A security enforcement kernel for OpenFlow networks

HotSDN'12 - Proceedings of the 1st ACM International Workshop on Hot Topics in Software Defined Networks

Volumn , Issue , 2012, Pages 121-126

  Porras, Philip ^a   Shin, Seungwon ^b   Yegneswaran, Vinod ^a   Fong, Martin ^a   Tyson, Mabry ^a   Gu, Guofei ^b  

^a SRI INTERNATIONAL   (United States)

^b TEXAS A AND M UNIVERSITY   (United States)

Author keywords

openflow; policy enforcement; security

Indexed keywords

ANALYSIS ALGORITHMS; COMPUTING FLOWS; CRITICAL CHALLENGES; EFFICIENT DETECTION; FLOW RULES; INNOVATIVE SOLUTIONS; NETWORK CONTROL; OPEN INNOVATION; OPENFLOW; POLICY ENFORCEMENT; PROGRAMMABLE NETWORK; PROTOTYPE IMPLEMENTATIONS; REAL TIME; ROLE-BASED; SECURITY; SECURITY APPLICATION; SECURITY CHALLENGES; SECURITY CONSTRAINT; SECURITY ENFORCEMENT;

PROGRAMMED CONTROL SYSTEMS;

NETWORK LAYERS;

EID: 84866518191     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2342441.2342466     Document Type: Conference Paper

References (23)

1. E. Al-Shaer and S. Al-Haj. FlowChecker: Configuration Analysis and Verification of Federated Openflow Infrastructures. In Proceedings of the 3rd ACM SafeConfig Workshop, 2010.
2. E. Al-shaer, W. Marrero, A. El-atawy, and K. Elbadawi. Network Configuration in A Box: Towards End-to-End Verification of Network Reachability and Security. In Proceedings of the IEEE International Conference on Network Protocols, 2009.
3. Z. Cai, A. L. Cox, and T. E. Ng. Maestro: A System for Scalable OpenFlow Control. In Rice University Technical Report, 2010.
4. M. Canini, D. Venzano, P. Peresini, D. Kostic, and J. Rexford. A NICE Way to Test OpenFlow Applications. In Proceedings of the Symposium on Network Systems Design and Implementation, 2012.
5. M. Casado, M. J. Freedman, J. Pettit, J. Luo, N. McKeown, and S. Shenker. Ethane: Taking Control of the Enterprise. In Proceedings of ACM SIGCOMM, 2007.
6. M. Casado, T. Garfinkel, M. Freedman, A. Akella, D. Boneh, N. McKeowon, and S. Shenker. SANE: A Protection Architecture for Enterprise Networks. In Proceedings of the Usenix Security Symposium, 2006.
7. A. El-atawy, T. Samak, Z. Wali, E. Al-shaer, F. Lin, C. Pham, and S. Li. An Automated Framework for Validating Firewall Policy Enforcement. Technical report, 2007.
8. N. Feamster and H. Balakrishnan. Detecting BGP Configuration Faults with Static Analysis. In Proceedings of theUsenix Symposium on Network Systems Design and Implementation, 2005.
9. A. Greenberg, G. Hjalmtysson, D. A. Maltz, A. Myers, J. Rexford, G. Xie, H. Yan, J. Zhan, and H. Zhang. A Clean Slate 4D Approach to Network Control and Management. In Proceedings of ACM Computer Communications Review, 2005.
10. N. Gude, T. Koponen, J. Pettit, B. Pfaff, M. Casado, N. McKeown, and S. Shenker. NOX: Towards an Operating System for Networks. In Proceedings of ACM Computer Communications Review, July 2008.
11. P. Kazemian, G. Varghese, and N. McKeown. Header Space Analysis: Static Checking for Networks. In Proceedings of the Symposium on Network Systems Design and Implementation, 2012.
12. A. Khurshid, W. Zhou, M. Caesar, and P. B. Godfrey. VeriFlow: Verifying Network-Wide Invariants in Real Time. In Proceedings of ACM Sigcomm HotSDN Workshop, 2012.
13. A. Liu. Formal Verification of Firewall Policies. In Proceedings of the International Conference on Communications (ICC), 2008.
14. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner. OpenFlow: Enabling Innovation in Campus Networks. In Proceedings of ACM Computer Communications Review, April 2008.
15. J. C. Mogul, J. Tourrilhes, P. Yalagandula, P. Sharma, A. R. Curtis, and S. Banerjee. DevoFlow: Cost-effective Flow Management for High Performance Enterprise Networks. In Proceedings of the 10th ACM Workshop on Hot Topics in Networks (HotNets), 2010.
16. A. Nayak, A. Reimers, N. Feamster, and R. Clark. Resonance: Dynamic Access Control for Enterprise Networks. In Proceedings of the 1st ACM SIGCOMM WREN Workshop, 2009.
17. OpenFlow. OpenFlow 1.1.0 Specification. http://www.openflow.org/ documents/openflow-spec-v1.1.0.pdf.
18. OpenFlowHub. BEACON. http://www.openflowhub.org/display/Beacon.
19. M. Reitblatt, N. Foster, J. Rexford, and D. Walker. Consistent Update for Software-Defined Networks: Change You Can Believe In! In Proceedings of the ACM Workshop on Hot Topics in Networks, 2011.
20. S. Sanfilippo. HPing home page. http://www.hping.org.
21. D. Senn, D. Basin, and G. Caronni. Firewall Conformance Testing. In Proceedings of the IFIP TestCom, 2005.
22. R. Sherwood, G. Gibb, K.-K. Yap, G. Appenzeller, M. Casado, N. McKeown, and G. Parulkar. Can the Production Network Be the Testbed. In Proceedings of the Usenix Symposium on Operating System Design and Implementation (OSDI), 2010.
23. G. Xie, J. Zhan, D. Maltz, H. Zhang, A. Greenberg, G. Hjalmtysson, and J. Rexford. On Static Reachability Analysis of IP Networks. In Proceeding of IEEE INFOCOM, 2005.