Verifying Rule Enforcement in Software Defined Networks With REV

Zhang, Peng; Wu, Hui; Zhang, Dan; Li, Qi

doi:10.1109/tnet.2020.2977006

Cited by 18 publications

(3 citation statements)

References 27 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Unlike the southbound interface, it has no standard northbound interface, only a representational state transfer (REST) standard. The east-west interface is used to realize information interaction between controllers [51].…”

Section: Structure Of Sdnmentioning

confidence: 99%

Survey on the scheme evaluation, opportunities and challenges of software defined‐information centric network

Ai,

Zhang,

Zhang

et al. 2023

IET Communications

View full text Add to dashboard Cite

As a promising architecture of next‐generation network, software defined‐information centric network (SD‐ICN) inherits the advantages of software defined network (SDN) and information‐centric network (ICN) to enable flexible and fast content retrieval, especially in the current era of artificial intelligence. However, the existing researches mainly focus on a single respective in this field, which motivates in comprehensively providing a forward‐looking guidance and development direction for scholars and engineers. To this end, the latest developments of SD‐ICN is presented. First, the widely‐accepted concepts and impacts on traditional networks are introduced. Second, the shortcomings of SDN and ICN over conventional networks are respectively analyzed to illustrate the necessity of SD‐ICN. Third, based on extensive analysis and deep deliberation, a methodical taxonomy for existing combination studies is proposed. They are divided into SDN over ICN, ICN over SDN, and mutual immersive pattern. Fourth, the performances of three integration categories are compared and the limitations of related works are highlighted. Fifth, the maturity index from six development indicators are evaluated. Further, the maturity and practicality of these schemes are generalized. Based on the above studies and comparisons, the lessons learned by SDN and ICN developments are concluded. Finally, future research directions and opportunities are discussed for the readers.

show abstract

Section: Structure Of Sdnmentioning

confidence: 99%

Survey on the scheme evaluation, opportunities and challenges of software defined‐information centric network

Ai,

Zhang,

Zhang

et al. 2023

IET Communications

View full text Add to dashboard Cite

show abstract

“…In [ 80 ], the problem of flow rule installation from controller to switches is addressed. Due to this problem, the packets may deviate from their intended paths, which results in access control violations.…”

Section: Network Testing and Verificationmentioning

confidence: 99%

Software-Defined Networking: Categories, Analysis, and Future Directions

Hussain

Shah

Amin³

et al. 2022

Sensors

View full text Add to dashboard Cite

Software-defined networking (SDN) is an innovative network architecture that splits the control and management planes from the data plane. It helps in simplifying network manageability and programmability, along with several other benefits. Due to the programmability features, SDN is gaining popularity in both academia and industry. However, this emerging paradigm has been facing diverse kinds of challenges during the SDN implementation process and with respect to adoption of existing technologies. This paper evaluates several existing approaches in SDN and compares and analyzes the findings. The paper is organized into seven categories, namely network testing and verification, flow rule installation mechanisms, network security and management issues related to SDN implementation, memory management studies, SDN simulators and emulators, SDN programming languages, and SDN controller platforms. Each category has significance in the implementation of SDN networks. During the implementation process, network testing and verification is very important to avoid packet violations and network inefficiencies. Similarly, consistent flow rule installation, especially in the case of policy change at the controller, needs to be carefully implemented. Effective network security and memory management, at both the network control and data planes, play a vital role in SDN. Furthermore, SDN simulation tools, controller platforms, and programming languages help academia and industry to implement and test their developed network applications. We also compare the existing SDN studies in detail in terms of classification and discuss their benefits and limitations. Finally, future research guidelines are provided, and the paper is concluded.

show abstract

“…REV [45] does not use source routing like SDNSec, but rather uses a compressive MAC that is continuously updated by each switch in a packet's traversal. This is done through the use of a secret key assigned to each switch by the SDN controller.…”

Section: Verification Through Cryptographymentioning

confidence: 99%

A Survey on the Verification of Adversarial Data Planes in Software-Defined Networks

Black

Scott-Hayward

2021

Proceedings of the 2021 ACM International Workshop on Software Defined Networks &Amp; Network Function Virtualization Security

View full text Add to dashboard Cite

As network policies are becoming increasingly nuanced and complex, so too are the mechanisms required to ensure that the network is functioning as intended. In particular, since the dawn of softwaredefined networking and the shift towards high-level descriptions of intended network policy, traditional tools such as ping and traceroute have been insufficient to test that complex data plane configurations have been correctly implemented. As a result, novel data plane verification solutions have been proposed that use formal methods to ensure that network policies are adhered to and that the data plane is free of bugs. While the number of these verification solutions continues to grow, only a few are equipped to verify the data plane when a malicious adversary is present. As research continues to expand the remit of data plane functionality, these solutions may become key to securing an increasingly valuable attack target. In this survey, we review the work that has been dedicated to preventing and detecting attacks on data planes in software-defined networks and discuss some of the unsolved problems in this field that must be addressed in future adversarial verification solutions.

show abstract

Verifying Rule Enforcement in Software Defined Networks With REV

Cited by 18 publications

References 27 publications

Survey on the scheme evaluation, opportunities and challenges of software defined‐information centric network

Survey on the scheme evaluation, opportunities and challenges of software defined‐information centric network

Software-Defined Networking: Categories, Analysis, and Future Directions

A Survey on the Verification of Adversarial Data Planes in Software-Defined Networks

Contact Info

Product

Resources

About