Capitalizing on SDN-based SCADA systems: An anti-eavesdropping case-study

Silva, Eduardo Germano da; Wickboldt, Juliano Araújo; Gaspary, Luciano Paschoal; Granville, Lisandro Zambenedetti; Schaeffer-Filho, Alberto

doi:10.1109/inm.2015.7140289

Cited by 28 publications

(21 citation statements)

References 23 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Each of these planes and their interfaces are liable to di erent types of attacks. Much work has focused on security of the controlling unit of the control plane, and the OpenFlow specifying switches for data transmission between the control plane and the data plane [2,4,5,14,19]. Some of these security issues are not SDN speci c and some are.…”

Section: Introductionmentioning

confidence: 99%

“…Eavesdropping attacks are one of the most common and important network attacks because they are relatively easy to implement and their e ects can escalate to more severe attacks such as Denialof-service, side-channel-attacks, and black-holes. There have been relatively few studies on eavesdropping attacks and data leakages in SDN [4,8,14]. One focuses on exploiting the over ow vulnerability of the SDN's ow table to derive meta data about packet forwarding [14].…”

Section: Introductionmentioning

confidence: 99%

“…One focuses on exploiting the over ow vulnerability of the SDN's ow table to derive meta data about packet forwarding [14]. The others address mitigation and detection of leakages during the data transmission in SDN [4,8]. Although eavesdropping attacks do not occur exclusively in SDN, existing solutions in traditional networks are not necessary appropriate for SDN.…”

Section: Introductionmentioning

confidence: 99%

“…Because of high overhead, one approach to address eavesdropping attack is by applying cryptographic network protocols such as SSH. However, such an approach has limitations especially when the network is large and complex [4].…”

Section: Introductionmentioning

confidence: 99%

“…This paper addresses the issue of how to cope with eavesdropping attacks in the SDN data plane by using multiple routing paths (e.g., [4]) to reduce the severity of data leakage. While this existing approach, referred to as a multipath approach, appears to be considerably e ective, our simple analysis uncovers that without a proper strategy of data communication, it can still lead to 100% of data exposure.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Alleviating eavesdropping attacks in software-defined networking data plane

Aseeri¹,

Netjinda

Hewett³

2017

Proceedings of the 12th Annual Conference on Cyber and Information Security Research

View full text Add to dashboard Cite

Software-De ned Networking (SDN) is an emerging paradigm that introduces a concept of programmable networks to enhance the agility in networking management. By separating concerns of the data plane and the control plane, implementing network switching as packet forwarding, and using centralized software to logically control the entire networks, SDN makes it simpler to automate and con gure the network to respond to high-level policy enforcement and dynamically changing network conditions. As SDN becomes more prevalent, its security issues are increasingly critical. Eavesdropping attacks are one of the most common and important network attacks because they are relatively easy to implement and their e ects can escalate to more severe attacks. This paper addresses the issue of how to cope with eavesdropping attacks in the SDN data plane by using multiple routing paths to reduce the severity of data leakage. While this existing approach appears to be considerably e ective, our simple analysis uncovers that without a proper strategy of data communication, it can still lead to 100% of data exposure. The paper describes a remedy along with illustrations both analytically and experimentally. The results show that our proposed remedy can avoid such catastrophe and further reduces the percentage of risk from data exposure approximately by a factor of 1 n where n is the number of alternate disjoint paths.

show abstract

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Alleviating eavesdropping attacks in software-defined networking data plane

Aseeri¹,

Netjinda

Hewett³

2017

Proceedings of the 12th Annual Conference on Cyber and Information Security Research

View full text Add to dashboard Cite

show abstract

WSN Security Mechanisms for CPS

Ali

Balushi

Nadir

et al. 2018

Studies in Computational Intelligence

View full text Add to dashboard Cite

Low delay network attributes randomization to proactively mitigate reconnaissance attacks in industrial control systems

et al. 2023

View full text Add to dashboard Cite

Industrial Control Systems are used in a wide variety of industrial facilities, including critical infrastructures, becoming the main target of multiple security attacks. A malicious and successful attack against these infrastructures could cause serious economic and environmental consequences, including the loss of human lives. Static networks configurations and topologies, which characterize Industrial Control Systems, represent an advantage for attackers, allowing them to scan for vulnerable devices or services before carrying out the attack. Identifying active devices and services is often the first step for many attacks. This paper presents a proactive network reconnaissance defense mechanism based on the temporal randomization of network IP addresses, MAC addresses and port numbers. The obtained information distortion minimizes the knowledge acquired by the attackers, hindering any attack that relies on network addressing. The temporal randomization of network attributes is performed in an adaptive way, minimizing the overhead introduced in the network and avoiding any error and latency in communications. The implementation as well as the tests have been carried out in a laboratory with real industrial equipment, demonstrating the effectiveness of the presented solution.

show abstract

Capitalizing on SDN-based SCADA systems: An anti-eavesdropping case-study

Cited by 28 publications

References 23 publications

Alleviating eavesdropping attacks in software-defined networking data plane

Alleviating eavesdropping attacks in software-defined networking data plane

WSN Security Mechanisms for CPS

Low delay network attributes randomization to proactively mitigate reconnaissance attacks in industrial control systems

Contact Info

Product

Resources

About