{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,12]],"date-time":"2025-11-12T13:23:49Z","timestamp":1762953829571,"version":"3.41.0"},"reference-count":32,"publisher":"Association for Computing Machinery (ACM)","issue":"4","license":[{"start":{"date-parts":[[2021,9,3]],"date-time":"2021-09-03T00:00:00Z","timestamp":1630627200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Key Research and Development (R&D) Plan of China","award":["2017YFB0801804"],"award-info":[{"award-number":["2017YFB0801804"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["61902138"],"award-info":[{"award-number":["61902138"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100002858","name":"China Postdoctoral Science Foundation","doi-asserted-by":"crossref","award":["2018M640701"],"award-info":[{"award-number":["2018M640701"]}],"id":[{"id":"10.13039\/501100002858","id-type":"DOI","asserted-by":"crossref"}]},{"name":"First Class Special Funding for Postdoctoral Scientific Research of Hubei Province","award":["2018-G22"],"award-info":[{"award-number":["2018-G22"]}]},{"name":"Key-Area Research and Development Program of Guangdong Province","award":["2019B010139001"],"award-info":[{"award-number":["2019B010139001"]}]},{"DOI":"10.13039\/501100017607","name":"Shenzhen Fundamental Research Program","doi-asserted-by":"crossref","award":["JCYJ20170413114215614"],"award-info":[{"award-number":["JCYJ20170413114215614"]}],"id":[{"id":"10.13039\/501100017607","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Internet Technol."],"published-print":{"date-parts":[[2021,11,30]]},"abstract":"<jats:p>The rapid development of the Internet of Things has led to demand for high-speed data transformation. Serving this purpose is the Tactile Internet, which facilitates data transfer in extra-low latency. In particular, a Tactile Internet based on software-defined networking (SDN) has been broadly deployed because of the proven benefits of SDN in flexible and programmable network management. However, the vulnerabilities of SDN also threaten the security of the Tactile Internet. Specifically, an SDN controller relies on the network status (provided by the underlying switches) to make network decisions, e.g., calculating a routing path to deliver data in the Tactile Internet. Hence, the attackers can compromise the switches to jeopardize the SDN and further attack Tactile Internet systems. For example, an attacker can compromise switches to launch distributed denial-of-service attacks to overwhelm the SDN controller, which will disrupt all the applications in the Tactile Internet. In pursuit of a more secure Tactile Internet, the problem of abnormal SDN switches in the Tactile Internet is analyzed in this article, including the cause of abnormal switches and their influences on different network layers. Then we propose an approach that leverages the messages sent by all switches to identify abnormal switches, which adopts a linear structure to store historical messages at a relatively low cost. By mapping each flow message to the flow establishment model, our method can effectively identify malicious SDN switches in the Tactile Internet and thus enhance its security.<\/jats:p>","DOI":"10.1145\/3415146","type":"journal-article","created":{"date-parts":[[2021,9,3]],"date-time":"2021-09-03T18:57:45Z","timestamp":1630695465000},"page":"1-23","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["Detecting Malicious Switches for a Secure Software-defined Tactile Internet"],"prefix":"10.1145","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5365-904X","authenticated-orcid":false,"given":"Bin","family":"Yuan","sequence":"first","affiliation":[{"name":"School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chen","family":"Lin","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Deqing","family":"Zou","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Huazhong University of Science and Technology, China and Shenzhen Huazhong University of Science and Technology Research Institute, Shenzhen, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7986-4244","authenticated-orcid":false,"given":"Laurence Tianruo","family":"Yang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Huazhong University of Science and Technology, China and St. Francis Xavier University, Antigonish, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hai","family":"Jin","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2021,9,3]]},"reference":[{"key":"e_1_2_1_1_1","unstructured":"2020. The Internet Topology Zoo. Retrieved from http:\/\/www.topology-zoo.org\/dataset.html.  2020. The Internet Topology Zoo. Retrieved from http:\/\/www.topology-zoo.org\/dataset.html."},{"key":"e_1_2_1_2_1","unstructured":"2020. Mininet. Retrieved from http:\/\/mininet.org\/.  2020. Mininet. Retrieved from http:\/\/mininet.org\/."},{"key":"e_1_2_1_3_1","unstructured":"2020. The Moore Dataset. Retrieved from https:\/\/www.cl.cam.ac.uk\/research\/srg\/netos\/projects\/archive\/nprobe\/.  2020. The Moore Dataset. Retrieved from https:\/\/www.cl.cam.ac.uk\/research\/srg\/netos\/projects\/archive\/nprobe\/."},{"key":"e_1_2_1_4_1","unstructured":"2020. RYU. Retrieved from https:\/\/osrg.github.io\/ryu-book\/en\/html\/.  2020. RYU. Retrieved from https:\/\/osrg.github.io\/ryu-book\/en\/html\/."},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICPADS.2015.107"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2015.7010528"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.3390\/jsan7010001"},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/NETSOFT.2015.7116153"},{"volume-title":"Presented as Part of the 9th USENIX Symposium on Networked Systems Design and Implementation. 127\u2013140.","author":"Canini Marco","key":"e_1_2_1_9_1","unstructured":"Marco Canini , Daniele Venzano , Peter Pere\u0161\u00edni , Dejan Kosti\u0107 , and Jennifer Rexford . 2012. A {NICE} way to test OpenFlow applications. In Presented as Part of the 9th USENIX Symposium on Networked Systems Design and Implementation. 127\u2013140. Marco Canini, Daniele Venzano, Peter Pere\u0161\u00edni, Dejan Kosti\u0107, and Jennifer Rexford. 2012. A {NICE} way to test OpenFlow applications. In Presented as Part of the 9th USENIX Symposium on Networked Systems Design and Implementation. 127\u2013140."},{"key":"e_1_2_1_10_1","unstructured":"M. Casado. 2013. OpenStack and network virtualization. [Online]. http:\/\/blogs.vmware.com\/vmware\/2013\/04\/openstack-and-networkvirtualization.html.  M. Casado. 2013. OpenStack and network virtualization. [Online]. http:\/\/blogs.vmware.com\/vmware\/2013\/04\/openstack-and-networkvirtualization.html."},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/NETSOFT.2016.7502486"},{"key":"e_1_2_1_12_1","volume-title":"Proceedings of the 2015 1st IEEE Conference on Network Softwarization. IEEE, 1\u20136.","author":"Chi Po-Wen","year":"2015","unstructured":"Po-Wen Chi , Chien-Ting Kuo , Jing-Wei Guo , and Chin-Laung Lei . 2015 . How to detect a compromised SDN switch . In Proceedings of the 2015 1st IEEE Conference on Network Softwarization. IEEE, 1\u20136. Po-Wen Chi, Chien-Ting Kuo, Jing-Wei Guo, and Chin-Laung Lei. 2015. How to detect a compromised SDN switch. In Proceedings of the 2015 1st IEEE Conference on Network Softwarization. IEEE, 1\u20136."},{"key":"e_1_2_1_13_1","volume-title":"Paulo Jose Abatti, Mauro Sergio Pereira Fonseca, and Keiko Veronica Ono Fonseca.","author":"da Luz Lemos Filipe Augusto","year":"2020","unstructured":"Filipe Augusto da Luz Lemos , Rubens Alexandre de Faria , Paulo Jose Abatti, Mauro Sergio Pereira Fonseca, and Keiko Veronica Ono Fonseca. 2020 . Memory auditing for detection of compromised switches in software-defined networks using trusted execution environment. In Developments and Advances in Defense and Security. Springer , 77\u201385. Filipe Augusto da Luz Lemos, Rubens Alexandre de Faria, Paulo Jose Abatti, Mauro Sergio Pereira Fonseca, and Keiko Veronica Ono Fonseca. 2020. Memory auditing for detection of compromised switches in software-defined networks using trusted execution environment. In Developments and Advances in Defense and Security. Springer, 77\u201385."},{"key":"e_1_2_1_14_1","first-page":"119","article-title":"Traffic-based malicious switch detection in sdn","volume":"8","author":"Du Xiaodong","year":"2014","unstructured":"Xiaodong Du , Ming-Zhong Wang , Xiaoping Zhang , and Liehuang Zhu . 2014 . Traffic-based malicious switch detection in sdn . Int. J. Secur. Appl. 8 , 5 (2014), 119 \u2013 130 . Xiaodong Du, Ming-Zhong Wang, Xiaoping Zhang, and Liehuang Zhu. 2014. Traffic-based malicious switch detection in sdn. Int. J. Secur. Appl. 8, 5 (2014), 119\u2013130.","journal-title":"Int. J. Secur. Appl."},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1002\/spe.2180"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2016.7502995"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/2809826.2809833"},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2014.2371999"},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-22110-1_47"},{"key":"e_1_2_1_20_1","unstructured":"Elias Molina and Eduardo Jacob. 2017. Software-defined networking in cyber-physical systems: A survey. Comput. Electr. Eng. (2017) 1\u201313.  Elias Molina and Eduardo Jacob. 2017. Software-defined networking in cyber-physical systems: A survey. Comput. Electr. Eng. (2017) 1\u201313."},{"volume-title":"Proceedings of the 2012 USENIX Conference on Hot Topics in Security.","author":"Neti Saran","key":"e_1_2_1_21_1","unstructured":"Saran Neti , Anil Somayaji , and Michael E. Locasto . 2012. Software diversity: Security, entropy and game theory . In Proceedings of the 2012 USENIX Conference on Hot Topics in Security. Saran Neti, Anil Somayaji, and Michael E. Locasto. 2012. Software diversity: Security, entropy and game theory. In Proceedings of the 2012 USENIX Conference on Hot Topics in Security."},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.5555\/1251086.1251088"},{"key":"e_1_2_1_23_1","unstructured":"S. Schenker. 2013. Stanford Seminar\u2014Software-defined Networking at the Crossroads. [Online]. http:\/\/www.youtube.com\/watch?v=WabdXYzCAOU.  S. Schenker. 2013. Stanford Seminar\u2014Software-defined Networking at the Crossroads. [Online]. http:\/\/www.youtube.com\/watch?v=WabdXYzCAOU."},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2017.7997296"},{"key":"e_1_2_1_25_1","volume-title":"Proceedings of the 2010 USENIX Symposium on Operating Systems Design and Implementation)","volume":"10","author":"Sherwood Rob","year":"2010","unstructured":"Rob Sherwood , Glen Gibb , Kok-Kiong Yap , Guido Appenzeller , Martin Casado , Nick McKeown , and Guru M Parulkar . 2010 . Can the production network be the testbed ? In Proceedings of the 2010 USENIX Symposium on Operating Systems Design and Implementation) , Vol. 10 . 1\u20136. Rob Sherwood, Glen Gibb, Kok-Kiong Yap, Guido Appenzeller, Martin Casado, Nick McKeown, and Guru M Parulkar. 2010. Can the production network be the testbed? In Proceedings of the 2010 USENIX Symposium on Operating Systems Design and Implementation), Vol. 10. 1\u20136."},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/IC2E.2014.72"},{"volume-title":"Proceedings of the 21th European Wireless Conference on European Wireless. 428\u2013433","author":"Szabo David","key":"e_1_2_1_27_1","unstructured":"David Szabo , Andras Gulyas , Frank H. P. Fitzek , and Daniel E. Lucani . 2015. Towards the Tactile Internet: Decreasing communication latency with network coding and software defined networking . In Proceedings of the 21th European Wireless Conference on European Wireless. 428\u2013433 . David Szabo, Andras Gulyas, Frank H. P. Fitzek, and Daniel E. Lucani. 2015. Towards the Tactile Internet: Decreasing communication latency with network coding and software defined networking. In Proceedings of the 21th European Wireless Conference on European Wireless. 428\u2013433."},{"key":"e_1_2_1_28_1","unstructured":"Volkan Yazici M Oguz Sunay and Ali O Ercan. 2014. Controlling a software-defined network via distributed controllers. arXiv:1401.7651. Retrieved from https:\/\/arxiv.org\/abs\/1401.7651.  Volkan Yazici M Oguz Sunay and Ali O Ercan. 2014. Controlling a software-defined network via distributed controllers. arXiv:1401.7651. Retrieved from https:\/\/arxiv.org\/abs\/1401.7651."},{"key":"e_1_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-41717-7_6"},{"volume-title":"Presented as Part of the 10th USENIX Symposium on Networked Systems Design and Implementation. 29\u201342.","author":"Yu Minlan","key":"e_1_2_1_30_1","unstructured":"Minlan Yu , Lavanya Jose , and Rui Miao . 2013. Software defined traffic measurement with OpenSketch . In Presented as Part of the 10th USENIX Symposium on Networked Systems Design and Implementation. 29\u201342. Minlan Yu, Lavanya Jose, and Rui Miao. 2013. Software defined traffic measurement with OpenSketch. In Presented as Part of the 10th USENIX Symposium on Networked Systems Design and Implementation. 29\u201342."},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2018.2822668"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2018.2859483"}],"container-title":["ACM Transactions on Internet Technology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3415146","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3415146","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:03:10Z","timestamp":1750197790000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3415146"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,9,3]]},"references-count":32,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2021,11,30]]}},"alternative-id":["10.1145\/3415146"],"URL":"https:\/\/doi.org\/10.1145\/3415146","relation":{},"ISSN":["1533-5399","1557-6051"],"issn-type":[{"type":"print","value":"1533-5399"},{"type":"electronic","value":"1557-6051"}],"subject":[],"published":{"date-parts":[[2021,9,3]]},"assertion":[{"value":"2020-05-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2020-08-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2021-09-03","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}