Skip to main content
SpringerLink
Log in

Detection of SDN Flow Rule Conflicts Based on Knowledge Graph

  • Conference paper
  • First Online:
Emerging Networking Architecture and Technologies (ICENAT 2022)

Part of the book series: Communications in Computer and Information Science ((CCIS,volume 1696))

  • 785 Accesses

Abstract

Software-Defined Network (SDN) separates the control plane and data plane to provide a more flexible network. In that case, switches only need to follow the flow rules that controllers send. However, when conflicts between policies in applications happen, the flow rules they send may conflict too, then the behavior of switches may not be as expected. Moreover, the process of pipeline with multiple tables has made the match of flow rules more flexible but complicated. Therefore, precisely and easily detecting flow rule conflicts in one table and among multiple tables is crucial. Nowadays, knowledge graph has become a hot spot, with a good representation on entities and complex network relations. Besides, it has a reasoning ability, which can discover new relations between entities. So, we construct an SDN flow rule conflicts detection knowledge graph to store the network information including flow rules, then set up production rules according to the definition of flow rule conflicts with conflicts in one table and conflicts among multiple tables. The production rules are easy to read and modify. The result shows that the conflicts can be detected correctly with a clear reasoning process by production rules.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 89.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 119.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. Yu, Y., Li, X., Leng, X., et al.: Fault management in software-defined networking: a survey. IEEE Commun. Surv.Tutorials 21(1), 349–392 (2019)

    Article  Google Scholar 

  2. McKeown, N., Anderson, T., Balakrishnan, H., et al.: OpenFlow: enabling innovation in campus networks. ACM SIGCOMM Comput. Commun. Rev. 38(2), 69–74 (2008)

    Article  Google Scholar 

  3. Pisharody, S., Natarajan, J., Chowdhary, A., et al.: Brew: a security policy analysis framework for distributed SDN-based cloud environments. IEEE Trans. Depend. Secure Comput. 16(6), 1011–1025 (2019)

    Article  Google Scholar 

  4. Khurshid, A., Zhou, W., Caesar, M., et al.: Veriflow: verifying network-wide invariants in real time. ACM SIGCOMM Comput. Commun. Rev. 42(4), 467–472 (2012)

    Article  Google Scholar 

  5. Maldonado-Lopez, F.A., Calle, E., Donosom, Y.: Detection and prevention of firewall-rule conflicts on software-defined networking. In: 2015 7th International Workshop on Reliable Networks Design and Modeling (RNDM), pp. 259–265. IEEE (2015)

    Google Scholar 

  6. Khairi, M.H.H., Afiffin, S.H.S., Latiff, N.M.A., et al.: Detection and classification of conflict flows in SDN using machine learning algorithms. IEEE Access 9, 76024–76037 (2021)

    Article  Google Scholar 

  7. Amit, S.: Introducing the knowledge graph: things, not strings. America: official blog of google. http://googleblog.blogspot.com/2012/05/introducing-knowledge-graph-things-not.html 16 May 2012

  8. Bodenreider, O.: The unified medical language system (UMLS): integrating biomedical terminology. Nucleic acids research 32(suppl_1), 267–270 (2004)

    Google Scholar 

  9. Zhang, W., Wong, C.M., Ye, G.: Billion-scale pre-trained e-commerce product knowledge graph model. In: 2021 IEEE 37th International Conference on Data Engineering (ICDE), pp. 2476–2487. IEEE (2021)

    Google Scholar 

  10. Shaoxiong, J., Shirui, P., Eric, C., et al.: A Survey on knowledge graphs: representation, acquisition, and applications. IEEETrans. Neural Netw. Learn. Syst. 33(2), 494–514 (2022)

    Article  Google Scholar 

  11. Xu, G., Cao, Y., Ren, Y., et al.: Network security situation awareness based on semantic ontology and user-defined rules for internet of things. IEEE Access 5, 21046–21056 (2017)

    Article  Google Scholar 

  12. Guang, C., Tonghai, J., Meng, W., et al.: Modeling and reasoning of IoT architecture in semantic ontology dimension. Comput. Commun. 153, 580–594 (2020)

    Article  Google Scholar 

  13. De Souza, T. D. P. C., Rothenberg, C. E., Santos, M. A. S., et al: Towards semantic network models via graph databases for sdn applications. In: Fourth European Workshop on Software Defined Networks, pp. 49–54. IEEE (2015)

    Google Scholar 

  14. Li, Z., Zhao, Y., Li, Y., et al: Demonstration of Alarm Knowledge Graph Construction for Fault Localization on ONOS-based SDON Platform. In: 2020 Optical Fiber Communications Conference and Exhibition (OFC), pp. 1–3. IEEE (2020)

    Google Scholar 

  15. SPARQL Query Language for RDF. https://www.w3.org/TR/rdf-sparql-query/. Document Status Update 2013/03/26

  16. Apache Jena Homepage. https://jena.apache.org/

  17. ONOS WiKi. https://wiki.onosproject.org/. Accessed 16 Nov 2020

Download references

Acknowledgments

This work has been supported by National Key Research and Development Program of China (2020YFB1807700).

Author information

Authors and Affiliations

  1. National Key Laboratory of Science and Technology on Communications, University of Electronic Science and Technology of China, Chengdu, 611731, China

    Siyun Liang & Jian Su

Authors
  1. Siyun Liang
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Jian Su
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Jian Su .

Editor information

Editors and Affiliations

  1. Beijing Jiaotong University, Beijing, China

    Wei Quan

Rights and permissions

Reprints and permissions

Copyright information

© 2023 The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd.

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Liang, S., Su, J. (2023). Detection of SDN Flow Rule Conflicts Based on Knowledge Graph. In: Quan, W. (eds) Emerging Networking Architecture and Technologies. ICENAT 2022. Communications in Computer and Information Science, vol 1696. Springer, Singapore. https://doi.org/10.1007/978-981-19-9697-9_8

Download citation

  • DOI: https://doi.org/10.1007/978-981-19-9697-9_8

  • Published:

  • Publisher Name: Springer, Singapore

  • Print ISBN: 978-981-19-9696-2

  • Online ISBN: 978-981-19-9697-9

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation