Blessing or curse? Revisiting security aspects of Software-Defined Networking

Proceedings of the 10th International Conference on Network and Service Management, CNSM 2014

Volumn , Issue , 2014, Pages 382-387

  Schehlmann, Lisa ^a   Abt, Sebastian ^a   Baier, Harald ^a  

^a DARMSTADT UNIVERSITY OF APPLIED SCIENCES   (Germany)

Author keywords

network security; OpenFlow; Software Defined Networking

Indexed keywords

INTRUSION DETECTION; NETWORK ARCHITECTURE; SOFTWARE DEFINED NETWORKING;

EMERGING TECHNOLOGIES; EVALUATION METHODOLOGIES; INTRUSION DETECTION SYSTEMS; OPENFLOW; PHYSICAL SEPARATION; SECURITY FUNCTIONS; SECURITY THREATS; SOFTWARE DEFINED NETWORKING (SDN);

NETWORK SECURITY;

EID: 84922828146     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CNSM.2014.7014199     Document Type: Conference Paper

References (33)

1. Open Networking Foundation, "Software-Defined Networking: The New Norm for Networks, " Open Networking Foundation, ONF White Paper, April 2012.
2. S. Shirali-Shahreza and Y. Ganjali, "Empowering Software Defined Network controller with packet-level information, " in Proceedings of the 2013 IEEE International Conference on Communications Workshops, ser. ICC '13. IEEE Computer Society, June 2013, pp. 1335-1339.
3. S. Shirali-Shahreza and G. Yashar, "Efficient Implementation of Security Applications in OpenFlow Controller with FleXam, " in Proceedings of the 21st Annual Symposium on High-Performance Interconnects, ser. HOTI '13. IEEE Computer Society, August 2013, pp. 49-54.
4. S. Shirali-Shahreza and Y. Ganjali, "FleXam: flexible sampling extension for monitoring and security applications in openflow, " in Proceedings of the Second ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking, ser. HotSDN '13. ACM, August 2013, pp. 167-168.
5. S. Shin, P. Porras, V. Yegneswaran, M. Fong, G. Gu, and M. Tyson, "FRESCO: Modular Composable Security Services for Software-Defined Networks, " in Proceedings of the 20th Annual Network and Distributed System Security Symposium, ser. NDSS '13. The Internet Society, February 2013.
6. S. Shin, P. Porras, V. Yegneswaran, and G. Gu, "A Framework For Integrating Security Services into Software-Defined Networks, " in Proceedings of the 2013 Open Networking Summit (Research Track poster paper), ser. ONS '13, April 2013.
7. K. Benton, L. J. Camp, and C. Small, "OpenFlow Vulnerability Assessment, " in Proceedings of the Second ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking, ser. HotSDN '13. ACM, August 2013, pp. 151-152.
8. D. Kreutz, F. M. Ramos, and P. Verissimo, "Towards Secure and Dependable Software-Defined Networks, " in Proceedings of the Second ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking, ser. HotSDN '13. ACM, August 2013, pp. 55-60.
9. A. Greenberg, G. Hjalmtysson, D. A. Maltz, A. Myers, J. Rexford, G. Xie, H. Yan, J. Zhan, and H. Zhang, "A Clean Slate 4D Approach to Network Control and Management, " SIGCOMM Comput. Commun. Rev., vol. 35, no. 5, pp. 41-54, October 2005.
10. M. Casado, T. Garfinkel, A. Akella, M. J. Freedman, D. Boneh, N. McKeown, and S. Shenker, "SANE: A Protection Architecture for Enterprise Networks, " in Proceedings of the 15th Conference on USENIX Security Symposium-Volume 15, ser. USENIX-SS'06. USENIX Association, July 2006, article No. 10.
11. M. Casado, M. J. Freedman, J. Pettit, J. Luo, N. McKeown, and S. Shenker, "Ethane: Taking Control of the Enterprise, " in Proceedings of the 2007 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications, ser. SIGCOMM '07. ACM, August 2007, pp. 1-12.
12. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner, "OpenFlow: Enabling Innovation in Campus Networks, " SIGCOMM Comput. Commun. Rev., vol. 38, no. 2, pp. 69-74, March 2008.
13. N. Gude, T. Koponen, J. Pettit, B. Pfaff, M. Casado, N. McKeown, and S. Shenker, "NOX: Towards an Operating System for Networks, " SIGCOMM Comput. Commun. Rev., vol. 38, no. 3, pp. 105-110, July 2008.
14. Open Networking Foundation, [Online] URL: http://www. opennetworking. org.
15. -, "OpenFlow Switch Specification, " Open Networking Foundation, ONF Specification Version 1. 4. 0, October 2013.
16. Z. Yan and C. Prehofer, "Autonomic Trust Management for a Component-Based Software System, " IEEE Transactions on Dependable and Secure Computing, vol. 8, no. 6, pp. 810-823, Nov 2011.
17. R. Kloti, V. Kotronis, and P. Smith, "OpenFlow: A Security Analysis, " in Proceedings of the 8th Workshop on Secure Network Protocols (NPSec), part of IEEE ICNP, ser. NPSec '13. IEEE, October 2013.
18. B. Heller, R. Sherwood, and N. McKeown, "The Controller Placement Problem, " in Proceedings of the First Workshop on Hot Topics in Software Defined Networks, ser. HotSDN '12. ACM, August 2012, pp. 7-12.
19. P. Porras, S. Shin, V. Yegneswaran, M. Fong, M. Tyson, and G. Gu, "A Security Enforcement Kernel for OpenFlow Networks, " in Proceedings of the First Workshop on Hot Topics in Software Defined Networks, ser. HotSDN '12. ACM, August 2012, pp. 121-126.
20. Open Networking Foundation, "OpenFlow Gives Malware a Caning, " Open Networking Foundation, Customer Case Study, 2013.
21. Hewlett-Packard Development Company, "Realizing the power of SDN with HP Virtual Application Networks, " Technical White Paper, October 2012.
22. R. Braga, E. Mota, and A. Passito, "Lightweight DDoS Flooding Attack Detection Using NOX/OpenFlow, " in Proceedings of the 2010 IEEE 35th Conference on Local Computer Networks, ser. LCN '10. IEEE Computer Society, October 2010, pp. 408-415.
23. S. Scott-Hayward, G. O'Callaghan, and S. Sezer, "SDN Security: A Survey, " in 2013 IEEE SDN for Future Networks and Services, ser. SDN4FNS'13. IEEE Computer Society, November 2013, pp. 1-7.
24. S. Hartman, M. Wasserman, and D. Zhang, "Security Requirements in the Software Defined Networking Model, " Internet Engineering Task Force, Internet-Draft draft-hartman-sdnsec-requirements-01, April 2013, work in progress.
25. R. Kloti, "OpenFlow: A Security Analysis, " Master's thesis, ETH Zrich, October 2012.
26. S. Sezer, S. Scott-Hayward, and C. Pushpinder Kaur, "Are we ready for SDN? Implementation challenges for software-defined networks, " IEEE Communications Magazine, vol. 51, no. 7, pp. 36-43, July 2013.
27. S. Shin, V. Yegneswaran, P. Porras, and G. Gu, "AVANT-GUARD: Scalable and Vigilant Switch Flow Management in Software-defined Networks, " in Proceedings of the 2013 ACM SIGSAC Conference on Computer &Communications Security, ser. CCS '13. ACM, November 2013, pp. 413-424.
28. X. Wen, Y. Chen, C. Hu, C. Shi, and Y. Wang, "Towards a Secure Controller Platform for OpenFlow Applications, " in Proceedings of the Second ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking, ser. HotSDN '13. ACM, August 2013, pp. 171-172.
29. S. Shin and G. Gu, "CloudWatcher: Network Security Monitoring Using OpenFlow in Dynamic Cloud Networks (or: How to Provide Security Monitoring As a Service in Clouds?), " in Proceedings of the 2012 20th IEEE International Conference on Network Protocols (ICNP), ser. ICNP '12. IEEE Computer Society, October 2012, pp. 1-6.
30. -, "Attacking Software-defined Networks: A First Feasibility Study, " in Proceedings of the Second ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking, ser. HotSDN '13. ACM, August 2013, pp. 165-166.
31. S. Son, S. Shin, V. Yegneswaran, P. Porras, and G. Gu, "Model Checking Invariant Security Properties in OpenFlow, " in Proceedings of IEEE International Conference on Communications, ser. ICC '13. IEEE Computer Society, June 2013, pp. 1974-1979.
32. OpenFlowSec. Org, "SDN Security Suite, " 2013, [Online] URL: http: //www. openflowsec. org/SDNSuite. html.
33. P. Porras, "Toward a More Secure SDN Control Layer SRI Internationals View, " October 2013, [Online] URL: http://goo. gl/bRcgMW.