A first step toward network security virtualization: From concept to prototype

IEEE Transactions on Information Forensics and Security

Volumn 10, Issue 10, 2015, Pages 2236-2249

  Shin, Seungwon ^a   Wang, Haopei ^b   Gu, Guofei ^b  

^a Korea Advanced Institute of Science and Technology (KAIST)   (South Korea)

^b TEXAS A AND M UNIVERSITY   (United States)

Author keywords

Security; Software Defined Networking; Virtualization

Indexed keywords

FUNCTION EVALUATION; SWITCHING CIRCUITS; VIRTUAL REALITY;

CONCEPT-TO-PROTOTYPE; DESIGN AND IMPLEMENTS; NETWORK ADMINISTRATOR; NETWORK SECURITY MANAGEMENT; RESOURCE UTILIZATIONS; SECURITY; SOFTWARE-DEFINED NETWORKINGS; VIRTUALIZATIONS;

NETWORK SECURITY;

EID: 84940688354     PISSN: 15566013     EISSN: None     Source Type: Journal    
DOI: 10.1109/TIFS.2015.2453936     Document Type: Article

References (37)

1. Amazon. Amazon Data Center Size. [Online]. Available: http://huanliu. wordpress.com/2012/03/13/amazon-data-center-size/, accessed Jul. 22, 2015
2. Amazon. Amazon EC2 Security Groups for Linux Instances. [Online]. Available: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/.using-network-security.html, accessed Jul. 22, 2015
3. J. R. Ballard, I. Rae, and A. Akella, "Extensible and scalable network monitoring using OpenSAFE. in Proc. USENIX Internet Netw. Manage. Conf. Res. Enterprise Netw, 2010, p. 8
4. T. Benson, A. Akella, A. Shaikh, and S. Sahu, "CloudNaaS: A cloud networking platform for enterprise applications. in Proc. 2nd ACM Symp. Cloud Comput, 2011, Art. ID 8
5. N. Damianou, N. Dulay, E. Lupu, and M. Sloman, "The ponder policy specification language. in Policies for Distributed Systems and Networks (Lecture Notes in Computer Science). Berlin, Germany: Springer-Verlag, 2001, pp. 18-38
6. ETSI. Network Function virtualization. [Online]. Available: http://portal.etsi.org/NFV/, accessed Jul. 22, 2015
7. S. K. Fayazbakhsh, L. Chiang, V. Sekar, M. Yu, and J. C. Mogul, "Enforcing network-wide policies in the presence of dynamic middlebox actions using FlowTags. in Proc. 11th USENIX Symp. Netw. Syst. Design Implement. (NSDI), 2014, pp. 533-546
8. A. Gember, R. Grandl, J. Khalid, and A. Akella, "Design and implementation of a framework for software-defined middlebox networking. in Proc. ACM SIGCOMM Conf. SIGCOMM, 2013, pp. 467-468
9. G. Gibb, H. Zeng, and N. McKeown, "Outsourcing network functionality. in Proc. ACM SIGCOMM Workshop Hot Topics Softw. Defined Netw. (HotSDN), Aug. 2012, pp. 73-78
10. P. Gill, N. Jain, and N. Nagappan, "Understanding network failures in data centers: Measurement, analysis, and implications. in Proc. ACM SIGCOMM, 2011, pp. 350-361
11. Google. SDN Research at Google. [Online]. Available: http://.research.google.com/pubs/Networking.html, accessed Jul. 22, 2015
12. V. Heorhiadi, V. Sekar, and M. K. Reiter, "New opportunities for load balancing in network-wide intrusion detection systems. in Proc. ACM CoNEXT, 2012, pp. 361-372
13. IETF. OSPF. [Online]. Available: http://tools.ietf.org/html/rfc2328, accessed Jul. 22, 2015
14. Juniper. Juniper Networks: Software Defined Networking. [Online]. Available: http://www.juniper.net/us/en/dm/sdn/, accessed Jul. 22, 2015
15. T. Koponen et al, "Onix: A distributed control platform for largescale production networks. in Proc. Symp. Oper. Syst. Design Implement. (NSDI), Vancouver, BC, Canada, 2010, pp. 1-6
16. D. G. Luenberger and Y. Ye, "Transportation and network flow problems. in Linear and Nonlinear Programming. New York, NY, USA: Springer-Verlag, Nov. 2010
17. N. McKeown, "OpenFlow: Enabling innovation in campus networks. in Proc. ACM SIGCOMM Comput. Commun. Rev, vol. 38, no. 2, pp. 69-74, Apr. 2008
18. Mininet. Rapid Prototyping for Software Defined Networks. [Online]. Available: http://yuba.stanford.edu/foswiki/bin/view/OpenFlow/Mininet/, accessed Jul. 22, 2015
19. M. J. Freedman, M. Yu, J. Rexford, and J. Wang, "Scalable flowbased networking with DIFANE. in Proc. ACM SIGCOMM, Aug. 2010, pp. 351-362
20. N. Foster, M. J. Freedman, R. Harrison, J. Rexford, M. L. Meola, and D. Walker, "Frenetic: A high-level language for OpenFlow networks. in Proc. ACM Workshop Program. Routers Extensible Services Tomorrow (PRESTO), 2010, Art. ID 6
21. A. K. Nayak, A. Reimers, N. Feamster, and R. Clark, "Resonance: Dynamic access control for enterprise networks. in Proc. 1st ACM WREN, 2009, pp. 11-18
22. NetworkComputing. Verizon, Partners Push OpenFlow, SDN. [Online]. Available: http://www.networkcomputing.com/next-gennetwork-Tech-center/232900451, accessed Jul. 22, 2015
23. ON.LAB. Open Networking Operating System. [Online]. Available: http://onosproject.org
24. OpenFlow. Open Networking Foundation. [Online]. Available: https://www.opennetworking.org/sdnresources/openflow
25. Pantou. Pantou: OpenFlow 1.0 for OpenWRT. [Online]. Available: http://archive.openflow.org/wk/index.php/Pantou-:-OpenFlow-1.0-for-OpenWRT
26. P. Porras, S. Shin, V. Yegneswaran, M. Fong, M. Tyson, and G. Gu, "A security enforcement kernel for OpenFlow networks. in Proc. ACM SIGCOMM Workshop Hot Topics Softw. Defined Netw. (HotSDN), Aug. 2012, pp. 121-126
27. POX. POX Controller. [Online]. Available: https://openflow. stanford.edu/display/ONL/POX+Wiki, accessed Jul. 22, 2015
28. Z. A. Qazi, C.-C. Tu, L. Chiang, R. Miao, V. Sekar, and M. Yu, "SIMPLE-fying middlebox policy enforcement using SDN. in Proc. ACM SIGCOMM, 2013, pp. 27-38
29. S. Raza, G. Huang, C.-N. Chuah, S. Seetharaman, and J. P. Singh, "MeasuRouting: A framework for routing assisted traffic monitoring. in Proc. IEEE INFOCOM, Mar. 2010, pp. 1271-1279
30. V. Sekar, R. Krishnaswamy, A. Gupta, and M. K. Reiter, "Networkwide deployment of intrusion detection and prevention systems. in Proc. ACM CoNEXT, 2010, Art. ID 18
31. J. Sherry, S. Hasan, C. Scott, A. Krishnamurthy, S. Ratnasamy, and V. Sekar, "Making middleboxes someone elses problem: Network processing as a cloud service. in Proc. ACM SIGCOMM, 2012, pp. 13-24
32. S. Shin et al, "Rosemary: A robust, secure, and high-performance network operating system. in Proc. 21th ACM Conf. Comput. Commun. Secur. (CCS), 2014, pp. 78-89
33. S. Shin, V. Yegneswaran, P. Porras, and G. Gu, "AVANT-GUARD: Scalable and vigilant switch flow management in software-defined networks. in Proc. 20th ACM Conf. Comput. Commun. Secur. (CCS), 2013, pp. 413-424
34. S. Shin and G. Gu, "CloudWatcher: Network security monitoring using OpenFlow in dynamic cloud networks (or: How to provide security monitoring as a service in clouds?). in Proc. 20th IEEE Int. Conf. Netw. Protocols (ICNP), Oct./Nov. 2012, pp. 1-6
35. S. Shin, P. Porras, V. Yegneswaran, M. Fong, G. Gu, and M. Tyson, "FRESCO: Modular composable security services for software-defined networks. in Proc. 20th Annu. Netw. Distrib. Syst. Secur. Symp. (NDSS), Feb. 2013, pp. 1-16
36. A. Voellmy and P. Hudak, "Nettle: Functional reactive programming of OpenFlow networks. Dept. Comput. Sci, Yale Univ, New Haven, CT, USA, Tech. Rep. RR1431, 2010
37. R. Wang, D. Butnariu, and J. Rexford, "OpenFlow-based server load balancing gone wild. in Proc. 11th Hot-ICE, 2011, p. 12