TY - JOUR
T1 - Network Coding-based Resilient Routing for Maintaining Data Security and Availability in Software-Defined Networks
AU - Ni, Haoran
AU - Guo, Zehua
AU - Li, Changlin
AU - Dou, Songshi
AU - Yao, Chao
AU - Baker, Thar
N1 - Publisher Copyright:
© 2022 Elsevier Ltd
PY - 2022/9
Y1 - 2022/9
N2 - Software-Defined Networking (SDN) improves network performance by flexible traffic control. Data security and data availability are two main concerns for designing a resilient routing algorithm in SDN. Existing algorithms such as the MPT algorithm consider joint data security and availability, but they cannot make a good trade-off. In this paper, we propose a Network Coding-based Resilient Routing algorithm named NCRR to jointly achieve data security and availability. NCRR is a heuristic algorithm that computes routing decisions in three scenarios based on the number of disjoint paths. Specifically, the scenario of three disjoint paths is enough to ensure joint security and availability for a flow when three or more disjoint paths can be used for forwarding this flow. However, due to topological diversity, we cannot always find three disjoint paths for each flow. Thus, the scenarios of two disjoint paths and one path are used to ensure joint security and availability if only two disjoint paths and one path can be used. To evaluate the performance of NCRR, simulations have been conducted using two real-world network topologies. Simulation results show that NCRR improves the joint data security and availability performance by approximately 6.23% on AttMpls topology and 21.34% on Cernet topology, compared with existing MPT.
AB - Software-Defined Networking (SDN) improves network performance by flexible traffic control. Data security and data availability are two main concerns for designing a resilient routing algorithm in SDN. Existing algorithms such as the MPT algorithm consider joint data security and availability, but they cannot make a good trade-off. In this paper, we propose a Network Coding-based Resilient Routing algorithm named NCRR to jointly achieve data security and availability. NCRR is a heuristic algorithm that computes routing decisions in three scenarios based on the number of disjoint paths. Specifically, the scenario of three disjoint paths is enough to ensure joint security and availability for a flow when three or more disjoint paths can be used for forwarding this flow. However, due to topological diversity, we cannot always find three disjoint paths for each flow. Thus, the scenarios of two disjoint paths and one path are used to ensure joint security and availability if only two disjoint paths and one path can be used. To evaluate the performance of NCRR, simulations have been conducted using two real-world network topologies. Simulation results show that NCRR improves the joint data security and availability performance by approximately 6.23% on AttMpls topology and 21.34% on Cernet topology, compared with existing MPT.
KW - Data availability
KW - Data security
KW - Routing
KW - Software-Defined Networking
UR - http://www.scopus.com/inward/record.url?scp=85132223318&partnerID=8YFLogxK
U2 - 10.1016/j.jnca.2022.103372
DO - 10.1016/j.jnca.2022.103372
M3 - Article
AN - SCOPUS:85132223318
SN - 1084-8045
VL - 205
JO - Journal of Network and Computer Applications
JF - Journal of Network and Computer Applications
M1 - 103372
ER -