Multicontroller software-defined networks have been widely adopted to enable management of large-scale networks. However, they are vulnerable to several attacks including false data injection, which creates topology inconsistency among controllers. To deal with this issue, we propose BMC-SDN, a security architecture that integrates blockchain and multicontroller SDN and divides the network into several domains. Each SDN domain is managed by one master controller that communicates through blockchain with the masters of the other domains. The master controller creates blocks of network flow updates, and its redundant controllers validate the new block based on a proposed reputation mechanism. The reputation mechanism rates the controllers, i.e., block creator and voters, after each voting operation using constant and combined adaptive fading reputation strategies. The evaluation results demonstrate a fast and optimal detection of fraudulent flow rule injection.

中文翻译：

---

BMC-SDN：用于安全软件定义网络的基于区块链的多控制器体系结构

多控制器软件定义的网络已被广泛采用，以实现大规模网络的管理。但是，它们容易受到包括虚假数据注入在内的多种攻击的影响，这会在控制器之间造成拓扑不一致。为了解决此问题，我们提出了BMC-SDN，这是一种将区块链和多控制器SDN集成在一起并将网络划分为多个域的安全体系结构。每个SDN域都由一个主控制器管理，该主控制器通过区块链与其他域的主控制器进行通信。主控制器创建网络流更新块，其冗余控制器根据提议的信誉机制验证新块。信誉机制对控制者（即区块创建者和投票者）进行评分，在每次投票操作之后，使用恒定和组合的自适应衰落信誉策略。评估结果表明，可以快速，最佳地检测欺诈性流规则注入。