TY - GEN
T1 - A Network Access Control solution combining OrBAC and SDN
AU - Aschoff, Rafael
AU - Rosendo, Daniel
AU - MacHado, Marcos
AU - Santos, Alexandre
AU - Sadok, Djamel
N1 - Publisher Copyright:
© 2017 IFIP.
PY - 2017/7/20
Y1 - 2017/7/20
N2 - Standard Port-based Network Access Control (NAS) with tagged Virtual Local Area Networks (VLANs) systems are useful to authenticate users within an isolated network environment. This approach on its own, however, lacks the flexibility and granularity level that new generation networks based on SDN (Software Defined Networking) can provide. The flow-based access control provides a more appropriate granularity to enforce network policies. In this paper, we propose a novel solution named SDN-based Network Access Control (S-NAC) that provides authentication and authorization of clients and servers based on high-level policies enforced at flow level. The solution has been implemented, deployed and tested over emulated and real networks.
AB - Standard Port-based Network Access Control (NAS) with tagged Virtual Local Area Networks (VLANs) systems are useful to authenticate users within an isolated network environment. This approach on its own, however, lacks the flexibility and granularity level that new generation networks based on SDN (Software Defined Networking) can provide. The flow-based access control provides a more appropriate granularity to enforce network policies. In this paper, we propose a novel solution named SDN-based Network Access Control (S-NAC) that provides authentication and authorization of clients and servers based on high-level policies enforced at flow level. The solution has been implemented, deployed and tested over emulated and real networks.
UR - https://www.scopus.com/pages/publications/85029456495
U2 - 10.23919/INM.2017.7987316
DO - 10.23919/INM.2017.7987316
M3 - Conference contribution
AN - SCOPUS:85029456495
T3 - Proceedings of the IM 2017 - 2017 IFIP/IEEE International Symposium on Integrated Network and Service Management
SP - 483
EP - 489
BT - Proceedings of the IM 2017 - 2017 IFIP/IEEE International Symposium on Integrated Network and Service Management
A2 - Chemouil, Prosper
A2 - Simoes, Paulo
A2 - Madeira, Edmundo
A2 - Secci, Stefano
A2 - Monteiro, Edmundo
A2 - Gaspary, Luciano Paschoal
A2 - dos Santos, Carlos Raniery P.
A2 - Charalambides, Marinos
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 15th IFIP/IEEE International Symposium on Integrated Network and Service Management, IM 2017
Y2 - 8 May 2017 through 12 May 2017
ER -