Security of Software Defined Networks: A survey

Computers and Security

Volumn 53, Issue , 2015, Pages 79-108

  Alsmadi, Izzat ^a   Xu, Dianxiang ^a  

^a Boise State University   (United States)

Author keywords

Network security; Networking; Security; Software defined networking; Software Defined Security

Indexed keywords

ACCESS CONTROL; DENIAL-OF-SERVICE ATTACK; NETWORK ARCHITECTURE; SOFTWARE DEFINED NETWORKING; SURVEYS;

DENIAL OF SERVICE; INFORMATION DISCLOSURE; NETWORK APPLICATIONS; NETWORKING; POLICY MANAGEMENT; SECURITY; SOFTWARE DEFINED NETWORKING (SDN); SOFTWARE ENABLED CONTROLS;

NETWORK SECURITY;

EID: 84934908639     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2015.05.006     Document Type: Article

References (166)

1. Al-Shabibi, Ali. POX Wiki, Stanford University, [Online]. Available: https://openflow.stanford.edu/display/ONL/POX+Wiki, last edited by Murphy McCauley on Aug 11, 2014.
2. Carolyn Jane Anderson, Foster Nate, Guha Arjun, Jeannin Jean-Baptiste, Kozen Dexter, and Schlesinger Cole NetkAT: semantic foundations for networks 2014 POPL 113 126
3. David G. Andersen, Balakrishnan Hari, Nick Feamster, Koponen Teemu, Moon Daekyeong, and Shenker Scott Accountable internet protocol (AIP) SIGCOMM'08 August 17-22, 2008 Seattle, Washington, USA
4. Muhammad Bilal Anwer, M. Motiwala, M. Tariq, and N. Feamster Switchblade: a platform for rapid deployment of network protocols on programmable hardware ACM SIGCOMM Comput Commun Rev 40 4 2010 183 194
5. Christos Argyropoulos, Kalogeras Dimitrios, Androulidakis Georgios, and Maglaris Vasilis PaFloMon - a slice aware passive flow monitoring framework for OpenFlow enabled experimental facilities EWSDN 2012 97 102
6. Olatunde Awobuluyi Periodic control update overheads in openflow-based Enterprise networks IEEE 28th International Conference on Advanced Information Networking and Applications 2014
7. Kapil Bakshi Considerations for software defined networking (SDN): approaches and use cases Aerospace Conference 2013 IEEE 1 9
8. Jeffrey Ballard, Rae Ian, and Akella Aditya Extensible and scalable network monitoring using OpenSAFE Proceedings of the 2010 Internet Net- work Management Conference on Research on Enterprise Networking, ser. INM/WREN'10 2010 USENIX Association Berkeley, CA, USA
9. Md. Faizul Bari, Chowdhury Shihabur Rahman, Ahmed Reaz, and Boutaba Raouf PolicyCop: an autonomic QoS policy enforcement framework for software defined networks Software defined networks for future networks and services (SDN4FNS) 2013
10. John Bellessa, Kroske Evan, Farivar Reza, Montanari Mirko, Larson Kevin, and Campbell Roy NetODESSA: dynamic policy enforcement in cloud networks Proceedings of the 2011 IEEE 30th Symposium on Reliable Distributed Systems Workshops (SRDSW'11) 2011
11. Kevin Benton, Camp Jean, and Small Chris OpenFlow vulnerability assessment Proceedings of the Second ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking 2013 ACM 151 152
12. Roberto Bifulco, and Ghassan Karame Towards a richer set of services in software-defined networks SENT'14 23 February 2014 San Diego, CA, USA
13. Rodrigo Braga, Mota Edjard, and Passito Alexandre Lightweight DDoS flooding attack detection using NOX/OpenFlow Proceedings of the IEEE Conference on Local Computer Networks (LCN), Denver, CO, USA, 11-14 October 2010 2010 408 415
14. Martin Casado, Garfinkel Tal, Akella Aditya, M.J. Freedman, D. Boneh, and McKeown Nick SANE: a protection architecture for enterprise networks Proceedings of the 15th conference on USENIX Security Symposium ser. USENIX-SS'06, Berkeley, CA, USA vol. 15 2006
15. Martin Casado, Freedman Michael, Pettit Justin, Luo Jianying, McKeown Nick, and Shenker Scott Ethane: taking control of the enterprise ACM SIGCOMM Comput Commun Rev 37 4 2007 1 12 ACM
16. Martin Casado, Freedman Michael, Pettit Justin, Luo Jianying, Gude Natasha, and McKeown Nick Rethinking enterprise network control IEEE/ACM transactions on Networking (TON) 17 4 2009 1270 1283 August 2009
17. Taesang Choi, Sejun Song, Hyungbae Park, Sangsik Yoon, and Sunhee Yang SUMA: software-defined unified monitoring agent for SDN 2014 NOMS 1 5
18. Taesang Choi, Kang Saehoon, Yoon Sangsik, Yang Sunhee, Song Sejun, and Park Hyungbae SuVMF: software-defined unified virtual monitoring function for SDN-based large-scale networks 2014 CFI
19. Shihabur Rahman Chowdhury, Md. Faizul Bari, Reaz Ahmed, and Raouf Boutaba PayLess: a low cost network monitoring framework for Software defined Networks 2014 NOMS 1 9
20. YuHunag Chu, Tseng MinChi, Chen YaoTing, Chou YuChie, and Chen YanRen A novel design for future on-demand service and security 12th IEEE International Conference on Communication Technology (ICCT) 2010
21. Chun-Jen Chung, Pankaj Khatkar, Tianyi Xing, Jeongkeun Lee, and Dijiang Huang NICE: network intrusion detection and countermeasure selection in virtual network systems IEEE Trans Dependable Secure Comput - TDSC 10 4 2013
22. Chun-Jen Chung, JingSong Cui, Pankaj Khatkar, and Dijiang Huang Non-intrusive process-based monitoring system to mitigate and prevent VM vulnerability explorations 9th IEEE International Conference on Collaborative Computing Networking Applications and Worksharing (CollaborateCom 2013) 2013
23. Russ Clark, Nick Feamster, Ankur Nayak, and Alex Reimers Pushing Enterprise security down the network Stack GT-CS-09-03 2009 Georgia Institute of Technology Tech. Rep
24. Andrew Curtis, Jeffrey Mogul, Jean Tourrilhes, Praveen Yalagandula, Puneet Sharma, and Sujata Banerjee DevoFlow: scaling flow management for high-performance networks SIGCOMM Comput Commun Rev 41 4 2011 254 265
25. Andrew Curtis, W. Kim, and P. Yalagandula Mahout: low-overhead datacenter traf C management using end-host-based elephant detection IEEE INFOCOM'11 2011
26. Vainius Dangovas, and Feliksas Kuliesius SDN-driven authentication and access control system The International Conference on Digital Information, Networking, and Wireless Communications (DINWC) 2014 20 23
27. C. DeCusatis, M. Haley, T. Bundy, R. Cannistra, R. Wallner, and J. Parraga Dynamic, software-defined service provider network infrastructure and cloud drivers for SDN adoption IEEE International Conference on Communications 2013: IEEE ICC'13-2nd Workshop on Clouds 2013 Networks and Data Centers
28. C. Dillon, and Michael Berkelaar OpenFlow (D)DoS mitigation Technical report February 9, 2014 http://www.delaat.net/rp/2013-2014/p42/report.pdf
29. Aaron Yi Ding, Crowcroft Jon, Tarkoma Sasu, and Flinck Hannu Software defined networking for security enhancement in wireless Mobile networks Elsevier computer networks (COMNET) vol. 66 2014
30. ® networks 2013 CableLabs
31. Jeremy Dover A denial of service attack against the open floodlight SDN controller Dec 2013 Dover Networks LLC Research report
32. Adrian Duncan, Sadie Creese, and Michael Goldsmith Insider attacks in cloud computing TrustCom 2012
33. Seyed Fayaz, and Sekar Vyas Testing stateful and dynamic data planes with FlowTest HotSDN'14 August 22, 2014 Chicago, IL, USA
34. Seyed Fayaz, Vyas Sekar, M. Yu, and J. Mogul FlowTags: enforcing network-wide policies in the presence of dynamic middlebox actions Proceedings of the Second Workshop on Hot Topics in Software Defined Networks 2013 ACM
35. Nick Feamster, Balakrishnan Hari, Rexford Jennifer, Shaikh Aman, and Jacobus van der Merwe The case for separating routing from routers Proceedings of the ACM SIGCOMM Workshop on Future Directions in Network Architecture, ser. FDNA'04 2004 ACM New York, NY, USA 5 12
36. Nick Feamster, Ankur Nayak, Hyojoon Kim, Russel Clark, Yogesh Mundada, and Anirudh Ramachandran Decoupling policy from configuration in campus and enterprise networks Local and Metropolitan Area Networks (LANMAN), 17th IEEE Workshop on 2010 IEEE
37. Nick Feamster, Rexford Jennifer, and Zegura Ellen The road to SDN: an intellectual history of programmable networks Technical Report 2013 Princeton University Princeton, NJ, USA
38. Feamster Nick, Rexford Jennifer, Shenker Scott, Clark Russel, Hutchins Ron, Levin Dave, et al. SDX: a software-defined internet exchange, ONS '13 research track, Apr. 2013b.
39. Tao Feng, Jun Bi, Hongyu Hu, Guang Yao, and Peiyao Xiao InSAVO: Intra-AS IP source address validation solution with OpenRouter INFOCOM2012 2012
40. Yifu Feng, Wang Dongqi, and Zhang Bencheng Research on the active DDoS filtering algorithm based on IP flow 2009 Fifth International Conference on Natural Computation 2009 IEEE 628 632
41. Andrew Ferguson, Guha Arjun, Liang Chen, Fonseca Rodrigo, and Krishnamurthi Shriram Hierarchical policies for software defined networks Proceedings of the First Workshop on Hot Topics in Software Defined Networks, ser. HotSDN'12 2012 ACM New York, NY, USA 37 42
42. Nate Foster, Harrison Rob, Freedman Michael, Monsanto Christopher, Rexford Jennifer, and Story Alec Frenetic: a network programming language ICFP Sep 2011
43. Nate Foster, Guha Arjun, Reitblatt Mark, Story Alec, Freedman Michael, and Katta Naga Praveen Languages for software-defined networks IEEE Commun Mag 51 2 2013 128 134
44. Dennis Gamayunov, Ivan Platonov, and Ruslan Smeliansky Toward network access control with software-defined networking SDNFW 2013
45. Aaron Gember, Robert Grandl, Khalid Junaid, and Shan-Hsiang Shen Towards software-defined middlebox networking HotNets'12 2012
46. Aaron Gember, Robert Grandl, Khalid Junaid, and Aditya Akella Design and implementation of a framework for software-defined middlebox networking SIGCOMM 2013 467 468
47. Gibb Gibb, Zeng Hongyi, and McKeown Nick Outsourcing network functionality Proceedings of the First Workshop on Hot Topics in Software Defined Networks, ser. HotSDN'12 2012 ACM New York, NY, USA 73 78
48. K. Giotis, C. Argyropoulos, G. Androulidakis, D. Kalogeras, and V. Maglaris Combining OpenFlow and sFlow for an effective and scalable Anomaly detection and mitigation mechanism on SDN Environments Comput Netw 62 2014 122 136
49. Andrew Goodney, Shailesh Narayan, Vivek Bhandwalkar, and Young Cho Pattern based packet filtering using NetFPGA in DETER infrastructure 1st Asia NetFPGA developers workshop; Daejeon, Korea June 14, 2010
50. Natasha Gude, Teemu Koponen, Justin Pettit, Ben Pfaff, Martin Casado, and Nick McKeown NOX: towards an operating system for networks Comput Commun Rev 38 3 2008 105 110
51. Georg Hampel, Moritz Steiner, and Tian Bu Applying software-defined networking to the telecom domain Proceedings of the 16th IEEE Global Internet Symposium in Conjunction with IEEE Infocom, Turin, Italy April 2013
52. Ryan Hand, Ton Michael, and Keller Eric Active security Twelfth ACM Workshop on Hot Topics in Networks (HotNets-XII), College Park, MD November 2013
53. Jin He, Dong Mianxiong, Ota Kaoru, Fan Mingyu, and Wang Guangwei NetSecCC: a scalable and fault-tolerant architecture without outsourcing cloud network security 2014 CoRR abs/1405.0660
54. Victor Heorhiadi, Michael Reiter, and Vyas Sekar New opportunities for load balancing in network-wide intrusion detection systems CoNEXT 2012 361 372
55. Timothy Hinrichs, Gude Natasha, Casado Martin, Mitchel John, and Shenker Scott Expressing and enforcing flow-based network security policies Technical report 2008 University of Chicago
56. Timothy Hinrichs, Gude Natasha, Casado Martin, Mitchel John, and Shenker Scott Practical declarative network management Proceedings of the 1st ACM Workshop on Research on Enterprise Networking, WREN '09 2009 ACM New York, NY, USA 1 10
57. Michael Howard, and David LeBlanc Writing secure code 2001 Microsoft Press Redmond, WA
58. HP Ballarat Grammar secures BYOD with HP Software defined network and Sentinel SDN security application 2013 http://h17007.www1.hp.com/docs/byod/Ballarat%20Grammar%20v9.pdf
59. Hu Hongxin, Han Wonkyu, Ahn Gail-Joon and Zhao Ziming. FlowGuard: building robust firewalls for software-defined networks, HotSDN'14, August 22, 2014a, Chicago, IL, USA.
60. Hongxin Hu, Ahn Gail-Joon, Han Wonkyu, and Zhao Ziming Towards a reliable SDN firewall 2014 ONS
61. Guanyao Huang, Chen-Nee Chuah, Saqib Raza, and Srini Seetharaman Dynamic measurement-aware routing in practice Netw IEEE 25 3 2011 29 34
62. Wun-Yuan Huang, Jen-Wei Hu, Ta-Yuan Chou, and Te-Lung Liu Design and implementation of real-time flow viewer across different domains Advanced Information Networking and Applications Workshops (WAINA), 27th International Conference on 2013 619 624
63. Wun-Yuan Huang, Ta-Yuan Chou, Jen-Wei Hu, and Te-Lung Liu Automatical end to end topology discovery and flow viewer on SDN 28th International Conference on Advanced Information Networking and Applications Workshops 2014
64. Gaëtan Hurel, Badonnel Rémi, Lahmadi Abdelkader, and Festor Olivier Outsourcing Mobile security in the cloud Lect Notes Comput Sci 8508 2014 69 73
65. ISO Information processing systems - open systems interconnection - basic reference model - part 2: security architecture 1989 ISO 7498-1
66. Jafar Haadi Jafarian, Al-Shaer Ehab, and Duan Qi Openflow random host mutation: transparent moving target defense using software defined networking Proceedings of the ACM Workshop on Hot Topics in Software Defined Networks (HotSDN), Helsinki, Finland 13-17 August 2012 127 132
67. Sushant Jain, Kumar Alok, Mandal Subhasree, Ong Joon, Poutievski Leon, and Singh Arjun B4: experience with a globally-deployed software defined WAN Proceedings of the ACM SIGCOMM Conference on Applications, Technologies, Architectures, and Protocols for Computer Communication, Hong Kong, China 13-17 August 2013 3 14
68. Xinpei Jia, and J. Wang Distributed firewall for P2P network in data center ICCE-China Workshop (ICCE-China) 2013 IEEE 15 19
69. Lavanya Jose, Minlan Yu, and Jennifer Rexford Online measurement of large traffic aggregates on commodity switches Proc. of the USENIX HotICE Workshop 2011
70. Yutaka Juba, Huang Hung-Hsuan, and Kawagoe Kyoji Dynamic isolation of network devices using OpenFlow for keeping LAN secure from intra-LAN attack 17th International Conference in Knowledge Based and Intelligent Information and Engineering Systems - KES2013 Procedia Computer Science 22 2013 810 819
71. Joon-Myung Kang, Bannazadeh Hadi, Rahimi Hesam, Lin Thomas, Faraji Mohammad, and Leon-Garcia Alberto IEEE International Conference on Communications Workshops (ICC) 9-13 June 2013 Software-Defined Infrastructure and the Future Central Office
72. Panos Kampanakis, Harry Perros, and Tsegereda Beyene SDN-based solutions for moving target defense network protection IEEE SDN Architecture and Applications June 16, 2014 Australia Sydney
73. Ghassan Karame Towards trustworthy network measurements TRUST 2013 83 91
74. Vasileios Kotronis, Dominik Schatzmann, and Bernhard Ager On Bringing Private Traf C into Public SDN Testbeds HotSDN'13 August 16, 2013 Hong Kong, China
75. Naga Praven Katta, Rexford Jennifer, and Walker David Logic programming for software-defined networks ACM SIGPLAN Workshop on Cross- Model Language Design and mplementation, ser. XLDI 2012
76. Peyman Kazemian, Michael Chang, Hongyi Zeng, George Varghese, Nick McKeown, and Scott Whyte Real time network policy checking using header space analysis 2013 NSDI
77. Sean Michael Kerner OpenFlow can provide security, too May 14, 2012 http://www.enterprisenetworkingplanet.com/datacenter/openflow-can-provide-security-too.html
78. Hassan Khan, Sayed Khayam, Leana Golubchik, M. Rajarajan, and Orr Michael Wirespeed, Privacy-preserving P2P traffic detection on commodity switches 2013 SPS
79. Hyojoon Kim, and Nick Feamster Improving network management with software defined networking Commun Mag IEEE 51 2 2013 114 119
80. Shunichi Kinoshita, Watanabe Toshiki, Yamato Junichi, Goto Hideaki, and Sone Hideaki Implementation and evaluation of an OpenFlow-based access control system for wireless LAN roaming Computer Software and Applications Conference Workshops (COMPSACW), IEEE 36th Annual 2012 IEEE 82 87
81. Janusz Kleban, Bruyere Marc, Richard G. Clegg, Raul Landa, Danilewicz Grzegorz, and Kleban Janusz Abstraction layer for implementation of extensions in programmable networks, collaborative project co-funded by the European commission within the seventh framework Programme 2013
82. Rowan Kloeti, Kotronis Vasileios, and Smith Paul OpenFlow: a security analysis Proceedings of the 8th Workshop on Secure Network Protocols (NPSec), Part of IEEE ICNP, Göttingen, German October 2013
83. Teemu Koponen, Shenker Scott, Balakrishnan Hari, Feamster Nick, Ganichev Igor, and Ghodsi Ali Architecting for innovation Comput Commun Rev 41 3 2011 24 36
84. Andreas Kopsel, and Hagen Woesner OFELIA - Pan-European test facility for OpenFlow experimentation ServiceWave 2011 311 312
85. Dave Kordalewski, and Robert Robere A dynamic algorithm for loop detection in software defined networks Technical report Fall 2012
86. Diego Kreutz, Ramos Fernando, and Verissimo Paulo Towards secure and dependable software-defined networks Proceedings of the second ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking 2013 ACM 55 60 HotSDN'13, August 16, Hong Kong, China
87. Madhusanka Liyanage, Mika Ylianttila, and Andrei Gurtov Securing the control channel of software-defined mobile networks Proc. of 1st IEEE WoWMoM Workshop on Software Defined Networking Architecture and Applications. Sydney, Australia June 2014
88. Erran Li, Mao Morley, and Rexford Jennifer Toward software-defined cellular networks Software Defined Networking (EWSDN), 2012 European Workshop on 2012 7 12
89. Dawei Li, Xiaoyan Hong, and Bowman Jason Evaluation of security vulnerabilities by using ProtoGENI as a launchpad Dec. 2011 IEEE Globecom Houston, USA
90. Jon Matias, Tornero Borja, Mendiola Alaitz, Eduardo Jacob, and Toledo Nerea Implementing layer 2 network virtualization using OpenFlow: challenges and solutions European Workshop on Software Defined Networking 2012
91. Nick McKeown, Tom Anderson, Hari Balakrishnan, Guru Parulkar, Larry Peterson, and Jennifer Rexford Openow: enabling innovation in campus networks ACM SIGCOMM Comput Commun Rev 38 2 2008 p.69 p.74
92. Sayed Akbar Mehdi, Junaid Khalid, and Khayam Sayed Ali Revisiting traffic anomaly detection using software defined networking Recent advances in intrusion detection 2011 Springer 161 180
93. Marc Mendonca, S. Seetharaman, and K. Obraczka A flexible in-network IP anonymization service The IEEE ICC Workshop on Software Defined Networks 2012
94. Christopher Meyer, and Jörg Schwenk Lessons learned from previous SSL/TLS attacks - a brief chronology of attacks and weaknesses IACR Cryptology ePrint Archive 2013
95. Christopher Monsanto, Nate Foster, Rob Harrison, and David Walker A compiler and run-time system for network programming languages Principles of Programming Languages (POPL) 2012
96. Igor Moraes, Mattos Diogo, Ferraz Lyno, Campista Elias, Rubinstein Marcelo, and Costa Luís FITS: a flexible virtual network testbed architecture Comput Netw 63 2014 221 237
97. Yogesh Mundada, Rob Sherwood, and Nick Feamster An openflow switch element for click, in symposium on click modular Router 2009 Citeseer
98. Radhika Mysore, George Porter, and Amin Vahdat FasTrak: enabling express lanes in multi-tenant data CoNEXT'13 December 9-12, 2013 Santa Barbara, California, USA
99. Zubair Nabi, and Atif Alvi Clome: the practical implications of a cloud-based smart Home 2014 CoRR abs/1405.0047
100. Suneth Namal, Ijaz Ahmad, Andrei Gurtov, and Mika Ylianttila Enabling secure mobility with OpenFlow Proc. IEEE software defined networks for future networks and services (SDN4FNS) November 11-13, 2013 Trento, Italy
101. Jad Naous, Stutsman Ryan, Mazieres David, McKeown Nick, and Zeldovich Nickolai Delegating network security with more information Proceedings of the 1st ACM Workshop on Research on Enterprise Networking, ser. WREN'09 2009 ACM New York, NY, USA 19 26
102. Ankur Nayak, Alex Reimers, Nick Feamster, and Russ Clark Resonance: inference-based dynamic access control for enterprise networks Proceedings of the Workshop on Research on Enterprise Networking (WREN), Barcelona, Spain 21 August 2009 11 18
103. Vladimir Olteanu, and Costin Raiciu Efficiently migrating stateful middleboxes SIGCOMM'12 August 13-17, 2012 Helsinki, Finland
104. Othman Othman, and Koji Okamura Securing distributed control of software defined networks IJCSNS Int J Comput Sci Netw Secur 13 9 September 2013
105. Heng Pan, Hongtao Guan, Junjie Liu, Wanfu Ding, Chengyong Lin, and Gaogang Xie FlowAdapter: enable flexible multi-table processing on legacy hardware 2013 HotSDN 85 90
106. Nancy Paterson End user privacy and policy-based networking J information Policy 4 2014 28 43
107. Kostas Pentikousis, Yan Wang, and Weihua Hu MobileFlow: toward software- defined mobile networks Commun Mag IEEE 51 7 2013 44 53
108. Lucian Popa, Minlan Yu, Steven Ion Stoica, and Ratnasamy Sylvia CloudPolice: taking access control out of the network Proceedings of the 9th ACM Workshop on Hot Topics in Networks (HotNets) 2010
109. Phillip Porras, Seungwon Shin, Yegneswaran Vinod, Fong Martin, Tyson Mabry, and Gu Guofei A security enforcement Kernel for OpenFlow networks HOTSDN 2012
110. Phillip Porras, Seungwon Shin, Yegneswaran Vinod, Fong Martin, Tyson Mabry, and Gu Guofei A framework for enabling security controls in OpenFlow networks 2012 ACM
111. Zafar Qazi, Tu Cheng-Chun, Chiang Luis, Miao Rui, Sekar Vyas, and Yu Minlan SIMPLE-fying middlebox policy enforcement using SDN ACM SIGCOMM August 2013
112. Anirudh Ramachandran, Yogesh Mundada, Tariq Mukarram Bin, and Nick Feamster Securing enterprise networks using traffic tainting Technical Report GTCS-09-15 2009 Georgia Institute of Technology Atlanta, GA Tech. Rep
113. Jeff Rasley, Brent Stephens, Colin Dixon, Eric Rozner, Wes Felter, and Kanak Agarwal Low-latency network monitoring via oversubscribed port mirroring 2014 ONS
114. Daniel Raumer, Lukas Schwaighofer, and George Carle MonSamp: a distributed SDN application for QoS monitoring 1st Workshop on Software-defined Networking (SDN'14), Warsaw, Poland 2014
115. Thomas Ristenpart, Eran Tromer, Hovav Shacham, and Stefan Savage Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds Proc 2009 ACM CCS 199 212
116. Christian Esteve Rothenberg, Marcelo Ribeiro Nascimento, Marcos Rogerio Salvador, Carlos Correa, Sidney de Lucena, and Robert Raszuk Revisiting routing control platforms with the eyes and muscles of software-defined networking HotSDN 2012
117. Lisa Schehlmann, and Baier Harald COFFEE: a concept based on OpenFlow to filter and erase events of botnet activity at high-speed nodes INFORMATIK 2013
118. Julius Schulz-Zander, Sarrar Nadi, and Schmid Stefan AeroFlux: a near-Sighted controller architecture for software-defined wireless networks 2014 ONS
119. Divjyot Sethi, Srinivas Narayana, and Sharad Malik Abstractions for model checking sdn controllers FMCAD 2013
120. Justine Sherry, Hasan Shaddi, Scott Colin, Krishnamurthy Arvind, Ratnasamy Sylvia, and Sekar Vyas Making middleboxes someone Else's problem: network processing as a cloud service Proceedings of the ACM SIGCOMM 2012 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communication 2012
121. Seungwon Shin, Phillip Porras, Vinod Yegneswaran, Martin Fong, Guofei Gu, and Mabry Tyson FRESCO: modular composable security services for software-defined networks NDSS 2013
122. Seungwon Shin, and Guofei Gu Cloudwatcher: network security monitoring using OpenFlow in dynamic cloud networks (or: How to provide security monitoring as a service in clouds?) Proceedings of the 20th IEEE International Conference on Network Protocols (ICNP), ser. ICNP'12. Washington, DC, USA 2012 IEEE Computer Society 1 6
123. Seungwon Shin, Vinod Yegneswaran, Phillip Porras, and Guofei Gu Avant-guard: scalable and vigilant switch flow management in software-defined networks Proceedings of the ACM Conference on Computer and Communications Security, ser. CCS'13 2013 ACM
124. Seungwon Shin, and Guofei Gu Attacking software defined networks: a first feasibility study Proceedings of the Second ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking 2013 165 166
125. Shirali-Shahreza and Ganjali Sajad Yashar. Efficient implementation of security applications in OpenFlow controller with FleXam, HotSDN'13, August 16, 2013a, Hong Kong, China.
126. Shirali-Shahreza, Ganjali Sajad Yashar. FleXam: flexible sampling extension for monitoring and security applications in OpenFlow, HotSDN'13, August 16, 2013b, Hong Kong, China.
127. Christos Siaterlis, and Marcelo Masera A review of available software for the creation of testbeds for internet security research International Conference on Advances in System Simulation - SIMUL 2009
128. Skowyra Rick, Bahargam Sanaz, Bestavros Azer. Software-defined IDS for securing embedded Mobile devices. In: Proceedings of HPEC'13: The IEEE high Performance Extreme Computing Conference, Waltham, MA, September 2013a.
129. Skowyra Rick, Lapets Andrei, Bestavros Azer, Kfoury Assaf. Verifiably-safe software-defined networks for CPS. In: Proceedings of HiCoNS'13: The ACM International Conference on High Confidence Networked Systems. Philadelphia, Pennsylvania: CPS week; May 2013b.
130. Yozo Shoji, Ito Manabu, Nakauchi Kiyohide, Zhong Lei, Kitatsuji Yoshinori, and Yokota Hidetoshi Mobility management in the networks of the future world IEEE Consumer Communications and Networking Conference (CCNC 2014) 2014
131. Sooel Son, Seungwon Shin, Vinod Yegneswaran, Phllip Porras, and Guofei Gu Model checking invariant security properties in OpenFlow IEEE International Conference on Communications (ICC), Budapest, Hungary June, 2013
132. Haoyu Song Protocol oblivious forwarding: unleash the power of SDN through a future-proof forwarding plane Proceedings of HotSDN 2013
133. Anna Sperotto, Gregor Schaffrath, Ramin Sadre, Cristian Morariu, Aiko Pras, and Burkhard Stiller An overview of IP flow-based intrusion detection IEEE Commun Surv TUTORIALS 12 3 2010 THIRD QUARTER
134. William Stallings Software-defined networks and OpenFlow Internet Protoc J 16 1 2013
135. Radu Stoenescu, Matei Popovici, Lorina Negreanu, and Costin Raiciu SymNet: static checking for stateful networks HotMiddlebox'13 December 9, 2013 Santa Barbara, CA, USA
136. Junho Suh, Hoon-gyu Choi, Wonjun Yoon, Taewan Ted You, Taekyoung Kwon, and Yanghee Choi Implementation of content-oriented networking architecture (CONA): a focus on DDoS countermeasure Proc of 1st European NetFPGA Developers Workshop, Cambridge, UK Sep. 2010
137. Michelle Suh, Sae Hyong Park, Byungjoon Lee, and Sunhee Yang Building firewall over the software-defined network controller February 16∼19, ICACT2014 2014
138. Peng Sun, Minlan Yu, J. Freedman Michael, Jennifer Rexford, and David Walker HONE: joint host-network traffic management in software-defined networks J Netw Syst Manag (JNSM) 23 2 April 2015 374 399
139. Marc Suñé, Leonardo Bergesio, Hagen Woesner, Tom Rothe, Andreas Köpsel, Didier Colle, Bart Puype, Dimitra Simeonidou, Reza Nejabati, Mayur Channegowda, Mario Kind, Thomas Dietz, Achim Autenrieth, Vasileios Kotronis, Elio Salvadori, Stefano Salsano, Marc Körner, and Sachin Sharma Design and implementation of the OFELIA FP7 facility: The European OpenFlow testbed Comput Netw 61 2010 132 150
140. Lalith Suresh, Schulz-Zander Julius, Merz Ruben, Feldmann Anja, and Vazao Teresa Towards programmable Enterprise WLANs with Odin Proc. HotSDN 2012 Helsinki, Finland
141. Christoph Thuemmler, Julius Müller, Stefan Covaci, Thomas Magedanz, Stefano De Panfilis, and Thomas Jell Applying the software-to-data paradigm in next generation e-health hybrid clouds 2013 ITNG 459 463
142. Laurent Vanbever, and Vissicchio Stefano Enabling SDN in old school networks with software-controlled Routing Protocols Open network Summit (Research track). Santa Clara, CA, USA March 2014
143. Laurent Vanbever, Joshua Reich, Theophilus Benson, Nate Foster, and Jennifer Rexford HotSwap: correct and efficient controller upgrades for software-defined networks ACM SIGCOMM HotSDN 2013 Workshop. Hong Kong, China August 2013
144. Andreas Voellmy, Hyujoon Kim, and Nick Feamster Procera: a language for high-level reactive network control Proceedings of the 1st Workshop on hot topics in software defined networks August 2012 43 48
145. Andreas Voellmy, Ashish Agarwal, Paul Hudak, Nick Feamster, Sam Burnett, and John Launchbury Don't configure the network, program it!, Domainspecific programming languages for network systems Tech. Rep. YALEU/DCS/RR-1432 July 2010 Yale University
146. Andreas Voellmy, and Hudak Paul Nettle: functional reactive programming of OpenFlow networks PADL Jan 2011
147. Haopei Wang, Lei Xu, and Guofei Gu Of-guard: a DoS attack prevention extension in software-defined networks 2014 ONS
148. Juan Wang, Wang Yong, Hu Hongxin, Sun Qingxin, Shi He, and Zeng Longjie Towards a security-enhanced firewall application for OpenFlow networks 2013 CSS 92 103
149. Xiang Wang, Zhi Liu, Yaxuan Qi, and Jun Li LiveCloud: A Lucid Orchestrator for Cloud Datacenters 2012 IEEE 4th International Conference on Cloud Computing Technology and Science 2012
150. Xitao Wen, Yan Chen, Chengchen Hu, Chao Shi, and Yi Wang HotSDN, towards a secure controller platform for openflow applications HotSDN 2013
151. Yong-juan Wu, Jun-xue Liang, Hua Zhang, Zhao-wen Lin, Ma Yan, and Tian Zhong Programmable virtual network instantiation in IaaS cloud based on SDN J China Universities Posts Telecommun 20 Suppl 1 2013 121 125
152. Peiyao Xiao, Bi Jun, and Feng Tao O-CPF: an OpenFlow based intra-AS source address validation application CFI'13, June 05 - 07 2013 Beijing, China
153. Tianyi Xing, Dijiang Huang, Le Xu, Chun-Jen Chung, and Pankaj Khatkar SnortFlow: a openflow-based intrusion prevention system in cloud environment Second GENI Research and Educational Experiment Workshop 2013
154. Yashuiro Yamasaki, Yoshinori Miyamoto, Junichi Yamato, Goto Hideaki, and Sone Hideaki Flexible access management system for campus VLAN based on OpenFlow Applications and the Internet (SAINT), 2011 IEEE/IPSJ 11th International Symposium on 2011 IEEE 347 351
155. Guang Yao, Jun Bi, and Peiyao Xiao Source address validation solution with OpenFlow/NOX architecture Proceedings of the IEEE International Conference on Network Protocols (ICNP), Vancouver, BC, Canada 17-20 October 2011 7 12
156. Guang Yao, Jun Bi, Feng Tao, Peiyao Xiao, and Zhou Duanqi Performing software defined route-based IP spoofing filtering with SEFA ICCCN2014 2014
157. Kok-Kiong Yap, Rob Sherwood, Masayoshi Kobayashi, Te Huang, Michael Chan, and Nikhil Handigol Blueprint for introducing innovation into wireless mobile networks Proceedings of the Second ACM SIGCOMM Workshop on Virtualized Infrastructure Systems and Architectures 2010 25 32
158. Kok-Kiong Yap, Masayoshi Kobayashi, David Underhill, Srinivasan Seetharaman, Peyman Kazemian, and Nick McKeown The Stanford OpenRoads deployment WiNTECH'09: Proceedings of the Fourth ACM International Workshop on Wireless Network Testbeds, Experimental Evaluation and Characterization 2009 ACM
159. Kok-Kiong Yap, Yiannis Yiakoumis, Masayoshi Kobayashi, Sachin Katti, Guru Parulkar, and Nick McKeown Separating authentication, access and accounting: a case study with OpenWiFi 2011 Open Networking Foundation Tech. Rep
160. Curtis Yu, Cristian Lumezanu, Yueping Zhang, Vishal Singh, Guofei Jiang, and Harsha Madhyastha FlowSense: monitoring network utilization with zero measurement cost Passive and active measurement 2013 Springer 31 41
161. Chu YuHunag, Min-Chi Tseng, YaoTing Cen, YuChieh Chou, and YanRen Chen A novel design for future on-demand service and security Proceedings of the International Conference on Communication Technology (ICCT), Nanjing, China 11-14 November 2010 385 388
162. Tamihiro Yuzawa OpenFlow 1.0 actual use-case: RTBH of DDoS traffic while keeping the target 2013 Online http://packetpushers.net/openflow-1-0-actual-use-case-rtbh-of-ddos-traffic-while-keeping-the-target-online
163. Adel Zaalouk, Khondoker Rahamatullah, Marx Ronald, and Bayarou Kpatcha OrchSec: an orchestrator-based architecture for enhancing network-security using Network Monitoring and SDN control functions NOMS 2014 1 9
164. Shuyuan Zhang, Vanbever Laurent, and Malik Sharad In-band update for network routing policy migration IEEE ICNP 2014 (Concise papers track). Raleigh, North Carolina, USA October 2014
165. Yinqian Zhang, Ari Juels, Michael K. Reiter, and Thomas Ristenpart Cross-VM side channels and their use to extract private keys ACM Conference on Computer and Communications Security 2012 305 316
166. Shuyong Zhu, Jun Bi, and Chen Sun SFA: stateful forwarding abstraction in SDN data plane USENIX/Open Networking Summit Research Track (ONS14), Santa Clara, USA 2014