Setting Malicious Flow Entries Against SDN Operations: Attacks and Countermeasures

Cheng Hsu Lin, Chi-Yu Li, Kuo-Chen Wang

研究成果: Conference contribution

1 引文 斯高帕斯(Scopus)

摘要

Software-defined networking (SDN) apps are developed to support various functions (e.g., traffic engineering, routing, security, etc.) for SDN networks. Their operations rely on the APIs offered by the control plane. They may be compromised or designed to be malicious by third parties. Though there have been many studies against malicious apps, they only restrict the APIs used by them with coarse-grained controls. In this work, we seek to show that some malicious flow entries cannot be detected or prevented by current defenses. They may impede the operations of control-plane services or hinder packets from being forwarded correctly in the data plane. To show their negative impact, we devise two attacks, topology spoofing and forwarding-based DoS, as well as examine their damage and analyze root causes. We then propose a context-Aware, event-based anomaly detection (CEAD) framework to defend against the malicious flow entries. It provides more fine-grained controls over the flow entries set by apps. Different from other studies, it does anomaly detection by examining the context correlation between an event, the app registering it, and the flow entries set by the app for the event. Our evaluation results show that the CEAD can detect all the malicious flow entries in our given cases, and confirm its scalability with negligible overhead at increasing TCP connection attempt rates.

原文English
主出版物標題DSC 2018 - 2018 IEEE Conference on Dependable and Secure Computing
發行者Institute of Electrical and Electronics Engineers Inc.
ISBN(電子)9781538657904
DOIs
出版狀態Published - 23 一月 2019
事件2018 IEEE Conference on Dependable and Secure Computing, DSC 2018 - Kaohsiung, Taiwan
持續時間: 10 十二月 201813 十二月 2018

出版系列

名字DSC 2018 - 2018 IEEE Conference on Dependable and Secure Computing

Conference

Conference2018 IEEE Conference on Dependable and Secure Computing, DSC 2018
國家Taiwan
城市Kaohsiung
期間10/12/1813/12/18

指紋 深入研究「Setting Malicious Flow Entries Against SDN Operations: Attacks and Countermeasures」主題。共同形成了獨特的指紋。

  • 引用此

    Lin, C. H., Li, C-Y., & Wang, K-C. (2019). Setting Malicious Flow Entries Against SDN Operations: Attacks and Countermeasures. 於 DSC 2018 - 2018 IEEE Conference on Dependable and Secure Computing [8625101] (DSC 2018 - 2018 IEEE Conference on Dependable and Secure Computing). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/DESEC.2018.8625101