Security analysis of security applications for software defined networks

Asian Internet Engineering Conference, AINTEC 2014

Volumn , Issue , 2014, Pages 23-30

  Tasch, Markus ^a   Khondoker, Rahamatullah ^b   Marx, Ronald ^b   Bayarou, Kpatcha ^b  

^a DARMSTADT UNIVERSITY OF TECHNOLOGY   (Germany)

^b FRAUNHOFER INSTITUTE FOR SECURE INFORMATION TECHNOLOGY SIT   (Germany)

Author keywords

Open flow; OpenFlow Random host mutation; Resonance; Software defined networking (SDN); STRIDE

Indexed keywords

APPLICATION PROGRAMS; NETWORK ARCHITECTURE; RESONANCE; SOFTWARE DEFINED NETWORKING;

CENTRALIZED CONTROLLERS; OPEN FLOW; REAL TIME; SECURITY ANALYSIS; SECURITY APPLICATION; SECURITY MECHANISM; SOFTWARE DEFINED NETWORKING (SDN); STRIDE;

NETWORK SECURITY;

EID: 84921494885     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2684793.2684797     Document Type: Conference Paper

References (15)

1. Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE). http://www.cert.org/resilience/productsservices/octave/index.cfm. accessed: 21.06.2014.
2. R. Arends, R. Austein, D. Larson, M. Massey, and S. Rose. RFC 4033: DNS Security Introduction and Requirements. http://tools.ietf.org/rfc/rfc4033.txt, March 2005. accessed: 21.06.2014.
3. M. Brandt, R. Khondoker, R. Marx, and K. Bayarou. Security Analysis of Software Defined Networking Protocols-OpenFlow, OF-Config and OVSDB. In The 2014 IEEE Fifth International Conference on Communications and Electronics (ICCE 2014), DA NANG, Vietnam, July 2014.
4. T. Dierks and E. Rescorla. RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2. http://tools.ietf.org/html/rfc5246 August 2008. accessed: 21.06.2014.
5. S. Hernan, S. Lambert, T. Ostwald, and A. Shostack. Uncover Security Design Flaws Using The STRIDE Approach. http://msdn.microsoft.com/enus/magazine/cc163519.aspx, Nov. 2006. accessed: 21.06.2014.
6. M. Howard and D. E. Leblanc. Writing Secure Code. Microsoft Press, Redmond, WA, USA, 2nd edition, 2002.
7. J. H. Jafarian, E. Al-Shaer, and Q. Duan. Openflow Random Host Mutation: Transparent Moving Target Defense Using Software Defined Networking. In Proceedings of the First Workshop on Hot Topics in Software Defined Networks, HotSDN '12, pages 127-132, New York, NY, USA, 2012. ACM.
8. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner. OpenFlow: Enabling Innovation in Campus Networks. SIGCOMM Comput. Commun. Rev., 38(2):69-74, Mar. 2008.
9. A. K. Nayak, A. Reimers, N. Feamster, and R. Clark. Resonance: Dynamic Access Control for Enterprise Networks. In Proceedings of the 1st ACM Workshop on Research on Enterprise Networking, WREN '09, pages 11-18, New York, NY, USA, 2009. ACM.
10. Open Networking Foundation. OpenFlow Switch Specification version 1.4. https://www.opennetworking.org/images/stories/downloads/sdn-resources/onf-specifications/openflow/openflow-spec-v1.4.0.pdf, October 2013. accessed: 21.06.2014.
11. P. Porras, S. Shin, V. Yegneswaran, M. Fong, M. Tyson, and G. Gu. A Security Enforcement Kernel for OpenFlow Networks. In Proceedings of the First Workshop on Hot Topics in Software Defined Networks, HotSDN '12, pages 121-126, New York, NY, USA, 2012. ACM.
12. P. Saitta, B. Larcom, and M. Eddington. Trike v.1 methodology document [draft]. http://octotrike.org/, 2005. accessed: 21.06.2014.
13. S. Scott-Hayward, G. O'Callaghan, and S. Sezer. Sdn security: A survey. In 2013 IEEE SDN for Future Networks and Services (SDN4FNS), pages 1-7, Nov 2013.
14. S. Shin, P. A. Porras, V. Yegneswaran, M. W. Fong, G. Gu, and M. Tyson. FRESCO: Modular Composable Security Services for Software-Defined Networks. In NDSS. The Internet Society, 2013.
15. Y. Wang, Y. Zhang, V. Singh, C. Lumezanu, and G. Jiang. NetFuse: Short-circuiting traffic surges in the cloud. In 2013 IEEE International Conference on Communications (ICC), pages 3514-3518, June 2013.