Usage Control Policy Enforcement in SDN-Based Clouds: A Dynamic Availability Service Use Case

Khalifa Toumi; Muhammad Sabir Idrees; Fabien Charmet; Reda Yaich; Gregory Blanc

doi:10.1109/HPCC-SmartCity-DSS.2016.0087

Usage Control Policy Enforcement in SDN-Based Clouds: A Dynamic Availability Service Use Case

Khalifa Toumi
, Muhammad Sabir Idrees
, Fabien Charmet
, Reda Yaich
, Gregory Blanc

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

With the growing interest in Software Defined Networking (SDN) and thanks to the programmability provided by SDN protocols like OpenFlow, network application developers have started implementing solutions to fit corporate needs, like firewalls, load balancers and security services. In this paper, we present a novel solution to answer those needs with usage control policies. We design a policy based management framework offering SDN network security policies. This approach is used to enforce performance requirements (e.g., to ensure a certain level of network connectivity). A top-down approach is proposed, in order to refine the policies into the appropriate network rules, via the OpenFlow protocol. Finally, we implement the solution with an availability service use case and we provide a set of experiments to evaluate its efficiency.

Original language	English
Title of host publication	Proceedings - 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016
Editors	Laurence T. Yang, Jinjun Chen
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	578-585
Number of pages	8
ISBN (Electronic)	9781509042968
DOIs	https://doi.org/10.1109/HPCC-SmartCity-DSS.2016.0087
Publication status	Published - 20 Jan 2017
Externally published	Yes
Event	18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016 - Sydney, Australia Duration: 12 Dec 2016 → 14 Dec 2016

Publication series

Name	Proceedings - 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016

Conference

Conference	18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016
Country/Territory	Australia
City	Sydney
Period	12/12/16 → 14/12/16

Keywords

Network Policies
OpenFlow
SDN
Service Availability
Usage Control

Access to Document

10.1109/HPCC-SmartCity-DSS.2016.0087

Cite this

Toumi, K., Idrees, M. S., Charmet, F., Yaich, R., & Blanc, G. (2017). Usage Control Policy Enforcement in SDN-Based Clouds: A Dynamic Availability Service Use Case. In L. T. Yang, & J. Chen (Eds.), Proceedings - 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016 (pp. 578-585). Article 7828428 (Proceedings - 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/HPCC-SmartCity-DSS.2016.0087

Toumi, Khalifa ; Idrees, Muhammad Sabir ; Charmet, Fabien et al. / Usage Control Policy Enforcement in SDN-Based Clouds : A Dynamic Availability Service Use Case. Proceedings - 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016. editor / Laurence T. Yang ; Jinjun Chen. Institute of Electrical and Electronics Engineers Inc., 2017. pp. 578-585 (Proceedings - 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016).

@inproceedings{b94fac3384654e5fb4cd42b90992de4b,

title = "Usage Control Policy Enforcement in SDN-Based Clouds: A Dynamic Availability Service Use Case",

abstract = "With the growing interest in Software Defined Networking (SDN) and thanks to the programmability provided by SDN protocols like OpenFlow, network application developers have started implementing solutions to fit corporate needs, like firewalls, load balancers and security services. In this paper, we present a novel solution to answer those needs with usage control policies. We design a policy based management framework offering SDN network security policies. This approach is used to enforce performance requirements (e.g., to ensure a certain level of network connectivity). A top-down approach is proposed, in order to refine the policies into the appropriate network rules, via the OpenFlow protocol. Finally, we implement the solution with an availability service use case and we provide a set of experiments to evaluate its efficiency.",

keywords = "Network Policies, OpenFlow, SDN, Service Availability, Usage Control",

author = "Khalifa Toumi and Idrees, \{Muhammad Sabir\} and Fabien Charmet and Reda Yaich and Gregory Blanc",

note = "Publisher Copyright: {\textcopyright} 2016 IEEE.; 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016 ; Conference date: 12-12-2016 Through 14-12-2016",

year = "2017",

month = jan,

day = "20",

doi = "10.1109/HPCC-SmartCity-DSS.2016.0087",

language = "English",

series = "Proceedings - 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "578--585",

editor = "Yang, \{Laurence T.\} and Jinjun Chen",

booktitle = "Proceedings - 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016",

}

Toumi, K, Idrees, MS, Charmet, F, Yaich, R & Blanc, G 2017, Usage Control Policy Enforcement in SDN-Based Clouds: A Dynamic Availability Service Use Case. in LT Yang & J Chen (eds), Proceedings - 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016., 7828428, Proceedings - 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016, Institute of Electrical and Electronics Engineers Inc., pp. 578-585, 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016, Sydney, Australia, 12/12/16. https://doi.org/10.1109/HPCC-SmartCity-DSS.2016.0087

Usage Control Policy Enforcement in SDN-Based Clouds: A Dynamic Availability Service Use Case. / Toumi, Khalifa; Idrees, Muhammad Sabir; Charmet, Fabien et al.
Proceedings - 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016. ed. / Laurence T. Yang; Jinjun Chen. Institute of Electrical and Electronics Engineers Inc., 2017. p. 578-585 7828428 (Proceedings - 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Usage Control Policy Enforcement in SDN-Based Clouds

T2 - 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016

AU - Toumi, Khalifa

AU - Idrees, Muhammad Sabir

AU - Charmet, Fabien

AU - Yaich, Reda

AU - Blanc, Gregory

PY - 2017/1/20

Y1 - 2017/1/20

N2 - With the growing interest in Software Defined Networking (SDN) and thanks to the programmability provided by SDN protocols like OpenFlow, network application developers have started implementing solutions to fit corporate needs, like firewalls, load balancers and security services. In this paper, we present a novel solution to answer those needs with usage control policies. We design a policy based management framework offering SDN network security policies. This approach is used to enforce performance requirements (e.g., to ensure a certain level of network connectivity). A top-down approach is proposed, in order to refine the policies into the appropriate network rules, via the OpenFlow protocol. Finally, we implement the solution with an availability service use case and we provide a set of experiments to evaluate its efficiency.

AB - With the growing interest in Software Defined Networking (SDN) and thanks to the programmability provided by SDN protocols like OpenFlow, network application developers have started implementing solutions to fit corporate needs, like firewalls, load balancers and security services. In this paper, we present a novel solution to answer those needs with usage control policies. We design a policy based management framework offering SDN network security policies. This approach is used to enforce performance requirements (e.g., to ensure a certain level of network connectivity). A top-down approach is proposed, in order to refine the policies into the appropriate network rules, via the OpenFlow protocol. Finally, we implement the solution with an availability service use case and we provide a set of experiments to evaluate its efficiency.

KW - Network Policies

KW - OpenFlow

KW - SDN

KW - Service Availability

KW - Usage Control

U2 - 10.1109/HPCC-SmartCity-DSS.2016.0087

DO - 10.1109/HPCC-SmartCity-DSS.2016.0087

M3 - Conference contribution

AN - SCOPUS:85013664306

T3 - Proceedings - 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016

SP - 578

EP - 585

BT - Proceedings - 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016

A2 - Yang, Laurence T.

A2 - Chen, Jinjun

PB - Institute of Electrical and Electronics Engineers Inc.

Y2 - 12 December 2016 through 14 December 2016

ER -

Toumi K, Idrees MS, Charmet F, Yaich R, Blanc G. Usage Control Policy Enforcement in SDN-Based Clouds: A Dynamic Availability Service Use Case. In Yang LT, Chen J, editors, Proceedings - 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016. Institute of Electrical and Electronics Engineers Inc. 2017. p. 578-585. 7828428. (Proceedings - 18th IEEE International Conference on High Performance Computing and Communications, 14th IEEE International Conference on Smart City and 2nd IEEE International Conference on Data Science and Systems, HPCC/SmartCity/DSS 2016). doi: 10.1109/HPCC-SmartCity-DSS.2016.0087

Usage Control Policy Enforcement in SDN-Based Clouds: A Dynamic Availability Service Use Case

Abstract

Publication series

Conference

Keywords

Access to Document

Fingerprint

Cite this