CPACK: An Intelligent Cyber-Physical Access Control Kit for Protecting Network
Author:
Yu Haisheng,Liu Zhixian,Zou Sai,Wang Wenyong
Abstract
Access Control Lists (ACL) are critical to protecting network and cyber-physical systems. Traditional firewalls mostly use reactive methods to enforce ACLs, so that new ACL updates cannot take effect immediately. In this paper, based on our previous work, we propose CPACK, an intelligent cyber-physical access control kit, which uses a smart algorithm to upgrade the ACL list. CPACK adopts a proactive way to enforce ACL and reacts to a new ACL update and network view update in real time. We implement CPACK on both Floodlight and ONOS controller. We then conduct a large number of experiments to compare CPACK with the Floodlight firewall application. The experimental results show that CPACK has a better performance than the existing Floodlight firewall application. CPACK is also integrated into the new version of Floodlight and ONOS controller.
Funder
National Natural Science Foundation of China
Macau Science and Technology Development Funds
Subject
Electrical and Electronic Engineering,Biochemistry,Instrumentation,Atomic and Molecular Physics, and Optics,Analytical Chemistry
Reference38 articles.
1. Reorganization of intruder Using Ad-Hoc Network And RFID
2. A Brief History of the Internet;Paulus,1997
3. Smart Telerobotic Surveillance System via Internet with Reduced Time Delay;Vasalya;IAES Int. J. Robot. Autom.,2012
4. Fuzzy controlled routing in a swarm robotic network;Manoj;IAES Int. J. Robot. Autom. (IJRA),2014
5. Abstractions for software-defined networks