FlowTags: Enforcing network-wide policies in the presence of dynamic middlebox actions

HotSDN 2013 - Proceedings of the 2013 ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking

Volumn , Issue , 2013, Pages 19-24

  Fayazbakhsh, Seyed Kaveh ^a   Sekar, Vyas ^a   Yu, Minlan ^b   Mogul, Jeffrey C ^c  

^a STONY BROOK UNIVERSITY   (United States)

^b Dept of Physics   (United States)

^c GOOGLE INC   (United States)

Author keywords

Middlebox; Network policy enforcement

Indexed keywords

APPLICATION SCENARIO; DYNAMIC TRAFFIC; MIDDLEBOXES; NETWORK INFRASTRUCTURE; NETWORK POLICY; PERFORMANCE DIAGNOSTICS; POLICY ENFORCEMENT; SECURITY AND PERFORMANCE;

EID: 84883696109     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2491185.2491203     Document Type: Conference Paper

References (20)

1. 2012 Cloud Networking Report. http://www.webtorials.com/content/2012/11/ 2012-cloud-networking-report.html.
2. ONF Expands Scope; Drives Technical Work Forward. https://www. opennetworking.org/media/press-releases/564-onf-expands-scope-drives-technical- work-forward.
3. A. Greenlagh et al. Flow Processing and the Rise of Commodity Network Hardware. ACM CCR, Apr. 2009.
4. S. Amante, B. Carpenter, S. Jiang, and J. Rajahalme. IPv6 Flow Label Update. http://rmv6tf.org/wp-content/uploads/2012/11/rmv6tf-flow-label11.pdf.
5. R. Fonseca, G. M. Porter, R. H. Katz, S. Shenker, and I. Stoica. IP options are not an option. Technical Report UCB/EECS-2005-24, EECS Department, University of California, Berkeley, Dec 2005.
6. A. Gember et al. Stratos: Virtual Middleboxes as First-Class Entities. UW-Madison TR1771, 2012.
7. A. Gember, P Prabhu, Z. Ghadiyali, and A. Akella. Toward software-defined middlebox networking. In Proc. HotNets-XI, 2012.
8. D. A. Joseph, A. Tavakoli, and I. Stoica. A Policy-aware Switching Layer for Data Centers. In Proc. SIGCOMM, 2008.
9. P. Kazemian, G. Varghese, and N. McKeown. Header space analysis: static checking for networks. In Proc. NSDI, 2012.
10. A. Khurshid, W. Zhou, M. Caesar, and P. B. Godfrey. Veriflow: verifying network-wide invariants in real time. In Proc. NSDI, 2013.
11. M. Honda et al. Is it still possible to extend TCP? In Proc. IMC, 2011.
12. N. McKeown. Mind the Gap: SIGCOMM'12 Keynote. http://www.youtube.com/ watch?v=Ho239zpKMwQ.
13. C. Monsanto, N. Foster, R. Harrison, and D. Walker. A compiler and run-time system for network programming languages. In Proc. POPL, 2012.
14. Y. Mundada et al. Practical Data-Leak Prevention for Legacy Applications in Enterprise Networks. http://hdl.handle.net/1853/36612.
15. J. Newsome and D. Song. Dynamic Taint Analysis for Automatic Detection, Analysis, and Signature Generation of Exploits on Commodity Software. In Proc. NDSS, 2005.
16. V. Paxson. Bro: A system for detecting network intruders in real-time. In Computer Networks, pages 2435-2463, 1999.
17. Z. Qazi, C. Tu, L. Chiang, R. Miao, and M. Yu. SIMPLE-fying Middlebox Policy Enforcement Using SDN. In Proc. SIGCOMM, 2013.
18. V. Sekar et al. Network-wide deployment of intrusion detection and prevention systems. In Proc. CoNext, 2010.
19. V. Sekar et al. Design and implementation of a consolidated middlebox architecture. In Proc. NSDI, 2012.
20. J. Sherry et al. Making Middleboxes Someone Else's Problem: Network Processing as a Cloud Service. In Proc. SIGCOMM, 2012.