Concurrency and Computation Practice and Experience · 2017 · 13 citations · 16 references
ComputingComputer ScienceInformation TechnologyComputer NetworksNetwork SecurityProgramming LanguagesInternet Protocol SuiteNetwork ArchitectureNetwork ProgrammingNetwork ProtocolsSoftware-defined NetworkingNetwork PolicyNetwork Policy DesignNetwork Policy ManagementPolicy-based Network ManagementPolicy-based NetworkingSoftware-defined Network ManagementSoftware-defined Networking SecuritySouthbound Interfaces
Summary Through network programmability, software defined network can simplify network control and management. Since the current software defined network southbound interface level is low and programming situation is complex, it requires a high‐level abstract programming language to simplify programming. First, this paper improves the NetCore programming language to generate NetCore‐M language, so that it can support deployment of multipolicies combination including packet drop action. This paper describes in detail the syntax, semanteme, and implementation of NetCore‐M language forwarding policy service. Secondly, this paper describes the network policy conflict systematically. Finally, this paper shows that the modified multipolicies combination algorithm can effectively detect policies conflicts based on the implementation of the Pyretic project.
16
Nick McKeown, Tom Anderson, Hari Balakrishnan et al. · ACM SIGCOMM Computer Communication Review · 2008 · 8.4K citations
Nate Foster, Rob Harrison, Michael J. Freedman et al. · ACM SIGPLAN Notices · 2011 · 585 citations
A security enforcement kernel for OpenFlow networks
Philip Porras, Seungwon Shin, Vinod Yegneswaran et al. · 2012 · 525 citations · Full text
Gérard Berry, Gérard Boudol · 1990 · 275 citations · Full text
Hongxin Hu, Wonkyu Han, Gail‐Joon Ahn et al. · 2014 · 230 citations