Towards a security-enhanced firewall application for openflow networks

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 8300 LNCS, Issue , 2013, Pages 92-103

  Wang, Juan ^a,b   Wang, Yong ^a   Hu, Hongxin ^c   Sun, Qingxin ^a   Shi, He ^a   Zeng, Longjie ^a  

^a WUHAN UNIVERSITY   (China)

^b BEIJING UNIVERSITY OF POSTS AND TELECOMMUNICATIONS   (China)

^c DELAWARE STATE UNIVERSITY   (United States)

Author keywords

Firewall; Openflow; SDN; Security

Indexed keywords

EID: 84894196540     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-319-03584-0_8     Document Type: Conference Paper

References (18)

1. Porras, P., Shin, S., Yegneswaran, V., Fong, M.: A Security Enforcement Kernel for OpenFlow Networks. In: Proc. of HotSDN 2012, pp. 123-125 (2012)
2. Wen, X., Chen, Y., Hu, C., Shi, C.: Towards a Secure Controller Platform for OpenFlow. In: Proc. of HotSDN 2013 (2013)
3. Kreutz, D., Ramos, F., Verissimo, P.: Towards secure and dependable software-defined networks. In: Proc. of HotSDN 2013 (2013)
4. Son, S., Shin, S., Yegneswaran, V., Porras, P.: Model Checking Invariant Security Properties in OpenFlow. In: Proc. of ICC 2013, pp. 2-6 (2013)
5. Kazemian, P., Varghese, G., McKeown, N.: Header Space Analysis: Static Checking For Networks. In: Proceedings of the Symposium on Network Systems Design and Implementation (NSDI), pp. 3-5 (2012)
6. Kazemian, P., Chang, M., Zeng, H.: Real Time Network Policy Checking using Header Space Analysis. In: Proceedings of the Symposium on Network Systems Design and Implementation (NSDI), pp. 4-6 (2013)
7. Tootoonchian, A., Gorbunov, S., Ganjali, Y., Casado, M., Sherwood, R.: On controller performance in software-defined networks. In: Proceedings of the 2nd USENIX Workshop on Hot Topics in Management of Internet, Cloud, and Enterprise Networks and Services (Hot-ICE), pp. 4-6 (2012)
8. Al-shaer, E., Marrero, W., El-atawy, A., Elbadawi, K.: Network Configuration in A Box: Towards End-to-End Verification of Network Reachability and Security. In: Proceedings of the IEEE International Conference on Network Protocols, pp. 125-127 (2009)
9. Canini, M., Venzano, D., Peresini, P., Kostic, D., Rexford, J.: A NICE Way to Test OpenFlow Applications. In: Proceedings of the Symposium on Network Systems Design and Implementation, pp. 3-5 (2012)
10. Cai, Z., Cox, A.L., Ng, T.E.: Maestro: A System for Scalable OpenFlow Control. In: Rice University Technical Report, pp. 2-3 (2010)
11. Liu, A.: Formal Verification of Firewall Policies. In: Proceedings of the International Conference on Communications (ICC), pp. 1495-1497 (2008)
12. OpenFlow. OpenFlow 1.1.0 Specification, http://www.openflow.org/ documents/openflow-spec-v1.1.0.pdf
13. OpenFlowHub. BEACON, www.openflowhub.org/display/Beacon
14. Sanfilippo, S.: HPing home page, http://www.hping.org
15. FloodLight, http://www.projectfloodlight.org/documentation/
16. Kanizo, Y., Hay, D., Keslassy, I.: Palette: Distributing Tables in Software-Defined Networks. In: Technical Report, pp. 1-3 (2012)
17. Clean Slate, http://cleanslate.stanford.edu/
18. Mininet: An Instant Virtual Network on your Laptop (or other PC), http://mininet.org//