PROTECTING AND TRACKING NETWORK STATE UPDATES IN SOFTWARE-DEFINED NETWORKS FROM SIDE-CHANNEL ACCESS

摘要

A system and method of access control and tracking capabilities of programmable switches are described. A system and associated method include an access controller component and a tracker component. The access controller component defines access control rights for a user in a flow of a programmable switch in a network. The access control rights are determined by access control table information and an associated bit-array based flow-level role data structure built by a controller network operator. The tracker component authorizes and permits the user to modify the flow according to a flow modification request, which is based upon information in the access control table information and the associated bit-array based flow-level role data structure for the user. A notification component of a programmable switch notifies the controller of the network about the modification request to the flow.