Towards secure multi-tenant virtualized networks

Proceedings - 14th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2015

Volumn 1, Issue , 2015, Pages 1180-1185

  Paladi, Nicolae ^a   Gehrmann, Christian ^a  

^a SWEDISH INSTITUTE OF COMPUTER SCIENCE   (Sweden)

Author keywords

Multi tenant Virtualized Networks; Network Virtualization; Security; Software Defined Networks

Indexed keywords

COMPLEX NETWORKS; INFORMATION MANAGEMENT; NETWORK MANAGEMENT; SOFTWARE DEFINED NETWORKING; VIRTUAL REALITY;

ARCHITECTURAL MODELING; MULTI TENANTS; MULTIPLE SECURITIES; NETWORK INFRASTRUCTURE; NETWORK VIRTUALIZATION; SECURITY; SECURITY REQUIREMENTS; SOFTWARE DEFINED NETWORKING (SDN);

NETWORK SECURITY;

EID: 84967166504     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/Trustcom.2015.502     Document Type: Conference Paper

References (20)

1. R. Sherwood, G. Gibb, K.-K. Yap, G. Appenzeller, M. Casado, N. McKeown, and G. Parulkar, "Flowvisor: A network virtualization layer," OpenFlow Switch Consortium, Tech. Rep, 2009.
2. A. Greenberg, G. Hjalmtysson, D. A. Maltz, A. Myers, J. Rexford, G. Xie, H. Yan, J. Zhan, and H. Zhang, "A clean slate 4D approach to network control and management," ACM SIGCOMM Computer Communication Review, vol. 35, no. 5, pp. 41-54, 2005.
3. M. Casado, T. Garfinkel, A. Akella, M. J. Freedman, D. Boneh, N. McKeown, and S. Shenker, "SANE: A Protection Architecture for Enterprise Networks.," in Usenix Security, 2006.
4. M. Casado, M. J. Freedman, J. Pettit, J. Luo, N. McKeown, and S. Shenker, "Ethane: taking control of the enterprise," in ACM SIGCOMM Computer Communication Review, vol. 37, pp. 1-12, ACM, 2007.
5. A. K. Nayak, A. Reimers, N. Feamster, and R. Clark, "Resonance: dynamic access control for enterprise networks," in Proceedings of the 1st ACM workshop on Research on enterprise networking, pp. 11-18, ACM, 2009.
6. H. Song, "Protocol-oblivious forwarding: Unleash the power of SDN through a future-proof forwarding plane," in Proceedings of the second ACM SIGCOMM workshop on Hot topics in software defined networking, pp. 127-132, ACM, 2013.
7. S. Shin, P. A. Porras, V. Yegneswaran, M. W. Fong, G. Gu, and M. Tyson, "FRESCO: Modular Composable Security Services for Software-Defined Networks.," in NDSS, 2013.
8. M. Casado, N. Foster, and A. Guha, "Abstractions for software-defined networks," Communications of the ACM, vol. 57, no. 10, pp. 86-95, 2014.
9. N. Gude, T. Koponen, J. Pettit, B. Pfaff, M. Casado, N. McKeown, and S. Shenker, "NOX: towards an operating system for networks," ACM SIGCOMM Computer Communication Review, vol. 38, no. 3, pp. 105-110, 2008.
10. T. Koponen, M. Casado, N. Gude, J. Stribling, L. Poutievski, M. Zhu, R. Ramanathan, Y. Iwata, H. Inoue, T. Hama, et al., "Onix: A Distributed Control Platform for Large-scale Production Networks.," in OSDI, vol. 10, pp. 1-6, 2010.
11. P. Porras, S. Shin, V. Yegneswaran, M. Fong, M. Tyson, and G. Gu, "A security enforcement kernel for OpenFlow networks," in Proceedings of the first workshop on Hot topics in software defined networks, pp. 121-126, ACM, 2012.
12. S. Shin, Y. Song, T. Lee, S. Lee, J. Chung, P. Porras, V. Yegneswaran, J. Noh, and B. B. Kang, "Rosemary: A Robust, Secure, and High-Performance Network Operating System," in Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, pp. 78-89, ACM, 2014.
13. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner, "OpenFlow: enabling innovation in campus networks," ACM SIGCOMM Computer Communication Review, vol. 38, no. 2, pp. 69-74, 2008.
14. S. Jain, A. Kumar, S. Mandal, J. Ong, L. Poutievski, A. Singh, S. Venkata, J. Wanderer, J. Zhou, M. Zhu, et al., "B4: Experience with a globally-deployed software defined WAN," in ACM SIGCOMM Computer Communication Review, vol. 43, pp. 3-14, ACM, 2013.
15. D. Kreutz, F. Ramos, and P. Verissimo, "Towards secure and dependable software-defined networks," in Proceedings of the second ACM SIGCOMM workshop on Hot topics in software defined networking, pp. 55-60, ACM, 2013.
16. G. Greenwald, "How the NSA tampers with US-made Internet routers," The Guardian, May 2014.
17. S. Goldberg, "Why is it taking so long to secure internet routing?," Communications of the ACM, vol. 57, no. 10, pp. 56-63, 2014.
18. D. Dolev and A. C. Yao, "On the security of public key protocols," Information Theory, IEEE Transactions on, vol. 29, no. 2, pp. 198-208, 1983.
19. A. Wang, M. Iyer, R. Dutta, G. N. Rouskas, and I. Baldine, "Network virtualization: Technologies, perspectives, and frontiers," Lightwave Technology, Journal of, vol. 31, no. 4, pp. 523-537, 2013.
20. S. Tripathi, N. Droux, T. Srinivasan, K. Belgaied, and V. Iyer, "Crossbow: A Vertically Integrated QoS Stack," in Proceedings of the 1st ACM Workshop on Research on Enterprise Networking, WREN '09, (New York, NY, USA), pp. 45-54, ACM, 2009.