FloodGuard: A DoS Attack Prevention Extension in Software-Defined Networks

Proceedings of the International Conference on Dependable Systems and Networks

Volumn 2015-September, Issue , 2015, Pages 239-250

  Wang, Haopei ^a   Xu, Lei ^a   Gu, Guofei ^a  

^a TEXAS A AND M UNIVERSITY   (United States)

Author keywords

Denial of Service Attack; SDN; Security; Software Defined Networking

Indexed keywords

COMPUTER CRIME; CONTROLLERS; FLOODS; NETWORK PROTOCOLS; NETWORK SECURITY; ROUTERS; SCHEDULING ALGORITHMS; SOFTWARE PROTOTYPING; SOFTWARE TESTING; STRUCTURAL LOADS;

PROTOTYPE IMPLEMENTATIONS; ROUND-ROBIN SCHEDULING; SATURATION ATTACKS; SDN; SECURITY; SOFTWARE AND HARDWARES; SOFTWARE-DEFINED NETWORKINGS; SOFTWARE-DEFINED NETWORKS;

DENIAL-OF-SERVICE ATTACK;

EID: 84950135398     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DSN.2015.27     Document Type: Conference Paper

References (32)

1. OpenFlow Firewall Application. https://github. com/hip2b2/poxstuff/blob/master/of firewall. py.
2. OpenFlow Specification v1. 4. 0. http://www. opennetworking.org/images/stories/downloads/sdn-resources/onf-specifications/openflow/openflowspec-v1. 4. 0. pdf.
3. OpenWrt: a Linux Distribution for Embedded Devices. https://openwrt.org/.
4. Pantou: OpenFlow 1. 0 for OpenWRT. http://www. openflow.org/wp/openwrt/.
5. POX controller. http://openflow. stanford. edu/display/ONL/POX+Wiki.
6. Project Floodlight. http://www. projectfloodlight.org/floodlight/.
7. T. Ball, N. Bjorner, A. Gember, S. Itzhaky, A. Karbyshev, M. Sagiv, M. Schapira, and A. Valadarsky. VeriCon: Towards Verifying Controller Programs in Software-Defined Networks. In Proceedings of the ACM Conference on Programming Language Design and Implementation (PLDI), 2014.
8. Jeffrey R. Ballard, Ian Rae, and Aditya Akella. Extensible and Scalable Network Monitoring Using OpenSAFE. In Proceedings of USENIX Internet Network Management Workshop/Workshop on Research on Enterprise Networking, 2010.
9. C. Cadar, D. Dunbar, and D. R. Engler. KLEE: Unassisted and Automatic Generation of High Coverage Tests for Complex Systems Programs. In Proceedings of the USENIX Symposium on Operating Systems Design and Implementation (OSDI), 2008.
10. Zheng Cai, Alan L. Cox, and T. S. Eugene Ng. Maestro: A System for Scalable OpenFlow Control. http://www. cs. rice. edu/eugeneng/papers/TR10-11. pdf.
11. M. Canini, D. Venzano, P. Peresini, D. Kostic, and Jennifer Rexford. A NICE Way to Test OpenFlow Applications. In Proceedings of the 9th USENIX Symposium on Networked Systems Design and Implementation (NSDI), 2012.
12. Martin Casado. The Scaling Implications of SDN. http://networkheresy. com/2011/06/08/the-scaling-implications-of-sdn/.
13. A. R. Curtis, W. Kim, and P. Yalagandula. Mahout:Low-Overhead Datacenter Traffic Management using End-Host-Based Elephant Detection. In Proceedings of IEEE INFOCOM 2011 Conference, 2011.
14. A. R. Curtis, J. C. Mogul, J. Tourrilhes, P. Yalagandula, P. Sharma, and S. Banerjee. DevoFlow: Scaling Flow Management for High-Performance Networks. In Proceedings of ACM SIGCOMM 2011 Conference, August 2011.
15. Mohan Dhawan, Rishabh Poddar, Kshiteej Mahajan, and Vijay Mann. SPHINX: Detecting Security Attacks in Software-Defined Networks. In Proceedings of the 22th Annual Network and Distributed System Security Symposium (NDSS'15), February 2015.
16. Mihai Dobrescu and Katerina Argyraki. Software Dataplane Verification. In Proceedings of the 11th USENIX Symposium on Networked Systems Design and Implementation (NSDI), 2014.
17. Vijay Ganesh and David L. Dill. A Decision Procedure for Bit-vectors and Arrays. In Proceedings of the International Conference in Computer Aided Verification (CAV 2007), July 2007.
18. P. Godefroid, N. Klarlund, and K. Sen. DART: Directed Automated Random Testing. In Proceedings of the ACM Conference on Programming Language Design and Implementation (PLDI), 2005.
19. Sungmin Hong, Lei Xu, Haopei Wang, and Guofei Gu. Poisoning Network Visibility in Software-Defined Networks: New Attacks and Countermeasures. In Proceedings of the 22th Annual Network and Distributed System Security Symposium (NDSS'15), February 2015.
20. T. Koponen, M. Casado, N. Gude, J. Stribling, L. Poutievski, M. Zhu, R. Ramanathan, Y. Iwata, H. Inoue, T. Hama, and S. Shenker. Onix: A Distributed Control Platform for Large-scale Production Networks. In Proceedings of the 7th USENIX Symposium on Networked Systems Design and Implementation (NSDI), 2010.
21. Nick McKeown, Tom Anderson, Hari Balakrishnan, Guru Parulkar, Larry Peterson, Jennifer Rexford, Scott Shenker, and Jonathan Turner. OpenFlow: Enabling Innovation in Campus Networks. In Proceedings of ACM SIGCOMM Computer Communication Review, April 2008.
22. Mininet. Rapid prototyping for software defined networks. http://yuba. stanford. edu/foswiki/bin/view/OpenFlow/.
23. Christopher Monsanto, Joshua Reich, Nate Foster, Jennifer Rexford, and David Walker. Composing Software Defined Networks. In Proceedings of the 10th USENIX Symposium on Networked Systems Design and Implementation (NSDI), 2013.
24. OpenFlow. Innovate Your Network. http://www. openflow. org.
25. Phillip Porras, Seungwon Shin, Vinod Yegneswaran, Martin Fong, Mabry Tyson, and Guofei Gu. A Security Enforcement Kernel for OpenFlow Networks. In Proceedings of ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking (HotSDN'12), August 2012.
26. C. Scott, A. Wundsam, B. Raghavan, A. Panda, A. Or, J. Lai, E. Huang, Z. Liu, A. EI-Hassany, S. Whitlock, H. B. Acharya, K. Zarifis, and S. Shenker. Troubleshooting Blackbox SDN Control Software with Minimal Causal Sequences. In Proceedings of ACM SIGCOMM 2014 Conference, 2014.
27. S. Shin and G. Gu. Attacking Software-Defined Networks: A First Feasibility Study (short paper). In Proceedings of ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking (HotSDN), 2013.
28. S. Shin, Y. Song, T. Lee, S. Lee, J. Chung, P. Porras, V. Yegneswaran, J. Noh, and B. B. Kang. Rosemary: A Robust, Secure, and High-Performance Network Operating System. In Proceedings of the 21th ACM Conference on Computer and Communications Security (CCS), 2014.
29. S. Shin, V. Yegneswaran, P. Porras, and G. Gu. AVANT-GUARD: Scalable and Vigilant Switch Flow Management in Software-Defined Networks. In Proceedings of the 20th ACM Conference on Computer and Communications Security (CCS), 2013.
30. Seungwon Shin and Guofei Gu. CloudWatcher: Network Security Monitoring Using OpenFlow in Dynamic Cloud Networks (or: How to Provide Security Monitoring as a Service in Clouds). In Proceedings of the 7th Workshop on Secure Network Protocols (NPSec12), co-located with IEEE ICNP12, October 2012.
31. Seungwon Shin, Phil Porras, Vinod Yegneswaran, Martin Fong, Guofei Gu, and Mabry Tyson. FRESCO: Modular Composable Security Services for Software-Defined Networks. In Proceedings of the 20th Annual Network and Distributed System Security Symposium (NDSS'13), February 2013.
32. M. Yu, J. Rexford, M. J. Freedman, and J. Wang. Scalable Flow-Based Networking with DIFANE. In Proceedings of ACM SIGCOMM 2010 Conference, August 2010.