AVANT-GUARD: Scalable and vigilant switch flow management in software-defined networks

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2013, Pages 413-424

  Shin, Seungwon ^a   Yegneswaran, Vinod ^b   Porras, Phillip ^b   Gu, Guofei ^a  

^a TEXAS A AND M UNIVERSITY   (United States)

^b SRI INTERNATIONAL   (United States)

Author keywords

control plane saturation attack; openflow; security and resilience; software defined network (sdn)

Indexed keywords

CONNECTION MIGRATION; OPENFLOW; REFERENCE IMPLEMENTATION; SATURATION ATTACKS; SECURITY AND RESILIENCE; SECURITY CHALLENGES; SOFTWARE DEFINED NETWORKING (SDN); SOFTWARE-DEFINED NETWORKS;

SECURITY OF DATA;

EID: 84889062725     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2508859.2516684     Document Type: Conference Paper

References (30)

1. K. Benton, L. J. Camp, and C. Small. Openflow vulnerability assessment. In Proceedings of the second ACM SIGCOMM workshop on Hot topics in software defined networking (HotSDN), 2013.
2. D. J. Bernstein. SYN Cookies. http://cr.yp.to/syncookies.html.
3. R. S. Braga, E. Mota, and A. Passito. Lightweight DDoS Flooding Attack Detection Using NOX/OpenFlow. In Proceedings of the 35th Annual IEEE Conference on Local Computer Networks (LCN), 2010.
4. M. Casado, M. J. Freedman, J. Pettit, J. Luo, N. McKeown, and S. Shenker. Ethane: Taking Control of the Enterprise. In Proceedings of ACM SIGCOMM, 2007.
5. M. Casado, T. Garfinkel, M. Freedman, A. Akella, D. Boneh, N. McKeowon, and S. Shenker. SANE: A Protection Architecture for Enterprise Networks. In Proceedings of the Usenix Security Symposium, August 2006.
6. Cisco. Cisco Guard Anomaly Detector. http://www.cisco.com/en/US/prod/ collateral/modules/ps2706/ps6235/produc%t-data-sheet0900aecd80220a7c.html.
7. A. Curtis, J. Mogul, J. Tourrilhes, P. Yalagandula, P. Sharma, and S. Banerjee. DevoFlow: Scaling Flow Management for High-Performance Networks. In Proceedings of ACM SIGCOMM, 2011.
8. A. Greenberg, G. Hjalmtysson, D. A. Maltz, A. Myers, J. Rexford, G. Xie, H. Yan, J. Zhan, and H. Zhang. A Clean Slate 4D Approach to Network Control and Management. In Proceedings of ACM Computer Communications Review, 2005.
9. G. Gu, Z. Chen, P. Porras, and W. Lee. Misleading and Defeating Importance-Scanning Malware Propagation. In Proceedings of International Conference on Security and Privacy in Communication Networks (SecureComm), 2007.
10. J. H. Jafarian, E. Al-Shaer, and Q. Duan. Openflow Random Host Mutation: Transparent Moving Target Defense using Software Defined Networking. In Proceedings of the 1st ACM Workshop on Hot Topics in Software Defined Networks (HotSDN), 2012.
11. P. C. Jeffrey C. Mogul. Hey, You Darned Counters! Get Off My ASIC! In Proceedings of the 1st ACM Workshop on Hot Topics in Software Defined Networks (HotSDN), 2012.
12. Juniper. Junos Security Configuration. http://www.juniper.net/us/en/ productsservices/nos/junos/.
13. T. Koponen, M. Casado, N. Gude, J. Stribling, L. Poutievski, M. Zhu, R. Ramanathan, Y. Iwata, H. Inoue, T. Hama, and S. Shenker. Onix: A Distributed Control Platform for Large-scale Production Networks. In Proceedings of the Symposium on Operating Systems Design and Implementation (OSDI), 2010.
14. D. Kreutz, F. M. Ramos, and P. Verissimo. Towards Secure and Dependable Software-Defined Networks. In Proceedings of the second ACM SIGCOMM workshop on Hot Topics in Software Defined Networking (HotSDN), 2013.
15. G. Lu, R. Miao, Y. Xiong, and C. Guo. Using CPU as a Traffic Co-processing Unit in Commodity Switches. In Proceedings of the 1st ACM Workshop on Hot Topics in Software Defined Networks (HotSDN), 2012.
16. A. Mahimka, J. Dange, V. Shmatikov, H. Vin, and Y. Zhang. dFence: Transparent Network-based Denial of Service Mitigation. In Proceedings of the Symposium on Networked Systems Design and Implementation (NSDI), 2007.
17. S. Mehdi, J. Khalid, and S. Khayam. Revisiting Traffic Anomaly Detection Using Software Defined Networking. In Recent Advances in Intrusion Detection (RAID), 2011.
18. J. Naous, D. Erickson, G. A. Covington, G. Appenzeller, and N. McKeown. Implementing an OpenFlow switch on the NetFPGA Platform. In Proceedings of the 4th ACM/IEEE Symposium on Architectures for Networking and Communications Systems (ANCS), 2008.
19. Open Networking Foundation. Software-Defined Networking: The New Norm for Networks. Technical report, 2012. https://www.opennetworking.org/images/ stories/downloads/whitepapers/wp%-sdn-newnorm.pdf.
20. OpenFlow. OpenFlow Switch Specification version 1.0.0. Technical report, 2010. http://www.openflow.org/documents/openflow-spec-v1.0.0.pdf.
21. OpenFlow.org. OpenFlow Switching Reference System. http://www.openflow. org/wp/downloads/.
22. L. Popa, M. Yu, S. Y. Ko, I. Stoica, and S. Ratnasamy. CloudPolice: Taking Access Control out of the Network. In Proceedings of the 9th ACM Workshop on Hot Topics in Networks (HotNets), 2010.
23. POX. Python Network Controller. http://www.noxrepo.org/pox/about-pox/.
24. N. Security. http://nmap.org/.
25. S. Shin and G. Gu. CloudWatcher: Network Security Monitoring Using OpenFlow in Dynamic Cloud Networks (or: How to Provide Security Monitoring as a Service in Clouds?). In Proceedings of the 7th Workshop on NPSec, 2012.
26. S. Shin, P. Porras, V. Yegneswaran, M. Fong, G. Gu, and M. Tyson. FRESCO: Modular Composable Security Services for Software-Defined Networks. In Proceedings of the 20th Annual Network and Distributed System Security Symposium (NDSS), 2013.
27. A. Tootoonchian and Y. Ganjali. HyperFlow: A Distributed Control Plane for OpenFlow. In Proceedings of the Internet Network Management Workshop/Workshop on Research on Enterprise Networking (INM/WREN), 2010.
28. X. Wen, Y. Chen, C. Hu, C. Shi, and Y. Wang. Towards a secure controller platform for openflow applications. In Proceedings of the second ACM SIGCOMM workshop on Hot topics in software defined networking (HotSDN), 2013.
29. M. Yu, J. Rexford, M. J. Freedman, and J. Wang. Scalable Flow-based Networking with DIFANE. In Proceedings of ACM SIGCOMM, 2010.
30. T. S. E. N. Zheng Cai, Alan L. Cox. Maestro: Balancing Fairness, Latency and Throughput in the OpenFlow Control Plane. Rice University Technical Report TR11-07.