FS-OpenSecurity: A taxonomic modeling of security threats in SDN for future sustainable computing

Sustainability (Switzerland)

Volumn 8, Issue 9, 2016, Pages

  Sung, Yunsick ^a   Sharma, Pradip Kumar ^b   Lopez, Erik Miranda ^b   Park, Jong Hyuk ^b  

^a Keimyung University   (South Korea)

^b Seoul National University of Science and Technology   (South Korea)

Author keywords

FS OpenSecurity; SDN architecture; Security model

Indexed keywords

ADAPTIVE MANAGEMENT; COMPUTER SIMULATION; DATABASE; DEMAND ANALYSIS; FUTURE PROSPECT; INFORMATION TECHNOLOGY; POLICY STRATEGY; SCIENCE AND TECHNOLOGY; SECURITY THREAT; SOFTWARE; SUSTAINABILITY; TAXONOMY; TECHNOLOGICAL DEVELOPMENT;

EID: 84990987622     PISSN: None     EISSN: 20711050     Source Type: Journal    
DOI: 10.3390/su8090919     Document Type: Article

References (46)

1. Jain, S.; Kumar, A.; Mandal, S.; Ong, J.; Poutievski, L.; Singh, A.; Venkata, S.; Wanderer, J.; Zhou, J.; Zhu, M.; et al. B4: Experience with a globally-deployed software defined WAN. ACM SIGCOMM Comput. Commun. Rev. 2013, 43, 3-14.
2. Sezer, S.; Scott-Hayward, S.; Chouhan, P.K.; Fraser, B.; Lake, D.; Finnegan, J.; Viljoen, N.; Miller, M.; Rao, N. Are we ready for SDN? Implementation challenges for software-defined networks. IEEE Commun. Mag. 2013, 51, 36-43.
3. Douligeris, C.; Serpanos, D.N. Network Security: Current Status and Future Directions; John Wiley & Sons: Hoboken, NJ, USA, 2007.
4. Casado, M.; Garfinkel, T.; Akella, A.; Freedman, M.J.; Boneh, D.; McKeown, N.; Shenker, S. SANE: A Protection Architecture for Enterprise Networks. Available online: https://www.usenix.org/ legacy/event/sec06/tech/full_papers/casado/casado_html/ (accessed on 8 September 2016).
5. Casado, M.; Freedman, M.J.; Pettit, J.; Luo, J.; McKeown, N.; Shenker, S. Ethane: Taking control of the enterprise. ACM SIGCOMM Comput. Commun. Rev. 2007, 37, 1-12.
6. Kloeti, R. OpenFlow: A Security Analysis. Available online: ftp://ftp.tik.ee.ethz.ch/pub/students/2012- HS/MA-2012-20.pdf (accessed on 8 September 2016).
7. Hernan, S.; Lambert, S.; Ostwald, T.; Shostack, A. Threat Modeling-Uncover Security Design Flaws Using the Stride Approach; MSDN Magazine: Louisville, KY, USA, 2006; pp. 68-75.
8. OpenFlow Switch Specification Version 1.3.2, Open Networking Foundation. Available online: https://-www.opennetworking.org (accessed on 8 September 2016).
9. Benton, K.; Camp, L.J.; Small, C. Openflow Vulnerability Assessment. In Proceedings of the Second ACM SIGCOMMWorkshop on Hot Topics in Software Defined Networking, Hong Kong, China, 12-16 August 2013; pp. 151-152.
10. Kreutz, D.; Ramos, F.; Verissimo, P. Towards Secure and Dependable Software-Defined Networks. In Proceedings of the Second ACM SIGCOMMWorkshop on Hot Topics in Software Defined Networking, Hong Kong, China, 12-16 August 2013; pp. 55-60.
11. Li, D.; Hong, X.; Bowman, J. Evaluation of Security Vulnerabilities by Using ProtoGENI as a Launchpad. In Proceedings of the Global Telecommunications Conference (GLOBECOM 2011), Houston, TX, USA, 5-9 December 2011; pp. 1-6.
12. Anwer, B.; Benson, T.; Feamster, N.; Levin, D.; Rexford, J. A Slick Control Plane for Network Middleboxes. Open Networking Summit. 2013. Available online: http://nextstepesolutions.com/Clients/ONS2.0/pdf/ 2013/researchtrack/posterpapers/final/ons2013final51.pdf (accessed on 8 September 2016).
13. Fayazbakhsh, S.; Sekar, V.; Yu, M.; Mogul, J. FlowTags: Enforcing Network-Wide Policies in the Presence of Dynamic Middlebox Actions. In Proceedings of the SecondWorkshop on Hot Topics in Software Defined Networks, Hong Kong, China, 12-16 August 2013.
14. Qazi, Z.A.; Tu, C.C.; Chiang, L.; Miao, R.; Sekar, V.; Yu, M. SIMPLE-fying middlebox policy enforcement using SDN. ACM SIGCOMM Comput. Commun. Rev. 2013, 43, 27-38.
15. Jafarian, J.H.; Al-Shaer, E.; Duan, Q. Openflow Random Host Mutation: Transparent Moving Target Defense Using Software Defined Networking. In Proceedings of the First Workshop on Hot Topics in Software Defined Networks, Helsinki, Finland, 13-17 August 2012; pp. 127-132.
16. Braga, R.; Mota, E.; Passito, A. Lightweight DDoS Flooding Attack Detection Using NOX/OpenFlow. In Proceedings of the 2010 IEEE 35th Conference on Local Computer Networks (LCN), Washington, DC, USA, 10-14 October 2010; pp. 408-415.
17. Ballard, J.R.; Rae, I.; Akella, A. Extensible and Scalable Network Monitoring Using OpenSAFE. In Proceedings of the INM/WREN, San Jose, CA, USA, 28-30 April 2010.
18. Shin, S.; Gu, G. CloudWatcher: Network Security Monitoring Using OpenFlow in Dynamic Cloud Networks (or: How to Provide Security Monitoring as a Service in Clouds?). In Proceedings of the 20th IEEE International Conference on Network Protocols (ICNP), Austin, TX, USA, 30 October-2 November 2012; pp. 1-6.
19. Mehdi, S.A.; Khalid, J.; Khayam, S.A. Revisiting Traffic Anomaly Detection Using Software Defined Networking. In Recent Advances in Intrusion Detection; Springer: Berlin/Heidelberg, Germany, 2011; pp. 161-180.
20. Shin, S.; Song, Y.; Lee, T.; Lee, S.; Chung, J.; Porras, P.; Yegneswaran, V.; Noh, J.; Kang, B.B. Rosemary: A Robust, Secure, and High-Performance Network Operating System. In Proceedings of theACM SIGSAC Conference on Computer and Communications Security, Scottsdale, AZ, USA, 3-7 November 2014; pp. 78-89.
21. Shin, S.; Yegneswaran, V.; Porras, P.; Gu, G. Avant-Guard: Scalable and Vigilant Switch Flow Management in Software-Defined Networks. In Proceedings of the 2013 ACM SIGSAC Conference on Computer & Communications Security, Berlin, Germany, 4-8 November 2013; pp. 413-424.
22. Shin, S.; Porras, P.A.; Yegneswaran, V.; Fong, M.W.; Gu, G.; Tyson, M. FRESCO: Modular Composable Security Services for Software-Defined Networks; National Down Syndrome Society: New York, NY, USA, 2013.
23. Porras, P.A.; Cheung, S.; Fong, M.W.; Skinner, K.; Yegneswaran, V. Securing the Software Defined Network Control Layer; NDSS (National Down Syndrome Society): New York, NY, USA, 2015.
24. Lee, S.; Lee, C.; Jo, H.; Kim, J.; Lee, S.; Nam, J.; Park, T.; Yoon, C.; Kim, Y.; Kang, H.; et al. A Playground for Software-Defined Networking Security. Available online: http://nss.kaist.ac.kr/papers/sosr-demos15- final3.pdf (accessed on 8 September 2016).
25. Al-Shaer, E.; Al-Haj, S. FlowChecker: Configuration Analysis and Verification of Federated OpenFlow Infrastructures. In Proceedings of the 3rd ACM Workshop on Assurable and Usable Security Configuration, Chicago, IL, USA, 4-8 October 2010; pp. 37-44.
26. Bifulco, R.; Karame, G. Towards a Richer Set of Services in Software-Defined Networks. In Proceedings of the NDSS Workshop on Security of Emerging Technologies (SENT), San Diego, CA, USA, 23-26 February 2014.
27. Feng, T.; Bi, J.; Hu, H. OpenRouter: OpenFlow Extension and Implementation Based on a Commercial Router. In Proceedings of the 19th IEEE International Conference on Network Protocols (ICNP), Vancouver, AB, Canada, 17-20 October 2011; pp. 141-142.
28. Kamisínski, A.; Fung, C. FlowMon: Detecting Malicious Switches in Software-Defined Networks. In Proceedings of the 2015Workshop on Automated Decision Making for Active Cyber Defense, Denver, CO, USA, 12-16 October 2015; pp. 39-45.
29. Khurshid, A.; Zou, X.; Zhou, W.; Caesar, M.; Godfrey, P.B. Veriflow: Verifying Network-Wide Invariants in Real Time. In Proceedings of the 10th USENIX Symposium on Networked Systems Design and Implementation (NSDI 13), Lombard, IL, USA, 2-5 April 2013; pp. 15-27.
30. Lara, A.; Ramamurthy, B. Opensec: A Framework for Implementing Security Policies Using Openflow. In Proceedings of the Global Communications Conference (GLOBECOM), Austin, TX, USA, 8-12 December 2014; pp. 781-786.
31. Matias, J.; Garay, J.; Mendiola, A.; Toledo, N.; Jacob, E. FlowNAC: Flow-Based Network Access Control. In Proceedings of the Software Defined Networks (EWSDN), Third EuropeanWorkshop, Budapest, Hungary, 1-3 September 2014; pp. 79-84.
32. Mendonca, M.; Seetharaman, S.; Obraczka, K. A Flexible in-Network IP Anonymization Service. In Proceedings of the IEEE International Conference Communications (ICC), Ottawa, ON, Canada, 10-15 June 2012; pp. 6651-6656.
33. Wang, H.; Xu, L.; Gu, G. Of-Guard: A Dos Attack Prevention Extension in Software-Defined Networks. In Proceedings of the Open Network Summit (ONS), Santa Clara, CA, USA, 3-5 March 2014.
34. Canini, M.; Venzano, D.; Perešíni, P.; Kostíc, D.; Rexford, J. A NICE way to test OpenFlow applications. In Proceedings of the 9th USENIX Symposium on Networked Systems Design and Implementation (NSDI 12), San Jose, CA, USA, 25-27 April 2012; pp. 127-140.
35. Fichera, S.; Galluccio, L.; Grancagnolo, S.C.; Morabito, G.; Palazzo, S. OPERETTA: An OPEnflow-based REmedy to mitigate TCP SYNFLOOD Attacks against web servers. Comput. Netw. 2015, 92, 89-100.
36. Hong, S.; Xu, L.; Wang, H.; Gu, G. Poisoning Network Visibility in Software-Defined Networks: New Attacks and Countermeasures; NDSS: National Down Syndrome Society: New York, NY, USA, 2015.
37. Hu, H.; Han, W.; Ahn, G.J.; Zhao, Z. FLOWGUARD: Building Robust Firewalls for Software-Defined Networks. In Proceedings of the Third Workshop on Hot Topics in Software Defined Networking, Chicago, IL, USA, 17-22 August 2014; pp. 97-102.
38. Matias, J.; Tornero, B.; Mendiola, A.; Jacob, E.; Toledo, N. Implementing Layer 2 Network Virtualization Using OpenFlow: Challenges and Solutions. In Proceedings of the Software Defined Networking (EWSDN), EuropeanWorkshop, Darmstadt, Germany, 25-26 October 2012; pp. 30-35.
39. Porras, P.; Shin, S.; Yegneswaran, V.; Fong, M.; Tyson, M.; Gu, G. A Security Enforcement Kernel for OpenFlow Networks. In Proceedings of the FirstWorkshop on Hot Topics in Software Defined Networks, Helsinki, Finland, 13-17 August 2012; pp. 121-126.
40. Yao, G.; Bi, J.; Xiao, P. Source Address Validation Solution with OpenFlow/NOX Architecture. In Proceedings of the 2011 19th IEEE International Conference Network Protocols (ICNP), Vancouver, BC, Canada, 17-20 October 2011; pp. 7-12.
41. Suh, J.; Choi, H.; Yoon, W.; You, T.; Kwon, T.; Choi, Y. Implementation of Content-Oriented Networking Architecture (CONA): A Focus on DDoS Countermeasure. In Proceedings of the 1st European NetFPGA Developers Workshop, Cambridge, UK, 9-10 September 2010; pp. 1-5.
42. Tootoonchian, A.; Ganjali, Y. HyperFlow: A Distributed Control Plane for OpenFlow. In Proceedings of the Internet Network Management Conference on RESEARCH on Enterprise Networking, San Jose, CA, USA, 27 April 2010; p. 3.
43. Wang, H.; Xu, L.; Gu, G. FloodGuard: A Dos Attack Prevention Extension in Software-Defined Networks. In Proceedings of the 45th Annual IEEE/IFIP International Conference Dependable Systems and Networks (DSN), Rio de Janeiro, Brazil, 22-25 June 2015; pp. 239-250.
44. Wen, X.; Chen, Y.; Hu, C.; Shi, C.; Wang, Y. Towards a Secure Controller Platform for Openflow Applications. In Proceedings of the Second ACM SIGCOMMWorkshop on Hot Topics in Software Defined Networking, Hong Kong, China, 12-16 August 2013; pp. 171-172.
45. Liyanage, M.; Ylianttila, M.; Gurtov, A. Securing the Control Channel of Software-Defined Mobile Networks. In Proceedings of the 2014 IEEE 15th International Symposium World of Wireless, Mobile and Multimedia Networks (WoWMoM), Sydney, Australia, 16-19 June 2014; pp. 1-6.
46. Sherwood, R.; Gibb, G.; Yap, K.K.; Appenzeller, G.; Casado, M.; McKeown, N.; Parulkar, G.M. Can the production network be the testbed? OSDI 2010, 10, 1-6.