FLOWGUARD: Building robust firewalls for software-defined networks

HotSDN 2014 - Proceedings of the ACM SIGCOMM 2014 Workshop on Hot Topics in Software Defined Networking

Volumn , Issue , 2014, Pages 97-102

  Hu, Hongxin ^a   Han, Wonkyu ^b   Ahn, Gail Joon ^b   Zhao, Ziming ^b  

^a CLEMSON UNIVERSITY   (United States)

^b ARIZONA STATE UNIVERSITY   (United States)

Author keywords

firewalls; openflow; security; software defined networking

Indexed keywords

EID: 84907014880     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2620728.2620749     Document Type: Conference Paper

References (26)

1. Floodlight: Open SDN Controller. http://www.projectfloodlight.org.
2. Frenetic: A Family of Network Programming Languages. http://frenetic- lang.org/.
3. Header Space Library. https://bitbucket.org/peymank/hassel-public.
4. E. Al-Shaer and H. Hamed. Discovery of policy anomalies in distributed firewalls. In INFOCOM'04.
5. G. Bianchi, M. Bonola, A. Capone, and C. Cascone. OpenState: programming platform-independent stateful openflow applications inside the switch. ACM SIGCOMM Computer Communication Review, 2014.
6. B. Braga, M. Mota, P. Passito, et al. Lightweight DDoS flooding attack detection using NOX/OpenFlow. In LCN'10.
7. S. K. Fayazbakhsh, L. Chiang, V. Sekar, M. Yu, and J. C. Mogul. Enforcing network-wide policies in the presence of dynamic middlebox actions using flowtags. In NSDI'14.
8. H. Hu, G.-J. Ahn, and K. Kulkarni. FAME: a firewall anomaly management environment. In SafeConfig'10.
9. H. Hu, G.-J. Ahn, and K. Kulkarni. Detecting and resolving firewall policy anomalies. IEEE Transactions on Dependable and Secure Computing, 9(3):318-331, 2012.
10. S. Ioannidis, A. D. Keromytis, S. M. Bellovin, and J. M. Smith. Implementing a distributed firewall. In CCS'00.
11. P. Kazemian, M. Chang, H. Zeng, G. Varghese, N. McKeown, and S. Whyte. Real time network policy checking using header space analysis. In NSDI'13.
12. P. Kazemian, G. Varghese, and N. McKeown. Header space analysis: static checking for networks. In NSDI'12.
13. A. Khurshid, X. Zou, W. Zhou, M. Caesar, and P. B. Godfrey. Veriflow: verifying network-wide invariants in real time. In NSDI'13.
14. D. Kreutz, F. Ramos, and P. Verissimo. Towards secure and dependable software-defined networks. In HotSDN'13.
15. H. Mai, A. Khurshid, R. Agarwal, M. Caesar, P. Godfrey, and S. T. King. Debugging the data plane with anteater. In SIGCOMM'11.
16. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner. Openflow: enabling innovation in campus networks. ACM SIGCOMM Computer Communication Review, 2008.
17. S. A. Mehdi, J. Khalid, and S. A. Khayam. Revisiting traffic anomaly detection using software defined networking. In RAID'11.
18. C. Monsanto, J. Reich, N. Foster, J. Rexford, and D. Walker. Composing software-defined networks. In NSDI'13.
19. P. Porras, S. Shin, V. Yegneswaran, M. Fong, M. Tyson, and G. Gu. A security enforcement kernel for openflow networks. In HotSDN'12.
20. M. Reitblatt, N. Foster, J. Rexford, C. Schlesinger, and D. Walker. Abstractions for network update. In SIGCOMM'12.
21. E. E. Schultz. A framework for understanding and predicting insider attacks. Computers & Security, 21(6):526-531, 2002.
22. S. Shin, V. Yegneswaran, P. Porras, and G. Gu. Avant-guard: scalable and vigilant switch flow management in software-defined networks. In CCS'13.
23. S. Shirali-Shahreza and Y. Ganjali. Flexam: Flexible sampling extension for monitoring and security applications in openflow. In HotSDN'13.
24. R. Stoenescu, M. Popovici, L. Negreanu, and C. Raiciu. Symnet: static checking for stateful networks. In HotMiddlebox'13.
25. J. Wang, Y. Wang, H. Hu, Q. Sun, H. Shi, and L. Zeng. Towards a security-enhanced firewall application for openflow networks. In Cyberspace Safety and Security, 2013.
26. L. Yuan, H. Chen, J. Mai, C. Chuah, Z. Su, P. Mohapatra, and C. Davis. Fireman: A toolkit for firewall modeling and analysis. In 2006 IEEE Symposium on Security and Privacy.