Track: Tracerouting in SDN networks with arbitrary network functions

Zhang, Yuxiang; Cui, Lin; Tso, Fung Po; Zhang, Yuan

doi:10.1109/cloudnet.2017.8071526

Cited by 3 publications

(3 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…18. With 100% detection rate, SDN-RDCD [22] shows an impressive results with 100% accuracy, while Generic [10] has 98%, Track [17] has more than 95.08% and FlowMon [19] has 77% accuracy. From the comparison, we can see that our mechanism is effective in detecting middleboxbypass attacks and compromised switches.…”

Section: B2 Results Evaluationmentioning

confidence: 99%

“…N.Y. Vijayvergiya [16] proposed several algorithms to determine the compromised switch and the collaboration between them. Y. Zhang [17] presents a novel troubleshooting tool that can discover the forwarding path taken by any packets. However, the probe-based method can be disabled if compromised switches can recognize the probe packets and forward them as commanded.…”

Section: A Compromised Switch Attacksmentioning

confidence: 99%

See 1 more Smart Citation

An efficient defense method for compromised switch and middlebox-bypass attacks in service function chaining

Thang

Park

2020

J. Commun. Netw.

View full text Add to dashboard Cite

Service function chaining (SFC) has a special and powerful ability to define an ordered list of required network services as a virtual chain and makes a network more flexible and manageable. However, there are many vulnerabilities to SFC, such as compromised switches and middlebox-bypass attacks, which can damage the operation and security of the network. In this study, we propose a mechanism that not only detects both middlebox-bypass attacks and compromised switch attacks in multiple service function chains scenario but also prevents such attacks and protects the network. The proposed mechanism uses both probe-based and statisticsbased methods to handle the probe packets and collect statistics from middleboxes for detecting any attacks in SFC. After detection, the mechanism changes the network topology to eliminate the compromised switches, while meeting the initial requirements of the service chains. By combining probe-based and statistics-based methods, our proposal overcomes the disadvantages of other proposed solutions and brings about a robust protection to SFC. As the experimental results indicate, the proposed mechanism is an effective and relevant approach for detecting and preventing compromised switches and middlebox-bypass attacks in SFC.

show abstract

Section: B2 Results Evaluationmentioning

confidence: 99%

Section: A Compromised Switch Attacksmentioning

confidence: 99%

An efficient defense method for compromised switch and middlebox-bypass attacks in service function chaining

Thang

Park

2020

J. Commun. Netw.

View full text Add to dashboard Cite

show abstract

“…Such operations must be able to be easily implemented by all federation members. We have previously studied verification and validation of service chaining in SDN environment [14]. Our experience suggests that, for FSC, a more feasible approach is to create a passive probing (black-box) scheme that is less intrusive.…”

Section: B Fsc Validation and Verificationmentioning

confidence: 99%

Federated Service Chaining: Architecture and Challenges

2020

Self Cite

View full text Add to dashboard Cite

Emerging edge computing has seen latency sensitive services moving rapidly from cloud to the edge to take advantage of its close vicinity to end users, while cloud is retained for carrying out latency insensitive and computation intensive tasks. When more edge computing service providers come to the market, the network will become increasingly more fragmented because of their proprietary services and policies deployed in the network. This means the Internet can become more cumbersome and riskier as there will be more tiers and potential vulnerabilities that could be exploited.To tackle this issue, we envisage a federated service chaining paradigm in which operators can share and put service functions in other participants' networks so as to improve resource utilisation, collaboratively mitigate cyber threats and enable service innovations. In this position paper, building on our past experience in enabling federated cloud infrastructure and heterogeneous service chaining, we present a Federated Service Chaining (FSC) architecture followed by discussions of its key components. Several key research challenges are described for the successful realisation of such architecture. We hope this paper can open a discussion in research community and generate enough research interest to significantly advance this field.

show abstract