OpenFlow: A security analysis

Proceedings - International Conference on Network Protocols, ICNP

Volumn , Issue , 2013, Pages

  Klöti, Rowan ^a   Kotronis, Vasileios ^a   Smith, Paul ^b  

^a ETH ZURICH   (Switzerland)

^b AIT AUSTRIAN INSTITUTE OF TECHNOLOGY   (Austria)

Author keywords

[No Author keywords available]

Indexed keywords

SECURITY SYSTEMS;

ANALYSIS AND EVALUATION; DECOUPLING NETWORK; NETWORK TESTBEDS; OPENFLOW NETWORKS; PRODUCTION NETWORK; PROGRAMMABILITY; SECURITY ANALYSIS; SOFTWARE DEFINED NETWORKING (SDN);

NETWORK PROTOCOLS;

EID: 84896744708     PISSN: 10921648     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICNP.2013.6733671     Document Type: Conference Paper

References (24)

1. NOXRepo.org, "NOX," http://www.noxrepo.org/.
2. N. McKeown et al., "OpenFlow: enabling innovation in campus networks," SIGCOMM CCR, Mar. 2008.
3. "Open Networking Foundation," https://www.opennetworking.org/.
4. U. Hoelzle, "OpenFlow@Google," http://opennetsummit.org/ archives/apr12/hoelzle-tue-openflow.pdf.
5. "Open Networking Summit," http://www.opennetsummit.org/.
6. "SDNCentral Exclusive: SDN Market Expected to Reach $35B by 2018," http://www.sdncentral.com/sdn-blog/sdn-market-sizing/2013/04/.
7. "SDN applications," http://searchsdn.techtarget.com/resources/ SDN-applications.
8. P. Porras et al., "A security enforcement kernel for OpenFlow networks," in Proc. of HotSDN, 2012.
9. A. Khurshid et al., "VeriFlow: verifying network-wide invariants in real time," in Proc. of HotSDN, 2012.
10. "Security Analysis of the ONF OpenFlow Switch Specification," http://tools.ietf.org/html/draft-mrw-sdnsec-openflow-analysis-02.
11. S. Hernan et al., "Uncover Security Design Flaws Using The STRIDE Approach," http://msdn.microsoft.com/en-gb/magazine/cc163519.aspx, 2006.
12. V. Saini et al., "Threat modeling using attack trees," J. Comput. Sci. Coll., Apr. 2008.
13. "Open vSwitch," http://openvswitch.org/.
14. NOXRepo.org, "About POX," http://www.noxrepo.org/pox/about-pox/ .
15. "Mininet," http://mininet.github.com/.
16. Rowan Klöti, "OpenFlow: A Security Analysis. MSc thesis, D-ITET, ETH Zurich," ftp://ftp.tik.ee.ethz.ch/pub/students/2012-HS/MA-2012- 20.pdf, 2013.
17. P. Khand, "System level security modeling using attack trees," in Proc. of the 2nd Intl. Conf. on Computer, Control and Communication, 2009.
18. N. Handigol et al., "Reproducible network experiments using containerbased emulation," in Proc. of ACM CoNEXT, 2012.
19. R. Sherwood et al., "Carving research slices out of your production networks with OpenFlow," SIGCOMM CCR, Jan. 2010.
20. G. Thatte et al., "Parametric methods for anomaly detection in aggregate traffic," IEEE/ACM Trans. Netw., Apr. 2011.
21. J. Cheng et al., "DDoS attack detection method based on linear prediction model," in Proc. of ISIC, 2009.
22. J. H. Jafarian et al., "Openflow random host mutation: transparent moving target defense using software defined networking," in Proc. of HotSDN, 2012.
23. R. Braga et al., "Lightweight DDoS flooding attack detection using NOX/OpenFlow," in Proc. of IEEE LCN, 2010.
24. "OpenFlowSec.org," http://www.openflowsec.org/.