPsec within the OpenFlow architecture to identify and direct IPsec flows. This enables IPsec to con⁃ form to the packet⁃based behavior of OpenFlow architecture. In addition, by distinguishing between IPsec flows, the architecture is particularly suited to secure group communication.

Item Type:	Article
Subjects :	Electronic Engineering
Divisions :	Faculty of Engineering and Physical Sciences > Electronic Engineering
Authors :	Name Email ORCID Heydari Fami Tafreshi, V Ghazisaeedi, E Cruickshank, Haitham H.Cruickshank@surrey.ac.uk Sun, Zhili Z.Sun@surrey.ac.uk
Date :	25 June 2014
DOI :	10.3939/j.issn.1673-5188.2014.02.007
Copyright Disclaimer :	© 2014 ZTE Corporation
Uncontrolled Keywords :	IPsec; OpenFlow; Secure group communication; Group domain of interpretation (GDOI); Flow⁃based switching
Related URLs :	Author Publisher
Depositing User :	Symplectic Elements
Date Deposited :	07 Dec 2016 14:19
Last Modified :	16 Jan 2019 17:10
URI:	http://epubs.surrey.ac.uk/id/eprint/813062

Actions (login required)

View Item

Downloads