Software-Defined Networks have seen an increasing in their deployment becausethey offer better network manageability compared to traditional networks.Despite their immense success and popularity, various security issues in SDNremain open problems for research. Particularly, the problem of securing thecontrollers in distributed environment is still short of any solutions. Thispaper proposes a scheme to identify any rogue/malicious controller(s) in adistributed environment. Our scheme is based on trust and reputation systemwhich is centrally managed. As such, our scheme identifies any controllersacting maliciously by comparing the state of installed flows/policies withpolicies that should be installed. Controllers rate each other on this basisand report the results to a central entity, which reports it to the networkadministrator.
展开▼
