Leveraging software-defined networking for security policy enforcement

Information Sciences

Volumn 327, Issue , 2016, Pages 288-299

  Liu, Jiaqiang ^a   Li, Yong ^a   Wang, Huandong ^a   Jin, Depeng ^a   Su, Li ^a   Zeng, Lieguang ^a   Vasilakos, Thanos ^b  

^a TSINGHUA UNIVERSITY   (China)

^b KUWAIT UNIVERSITY   (Kuwait)

Author keywords

Network update; Security; Software defined network

Indexed keywords

COMPLEX NETWORKS; HEURISTIC ALGORITHMS; NETWORK PROTOCOLS; SECURITY SYSTEMS;

CENTRALIZED CONTROL; CONTROL PROTOCOLS; DISTRIBUTED NETWORK CONTROL; SECURITY; SECURITY POLICY ENFORCEMENT; SOFTWARE-DEFINED NETWORKINGS; SOFTWARE-DEFINED NETWORKS; TRAFFIC DISTRIBUTIONS;

NETWORK SECURITY;

EID: 84944193150     PISSN: 00200255     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ins.2015.08.019     Document Type: Article

References (45)

1. M. Arregoces, and M. Portolani Data center fundamentals 2003 Cisco Press
2. Enterprise Network and Data Security Spending shows Remarkable Resilience. http://en.wikipedia.org/wiki/Softwaredefined-data-centerCurrent-status.
3. P. Francois, O. Bonaventure, B. Decraene, and P.-A. Coste Avoiding disruptions during maintenance operations on BGP sessions IEEE Trans. Netw. Serv. Manage. 4 3 2007 1 11
4. J. Fu, P. Sjodin, and G. Karlsson Loop-free updates of forwarding tables IEEE Trans. Netw. Serv. Manage. 5 1 2008 22 35
5. S. Ghorbani, and M. Caesar Walk the line: consistent network updates with bandwidth guarantees Proceedings of the First Workshop on Hot Topics in Software Defined Networks 2012 ACM 67 72
6. Y. Gong, Z. Ying, and M. Lin A survey of cloud computing Proceedings of the Second International Conference on Green Communications and Networks 2013 Springer 79 84
7. N. Gude, T. Koponen, J. Pettit, B. Pfaff, M. Casado, N. McKeown, and S. Shenker NOX: towards an operating system for networks ACM SIGCOMM Comput. Commun. Rev. 38 3 2008 105 110
8. S. Jain, A. Kumar, S. Mandal, J. Ong, L. Poutievski, A. Singh, S. Venkata, J. Wanderer, J. Zhou, M. Zhu, J. Zolla, U. Holzle, S. Stuart, and A. Vahdat B4: experience with a globally-deployed software defined WAN Proceedings of SIGCOMM 2013 Conference on SIGCOMM 2013 ACM
9. D.A. Joseph, A. Tavakoli, and I. Stoica A policy-aware switching layer for data centers ACM SIGCOMM Comput. Commun. Rev. 38 2008 51 62
10. B.G. Józsa, and M. Makai On the solution of reroute sequence planning problem in MPLS networks Comput. Netw. 42 2 2003 199 210
11. T. Koponen, M. Casado, N. Gude, J. Stribling, L. Poutievski, M. Zhu, R. Ramanathan, Y. Iwata, H. Inoue, T. Hama, and S. Shenker ONIX: a distributed control platform for large-scale production networks Proceedings of the Ninth USENIX Conference on Operating Systems Design and Implementation 2010 1 6
12. J.F. Kovar, The 10 Biggest Data Center Stories of 2012. http://www.crn.com/slide-shows/data-center/240143993/the-10-biggest-data-center-stories-of-2012.htm?pgno=7, 2012.
13. R. McGeer A safe, efficient update protocol for openflow networks Proceedings of the First Workshop on Hot Topics in Software Defined Networks 2012 ACM 61 66
14. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner Openflow: enabling innovation in campus networks ACM SIGCOMM Comput. Commun. Rev. 38 2 2008 69 74
15. Openflow Specification Version 1.1.0. http://www.openflow.org/documents/openflow-spec-v1.1.0.pdf.
16. Openflow@google. http://www.opennetsummit.org/archives/apr12/hoelzle-tue-openflow.pdf.
17. M. Prigge, Understanding the Software-defined Data Center, InfoWorld.
18. C.C. Zhang, M. Winslett, and C.A. Gunter On the safety and efficiency of firewall policy deployment IEEE Symposium on Security and Privacy 2007 33 50
19. A. Kartit, A. Radi, M.E. Marraki, and B. Regragui Safe and correctness strategies for updating firewall policies Int. J. Comput. Sci. Netw. Secur. 11 3 2011 15
20. E. Al-Shaer, H. Hamed, R. Boutaba, and M. Hasan Conflict classification and analysis of distributed firewall policies IEEE J. Selected Areas Commun. 23 10 2005 2069 2084
21. S. Halle, E.L. Ngoupé, R. Villemaire, and O. Cherkaoui Distributed firewall anomaly detection through LTL model checking IFIP/IEEE International Symposium on Integrated Network 2013 194 201
22. C. Yoon, T. Park, S. Lee, H. Kang, S. Shin, and Z. Zhang Enabling security functions with SDN: a feasibility study Comput. Netw. 85 0 2015 19 35
23. A. Ding, J. Crowcroft, S. Tarkoma, and H. Flinck Software defined networking for security enhancement in wireless mobile networks Comput. Netw. 66 0 2014 94 101
24. S. Raza, Y. Zhu, and C.-N. Chuah Graceful network state migrations IEEE/ACM Trans. Netw. 19 4 2011 1097 1110
25. M. Reitblatt, N. Foster, J. Rexford, C. Schlesinger, D. Walker, Abstractions for network update, in: Proceedings of the ACM SIGCOMM 2012 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communication, pp. 323-334.
26. M. Reitblatt, N. Foster, J. Rexford, and D. Walker Consistent updates for software-defined networks: change you can believe in! Proceedings of the 10th ACM Workshop on Hot Topics in Networks 2011 ACM
27. R. Sherwood, G. Gibb, K.-K. Yap, G. Appenzeller, M. Casado, N. McKeown, and G. Parulkar OpenFlow Switch Consortium 2009
28. L. Shi, J. Fu, and X. Fu Loop-free forwarding table updates with minimal link overflow Proceedings of IEEE International Conference on Communications 2009
29. B. Stephens, A. Cox, W. Felter, C. Dixon, and J. Carter Past: Scalable ethernet for data centers Proceedings of the Eighth International Conference on Emerging Networking Experiments and Technologies 2012 ACM 49 60
30. The Software Defined Data Center-networking. http://www.vmware.com/software-defined-datacenter/networking-security.html.
31. L. Vanbever, S. Vissicchio, C. Pelsser, P. Francois, and O. Bonaventure Seamless network-wide IGP migrations Proceedings of the ACM SIGCOMM 2011 Conference 2011 314 325
32. M. Walfish, J. Stribling, M. Krohn, H. Balakrishnan, R. Morris, and S. Shenker Middleboxes no longer considered harmful Proceedings of the Fifth USENIX Conference on Operating Systems Design and Implementation 2004 15
33. K. Wang, Y. Qi, B. Yang, Y. Xue, and J. Li LiveSec: towards effective security management in large-scale production networks 2012 IEEE International Conference on Distributed Computing Systems Workshops (ICDCSW) 2012 451 460
34. R. Wang, D. Butnariu, and J. Rexford Openflow-based server load balancing gone wild Proceedings of the 11th Conference on Hot Topics in Management of Internet, Cloud, and Enterprise Networks and Services 2011 USENIX Association 12
35. M. Ali, S.U. Khan, and A.V. Vasilakos Security in cloud computing: opportunities and challenges Inf. Sci. 305 2015 357 383
36. V. Varadharajan, and U. Tupakula Security as a service model for cloud environment IEEE Trans. Netw. Serv. Manage. 11 1 2014 60 75
37. L. Wei, H. Zhu, Z. Cao, X. Dong, W. Jia, Y. Chen, and A. Vasilakos Security and privacy for storage and computation in cloud computing Inf. Sci. 258 2014 371 386
38. D. Kreutz, F. Ramos, P.E. Verissimo, C.E. Rothenberg, S. Azodolmolky, and S. Uhlig Software-defined networking: a comprehensive survey Proc. IEEE 103 1 2015 14 76
39. M. Moshref, M. Yu, A. Sharma, and R. Govindan Scalable rule management for data centers Proceedings of the 10th USENIX Conference on Networked Systems Design and Implementation 2013 USENIX Association 157 170
40. L. Popa, M. Yu, and S.Y. Ko CloudPolice: taking access control out of the network Proceedings of the Ninth ACM SIGCOMM Workshop on Hot Topics in Networks 2010
41. Z.A. Qazi, C. Tu, L. Chiang, R. Miao, V. Sekar, and M. Yu SIMPLE-fying middlebox policy enforcement using SDN Proceedings of the ACM SIGCOMM 2013 Conference on SIGCOMM 2013 27 38
42. S. Subashini, and V. Kavitha A survey on security issues in service delivery models of cloud computing J. Netw. Comput. Appl. 34 2011 1 11
43. J. Sherry, S. Hasan, C. Scott, A. Krishnamurthy, S. Ratnasamy, and V. Sekar Making middleboxes someone else's problem: network processing as a cloud service ACM SIGCOMM Comput. Commun. Rev. 42 4 2012 13 24
44. M. Moshref, M. Yu, A. Sharma, and R. Govindan vCRIB: virtualized rule management in the cloud Proceedings of NSDI 2013
45. M. Canini, P. Kuznetsov, D. Levin, and S. Schmid Software transactional networking: concurrent and consistent policy composition Proceedings of the Second ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking 2013 ACM 1 6