Detection mechanisms of rule conflicts in SDN based on a path-tree model

The emergence of the SDN architecture greatly promote the development of the current network management, the open programmable characteristics brought unprecedented flexibility for network management. SDN, however, itself also faces many secure challenges. Due to the unconscious flow entries, it is easy to appear forward loops, rule conflicts in the network. In this paper, we propose a rule conflict detection mechanism based on a Path-Tree model. Through the classification of flow entries, the reconstruction of the network topology, we could quickly find conflict rules in networks. Finally, we tested the model in mininet, the results showed that the model can quickly detect policy conflicts in networks.