{"id":"https://openalex.org/W2982382756","doi":"https://doi.org/10.1109/cccs.2019.8888031","title":"SDN-RBAC: An Access Control Model for SDN Controller Applications","display_name":"SDN-RBAC: An Access Control Model for SDN Controller Applications","publication_year":2019,"publication_date":"2019-10-01","ids":{"openalex":"https://openalex.org/W2982382756","doi":"https://doi.org/10.1109/cccs.2019.8888031","mag":"2982382756"},"language":"en","primary_location":{"id":"doi:10.1109/cccs.2019.8888031","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cccs.2019.8888031","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 4th International Conference on Computing, Communications and Security (ICCCS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5006748647","display_name":"Abdullah Al-Alaj","orcid":"https://orcid.org/0000-0002-2640-7007"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Abdullah Al-Alaj","raw_affiliation_strings":["C-SPECC, Institute for Cyber Security, San Antonio, Texas, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"C-SPECC, Institute for Cyber Security, San Antonio, Texas, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085555416","display_name":"Ram Krishnan","orcid":"https://orcid.org/0000-0002-7402-553X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ram Krishnan","raw_affiliation_strings":["C-SPECC, Institute for Cyber Security, San Antonio, Texas, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"C-SPECC, Institute for Cyber Security, San Antonio, Texas, USA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5038692973","display_name":"Ravi Sandhu","orcid":"https://orcid.org/0000-0002-3165-1813"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ravi Sandhu","raw_affiliation_strings":["C-SPECC, Institute for Cyber Security, San Antonio, Texas, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"C-SPECC, Institute for Cyber Security, San Antonio, Texas, USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9614,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.72006788,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9922000169754028,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"Role-based access control","score":0.8285433053970337},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8182363510131836},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.7260116338729858},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.6231737732887268},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.6204298138618469},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5896859169006348},{"id":"https://openalex.org/keywords/session","display_name":"Session (web analytics)","score":0.5689234137535095},{"id":"https://openalex.org/keywords/mandatory-access-control","display_name":"Mandatory access control","score":0.5108515620231628},{"id":"https://openalex.org/keywords/controller","display_name":"Controller (irrigation)","score":0.5073813796043396},{"id":"https://openalex.org/keywords/usability","display_name":"Usability","score":0.5008883476257324},{"id":"https://openalex.org/keywords/privilege","display_name":"Privilege (computing)","score":0.49779653549194336},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4583742618560791},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.45224910974502563},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.41553449630737305},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3494716286659241},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.16982793807983398},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.12961700558662415}],"concepts":[{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.8285433053970337},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8182363510131836},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.7260116338729858},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.6231737732887268},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.6204298138618469},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5896859169006348},{"id":"https://openalex.org/C2779182362","wikidata":"https://www.wikidata.org/wiki/Q17126187","display_name":"Session (web analytics)","level":2,"score":0.5689234137535095},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.5108515620231628},{"id":"https://openalex.org/C203479927","wikidata":"https://www.wikidata.org/wiki/Q5165939","display_name":"Controller (irrigation)","level":2,"score":0.5073813796043396},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.5008883476257324},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.49779653549194336},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4583742618560791},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.45224910974502563},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.41553449630737305},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3494716286659241},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.16982793807983398},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.12961700558662415},{"id":"https://openalex.org/C6557445","wikidata":"https://www.wikidata.org/wiki/Q173113","display_name":"Agronomy","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cccs.2019.8888031","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cccs.2019.8888031","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 4th International Conference on Computing, Communications and Security (ICCCS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W1821552426","https://openalex.org/W2016334899","https://openalex.org/W2019419295","https://openalex.org/W2024046562","https://openalex.org/W2120050784","https://openalex.org/W2133294820","https://openalex.org/W2137845741","https://openalex.org/W2154765153","https://openalex.org/W2419665292","https://openalex.org/W2518660493","https://openalex.org/W2528154188","https://openalex.org/W2740981508","https://openalex.org/W2773651084","https://openalex.org/W2891859757","https://openalex.org/W2944999563"],"related_works":["https://openalex.org/W2105261429","https://openalex.org/W3138978413","https://openalex.org/W2148952798","https://openalex.org/W2237948567","https://openalex.org/W2371270386","https://openalex.org/W4386618948","https://openalex.org/W2378809132","https://openalex.org/W14205470","https://openalex.org/W2355416533","https://openalex.org/W318167434"],"abstract_inverted_index":{"The":[0,184],"architecture":[1],"of":[2,58,109,115,145,180],"Software-defined":[3],"Networks":[4],"provides":[5],"the":[6,17,45,52,59,80,113,127,139,171,178,181,187,202],"flexibility":[7],"in":[8,106,125,133,143,162,212],"developing":[9],"innovative":[10],"networking":[11],"applications":[12,25,38,103,116,198],"for":[13,101],"managing":[14],"and":[15,27,65,83,92,117,165,190,199,208],"analyzing":[16],"network":[18,31,47,140],"from":[19,36,69],"a":[20,50,76,94],"centralized":[21],"controller.":[22],"Since":[23,72],"these":[24],"directly":[26],"dynamically":[28],"access":[29,73,97,194],"critical":[30,87],"resources,":[32],"any":[33,175],"privilege":[34,110],"abuse":[35],"controller":[37,164,197],"could":[39],"lead":[40],"to":[41,79,84,135,138,169,177],"various":[42],"attacks":[43],"impacting":[44],"entire":[46],"domain.":[48],"As":[49],"result,":[51],"security":[53,88,172],"concern":[54],"is":[55,75],"ranked":[56],"one":[57],"top":[60],"issues":[61],"that":[62,104],"prevent":[63],"enterprise":[64],"data":[66],"center":[67],"networks":[68],"adopting":[70],"SDN.":[71],"control":[74,98],"natural":[77],"solution":[78],"over-privilege":[81],"problem":[82],"address":[85],"this":[86],"issue,":[89],"we":[90,155],"propose":[91],"implement":[93],"formal":[95],"role-based":[96],"model":[99,158],"(SDN-RBAC)":[100],"SDN":[102],"helps":[105],"applying":[107],"least":[108],"principle":[111],"at":[112],"level":[114],"their":[118],"sessions.":[119],"We":[120],"also":[121],"identify":[122,205],"different":[123],"approaches":[124],"which":[126],"system":[128],"can":[129,204],"handle":[130],"application":[131,146,206],"sessions":[132,207],"order":[134],"reduce":[136],"exposure":[137],"attack":[141],"surface":[142],"case":[144],"being":[147],"compromised,":[148],"buggy,":[149],"or":[150],"malicious.":[151],"Through":[152],"proof-of-concept":[153],"prototype,":[154],"implemented":[156],"our":[157],"with":[159],"multi-session":[160],"support":[161],"Floodlight":[163,182],"used":[166],"hooking":[167],"techniques":[168],"enforce":[170],"policy":[173],"without":[174],"change":[176],"code":[179],"framework.":[183],"implementation":[185],"verifies":[186],"model\u2019s":[188],"usability":[189],"effectiveness":[191],"against":[192],"unauthorized":[193,210],"requests":[195],"by":[196],"shows":[200],"how":[201],"framework":[203],"reject":[209],"operations":[211],"real":[213],"time.":[214]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2020,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}
