VeriCon: Towards verifying controller programs in software-defined networks

Proceedings of the ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)

Volumn , Issue , 2014, Pages 282-293

  Ball, Thomas ^a   Bjørner, Nikolaj ^a   Gember, Aaron ^b   Itzhaky, Shachar ^c   Karbyshev, Aleksandr ^d   Sagiv, Mooly ^c   Schapira, Michael ^e   Valadarsky, Asaf ^e  

^a MICROSOFT RESEARCH   (United States)

^b UNIVERSITY OF WISCONSIN MADISON   (United States)

^c TEL AVIV UNIVERSITY   (Israel)

^d TECHNICAL UNIVERSITY OF MUNICH   (Germany)

^e HEBREW UNIVERSITY OF JERUSALEM   (Israel)

Author keywords

Hoare style verification; Software defined networks

Indexed keywords

APPLICATION PROGRAMS; COMPUTATION THEORY; COMPUTER PROGRAMMING LANGUAGES; CONTROLLERS; ELECTRIC NETWORK TOPOLOGY;

ACCESS CONTROL POLICIES; CONTROL OVER NETWORKS; CONTROLLER PROGRAMS; DEDUCTIVE VERIFICATION; FINITE-STATE MODELS; NETWORK OPERATING SYSTEM; SOFTWARE-DEFINED NETWORKINGS; SOFTWARE-DEFINED NETWORKS;

PROGRAM DEBUGGING;

EID: 84901611022     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2594291.2594317     Document Type: Conference Paper

References (25)

1. OpenFlow Switch Specification, Oct. 2013. Version 1.4.0.
2. ANDERSON, C. J., FOSTER, N., GUHA, A., JEANNIN, J.-B., KOZEN, D., SCHLESINGER, C., AND WALKER, D. NetKAT: Semantic foundations for networks. In POPL (2014), S. Jagannathan and P. Sewell, Eds., ACM, pp. 113-126.
3. CANINI, M., VENZANO, D., PERES, P., KOSTIC, D., AND REXFORD, J. A NICE Way to Test OpenFlow Applications. In NSDI (2012).
4. DE MOURA, L. M., AND BJØRNER, N. Z3: An Efficient SMT Solver. In TACAS (2008), C. R. Ramakrishnan and J. Rehof, Eds., vol. 4963 of Lecture Notes in Computer Science, Springer, pp. 337-340.
5. DIJKSTRA, E.W. Guarded commands, nondeterminacy and formal derivation of programs. Commun. ACM 18, 8 (1975), 453-457.
6. FOSTER, N., GUHA, A., REITBLATT, M., STORY, A., FREEDMAN, M. J., KATTA, N. P., MONSANTO, C., REICH, J., REXFORD, J., SCHLESINGER, C., WALKER, D., AND HARRISON, R. Languages for software-defined networks. IEEE Communications Magazine 51, 2 (2013), 128-134.
7. FRADE, M., AND PINTO, J. Verification conditions for source-level imperative programs. Computer Science Review 5, 3 (2011), 252-277.
8. GEMBER, A., KRISHNAMURTHY, A., JOHN, S. S., GRANDL, R., GAO, X., ANAND, A., BENSON, T., AKELLA, A., AND SEKAR, V. Stratos: A Network-Aware Orchestration Layer for Middleboxes in the Cloud. Tech. Rep. arXiv:1305.0209, 2013.
9. GODEFROID, P., KLARLUND, N., AND SEN, K. DART: directed automated random testing. In PLDI (2005), pp. 213-223.
10. GUHA, A., REITBLATT, M., AND FOSTER, N. Machine-verified network controllers. In PLDI (2013), pp. 483-494.
11. JAIN, S., KUMAR, A., MANDAL, S., ONG, J., POUTIEVSKI, L., SINGH, A., VENKATA, S., WANDERER, J., ZHOU, J., ZHU, M., ZOLLA, J., HÖLZLE, U., STUART, S., AND VAHDAT, A. B4: Experience with a Globally-deployed Software Defined WAN. In ACM SIGCOMM (2013), pp. 3-14.
12. KATTA, N. P., REXFORD, J., AND WALKER, D. Logic programming for software-defined networks. In ACM SIGPLAN Workshop on Crossmodel Language Design and Implementation (Sept. 2012).
13. KAZEMIAN, P., CHANG, M., ZENG, H., VARGHESE, G., MCKEOWN, N., AND WHYTE, S. Real Time Network Policy Checking using Header Space Analysis. In 10th USENIX Symposium on Networked Systems Design and Implementation (NSDI '13) (2013).
14. KAZEMIAN, P., VARGHESE, G., AND MCKEOWN, N. Header Space Analysis: Static Checking For Networks. In 9th USENIX Symposium on Networked Systems Design and Implementation (NSDI '12) (2012).
15. KHURSHID, A., ZHOU, W., CAESAR, M., AND GODFREY, B. Veriflow: verifying network-wide invariants in real time. Computer Communication Review 42, 4 (2012), 467-472.
16. KOPONEN, T., AMIDON, K., BALLAND, P., CASADO, M., CHANDA, A., FULTON, B., GANICHEV, I., GROSS, J., GUDE, N., INGRAM, P., JACKSON, E., LAMBETH, A., LENGLET, R., LI, S.-H., PADMANABHAN, A., PETTIT, J., PFAFF, B., RAMANATHAN, R., SHENKER, S., SHIEH, A., STRIBLING, J., THAKKAR, P., WENDLANDT, D., YIP, A., AND ZHANG, R. Network virtualization in multi-tenant datacenters. In 11th USENIX Symposium on Networked Systems Design and Implementation (NSDI '14) (2014).
17. KUZNIAR, M., PERESINI, P., CANINI, M., VENZANO, D., AND KOSTIC, D. A SOFT Way for OpenFlow Switch Interoperability Testing. In CoNEXT (2012), pp. 265-276.
18. MCCARTHY, J. Towards a mathematical science of computation. In IFIP Congress (1962), pp. 21-28.
19. NAYAK, A. K., REIMERS, A., FEAMSTER, N., AND CLARK, R. Resonance: Dynamic Access Control for Enterprise Networks. In Proceedings of the 1st ACM Workshop on Research on Enterprise Networking (WREN '09) (2009), pp. 11-18.
20. NELSON, T., FERGUSON, A. D., SCHEER, M. J. G., AND KRISHNAMURTHI, S. A balance of power: Expressive, analyzable controller programming. In 11th USENIX Symposium on Networked Systems Design and Implementation (NSDI '14) (2014).
21. QAZI, Z. A., TU, C.-C., MIAO, R., SEKAR, V., AND YU, M. SIMPLE-fying Middlebox Policy Enforcement Using SDN. In ACM SIGCOMM (2013), pp. 27-38.
22. REITBLATT, M., FOSTER, N., REXFORD, J., SCHLESINGER, C., AND WALKER, D. Abstractions for network update. In ACM SIGCOMM (2012), pp. 323-334.
23. SETHI, D., NARAYANA, S., AND MALIK, S. Abstractions for model checking sdn controllers. In FMCAD (2013).
24. SKOWYRA, R., LAPETS, A., BESTAVROS, A., AND KFOURY, A. A verification platform for sdn-enabled applications. In HiCoNS (2013).
25. VOELLMY, A., WANG, J., YANG, Y. R., FORD, B., AND HUDAK, P. Maple: simplifying SDN programming using algorithmic policies. In ACM SIGCOMM (2013), pp. 87-98.