Enabling Practical Software-defined Networking Security Applications with OFX

23rd Annual Network and Distributed System Security Symposium, NDSS 2016

Volumn , Issue , 2016, Pages

  Sonchack, John ^a   Aviv, Adam J ^b   Keller, Eric ^c   Smith, Jonathan M ^a  

^a UNIVERSITY OF PENNSYLVANIA   (United States)

^b UNITED STATES NAVAL ACADEMY   (United States)

^c UNIVERSITY OF COLORADO   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

APPLICATION PROGRAMS; DYNAMIC LOADS; SOFTWARE DEFINED NETWORKING;

DATA PLANES; DATA-PLANE; NETWORK SWITCHES; NETWORKING SECURITY; NETWORKS SECURITY; OPENFLOW; PERFORMANCE; SECURITY APPLICATION; SOFTWARE-DEFINED NETWORKINGS; SOFTWARE-DEFINED NETWORKS;

NETWORK SECURITY;

EID: 85180766992     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.14722/ndss.2016.23309     Document Type: Conference Paper

References (37)

1. Broadcom of-dpa overview. http://www.broadcom.com/collateral/pb/ OF-DPA-PB100-R.pdf.
2. Broadcom open nsl. https://github.com/Broadcom-Switch/OpenNSL.
3. “Cisco IOS Embedded Event Manager (EEM),” http://www.cisco.com/ c/en/us/products/ios-nx-os-software/ios-embedded-event-managereem/.
4. “Pica 8 p3290 data sheet,” http://www.pica8.com/documents/pica8- datasheet-48x1gbe-p3290-p3295.pdf. [Online]. Available: http://www. pica8.com/documents/pica8-datasheet-48x1gbe-p3290-p3295.pdf
5. Pica os white box switch os. http://www.pica8.com/white-box-switches/ white-box-switch-os.php.
6. “Ryu,” http://osrg.github.io/ryu/.
7. (2012) Openflow switch specification v1. 3.0. https://www. opennetworking.org/images/stories/downloads/sdn-resources/onfspecifications/ openflow/openflow-spec-v1.3.2.pdf. [Online]. Available: https://www.opennetworking.org/images/stories/downloads/sdnresources/ onf-specifications/openflow/openflow-spec-v1.3.2.pdf
8. “Floodlight,” http://floodlight.openflowhub.org, 2013.
9. “Hping 3,” http://www.hping.org/hping3.html, 2014.
10. “Open network linux,” http://opennetlinux.org, 2014.
11. “Open vswitch,” http://openvswitch.org, 2014.
12. D. S. Alexander, M. Shaw, S. M. Nettles, and J. M. Smith, “Active Bridging,” in Proc. ACM SIGCOMM, 1997.
13. M. B. Anwer, M. Motiwala, M. b. Tariq, and N. Feamster, “Switch- Blade: A Platform for Rapid Deployment of Network Protocols on Programmable Hardware,” in Proc. ACM SIGCOMM, 2010.
14. P. Bosshart, D. Daly, G. Gibb, M. Izzard, N. McKeown, J. Rexford, C. Schlesinger, D. Talayco, A. Vahdat, G. Varghese, and D. Walker, “P4: Programming Protocol-independent Packet Processors,” SIGCOMM Comput. Commun. Rev., vol. 44, no. 3, pp. 87-95, July 2014.
15. R. Braga, E. Mota, and A. Passito, “Lightweight ddos flooding attack detection using nox/openflow,” in Local Computer Networks (LCN), 2010 IEEE 35th Conference on. IEEE, 2010, pp. 408-415.
16. A. R. Curtis, J. C. Mogul, J. Tourrilhes, P. Yalagandula, P. Sharma, and S. Banerjee, “DevoFlow: Scaling Flow Management for Highperformance Networks,” in Proc. SIGCOMM, 2011.
17. M. Dobrescu, N. Egi, K. Argyraki, B.-G. Chun, K. Fall, G. Iannaccone, A. Knies, M. Manesh, and S. Ratnasamy, “Routebricks: exploiting parallelism to scale software routers,” in Proceedings of the 22nd ACM SIGOPS. ACM, 2009, pp. 15-28.
18. D. Erickson, “The beacon openflow controller,” in Proceedings of the second ACM SIGCOMM workshop on Hot topics in software defined networking. ACM, 2013, pp. 13-18.
19. A. D. Ferguson, A. Guha, C. Liang, R. Fonseca, and S. Krishnamurthi, “Participatory networking: An api for application control of sdns,” in ACM SIGCOMM Computer Communication Review, vol. 43, no. 4. ACM, 2013, pp. 327-338.
20. G. FERRO, “Big Switch Networks Launches Mature Hardware-Centric Data Centre SDN Solution,” http://etherealmind.com/big-switchnetworks- launches-hardware-centre-mature-data-centre-sdn-solution/, July 2014.
21. N. Foster, R. Harrison, M. J. Freedman, C. Monsanto, J. Rexford, A. Story, and D. Walker, “Frenetic: A network programming language,” in Proc. ACM SIGPLAN International Conference on Functional Programming (ICFP), 2011.
22. G. Gu, R. Perdisci, J. Zhang, W. Lee et al., “Botminer: clustering analysis of network traffic for protocol-and structure-independent botnet detection,” in Proceedings of the 17th conference on Security symposium, 2008, pp. 139-154.
23. S. Hassas Yeganeh and Y. Ganjali, “Kandoo: A framework for efficient and scalable offloading of control applications,” in Proc. Workshop on Hot Topics in Software Defined Networks (HotSDN), 2012.
24. J. H. Jafarian, E. Al-Shaer, and Q. Duan, “Openflow random host mutation: transparent moving target defense using software defined networking,” in Proc. Workshop on Hot topics in software defined networks (HotSDN), 2012.
25. V. Jeyakumar, M. Alizadeh, C. Kim, and D. Mazi`eres, “Tiny packet programs for low-latency network control and monitoring,” in Proceedings of the Twelfth ACM Workshop on Hot Topics in Networks. ACM, 2013, p. 8.
26. S. Kandula, S. Sengupta, A. Greenberg, P. Patel, and R. Chaiken, “The nature of data center traffic: measurements & analysis,” in Proceedings of the 9th ACM SIGCOMM conference on Internet measurement conference. ACM, 2009, pp. 202-208.
27. E. Kohler, R. Morris, B. Chen, J. Jannotti, and M. F. Kaashoek, “The click modular router,” ACM Trans. Comput. Syst., vol. 18, no. 3, pp. 263-297, Aug 2000.
28. T. Koponen, M. Casado, N. Gude, J. Stribling, L. Poutievski, M. Zhu, R. Ramanathan, Y. Iwata, H. Inoue, T. Hama et al., “Onix: A distributed control platform for large-scale production networks.” in OSDI, vol. 10, 2010, pp. 1-6.
29. D. Medhi, Network Routing: Algorithms, Protocols, and Architectures, 1st ed. Morgan Kaufmann, 2007.
30. S. A. Mehdi, J. Khalid, and S. A. Khayam, “Revisiting traffic anomaly detection using software defined networking,” in Recent Advances in Intrusion Detection. Springer, 2011, pp. 161-180.
31. J. C. Mogul and P. Congdon, “Hey, You Darned Counters!: Get off My ASIC!" in Proc. Workshop on Hot Topics in Software Defined Networks (HotSDN), 2012.
32. Y. Mundada, A. Ramachandran, and N. Feamster, “Silverline: preventing data leaks from compromised web applications,” in Proceedings of the 29th Annual Computer Security Applications Conference. ACM, 2013, pp. 329-338.
33. L. Qian and B. E. Carpenter, “A flow-based performance analysis of tcp and tcp applications,” in Networks (ICON), 2012 18th IEEE International Conference on. IEEE, 2012, pp. 41-45.
34. S. Shin, P. Porras, V. Yegneswaran, M. Fong, G. Gu, and M. Tyson, “Fresco: Modular composable security services for software-defined networks,” in Proc. Network and Distributed System Security Symposium (NDSS), February 2013.
35. S. Shin, V. Yegneswaran, P. Porras, and G. Gu, “AVANT-GUARD: Scalable and Vigilant Switch Flow Management in Software-defined Networks,” in Proc. ACM SIGSAC Conference on Computer and Communications Security (CCS), 2013.
36. A. Tirumala, F. Qin, J. Dugan, J. Ferguson, and K. Gibbs, “Iperf: The tcp/udp bandwidth measurement tool,” http://dast.nlanr.net/Projects.
37. M. Yu, J. Rexford, M. J. Freedman, and J. Wang, “Scalable Flow-based Networking with DIFANE,” in Proc. ACM SIGCOMM, 2010.