Achieving a Heterogeneous Software-Defined Networks with CamoVisor

Security is a key issue in Software-Defined Networks (SDN). To enhance security performance, we propose a secure mechanism, called CamoVisor, to combine the heterogeneity and resilience into SDN. CamoVisor is a hypervisor between the control plane and data plane. First, it prevents the attackers in the data plane probing the useful network information by hiding the implementation of the control plane. Second, it uses heterogeneous controllers to construct the control plane. Any faulty controller does not affect the entire control plane. We build a prototype of CamoVisor and do some experiments. The experiments show that CamoVisor is able to defend the attacks from the control plane and the data plane.